BIGNIGHT morning note (STATUS), topic report, capability-map annotations; teardown layer 1 done, layer 3 pending

STATUS.md

@@ -1,5 +1,55 @@
 # STATUS — what works, what's broken, what's next
 
+**Updated 2026-09-15 (morning note) — the big night: a household's first month on one fresh box.**
+
+> **Ready for a volunteer: not yet — three things stop them.** The dashboard link still does not open through
+> the tunnel. A box installed for an existing customer gets no bind e-mail. And every box's file manager opens
+> with the login „admin" / „admin" — on the HP that login page is reachable from the internet.
+
+**Decisions I took.** None under the unattended-decision rule. Two things I did not do, each with one reason: I did
+not switch on the paid off-site storage for „Tester 1" (it costs money), so this box had no off-site copy and the
+off-site restore could not be walked. I stopped injecting faults after the ninth, because the brief's stop rule was met.
+
+**Interventions (first hour + moving in): 2.** (1) No bind e-mail came for 10 minutes; I pressed the operator's
+„send link" button. (2) The tunnel answered 502; I used the home-network address for the rest of the night.
+
+**Alarm truth table, in five lines.**
+1. Every alarm that fired was true. None was false.
+2. Missed: the Paperless crash, the broken tunnel, the dead controller, the full disk, and the second drive loss.
+3. Three of those were missed because a 30–60 minute mail cooldown silenced a new incident.
+4. One drive loss sent five operator mails; the household got no mail for anything all night.
+5. The customer's pages were honest about drives, and wrong about backups twice.
+
+**What broke, and whether the box healed itself.** Power cuts (three, one during a backup, one during an update): healed
+in about four minutes, same versions, data intact. Drive pulled and returned: healed in 91 seconds, data intact. Internet
+gone: the tunnel came back by itself in 9 seconds. Disk 95 % full: the box kept working. **Controller killed: it did not
+heal — no dashboard for 33 minutes, nobody told, only a reboot brought it back. That was the stop.** Also: Paperless
+silently lost 20 uploads to memory; the backup page claimed a remote backup that does not exist; the whole-system backup
+stopped every app for 8 minutes while promising „a few seconds"; after I reverted a test update in the catalog, the box
+offered the downgrade as an update. Nothing lost data that a restore could not bring back. I fixed nothing tonight.
+
+**Rows.** Opened 16, closed 0. Register: 221 rows before, 237 after.
+
+**The one sentence for recruiting.** Felhom survived power cuts, a pulled drive and a lost internet by itself tonight,
+but do not invite anyone until the tunnel works, the file-manager password is changed on every box, and a dead
+controller restarts itself.
+
+**Needs you.**
+1. **Change the file manager's admin password on the HP now** (and on the N100). **If you do nothing:** anyone on
+   the internet who tries „admin" / „admin" at the HP's files address can read its data drive.
+2. **Tick „No TLS Verify" on the „Tester 1" tunnel route in Cloudflare.** **If you do nothing:** no volunteer can open
+   their dashboard from outside their home.
+3. **Decide whether a box installed for an existing customer should get the bind e-mail automatically**, or you press
+   the button each time. **If you do nothing:** each new install waits for you.
+4. **Say whether installer 1.27.1 should be published.** My recommendation: **yes, publish it** — nothing tonight was
+   the installer's fault; the install, first screen and bind all worked. The three blockers above are on the tunnel,
+   the controller and the file manager, and they block inviting people, not the installer. **If you do nothing:** the
+   old installer with the English admin line stays online.
+5. **Decide what to do with „Tester 1"'s old off-site data on ep0** (still there, kept tonight) and its stuck DR tier.
+   **If you do nothing:** the data stays, and every new box for this customer gets a failed whole-system backup alarm.
+
+---
+
 **Updated 2026-09-14 (evening) — the doorstep: installer fixed, walked again, NOT published.**
 
 > **Ready for a volunteer: not yet — one thing stops them.** On the test customer you chose, the