Status view, part 1 (register pass): register 156 -> 152 (closed R-1121 file gone, R-1118 retirement done, R-231 in git + green run; R-993 merged into R-991); R-132 narrowed (rotation done, hash field left), R-1049 -> WATCHING (fix live since hub 0.151.0); hub + local read evidence

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb
2026-10-20 11:43:58 +02:00
parent 5c487313fa
commit 2954b0be3a
4 changed files with 50 additions and 10 deletions
@@ -26,6 +26,15 @@

 ---

+## 2026-10-20 — the status page back to one screen: register pass (full text of each row: `git show 5c487313:documentation/backlog/OPEN-ITEMS.md`)
+
+| Row | What | Closed | Evidence |
+|---|---|---|---|
+| **R-1121** | **`~/rotated-secrets-2026-10-09.txt` still exists on DooPlex** (P3) | CLOSED 2026-10-20 — **the file is gone:** `test -e ~/rotated-secrets-2026-10-09.txt` answers absent, and a `find ~ -maxdepth 3 -name 'rotated-secrets*'` finds no copy; the same `test -e` on `~/.bashrc` answers present (the control). Who removed it is not recorded; the row asked for exactly this end state. | `audits/status-view-2026-10-20/local-checks.txt` |
+| **R-1118** | **CC's secrets moved off the plain `~/.config/credentials` into an encrypted store with a broker and guards; what is left is retiring the old file.** (P3) | CLOSED 2026-10-20 — **built 2026-10-17 and the one thing left is done:** R-1134 (retire the old `~/.config/credentials`) closed 2026-10-17 with the file shredded on the operator's go; `sec doctor` answers „all OK" today. The design and the rules live in `cc-secrets/ARCHITECTURE.md`. | `audits/status-view-2026-10-20/local-checks.txt` |
+| **R-231** | **`/opt/backup/scripts/` on DooPlex is unversioned host state** (P3) | CLOSED 2026-10-20 — **the scripts are in git and installed from it** (homelab-manifests `fdd324b`, role `dooplex_backup`; the token left the clone URL in `1943a70`), and the first run on the installed scripts was green (2026-10-13 03:27–03:33 CEST, `Result=success`, exit 0). The row's own next action said: close it, and file the same-disk / no-off-site facts as their own row if they still hold — **they are carried by R-232** („DooPlex's backup makes every copy inside the same box"), which stays open. | `audits/answers-2026-10-12/s20-backup-scripts.txt` |
+| **R-993** | **Operator: approve the minimum machine in `documentation/audits/sizing-2026-10-13/SIZING.md` §5** (P3) | CLOSED 2026-10-20 — **merged into R-991** (one decision, STATUS D5): the proposal (`audits/sizing-2026-10-13/SIZING.md` §5) and the measured fact that the installer has no floor on the HOST were copied into R-991's State. | `audits/sizing-2026-10-13/SIZING.md` |
+
 ## 2026-10-20 (night brief part 2, run by day) — hub 0.162.0, agent 0.161.0, installer 1.35.0, the safe undo for a failed off-site restore (full text of each row: `git show bcaa9576:documentation/backlog/OPEN-ITEMS.md`)

 | Row | What | Closed | Evidence |