docs(R-7b): correction — all four legs PROVEN-LIVE, with snapshot evidence

Drops the false 'no offsite target on the demo box' clause from the ROADMAP row,
the capability-map SMB row and sharing.md. Cites offsite snapshots e0b9d723 /
4e2b15ec and the restore round-trip results. Root cause (guessed settings key) is
recorded in felhom-controller REPORT section 7b.
This commit is contained in:
2026-07-18 14:32:39 +02:00
parent 4e3f6c48d4
commit a03e142101
3 changed files with 11 additions and 7 deletions
+9 -5
View File
@@ -174,11 +174,15 @@ a leading underscore — note this was a REAL gap, not a formality: `nbNameRe` b
surface; `backup.DisplayStackName` maps it to „Megosztások" at the notification and prose boundaries,
while the persisted set, the tag and the paths keep the raw key.
> **Live-validation status (2026-07-18).** The tier-2 leg is PROVEN-LIVE on the demo box through the
> real `/api/backup/tier2` endpoint (tree + marker + payload on the cross-drive target, mirrored file
> md5-identical, payload 0600 preserved). **The offsite `_shares` leg and the restore round-trip are
> unit-covered and red-proofed but NOT yet live-exercised** — the demo box has no offsite target
> configured. They need a box with an escrowed offsite repo.
> **Live-validation status (2026-07-18): FULLY PROVEN-LIVE.** Tier-2 leg via the real
> `/api/backup/tier2` endpoint (tree + marker + payload, mirrored file md5-identical, payload 0600
> preserved). Offsite leg: snapshots `e0b9d723` (Viktor's manual run) and `4e2b15ec`, each tagged
> `felhom-offbox,_shares` and carrying the payload dir (`_shares-manifest.json` + `passdb.tar`, both
> 0600) alongside both share folders with uid 1000 preserved. Restore round-trip: a deleted probe file
> came back byte-identical and a deleted share DEFINITION came back with its original flags, while the
> two pre-existing files were NOT overwritten and `filmek` was reported *kept* — the missing-only and
> existing-wins contracts proven on live data. Samba liveness: hub-accepted `health_critical`.
> Remaining human leg: SMB positive auth with the real household password, which is never persisted.
## Operator notes