Files
felhom-controller/REPORT.md
T
admin ae2bfb2f7a
gates / gates (push) Successful in 1m9s
REPORT: the security-scan gate (R-986)
2026-10-19 21:48:13 +02:00

36 lines
2.4 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# REPORT — controller v0.335.0 (2026-10-19 evening/night brief, Part 1 + Part 9)
## What changed
**R-921 — no app stop for an off-site (or any whole-guest) tier the agent will refuse because its host is busy.**
Before any app is stopped the quiesce loop reads the agent's new `host_busy` answer on `GET /backup/status`
(felhom-agent, Unreleased `56aabc7`, operator answer „add one field" 2026-10-19). Held → no app stopped, no backup
asked, each due tier recorded as contention (skip 15 min, one „BLOCKED" alarm after 3 h). Free, an older agent, or a
failed read → the old order (stop, ask, resume at once on 409). The window's own tier in flight attaches as before.
The race (free at the read, busy at the start) keeps the old behaviour: one short stop, resumed at once.
## Tests (red-proved)
- `TestR921_NoStopWhileTheHostIsBusy` — without the branch: 3 apps stopped, the start refused.
- `TestR921_HostBusySkipsStillAlarmAfterTheCeiling` — a gate that never lets go still alarms once.
- `TestR921_HostBusyOtherAnswersKeepTheOldOrder` — free / older agent / failed read / own tier in flight.
- `TestHostBusy_ReadsTheAgentsGate` — the wire shape; no field = „not known", never „free".
## Release (decision 250)
- `0.335.0-rc.1` on demo-hp 9201 by hand (18:08 UTC): healthy, 0 `[ERROR]`. The live agent's `GET /backup/status`
carries no `host_busy` (read inside 9201) — so until the agent release every box keeps the old order.
- `0.335.0` image `sha256:262831f97cec39ecc3fad9bd198de5cb4ee59fc398cdf828604df5de84d4daae` (from `15ea002`).
- Per-box floors 18:22:21 UTC; all three moved by 18:37:36 UTC (demo-hp from rc.1).
- Box walk 18:38–18:39 UTC: 0 unhealthy, 0 allow-list refusals, catalog in sync on all three; https-only 28 OK,
0 FAIL; „Fájlok ↗" with no second sign-in on demo-hp and Tester 1.
- **Global floor 0.335.0 / MinAgent 0.158.1 at 18:39:26 UTC**, read back from hub.db + WAL; per-box floors cleared.
- Evidence: `felhom.eu/documentation/audits/night-2026-10-19/P9/`.
- i18n: no page changed, no fixture changed.
## Also tonight (tooling, no release): the security-scan gate (R-986)
`controller_gates.py` registers the shared `felhom.eu/scripts/security_scan_gate.py` (fast set: hook and CI),
warn-first; `.security-accepted` holds the first scan's 4 accepted hits (test constants, decoy values); decoys in
`controller/scripts/test_gate_decoys.py` (55 cases OK). Commit `a03c25a`, CI 2109 success.