admin/felhom-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(bughunt): reconciliation banner — H10 fixed, pointer to authoritative reconcile record

Browse Source 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
authentik Default Admin
2026-06-13 19:28:13 +02:00
parent 6b2c71f45c
commit 6cd1fc945f
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
BUGHUNT.md
+14
View File
@@ -1,5 +1,19 @@
# Bug Hunt Report — Comprehensive Controller Audit # Bug Hunt Report — Comprehensive Controller Audit
> **RECONCILED 2026-06-13 (controller now v0.59.0).** This report is from v0.30.3 and predates the
> Proxmox re-platform / slice-8C de-privileging — much of the audited code has since been rewritten,
> moved to `felhom-agent`, or deleted. A full reconciliation against current code lives at
> **`felhom.eu/documentation/audits/bughunt-reconcile-2026-06-13.md`** (authoritative). Summary:
> - **H1–H4, H12** (concurrency Highs): already FIXED (confirmed in the deep-sweep audit).
> - **H10** (plaintext secret on encrypt failure): the old `// H10 fix` only logged a WARN and still
> persisted plaintext — now **FIXED fail-closed** in v0.59.0 (`5a80739`).
> - **C2, H5, H6, H7, H8**: verified FIXED. **C3** (SSD-only DB DR loss): **MOOT-by-architecture**
> (DR is now whole-LXC PBS). **C1, H9, H11** + several file-gone Lows: **MOOT** (gone, not migrated-with-bug).
> - Remaining Mediums/Lows: mostly CODE-GONE; a small `[backlog]` set (M4/M5/M6, M18/M19, M25) survived
> but is **not yet deep-verified** — see the reconciliation for the list.
>
> The original v0.30.3 content is preserved unchanged below for history.
**Date:** 2026-02-25 **Date:** 2026-02-25
**Scope:** Full controller codebase (`controller/` — all ~80 Go files, all packages) **Scope:** Full controller codebase (`controller/` — all ~80 Go files, all packages)
**Method:** Systematic code review of every file + live testing on demo node (192.168.0.162) **Method:** Systematic code review of every file + live testing on demo node (192.168.0.162)