admin 4867ec1804 R-839: the deploy API refuses an HDD_PATH that is a folder inside a registered drive ...

Diagnosed: 9202's paperless-ngx app.yaml named <drive>/userdata/paperless-ngx, written by the
2026-09-22 drill harness through POST /api/stacks/<n>/deploy, which accepted it (RefuseAsAppNamespace
matches by prefix). The boot sweep then asked a folder whether it was a mountpoint and HELD the app.
The deploy page offers drive roots only, so a household could not reach this; every other caller
is now refused with a sentence naming the drive (settings.DriveOfSubPath).
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-05 21:55:37 +02:00

.claude/rules

the size rule: a small finding is fixed in the session, not filed; reports state four register numbers (burn-down Part D)

2026-10-05 16:43:23 +02:00

.gitea/workflows

ci: run the gate entry point on every push (R-168)

2026-08-02 16:27:25 +02:00

.githooks

pre-push: refuse a push from a clone outside the felhom workspace (R-204 rider)

2026-08-05 10:47:58 +02:00

.vscode

added csss ignore

2026-02-16 13:28:03 +01:00

audits

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

controller

R-839: the deploy API refuses an HDD_PATH that is a folder inside a registered drive

2026-10-05 21:55:37 +02:00

docs

docs: migrate workflow to DooPlex-local execution

2026-07-19 12:15:52 +02:00

monitoring

v0.6.0: healthcheck + hub reporting implementation

2026-02-16 13:19:08 +01:00

scripts

slice 8C C.3: de-privilege the controller container (legacy docker-setup template) + CHANGELOG (v0.37.0)

2026-06-10 13:59:26 +02:00

.gitignore

gitignore Python bytecode - the new gate test writes controller/scripts/__pycache__

2026-09-01 12:01:54 +02:00

BUGHUNT.md

docs(bughunt): reconciliation banner — H10 fixed, pointer to authoritative reconcile record

2026-06-13 19:28:13 +02:00

CHANGELOG.md

gofmt gate: NOT CHECKED (out loud) on the Go-less CI runner, INCONCLUSIVE elsewhere; decoys for both (CI run 1371 was red)

2026-10-05 20:15:54 +02:00

CLAUDE.md

docs: CLAUDE.md becomes a core plus path-scoped rules (R-229)

2026-08-06 09:38:27 +02:00

CONTEXT.md

REPORT + CONTEXT: 2026-10-04 night (R-840 / R-860)

2026-10-04 20:39:49 +02:00

DIAGNOSTIC.md

document

2026-06-11 14:02:47 +02:00

REPORT.md

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

REUSE.md

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

RUNBOOK-e2e-live-drive.md

docs(runbook): e2e live-drive commands are DooPlex-local (plain ssh felhom-pve)

2026-07-19 12:27:42 +02:00

TASK.md

chore: rework references for repo rename deploy-felhom-compose -> felhom-controller

2026-06-08 13:38:27 +02:00

TEST-REPORT.md

test campaign #3: Phase 7 brutal recovery (B1-B3 PASS, B4 skip) + final findings/cleanup

2026-06-22 22:04:55 +02:00

S

Description

No description provided

56 MiB

Languages

Go 88.3%

HTML 7.2%

Python 2.1%

Shell 1.2%

CSS 1.1%