admin 4867ec1804 R-839: the deploy API refuses an HDD_PATH that is a folder inside a registered drive ...

Diagnosed: 9202's paperless-ngx app.yaml named <drive>/userdata/paperless-ngx, written by the
2026-09-22 drill harness through POST /api/stacks/<n>/deploy, which accepted it (RefuseAsAppNamespace
matches by prefix). The boot sweep then asked a folder whether it was a mountpoint and HELD the app.
The deploy page offers drive roots only, so a household could not reach this; every other caller
is now refused with a sentence naming the drive (settings.DriveOfSubPath).
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-05 21:55:37 +02:00

..

backup_snapshots_test.go

v0.172.0 — R-75: canonical import root, catalog-derived skeleton, import surfaces

2026-07-26 08:12:57 +02:00

config_perms_test.go

F8: persist controller.yaml as 0600 (holds infra secrets)

2026-06-14 09:50:50 +02:00

deploygate_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

desiredstate_intent_test.go

v0.189.0 — desired state + the app-stop crash marker (R-166 / D-b)

2026-08-02 18:40:17 +02:00

geo_test.go

controller: immediate hub report push on geo change + always-report geo (B)

2026-06-16 13:00:32 +02:00

geo.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

i18n_api_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

i18n_api.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

kept_install_test.go

v0.278.0: a hold left by an earlier install no longer holds the new one (R-704)

2026-09-28 15:34:57 +02:00

kept_install.go

v0.278.0: a hold left by an earlier install no longer holds the new one (R-704)

2026-09-28 15:34:57 +02:00

lifecycle_gate_wiring_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

r474_remove_wiring_test.go

controller v0.242.0: a removed app is listed with its kept backup; five small ones (R-487 R-491 R-490 R-489 R-476 R-456)

2026-09-13 22:50:18 +02:00

r536_accept_time_event_test.go

v0.244.0: the backup page stops promising what it does not hold (R-537/R-538/R-536)

2026-09-16 16:55:55 +02:00

r552_remove_clears_notice_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r553_deploy_status_test.go

R-553: four decisions stop reading their own Hungarian words (sites 1-4)

2026-09-17 20:58:45 +02:00

r619_password_required_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r642_start_test.go

v0.263.0: a failed update puts the app back by itself (09 decision 15, R-637)

2026-09-23 11:12:49 +02:00

r650_main_test.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

r666_keep_data_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

r706_verify_copy_test.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

r839_hdd_subpath_test.go

R-839: the deploy API refuses an HDD_PATH that is a folder inside a registered drive

2026-10-05 21:55:37 +02:00

remove_r442_test.go

v0.236.0: "delete my data too" deletes the data, or says that it could not (R-442)

2026-09-13 08:52:25 +02:00

report_trigger_nilsafe_test.go

feat(report): v0.139.0 — immediate out-of-cycle hub report on user actions (Direction 1)

2026-07-16 19:31:19 +02:00

router.go

R-839: the deploy API refuses an HDD_PATH that is a folder inside a registered drive

2026-10-05 21:55:37 +02:00

selfrestart_test.go

controller: config-apply self-restart + manual restart button (A)

2026-06-16 12:56:51 +02:00

selfrestart.go

controller v0.94.0: pull-based config-refresh (re-pull + self-restart on config_version change)

2026-06-30 21:49:47 +02:00

slice4_update_test.go

v0.263.0: a failed update puts the app back by itself (09 decision 15, R-637)

2026-09-23 11:12:49 +02:00

update_reason_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00