Status view, part 1 (register pass): register 156 -> 152 (closed R-1121 file gone, R-1118 retirement done, R-231 in git + green run; R-993 merged into R-991); R-132 narrowed (rotation done, hash field left), R-1049 -> WATCHING (fix live since hub 0.151.0); hub + local read evidence

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb

documentation/audits/status-view-2026-10-20/hub-reads.txt

@@ -0,0 +1,13 @@
+# Hub reads for the STATUS do-list check — 2026-10-20 (CC's scoped token HUB_TOKEN, GET only, the running pod at the hub ClusterIP)
+# read at: 2026-10-20T09:39:11Z
+
+## GET /hosts — host table (text only)
+Unclaimed-appliances section rendered: False
+Worst Storage Tester-2-be8404 Tester 2 0.142.0 floor held 9.2.2 7.0.2-6-pve DOWN 1/1 4% 13% 6% running (connected) 6% local demo-felhom-8363b5 Demo Ügyfél 0.161.0 floor: declared MinAgent 9.2.21 7.0.14-24-pve ONLINE 1/2 5% 17% 34% running (connected) 34% local demo-hp-bb76ea Demo HP 0.161.0 floor: declared MinAgent 9.2.21 7.0.14-24-pve ONLINE 1/2 0% 48% 66% running (connected) 66% local tester-1-d70be4 Tester 1 0.161.0 floor: declared MinAgent 9.2.2 7.0.14-22-pve ONLINE 1/2 7% 35% 25% running (connected) 25% local Felhom Hub 0.162.0 
+
+## GET / — customer overview (text only)
+Version Tester 2 DOWN host down: Tester-2-be8404 3 3 15d ago 11% 14% 0% 0/0 – 0.292.0 Tester4 DOWN — 1d ago 12% 24% 3% 1/1 – 0.330.0 Demo Ügyfél OK — just now 5% 17% 1%/1% 5/5 – 0.336.0 Demo HP OK 1 just now 7% 47% 31%/22% 20/20 – 0.336.0 Tester 1 OK — just now 1% 34% 7%/65%/0%/0%/0%/0% 6/6 – 0.336.0 Auto-refreshes every 60 seconds · Felhom Hub 0.162.0 
+
+## GET /configuration — Day-0 artifacts: the options marked selected (= the vouched manifest, template: {{if eq .Version $.Artifacts.AgentVersion}}selected)
+value="0.161.0" data-sha="ff4e6dc52dd70234913445ecdeb88d31dea8e394d77c48704d26ff19b999d3b5" selected>0.161.0
+value="0.331.0" data-sha="3881de62b0986ccbe5e55580e3f1bb9765d65b8d898f67c6339bac105244f84f" selected>0.331.0

documentation/audits/status-view-2026-10-20/local-checks.txt

@@ -0,0 +1,22 @@
+# Local read-only checks on DooPlex for the STATUS do-list — 2026-10-20T09:39:22Z
+
+## R-1121: ~/rotated-secrets-2026-10-09.txt (test -e; control: ~/.bashrc with the same command)
+rotated-secrets-2026-10-09.txt: ABSENT
+.bashrc: PRESENT
+find $HOME -maxdepth 3 -name 'rotated-secrets*':
+(end of find)
+
+## R-934: failed disk Z6A07P2G still in DooPlex? (lsblk serials; its twin Z6A070XZ is the control)
+sdd  Z6A070XZ               2.7T ST3000VX010-2E3166
+sdg  Z6A07P2G               2.7T ST3000VX010-2E3166
+
+## Leftovers: the Facebook first-post folder (count of files; not opened)
+15
+
+## homelab-manifests .claude/settings.json uncommitted edit (git status, diffstat only)
+ M .claude/settings.json
+ .claude/settings.json | 11 +++++------
+ 1 file changed, 5 insertions(+), 6 deletions(-)
+
+## R-1118: sec doctor (last line)
+sec doctor: all OK

documentation/backlog/CLOSED-ITEMS.md

@@ -26,6 +26,15 @@
 
 ---
 
+## 2026-10-20 — the status page back to one screen: register pass (full text of each row: `git show 5c487313:documentation/backlog/OPEN-ITEMS.md`)
+
+| Row | What | Closed | Evidence |
+|---|---|---|---|
+| **R-1121** | **`~/rotated-secrets-2026-10-09.txt` still exists on DooPlex** (P3) | CLOSED 2026-10-20 — **the file is gone:** `test -e ~/rotated-secrets-2026-10-09.txt` answers absent, and a `find ~ -maxdepth 3 -name 'rotated-secrets*'` finds no copy; the same `test -e` on `~/.bashrc` answers present (the control). Who removed it is not recorded; the row asked for exactly this end state. | `audits/status-view-2026-10-20/local-checks.txt` |
+| **R-1118** | **CC's secrets moved off the plain `~/.config/credentials` into an encrypted store with a broker and guards; what is left is retiring the old file.** (P3) | CLOSED 2026-10-20 — **built 2026-10-17 and the one thing left is done:** R-1134 (retire the old `~/.config/credentials`) closed 2026-10-17 with the file shredded on the operator's go; `sec doctor` answers „all OK" today. The design and the rules live in `cc-secrets/ARCHITECTURE.md`. | `audits/status-view-2026-10-20/local-checks.txt` |
+| **R-231** | **`/opt/backup/scripts/` on DooPlex is unversioned host state** (P3) | CLOSED 2026-10-20 — **the scripts are in git and installed from it** (homelab-manifests `fdd324b`, role `dooplex_backup`; the token left the clone URL in `1943a70`), and the first run on the installed scripts was green (2026-10-13 03:27–03:33 CEST, `Result=success`, exit 0). The row's own next action said: close it, and file the same-disk / no-off-site facts as their own row if they still hold — **they are carried by R-232** („DooPlex's backup makes every copy inside the same box"), which stays open. | `audits/answers-2026-10-12/s20-backup-scripts.txt` |
+| **R-993** | **Operator: approve the minimum machine in `documentation/audits/sizing-2026-10-13/SIZING.md` §5** (P3) | CLOSED 2026-10-20 — **merged into R-991** (one decision, STATUS D5): the proposal (`audits/sizing-2026-10-13/SIZING.md` §5) and the measured fact that the installer has no floor on the HOST were copied into R-991's State. | `audits/sizing-2026-10-13/SIZING.md` |
+
 ## 2026-10-20 (night brief part 2, run by day) — hub 0.162.0, agent 0.161.0, installer 1.35.0, the safe undo for a failed off-site restore (full text of each row: `git show bcaa9576:documentation/backlog/OPEN-ITEMS.md`)
 
 | Row | What | Closed | Evidence |