felhom-agent/REPORT.md

REPORT — v0.170.0 released and vouched: „Reboot guest" from the hub (D65 = A, 2026-10-29 evening, attended)

Plain words first. The operator can now reboot a box's guest from the hub's host page, beside „Restart controller". The agent does it (pct reboot of that guest — never the host). It refuses during a backup, a restore, an update or a controller swap, more than once an hour, and under the restart brake. The result says when the guest and the controller were back. The controller that starts after the reboot tells the household for a day that Felhom support restarted the box.

Commits

Commit	CI (job id)	What
ca15a31	2520, 2524 green	reboot_guest in the closed list (opreboot.go): guards (provisioned, running, not locked, not parked; the heavy-operation gate held until the guest is up; jobBlocker; the controller's busy file, fresh ≤ 90 s, fail closed on any read error but „no file"; one per hour per guest, persisted; the restart brake counts it); rebootInFlight keeps the guest-power watchdog and the supervisor away; the result with both times; GET /guest/operator-reboot for the household line; one new read-only sudo vector (cat of the controller's busy file) + capability controller-busy-read. 19 mutants, each killed (one survivor found and fixed: a duplicate swap check).
6578a8b	2525 green	v0.170.0 CHANGELOG heading; pinned.day0_agent = 0.170.0 (D50), after the vouch.

Release

• release-agent.sh 0.170.0 from a clean clone of ca15a31: sha256 da8d12a05ef607c338b9ba307e7a81b18253a3188721bbd8421ba36658a22404, bundle 03f2ff6442fc3ca600b1f25f26767ce4da466a770a258f3e362cf95f6e76b543, tag v0.170.0, verified by download.
• configs/ changed, so per box a signed agent_config_update AND agent_update (Tester 1, demo-hp, demo-felhom): all six COMPLETED; each box „config bundle INSTALLED", capability probe 76/76 ok, „update committed".
• Vouched by the operator 2026-10-29 18:57:48 CET (the save took 38.3 s — felhom.eu R-1346).

Live proofs (Tester 1, through the hub endpoint the button posts, CC's cc-hosts token; controller 0.349.0-rc.1)

• Refused during an off-site run: offsite_backup_now pressed 18:03:36 UTC → the controller's busy file 11 s later → „Reboot guest" → „refused: the controller is busy — a backup, a restore or an off-site run is running"; the guest kept its 13 h uptime.
• The reboot: pressed 18:05:08 UTC → „done — rebooted; the guest was up after 67 s, the controller answered after 79 s", on the hub 88 s after the press. Box walk after: 10 containers, none unhealthy, 0 errors, login and file manager 200. The household dashboard: „A Felhom ügyfélszolgálata 19:05-kor újraindította a dobozt."
• A second press inside the hour: „refused: guest 9201 was rebooted from the hub at 18:05 UTC — at most one reboot per hour (next from 19:05 UTC)".
• The release-build reboot: see felhom.eu REPORT-release-2026-10-29c.md.

Evidence: felhom.eu documentation/audits/release-2026-10-29c/.