2 Commits

Author	SHA1	Message	Date
admin	466f42708e	controller: .fab volume legs stream via docker cp (fixes the containerized path-strand data loss, IA finding 1 HIGH) — zero shared paths both deployment shapes; export fails LOUD on any missing/empty claimed tar (no hollow bundles); import validates BEFORE it destroys (hollow bundle → app untouched); docker_run_volume_path_gate.py extinguishes the class (Tier-1/2 mounts documented host-visible) ... Claude-Session: https://claude.ai/code/session_01GzammAMzsJTgpQHqxwM2bC	2026-07-13 10:42:02 +02:00
admin	753cd83456	controller: .fab browser download — the existing export pipeline staged under the data dir + a guarded streaming exit (estimate-first, io.Copy, post-stream cleanup, 1h TTL sweep); portability framing (decision 3); traversal guard red-proven, export→import round-trip + corrupt-bundle refusal unit-proven ... Claude-Session: https://claude.ai/code/session_01GzammAMzsJTgpQHqxwM2bC	2026-07-13 09:47:10 +02:00