From 31858d3c52b1316d5b69b90377e538e3333b06bd Mon Sep 17 00:00:00 2001
From: kisfenyo <nagyfenyvesi.viktor@gmail.com>
Date: Wed, 16 Sep 2026 12:27:30 +0200
Subject: [PATCH] =?UTF-8?q?drill:=20R-535=20filed=20(console=20still=20say?=
 =?UTF-8?q?s=20'waiting=20to=20pair'=20after=20bind+claim);=20phase=201=20?=
 =?UTF-8?q?evidence=20=E2=80=94=20apps,=20vaultwarden=20400,=20paperless?=
 =?UTF-8?q?=2020/20,=20per-tier=20backup=20page?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
---
 .../phase1-appcards.txt                         |   8 ++++++++
 .../phase1-apps.txt                             |   2 ++
 .../phase1-manualbackup.txt                     |   4 ++++
 .../phase1-paperless.txt                        |   4 ++++
 .../phase1-provision.txt                        |   6 ++++++
 .../phase1-selfbind.txt                         |   1 +
 .../phase1-vaultwarden.txt                      |   3 +++
 .../screens/33-console-after-claim.png          | Bin 0 -> 20302 bytes
 documentation/backlog/OPEN-ITEMS.md             |   1 +
 9 files changed, 29 insertions(+)
 create mode 100644 documentation/audits/evidence-drill-0243-2026-09-16/phase1-appcards.txt
 create mode 100644 documentation/audits/evidence-drill-0243-2026-09-16/phase1-manualbackup.txt
 create mode 100644 documentation/audits/evidence-drill-0243-2026-09-16/phase1-paperless.txt
 create mode 100644 documentation/audits/evidence-drill-0243-2026-09-16/phase1-vaultwarden.txt
 create mode 100644 documentation/audits/evidence-drill-0243-2026-09-16/screens/33-console-after-claim.png

diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-appcards.txt b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-appcards.txt
new file mode 100644
index 00000000..b5fbdb11
--- /dev/null
+++ b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-appcards.txt
@@ -0,0 +1,8 @@
+## vaultwarden: first steps: Első lépések Nyisd meg a vault.DOMAIN/admin címet, és lépj be az admin panel tokenjével (Beállítások → Automatikusan generált értékek) A „Users" fülön az „Invite User" mezőben hívd meg a saját és a családtagok e-mail címét — a regisztráció alapból le van zárva, csak meghívott cím nyithat fiókot Nyisd meg a vault.DOMAIN címet, válaszd a „Create account" lehetőséget a meghívott címmel, és adj meg erős mesterjelszót Tel
+   admin/admin mentioned: False | invite fragment: True
+## paperless-ngx: first steps: Első lépések Nyisd meg a paperless.DOMAIN címet a böngészőben Lépj be: felhasználó "admin", a jelszó a Beállítások oldalon található (Automatikusan generált értékek) Tölts fel egy dokumentumot a webfelületen, VAGY dobd a Fájlkezelőben (FileBrowser) az import/paperless mappába — onnan automatikusan beolvassa és OCR-rel feldolgozza. A Fájlkezelő belépése a Fájlkezelő alkalmazás oldalán található Sok dokumentumot egysze
+   admin/admin mentioned: False | invite fragment: False
+## privatebin: first steps: Első lépések Nyisd meg a paste.DOMAIN címet a böngészőben Írd be a szöveget és kattints a Küldés gombra Oszd meg a generált linket - a titkosítási kulcs az URL-ben van Dokumentáció Hivatalos dokumentáció ↗ (function(){ var burger=document.querySelector('.nav-burger'); var sidebar=document.getElementById('sidebar'); var backdrop=document.querySelector('.nav-backdrop'); if(!burger||!sidebar||!backdrop)return; function 
+   admin/admin mentioned: False | invite fragment: False
+## nextcloud: first steps: Első lépések Nyisd meg a cloud.DOMAIN címet a böngészőben Jelentkezz be a telepítéskor megadott admin fiókkal Telepítsd a Nextcloud asztali alkalmazást a számítógépedre Telepítsd a Nextcloud mobil alkalmazást a telefonodra Hívd meg a családtagokat felhasználói fiókok létrehozásával Előfeltételek Külső HDD szükséges a fájlok tárolásához Legalább 1 GB szabad RAM (Nextcloud + MariaDB + Redis) x86 processzor ajánlott a l
+   admin/admin mentioned: False | invite fragment: False
diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-apps.txt b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-apps.txt
index dac2aaa5..5a14398b 100644
--- a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-apps.txt
+++ b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-apps.txt
@@ -4,3 +4,5 @@
   2026-09-16T10:21:58Z paperless-ngx deploy http=202 {"ok":true,"message":"Telepítés elindítva – az állapot a kártyán követhető"}
   2026-09-16T10:22:18Z nextcloud deploy http=202 {"ok":true,"message":"Telepítés elindítva – az állapot a kártyán követhető"}
   2026-09-16T10:23:29Z nextcloud=starting paperless-ngx=starting privatebin=running vaultwarden=running
+  2026-09-16T10:23:59Z nextcloud=starting paperless-ngx=starting privatebin=running vaultwarden=running
+  2026-09-16T10:24:29Z nextcloud=running paperless-ngx=running privatebin=running vaultwarden=running
diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-manualbackup.txt b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-manualbackup.txt
new file mode 100644
index 00000000..474a1ce9
--- /dev/null
+++ b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-manualbackup.txt
@@ -0,0 +1,4 @@
+## 2026-09-16T10:27:01Z 'Mentés most' on the fresh box — app downtime measured against the button's copy
+  privatebin before: 200
+  trigger http=200
+{"data":{"started":true},"ok":true}
diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-paperless.txt b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-paperless.txt
new file mode 100644
index 00000000..81d126cd
--- /dev/null
+++ b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-paperless.txt
@@ -0,0 +1,4 @@
+## 2026-09-16T10:25:26Z paperless token len 40
+  posted at 2026-09-16T10:25:26Z
+  tasks: {'SUCCESS': 20}
+  documents: 20
diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-provision.txt b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-provision.txt
index fe0946da..9fe75617 100644
--- a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-provision.txt
+++ b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-provision.txt
@@ -29,3 +29,9 @@ Permission denied, please try again.
 [0.243.0] …site Configuration ← All Customers Tester 1 Last report: 1 min ago · Controller 0.243.0 Auto-refresh (paused) Tester 1 ok Controller 0.243.0 Last report 1 min ago Containers 0/0 Overview Applications Setup Edit Backup & DR Events Notificati…
 [Agent] …ter-1-652049 → tester-1-652049 ONLINE Host ID tester-1-652049 Customer Tester 1 Agent Version 0.131.0 PBS wrapper matches vouched 104db0a4401f… Enrolled 3 min ago Last Report 2 min ago Desired Generation 1 Vitals CPU 0% Memory 20% Disk (roo…
 ## 2026-09-16T10:17:40Z 2026/09/16 12:17:16 [INFO] host-report from tester-1-652049 (1 guests, 2 storage targets, 1 backups, 0 restore-tests, 0 pbs-snapshots, 11172 bytes)
+host: tester1
+agent: felhom-agent 0.131.0
+VMID       Status     Lock         Name                
+9201       running    backup       tester-1            
+controller image: gitea.dooplex.hu/admin/felhom-controller:0.243.0
+golden marker: 
diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-selfbind.txt b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-selfbind.txt
index ff04557d..764bd7fc 100644
--- a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-selfbind.txt
+++ b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-selfbind.txt
@@ -14,3 +14,4 @@ Sikeres összekötés.
 ##   "Elkészült a Felhom dobozod, és készen áll az összekötésre. … https://hub.felhom.eu/bind/<TOKEN REDACTED> …
 ##    1. A párosító kódot, amely a doboz képernyőjén (a monitoron) látható.
 ##    2. A tulajdonosi jelmondatodat (az 5 szóból álló kifejezést) … A hivatkozás 7 napig érvényes. … 5 sikertelen próbálkozás után zárolódik"
+## selfbind-sent line on the Setup tab: Kapcsolódó link elküldve: 2026-09-16 09:59 UTC (operator button) It is sent automatically when the customer is created or RESET, when an e-mail is set on a customer with no box, and when this customer's host is deleted. 
diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/phase1-vaultwarden.txt b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-vaultwarden.txt
new file mode 100644
index 00000000..469935b8
--- /dev/null
+++ b/documentation/audits/evidence-drill-0243-2026-09-16/phase1-vaultwarden.txt
@@ -0,0 +1,3 @@
+## 2026-09-16T10:25:05Z Vaultwarden on the fresh box (catalog default SIGNUPS_ALLOWED=false):
+  stranger send-verification-email -> HTTP 400 message: Registration not allowed or user already exists
+  /api/config reachable: 200
diff --git a/documentation/audits/evidence-drill-0243-2026-09-16/screens/33-console-after-claim.png b/documentation/audits/evidence-drill-0243-2026-09-16/screens/33-console-after-claim.png
new file mode 100644
index 0000000000000000000000000000000000000000..a0e22218dee86fcb60475f2dc1f873b917b9fb69
GIT binary patch
literal 20302
zcmb5VWl$VV*r+|bxVwAspa}$*MFIqu;BLWPgDgvcK!OKNaCZpqPJjf5;10pvVUhiK
z-gD~wI_JmNRkJhGUDG|aRb6xUbzl8OT~!_jlM)jE0GxLUvYG&Z{Co+9p+ElutfboQ
z&nJ3I1x*zI@M8f0SSSF%pQ~WI0N}+70Q+VDAd(6IWUlEg8e-24U<)OASpX3pJKXtv
zhvxZC<t^Gi20kV^#<(Up7ywjXzmt`E@4Ilc?2}IR>rwJ_cKEPpWyfQ{&0VwL2FXt6
zJ@Wg$Pnw*t2<8cws9ZTl@+hvCPf;)CETX=&%f7{L)ljyGg((meDDZ&MmI9Bbd~BdW
zhfs-|J8H9c8r`!OXF^S5qir@HPMjAHkFg=L|9=a@tMoRHSUMGshYGtbd?EW7Bz-8H
z5fKpq6~i0@@`Y~&!?7u=z4E?kQU-Ix1gL$-WewUFL{-<MWMjAPrudWyD;QJNM%oS7
zD1zF!hVvZoDX}wW4~Kb8=hDl*(2YtY#Fu7ckK%_>F=8{lmwF?6*=a!%z%%Z5EJO00
zX$|<(z1fMXK8d}cP(ck5#s%2x(~K!`FtR`5gIVUN!6Yyw^QB=*7_z#<jzgR)(1h?k
z>o+b0*(wOdX;Q5}j7yT`W+9jDCTN9Z;NnyKn5Yf*#e~${#q}Gmd=l11H5tanIJB(^
z$ZSQ!_j7GVglJnoa>Tq0M3cWRCBKHYR3b)Mly(?j^XHk$?qtq?yU`InvT#_Z87VlP
zVy6A*GlI@w`CZu0)pGT|EG-cQ_wUdSO&xt?N90tXi23}3*#HgFr0B|qFff7m!3igp
zJg%t)9DFCQGcc>}RU<ryq{vBRuR|*t8y=N!_6wN-yBKG?fmjYTtaWQ7diu@4R*Uzj
z-BY|ZDgsa=X8V4xQ#h#Lc%?{=3RHYVCikjXzx2Av_3~z!P;+Am-?d|^*@ttc)ngyd
z;C5xK^C{v<{Fe<7JZ5r<lw*>TbBPc?;WBun^utTzGt<NttTH{lA<7hPpS1zQ{>ryK
zU{u;&{KleLF=09#9o_tZhM$h0?7!4oxVMlk63c)FzN)mVE`WzD^>eC|`0ERIaRyF~
zcuXJ))J|Jx-k6G=KrCwG{n7%>&aKmzPa<(@8!?eG0sO}*k`o|+N{5}Eq@@=*8LS9~
z0iHD8w~ya5`aemt99UO^@YRqO(DopJ&H@{K#xK>|M^OeY`goLwW)bSU*@+urEINMp
zr)UqQjWq6g3zS*G)oo<QkXDx#&-0-<Zz!I&U#EiOm0e!YE*;K9N0l#HHVQKSA0vi0
zzyK<MHV!74$EH+5qZA?2<c8VeM}Q5;%a8@4aLBV?y`IM;N8<$#Zu?*IXZrOE`#kg(
zaR$m4PCR7Zf%}Wrg&>YkIaISbcN}VLXarQaf<d__QXxt}7f@eibTsE<^Q!cut1+hs
zhPiQuMT6itV^hR;9owZ5^Xh@rKk%)UY^uReaRO#OYJMm+1)!29-&3_?8H-^*=`!Fc
z-0oxB1(lTAM001li1{jN7D4gz%P%1>cmg)?K(L>Pr}aCkvxVZaPjsF3VL`iDm=kKU
zXO@1}#UPj&*#PG&+mkZGSTj$KPZJe2X+M**Cz7|Rl-@?Cv|1`utbnp*=C^S)QyNux
z*h${7$*2_9T1rf*Sg`Y#DCxZ4-)i3c_;Il=Xb82ga<I71-4nay&7w?v1ptFg9lbI)
z;P0NnDgC`o2Op5WBx3RDR5*slFEJ||cVO#2xtZU+v6H<F#P>I_2Q=mgcmO1G+1|H<
zI~;?VN>U+Pcb`D18%Fq7VW$|ti~mQ-bz$o3Jd<9zxx&nv8}UKZdq0S3{dk}v`HE;O
zkd=ISF3GdOI{P}8F3<HQQ#<far^EaE6R}Vi{dw+4aCGOZQak4m+-vM0CqLDEuU?QE
z<zK4k?G7UC))}5OFuK6JrT@Rogng2Jth)W%H%F}S6%uDY%#f<Xpu=}uX7AWh=<|tT
z_wDlhxAY9-C-1+fofk<knO0tIT<j5IvZkv`GRG%sLb7MIPq#QY2Ghqrm|J|&?P&3%
zf6u+_@GZ^c@RAlE|BghR-0#K1)fPv(1m>S;!OgLd>Fmb>BJ-Rfl%MqO49<$&j|h^7
zTdP1zt4DZbu5YkvBb?s-`E9yMVliw-GE1nt(*6vPcV*PFj-?t)3gOvYG<)MryhZpk
zlzgVZPIeB-7_0E9P)73VH_qP}yFHj{H*)qPSe?WR<$lSGBgA6b(a!-BK!x$f($*^7
zABm6)Vfe%m8jthxh<h7${~+aW-euJxui7${N2_6(h33*3o#6rmi8CVm3+m;+zqY#S
zM~)NG)wS8%*e)9%lZ$I+dE#$(?2cetvD7IFv^WJK61KKWn#!$Ty!H}TJ&C=^JTqlA
zTTS;K>XbrX{n1L0S}v_MYx#FVloIjr=}Ki{le8&}KTD6uz=y2w4Z_II8jrTK;9+@Z
z{9G5~@t&O9DFJ)6Wxhg$cYcT8hj*X1O;ScAS<4iWlb1ks;y%R}R`z1}t@S1y933r7
zYuR>Gc?*Cn-#RCqh=uFuvSd(A^}ILnUuE&w)&Gq%6<W<i?-h9OqJm9F{NuWBK#^fF
zZy;g)_e*}S5h<IK;kpi+?h4B55j&$FPhyhZ@m?W#C26mVZU)fQOegruG#m5V6XCau
zvs>F1bwXDZkGE{p_j4*KknH%*X%!V$eG=XrukeF4$y-eyd4_SQ*>uwJUTc^V-t}h7
zwG%g5i|JRp5yf(Lp}Y5Hb6-*`U#Pfvs>L$;tiv;xgTf4dB<pGM?qf%osheHex+vlA
z-WlHFbr1_Z2%@jm)dusa^$>Gte#Bt80V^)iB=$wCD3z~n=JP!_faGFiyDB<m4$7X#
zc3+yT>uY(V`SW%1>{CoaPC22=<L6k=s2GMIQoI8L^QbrxnhC0BC-SZv3RtNA=VR~(
ztpKUZCc;PVgr-+uBf}Szmj6)L(n_CS5Ba*Y7An>!nhRk}_j}3vkm{h+A9c2hjR7J4
zB@atug!K%@w;^ZKg>CS`CiVG<qvqxxF82)0Q5#jSzE>Q?y}JW|9)1cv(u1FKLx)P%
z>S(RK)jEy5lhs1RHQ`K`FrRqO{k02s=C}w9$p9}mh5FlwoB~tMQ|qZK?H^5sP)?Mt
z5+p~gKdOJ1Bk}zBc^=K8eWL33H^zTD(mRmMoUnx`|3Nb~rpEpHnTS8cun6AP&;jpL
zzgk?e_>SsGcP*;%HVq7Z1D?MgFjxkgC|v*ibX{aAQWozV7?9A41Mb~FjOllz(>w>#
zLtCL|z8x<Ed;?zIk{-$s!HYYYH{Gn<4@}8dU2BkH0u?0dHex(ZN?U&K7B#?uxdJ{N
zG>~uYr2_W5<+CoTF!4Ds45QMIJ81bpb~R9Njb0GxXUcCCFGYzgU4z9cf6|&Jj}BW>
z`Xl41Na2ItY6ca|hIqKq-2pteh}4@x^)Gjzx8=sPZSEF5W8|jQxj8w{60+_H#5rKH
z=NfA-dA~5VOU4enB!Is$_bmsEf}MkpkW%$>*(dMq9?IG8rQ2c?(Wb{Kyoy_FNErSr
zubEJ^hU7*4vuz8|Z2)ZeO8+RzKvh5EhJotRCSaj)LuDwLS0llDE$u$p9sdfcN3{4W
z{R1J?ijk$Fwxa-Rm_l1A4u^r-gHNIJUYjsD7^RDKO|ScOP*QgF)#x-=L(5_vjnr#w
zQS{qy5M*BG$A0wN5Pd5~h0h?5UypaaHNGCzygwVnqfKOXnjT4CBI~g``s?p6ZSNS~
z6<W)renVFdxpo-%dW`PmSFy_M^ZoKrL?O^KWv?KDVYe`x@hZ*rx01A4$dCKv*CLo$
z=zbU|XD|qp5!z-09W%lw{2#W$Wys4V5P3Pps!5_Gzoaj;%fSDpZm2(;?w+?Eq~Hhx
ztqrEgt#ss_6OaQ9snEMry?YxSsIQuPFMqM=K(5x=#@^J~ajhPbki$}RuYNQRdwH))
z!h2i4n$_mTA;eSqYo4ekm$Sg*<cv9hNuWnE-){9|G3rm1wWmcwxGFWDt<A4qtbEjL
zw+kyQucs8b<=`7r$kd9jW$ooYV(0Q-zo=WU71nS5my9bk*mFHjL0j5i#`oEKu4k&8
z?pk@)pZ4DE^m}ePVhc#%EGI1SjubPf+>c(2ymai0S`8{|avNY7R>`{iSCOE-8&mJy
zdZ0ZolU0tC{-&$=w4`=v^sRY+qnfPCugD^`f%_oi@S`q!mmU1o)L6u$pNGBg-@re1
z3sf$S+jo*jN1R5BXkb|1$qR&=9YX4n_KSH%XW$`MxcSnY%M`^;mPFGKTF{<+S+^4e
z10n<FMU{rMrcCFa{#X=sAo&pBQM<th=>eEAHIbydQgiW3!h(6@V5s>%j~ud()@^C}
z(yddU(0#v$u>}x!Iej;jVDi*>WJ!@|b+z<Z<e^I3u=YOPA&Ol%6Z4dcZ>?LcDC&5W
zZjz+C8PNPm*i09N&nssSN|0>ki5d%QN~$J`gSz6xsA~Sb8GO?uLBb0o#s%1%08i|D
zo#WH<H_I0LJP|j()@cXG34UW_ofeIOmYUhwmLnCNTH_gMKiSf>R>At?PED<Fkwm8z
zdS&hsw(xs%L8;c?^*h6|{$w}8v&$@BmbsHx<DMj4PBUjW7yFL)rUzU|vc`tB0u}@n
zE`=|KC60BN)wOSR;vgy9>bpK*ATdK91C)L4iq4ZIo5I~Zg;BP8%;S%;P!|lSn}l`D
z9H+&NO?7n_MU#KDcdq3WttBMXCTX32y1xSys0}cJH*tCNI?~{w_*Vz|CfcSIeK|=$
zz~j&Rb8+XEE=W*_Z*KeBbrvSC#*W`stIi97S|4N=KS|n6{p&LT_Rge$>ZeBrkgy2G
z`qq@Q2tY4JYvE%UB8zxZ$KT~8?Q}fdh+!LM^ogc6wUCu?C=Uv{eU<AK5{Ux(a>fAJ
zr+u^lq&E+;{!-C7kG}wsTe=^xk9*5@NUHB=hLaAE)iJ)Oqoc&bu>M>(n9Y`HTczP^
zMlAI67$r*Ll+Q=2q}qz#xfiqh9nhW9a9iU(K}MRLE)2lF%}Rzh#QijD^F)4->p!F{
z>nlO(!7M4~eD%7dtucrY^^~#J*Wt8~JW)V>;r5d&Auj>og&yiH^4rKiSFz6{_C{Ay
z7YzVOzP8&M1}SUYTj_}gi)>E4Va70Iyb92<Z<}s}E_>V3C%(?1*L-)2gnD=V@u-pT
zu438jBH`UogQ9)F>m$5Et^}Anu%%a6$Yd^)OreD&xZK^3_eh~du2wh8Cc&qgv!>F1
zI2OYbw5g3PETJ8!W_(Jlaov+^1ii6N#~Ol`rGFh7TD)$>3)YgIKMW(EYHfJvRx>c>
zxuTnW3!M-;-R8JQh>(arbd$B+Z%GK*RQNU?*s<L0{)l|4#wY7+wi=9ke<kiU!m1G8
zvO+Os>7OFMv>!%M-FdZ6UG=I1DdC_2GhI9ESJ0VB;n{-EVfEeu`_4^?Q{6>#tba`O
z!-rAjONykc<wn}lwYc(!VzK+oe=v#BQkx3@#)yFX>(=r%r_Os<4IhM)kF$I0mQrPl
zjx4K+#MbWk(K9XxGOqpmLvq^0$B@SP*6GGW5qdGh`93qHC+ZC=9_HiIS+meO`e9q=
zb;|Po=9g<lOx7ha&)t#cl)%bekkM35?;A)}**cy3<QiJ<FP>UimoU!@j0gr+94NU>
z78Z)EGit8SW@9_-cRT&7Q{|gWL-T*=4*_hHDk#tO{SsX`86rkVmo2DxDPT;S%r6g-
zufdOMdx&u76%W+Lr|lmv*M^^imC;iZ)KZsKDYDGP=4GZO8m~pNjD6@^=gLmx)D0Jb
z5)Ab>52tD2>kU2E>tAW{!Qz#JC)kXQKs@`gpDZ-?-I0h%_^LdNePu{20$0@gFF(CI
zAF-bbs-KFSx!8os=E0LKNgTfy4R=DttXUHek;484^kONR2W2k`-5Tt6@QaV-vqXRj
z2D(Og6X=`3<(CoKVH%19Iex??jn!scDXJQcaOdK_wbOzri(yqa5}EKinm_?Fy@%jA
zYF!maW37qtsIiy2>Q!-J%UJClJUBmuDVr!c4%Kb5GVY5^Y0E~#*LQ}rD_<)g%czE!
zu=BreEugWTNCZl>de5q~+%QG|#SohG2YSGN2SX))08H7`q8O<{UpKy7ll~HgbuH-<
z47XDjInmSiq|wfg{axGrQon2cantUf$+4TDc2;oLD<X#pjyg-Z&Hc^Tr`F&J2s&&v
zwigL+Tl63RYgOnR$q+Rs14uTBIA-TxxEzFjK$Dou*Oa`^(7c;a$ftei5%U}t>?Z^i
z$;36z{(Pu{9s&J&APDl*f}0s|O9Mg9$-p<mG?{bz(0JTNfySH}!h?)-6uNxP-nApq
zy*AXSi40VLHp7FF27;x=sit~Q0Os%qaQqk8S#R)pZ{X=_^v+x0Nc*b~Acd0nPaw^#
zu}<~xZ=7TW=U*Ggzdf1NCrX#4*RyHX(5EW3-`4Z$Es7a7dcV7|@<S+poN5BpF(cS!
z8We1%4i=-E>x-_YQGI&ZmaD}A&f51XjJ17f{*kzhWX3E!_o$PXFvB~y)L~iJYY)J>
zZASe5){oL?=fwm|)sJZ|9)#MV*(Tn?6l@J^+N*x;J5PSieGeS8Sn2*+K3}iL1Mv0h
z*V4xw$`*W7d`v#8+XUI-%+x8^B-D2;Y|k%T6{|Eva=P=`G<qgkTSL5+$PnA;xuh@j
z7T<iY<TttFD0^R$X7bv_ru4aUgQhdyMpL@`oS*{PRg?7!4)X^?!R}J;`<f`RpCeK{
zK@>`v%hl&v!*mll7yHd{g&?zd{v<RDYoj0C0y>IZq%`iH4?`%uqMj!A=J)Xxv3l1!
zdV#p+fgPvg9qp$2)->boPB({&c7S=nbXtdW<QtCu2Ir5luL=X!?aM^Gya)cMxow!!
z;KD5}j-F%|P@YV<u+925WZ>SVk3~Le^q0*@jJoyYGc+9PAL(`a@r`I?%%%!&?T)T4
zqIC<?N!AN+w{cHu-D(XbP#5*s+i4)XSpMDJrj^BF4bh0BqoO1)d$&e?U)$A{D$WEw
z&%uc=Jb}|^6G<M+!`J7v2K9!g--o&B7R~K8BG*b2Yu%3rRgHCmtd`DoW9%koR9rd(
zWFG3S;TQ})ee$}a(-GWTW|DO$_^TF7{u=4rvfb|0125ic2mugM$?uJ=bIU2SuKlp(
zSx)z}c=ousJ0pvfedG>k{G74%At<|D{frqFS{d}oMDb?NAFDsO8kmclY>IRQ6m4<3
z*mCOAxQVmteWsS!Km!$02k`T-@qTxnE3OKUEe_BeujW<@1+dBO(cDN7{eFC*%#;$z
z4x5u)-u{^ycImlB>2}O^7`17{#AE(cAx&;ruOD*?f))T>dd_H{s@D`69bFy|hHfUE
zsvette-Qz>bixuf^8YVX>R;k=zu+{%6tG%K{$fGi^`2z`O`m*~0!Y*Z@--C|sQo#a
z=#&2An#>HYlk_KDJU>@W;agJ-iJFAF*B-@7H~#7FkrB}MOyivBpe>=8Pq0lPx$HJ-
z@T5=-z8w0%1n=YMjlT^@&iP(`(MW`zdSC*)Cj#`lrEl!{e%X~Dekq>2Q9S8mrkeDm
z>!5tXeKy$Y@Y%aRPA~^e@VdRT<(>W-q}>s^2gTcFy&#ML{SVrFoEFLsT53GSD%%ev
z=Rc|nF&)-bbtqpyZIYFQ63U?iy@B5D$SqeT6LMYXps?T(&H90`yv~#4ILLXudN(N-
za=vg&0S%p|jsR1p6Cc=npmt3j@pSea+2Eq${u9%e^#_$*|5A0~(HxEMj9w28Z|OJD
z!TsyN>?;m?;tBe+T3>m$@evL7nY*JhMQCG7&DDwd8o@Y2jnw9ijeRNVVs;svwf@nE
zU+M+itrj>6akpq>Dd&2k$UE^MeZt_y#7yJ)Klm>%5^XX8P)Ew<jufG%4~F5v)FE;*
z(@%y@47n%YQDi~Ua=NqNF0C=4o%9P{X_(xF|27tR*7XOV1}oPQU?YQ+;1xjR017Ht
zH3;V?9?bT{OxSn-HbKJgvBXp;N7Ci+RSnC}P2shx^@Le*`2PWOKp#Te9D%k>UUcc(
zrX5+NN?x2?@oK2D(&3T$Zv-t5mplLgx*%elA8{a;d8~jZ+hUuPH_?8i)uw<QA{hr<
z_;%_C$u7C3LqqrrLlES>^_uA+&2(=?H4B6CK%7B4(!{pty;tYRs*ZDs9EH95XG+;_
zjGBmRa8KGl-F-MSD!9;f;`kkog5{s<s)MBm4Als!I<gvo%Pbqk47f4%AzR}*M<)&-
z<b{#KlDA<5B_pxu@-VVTSxJ?E^Ay{v%Pf}`>5m?p1QRQAz6m}rK`!oULj7PfYIe|^
z^6Hz%@TUR-0)oc@*{v}xmh-c+oi{2RJ29miZ`k~u&q)4YI6e)HhwRJVIvag6^V5Jw
zy<PPT3bl1%ct8{S>Fw-9@wY2wqEMiGq}m&%T;Vb~__-d_$*E9K0g)4ACyU?;u#4Sg
z9k%zB`y(p>y=p47+gh4f5J#b{Oz+z6y!22D9#iIRXUj+dWM%8{)|?<Ks7%igF*oZq
z1E$>NQ!MJu6K?ft0p(c+V~3%2Kw0qa{T0`VEL5w(MK|g}hkez3cEG>5u94%33fJdE
zf4WHQrbJ5#=w?BfG^@0`TvM+y?LJj4mbqxqUzdf-mc;=0hZHML@J9NDAeB4dha%8J
zjejQ)7G`)66@2X+CJKag>t0J<=aa^1Dxzcmz{WD>4mAbhG{KsR&Eb+C*{#h>Cd%l;
z5^IE3xF`U#^-tXRVDO`Ag<AZbBaE$-^K~T(vB>g%2<#ajQXcca*ffAh6AQ=?_qC#6
zVT)6O!J1!<T69(Zl^4cg5-EYq4Whp^oe|<YH{^b5ubT3Q{G0r8EvIu<G|!iWWDD^6
zwxM9B3)KZTmhXbd*SF7!neBw!y2v9oZgY(=sHBlxX-5T=eW=tuTe)tpSzmChiipI$
zc}^JxrI26@-^uQ7r1s!7e{Jl<Mbgp>PT}CS$r&f~5&)1hmpPTWmyHK{l3OhcyKe68
zrFZ@t_?IXkt8U=nS;mnt8f~YC33*s^P?}u{>#`#0_+`}COXg?u`G($TVznLNPSFy?
z2tZPkJHNiI9Vhw`o(bpu9*d`9>M=eq%2#occ0x+ewd=8}KY_4n{`fLr_C79SX=f?p
z`%F;kEL`{9PV%jtypFEeS-h^kSvsxPP2tkozZq^Md}JOsD0Ij#O2kiovvW9s62>d(
zKp6n-5L}zL<|2wOIT-n!@%icC*Cd~WuxRxYt+Fkx-#H_7fT~xXFkfIN)FwFT$V12K
zk72EHq{e*L5rxqLi@v+lU5;q%?8z{;%3u|p^v-hR;QWobk>_0PMay-uxJf5pf=up&
ziQ4+yfO89S#1bG|iSj~FCdZ!e0nIe#8SmY)&^#F~QHdQ9`*3icXiewI^PGs#Zj3X+
zmydDjqrRn;fBVq5ejf7JRI0LA=5aQoVm?96$m7Z*%4wt#b`kq_YzTIoV&O*|(erX(
z5KG;U5&w<`>d}PPd7OE0BY9X1Z4Ce4Q0`X>Kqx2+qk8opPpo_=<O-SQ%3uH#mR8F9
zTG+o{54<=2DE1+Xg)(Vl^1t!C27asSV7T78m@%xSO%8*5<mvo|E1C+)@ZYA*-j~P)
z=U#C<hTMCtWtSS_%^{+pr5bDDPtydC{$IxcMVk?ISncYUmp=~ri1e*AC2sdO)Qe?a
zCtZPHf4NjkwME((P@X4AK+}x%id{`y0~dBc33ilhU|Zsc`?zmtp($K^#fxMoFP5M5
z$_&xzXtFRnaBT*jTjDB&G~V9G3nYiRHF}uiN|bjzw0&wu`}B<MuJr=?#wU45(UBmj
zG4gjCBOYkm?>TWf3?+)|jKkHc|LHeRxi69#7zSDt!<|Yj*#Z3uO99vS+9LMry|g1r
zl2J(=60-~J>P^tIAg`y~fyG_VM4lB+s=&a?`dTT=i2uTIfN?EmhbIBASM;|ajJ*Z8
z_Cq4&sWfF7Zd(1j!D8A%Z+MLObR=!Au$6bkZZi8Fqtf70XQr98oOmXM<{g{+l|$E&
z1RLinF|kS8@9$k%(>vXx^^Y}5`KXEF-q!(%q3&GB^jbwMh){y{PnG^e3T@uDPD4^2
z?pRE)$pmgWE5a3OJp$3Ei8{w7XpertN*@+9>{aa!BcZ!{nA?3(d))MC0_xv}lmb-z
zm@Wt$L;(@7cpZaI4-8=uU>0Zb*gBLbZx!MREMUrp45B_#tlz#kMXMc@Q#SZZJ#X#D
z{!L%d@G?nl4DXTa=ef!dY7Y-apw0Fm_mmPr!ZeSPQ#UK9(@`DzOx;4z&0wd9<@g{T
zo;R(ykkbpbk!L`-<m7Ic%|tuml=;Gb64#zmUv*x!$>wlATavM6?wa2ZCnMw=IyTI)
zkLl=$A;=ED;Dp@9-D7dp^)c$!x0BUnc|93#3k@(Ap*yp=MjAIMaz!&!$03hsK`Ua-
zpn6SCBH=|!NCoQ?S>k^e=JM6C-`+80<-1h3kvV0fYD1g?2#|evTHNm`bK40e$SIns
zD{p#LcdWX^s~=X_Ti0rmBrc+B-(?m^86?rz+w;x;8&%<Yy7!meljX|+iKmOpe2;|o
zS0G0P;^eGfCF>eD>_v7iZPogz@EtUM=VqO-V?9H!<LmQI$s%f?p~<Ev!fIZCCmim@
zDMC^e(-J7ZW%`p6wINl)Tz0o)?1yO*dPOGq&3}|ob94Jk65iP3#faCsiqQ3L21#uB
zZX0f)?<2i({Z&%(jWT&W=c-9d@BlRTB&#cRt#O3otkvbpYRso3!<J4x03$AKSq4mr
z-$Q<*Xh`l8&#QT2j*9=~lmFH+8iN^j{vsZIJM&d@+oxqCY2rfvBodSDov-|;u+Y!l
z3As&B!Ji#d-CR@Jx%6Jn@jmP0*?|ij^8QH}>k@y=yp1Irk*h`up<WTY{udRQ^w<1b
z9{10|tE5!h2iE^f{w+69`HZnf8f1VJ_d)HXfgSBmcPDiGZ6sFb{Nr<6BJI$W;3EA6
z{zV`OiLJ=ieUuI^FLSBI)Hgd4#dv*d9vgZ6zTvk2@HtbjEkq0Zn<3AXi|~`d+(}f^
zMZ$-%-;$xC;|6J>FOyy5qvGyfeY&@A=j}CpCqqszbna$Oue^Kvy@x;Gt;zl--29m8
zDU$QZRH8S^fik^$j;hE1wv0V0eZuYipTtqU^T>$J)l+iQpR90GjwKNKWu46(9^EM(
zwM9j8vm0MNYW}Fx?xqARemC?Z7(M;;J=Av;<WgAh*<B8S)T4mo(4}ndJ^zH(=%-5S
z*VpPoB^t0ERV^y<o0iOQGv@x)T16d&P~M+md!`u_zg3D!x0t%Omy)_-FXGxQaB$0I
z=NfD5*{>rTwV$K6yctz@VdbRIC*{TmTLRcj^thk+xSunh_R-sZY|r~Q-jM|z$p`Bv
z-`Fcc;z<mtW*VRrxORwR3$!Gqaj$KQa<$f8zg^i@l;YrvUoW@l&!;s@I-B=oFSA~*
zfD`~|ux(0R)nWUEvKYBRibO|&WoOG_cCbNVigk;TkN}dKg?xmhFirTMt{>l5Am1m$
zSCEQy(%<LWXRZnq%Zpfa%N9M9+se%N_EH-jx1m|iYgP88i5nz$)EYd)?tj1a*5v(Q
z8BiqeO|2I^Cl5J6uVp1c&xE3dAZa3l&s>Q}<i5SG8L#JZ&y^7#)qb3dQ4jn}LwcY{
zy_d6)1M*CN#5%N&`0z|ytIUG%ENqwQUU{FIs<oiUmoX3qb#bG)S1`~YS(?lRcjB#7
zeHfhD*bq|O?$~~C^AtlR_jv(Se0);76lYrjAxro-|JF4O+38@;t5^%dk+9Nw)%AW8
zzWVjF!T~fyW2h!=5e~ArD}fXSouv@lKSD&l9G#+p%*Pz`(&7<62dLo%HF$vp>K=*W
z%~w6THT}9cNi8RB&gdgS`k<LnGG<=_$YrN)8<M)iY^C67V<%1g=9<DBBpVsRK7%mW
z7p;tCC<Arjktc%KeydC!JQNQ6R%5gPI%OHHG;yQKmyC>BJW!u7aq`2t;QVnN`_m}A
zgjwW}7nU_aj%e~yA}}P^3syKS@yRpxc^P>tpXa#;Wz&Ln!?}tgYHnT$Sy;MJYKzAN
zXp;x{-A1$suAIy-IO?Bx&7_pv4D}<n5*Ssbez)FQg>qNGzO1}oLNoi>gy1Cz#A8Fj
zme`-}cQiZ^$5qFr|N0XJXIG#%pcKya90Wg40a^pm2Ja%!aOr5n#SPB1gBC18w^7h=
zJ6lB-%~Uyiy0m4wXOPQQqt<>J%AC{bLJXMw^s3NbvAy`ff5l}I%F`+Yr=wacUw$v<
zpS5K115V2GzR>$fl}krEG4!cJgIo~W-k%)pb>I#D>A)z*qI<@`kV_}KZX%^{Q)XM8
z2;{qVo@1fpBj?Xuz#cXIs^?V12m)6r+pyL$#yPrnmmY)(<zz6sK%t(jXrz<I$tM*)
zbY!21c^4uFoJG#tJR38OH{0PPl*0<j|F6~c|J46FIXHRk5(|$h2xJ5S9pkgfTpfiv
zg6~N9`N(fS-!3PSKK-EV6RZ!mbz#Bk&?Oh3CKtel0+?)_M1=Us*6+H`H(Mf7#%ef+
z9!>vEwQnr7C0lPbQfQpEZ*6&P4xNN1?!rAe*o<Zs^xmGC@V1zOne)kBeBGcjMnl0O
z^4q?Ck12!51;T3OWTXs|3%+iWR65iR#b$36m=n)@=P^Zjl_Q!+C(d*IS(U@N^CdRJ
z0@WLG;=hmXfDq)tnj8=S&<%Tbw%h@T{d&`YYil-8!4O&<iCG`KbP5#!7@`{4o?b^)
zlXhrz;GWL+CmWE9l4W7VlOosYeys*EM0svH(P0BgbUwrJe0aFiQkz5&83)MLMi>>I
zsoNs3<>@QLP+v#IuW!GO&W2%S9>8YbS?6(}R_DX90{WYI^&xuL;?@H_otMb65v-{j
zy`*uyPSp_^;Qf{q2&I^Q#WHQoyP1ZXWg2?SXy0@4sAUgm(k-H0tXv{`T+-})oFz-j
z<nje1H=IYK$KDzz1hogV>=dL+3X!*xz(Cl5n?C1xmk!@Q`hbV$nWt&FdgNr%-zAYf
zd)S5Y`gS~-yO(I<`I)a+-{2j?)$;tA4;wu!mWwf!ey=5A#h_3-_j4lkYmG-D>snGw
z!Ic{&l7}f>ZC1gjtJWY6>S6^EwClabBlCzMuK3^6^Z(isFVIrmD!g?@<Zjjt7c0F}
zb{0(C%>OiFeK3lQ^0mFkd!%B5;|=Djt;dcM>xbll5Ww0L5rbEF_f5y;;p>Nu$61pS
zEr8zj(vjVynR;_Z;v*t{<Oj_~9|y;M>lS&y-Gsw4bbq)=()AD6cb;uo)(G--AF(Bh
zmQ#E?q!UXkQs(~r4+S(`rgRmtO8=8%m~v^qdbks+dFV!?x*EIoU%$Eu(qBcYMtrAZ
zxIcSNl*Am5mUjw>f_Eel{r8<+HdV7D3$VG1#iy$=_(x<Mv!B{Ds92A>9p`;(e?q&S
zY@ksHf6IPG%W|*UeG^k7p}p+!Be>+%@P2jExyzWu%?ECVr|xhi*0u8e?>sKUI=Ik>
z5xjuouZ^}>yE(PjlHeUNvCU}Hjq?5Zu?E|2j2Jr?od8rbr+{^EJ!w7c3uveT1VnwU
zkRK{|#nj&Z_UPO7?S@6&ob&4pC1qb`FxT3aSiX{1me(!u&dSdjj+*>1rzEdmV?T;2
zj$F!@TfE$M3U~S0Gz`A+tl}8I564ok&dM_c8>TS${qP|$)2$QQ8=JP3P#0M?<1r19
zxVJ<UL}Y%(dBe&buMnu;Y7uybzVYV{n^z&QfjXzAjw%TD$(UrRnz8;TE@};QCHPyi
zoyH6WSdM#$>rm)<n9nnj$rhrDG8_c92XEXn7M}ztb=2xiE-7Z*cHI}so}IEN>&%V=
z4|H^9P=VRMufjwYqe?@Qiu+5|s?uQgzqtGVOgkH#L?n&l+~tI4Eo9M|5jTzX9p!1l
zD~?9vH-gHu_=VvpD6ElgDGaYM)G=Xa{nQQls<{nC*l>vkWO{ckT<f%GgWBa9o>qp>
z>@bu$3MK|^LVQ$3B!e6%+8W7+wUyDq)F`Sf3XPq6HtwiuSgxIX+x7CR?wak+eeSO@
zt%UIoame&x36-5*^u)x}U6MKmE-!*NMDb<)vo>g8yv5&*zY>z8!5D$)u*hMl9W_o5
z{(T<+Abv?}NN*-BRi(=-Zy)7v{pGYFD6ultc^(#z9|Oo9m&!D6$utE5lQR+77Nb*t
zq>y2wPM+&yg;{>1GR^onw@fd_Rgod&xG-K!)%`HkHXI`$PNdBfUa}(=x|T=|*!AGj
zdzlUoc_I5A4XrR-g`7;!RDG8I0stJy|GWcxT0Oo$wErdT0jKw*U%NlAoLrQkjs{|c
zXrp_t9R+@<Dx!9@&^D?h7QWbIu~`S+DR<f`|C_)g<L~tMkBn{KwHZ)bUfJUjDxa8l
z9}({XP_Yb_l8l3jcu~O%a-=a~11@T^-<<C{9IHZJlG^Q39rWN?_BZ>K`ebS71184f
z0v~XMFZNnl6>I7CM~@bKCm4NiuZat#`)FHL9-(}Nrl%L3BbvCt7WRSrsQ4ed*Tje=
zOhY7nB*CZ3-{`9iD`xv7B(cM9WBbH>(njm?QtH$`pIkQ}=7<_uU$858x+=GA)(-8g
zHs}3%2r#U1<rEVT-&!(L>%2W|!5u@4cS3RznQ*k=+$nnLZhHE>cw2G^6XD1RQZYR<
zF@B637XWUr`hBDTp0L&Hdg);a06P4Lc6I0SD7hD;_?W1m+fNLD4ijM#gq{-T--+C|
zMJOgXUV%SUYg9H5c<v7!7_@y4Mo-zMLtvoF0PorIm!>>W{thSs5sB~#bH{EZDd+nh
z4W4B#LBeX7D?cT2z=Xn=rTWKb!1QC~5IMhn-Wd@v6r+T46_uM=FRt>JRXI(@B3iKR
zF@xn|S;pKy9b26o9f{3`GgCb#?bXc{*TInWV@up~E<A|?8!$)JVM-fYfYZ#R?GAjn
ziLGHb^%hWG|Eym3j@X60)M{!`T2L7-;!LaYz7jUSi96u01KAY6IbT_$s_dYu>-lRV
z7`Eqce<)ZXb4<akaot#v-jjI!Zgu<2=Z>!M<WZ=R;VAN%hg(f87j37=8^}P|G$xs{
zX6jt?V(XrMaQr)$SYEu^CApONQriEvL}khS2XbWc*W3-OgxtRVD{+u`=k{Y}O^xx4
zWlF>B&Yg(n88`jW7A19lSRy#CpB$8^%J~CdD69V8O9gbG=mrLa?gfB2pVeaC>bmT@
zXKV&h&<{!{Za!f)NcZg-k<TIyL#8+D&qCwK;yy#XfSqpkaJ%*vBogwTP8JYD_7EJl
z9bsR@8J2v#t{`j*f+=hf;isE@IqJt~K9BC&2B~@*P<5g8P!|u>e46kbM4gYrINF*?
zxIfvYw{iEhs}yV2msY$}cruipKPtqrM@g`l!?&bgNw75$4`O+?G1%8y;LWoi_VF_H
zlV|ke25cfi^q0z?A|%LR!zUeKUo(!VdvEmzilE-OB{a0(53D|q`;p~*&3Gkr@LB20
zN45o!LZDwz+f7uEJKK!abOs~p=R$Fb*@KlEQ*N0Xm&<c@ArhOVaIB$GzkjAeR);e>
zSolpkVTDzDq5`kCxNb7VLYs>nA7tp(*E~w8M!uI&1OH3+V{6~><U}!T+02Q}c|N+o
zUG4Qy%-g)?U571H@@&LS{EqfnuSxzg`1gw3i(JANcZBs<564M&!QR+~v8(2d_=&;V
z<&*CT#hxB+ddPsTVLYou4}&G<X6(}Bl?Hz+eaVUH{}_6=Mm*yGBmTKgN~PZC{#c?G
zcfQLB;*(wF3)50V`HUkI_AK6QoxVxi7&6s~l!@K-@gIDYaK|!GUBXMDCG697S};Oc
z&C%URE@XbDX+weq-y4;x|CgxuAMyI4i@tzY-ts!gkEWRd6HOJ2n~r?h1lEx-UaORA
zx-^rlbY9$k`E21)PyI;J({i2s-u0c;oH9QGe7~yiijnOqLl@<`7#q(RJk<|B`IRrw
z+80X^Jeh|peC>nIpSFROdtbHwf0Vra>DY-p#C={C{v$exDcA~6X%|G7-Ey}#<rCqk
zY~!KUl^TLK+rsH%r|zw}mDSLjqTH=OZnX*SXc5Y<%dxz30Qj1`O2-@y%G9v6JCBxy
zU0(m>oH2LPND|qEk`!QRVclv{ScUNp<_9SJ+E9OX<PHYDY2`n@#*ZaSWK_?K7iY>r
z3s~cJ-GBWKl4~A7DO9Q?LJ1Kmtfl;;ax?uar*<nu(UOJ~$qxUKi9Z0hi#_m0=6wv*
zzHG3)014=cx>w<HKL1G7&uwgah4od0<Y>}Hki|s2ykRR_SQBZI;+r2nW6xXjJ4I}!
zHcxZ+$H#u+%UaRqmmjcIQRF2I|AN<-U$`o+K4xc&`_1}VZuXhdzb?t%H(J!{O$h3V
z;H95$mY2kN{(7t~H7161G2=OMsWIo!lre47Ts0>DdH;@E7haGoiMVKR9M2-41a}nE
z%}2a*Kzer8HrvsdR*X2Y%bnEnX2*q(y%3|tTZz+K_Cz2c2FA0Gr1*lj+4Dv!>-otq
z#pN)`)VJz@)SOgTN+^_c;vnm-kS0Ga5H$-eVFUuepxX-N-dhElhVX|1DTt_!XZTT}
z&9mC}vo?OQ!x4Rb4)3vy0lxZ-7=+ws{zoF~@p;zIJYv7D25~sAa$;w@9av#uRCz4v
zM_=J(x~*PfFiNXc_Ddd@R{Ej|s%YkvxS2a=>fMctm4FPDTO9*#tMNFh6hn2?2m}E6
z4*v6Nnxxo&0){p?bw-5EWi1;tx8eLpqGLCcgNr`zC8AiS4Hi=+*6XbD{=$P))tuXi
zIH=96FAFq$)<Vc0Ix$~}5<J7R=>u2fAAL@in|D)1o69y{&uW^3Onu0-9_uXefZC$Q
z9UE;^Gj|*9ODLkE>7sUW?|J5KeEv<k|M0))7UO9<??%V3n==Z@TsrB!kgnx|Rc7gp
zZcL-uaGq`aKtUV<if0(b)V8>Z!nmXGR}yQjJ!10%DcB@R&Mg9e9LCvnkH>(S#pc?I
z>TxELCGii!>G$TQyR6`+VilM4U$TI4jhTh->^wAtlwi4ixX$(_7N+aPmUP>nHg9rT
z#2%|zisd$~$w2}b2ldI8yr$>|L;~bp{1P%vAc>>YWSm3EI(gEk7L*W-Gn2Z?^|$?n
z>q0(>s^UKMUXDyYp!aL5hO8tPqW|aw@r3p2ytPxF31k|m-2IOwZez8hXv_w*ThuS<
zdP6pemL*{EucUSPB?>AWl&E_o!5eTsxSn_4L{%r-Nd)LUUb|LvkBbxT;ZCd-WQp;Z
zWUHhFV1Tu^0QGsgkVoK8tIU6fSJx~atj|1}k_Ponjgmy)eq&k<Ro&_=-mxFS(a_gM
zyWm%Mvlm}IqIq7SR9zA?vGe7>MFl&_6VvgA-MB0gcqI!aX9AO(ArN1&K4%{g=B7ad
zHCmW4PZ!oEGyG;u(8yfY5M9r*gK}I1DfrrQ?K#o-3kdC(QCzN#6&FA%QVG28+4K>1
zV0Z3(cD;hv$gf{cN>uI&16xs#``YA#uPyEIPb144+7F(%#-^uthzJ<dWyg04T^`1>
zUi~Dz5+xE`8M@y)NX8K&h-gZV?Dz>3^}lr6hy9eEyhfW!e%JKTX{nmXrz-}+TyCY&
z!X7cEB1f#FV9iWOip^{D_ExxSZOCqr{y%T4EWe+1YEEJb>Jt37iY~#WV+FJq`Yqxm
z!5IB+NWx&fB(dyE41(%jQF>Dvk!y@!dqK9QI(10+w)Mz8+2?J<AIgQz$91<xcq+YJ
z!gViKDD=Kvo?i*^5EzIb_2qTGbb-2EeR-_Dcv>*^zF76%VL6%kxb=};tafGO;C+Kb
zo%%sCS>zhy#WK8Rq$&j-d+?&umfH7m<X(VZsp8I(24LHHKP(+|(UafR&_Sol)n5GK
z_7ByKlWnrW1*CkM=V0?!{m8_}uSCsFFK*#V_r^La4Xc53L34A5QEI@_&$Y3_lkXI(
z?GCE6#PG*WkGDIU8CPZYW+gpI4gT0oXpGm55`JYzC&?*}k9o6D?A^@(;i=;{ECj!$
z&8C9IP_nb|u{!rLK(gU9qV|-;pCnI?X=hMW(|qsxa!eW~(b_`-Pj|F;`6zbZ%m;pF
z)s3M#>DXOeUytO`1#9JX9cip>qvJPIM65)wUV~X^Khm(&AME13Eai14=Cx-E*o8^~
z3H~76=DpeV<4?X}@r>(*rps7OxoE_Na=|4U=$8*~{uF^H7TZ&z{f-to28pRXn~~vJ
zlZe=gMN{o8?*B2d)cTE09LG$9Yl9{wD!S>KME@cF^Oj&bDZ~03nP4h0tdgS60|{C~
zQOg=9HIHoW@3rLLnanm|<tLP<8^$?rZ}ejLe{*aU5BuUBV*PLH$}E4>S^$WWYM8CQ
zStzCzoIAcNbe)Ra0D*${-9l=`Z2)!rVlB;q<==yG7zj!NtT>pvV^ttZ__^b+Btrx`
zwymjd=7_;yqv^cyy{=%g-Crq#D@okkK-~};hyZ%_zqscQ3&D2!caHPMr#vsnF(%-`
zH73W?NwYI-#87{ZgbqI4IvMdl<F+)Lhpbh-nc=fDr$*}fPo{!E=3UcsXKaHT0#C*z
ziabZ#zUjZpN~85{qo>8>Wy|2J`d8rf=Zu0plsY;N=E-knor#`?Z1&(9=a5y|SyE*&
zhApz@fekgM6+wv_Z8Xg`-4MS0gf6v63E{=c4K$d*?INAxdB-j7_crNeMOS`wiOC9*
za8FcPnrmtMk(9S0x?XDCt7)Zx8oue3Sqm=pG)FT1f5+fSj?(vb&hN!dpTX6P5Pq83
z%V*;Tod89a*ugNr_P3s;ESD?*pqke2rS3I>XO~u(Q*Q$-rHi9;sWq^e-=6)~vW9Sc
zu2Ip)a!9i|n5jJZ;o9-1MU7(r4WS=V-120Bl}TkFjX~s6<extV_qV^gQIyiIiXFIW
zqYcB`uTuhRN@Zp}cdTzq%Q!hgrZ(gDdKwPPOpUu{!M1eMr}`;j@;u+JzgBZCKwJ7|
z3mnppBim~)?(#$~A8G|XVyKt%3>Wtn_9yFA8m*}|it1<8(3=@0THGsJGlZU9Cfn9E
zzN$}$isWW1sih`L8$y$GddTYt>K=H&dQRYdTU*n_w`Z@&1Oth@*$=^R1V$7)PgGbI
z?e>Hr!EaXDa;)CDYX8v}_VJW3A#ZMRPj#8-0X_P=JYoLlDxL92QcUFRnA#hpoH(v*
z_YQx}^4b;C#qz(KyB=D;mckjHfo`>LaRg)?pvZF>1SqVkRtv{#^|aSI-=}fvX@7L2
zLWnLV$2v_rciRYUV^G1^^|kItB;|7hKMf*k58SJj`g@40)9PG|>JG}#{m}_pw~4~u
zfnj(%>EX}>^P_Jy4o7$LM1Ce1Wl$Pf4eK@($bE}(rnfdKjJbeU^PN6Is7?EM4ShNp
z#vF!9U!IG7SK`~&TS>)}#OqA+2f}Wb9mRiz<f_125X@Xaj5CR~*^WqZ-%R}Ud>euy
zKI-D>BDX{3Fx@!zlKfv@2ejbE;U;JG-{Q&4Nxf<FL2o8x!RN>ltr^m#8qkQ&a951?
zEN%Q>%TZE(qUp_f+O0FspRX=|bZ^hA@4vdZ9fd{D*R$>Q2TU#ct^U<H!?Cl-^0)pP
z5m6k`*L}0%y15*<uBEsYTlNCc-nZ5rCk@%Kp#ha75;l8c6cC4=O8|s(2+fD`4FAhS
zMfR;H9+2<W4K148`r#;mtV)YbC#PH{Irp;ehd@1hqM=k{mdw_{d&PIbWv;{O**7vt
zt&-BMA4#|mu|dtP@MVM1V{9J{3GrDy$$lSXC=`<Ns@aXmsvGaK?TM}sOE%=78Bg0v
zlZ_H<N(le>loCt=)^sSrGj3Z-nFjKMUFq{@{<vL8D^`GP%|9!jH0~?;0C+gSpJ3E{
z-W5lx?#ftw+;K5<b7hCKWXX`7SkB*SkPTTVR9^^(ks6ZfNdxTRYL-$r+CzG8e(x6=
zdbipiUv@$&jsn$VU|Q;(jguoGu4EtgG(~|##%Q@(^ccOL*GmKLA$j%?_fho)AL3Zd
z!@p)lNW#j$^*+Rier&Y!m;G?R+IAM`*me9OS-|-__0tQHo8jcPMoKj5%;hIizY4na
zUl;duInO2*-eoFQ*{o4HwRt-lfM0kKT=EynGn;M7%9$29I9^x3Z7Njbe28Y6d{re>
zdPy^gbi`*m!p55E@bzyyo}-w>(>{xJFw#}cozC?AxaQ3sVQgDxsi(q1=c9`_B2=*K
zj}N_$<lk6i_o-N{&4w{MGDEDjwHfcVY09ZqqT~^IE8B(6BQBqeTzMU8Z8+|5$z+z2
zu6zoWjlkvFpQ8~XJrCD|tp-8d_~TiOp>20O$bHlX(Za1;N(Kt#c_->;kD;3C{eGnA
zG&Kc&DxDB5$E-JmjEh#AGJpQWl&QR-3XOy&ClWs14<rPN3h#i|Jzg~>jHb6`fwFmP
z^rtiy<?iAX9gkOV@?Nv>(<($%p(YoF;RByjLSHi`a!Y&{Ozwd;dMPP%9s807wD@OH
zI`PXf)jOH{`kTF9%%v5n@N&L&2_tZ-Ioo`x!B>ey+#jy|fw<*br62F$%hb1p%2@Y<
zoB7`ay9=VE2g~|dX;QAlsP)QN-`RzKSBugfRd!0ftZw%A87Tu6bcwV6%TZ0>?UG%-
z6C4}Cx#%<<tH==OIHJAsR8K#<?XN-Nk=dgOQt9j<pVi6TL)sM$7#*D@g><)Fp!Q!H
zG!Tuy5wf^uZ7Q4=Fb9}y@-CzOZ4MphH_Lh(p)=2$X+;1U14p{sV=^93U;lXbm<K29
zsh(<hp>04-+a@0-{9=a&k~$j`4ADNc-lAVP!YtwXn-9zQ4o5ftVM3CkddIlJAab{D
zVKil-bcKeAIz2YKPJ0>A2`lvexmcC|xe;1DPvdbVd8!`!Z%C;1gv`N)(eHpye)I`h
z+jim~-frN=Y5^*}@(`^lO@}3h3+8x7t}oi!;!j0=g99vqQJj1bB(-ut72|q;vtTxQ
zpWi<(D*S{uxBwrNJ^IC~S^MqEClibU>KvFSD)^6PF$n)gK;4=G>nuZtYW0IAq3Aju
zDzEv<uxvB94sUXP@5aWSpB}5|lqfEya{*&cj&Uu73n2oRuvrhOZar2?_1EnM2joih
znGJcN#$lYifapVBVBK;7itmggebJd09hF;o%nPf=wDSVhRS#!EwWF)JcXJd^$OtuO
za#4HO;wzEXMm<Z@6aF~!y>ou5J9*AB+5!Tu8<Rd(3x>ome}C}V9{tETHVRKl*Zt8U
zZI8u*lvpY^RN3hGg>wz)M~#9o3N=8Qfn1Q__?#>KxI(@L>je4t#4hM>gM4Cq6zrEZ
z6#P0c<8etF(Q#hX7$o!80-+&AnQo&Lh*Nl^y5Fqu)?@}tlZ5QRSDk)P6i|Z;9ND7F
zl57}PdoI6a%YfG|6$B8E+j@F&5gT-zhq~kcmKFtX^>od2YeEwJ-wH@mdbI)Bf%0d#
zU9=PYdhp?$oz8&NrPEa2XAL@o_1A*S=_C?ikcedK=~WrcJ)Zae;Tz_mnbfU>zQS;g
zjY6c;`?LLg<-WDwn`ot5S<N;J3}L*|IkT!+dLDz=Jda;CW53XxW1jv!V-387Ymtd`
z=<f6WJSh&pm^zIhMAu^gc*!R=3$}{?XFD<{%WZudo*K3|i}#?z?%z(&31`-03=aB3
z`J$(SNPb0Re9U&}LRI}EHTR9(o&1Sd_t`!ojL6S*ii)uc6Z%l94UVAC6njdYldA31
zgC<!@qM*V09T-_=sLvnp9z_}9RqPU3IE~s1o%Zr+{S--h$6OpPX#`Xat*a?Hs7Z5#
z`-iDKHAFK(3%f%!Y%ZHjDS3OOM+GT4EaNYyb`LowUghhYxFV(fectr^|Fv_SK}}|B
z_)CB+5HTT2C;>sb3KCHIr58cED+1D`2uLqd0wmHjf}KzV4AK;L=|vzkkq**Dg^&nH
z6A6NJ0=aST+&gn;cIW=SGyChzoH@^X=Dc%$J>~VZ&qfkzorDGpZ<|FGa{b$H`Q!Li
z!^$&1N*)oiZZSjBK==J%6UE-iq62%SZhu4+UZ<<v7@Jx0a;z_WQkE*7ru(F!Ad3>3
zY&cqCo-FzC>4U*jFIx<b`A+3N^-cPn{Ea}Zt9h~!i)^cYS-tscRpq<NFvXO%X9q41
zGz(y_pOgxU7rGkW!a831hLYdDxwOkE-n?=|(20MYnpv)QCvGQ?CpFQ7w<N-~kF|{9
zO&xK$=>lr4d%;#OR)E~3vfys=ded*95(Wx+O^K&WH~LdUczqv{q*i5-ow5xgLXaVF
z=NSY%F^p%RXGyZoj~h5&&Fg%;5(Vy*?Jdy~COSWNIDizPt8ALj+H%E1w2p|L7QeYW
zpQV5phIyvfgB}szTf~^z4)JxDe|lFFu97^1XAOU$(_jhFjd>eHHk0eFS=i#?eJ?_#
zeXxij%|=-UiONr;pRaqE209`P>8q51@@_Mok8PF5b7lG}MP&LO0~gPFvlPlbty~U^
zAVQnmFtI->$q_*B%DIR2p&oW%c<e?a-=Zpr>H9MQGZk1lGiGcJs#~|j`9ZN)PR@sj
z5|a?I3eE{%rB<@am@aaF>I@o|UkG%XIG{k6<M*1j?CL!%`Sy4d$-NOv`k0CtO~BPx
zTgM%w72O$grW=wF1dHy3B;dRmdl%<E!=9khB*UsOAS04X<~@f-7B_&49R(!JI<Ye)
zQk)f#tC)cHzk@23zkVzwaFi>0(*Uz_PDv!iz7UdoGP=A5{k_));!n7QS++S2LzP!k
z{VZY*E-g$fD2+oB#IBzZe8oa0^bjnnw@?41W696$qXzXmc8w2y5$`JTQE-!QfLZv(
z9+|ybbj~NL%L>2PLeU-tW!?&BA!W~-#6**R(~K43;gyVAJ`tik-MJvZNa{k<3Fi$5
z79|$)A7t3<Rz<kXg?KuQe(vvB)C|5cS))R_u|#;_|E3}ay=q2{EbMHaT)X=%vOC&H
zqv*mC!NT{ITK!rX^&rcp>_hV_*W$8gxVnBs7<N&1KL3G}Wn?{}Y4Xj-gZL`m)$l8m
z!`2qMPNI4+U&St=hQe@~X6)HmeV-p<LkQ1)=vv&~bWNGhm;044>UT$R=BcoK6pP;V
zlM!^8lqs#9HbgVOKBlTo2sg&^RKxohnd~2poQz<f&+#1tJ?~ZKjh#sq7X6Nmo4we)
z*BX7;9UQiuw@{Cln&|kNk&n_?J)$x*1r<JOw6rymg_NbG)bekC{H#36r;`6fQP?p%
zazRtBuTxXGbZ_?C&w4@DVE_fc8KrqNI&&(>Yvv%{ADR#wnI1^pcHF_P@PZhoTTz-x
zTvY>@80%6LW&6#wg@X2Uduo}V@)n+BRbtfUdH&DBY++?PdM%C6<PWQYS4pn(pP-tM
z*xlGRRmQm3&xbVLJ~qAYQW3JQr1}}gq+y8VxDcgI=vQLkg57)J>lPoss?Sp{VG%76
zTGQDf;k{F!BbjWBhjzA&u?s^xK5s~1=7%@|b76ep{N3gw_Eer*Zkn849qTlKeWN`X
z(>^LJO1j3ici!Md{;@)dU9`99+2(64DgGSn>=;72&v;3EnesJAAdzmS#zc!s&EgV?
z3%vo!){kyFU$wj)T1=}FuuuD!&ibj3E5+8CLNkG?zxoxr9IOu1MDw>5s(kNWS-FzG
z887eKLm<+@!=qL=-3|Pxb_2Z=Jj;a9uh03;wjLJq*skj7M7Mjp+I!@<*4$|NDxA3a
zKxf&2IQzU|tMlc@sA>m+w~@`q0g)=1OEwj(9v7~RZDF3f9N@RqI${8RHX{*^VgwF6
za&!c^G^91T;VONK)#bW8O+jB0G|~h<tHS+K!yHn=wlkW@p}62ogUE=xjL=j>aIC3@
zh>^!eqBhOp*0k3behRX1PI!Gd_mRuAJV!8^jSHz=Tcp=Q&Fg}Tr;hEevx)dR(AUBA
z)9hYsOX7qvV|SoCTB{j6B02n1zC~uc+G`>tom(z*FgZYn((H35=NqeKN(#*RwT<qK
zky>&h4$1<De{<T^+E{(KNWId?WC_q<ZZ9d$;#&`O+2PzNj=Qzpxh`b$IZZHY@okx&
z7F(OOt<heP5*0U6TrY$Ja^dn2ZEX<zj`n0*%s-q@enA$*QPRW}S#v||V`x1nISmIa
z%3S0%48du20W(K}?M19z0$f`~X1w&_{WStW0z_A|;aY=-$)f$4fk^i!Xs5xXn|adQ
z-ADIB-?bUc=l+mNQ>E>*>b`a90i|mo`v?J?<3umHU+Y)`zxVGHPpWIgT?nw4KKhM5
zm$a^Y#f37qu|*nsF&orrTFd4F{YNZD^fBvCO|}+%bh4T<H7-QoY*c?w8r&)4;6Jbr
zz>F*9j@Hd8UtC?lY?1${*HzRZ#$np>J*Ab(te2yHwf}Za?x*UUmi^`WUtfpsK`VjA
z?K_22%ei+AAhtuk6Zf+OO`Gy&rX&5kvPy25My$oDhgWB;rmbSP=u7Hqha7f*F*#;B
zBchAHbpslEIN!f?j60g|9C<UOgS@%_rS#jL`Xjt=lo!4F#b8cD)2N<T)RVE-(*w@g
z)BAyDqsBe0HXmkd@$8z&x8-LS$YKW97HXtC1GnYK>-*6)&klg<0CxR+R}lX_eZUTZ
zzl!6zmjtpx;`Pb<-w+A{cw230zJ&Hx9X1OV*1TZ=j@K8hm(Z<uewcCPD*+~=#w98k
z*7qRQ2)N?iUZRC1PR&7+a1LtlQ}0%)Qh`+5U~+l}lI^(R1H;yPunYM*0DC$FXC!{w
z%2`X`cVe8jQQc-b*_~hjB;;EOyPrpJiSY`DqQnyQV|Mj1B~z4cWYLZ)eX0=a_NF6p
zjH5SIYd)tXT_~OND?ekLt6Ial#N4uoj`v-?UokHnU7Pi|#hbuMphV-xxD>GI%#3hS
z4Ji@g%;+_-nm9q}@Gc*cULx9259a#@4!6|?x5i}h3$UI@-L#lW(h37*Q*1fIo#8ma
z5SqbzDUY4dqAT~M3s&4-oZO>4^RUKM?ZX)F)(dgFg8_YOOPYJdaN1Ou7&-il$00S(
zz*O!c(-S(ejGwoWFk8}kc3}NmYH%qHb9gkB5lJ~d$NIrc!%tf_@56KwUxri0;ZRqj
zzKCdE(=%yxrTEY577)T@TVr6WD@THsE#@wI{Jv_FdJ#N=O{yT%DfMt#KohRL&k5~S
zNQ<jX8H1;>nP?mPosu@;fR+m~BOrfV%^?jKnt)ol5jds9<c#JUd$0o&u|M&t{;#b(
zVX<lRu%1t)cVh3hCj*uH&J5)_`j8nj0F<@K2?#k3hA`*P<Pj0BAV82gi0Dtrk-s<p
z?!f;~2Zpil7{9<b+-41v`Indj<s?E4Y(w2$Lp{{of<2fEpnz6Tl0~b^$}3%#N2@8E
zS3|3wL8H~sXjzVC<bMJD0^GelBmWxUa2fK736TEJ4WZtC9wDKweu00Df$B(wF)@I#
Mfw_LEu1nlM0jQ$_DF6Tf

literal 0
HcmV?d00001

diff --git a/documentation/backlog/OPEN-ITEMS.md b/documentation/backlog/OPEN-ITEMS.md
index e21d1008..d34ec994 100644
--- a/documentation/backlog/OPEN-ITEMS.md
+++ b/documentation/backlog/OPEN-ITEMS.md
@@ -719,6 +719,7 @@ class (an image `VOLUME` at an unmounted path) is still live — `immich-server`
 | **R-522** | **[P3-LOW] While the box has no internet, the dashboard's „Cloudflare Tunnel" tile keeps saying „Fut", and no page tells the household the box is offline.** MEASURED 2026-09-14 (BIGNIGHT F8, VM 333): VM 333's traffic off the LAN and to the hub was dropped at demo-hp's bridge 21:08:36 → 21:26:07Z. Throughout, the LAN dashboard (probed every 26 s from demo-hp) answered 200 and, polled every 2 min, showed no banner and the tile „Cloudflare Tunnel — Biztonságos internetkapcsolat — a szerver portnyitás nélkül érhető el kívülről. · **Fut** · Védett"; meanwhile cloudflared logged ≈ 20 errors every 2 minutes, the public name answered 530, and the controller logged `[report] Push failed … context deadline exceeded` and `Job hub-report failed: hub push failed after 3 attempts`. The tile reports the container, not the connection. A household whose remote access is gone sees „Fut". **Fix shape:** the tile reads the tunnel's connection state (cloudflared's registered connections or the report push result) and says „Nincs internetkapcsolat" when either fails. | **READY — rank P3-LOW; owner: CC (controller)** |
 | **R-524** | **[P2-MEDIUM] When the catalog moves an app back to an older version, a box that already updated shows „Frissítés elérhető" — and the offered Update is a downgrade.** MEASURED 2026-09-15 (BIGNIGHT Phase 6, VM 333): privatebin was updated 2.0.5 → 2.0.6 through the guarded Update after the drill bump; the catalog was then reverted to 2.0.5 (`a161ccb`). At 22:13:37Z the box reads `installed privatebin/pdo:2.0.6`, `catalog privatebin/pdo:2.0.5`, `catalog_since 2026-09-14`, and the app page tag „**Frissítés elérhető — ma**" with the title „Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot." The label compares for *difference*, not for *newer* (`09-update-architecture.md` §5.4 render table); the guarded Update would advance the pin „to the catalog's current definition" — 2.0.6 → 2.0.5. The same state follows any real upstream yank. **Not pressed tonight.** **Fix shape:** compare versions (or `catalog_since` against the installed record) and render „Naprakész" / „a katalógusnál újabb" when the box is ahead; refuse a pin move to an older tag without an operator word. | **READY — rank P2-MEDIUM; owner: CC (controller)** |
 | **R-534** | **[P1-HIGH] The off-site tier cannot be provisioned or adopted for a rebuilt box: the hub's endpoint token lacks `Datastore.Modify`, so every re-issue fails.** MEASURED 2026-09-16 on the drill box (`tester-1-652049`, fresh install from published ISO 1.27.1): the WG-registration hook refused as R-511 describes („the endpoint already holds a PBS token … use the explicit Re-issue PBS credentials action"); the operator pressed exactly that, hub v0.114.0's ADOPT path ran, and the endpoint answered **`Process exited with status 255 (stderr: Error: permission check failed - missing Datastore.Modify on /datastore/felhom-offsite)`** → HTTP 502, no descriptor written, no secret stored (fail-closed, correct). So the code fix of 2026-09-15 is sound and INERT: a rebuilt box has no whole-guest off-site tier, and the customer's „Távoli rendszermentés" stays absent. **Not run by hand on ep0** (fenced). **Fix shape (operator):** grant the hub's tenantsync user `Datastore.Modify` on `/datastore/felhom-offsite` (it already holds the create/delete grants the provision path uses), or give the script a token-only re-key op that needs no Modify. Evidence: `audits/evidence-drill-0243-2026-09-16/phase1-pbsdr.txt`. | **WAITING-ON-OPERATOR — rank P1-HIGH; owner: operator (ep0 grant) · CC (verify after)** |
+| **R-535** | **[P2-MEDIUM] The box's console still says „a doboz készen áll, és a párosításra vár" long after the box is bound, claimed and running apps — and it promises that the screen refreshes itself.** MEASURED 2026-09-16 on the drill box (fresh install, ISO 1.27.1, controller 0.243.0): bind succeeded 10:01:14Z, claim 10:06:18Z, four apps deploying by 10:22Z — and at 10:23Z the console still showed the pairing banner with the code `37S-NFE` and the line „Ez a képernyő magától frissül — nincs teendő a doboznál" (`audits/evidence-drill-0243-2026-09-16/screens/33-console-after-claim.png`). A volunteer watching the monitor has no way to tell the box is finished; worse, the screen says it updates itself, so waiting longer does not help. **Fix shape:** the first-boot banner unit re-renders on claim/bind state (the controller already knows: it reports `controller_started` and the hub holds `claimed`), showing „A doboz össze van kötve — a vezérlőpult a https://felhom.<domain> címen érhető el"; or at minimum stop printing the pairing code once the appliance is claimed. | **READY — rank P2-MEDIUM; owner: CC (ISO payload `felhom-bootstrap.sh` — ships with the next ISO)** |
 | **R-525** | **[P3-LOW] FileBrowser has its own login; putting it behind the dashboard session (traefik forwardAuth or Quantum proxy auth) is a new mechanism nobody has measured.** Filed 2026-09-15 by the P1-fixes task (B.5). R-513 closed the default-password hole with a generated password; a household still has two logins. **What it needs:** a spike on a scratch guest — forwardAuth to the controller session, and what FileBrowser Quantum does with a trusted header. | **READY — rank P3-LOW; owner: CC (spike)** |
 | **R-526** | **[P3-LOW] A host delete cannot release only the customer's ep0 PBS token: the endpoint's one removal op destroys every backup group too.** MEASURED 2026-09-15 from source: `tenantsync.Deprovision` „DESTROYS the customer's PBS namespace, all its backup groups, and its token". The task asked for „PBS token elengedése" on host delete; building it needs a new token-only op in the ep0 tenantsync script — a new operation on a protected box. Not built. R-511's adopt path makes the kept token usable instead. | **WAITING-ON-OPERATOR — rank P3-LOW; owner: operator (new ep0 op yes/no), CC (build)** |
 | **R-527** | **[P3-LOW] The catalog flag `locked_after_deploy` is read by no controller code — every setting is read-only after install whatever the catalog says.** FOUND 2026-09-15: `stacks/metadata.go` parses it; `grep -rn LockedAfterDeploy` finds no reader; `deploy.html` renders „Az alábbi beállítások csak olvashatók" for every field. Recorded as the design in `02-controller-module-map.md`; the flag is a seam never wired. **Fix shape:** remove the flag from the catalog, or wire an editable-after-install allow-list (a bigger change). | **READY — rank P3-LOW; owner: CC** |