Files
app-catalog-felhom.eu/REPORT.md
T
2026-10-01 10:21:00 +02:00

15 lines
1.3 KiB
Markdown

# REPORT — the first full monthly re-test (decision 55); mealie's lockout; two harness fixes (2026-10-01)
Full session report: `felhom.eu/REPORT-rulings-2026-10-01.md`.
- **Re-test run** (`09` §3 decisions 54, 55): `retest-floating.py --push` over every app with a proven ladder. nextcloud
`34.0.4-apache` `3b59dfb` and linuxserver sonarr `4.0.20` `1a37032` — both DONE on both venues (bench 9401 swap 0 with the
10-minute watch; 9202 through the guarded Update). ~17 min per app. Evidence `felhom.eu/documentation/audits/retest-2026-10/`.
- **R-749** `9e53205`: the re-test refused a fresh bench (checked `/opt/upg` before copying it). Fixed; the re-run started.
- **R-746** `804884a`: `image_digest.resolve` asks for a `@digest` by digest; `scripts/test_image_digest.py`; red: the old
resolver fails 3 of 4; live: an invented digest → HTTP 404 (was the tag's digest).
- **R-744** `9fc7052`: outline's fixture reads `__Host-csrfToken` (Outline 1.10 on HTTPS); proven on 9202 at 1.10.1.
- **R-747** `a4597cd` (decision 57, decided by CC unattended — operator may reverse): mealie `SECURITY_USER_LOCKOUT_TIME=1`;
9202: locked 120 min after 5 wrong logins, then the right password works.
- Gates: `catalog_gates.py --fast` OK before each push; every push through the pre-push gates (no `--no-verify`).