felhom-controller/REPORT.md

REPORT — controller v0.269.0 + v0.269.1 (2026-09-24 night shift, run in daytime)

Full record: felhom.eu/documentation/audits/DRILL-night-2026-09-24.md (evidence under night-2026-09-24/). Architecture read: 09 §3 decisions 11–30, §6.4; 07 (the whole-copy table); 08 §6.2.

Shipped

• v0.269.0 (3c6b49b): the second drive's whole restore for a file app (decision 26, R-661); the same-disk check fails closed (R-668); keep-data-only Remove while support is informed (decision 27, R-666); the box stops a crash loop / OOM storm, Start = one more try (decision 28, R-667, threshold decision 29); each step judged by its own .felhom.yml (R-664, R-665); R-662 removed; digests rendered + the badge from the tested digest (§6.4 part 6).
• v0.269.1 (5b1b191): CarryDigests — an installed app keeps its digest until a guarded Update (decision 30). Found live in Part B; a second release in the session, on purpose.
• MinAgent 0.131.0 (unchanged). Needs hub v0.123.0. Floor 0.269.1 set with the declared MinAgent; N100 arrived (~16 s); demo-hp 9201 did not (read-only disks, R-672 — operator).

Red-proofs (each seen failing, then passing; files in night-2026-09-24/redproofs/)

A1 file rules (three mutations: no newer-check → the newer copy overwritten; no keep-beside → the older copy gone; no bring-back → the missing file not restored), R-668 (fail-open → the removed folder chosen), R-666 (the guard removed → data deleted), decision 28 detector (the old clock → never trips) and its skips (a held/updating app judged), hub routing, R-664 catalog gate + R-665 (the stack dir's file judged), digests (B-digests.txt), and v0.269.1's carry (B-sync-carry.txt: "the sync MOVED the running digest").

Live (9202, endpoint level — no browser on DooPlex)

Whole restore: restored 1 / kept-newer 1 / unchanged 137, 3/3 volumes + 1/1 db, 38 s, account + files read back; again from a hold naming the second drive; again in chaos rounds 3 (power cut) and 11 (disk + 1 GB). Keep-data-only: 409 hu/en. Unhealthy stop: gokapi trip 1 → Start → trip 2 („support informed"), chaos rounds 1, 7, 8, 12. Digests: a floating tag's newer tested digest → badge → Update pulled it; on v0.269.1 the sync left the running file alone. Full suite go test ./... rc=0 and controller_gates.py OK before each commit.

Found (rows)

R-669, R-670, R-671, R-674, R-675, R-677, R-678, R-679, R-680, R-681, R-682, R-683 (controller); R-676 (watch).