# S26 / R-782 — Glance behind the family gate, proven on scratch guest 9202 (demo-hp), 2026-10-12 ~12:57-13:00Z
catalog: app-catalog-felhom.eu d308445 (family_gate: true, min_controller 0.287.0, no exceptions; check-family-gate rule 4)
box: 9202, controller 0.304.0. POST /api/sync + rescan -> catalog-cache templates/glance/.felhom.yml has `family_gate: true` (grep -c = 1); stack meta family_gate True.
install: POST /api/stacks/glance/deploy -> 202; deployed, state running, pinned glanceapp/glance:v0.8.5 (15 s).
stranger (no cookie), Host dashboard.enkisfelhom.hu via 9202's traefik:
  GET  Accept: text/html -> 302 https://felhom.enkisfelhom.hu/__family/start?rd=https%3A%2F%2Fdashboard.enkisfelhom.hu%2F
  GET  (no Accept)       -> 401
  POST                   -> 401
control, other channel: inside the guest `docker exec glance wget -S http://127.0.0.1:8080/` -> HTTP/1.1 200 OK (the app is up; only the front door refuses)
household (dashboard session): /__family/start -> 302 dashboard.enkisfelhom.hu/__felhom_gate/fcb -> Set-Cookie felhom_famgate (set) -> GET / with it -> 200, <title> Kezdőlap
teardown (through the product): POST stop -> 200; POST remove (remove_hdd_data, remove_backups) -> 200, volumes_removed [glance_glance_config];
  deployed False; containers 0; volumes 0; /opt/docker/stacks/glance holds only the catalog's .felhom.yml + docker-compose.yml (as for all 65 catalog apps). Cookie values were never printed.
gap (decision, not taken): the gate is recorded at INSTALL (controller deploy.go: only when no app.yaml exists), so a Glance installed before d308445 stays public until re-installed. Read 2026-10-12: no Glance on demo-hp 9201/9202 or demo-felhom 9201.
