admin 6b4877d556 R-890: the test box (scratch 9202) may seed vaultwarden through its admin invite, inside the box ...

`09` §3 decision 149. box_admin_seed_allowed(): not the bench, FELHOM_BOX_ADMIN_SEED=1,
demo-hp/9202 only, an app this run installed, the box on the drill catalog. The token is read
inside the box and handed to curl on stdin; only HTTP codes come back.
Tests: BoxAdminSeedGuard (red-proved).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-06 13:39:48 +02:00

..

copy_freeze

R-747 + R-774: one sentence each on mealie's and Karakeep's page (hu + en)

2026-10-06 11:27:35 +02:00

box_walk.py

R-890: the test box (scratch 9202) may seed vaultwarden through its admin invite, inside the box

2026-10-06 13:39:48 +02:00

catalog_gates.py

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

check-catalog-since.py

catalog-since gate: an image: move must bump the app's catalog_since (R-452) — hook-enforced, shallow CI skips out loud

2026-09-13 19:42:13 +02:00

check-copy-i18n.py

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

check-currency.py

R-731: the shape-switch control is standing — scripts/check-currency.py (stdlib) with fixture tests

2026-10-05 21:49:05 +02:00

check-data-key.py

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

check-engine-major.py

harness v4 converts a PostgreSQL major; the engine-major gate passes one proven, marked app (09 decision 35)

2026-09-25 13:04:01 +02:00

check-family-gate.py

Grimmory and MeTube published behind the family gate (controller >= 0.287.0, decisions 63/64), with complete records

2026-10-02 09:36:49 +02:00

check-image-pins.py

R-426: image-pins gate gets a decoy suite (and three holes closed)

2026-10-06 01:42:38 +02:00

check-image-resolvable.py

R-426: image-resolvable decoys, end to end through a PATH-stub docker

2026-10-06 01:42:38 +02:00

check-mem-limit-sum.py

R-758: mem_limit is the sum of the compose limits — eight figures corrected, gate mem-limit-sum (--fast, stdlib) with decoys

2026-10-05 21:49:05 +02:00

check-onboarding.py

New-app checklist: reviewed, a gate (onboarding), the wger pilot record, the existing apps' gap page

2026-10-01 15:20:52 +02:00

check-probe-matches-compose.py

check-probe-matches-compose: accept --all as a no-op (catalog_gates --all read INCONCLUSIVE on a clean tree)

2026-10-05 21:49:04 +02:00

check-probe-measured.py

Sign-up locked twice (after_setup + case-insensitive blocks); wanderer closable (decision 48); ghost/HA/gramps probes; probe-measured gate; decoy fixture fix

2026-09-29 17:00:18 +02:00

check-test-record-move.py

Same-tag security fixes as tested steps (09 decision 52, R-740): re-test entries, their gates, the monthly command

2026-09-30 23:06:09 +02:00

check-test-record.py

Same-tag security fixes as tested steps (09 decision 52, R-740): re-test entries, their gates, the monthly command

2026-09-30 23:06:09 +02:00

check-volume-persistence.py

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

generate-customer.sh

catalog: repoint HDD_PATH defaults/placeholders to /mnt/felhom-drives/<name>

2026-06-15 16:48:52 +02:00

image_digest.py

image_digest.resolve honours a @digest: asks the registry for THAT manifest (R-746)

2026-10-01 07:54:39 +02:00

ladder_backfill.py

test record: an image move must carry its proof (09 decision 13, part 4)

2026-09-23 20:52:32 +02:00

ladder.py

Same-tag security fixes as tested steps (09 decision 52, R-740): re-test entries, their gates, the monthly command

2026-09-30 23:06:09 +02:00

onboarding_gaps.py

Persistence gate: empty declared volume = UNDETERMINED (R-788), the app's own fixture seed as the exercise; re-sweep verdicts (CLEAN 40 / UNDETERMINED 18 / BROKEN 0); papra 256M -> 768M (R-803); records 2.1, EXISTING-APPS-GAPS regenerated

2026-10-02 16:54:29 +02:00

retest_box.py

Same-tag security fixes as tested steps (09 decision 52, R-740): re-test entries, their gates, the monthly command

2026-09-30 23:06:09 +02:00

retest-floating.py

retest-floating: check what the bench brings (docker, python3), not what the sync puts there (R-749)

2026-10-01 07:17:49 +02:00

steps_backfill.py

steps/ per ladder step: gate rule 4, writer, backfill (8); R-653, R-656; decoy suite reads live pins (R-663)

2026-09-24 07:57:51 +02:00

steps_meta_backfill.py

steps/<key>.felhom.yml: gate rule 4b, writer, backfill (8) (R-664)

2026-09-24 11:45:34 +02:00

test_catalog_gates.py

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

test_check_currency.py

R-731: the shape-switch control is standing — scripts/check-currency.py (stdlib) with fixture tests

2026-10-05 21:49:05 +02:00

test_check_image_resolvable.py

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

test_check_volume_persistence.py

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

test_deploy_field_descriptions.py

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

test_gate_decoys.py

R-426: volume-persistence decoys - the injected-prober suite run from here, and a dead runtime end to end

2026-10-06 01:42:38 +02:00

test_healthcheck_explained.py

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

test_image_digest.py

image_digest.resolve honours a @digest: asks the registry for THAT manifest (R-746)

2026-10-01 07:54:39 +02:00

test_ladder_writer.py

Same-tag security fixes as tested steps (09 decision 52, R-740): re-test entries, their gates, the monthly command

2026-09-30 23:06:09 +02:00

test_pg_conversion.py

harness v4 converts a PostgreSQL major; the engine-major gate passes one proven, marked app (09 decision 35)

2026-09-25 13:04:01 +02:00

test_upgrade_bench.py

R-890: the test box (scratch 9202) may seed vaultwarden through its admin invite, inside the box

2026-10-06 13:39:48 +02:00

test_upgrade_fixtures_metube.py

R-799 metube add body, R-761 logo name, R-391 no observations section (burn-down)

2026-10-05 16:55:06 +02:00

upgrade_boxport.py

R-624: the bench (only) seeds vaultwarden through its admin invite; run secrets redacted and shredded

2026-10-06 11:27:35 +02:00

upgrade_fixtures_box28.py

Fixtures: sparkyfitness, rallly and outline seed through their own front door (R-462, R-624)

2026-09-30 12:53:35 +02:00

upgrade_fixtures_box.py

R-890: the test box (scratch 9202) may seed vaultwarden through its admin invite, inside the box

2026-10-06 13:39:48 +02:00

upgrade_fixtures.py

upgrade-test: watch memory after the readback (harness v2, R-635/R-462)

2026-09-23 08:54:53 +02:00

upgrade-test.py

R-624: the bench (only) seeds vaultwarden through its admin invite; run secrets redacted and shredded

2026-10-06 11:27:35 +02:00