Night 2026-10-06: R-894 fixed on agent main (07 §6.1), R-892 still blocked (no agent key in this shell); night log started

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-06 20:34:53 +02:00
parent 9246f62c3b
commit 8e2dc2049f
8 changed files with 73 additions and 2 deletions
@@ -0,0 +1,19 @@
+# Night log — the second burn-down night, 2026-10-06 → 07
+
+Brief: `drills/NIGHT-burndown-2026-10-06.md` (workspace root). One line per row touched:
+row · result · minutes · commit.
+
+**Baselines read from live source at 20:27 CEST:** felhom.eu `9246f62c3b` · controller `5e7522e023` (v0.301.0) · agent
+`7e82f325b8` (v0.149.0 released; main carries the unreleased memory-kill check) · catalog `d63ea3591e` · hub v0.140.0 ·
+register **138** (`| **R-n** |` lines). All four trees clean and equal to `origin/main` (felhom.eu has one untracked
+folder from the evening session, `audits/readback-2026-10-07/delivery/`, left alone).
+
+**Fences (§1):** no delivery to any box; catalog changes only for apps no box runs; at most one hub deploy 00:30–01:45;
+no reboot.
+
+## Rows
+
+| Row | Result | Min | Commit |
+|---|---|---|---|
+| R-892 | **§3 stopped** — the shell has no SSH agent; DooPlex's two own keys (`id_rsa`, `id_ed25519`) are refused by `root@192.168.0.154`, direct and through demo-hp. The key the operator copied at 20:20 came from the agent of the operator's own login, so it is not a key this shell holds. Not tried, by the brief: another key, the vaulted password, a disk edit. Next try needs: `ssh-copy-id -i ~/.ssh/id_ed25519.pub root@192.168.0.154` run **from DooPlex as kisfenyo** (it then asks for the box's root password once). Evidence `s3/s3-ssh-refused.txt` | 5 | — |
+| R-894 | **fixed on agent main** `74b5eae` (ships as v0.150.0 with the memory-kill check). Saved copy on disk, read only on an unreadable storage; fresh → not due, old → due, none → due/unknown; a storage that answers wins. 4 red-proofs `s4/`. `07` §6.1 updated | 50 | agent `74b5eae` |
@@ -0,0 +1,16 @@
+2026-10-06T20:27:33+02:00
+$ ssh-add -L
+Could not open a connection to your authentication agent.
+$ ssh -v -o BatchMode=yes root@192.168.0.154 true (filtered)
+debug1: Connection established.
+debug1: Authentications that can continue: publickey,password
+debug1: Offering public key: /home/kisfenyo/.ssh/id_rsa RSA SHA256:QFGntgIL9qT1cChHYaxFjBiCgi5G4L+4/uJiKnAmwpk
+debug1: Authentications that can continue: publickey,password
+debug1: Offering public key: /home/kisfenyo/.ssh/id_ed25519 ED25519 SHA256:pgQh228RBaWiAbJpSveyDMy+b/U8TOS7eYRsQFen2lc
+debug1: Authentications that can continue: publickey,password
+root@192.168.0.154: Permission denied (publickey,password).
+rc=255
+$ ssh -J demo-hp root@192.168.0.154 hostname
+root@192.168.0.154: Permission denied (publickey,password).
+rc=255
+Not tried (brief: do not try another way in): the off-box demo key, the vaulted password, a disk edit.
@@ -0,0 +1,8 @@
+## RED 1: fallback block disabled (if false && …)
+--- FAIL: TestBackupDue_R894_RestartThenUnreadableStorage_FreshSavedCopyIsNotDue (0.01s)
+    r894_saved_backup_test.go:73: after a restart an unreadable storage must fall back to the saved copy (12 h old, 7-day tier) — NOT due; got {VMID:8200 Due:true Reason:backup storage unreadable and no in-memory record — age UNKNOWN, treating as due AgeSecs:<nil> Target:felhom-pbs AgeState:unknown}
+--- FAIL: TestBackupDue_R894_RestartThenUnreadableStorage_OldSavedCopyIsDue (0.00s)
+    r894_saved_backup_test.go:97: the age is known (from disk); got {VMID:8200 Due:true Reason:backup storage unreadable and no in-memory record — age UNKNOWN, treating as due AgeSecs:<nil> Target:felhom-pbs AgeState:unknown}
+FAIL
+FAIL	gitea.dooplex.hu/admin/felhom-agent/internal/localapi	0.023s
+FAIL
@@ -0,0 +1,6 @@
+## RED 2: a saved copy always answers not-due
+--- FAIL: TestBackupDue_R894_RestartThenUnreadableStorage_OldSavedCopyIsDue (0.00s)
+    r894_saved_backup_test.go:94: a saved copy 9 days old under a 7-day cadence MUST read due; got {VMID:8200 Due:false Reason:x AgeSecs:0x6d4ab1e78d8 Target:felhom-pbs AgeState:known}
+FAIL
+FAIL	gitea.dooplex.hu/admin/felhom-agent/internal/localapi	0.024s
+FAIL
@@ -0,0 +1,6 @@
+## RED 3: fallback used even when the storage answers
+--- FAIL: TestBackupDue_R894_SavedCopyIgnoredWhenStorageAnswers (0.00s)
+    r894_saved_backup_test.go:125: the storage answered 'no archive' — the saved copy must NOT stand in for it; got {VMID:8200 Due:false Reason:within cadence window (storage unreadable — age from the last success saved on disk) AgeSecs:0x2d5c37388f10 Target:felhom-pbs AgeState:known}
+FAIL
+FAIL	gitea.dooplex.hu/admin/felhom-agent/internal/localapi	0.024s
+FAIL
@@ -0,0 +1,5 @@
+## RED 4: the LastKnownBackups line removed from buildLocalAPIServer
+    r894_wiring_test.go:54: localapi.Options in buildLocalAPIServer has no LastKnownBackups field
+FAIL
+FAIL	gitea.dooplex.hu/admin/felhom-agent/cmd/felhom-agent	0.021s
+FAIL