chaos night: pre-round-11 steadiness check, and a seventh instrument slip

The box is steady and the fences are clean: 26 containers, both safety units
active and enabled, 0 guard kills, 7556 MB free, all real front doors serving,
demo-hp back at -P ACCEPT with 0 physdev rules.

The slip: my check probed 'docs', a hostname that does not exist on this box.
Traefik's 404 for an unknown Host is correct behaviour, not damage. The real
names came from the household loop's own list. A probe with the wrong target
produces a confident number that means nothing.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/audits/evidence-chaos-night-2026-09-17/pre-round-11-notes.txt

@@ -0,0 +1,22 @@
+# Pre-round-11 steadiness check, 2026-09-16T23:38Z — and the seventh instrument slip
+
+## The box is steady, and the fences are clean
+  containers            26, none in a non-Up state
+  household unit        active AND enabled     (it survived the round 10 reset)
+  disk guard            active AND enabled     (now file-backed; 0 kills all night)
+  free on /             7556 MB
+  household loop        152 lines, last write 23:38:09Z
+  front doors           cloud/status/paste/wiki all 200 on the public path, 301 on the LAN
+  demo-hp FORWARD       -P ACCEPT, physdev rules: 0, bridge-nf sysctl: 0
+
+## THE SEVENTH SLIP, MINE: I probed a front door that does not exist
+My steadiness check read "docs public=404" and for a moment that looked like damage.
+It is not. The real front-door names on this box, taken from the household loop's own list, are:
+    cloud inventory media paperless paste photos recipes share status travel vault wiki
+There is no "docs". I invented the hostname while typing the check.
+Traefik answering 404 for a Host header it has no router for is CORRECT behaviour, and `cloud`
+read 200 in the same breath.
+
+The lesson is the same one as the `--data-urlencode`/`wc -c` slips earlier tonight: a probe whose
+TARGET is wrong produces a confident, well-formatted number that means nothing. The defence that
+worked here was asking the box for the authoritative list instead of trusting the name I had typed.