evening Part C: R-931 (gzip live) and R-932 (em dashes) closed; R-206 part (a) in git; R-935 note

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/audits/answers-2026-10-12/evening-small-fixes.txt

@@ -0,0 +1,8 @@
+# 2026-10-12 evening — small fixes, read back
+R-931: manifests/webpage.yaml nginx gzip (felhom.eu ece753d7 → rebased fa5c13ea); resource-only sync of ConfigMap/nginx-config + Deployment/felhom-webpage, Succeeded.
+  measured (curl, Accept-Encoding: gzip vs none): /assets/site.css 22 130 B gzip vs 114 784 B plain, Content-Encoding: gzip;
+  / 6 399 vs 22 181; /en/ 5 863 vs 21 234. The pod swap answered 502 on / for a few seconds; 200 again at 17:02:14.
+  slip: the nginx syntax check ran a throwaway `docker run --rm nginx:alpine nginx -t` on DooPlex (no volume, no network use) — a container start on a protected host.
+R-932: catalog 3a6e9308 — 13 Hungarian strings in 7 templates lose the em dash; check-copy-i18n CHECK 1b refuses one (red: 13 findings on the old text; green after); decoy added; decoys 187 cases OK; catalog gates OK.
+R-206: homelab-manifests eba52d7 — role docker_daemon (tags never + docker_daemon): byte-copy of /etc/docker/daemon.json, restart-and-verify handler (docker buildx inspect). Not installed. Dry runs: the full play skips it; --tags docker_daemon --check: ok, changed 0.
+R-935: across this session's push 186f3aa3 the flag stayed false (checked before and after); repo_gates --fast with and without GIT_DIR=.git did not flip it.

documentation/backlog/CLOSED-ITEMS.md

@@ -42,6 +42,8 @@ The full text of the rows below: `git show 6c2c3dd574:documentation/backlog/OPEN
 
 | Row | What | Closed | Evidence |
 |---|---|---|---|
+| **R-931** | **felhom.eu serves no compression at all — `site.css` goes over the wire as 94 310 raw bytes, and the home page's HTML as ~27 KB.** (P4) | CLOSED 2026-10-12 — **fixed and live.** nginx gzip in `manifests/webpage.yaml`; measured: `site.css` 22 130 B gzipped (was 114 784), the home page 6 399 (was 22 181), `Content-Encoding: gzip`. | felhom.eu `fa5c13ea`; `evening-small-fixes.txt` |
+| **R-932** | **Eight catalog strings carry an em dash, and they are shown to customers in the controller's own app page.** (P4) | CLOSED 2026-10-12 — **fixed.** 13 Hungarian strings in 7 templates (more than the 8 measured on 2026-10-11) lose the em dash, one sentence at a time; the copy gate now refuses one (CHECK 1b, red-proved, decoy). | catalog `3a6e9308`; `evening-small-fixes.txt` |
 | **R-304** | **The retained escrow key works, and the customer is told their correct code is wrong.** (P2) | CLOSED 2026-10-12 — **done.** The operator mail (`recovery_older_package`, operator-only, decision 183) and the honesty fix are released: controller `a40729a` and `75b3b39` are in 0.308.0 (running on demo-hp, demo-felhom, Tester 1); agent `91b9405` is before the 0.154.0 release commit `24ea960` (running on the three boxes); the hub lists the event operator-only. The last slice, the runbook, is written: `runbooks/RUNBOOK-open-retained-package.md` (from the 2026-08-12 drill §3.5–3.6: the household types its code on its own box, the password checked by hash, restore into a new folder, clean-up). | git ancestry read 2026-10-12; `runbooks/RUNBOOK-open-retained-package.md` |
 | **R-836** | **A new host kernel that hangs before userspace stays the GRUB default: `--next-boot` is not a one-shot on these hosts.** (P2) | CLOSED 2026-10-12 — **the harm is gone by design and by the nights since.** The kernel lane (agent 0.152.0+, hub 0.143.0+, `11` §5.11) pins the GRUB default to the RUNNING kernel before an install and boots the new kernel ONCE from an ESP flag cleared before the menu, with lockup→panic on that entry; so a hang or a power cycle comes back on the old kernel, and only a healthy boot moves the default. Read back: demo-felhom booted -22 then -23, demo-hp booted -23 on 2026-10-11 („kernel step — applied … healthy 1m58s"). Accepted by decision 172: a frozen new kernel that needs a person's power cycle. | `architecture/11-os-updates.md` §5.11; `audits/kernel-night-2026-10-08/readback/`; the 2026-10-11 read-back (STATUS) |