docs: supervisor (03), node_* ruling (08, CONTEXT), per-tier page + tier skip (07), self-bind triggers + PBS-DR lifecycle (05), settings after install (02), park + No TLS Verify runbooks, volunteer prerequisites

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-15 10:42:53 +02:00
parent d8cd4d4412
commit 4c4e3b3a3f
9 changed files with 109 additions and 1 deletions
@@ -14,6 +14,14 @@
 > language, one screen, no identifiers in the prose. Same subjects, different readers; merging them
 > would make one of the two audiences stop reading. `STATUS.md` is also a **view of `OPEN-ITEMS.md`**
 > and holds nothing of its own; this file does hold its own content, namely the standing rulings below.
+## Decision 2026-09-15 — „box is down" mail skips the one-hour quiet rule (operator ruling, decision A)
+
+`node_stale`, `node_down`, `node_recovered` bypass the 1-hour operator cooldown, with a 5-minute
+dedupe (hub v0.114.0). Reverses the documented design for those three types; recorded in
+`documentation/architecture/08-alarm-ladder.md` §6.2. Reason: BIGNIGHT F9 — a 33-minute dead box whose
+`node_stale` and `node_recovered` mails were both suppressed by an earlier incident's cooldown. Same day,
+also the operator's: the self-bind link goes out whenever a customer waits for a box (05 §13).
+
 ## A customer's domain is their own, and the public installer stays interactive (2026-09-14, R-494 / R-495)

 **Two operator rulings, both 2026-09-14.**