# Phase 2 readiness, checked DURING round 12 without touching the box under test
# 2026-09-17T00:15-00:16Z

## Scratch guest 9202 is ready to receive an off-site restore
  pct list          9201 demo-hp (running), 9202 demo-hp-scratch (running)
  9202 containers   felhom-controller Up 5 hours (healthy), filebrowser Up 3 days, traefik Up 3 days
  restic            0.14.0, INSIDE the controller container (as the design requires - every path it
                    touches must be under /mnt)
  off-site target   NOT configured on 9202

## The constraint that follows, found before it could waste time at 05:00
To restore one DB-backed app from off-site onto 9202, 9202 must be pointed at the BOX'S restic
repository - which needs that repository's address and its password. The password is minted per
guest, so 9202 cannot derive it; it has to be read from the box and handed over.

## A DELIBERATE DECISION: I am not reading that from the box yet, and why
Round 12 is the closing CONTROL round. Its entire value is that nothing was done to the box while
it ran. Authenticated reads against the controller during it would add load and log lines to the one
round whose meaning is "nothing happened". The read costs nothing to defer and the round cannot be
re-run, so it waits until round 12 closes.
Recorded here rather than left as an unstated habit, because a control round that was quietly
touched is worth nothing and nobody could tell afterwards.

## My own instrument slipped again getting this far (the eighth)
The first version of this check drowned in perl locale warnings from `pct`, and my `head -12` cut
the output before the real lines were ever reached. It returned an empty marker block that looked
like "9202 has no containers". The fix was LC_ALL=C on the remote plus filtering the warning lines,
and not truncating before the marker. Same class as every other instrument fault tonight: a probe
that can drop its own result silently is not a measurement.

## THE CATALOG BUMP: VERIFIED REVERTED, not asserted (2026-09-17T00:29Z)
The brief allowed one drill bump of one small app, reverted the same night.
  working tree            clean (git status --porcelain empty)
  local vs origin/main    94bc5fe == 94bc5fe, 0 ahead / 0 behind
  nextcloud template      image: redis:7-alpine        <- the ORIGINAL pin, bump gone
  .felhom.yml             catalog_since: "2026-07-18"  <- the ORIGINAL date, bump gone
  newest commit           94bc5fe, 2026-09-15 - nothing from tonight exists in this repo
The bump was prepared, refused by the catalog's own gates (image-resolvable INCONCLUSIVE and
volume-persistence INCONCLUSIVE - its own canary failed, so the verdict was UNDETERMINED, never a
pass), and reverted with `git checkout --` before any push. So there is nothing to revert now, and
that is checked rather than remembered.
