Files
felhom-controller/REPORT.md
T
admin 2fe634141f
gates / gates (push) Successful in 45s
v0.329.0: each app reaches only its own appdata folder; empty allow-list; drive retirement asks the agent first; plain no-durable-id refusal; :latest only for a release
R-1142: the HDD_PATH root is appdata/<own folder>, with a compiled-in folder map (paperless-ngx ->
paperless). R-981: the allow-list is empty (homepage's socket served no Felhom feature). R-1063:
finalizeDecommissionWith asks the agent before it marks the drive or moves the default; the 403/409
come back typed and reach the household as a plain 409. R-1069: the agent's no-durable-id format
refusal is ErrNoDurableID and a plain sentence. R-1143: build.sh carries :latest only for x.y.z.
Each pinned by a red-proofed test. MinAgent 0.158.1.
2026-10-17 23:11:56 +02:00

1.8 KiB

REPORT — controller v0.329.0 (night 2026-10-17 → 18)

In plain words. Each app can now reach only its own data folder on the drive. Homepage no longer gets control of Docker, so no app has a special right any more. When the host says „no" to retiring a drive, nothing changes on the dashboard and the household reads why. A virtual disk that cannot be formatted gets a plain sentence instead of an English error. Test builds no longer move the :latest tag. The full night report: felhom.eu REPORT-night-2026-10-18.md.

Row What changed Pinned by Red-proof
R-1142 ${HDD_PATH} root = appdata/<own folder>; compiled-in map paperless-ngx → paperless TestAdmit_AnotherAppsAppdataFolderIsRefused, TestAllowList_AppdataFolderMustBeOneName root back at appdata/ → 6 cases admitted
R-981 allow-list EMPTY; homepage template has no socket (catalog) TestAllowList_HasNoExceptionAndRefusesHomepagesSocket old one-entry list → „1 entries"
R-1063 agent asked first; 403/409 → plain 409, nothing changed TestFinalizeDecommission_AgentRefusalChangesNothing, TestDecommission_PolicyRefusalsAreTyped old order → drive marked, default moved
R-1069 agent's no-durable-id refusal → disk.err.no_durable_id TestR1069_NoDurableIDIsAPlainRefusal, TestFormatDisk_NoDurableIDIsTyped branch removed → raw text reaches the household
R-1143 :latest only for x.y.z scripts/test_build_push_once.sh (16 cases) every build adds :latest → 4 cases fail

Red-proof records: felhom.eu documentation/audits/night-2026-10-18/P1/redproof-*.txt. Green gate rc=0; controller_gates.py --fast rc=0 (golden-notice advisory). i18n: three keys born as keys; every page fixture byte-identical. MinAgent 0.158.1. Release path and box walk: the night report.