felhom-controller/REPORT.md

REPORT — v0.350.0 released as the global floor: Traefik v3.7.17 first (2026-11-03, attended)

Plain words first. Every box runs 0.350.0 since 08:18 CET. It closes a real hole: a stranger with no password could fill a box's web front door until it stopped. It also carries five small fixes.

Commit	CI	What
c4b6844	2551 green	Traefik v3.7.17 (GHSA-xv5x-242w-7hf7); R-1347, R-1348, R-1339, R-1351, R-1323
3764445	2560 green	R-1348: the mail names a restore
5c336d8	2568 green	v0.350.0 heading — the release build's commit. MinAgent 0.158.1

• rc.1 (13e34d4, sha256:cbf4d42f…) on 9202: walk green, sign-in works.
• 0.350.0: sha256:9ee53908e6d95f0340c41bf4eaba954280084a8e6927de59779440e3551df261.
• Per-box floors 08:04:24 CET: all three moved within 45 s, walk green, 26 public names answer, https_only_check.py green, sign-in works on Tester 1 and demo-hp (not driven on the lived-in N100).
• One restore on Tester 1 on the release build: clean.
• Global floor 08:18:16 CET, its own save; the 30-minute watch stayed healthy, 0 ERROR or held lines at the hub.

The load test on 9202: v3.7.16 18.7 → 79.0 MiB after 920 NTLM connections, not released; v3.7.17 flat near 25 MiB for 25,116.

Test proof only: R-1351 and R-1323 (their conditions did not fire). R-1347 and R-1348 were proven on the test image of the same code, not on the release build. Evidence: felhom.eu documentation/audits/release-2026-11-03/part1/.