R-415 fixed on hub main (no duplicate/nested/felhom.eu customer domain; R-138 option B); R-762 closed (9202 proven, catalog eec9a0d); R-905 opened (wger static in backups); decision sheet D10; 130 -> 129

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/backlog/CLOSED-ITEMS.md

@@ -32,6 +32,8 @@ The full text of every row below: `git show b2dce901b2:documentation/backlog/OPE
 
 | Row | What | Closed | Evidence |
 |---|---|---|---|
+| **R-415** | **The hub enforced uniqueness on `customer_id` only: two customers could be given the same or a nested domain.** (P3) | CLOSED 2026-10-08 — FIXED on hub main (ships with the next hub release): create and edit refuse a domain equal to, containing or under another customer's, or under felhom.eu | `hub/internal/store/domain_conflict.go`, `TestR415_CreateAndEditRefuseConflictingDomain` (red-proved); re-filed the same day after the 2026-10-03 triage lost it; full text `git show 78121aa475:documentation/backlog/OPEN-ITEMS.md`. |
+| **R-762** | **wger served no CSS, no JavaScript and no uploaded photo; and ran Django's development server.** (P3) | CLOSED 2026-10-08 — both halves proven and pushed: the files (catalog `cf1ed43`, 2026-10-06) and gunicorn with 2 workers (catalog `eec9a0d`, CI job 1546 success; operator ruling 3, decision 182, for the drill-catalog write) | Bench 9401: anon 170 MiB = 44 % of 384M, 0 kills, 0 restarts over 606 s; 9202 (drill catalog, fresh install through the product): 2 × „Booting worker", anon 246 MiB = 64 %, 0 kills, 0 restarts over 600 s / 10,944 requests, login 200, 3 CSS 200, photo 201 → 200, unknown static 404 (control). No ladder step applies (images unchanged; `ladder.check_entry` refuses a same-digest re-test; `09` §5.4 renders the catalog template). Evidence `audits/day-2026-10-08/r762/`. Follow-ups: R-905 (static files in backups); `mem_request` decision D10. wger stays `lifecycle: hidden`. |
 | **R-177** | **There was no operator-triggerable „run the fill check now" path.** (P4) | CLOSED 2026-10-08 — NO LONGER TRUE: since controller v0.297.0 (R-363) the fill check also runs every 10 minutes, so no door is needed for it | `felhom-controller/controller/cmd/controller/main.go:1579` (`sched.Every("fill-watch-interval", …)`), `:2478` (`fillWatchInterval = 10 * time.Minute`), pinned by `cmd/controller/r363_fillwatch_interval_test.go`; each run logs „checked N filesystem(s)" (readable through the hub's controller-log pull). Design `audits/day-2026-10-08/design-R-314-279-177.md`. |
 | **R-298** | **The `/storage` page's unregistered list filtered on `role==='user-data'`, so a drive that is also the backup target could never be registered.** (P3) | CLOSED 2026-10-08 — NOT REPRODUCIBLE / NOT TRUE: the agent's role comes from the storage type and backing disk and never from being the backup target, so a backup-target drive on a non-system disk IS user-data | `felhom-agent/internal/storage/role.go:172-186` (unchanged since 2026-07-13); `internal/localapi/disks.go:212-233` and `:1239-1249`; August topology `audits/evidence-rehearsal-2026-08-09/GATE0-demo-hp-before.txt:47-84` → user-data; read-only today: demo-felhom `felhom-backup` on `sdb` (root on `sda`). Side fix on controller main `a40729a`: no eject/format button on a backup-target drive (the agent refuses the eject, 403). |
 | **R-900** | **The website's FAQ said the household's data is not with a third party, while copies and traffic go to processors.** (P2) | CLOSED 2026-10-08 — PUBLISHED: the GDPR answer on `gyik.html` and `en/faq.html` (visible text and structured data) now names the box, the encrypted copies at Hetzner in the EU, and Cloudflare's view of remote-access traffic; text approved by the operator in chat (`09` §3 decision 180) | website commit `b2dce901`; live read-back 2026-10-08: the new sentence 2× on each page (visible + JSON-LD), the old „nem harmadik félnél" 0×; rest of the site searched (ASCII fragments, positive control) — no other page makes the claim. Left for R-813: the contact form's consent line „harmadik félnek nem adjuk ki", which the consent draft already replaces. |