felhom-controller/REPORT.md

REPORT — controller v0.334.0 (2026-10-19, third day brief)

Shipped and the floor for every box (14:31 UTC, MinAgent 0.158.1) after Tester 1, demo-hp and demo-felhom took it by the normal update path (per-box floors 14:16 UTC) and the box walk was green on all three. Image 0.334.0 digest sha256:deeabe59d932cd60f8939a37bccf94f145555101fc7be64b6c5cc15f3557031a, built from 546eef3; rc.1 on demo-hp only.

• R-1159 (operator decision D19 „box key first, then lock"): the live config refresh pulls GET /api/v1/box-config/{id} with the box's own hub key (report.PullConfigPreferKey, wired in main.go's ConfigRefresher); the retrieval passphrase only against a hub without the route or before the box has a key; a refused key is never retried with the passphrase. Hub 0.161.0 then refuses passphrase keys for a box on this version that has reported.
• Tests: TestR1159_RefreshUsesTheBoxKey (red-proved: the old pull made 0 key pulls), TestR1159_MainWiresTheKeyFirstRefresh.
• Live on demo-hp: the box's own key → 200 with its config, a wrong key → 401; after its first 0.334.0 report the passphrase → 409 with no key (felhom.eu audits/day-2026-10-19c/P4/).
• Box walk (P5/): 0 unhealthy, 0 allow-list refusals, catalog in sync; https-only 28 OK; „Fájlok ↗" unchanged.