rehearsal 2026-10-20: final report, STATUS (morning list, D24), capability map A12/A13 → PARTIAL (B7), stuck point 10

STATUS.md

@@ -2,7 +2,7 @@
 
 **Ready for the first real tester (Tester 2)? Yes.** Tester 2 (a laptop) is off; nothing was sent to it.
 
-**Updated 2026-10-20 (day).** Hub 0.162.0, agent 0.161.0 (you vouched it) and installer 1.35.0 are live, and a failed off-site restore now puts the app back exactly as it was (your D20 = A; controller 0.336.0 is the floor). This page is one screen again: older news moved to the history file (`documentation/backlog/STATUS-HISTORY.md`), and nothing was deleted. A long rehearsal on a fresh box runs today and tonight.
+**Updated 2026-10-21 (morning).** The 24-hour rehearsal with a pretend household finished: the first night, the clock change, a 3-day power-off and every restore path worked, but the 8 GB box froze twice on day one and, after a box death, the household could not get its off-site data back (R-1176, proven live). Report: `REPORT-rehearsal-2026-10-20.md`; ten stuck points, 29 new rows, nothing released.
 
 ## What works
 - A box installs from nothing with the public installer, links to the hub, and moves to the floor by itself (map A1, A3, A4).
@@ -15,7 +15,7 @@
 - The hub mails alarms and recoveries, and keeps one whole-box copy per week on ep0; CC uses its own limited token, not your password (map F1, F11, G15).
 
 ## What is broken
-- **P1 (the data-loss hunt, 2026-10-20 — still running):** shared folders on two drives lose their second copy every night, and a dead drive's copy is deleted the same night (R-1175); a box rebuilt after „delete the old host" cannot reach the household's off-site history (R-1176); importing an app bundle makes a family-only app public (R-1191); on the 8 GB minimum box the family's first afternoon froze the box for an hour, twice; the household was told nothing (R-1192, R-1193).
+- **P1 (rehearsal + data-loss hunt, 2026-10-20/21):** shared folders on two drives lose their second copy every night (R-1175); after a box death the household cannot reach its off-site history — proven live on 2026-10-21 (R-1176); importing an app bundle makes a family-only app public (R-1191); the 8 GB box froze twice on its first afternoon (R-1192, R-1193).
 - **P1:** about 12 homelab logins still use a password that was public, and the public Gitea repo is not decided (R-925, yours).
 - Two root-level weaknesses wait on your decisions D3 and D4 (R-985, R-982).
 - Tester 2 is off since 2026-10-04: old emergency password, no off-site check, no bootstrap (R-1139, R-1104, R-862).
@@ -32,6 +32,7 @@ Newest first. CC's pick is in the „Pick" column. Each row also has its full te
 
 | # | Row | Question | Pick (why) | The other option costs | If you do nothing | Blocked |
 |---|---|---|---|---|---|---|
+| D24 | R-1183 | On Sunday 25 Oct (clocks go back) the hub runs every daily job twice. Fix it before Sunday with a hub deploy you attend? | **Yes, Friday** (a small change; the box side was proven right live today) | Leave it: the alarm check runs twice and the hub keeps one day less of its database copies, once | the double run happens on Sunday; nothing is lost on the boxes | — |
 | D23 | R-1181 | A missing app folder deletes its second-drive copy within one night. Keep the old copy until the household lets it go? | **Yes, keep it** (a deleted folder is the reason a backup exists; audiobooks, comics and ROMs have no other copy) | Keep as now: a deleted folder is gone from every local copy by the next morning | an accidental folder delete is unrecoverable after one night | — |
 | D22 | R-1177 | A LOCAL restore that fails destroys the live data and keeps no copy. Give it the off-site restore's „put back exactly" (your D20)? | **Yes** (proven live today: a failed restore left the app dead and the newest data gone) | No: a failed local restore can lose the household's newest data | the main restore button can lose data when a backup copy is damaged | — |
 | D21 | R-49 | Immich's off-site copy: leave out only the AI model files now (B), or also the raw database folder and Immich's own backups (A)? | **B now** (−62 %, no new risk); A's other parts after their proof | A: −92 %, but it needs a restore path we have never run | every Immich box sends about 12 times its real data off-site each night | — |
@@ -54,9 +55,9 @@ Newest first. CC's pick is in the „Pick" column. Each row also has its full te
 6. BIOS: on the N100, read „After Power Loss"; on the HP, set „Bypass F1 Prompt on Configuration Changes" to Enable. Since 2026-10-14.
 7. Pin the first Facebook post (R-917), and look at the new cover in the Facebook phone app (R-919). Since 2026-10-12.
 
-**Morning list, 2026-10-20 (from the night session, part 2).** Item 1 (vouch agent 0.161.0) is done. Item 2 is D21 above.
-- MeTube's downloaded videos are now out of the second-drive copy, like the torrent and usenet downloads. If you want them kept, say so. If not: nothing to do.
-- The update test for more apps needs your word: start the test bench (guest 9401 on demo-hp) and let CC commit to the drill catalog (R-462). Five apps wait for a tested step. If not: they stay on their tested version, which is safe.
+**Morning list, 2026-10-21 (rehearsal).** No decision was taken by CC.
+- Delete host **Tester4-648b80** on the Hosts page (the rebuilt test box, now gone; if not: stale/down alarm mails). Keep or remove the 24 `REHEARSAL_2026_10_20_*` secrets in sec (7 are spent one-time values).
+- From 2026-10-20: MeTube downloads are out of the second-drive copy (say if you want them kept); the update test for five apps waits for your word to start bench 9401 (R-462).
 
 **The rest**
 - Pull the failed disk Z6A07P2G out of DooPlex (R-934); it is still in. If not: its alarms return on 11 November. Since 2026-10-12.