From 74fa61c7bc5e09504fd59df3e1c618c0baf8ba7e Mon Sep 17 00:00:00 2001
From: kisfenyo <nagyfenyvesi.viktor@gmail.com>
Date: Mon, 13 Jul 2026 13:21:14 +0200
Subject: [PATCH] =?UTF-8?q?audits:=20disposition=20=E2=80=94=20backups-IA?=
 =?UTF-8?q?=20finding=202=20(legacy-boot=20SystemDisks=20dead=20wizard)=20?=
 =?UTF-8?q?RESOLVED=20by=20felhom-agent=20v0.87.0=20(slaves-walk,=20operat?=
 =?UTF-8?q?or=20ruling=202026-07-13);=20live=20evidence=20drill=20replay?=
 =?UTF-8?q?=20+=20felhom-pve=20byte-identical=20regression;=20remaining:?=
 =?UTF-8?q?=20supervised=20wizard=20leg=20+=20Day-0=20manifest=20vouch?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ...TION-ia-finding2-systemdisks-2026-07-13.md | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 documentation/audits/DISPOSITION-ia-finding2-systemdisks-2026-07-13.md

diff --git a/documentation/audits/DISPOSITION-ia-finding2-systemdisks-2026-07-13.md b/documentation/audits/DISPOSITION-ia-finding2-systemdisks-2026-07-13.md
new file mode 100644
index 0000000..0a5bb67
--- /dev/null
+++ b/documentation/audits/DISPOSITION-ia-finding2-systemdisks-2026-07-13.md
@@ -0,0 +1,23 @@
+# Disposition — backups-IA finding 2 (MEDIUM): legacy-boot SystemDisks → dead drive wizard
+
+**Origin:** the v0.124.0 backups-IA validation (2026-07-13; recorded in felhom-controller
+CHANGELOG v0.124.0 + the drill live run): on a legacy-boot PVE (LVM root, no mounted ESP) the
+agent's `SystemDisks` resolved no raw system disk → `sysKnown=false` → every disk classified
+system → the drive wizard could never offer a candidate; the hot-added 5 GB scsi disk stayed
+invisible on the drill box.
+
+**Disposition: RESOLVED 2026-07-13 — felhom-agent v0.87.0** (repo felhom-agent, commit
+`3c174bc`; operator ruling approved 2026-07-13). The root filesystem's backing device is walked
+recursively through `/sys/block/<dev>/slaves` down to physical disks (dm AND md; topology,
+never VG names); those + any mounted-ESP holder are system. Per-branch conservatism: any
+unresolvable slave fails the WHOLE walk → the unchanged all-system fail-safe — which is back to
+being the walk-FAILURE error case, not the legacy-boot common case. The catastrophic direction
+(a root-backing disk offered as a candidate) is pinned by the signature test
+`TestSystemDisks_WalkTopologies` (never weaken) + red-proofs A/B/D.
+
+**Live evidence (2026-07-13):** drill host (legacy shape) on 0.87.0 — the exact IA replay:
+hot-added 5 GB scsi disk → `GET /disks/candidates` now returns it as an initialize candidate
+(`/dev/sdb`, QEMU HARDDISK, not data-bearing); the root disk sda is NOT offered. felhom-pve
+(EFI+LVM shape) regression: `/disks` roles + candidates byte-identical pre/post upgrade.
+Remaining supervised leg: wizard enroll+format through the customer UI (operator session,
+GO before format) + Day-0 manifest vouch of agent 0.87.0.