## 2026-09-16T11:15:11Z Phase 3 - morning-after sweep (in the quiet gap between F9'' kills)
  public front doors:
    https://paste.enkicsifelhom.hu/ -> 200
    https://vault.enkicsifelhom.hu/ -> 200
    https://paperless.enkicsifelhom.hu/ -> 302
    https://cloud.enkicsifelhom.hu/status.php -> 200
    https://fajlok.enkicsifelhom.hu/ -> 404
  stack states through the dashboard API:
  version labels:
    controller (dashboard footer):     golden on the hub for this host: 
  (the earlier empty read was my expired session, not a broken box - re-measured below)
    cloudflared      running    deployed=False subdomain=
    filebrowser      running    deployed=False subdomain=
    nextcloud        running    deployed=True  subdomain=cloud
    paperless-ngx    running    deployed=True  subdomain=paperless
    privatebin       running    deployed=True  subdomain=paste
    traefik          running    deployed=False subdomain=
    vaultwarden      running    deployed=True  subdomain=vault
  controller version on the page: 0.243.0
  CORRECTION to the line above: fajlok.enkicsifelhom.hu was MY guess and is not the address.
  file manager re-checked at its real address:  -> 
  hub host page, version facts:
    Agent -> r-1-652049 ONLINE Host ID tester-1-652049 Customer Tester 1 Agent Version 0.131.0 PBS wrapper matches vouched 104db0a4401f… Enrolled 1h ago Last Report 9 min ago Desired Generation
    agent -> lhom-pbs critical ok backup tier felhom-pbs readable by the agent (archive listing, restore-test candidacy) pve:store-grant:local ok backup tier local readable by the agent (archiv
    0.131 -> INE Host ID tester-1-652049 Customer Tester 1 Agent Version 0.131.0 PBS wrapper matches vouched 104db0a4401f… Enrolled 1h ago Last Report 9 min ago Desired Generation 1 Vitals CPU
  file manager, CORRECT route (it has no subdomain of its own; it is served by the dashboard):
    https://felhom.enkicsifelhom.hu/files/ (logged in)  -> 404
    https://felhom.enkicsifelhom.hu/files/ (no session) -> 302   <- negative control, must not be 200
  version labels, measured:
    controller on the page: 0.243.0 ; hub customer row: Version 0.243.0, Floor v0.242.0 (a floor is a minimum)
    agent on the hub host page: 0.131.0 ; PBS wrapper matches vouched 104db0a4401f...
  file manager, THIRD and correct attempt - the dashboard's own link says files.enkicsifelhom.hu:
    https://files.enkicsifelhom.hu/ -> 200
    (my two earlier lines, fajlok.enkicsifelhom.hu 404 and /files/ 404, were MY wrong guesses,
     not product faults. The address was read from the dashboard page, not invented.)
