register shrink 2026-10-10: 13 rows closed with live evidence (138 -> 125); R-903 phone menu without JS; R-910 pictures; R-912 site gate 21

Closed: R-906 R-907 R-909 R-910 R-911 R-815 R-756 R-570 R-896 R-912 R-903 R-338 R-916.
Updated: R-899 (press set up, dated check 2026-10-11), R-243 (the mail is due 2026-10-11 ~16:06Z, dated check),
R-782 (homepage live; glance question to the operator), R-904 (the TLS sentence is in 01 s7).
Website: site.css v=9 (scripting:none menu), eight dashboard pictures retaken. Evidence: audits/register-shrink-2026-10-10/.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/backlog/CLOSED-ITEMS.md

@@ -26,6 +26,26 @@
 
 ---
 
+## 2026-10-10 (afternoon) — the register-shrink session: delivered rows read back, small fixes, the decision sheet
+
+The full text of the rows below: `git show dee4e0aa0c:documentation/backlog/OPEN-ITEMS.md`. Evidence: `documentation/audits/register-shrink-2026-10-10/` unless a row names another place.
+
+| Row | What | Closed | Evidence |
+|---|---|---|---|
+| **R-906** | **A page can show „+ 5 további figyelmeztetés" (+5 more warnings) with no warning above it.** (P4) | CLOSED 2026-10-10 — **released in controller 0.304.0 and read live.** On scratch 9202 (0.304.0, the same nine inline disk warnings that caused it) the raw alert list is five `disk-not-separate` + one `overflow` (`/api/debug/dump`), and NO page — /launcher, /stacks, /backups, /monitoring — renders a „+ N további figyelmeztetés” line; each shows its 3 real banners. Second channel: demo-hp 9201 and Tester 1 run 0.305.0 (`docker ps`). | controller `d5f2e47` (in 0.304.0); `TestR906_*` |
+| **R-907** | **On a phone (390 px) the Launcher's „Indítópult megosztása" / „Share the launcher" button runs off the right edge of the screen.** (P4) | CLOSED 2026-10-10 — **released in 0.304.0 and measured on a real box.** demo-hp's household guest 9201, controller 0.305.0, headless Chrome 390 × 844 (read only): layout width 390 = screen, the „Share the launcher” button at x 16–192 with its text whole (was 424 / 395 off the edge). | `r907-r909-demo-hp-readback.txt`, `r907-launcher-390.png`; `TestR907_PageHeaderWrapsOnAPhone` |
+| **R-909** | **On the Apps page an installed app's status tags covered its name, and the logo sat lower than on the other cards.** (P4) | CLOSED 2026-10-10 — **released in 0.304.0 and measured on a real box.** demo-hp 9201 (0.305.0), /stacks at 1440 and 390 px: 61 cards, a name under a tag on 0, one logo offset value (0 px), the address on one line on all. | `r907-r909-demo-hp-readback.txt`, `r909-stacks-1440.png`; `TestStackCardHeaderLayout` |
+| **R-911** | **On an English page the „data storage not reachable" banner stays Hungarian: „Adattároló nem elérhető: <path>".** (P4) | CLOSED 2026-10-10 — **already fixed before the row was read** — controller `fcd9f09` (R-79 option A, D3, 2026-10-08 14:31, released in 0.304.0) gave the storage-unreachable warning its `MsgRef` (`health.storage_unavailable`, hu + en). Pinned by `TestR79_HealthBannersFollowTheHousehold` (English row „Storage not reachable: …”, run green 2026-10-10). The row was seen on a test build cut before that commit. | controller `fcd9f09`; `internal/web/r79_health_banner_test.go` |
+| **R-815** | **First-ever GC on `felhom-offsite` (armed today 13:11 UTC, never run)** (P4) | CLOSED 2026-10-10 — **the GC has run every Sunday since July and every run ended OK.** Read on ep0 (read only): `proxmox-backup-manager garbage-collection status felhom-offsite` → last run Sun 2026-10-04 04:30:44, 44 s, 8.26 GiB removed, state OK, next 2026-10-11; the task log holds 12 `garbage_collection:felhom-offsite … OK` entries, the first 2026-07-27 17:17 UTC. | `r815-gc-tasks.txt` |
+| **R-756** | **[P3-LOW] On 9202, "remove with drive data" refuses calibre-web with 409 „…/scratch_hdd/userdata/calibre-web tárhely jelenleg nem elérhető", while the controller container lists that folder.** (P3) | CLOSED 2026-10-10 — **not reachable through the product any more.** The refused `HDD_PATH` was a user folder inside the drive (`…/scratch_hdd/userdata/calibre-web`), the R-839 shape — a 2026-09-22 drill-harness value on 9202; since controller 0.298.0 the deploy API refuses such a value (R-839, `r839_hdd_subpath_test.go`). Read 2026-10-10 on 9202: calibre-web is not installed; the drive is a mount (`findmnt`). Loosening the check would weaken the boot start gate, so nothing else changes. | controller `4867ec1` (R-839) |
+| **R-570** | **[P3-LOW] The off-site stale-note display still has a Hungarian-text fallback, for boxes that have not run off-site since v0.251.0.** (P4) | CLOSED 2026-10-10 — **condition met and the fallback deleted.** Each box's own `settings.json` read 2026-10-10: demo-hp, demo-felhom and Tester 1 `offbox.last_success` 2026-10-10 ~02:16Z on controller 0.304.0; Tester 2 was installed 2026-10-04 on a far newer controller. Controller `9e5b881` deletes the legacy text test and its constant; red-proof: the new no-kind row of `TestR553_StaleNoteDecisionSurvivesWordingChange` failed against the fallback. Delivered in controller 0.307.0 at 13:22Z to demo-hp, demo-felhom and Tester 1 (host journal „new controller healthy” + guest `0.307.0 starting`). Localisation may now translate the producer. | controller `9e5b881`, `fc6466a` |
+| **R-896** | **The catalog's `volume-persistence` gate runs its canary and the apps on the LOCAL Docker, so a full gate run on DooPlex acts on the production host — and there its self-test fails for every app.** (P4) | CLOSED 2026-10-10 — **fixed in the catalog** (`1a642b4`, CI 1638 success): `check-volume-persistence.py` refuses (HARNESS REFUSED, exit 3) before any docker call unless the host says it is a scratch host — the bench's `/opt/upg`, or `FELHOM_SCRATCH_HOST=1`. DooPlex has neither. `TestVenue` red before the guard („the real prober was reached”); a new end-to-end decoy. The self-test failure was seen only on DooPlex, where the gate no longer runs; the bench runs it under its own canary. | catalog `1a642b4` |
+| **R-912** | **No gate checks that every catalog app has a logo file under its slug.** (P4) | CLOSED 2026-10-10 — **gate built**: `site_gates.py` gate 21 — every catalog app (`app-catalog-felhom.eu/templates/*/.felhom.yml`, by its `slug:`) has `website/assets/<slug>-logo.svg` or `.png`; 60 of 60 today; an absent catalog clone is said out loud. Decoy `site/app-logo-under-another-name` (Crafty Controller's logo renamed `crafty-logo.png`, the measured shape) convicts with its own line. **The „no coloured logo” half is not built, on purpose:** a static read of the SVGs cannot decide colour (six white-rendering logos use black fills as masks, one uses an `feColorMatrix` filter); it needs a browser render, and the operator's eye on the website covers it. | `scripts/site_gates.py` gate 21; `scripts/test_gate_decoys.py` |
+| **R-903** | **On a phone with JavaScript off, the website's menu does not open — so its links and the language globe cannot be reached there.** (P4) | CLOSED 2026-10-10 — **fixed, CSS only**: `@media (max-width: 900px) and (scripting: none)` in `site.css` (`?v=9` on all 18 pages) puts the menu links and the globe in the header as a wrapped row when JavaScript is off; script-on pages are unchanged. Measured in headless Chrome at 376 px, JavaScript OFF, `/` and `/en/`: reachable links **0/7 before, 7/7 after**; with JavaScript ON the closed off-canvas menu is as before. | `r903-phone-nojs.txt`, `r903-check.js` |
+| **R-338** | **`demo-hp` is not on the R-50 island at all, and `operations/nodes.md` states that it is.** (P3) | CLOSED 2026-10-10 — **no longer true**: demo-hp IS on the R-50 island (read 2026-10-10 by a read-only helper): `agent.json` `local_api` = `listen_addr 169.254.253.1:8443`, `island_bridge vmbr9`, `island_guest_addr 169.254.253.2/30`; `ss -ltnp` shows the agent on `169.254.253.1:8443` only; `vmbr9` UP with member `veth9201i1`; guest 9201 has `eth1` on vmbr9. `operations/nodes.md` is true. The row's facts predate a reprovision. | `sheet-group3` read, this session |
+| **R-916** | **The logo has no usable vector master: `website/assets/logo.svg` sets „felhom.eu" as live text in the fonts „M+ 2c" and „Vremena Grotesk", which DooPlex does not have, so every renderer here draws other letters.** (P4) | CLOSED 2026-10-10 — **no longer true**: `website/assets/logo.svg` has no live text — 0 of 3 text elements carry content, the wordmark is five `<path>` elements — and it renders its lettering with NO font present: ImageMagick (not a browser) at 1600 px drew „felhom.eu” as the outlined shapes. No Inkscape pass is needed. (ImageMagick's own renderer drew a dark band where the cloud's gradient is; a renderer limit, not the file's.) | this session's render (1600 × 1012) |
+| **R-910** | **The website's dashboard pictures show the old Apps card (the tags crowd the name, R-909) and no phone view (R-907).** (P4) | CLOSED 2026-10-10 — **all eight pictures retaken** on demo-hp's household guest 9201 (read only except the language round trip through the globe's own form; the household was found in English and left in English): Launcher, Apps, Paperless-ngx's page on 0.305.0, Backup → Apps on 0.307.0, hu + en, 1440 × 900, WebP q82. The Apps card now shows the R-909 layout. Retaking found a defect: on 0.305.0 the Backup → Apps table listed each database several times after a restart (the undo copies) — fixed in controller 0.307.0 and read back (6 rows for 6 databases); that picture was taken after the fix. Privacy scan of every page's text: 0 e-mails, 0 IPv4, only the test domain; long hex values are the hidden CSRF field. Phone view: not added (`captions-claims.md` keeps it off the site). | `r910/` (page texts, the script, the 0.305.0 duplicate picture), `databases-table-readback-0.307.0.txt` |
+
 ## 2026-10-09 — the Meta app is Live: the Facebook Page can post in public
 
 The full text of the row below: `git show 625d38645c:documentation/backlog/OPEN-ITEMS.md`.