admin a1c65b3d81 R-1300: SECURITY — cloudflared 2026.10.3 on main (same change as tag v0.345.1); build.sh may push from the pushed tag v<VERSION> ...

infra.CloudflaredImage 2026.9.3 -> 2026.10.3 (Cloudflare's eMudhra notice, 2026-10-20) and
TestEnsureCloudflared_ANewImageRecreatesTheTunnel (red-proved). build.sh: a --push may build from
the tag v<VERSION> as the server has it, pointing at HEAD (operator's yes 2026-10-26); four new
cases in test_build_push_once.sh, red-proved both ways. MinAgent 0.158.1 unchanged.

2026-10-26 21:01:40 +01:00

.claude/rules

The decoy suite is a gate of the full run (R-1116); no code change

2026-10-17 11:01:40 +02:00

.gitea/workflows

security-scan gate (shared felhom.eu/scripts/security_scan_gate.py) in the fast set and CI, warn-first, with the accepted-hits file and decoys (R-986)

2026-10-19 21:11:31 +02:00

.githooks

pre-push: refuse a push from a clone outside the felhom workspace (R-204 rider)

2026-08-05 10:47:58 +02:00

.vscode

added csss ignore

2026-02-16 13:28:03 +01:00

audits

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

controller

R-1300: SECURITY — cloudflared 2026.10.3 on main (same change as tag v0.345.1); build.sh may push from the pushed tag v<VERSION>

2026-10-26 21:01:40 +01:00

docs

docs: migrate workflow to DooPlex-local execution

2026-07-19 12:15:52 +02:00

monitoring

v0.6.0: healthcheck + hub reporting implementation

2026-02-16 13:19:08 +01:00

scripts

slice 8C C.3: de-privilege the controller container (legacy docker-setup template) + CHANGELOG (v0.37.0)

2026-06-10 13:59:26 +02:00

.gitignore

gitignore Python bytecode - the new gate test writes controller/scripts/__pycache__

2026-09-01 12:01:54 +02:00

.security-accepted

security-scan gate (shared felhom.eu/scripts/security_scan_gate.py) in the fast set and CI, warn-first, with the accepted-hits file and decoys (R-986)

2026-10-19 21:11:31 +02:00

BUGHUNT.md

docs(bughunt): reconciliation banner — H10 fixed, pointer to authoritative reconcile record

2026-06-13 19:28:13 +02:00

CHANGELOG.md

R-1300: SECURITY — cloudflared 2026.10.3 on main (same change as tag v0.345.1); build.sh may push from the pushed tag v<VERSION>

2026-10-26 21:01:40 +01:00

CLAUDE.md

Instruction files kept true (09 §3 decision 150): stale gate lists, paths and facts corrected; no code change

2026-10-06 13:44:01 +02:00

CONTEXT.md

docs: CONTEXT — D53 ruled, the held-app report is next (felhom.eu 08 §10)

2026-10-26 18:07:22 +01:00

DIAGNOSTIC.md

document

2026-06-11 14:02:47 +02:00

REPORT-app-page-2026-10-15.md

REPORT-app-page-2026-10-15.md: the app-page arc, in a file a second session cannot overwrite

2026-10-15 21:48:19 +02:00

REPORT.md

docs: REPORT — D53 (committed, not released; live-proven on 9202 against a test hub)

2026-10-26 19:16:59 +01:00

REUSE.md

feat(D53): the hub learns which apps are held — app_held / app_hold_cleared, daily repeat

2026-10-26 18:23:54 +01:00

RUNBOOK-e2e-live-drive.md

docs(runbook): e2e live-drive commands are DooPlex-local (plain ssh felhom-pve)

2026-07-19 12:27:42 +02:00

TASK.md

chore: rework references for repo rename deploy-felhom-compose -> felhom-controller

2026-06-08 13:38:27 +02:00

TEST-REPORT.md

test campaign #3: Phase 7 brutal recovery (B1-B3 PASS, B4 skip) + final findings/cleanup

2026-06-22 22:04:55 +02:00

S

Description

No description provided

204 MiB

Languages

Go 89.7%

HTML 6%

Python 1.9%

Shell 1.2%

CSS 1%