From 6cd1fc945fa43463a349e9b0b9f80aebcb708e84 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Sat, 13 Jun 2026 19:28:13 +0200 Subject: [PATCH] =?UTF-8?q?docs(bughunt):=20reconciliation=20banner=20?= =?UTF-8?q?=E2=80=94=20H10=20fixed,=20pointer=20to=20authoritative=20recon?= =?UTF-8?q?cile=20record?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.8 (1M context) --- BUGHUNT.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/BUGHUNT.md b/BUGHUNT.md index a07d30a..7b7098e 100644 --- a/BUGHUNT.md +++ b/BUGHUNT.md @@ -1,5 +1,19 @@ # Bug Hunt Report — Comprehensive Controller Audit +> **RECONCILED 2026-06-13 (controller now v0.59.0).** This report is from v0.30.3 and predates the +> Proxmox re-platform / slice-8C de-privileging — much of the audited code has since been rewritten, +> moved to `felhom-agent`, or deleted. A full reconciliation against current code lives at +> **`felhom.eu/documentation/audits/bughunt-reconcile-2026-06-13.md`** (authoritative). Summary: +> - **H1–H4, H12** (concurrency Highs): already FIXED (confirmed in the deep-sweep audit). +> - **H10** (plaintext secret on encrypt failure): the old `// H10 fix` only logged a WARN and still +> persisted plaintext — now **FIXED fail-closed** in v0.59.0 (`5a80739`). +> - **C2, H5, H6, H7, H8**: verified FIXED. **C3** (SSD-only DB DR loss): **MOOT-by-architecture** +> (DR is now whole-LXC PBS). **C1, H9, H11** + several file-gone Lows: **MOOT** (gone, not migrated-with-bug). +> - Remaining Mediums/Lows: mostly CODE-GONE; a small `[backlog]` set (M4/M5/M6, M18/M19, M25) survived +> but is **not yet deep-verified** — see the reconciliation for the list. +> +> The original v0.30.3 content is preserved unchanged below for history. + **Date:** 2026-02-25 **Scope:** Full controller codebase (`controller/` — all ~80 Go files, all packages) **Method:** Systematic code review of every file + live testing on demo node (192.168.0.162)