Fixes before the first tester: decisions 50/51 outcomes, register 359->361 (R-719/720/721/722/727 closed, R-723 fixed, R-724/725 narrowed, R-728/729 opened), STATUS with the Tester-2 checklist, report

Secret scan before commit: 6162 files, 0 hits, control 1.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -1,23 +1,27 @@
 # STATUS — what works, what's broken, what's next
 
-**Ready for a first real tester: YES, on a new customer record — a fresh box went from the download to restored apps with no help at all; fix the volunteer guide first, and decide whether their apps go off-site by themselves (today they do not).**
+**Ready for the first real tester (Tester-2): yes, once you check two things — the tunnel's route in Cloudflare, and which of the two connect mails your friend uses.**
 
-**Updated 2026-09-30 morning. Both demo boxes run controller 0.282.0 and host agent 0.137.0. Hub 0.125.0. New installs get golden 0.282.0 with agent 0.137.0 (baked and vouched last night).**
+**Updated 2026-09-30. Both demo boxes run controller 0.283.1 and host agent 0.138.0. Hub 0.126.0. New installs get golden 0.282.0 with agent 0.137.0.**
+
+**Decisions today** (yours, recorded): every new app goes off-site by itself (50); the three drill backups on ep0 go, and the restore test uses only the box's own backups (51).
+
+**Tester-2 — what I checked, read only.**
+- Done: tunnel key pasted; the domain has exactly one DNS record, and it points at that same tunnel; off-site on (100 GB, a fresh storage account); DR tier on; e-mail language English.
+- **Check yourself:** the tunnel's route. My Cloudflare key could read DNS but not tunnels. It must say `*.sajatfelhom.hu` → `https://traefik`, with „No TLS Verify" ticked.
+- **Two connect mails went out** (the customer was created twice). Only one link works. Tell your friend: if one says "expired", use the other. The live one is valid until 7 October.
 
 **What I did, and it worked.**
-- **A fresh box, walked like a volunteer, needed no help.** Download, install on the Hungarian keyboard, the e-mailed link, the dashboard through the internet, the recovery code, three apps, a family member, backup, restore, delete, a power cut, typos, a phone. Last walk needed one intervention; this one needed none.
-- **The new safety parts held on a fresh box.** Strangers saw only the gate page. The gate opened by itself after the household's setup. Sign-up stayed closed. The random first password worked, and the old default password was refused.
+- **Apps go off-site by themselves now.** Older apps get one button. If the apps do not fit in 100 GB, the page names the biggest. The box never deletes old copies to make room — I checked; it never did.
+- **A Stop holds during a backup.** The first version was wrong in real use; my live test caught it, and the second version is proven live.
+- **ep0 is clean:** the three old drill backups are gone; the other customers' backups are unchanged.
+- **A returning customer gets a new link** from a button on the expired link's page.
+- **The volunteer guide is current** (six stale lines fixed).
+- **Two false operator mails on a new box's first day are gone.**
 
-**What broke.**
-- **No off-site copy on night one.** Every app starts with its off-site copy switched off, and nothing tells the household. On top of that, tester-1's old off-site store belonged to an earlier box, so the box skipped it all night. The household's data stayed safe on the box.
-- **The night's restore test tried an old box's backup** and failed on its key. The page shows a bare ✗ and names the wrong place.
-- **A Stop pressed during a backup was undone by that backup.**
-- **The volunteer guide is out of date in five places.** For example, it still gives BookStack's old default password, which is now refused.
-
-**Rows.** 9 opened, 1 closed. The list went from 350 to 359 rows.
+**Rows.** 5 closed, 2 opened. The list went from 359 to 361 rows.
 
 **What needs you.**
-1. **Decide: should apps go off-site by themselves?** Option A: yes, every app is switched on when the customer has off-site (my pick — that is what the guide already promises). Option B: no, the guide tells the household to switch each app on. If you do nothing, a new household's apps have no off-site copy.
-2. **Approve the guide fix** (five lines, I write them). If you do nothing, a volunteer tries BookStack's old password and fails.
-3. **Three whole-machine backups of deleted drill boxes are still in tester-1's space on ep0** (two from 16 September, one from last night). I only looked; I did not touch them. The old ones make the restore test fail. If you do nothing, every new tester-1 box repeats that failure. Say "remove them" and I will do it with before/after checks.
-4. **D4, the image copies, the Peti leftovers:** unchanged. If you do nothing, nothing changes.
+1. **The Tester-2 tunnel route** (above). If you do nothing and it is missing, your friend's dashboard answers an error page.
+2. **A golden before your friend installs?** The rule says bake one before any fresh install; this task did not include it. Option A (my pick): I bake 0.283.1 before the install — the box then starts on today's code. Option B: skip it — the box starts on 0.282.0 and updates itself to 0.283.1 within seconds (proven on both demo boxes today). If you do nothing, B happens.
+3. **D4, the image copies:** unchanged. If you do nothing, nothing changes.