35 lines
2.4 KiB
Markdown
35 lines
2.4 KiB
Markdown
# REPORT — v0.325.0: two more limiters reserve first; family sessions as fingerprints; samba renames apply; path guard widened; gates in a worktree (2026-10-17)
|
||
|
||
Burndown 3 (Parts 2–5). Full report in plain words: felhom.eu `REPORT-burndown-3-2026-10-17.md`. Evidence: felhom.eu
|
||
`documentation/audits/burndown-3-2026-10-17/`.
|
||
|
||
## 1. What changed
|
||
|
||
- **R-1111:** `reserveAttempt` (auth.go) — the share password and the escrow re-auth count a try before the compare.
|
||
- **R-1112:** `family.Fingerprint`; `family.json` holds `fp`; old files converted at load; the store opens at start.
|
||
- **R-1113:** `Store.HouseholdSession` — one household family session, renewed under half-life.
|
||
- **R-1109:** samba compose label `felhom.smb-conf-sha256`.
|
||
- **R-1110:** `TestNoBareDrivePathToPathHelpers`; `GetStackBackupData(nsRoot)`; `appDetailsForPath` through `NamespaceRootFor`.
|
||
- **R-1114:** `scripts/shared_scripts.py`; the runner passes `FELHOM_WORKSPACE`.
|
||
|
||
## 2. Tests (each red-proved)
|
||
|
||
`TestR1111_*` (2), `TestR1112_*` (4) + `TestFamily_OldFileThatCannotBeRewrittenIsAnError`, `TestR1113_*`,
|
||
`TestRenderSambaCompose_ConfigHashLabel`, `TestSambaReconcile_SamePathRenameChangesCompose`,
|
||
`TestNoBareDrivePathToPathHelpers`, `test_shared_scripts.py`. Full suite green; `controller_gates.py --fast` green in the
|
||
clone and in a worktree. No page changed: every i18n fixture byte-identical.
|
||
|
||
## 3. Live (demo-hp 9201, the dashboard's own posts)
|
||
|
||
rc.1: samba — share added, renamed (delete + add on the same folder), a second share on the same folder; each read and
|
||
written with `smbclient` from 9202, the old name refused; the label equals the smb.conf hash at every step. rc.1 also
|
||
showed the lazy family-store open (old `family.json` unchanged) → fixed in rc.2: at start „2 session(s) … rewritten as
|
||
fingerprints", file keys `exp, fp, gen, member`. Headless Chrome ×3 through the public address: sign in, `DENY`, POST
|
||
sign-out, MeTube through the family gate; household sessions stayed 2 (no growth).
|
||
|
||
## 4. Observations
|
||
|
||
1. A stacks test writes `update-journal.json(.tmp)` into its package folder; the R-578 source walk can trip on it. FILED (see felhom.eu report)
|
||
2. The escrow re-auth answers a wrong password in Hungarian only. FILED (see felhom.eu report)
|
||
3. Through the dashboard a rename was already applied before R-1109 (delete and add each change the compose); the label covers a controller update that changes smb.conf alone. NOT-A-FINDING: recorded in the row's close.
|