admin 36c4aa4e69 v0.328.0 (unreleased): security review round 2 — nearest-ancestor symlink resolve (fail closed), any extends refused, the entry binds a literal image and its exact healthcheck, no variable in a bind's options ...

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-17 16:46:32 +02:00

.claude/rules

The decoy suite is a gate of the full run (R-1116); no code change

2026-10-17 11:01:40 +02:00

.gitea/workflows

CI workflow: a manual proof that the failure mail can be sent (R-1129)

2026-10-17 12:49:43 +02:00

.githooks

pre-push: refuse a push from a clone outside the felhom workspace (R-204 rider)

2026-08-05 10:47:58 +02:00

.vscode

added csss ignore

2026-02-16 13:28:03 +01:00

audits

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

controller

v0.328.0 (unreleased): security review round 2 — nearest-ancestor symlink resolve (fail closed), any extends refused, the entry binds a literal image and its exact healthcheck, no variable in a bind's options

2026-10-17 16:46:32 +02:00

docs

docs: migrate workflow to DooPlex-local execution

2026-07-19 12:15:52 +02:00

monitoring

v0.6.0: healthcheck + hub reporting implementation

2026-02-16 13:19:08 +01:00

scripts

slice 8C C.3: de-privilege the controller container (legacy docker-setup template) + CHANGELOG (v0.37.0)

2026-06-10 13:59:26 +02:00

.gitignore

gitignore Python bytecode - the new gate test writes controller/scripts/__pycache__

2026-09-01 12:01:54 +02:00

BUGHUNT.md

docs(bughunt): reconciliation banner — H10 fixed, pointer to authoritative reconcile record

2026-06-13 19:28:13 +02:00

CHANGELOG.md

v0.328.0 (unreleased): security review round 2 — nearest-ancestor symlink resolve (fail closed), any extends refused, the entry binds a literal image and its exact healthcheck, no variable in a bind's options

2026-10-17 16:46:32 +02:00

CLAUDE.md

Instruction files kept true (09 §3 decision 150): stale gate lists, paths and facts corrected; no code change

2026-10-06 13:44:01 +02:00

CONTEXT.md

v0.327.0: CHANGELOG, CONTEXT, REPORT (and the R-1129 correction)

2026-10-17 13:42:42 +02:00

DIAGNOSTIC.md

document

2026-06-11 14:02:47 +02:00

REPORT-app-page-2026-10-15.md

REPORT-app-page-2026-10-15.md: the app-page arc, in a file a second session cannot overwrite

2026-10-15 21:48:19 +02:00

REPORT.md

v0.327.0: CHANGELOG, CONTEXT, REPORT (and the R-1129 correction)

2026-10-17 13:42:42 +02:00

REUSE.md

v0.328.0: the catalog allow-list — the box refuses container rights a template asks for and the box does not give (R-971, D2 = A)

2026-10-17 16:34:12 +02:00

RUNBOOK-e2e-live-drive.md

docs(runbook): e2e live-drive commands are DooPlex-local (plain ssh felhom-pve)

2026-07-19 12:27:42 +02:00

TASK.md

chore: rework references for repo rename deploy-felhom-compose -> felhom-controller

2026-06-08 13:38:27 +02:00

TEST-REPORT.md

test campaign #3: Phase 7 brutal recovery (B1-B3 PASS, B4 skip) + final findings/cleanup

2026-06-22 22:04:55 +02:00

S

Description

No description provided

136 MiB

Languages

Go 89.1%

HTML 6.3%

Python 2%

Shell 1.3%

CSS 1.1%

Other 0.1%