admin
68af0e97f2
gates / gates (push) Successful in 47s
Both fixed without a row (size rule): login.msg.wrong_password for the escrow re-auth (TestEscrowReauth_WrongPasswordInTheBoxLanguage, red-proved); cmdManager gets its own DataDir (the update journal went into internal/stacks/, and the R-578 source walk tripped on it once). Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
35 lines
2.7 KiB
Markdown
35 lines
2.7 KiB
Markdown
# REPORT — v0.325.0: two more limiters reserve first; family sessions as fingerprints; samba renames apply; path guard widened; gates in a worktree (2026-10-17)
|
||
|
||
Burndown 3 (Parts 2–5). Full report in plain words: felhom.eu `REPORT-burndown-3-2026-10-17.md`. Evidence: felhom.eu
|
||
`documentation/audits/burndown-3-2026-10-17/`.
|
||
|
||
## 1. What changed
|
||
|
||
- **R-1111:** `reserveAttempt` (auth.go) — the share password and the escrow re-auth count a try before the compare.
|
||
- **R-1112:** `family.Fingerprint`; `family.json` holds `fp`; old files converted at load; the store opens at start.
|
||
- **R-1113:** `Store.HouseholdSession` — one household family session, renewed under half-life.
|
||
- **R-1109:** samba compose label `felhom.smb-conf-sha256`.
|
||
- **R-1110:** `TestNoBareDrivePathToPathHelpers`; `GetStackBackupData(nsRoot)`; `appDetailsForPath` through `NamespaceRootFor`.
|
||
- **R-1114:** `scripts/shared_scripts.py`; the runner passes `FELHOM_WORKSPACE`.
|
||
|
||
## 2. Tests (each red-proved)
|
||
|
||
`TestR1111_*` (2), `TestR1112_*` (4) + `TestFamily_OldFileThatCannotBeRewrittenIsAnError`, `TestR1113_*`,
|
||
`TestRenderSambaCompose_ConfigHashLabel`, `TestSambaReconcile_SamePathRenameChangesCompose`,
|
||
`TestNoBareDrivePathToPathHelpers`, `test_shared_scripts.py`. Full suite green; `controller_gates.py --fast` green in the
|
||
clone and in a worktree. No page changed: every i18n fixture byte-identical.
|
||
|
||
## 3. Live (demo-hp 9201, the dashboard's own posts)
|
||
|
||
rc.1: samba — share added, renamed (delete + add on the same folder), a second share on the same folder; each read and
|
||
written with `smbclient` from 9202, the old name refused; the label equals the smb.conf hash at every step. rc.1 also
|
||
showed the lazy family-store open (old `family.json` unchanged) → fixed in rc.2: at start „2 session(s) … rewritten as
|
||
fingerprints", file keys `exp, fp, gen, member`. Headless Chrome ×3 through the public address: sign in, `DENY`, POST
|
||
sign-out, MeTube through the family gate; household sessions stayed 2 (no growth).
|
||
|
||
## 4. Observations
|
||
|
||
1. A stacks test wrote `update-journal.json(.tmp)` into its package folder (an empty DataDir); the R-578 source walk in parallel tripped on it once today. NOT-A-FINDING: fixed in this release (`cmdManager` gets its own DataDir; a probe panicking on an empty DataDir ran the whole stacks suite green).
|
||
2. The escrow re-auth answered a wrong password in Hungarian only. NOT-A-FINDING: fixed in this release (`login.msg.wrong_password`, `TestEscrowReauth_WrongPasswordInTheBoxLanguage`, red-proved).
|
||
3. Through the dashboard a rename was already applied before R-1109 (delete and add each change the compose); the label covers a controller update that changes smb.conf alone. NOT-A-FINDING: recorded in the row's close.
|