before the press: gate closed? a stranger's GET / -> 401 | controller: None
3.3 BEFORE the household's press, a stranger's users.create -> 401
the household presses „Kész, beállítottam" -> 200 {'data': {'opened': True}, 'error': '', 'ok': True}
after_setup: the app's own switch now DISABLE_SIGNUPS=true (after 5 s)
3.4 a STRANGER after the setup (no session, no gate cookie, through traefik):
  users.create -> 403
  batched whoami,users.create -> 403
  upper-case path -> 403
  double slash -> 403
  GET /signup -> 403 | GET /SignUp -> 403
  the app's own switch, asked straight (inside the container, past traefik): 
3.6 lock-out: 12 wrong apiKeys.exchange for the household's email as a stranger, then the right one:
  12 wrong -> ['401'] | right at once -> 200
0.5/5.2 a LINK bookmark (the crawler + Chrome): POST -> 201
  crawled: {'title': None, 'imageUrl': None, 'favicon': None, 'crawledAt': None} | taggingStatus: None
0.4 AI is off: OPENAI_API_KEY in the container is EMPTY | the app's log on inference: 2026-10-01T15:09:05.683Z [32minfo[39m: Starting inference worker ...
2.2/2.7 data and size: karakeep_karakeep_data=672K karakeep_karakeep_meili=440K
1.8 unknown page: http=308 debug-page=False
1.5 process in karakeep: /package/admin/s6/command/s6-svscan -d4 -- /run/service
1.5 process in karakeep-meilisearch: tini -- /bin/sh -c /bin/meilisearch
1.5 process in karakeep-chrome: /sbin/docker-init -- /headless-shell/run.sh --disable-gpu --disable-dev-shm-usage --hide-scrollbars --disable-blink-features=AutomationControlled --window-size=1440,900
4.4 negative control: docker pause karakeep — controller state before: running
    states while paused (s, state): [(4, 'running')]; running again 4 s after unpause
