answers 2026-10-12 Part B: the four DooPlex changes live and read back; R-886 + R-211 closed (112 -> 110)

- S21 / R-887: runner fetch_timeout 30s, Gitea Ingress 2 rps per address (homelab-manifests ad8618f); WATCHING to 2026-10-19
- S22 / R-886: Alertmanager fsGroup 65534; a test silence survived a pod restart (4168451) - closed
- S23 / R-211: Prometheus config-reloader; two automatic reloads, no manual POST (ab40c7b, test e70e0f1/78d4be4) - closed
- S20 / R-231: backup scripts in homelab-ansible/roles/dooplex_backup, installed from git (fdd324b); VERIFY 2026-10-13
- evidence: documentation/audits/answers-2026-10-12/s2{0,1,2,3}-*.txt

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -3,16 +3,22 @@
 **Ready for the first real tester (Tester-2): yes. Tester 2 (a laptop) is off; nothing was sent to it.**
 
 **Updated 2026-10-11 (M3 live): hub 0.146.0; demo-hp, demo-felhom and Tester 1 run agent 0.154.0 and controller
-0.307.0. The open-items list is at 112 (2026-10-12: your 38 answers, 17 closed). Reports: `REPORT-m3-2026-10-11.md`, `REPORT-redesign-2026-10-10.md`, `REPORT-testers-2026-10-10.md`, `REPORT-register-shrink-2026-10-10.md`, `REPORT-new-apps-2026-10-10.md`, `REPORT-release-2026-10-10.md`, `REPORT-break-the-circle-2026-10-09.md`, `REPORT-dooplex-survival-2026-10-09.md`, `REPORT-day4-2026-10-09.md`.**
+0.307.0. The open-items list is at 110 (2026-10-12: your 38 answers, 19 closed). Reports: `REPORT-m3-2026-10-11.md`, `REPORT-redesign-2026-10-10.md`, `REPORT-testers-2026-10-10.md`, `REPORT-register-shrink-2026-10-10.md`, `REPORT-new-apps-2026-10-10.md`, `REPORT-release-2026-10-10.md`, `REPORT-break-the-circle-2026-10-09.md`, `REPORT-dooplex-survival-2026-10-09.md`, `REPORT-day4-2026-10-09.md`.**
 
-## Monday 2026-10-12 (afternoon): your 38 answers — written down, and 16 items closed
+## Monday 2026-10-12 (afternoon): your 38 answers — written down, the four DooPlex fixes done, 19 items closed
 
 - **All 38 answers are written down** in the decisions list (numbers 196–233). Where your words differed from my pick (S1, S2, S8, S32, S37), your words are the rule.
-- **The list went from 128 to 112.** 17 items closed with no code: the ones you accepted, the ones that are by design, and the apps you said no to. One new item: mirror the images of every app we support into our own registry, before we grow (your S8 note).
+- **The list went from 128 to 110.** 19 items closed: 16 with no code (accepted, by design, or apps you said no to), the Tester 2 mail check, and two DooPlex fixes. One new item: mirror the images of every app we support into our own registry, before we grow (your S8 note).
 - **The hub mailed you on time that Tester 2 never made an off-site copy** (Sunday 18:13). That check is closed.
 - **Prometheus on DooPlex is in sync** (S37). I read it once, read only: ArgoCD says Synced, and the live settings equal git.
 - **The Cloudflare token recipe is in the install runbook** (S31): two permissions, one zone, nothing else.
-- **What remains of the sheet, in order:** the four DooPlex changes (I ask you in chat before each), one hub release (you present for the deploy), one box release, Glance behind the family gate, the capability map, the notification-settings design, and last the six hub readers.
+- **The four DooPlex changes are done**, each after your yes, each checked:
+  - **CI:** the runner now waits 30 s for an answer (was 5 s), and the crawler is limited to 2 requests a second. In the first minute it got 7 refusals; our own traffic got none. I check for lost jobs again on 19 October.
+  - **Alertmanager** can save its state again. A test silence survived a restart; then I removed it.
+  - **Prometheus** now reloads its alarm rules by itself, about 40 s after a change. Tested twice, no manual step.
+  - **DooPlex's backup scripts are in git** (homelab-manifests) and were installed from there with you in the session. Nothing in them changed. Tonight's 03:10 backup is the test; I read it tomorrow.
+  - **One thing for you to know:** two DooPlex alarms are firing and were re-sent when Alertmanager restarted — a Longhorn volume at 91 %, and a disk (`ST3000VX010 …Z6A07P2G`) with 352 unreadable sectors since 10 October.
+- **What remains of the sheet, in order:** one hub release (you present for the deploy), one box release, Glance behind the family gate, the capability map, the notification-settings design, and last the six hub readers.
 
 ## Monday 2026-10-12 (review round): a page-by-page review, and its findings fixed