Files

T

gates / gates (push) Successful in 47s

Details

Escrow re-auth answers in the box language; a stacks test no longer writes into its source folder

Both fixed without a row (size rule): login.msg.wrong_password for the escrow re-auth
(TestEscrowReauth_WrongPasswordInTheBoxLanguage, red-proved); cmdManager gets its own DataDir (the update
journal went into internal/stacks/, and the R-578 source walk tripped on it once).

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-17 10:18:53 +02:00

2.7 KiB

Raw Blame History

REPORT — v0.325.0: two more limiters reserve first; family sessions as fingerprints; samba renames apply; path guard widened; gates in a worktree (2026-10-17)

Burndown 3 (Parts 2–5). Full report in plain words: felhom.eu REPORT-burndown-3-2026-10-17.md. Evidence: felhom.eu documentation/audits/burndown-3-2026-10-17/.

1. What changed

R-1111: reserveAttempt (auth.go) — the share password and the escrow re-auth count a try before the compare.
R-1112: family.Fingerprint; family.json holds fp; old files converted at load; the store opens at start.
R-1113: Store.HouseholdSession — one household family session, renewed under half-life.
R-1109: samba compose label felhom.smb-conf-sha256.
R-1110: TestNoBareDrivePathToPathHelpers; GetStackBackupData(nsRoot); appDetailsForPath through NamespaceRootFor.
R-1114: scripts/shared_scripts.py; the runner passes FELHOM_WORKSPACE.

2. Tests (each red-proved)

TestR1111_* (2), TestR1112_* (4) + TestFamily_OldFileThatCannotBeRewrittenIsAnError, TestR1113_*, TestRenderSambaCompose_ConfigHashLabel, TestSambaReconcile_SamePathRenameChangesCompose, TestNoBareDrivePathToPathHelpers, test_shared_scripts.py. Full suite green; controller_gates.py --fast green in the clone and in a worktree. No page changed: every i18n fixture byte-identical.

3. Live (demo-hp 9201, the dashboard's own posts)

rc.1: samba — share added, renamed (delete + add on the same folder), a second share on the same folder; each read and written with smbclient from 9202, the old name refused; the label equals the smb.conf hash at every step. rc.1 also showed the lazy family-store open (old family.json unchanged) → fixed in rc.2: at start „2 session(s) … rewritten as fingerprints", file keys exp, fp, gen, member. Headless Chrome ×3 through the public address: sign in, DENY, POST sign-out, MeTube through the family gate; household sessions stayed 2 (no growth).

4. Observations

A stacks test wrote update-journal.json(.tmp) into its package folder (an empty DataDir); the R-578 source walk in parallel tripped on it once today. NOT-A-FINDING: fixed in this release (cmdManager gets its own DataDir; a probe panicking on an empty DataDir ran the whole stacks suite green).
The escrow re-auth answered a wrong password in Hungarian only. NOT-A-FINDING: fixed in this release (login.msg.wrong_password, TestEscrowReauth_WrongPasswordInTheBoxLanguage, red-proved).
Through the dashboard a rename was already applied before R-1109 (delete and add each change the compose); the label covers a controller update that changes smb.conf alone. NOT-A-FINDING: recorded in the row's close.