REPORT: v0.339.0 released (R-1199 reopened, R-1216)

REPORT.md

@@ -1,23 +1,22 @@
-# REPORT — controller v0.338.0 released (2026-10-22 morning, operator yes)
+# REPORT — controller v0.339.0 released (2026-10-22 day brief)
 
-**What:** D22 — every restore puts the household's data back exactly on failure and after a power cut (R-1177, R-1195,
-R-1178, R-1180); the rehearsal's first-hour words (W9–W14, W21, W22, W24, W25, W28, W29); the install page's host-swap
-sentence; R-1199 (a box with no saved notification choice tells the hub the list its page shows — decided by CC the night
-before, operator may reverse). Proven the night of 2026-10-21 on 9202 (felhom.eu `REPORT-night-2026-10-21.md` §4).
-**MinAgent 0.158.1** (unchanged; the swap sentence stays silent with an agent older than 0.162.0). No golden (`09` §3
-decision 250).
+**What:** R-1199 reopened — a rebuilt box never overwrites the household's saved mail list; R-1216 (D28 = A) — the
+install page's swap sentence only when host swap is really short. Design: `08-alarm-ladder.md` (the 2026-10-22
+`[DESIGN]` paragraph), `03-host-agent.md` (guest swap), `05` (`customer_notifications`). **MinAgent 0.158.1**; needs hub
+≥ 0.165.0 (deployed first, operator yes).
 
-- **Built** `./build.sh 0.338.0 --push` from `7900a32` (clean, pushed): image digest
-  `sha256:e8a529f395bfe8c0e7b87d5d98929a6f8e9834aa13c0ab77bd214ee9e7e53433`.
-- **The three test boxes through the normal update path:** a per-customer floor 0.338.0 (MinAgent 0.158.1) for Tester 1,
-  demo-hp and demo-felhom → each box swapped its controller through its agent in about 10 s (`controller-swap: new
-  controller healthy`, 07:54–07:55 UTC); the hub logged `controller_updated 0.337.0 → 0.338.0` for all three.
-- **The box walk's checks green on all three:** `https_only_check.py` — 28 public names, every one 301 to https, the
-  negative control convicted; 10 / 24 / 9 containers, 0 unhealthy, 0 restarting; 0 `level=ERROR` lines in the new
-  controller's log. Evidence felhom.eu `documentation/audits/morning-2026-10-22/release/`.
-- **Global floor** 0.338.0, MinAgent 0.158.1, with CC's hub token: `303 → /configuration?flash=floor_set`; read back
-  from the hub DB with its WAL (`min_controller_version = 0.338.0`, declared `0.338.0=0.158.1`, 08:05:09 UTC). The three
-  per-customer floors cleared afterwards (303 each).
-- **Found:** the install page's swap sentence compares the host's swap with the guest's RAM; on a guest larger than the
-  installer's 8 GB host swap (demo-felhom 12 GB, demo-hp 25 GB) it will show when memory is tight although the measured
-  burst used 2.7 GB. Same root as the agent/hub check — felhom.eu R-1216, an operator choice.
+- **Found:** v0.338.0's start-up default push replaced demo-felhom's own 13-event list on the hub with the 17 defaults
+  (07:54:55 UTC) and would repeat at every start. Now a box with no list of its own reads the hub's: adopts a
+  household's (nothing pushed), pushes its default once only when no household saved one, sends nothing when the hub
+  cannot be read. Every push names its `source`. Red-proved against v0.338.0's rule.
+- **Fixed without a row:** an empty saved list read back as the 17 defaults (`omitempty`; Tester 1 and demo-hp hold
+  that file shape) — now `[]` persists and a saved list with no events reads as empty; the add-only seeds are marked
+  done on a fresh settings file (they re-added a just-switched-off mail at a new box's second start). Red-proved.
+- **R-1216:** `hostSwapRuleShort` = no host swap, or < 90 % of min(guest swap, 8192 MB); the hub's case table copied
+  byte-identical (`testdata/host_swap_rule_cases.json`, felhom.eu `host_swap_rule_gate.py`). Red-proved.
+- **Release:** rc.1 on 9202 (`sha256:7d4c8852…`; no hub link there — start-up and pages only: healthy, 0 errors,
+  `/login` 200). `0.339.0` from `fc5a20f` (CI 2209 green): `sha256:fee71aafceb4a7d5f24ae4a6a273a8d51eb26e0550fe9d12d4d86955f6a343a8`.
+  Per-customer floors → Tester 1, demo-hp, demo-felhom on 0.339.0 within 40 s; 10/24/9 containers, 0 unhealthy, 0
+  restarting, 0 errors; https-only every name 301. demo-felhom logged „adopted the household's saved list from the hub
+  (13 events …) — nothing pushed"; its box file and the hub row now agree. Global floor 0.339.0 / 0.158.1 (read back
+  with the WAL, 11:14:21 UTC); per-customer floors cleared. Evidence felhom.eu `documentation/audits/day-2026-10-22/`.