# REPORT — controller v0.329.0 (night 2026-10-17 → 18)

**In plain words.** Each app can now reach only its own data folder on the drive. Homepage no longer gets control of
Docker, so no app has a special right any more. When the host says „no" to retiring a drive, nothing changes on the
dashboard and the household reads why. A virtual disk that cannot be formatted gets a plain sentence instead of an
English error. Test builds no longer move the `:latest` tag. The full night report: felhom.eu
`REPORT-night-2026-10-18.md`.

| Row | What changed | Pinned by | Red-proof |
|---|---|---|---|
| R-1142 | `${HDD_PATH}` root = `appdata/<own folder>`; compiled-in map `paperless-ngx → paperless` | `TestAdmit_AnotherAppsAppdataFolderIsRefused`, `TestAllowList_AppdataFolderMustBeOneName` | root back at `appdata/` → 6 cases admitted |
| R-981 | allow-list EMPTY; homepage template has no socket (catalog) | `TestAllowList_HasNoExceptionAndRefusesHomepagesSocket` | old one-entry list → „1 entries" |
| R-1063 | agent asked first; 403/409 → plain 409, nothing changed | `TestFinalizeDecommission_AgentRefusalChangesNothing`, `TestDecommission_PolicyRefusalsAreTyped` | old order → drive marked, default moved |
| R-1069 | agent's no-durable-id refusal → `disk.err.no_durable_id` | `TestR1069_NoDurableIDIsAPlainRefusal`, `TestFormatDisk_NoDurableIDIsTyped` | branch removed → raw text reaches the household |
| R-1143 | `:latest` only for x.y.z | `scripts/test_build_push_once.sh` (16 cases) | every build adds `:latest` → 4 cases fail |

Red-proof records: felhom.eu `documentation/audits/night-2026-10-18/P1/redproof-*.txt`. Green gate rc=0;
`controller_gates.py --fast` rc=0 (golden-notice advisory). i18n: three keys born as keys; every page fixture
byte-identical. MinAgent 0.158.1. Release path and box walk: the night report.