admin 3b85a0c29a v0.311.0 (before the build): the repair's commands run quietly — no household file name can reach a log or the operator event ...

Security review of 8d862e4: compose's shared runner logs a failed command's stdout and puts its
stderr in the error, and that error became the event's `problem`. The after_unclean_boot commands now
run through a quiet runner (nothing logged, stderr discarded) and `problem` keeps the exit code only.
TestAUB_AFailingCommandLeaksNoOutput, red-proofed.

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb

2026-10-14 16:58:20 +02:00

..

aftercrash

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

agentapi

v0.310.0: „A gép kikapcsolása" — the household turns the whole machine off (R-998); honest restart text (R-999)

2026-10-13 20:17:30 +02:00

api

R-575: the overcommit warning follows the reader's language

2026-10-05 23:12:59 +02:00

appbackup

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

appexport

v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869)

2026-10-05 07:13:02 +02:00

assets

…

backup

v0.307.0: after a restart the Databases table lists each database once, not every pre-restore undo copy

2026-10-10 15:19:43 +02:00

backupwindow

…

bootrecon

…

bootstrap

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

channelhealth

R-271: the channel recovery after a controller restart is reported

2026-10-05 21:55:37 +02:00

cloudflare

…

config

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

crashboot

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

crypto

…

dockerexec

R-35 (D4): dashboard sign-ins survive the controller's own restart; disk holds only a fingerprint

2026-10-08 14:49:27 +02:00

family

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

fillwatch

v0.309.0: the fill warning reaches the household in its own language; the root-filesystem disk event pinned end to end (R-521 F7)

2026-10-12 17:11:53 +02:00

i18n

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

infra

v0.297.0: burn-down round 2 — 24 small rows (R-591 R-568 R-567 R-363 R-547 R-10 R-552 R-251 R-104 R-619 R-362 R-675 R-256 R-257 R-240 R-365 R-425 R-565 R-564 R-603 R-454 R-208 R-457-swept) + the banner countdown and deepCopyStack twins; MinAgent 0.131.0

2026-10-05 20:12:56 +02:00

integrations

…

logx

…

mailrelay

…

metrics

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

monitor

health check: the last six producers carry their dashboard sentence (R-79 option A, D3)

2026-10-08 14:49:27 +02:00

nightchain

v0.295.0: a box that was off at its backup time catches up once (R-871, decision 109); the missed-backup banner (decision 110); a late daily timer after a host suspend is skipped

2026-10-05 09:27:16 +02:00

notify

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00

offsiteapply

v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823)

2026-10-04 07:27:38 +02:00

quiesce

controller (unreleased): R-921 check-first pre-check (no stop while another tier's job is in flight); R-922 email_cleared on a household's deliberate clear

2026-10-09 12:57:34 +02:00

recovery

v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

2026-10-12 15:38:28 +02:00

report

v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

2026-10-12 15:13:59 +02:00

scheduler

Operator actions in the report reply (D1, R-314/R-279/R-177, decision 185)

2026-10-08 14:49:27 +02:00

selftest

…

selfupdate

v0.285.0 — a box keeps two controller versions (decision 56, R-745); the update clean-up's nil-stack crash (R-751)

2026-10-01 07:36:26 +02:00

settings

v0.309.0: the default list completes groups 1 and 3 for households with no saved list (operator Q1); REPORT

2026-10-12 17:25:12 +02:00

sockheal

v0.293.0: the controller heals itself after the guest's Docker socket is re-created (R-860)

2026-10-04 19:48:29 +02:00

stacks

v0.311.0 (before the build): the repair's commands run quietly — no household file name can reach a log or the operator event

2026-10-14 16:58:20 +02:00

sync

R-616 (on top of R-615): the catalog clone stores no credentials

2026-10-05 23:12:59 +02:00

system

R-889: every disk percent is df's (used / (used + available)); the tile says Rendszer, not Rendszer (/) (09 decision 138)

2026-10-06 08:03:21 +02:00

util

…

web

v0.311.0: after a power cut, an app repairs the files the cut left empty; the household sees lost photos (R-1007)

2026-10-14 16:47:13 +02:00