admin ecb8552ee9 vaultwarden 1.36.0 -> 1.37.4: its first ladder step, proven on the bench and on 9202 (R-890); instruction files kept true (decision 150) ...

Written by upgrade-test.py --write-ladder from both verdicts. Bench 9401: harness v5,
anon peak 16.3 %, seed read back. Box 9202: guarded Update done in 12.3 s, seed read back,
seeded through the admin invite inside the box (decision 149).
CLAUDE.md: stale gate counts, the CI/R-161 and catalog_since-gate sentences, the checklist count,
steps/ in the layout, engine service counts, decoy gate path. Factual only.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-06 13:50:39 +02:00

..

actualbudget

…

adventurelog

R-758: mem_limit is the sum of the compose limits — eight figures corrected, gate mem-limit-sum (--fast, stdlib) with decoys

2026-10-05 21:49:05 +02:00

audiobookshelf

audiobookshelf: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:52 +02:00

bentopdf

…

bookstack

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

calcom

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

calibre-web

calibre-web: the admin login name is generated at install (09 decision 61, R-752)

2026-10-01 13:19:02 +02:00

claper

R-758: mem_limit is the sum of the compose limits — eight figures corrected, gate mem-limit-sum (--fast, stdlib) with decoys

2026-10-05 21:49:05 +02:00

code-server

code-server: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:12 +02:00

crafty-controller

crafty-controller: 4.10.7 -> 4.11.0, its first ladder step, both venues proven (R-462)

2026-09-30 18:41:02 +02:00

dawarich

Dawarich: the third new app through the checklist — template, record, fixture, first ladder step 1.15.2 -> 1.15.3

2026-10-01 18:37:05 +02:00

docmost

docmost: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:51 +02:00

emby

emby: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:58 +02:00

ghost

ghost: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:53 +02:00

gitea

…

glance

…

gokapi

gokapi: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:11 +02:00

grafana

…

gramps-web

…

grimmory

R-798: grimmory sets the API-docs switch v3.5.0 reads (API_DOCS_ENABLED=false) instead of the dead SWAGGER_ENABLED

2026-10-05 21:49:05 +02:00

home-assistant

home-assistant: 2026.9.3 -> 2026.9.4, within-major step, both venues proven (R-462)

2026-09-30 18:05:31 +02:00

homebox

…

homepage

…

immich

immich: step v3.0.3 -> v3.2.2 (0b8272068aab36bf) re-proven at 768M; its definition rewritten by the writer (R-732)

2026-09-30 19:34:08 +02:00

jellyfin

…

karakeep

R-747 + R-774: one sentence each on mealie's and Karakeep's page (hu + en)

2026-10-06 11:27:35 +02:00

kimai

R-776/R-613 proven on 9202 (with controls): comments point at the evidence; CHANGELOG

2026-10-06 08:46:42 +02:00

komga

komga: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:06 +02:00

mealie

R-747 + R-774: one sentence each on mealie's and Karakeep's page (hu + en)

2026-10-06 11:27:35 +02:00

metube

Grimmory and MeTube published behind the family gate (controller >= 0.287.0, decisions 63/64), with complete records

2026-10-02 09:36:49 +02:00

n8n

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

navidrome

…

nextcloud

R-776/R-613 proven on 9202 (with controls): comments point at the evidence; CHANGELOG

2026-10-06 08:46:42 +02:00

onlyoffice

…

opengist

opengist: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:09 +02:00

outline

R-758: mem_limit is the sum of the compose limits — eight figures corrected, gate mem-limit-sum (--fast, stdlib) with decoys

2026-10-05 21:49:05 +02:00

paperless-ngx

R-799 metube add body, R-761 logo name, R-391 no observations section (burn-down)

2026-10-05 16:55:06 +02:00

papra

burn-down round 2: R-593 papra field copy, R-760 vikunja healthcheck reason, R-594 English allow-list, R-605 refusal exit 3, R-781 onboarding decoy clone, R-806 scheme; stale runner test fixed

2026-10-05 19:15:02 +02:00

plant-it

plant-it: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:04 +02:00

plex

…

privatebin

…

radarr

…

radicale

Radicale: the first new app through the checklist — template, record, fixture, first ladder step 3.8.0 -> 3.8.1

2026-10-01 16:58:56 +02:00

rallly

rallly: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:05 +02:00

recipe-importer

…

romm

romm: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:57 +02:00

seerr

seerr: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:13 +02:00

sonarr

sonarr: re-test of the same tag at a new digest (decision 52, R-740)

2026-10-01 07:53:44 +02:00

sparkyfitness

sparkyfitness: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:02:56 +02:00

tandoor

…

termix

…

uptime-kuma

uptime-kuma: remove the client-written X-Forwarded-For chain on its router (R-753)

2026-10-01 21:03:15 +02:00

vaultwarden

vaultwarden 1.36.0 -> 1.37.4: its first ladder step, proven on the bench and on 9202 (R-890); instruction files kept true (decision 150)

2026-10-06 13:50:39 +02:00

vikunja

R-776/R-613 proven on 9202 (with controls): comments point at the evidence; CHANGELOG

2026-10-06 08:46:42 +02:00

wanderer

R-127 (a): four data-encrypting keys flagged data_key (n8n, calcom, wanderer, bookstack APP_KEY) + gate data-key with decoys

2026-10-05 21:49:05 +02:00

wger

R-764: wger sends its mail through the box's relay (smtp_mapping, plaintext :2526, ENABLE_EMAIL gate; hidden app, 9202 boots owed)

2026-10-05 21:49:04 +02:00

wishlist

…

zipline

R-776/R-613 proven on 9202 (with controls): comments point at the evidence; CHANGELOG

2026-10-06 08:46:42 +02:00