hub v0.141.0: release note

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-07 08:53:48 +02:00
parent b58f3ccefd
commit d18ca15a4a
1 changed files with 1 additions and 1 deletions
@@ -1,6 +1,6 @@
 ## v0.141.0 — a reinstall's new backup key no longer overwrites the old one in the escrow; a second off-site Save is refused, not raced; the SMART counters are modelled (R-366, R-31, R-330) (2026-10-07)

-**NOT BUILT, NOT DEPLOYED (2026-10-07 00:12):** the night session's permission check refused the image build, so the night window was not used. The day session builds and deploys it (`felhom-build-deploy` skill). **Operator action on deploy: none.**
+**Built and deployed 2026-10-07 (morning), on the operator's word (`09` §3 decision 161).** The night session's image build was refused by its permission check at 00:12, so the night window was not used. **Operator action on deploy: none.**

 - hub (R-31): a second Save of a customer's off-site settings while the first is still provisioning is refused at once (409, „already running — wait about a minute, then reload; do not save again") instead of racing it: both used to see no sub-account and create one (for a dedicated box, a second bill). Per customer, in memory; another customer is never blocked. Tests `TestProvision_R31_*` (red-proved: `documentation/audits/night-burndown-2026-10-06/hub/R-31-red.txt`). The async save with a status card stays open.
 - hub: the current escrow row is kept (retained, operator-only) when the whole-guest backup key's fingerprint changes, not only when the restic password changes. A reinstall mints a new PBS key while R-241 keeps the restic password, so the old rule overwrote the only copy of the old key and every pre-reinstall whole-guest archive became unopenable. An empty fingerprint on either side is unknown, not a change. Tests `TestSaveHostEscrow_R366_*` (red-proved: `documentation/audits/night-burndown-2026-10-06/r366/`).