# REPORT — 2026-11-02 night: five small fixes and the Traefik pin, commit only (no release)

**Plain words.** Nothing was released. The next controller release carries: Traefik v3.7.17, which closes a real hole on every box; a restored app is watched again; a failed put-back at start-up tells the operator; three false or noisy start-up lines go.

| Commit | CI (job id) | What |
|---|---|---|
| `c4b6844` | 2551 green | Traefik v3.7.17 (GHSA-xv5x-242w-7hf7); R-1347, R-1348, R-1339, R-1351, R-1323 |
| `3764445` | 2560 green | R-1348: the mail names a restore, not an off-site run (seen on the live proof) |

**Red-proofs.** Each `TestR13xx_*` was seen failing before its code existed, and each rule again by a mutant (10 of 10 red: `felhom.eu documentation/audits/security-2026-11-02/part3/`).

**Live, scratch 9202, a local test image of `c4b6844`** (`felhom.eu audits/security-2026-11-02/part3/README.md`): R-1347 and R-1348 proven through staged real states; R-1339 nine false lines → none; Traefik v3.7.17 ran through three boots. **R-1351: no Conflict on six boots of either image, so the live boots do not tell them apart; the proof is the test.** R-1323: not seen live.

**R-1339, the row's own fix was wrong.** „A sub-folder of a mounted drive is not skipped" would write a `userdata/` inside the app's folder and recreate the file manager. The behaviour stays; only the false line goes.

**Next:** on the operator's word, the release: controller v0.350.0, MinAgent unchanged (0.158.1).