# REPORT — v0.311.0: after a power cut, an app repairs the files the cut left empty (R-1007, 2026-10-14)

Baseline `acbbf4b` (0.310.0). Code `8d862e4`, security fix `3b85a0c` (before the build). Image
`felhom-controller:0.311.0` (sha256 `2a5550da…`). Design: felhom.eu `09` §3 decision 236; evidence
felhom.eu `documentation/audits/immich-repair-2026-10-14/`.

- New template block `after_unclean_boot`; `internal/aftercrash` runs it once per start after an UNCLEAN host boot
  (crashboot's verdict, after the 15-min crash grace). The household's lost-files note on the app page; the operator
  event `app_repaired_after_crash` (counts only). MinAgent 0.155.0 unchanged.
- Tests: 15 guards red-proofed (each removed in turn convicted its test). Full suite and every controller gate green.
- **Security review of `8d862e4`:** compose's shared runner logs a failed command's stdout and puts stderr in the error,
  which reached the event's `problem`. Fixed: a quiet runner, exit code only (`TestAUB_AFailingCommandLeaksNoOutput`).
- **Live (demo-hp 9201, a real power cut mid-upload):** 41 of 41 broken photos repaired in 10 s; 120 controls untouched.
- Open: R-1020 — the returned duration is 0 (the record's is right). Delivery to the N100 and Tester 1 waits on golden
  0.311.0 + the global floor.