admin 2d63714eca R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142) ...

Every night leg (DB dump, volume dump, recovery-unit capture, Tier-2 mirror) now leaves alone an app
whose app.yaml pin (pinned_images) differs from its running record (installed_images) - the state a
failed update leaves behind. A hold lifted by hand (--clear-restore-hold + restart) no longer lets the
capture write the just-failed definition over the good unit. Unknown (no pin, no record, a service not
observed) never skips. The log says it per leg; the backups page shows one amber line, hu + en
(backup.status.version_skip). Seam: backup.Manager.SetVersionCheck <- stacks.Manager.PinNotRunning.

Tests: TestR645_HandLiftedHoldKeepsTheGoodUnit (whole night run + Tier 2, unit tree fingerprint),
TestR645_VersionSkipSentence, TestR645_PinNotRunning_*, TestR645_BackupRowSaysTheNightBackupSkipsIt,
TestR645_VersionCheckIsWiredAtStartup.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-06 11:39:25 +02:00

..

a_version_travel_test.go

R-699: a unit that holds no data is never an update-precondition copy (found live on 9202)

2026-09-27 12:04:03 +02:00

admission_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

admission.go

…

appbackup_bridge.go

R-102 phase 1.1: split the recovery-unit path helpers, zero behaviour change

2026-08-31 11:16:02 +02:00

appstop_drivegate_test.go

…

appstop_marker_test.go

…

appstop_marker.go

R-585: the last customer-facing producers follow the household's language

2026-10-06 02:01:12 +02:00

appstop_suppress_test.go

R-330: stop the backup alarming about the apps it is holding down (v0.224.0)

2026-08-30 17:58:15 +02:00

appstop_suppress.go

R-330: stop the backup alarming about the apps it is holding down (v0.224.0)

2026-08-30 17:58:15 +02:00

backup.go

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

capture_floor_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

d28_unhealthy_hold_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

data_versions.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

device_seam_test.go

…

f5_stale_primary_test.go

…

f6_single_copy_test.go

…

file_legs.go

v0.244.0: the backup page stops promising what it does not hold (R-537/R-538/R-536)

2026-09-16 16:55:55 +02:00

hollow_watch.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

kept_load_test.go

kept data: the choice at reinstall, the list, the read-only view, the load (09 decision 36); R-690 fixed

2026-09-25 13:32:30 +02:00

kept_load.go

v0.278.0: a hold left by an earlier install no longer holds the new one (R-704)

2026-09-28 15:34:57 +02:00

main_test.go

R-488: backup tests read ONE health-wait clock; package 444 s -> ~2 s

2026-10-05 22:24:23 +02:00

migration_exclusion_test.go

…

offbox_3a_test.go

v0.289.1: strip the provider rclone notice; an unreadable snapshot count is never a measured zero (found live on demo-felhom)

2026-10-03 17:15:10 +02:00

offbox_abandon_pin_r302_test.go

R-302: the abandon banner promises only what the box can still see is true

2026-08-12 15:27:29 +02:00

offbox_abandon_r241_test.go

…

offbox_abandon.go

v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823)

2026-10-04 07:27:38 +02:00

offbox_capture.go

…

offbox_clear_r729_test.go

R-729 + R-545: the household can remove its own off-site target („Távoli mentési cél törlése")

2026-10-05 21:55:37 +02:00

offbox_clear.go

R-729 + R-545: the household can remove its own off-site target („Távoli mentési cél törlése")

2026-10-05 21:55:37 +02:00

offbox_declare_test.go

…

offbox_fit_test.go

v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

2026-09-30 10:31:55 +02:00

offbox_fit.go

v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

2026-09-30 10:31:55 +02:00

offbox_integrity.go

one writer at a time, and a check that can run (R-411, R-408, R-407, R-414, R-412a)

2026-09-01 10:19:36 +02:00

offbox_inventory_test.go

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

offbox_inventory.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

offbox_lastsuccess_test.go

…

offbox_mintguard_r241_test.go

…

offbox_offer_shapec_r241_test.go

…

offbox_orphan_test.go

v0.291.0: decision 78 (R-726) — a returning household's first night sets the orphaned copy aside; R-838 — traefik v3.7.13, cloudflared 2026.9.3, filebrowser 1.5.6-stable, a release now moves a running file browser, check-infra-pins.py

2026-10-04 10:56:19 +02:00

offbox_place_test.go

R-356: the off-site restore refused every app that has no data drive

2026-08-22 13:08:46 +02:00

offbox_placement_refusal_test.go

R-356: the off-site restore refused every app that has no data drive

2026-08-22 13:08:46 +02:00

offbox_placement_test.go

R-351: the restore compares where the backup says the data lived; second press cannot start a second run

2026-08-21 21:04:16 +02:00

offbox_placement.go

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

offbox_progress_test.go

…

offbox_progress.go

…

offbox_proof.go

R-414: the fallback scratch must also be DELETABLE - caught by live validation

2026-09-01 10:29:08 +02:00

offbox_reconstitute_test.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

offbox_reconstitute.go

R-488: backup tests read ONE health-wait clock; package 444 s -> ~2 s

2026-10-05 22:24:23 +02:00

offbox_recorded_unit_test.go

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

offbox_recovery_check_test.go

…

offbox_recovery_check.go

…

offbox_recovery_cli.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

offbox_restore.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

offbox_scratch_test.go

…

offbox_shares_test.go

…

offbox_shares.go

…

offbox_statsknown_report_test.go

R-331 (controller half): forward stats_known so the hub can tell empty from unmeasured (v0.225.0)

2026-08-30 18:38:10 +02:00

offbox_test.go

R-488: backup tests read ONE health-wait clock; package 444 s -> ~2 s

2026-10-05 22:24:23 +02:00

offbox_verdict_r203_test.go

…

offbox_verdict_r234_test.go

…

offbox_verify_copies_test.go

…

offbox_verify_copies.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

offbox_window_test.go

v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869)

2026-10-05 07:13:02 +02:00

offbox_window.go

v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869)

2026-10-05 07:13:02 +02:00

offbox.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

offsite_diag_test.go

R-578: settings-callback deadlock gate over every controller package

2026-10-05 22:24:22 +02:00

opstatus_recent_test.go

R-351: the restore compares where the backup says the data lived; second press cannot start a second run

2026-08-21 21:04:16 +02:00

opstatus_test.go

…

opstatus.go

v0.246.0: an interrupted restore is told; the recovery-code reminder waits until the box can take it

2026-09-17 10:45:29 +02:00

r47_replay_order_test.go

R-353/R-357/R-358/R-360: the restore tells the truth (v0.226.0)

2026-08-30 19:31:31 +02:00

r87_judgement_test.go

v0.231.0 - the box proves its own off-site copy still holds something (R-87)

2026-08-31 20:55:34 +02:00

r87_proof_job_test.go

v0.231.0 - the box proves its own off-site copy still holds something (R-87)

2026-08-31 20:55:34 +02:00

r87_wiring_test.go

v0.231.0 - the box proves its own off-site copy still holds something (R-87)

2026-08-31 20:55:34 +02:00

r102_tier2_unit_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

r102_unit_at_test.go

R-102: the recovery unit on the second drive becomes a way back

2026-08-31 11:30:34 +02:00

r103_file_restore_untouched_test.go

R-103: the Tier-2 refusal becomes an action

2026-08-31 11:42:03 +02:00

r104_lock_class_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r240_zero_selection_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r251_marker_tag_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r354_volume_replay_test.go

v0.218.0: attribute a DB container by its compose project, and replay volumes on the off-site restore

2026-08-22 09:43:22 +02:00

r355_safetydump_test.go

R-361: the safety dump destroyed the app's own database backup

2026-08-22 23:39:59 +02:00

r356_hot_only_restore_test.go

R-356: the off-site restore refused every app that has no data drive

2026-08-22 13:08:46 +02:00

r357_reconstitute_headroom_test.go

R-353/R-357/R-358/R-360: the restore tells the truth (v0.226.0)

2026-08-30 19:31:31 +02:00

r358_scratch_marker_test.go

R-359 + R-397: the off-site store gets checked, and the advertised check becomes real

2026-08-30 21:03:29 +02:00

r359_dueness_test.go

R-359 + R-397: the off-site store gets checked, and the advertised check becomes real

2026-08-30 21:03:29 +02:00

r359_integrity_test.go

v0.228.0 — the off-site check reads the data; the debug page stops lying (R-399 + R-400)

2026-08-31 10:24:29 +02:00

r359_lock_safety_test.go

R-359 + R-397: the off-site store gets checked, and the advertised check becomes real

2026-08-30 21:03:29 +02:00

r361_canonical_dump_test.go

R-361 follow-on: the undo-copy prune must run above the already-current check

2026-08-23 00:02:32 +02:00

r362_restore_drive_gone_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r379_rollback_test.go

R-361: the safety dump destroyed the app's own database backup

2026-08-22 23:39:59 +02:00

r383_undo_phrase_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

r399_depth_test.go

v0.228.0 — the off-site check reads the data; the debug page stops lying (R-399 + R-400)

2026-08-31 10:24:29 +02:00

r399_slow_notice_test.go

v0.228.0 — the off-site check reads the data; the debug page stops lying (R-399 + R-400)

2026-08-31 10:24:29 +02:00

r403_hollow_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

r403_hollow.go

v0.231.0 - the box proves its own off-site copy still holds something (R-87)

2026-08-31 20:55:34 +02:00

r403_mirror_guard_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

r403_rehydrate_test.go

R-403: a poorer copy must never delete a richer one

2026-08-31 14:02:13 +02:00

r408_invariant_walk_test.go

controller v0.240.0: seven defects from the any-tier proof and the first nightly rotation

2026-09-13 19:26:50 +02:00

r411_lock_flag_test.go

one writer at a time, and a check that can run (R-411, R-408, R-407, R-414, R-412a)

2026-09-01 10:19:36 +02:00

r412a_push_wording_test.go

one writer at a time, and a check that can run (R-411, R-408, R-407, R-414, R-412a)

2026-09-01 10:19:36 +02:00

r414_reachability_test.go

R-414: the fallback scratch must also be DELETABLE - caught by live validation

2026-09-01 10:29:08 +02:00

r474_remove_mirrors.go

controller v0.240.0: seven defects from the any-tier proof and the first nightly rotation

2026-09-13 19:26:50 +02:00

r476_unit_data_date_test.go

controller v0.242.0: a removed app is listed with its kept backup; five small ones (R-487 R-491 R-490 R-489 R-476 R-456)

2026-09-13 22:50:18 +02:00

r477_r474_test.go

controller v0.240.0: seven defects from the any-tier proof and the first nightly rotation

2026-09-13 19:26:50 +02:00

r479_tier_order_test.go

v0.263.0: a failed update puts the app back by itself (09 decision 15, R-637)

2026-09-23 11:12:49 +02:00

r487_removed_units_test.go

controller v0.242.0: a removed app is listed with its kept backup; five small ones (R-487 R-491 R-490 R-489 R-476 R-456)

2026-09-13 22:50:18 +02:00

r538_unit_restore_refusal_test.go

v0.244.0: the backup page stops promising what it does not hold (R-537/R-538/R-536)

2026-09-16 16:55:55 +02:00

r553_offsite_quota_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r634_deploying_test.go

controller v0.265.0: R-634 cause fixed, held apps say so, OOM storm alarm, R-647 leftovers

2026-09-23 17:16:57 +02:00

r640_incomplete_dump_test.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

r645_version_skip_test.go

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

r658_restore_labels_test.go

controller v0.268.0: the undo finds volumes by definition; a held app names only a whole copy; one press = one tested step (R-658, R-659, R-660, R-651; 09 §6.4 part 5)

2026-09-24 08:15:27 +02:00

r659_whole_copy_test.go

R-699: a unit that holds no data is never an update-precondition copy (found live on 9202)

2026-09-27 12:04:03 +02:00

r660_update_held_test.go

controller v0.268.0: the undo finds volumes by definition; a held app names only a whole copy; one press = one tested step (R-658, R-659, R-660, R-651; 09 §6.4 part 5)

2026-09-24 08:15:27 +02:00

r668_missing_path_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

r669_applied_meta_test.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

r671_undo_copies_test.go

controller v0.272.0: the backup page says when a whole-box backup does not fit (R-685); R-671, R-670, R-677

2026-09-25 11:19:27 +02:00

r690_removed_unit_test.go

kept data: the choice at reinstall, the list, the read-only view, the load (09 decision 36); R-690 fixed

2026-09-25 13:32:30 +02:00

r691_kept_offsite_test.go

v0.277.0: kept data loads from the off-site copy too (R-691 (2))

2026-09-28 09:57:11 +02:00

r721_recover_test.go

v0.283.1: a Stop holds during the volume dump in production and at the crash recovery (R-721, found live on v0.283.0)

2026-09-30 10:52:19 +02:00

r721_volume_dump_stop_test.go

v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

2026-09-30 10:31:55 +02:00

r_partd_hollow_watch_test.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

recovery_unit_notify_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

recovery_unit_test.go

…

recovery_unit.go

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

removed_units.go

R-699: a unit that holds no data is never an update-precondition copy (found live on 9202)

2026-09-27 12:04:03 +02:00

restore_db_test.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

restore_db.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

restore_destination_test.go

…

restore_dir_err.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

restore_points_test.go

…

restore_points.go

R-699: a unit that holds no data is never an update-precondition copy (found live on 9202)

2026-09-27 12:04:03 +02:00

restore_record_test.go

v0.246.0: an interrupted restore is told; the recovery-code reminder waits until the box can take it

2026-09-17 10:45:29 +02:00

restore_record.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

restore_secrets_gen_test.go

R-353/R-357/R-358/R-360: the restore tells the truth (v0.226.0)

2026-08-30 19:31:31 +02:00

restore_unit_test.go

R-353/R-357/R-358/R-360: the restore tells the truth (v0.226.0)

2026-08-30 19:31:31 +02:00

restore_unit.go

R-488: backup tests read ONE health-wait clock; package 444 s -> ~2 s

2026-10-05 22:24:23 +02:00

restore.go

R-488: backup tests read ONE health-wait clock; package 444 s -> ~2 s

2026-10-05 22:24:23 +02:00

run_record_test.go

controller v0.296.0: a backup run cut off by a power cut or restart is said on the backup pages (R-519); the whole-system backup text states today's measurement (R-518)

2026-10-05 12:14:54 +02:00

run_record.go

controller v0.296.0: a backup run cut off by a power cut or restart is said on the backup pages (R-519); the whole-system backup text states today's measurement (R-518)

2026-10-05 12:14:54 +02:00

runsummary_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

runsummary.go

…

shares_payload.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

shares_restore_test.go

…

shares_restore.go

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

shares_test.go

…

slice4_update_guard_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

tier2_anchor_test.go

…

tier2_capture.go

…

tier2_coverage_test.go

…

tier2_restore_test.go

…

tier2_restore.go

R-488: backup tests read ONE health-wait clock; package 444 s -> ~2 s

2026-10-05 22:24:23 +02:00

tier2_shares.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

tier2_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

tier2_v2_test.go

…

tier2_whole_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

tier2_whole.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

tier2.go

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

undo_hold_test.go

controller v0.265.0: R-634 cause fixed, held apps say so, OOM storm alarm, R-647 leftovers

2026-09-23 17:16:57 +02:00

update_guard.go

R-645: the night backup skips an app whose pinned version is not the one it runs (09 decision 142)

2026-10-06 11:39:25 +02:00

update_tiers_test.go

R-699: a unit that holds no data is never an update-precondition copy (found live on 9202)

2026-09-27 12:04:03 +02:00

volume_atomic_test.go

…

volume_dumps_test.go

…