felhom-controller/REPORT.md

REPORT — v0.311.0: after a power cut, an app repairs the files the cut left empty (R-1007, 2026-10-14)

Baseline acbbf4b (0.310.0). Code 8d862e4, security fix 3b85a0c (before the build). Image felhom-controller:0.311.0 (sha256 2a5550da…). Design: felhom.eu 09 §3 decision 236; evidence felhom.eu documentation/audits/immich-repair-2026-10-14/.

• New template block after_unclean_boot; internal/aftercrash runs it once per start after an UNCLEAN host boot (crashboot's verdict, after the 15-min crash grace). The household's lost-files note on the app page; the operator event app_repaired_after_crash (counts only). MinAgent 0.155.0 unchanged.
• Tests: 15 guards red-proofed (each removed in turn convicted its test). Full suite and every controller gate green.
• Security review of 8d862e4: compose's shared runner logs a failed command's stdout and puts stderr in the error, which reached the event's problem. Fixed: a quiet runner, exit code only (TestAUB_AFailingCommandLeaksNoOutput).
• Live (demo-hp 9201, a real power cut mid-upload): 41 of 41 broken photos repaired in 10 s; 120 controls untouched.
• Open: R-1020 — the returned duration is 0 (the record's is right). Delivery to the N100 and Tester 1 waits on golden 0.311.0 + the global floor.