diff --git a/documentation/pilot/DRILL-GL6-2026-07-08.md b/documentation/pilot/DRILL-GL6-2026-07-08.md index edaa055..0f42232 100644 --- a/documentation/pilot/DRILL-GL6-2026-07-08.md +++ b/documentation/pilot/DRILL-GL6-2026-07-08.md @@ -283,6 +283,24 @@ armed-from-first-boot), the operator-signed self-update path is fully live-valid healthy. (Also incidentally re-proved the v1.11.3 F4 fix: the `--resume` re-ran token/enroll/grows cleanly and reached verify — no crash-loop, no flag error.) -## Gate 4 — [Viktor]: +## Gate 4 — [Viktor]: **GO** — drift-heal proven (C7 live, F7 recorded, repaired). + +## Phase 5 — uninstall #2 (the byo box's clean exit) — PASS + +Real `--uninstall --vmid 9201` (typed confirm), no busy prop this time. +- `felhom-usb` unmounted cleanly ("data stays on the drive"); statement reads **"the drives are + physically removable now"** (no busy exception this run) — the KEPT-vs-WIPED statement printed as + designed; UNINSTALL complete. +- **Host audit CLEAN:** no felhom-agent unit/user/binary/selfupdate-wrapper/A-B-slots/rollback-unit/ + limits-drop-in/watchdog/mkfs-wrapper/hook-snippet/dnsmasq-drop-ins; pveum user 0, roles empty, + felhom pool gone; `/var/lib/felhom-agent`, `/var/lib/felhom-install`, `/etc/felhom-agent` all gone. + (F1 did NOT recur — this install's config had no `.bak` siblings.) +- **Drive DATA intact:** witness `7b00bc35…` == Phase-0 (the data-sovereignty exit, proven a 2nd time). +- Recurring known findings: **F2** (per-drive `mnt-*.mount` units survive), **F6** (leftover dnsmasq + still active). Trivial demo-box note: 6 ancient `felhom-agent.v0.1x.0.bak` binaries (Jun 10–11, + legacy naming) survive the `.bak-*` glob — historical cruft, not on a real customer box; a fix + could widen the glob to `.v*.bak`. + +## Gate 5 — [Viktor]: *(Phases 3–6 appended as they run.)*