Part D step 2 (read-only listing; clean-up stopped: no bx11 main-account login) and Part H (Tester 2: no daily household mail)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/audits/day-2026-10-07/D/D2-listing-readonly.txt

@@ -0,0 +1,16 @@
+Part D step 2 — the one-time clean-up listing, read only (2026-10-07 ~10:10 CEST)
+
+Source: the hub's Offsite page (hub 0.141.0, fetched 12 min before the read), the four live customers' pages.
+  Pool box bx11: capacity 1.00 TB, used 3.4 GB (data 3.3 GB + snapshots 0.1 GB)
+  Per-customer usage (live customers): Demo HP 568.6 MB · Tester 1 19.0 MB · Demo Ügyfél 189.6 KB · Tester 2 0 B
+  => about 2.7 GB of data is attributed to NO live customer.
+  No live customer page shows a set-aside (".orphaned-*") folder.
+
+What could NOT be read, and why (stopped by the brief, Part D step 4 — no credential search):
+  - The folder list and per-folder sizes: a folder whose sub-account is gone (a RESET customer's home) is reachable only by
+    the pool box's MAIN account (SFTP/SSH, port 23). No main-account login for bx11 is held on DooPlex.
+  - Tried: the Hetzner API token in ~/.config/credentials (HETZNER_API) → GET /v1/storage_boxes returned an empty list and no
+    error, i.e. the token belongs to a project that does not hold bx11. Not tried (would be a credential search): the hub's
+    own Hetzner Secret, resetting the main password, creating a temporary sub-account.
+
+Missing for step 3: a main-account login for bx11 (or the operator runs the listing + deletions in the Hetzner console).

documentation/audits/day-2026-10-07/H/H-tester2-mails.txt

@@ -0,0 +1,10 @@
+Part H — Tester 2, read only (2026-10-07 ~10:15 CEST). Hub 0.141.0, customer page /customers/Tester-2 (Basic auth).
+
+The last 10 notifications (2026-10-05 09:16 → 2026-10-07 06:58), channel / event:
+  operator host_down ×9 (no report for 15h10m … 60h52m), operator expected_dbdump_missed ×1 (05:00, 2026-10-07)
+  household (channel "customer"): 0
+Control (a different customer, same page shape): demo-hp 4 "customer" rows of 10, tester-1 4, demo-felhom 3 — the household
+channel exists and is shown, so its absence on Tester 2 is a reading, not a blind spot.
+Verdict: the household is NOT mailed daily while its box is off. No row filed. (Not asked, seen: the operator gets a
+host_down mail several times a day for a box known to be off — operator-side noise, already the R-871..R-874 family.)
+Nothing on Tester 2 or the hub was changed. The household's address is not copied here.