3 Commits

Author SHA1 Message Date
admin 8e26cdc3a5 docs(audit): closure appendix — F2 closed, F4-UX fixed, healthcheck class fixed
Pilot-blockers bundle shipped + live-validated: agent v0.73.0 (F2 mount-role
fallback), controller v0.102.0 (async restore family, F4 re-adjudicated as a UX
bug not a restore bug), catalog healthcheck sweep. All three accepted live on the
demo node.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
2026-07-06 20:43:52 +02:00
admin 3eb31f50d6 docs(audit): findings triage addendum — F1 corrected root cause + F2 verdict + F3 fixed
F1: original "shim sets SMTP_FROM w/o SMTP_HOST" hypothesis was WRONG (shim
injects nothing when off) — real cause is defined-empty SMTP vars + upstream
_enable_smtp default true → crash; fixed via _ENABLE_SMTP gate (catalog),
live-validated. F2 verdict: REAL finding — roleForMountPath resolves an enrolled
user-data drive that isn't a PVE storage to system (fail-safe over-refusal)
while /disks calls it user-data; agent-side fix deferred. F3: fixed in
controller v0.101.0 (git subprocess deadline).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
2026-07-06 14:25:34 +02:00
admin 658e78d495 docs(audit): no-mercy full-system campaign report (2026-07-06)
Overnight unattended stress/regression on the demo node (9201). Platform
resilience + safety strong: all fault-recovery + reboot/hard-reset recovery
passed (58-126s; sysrq hard reset 103s), 2.5h soak 0 breaks, DR restore proven
sound. Raw 25 FAIL triaged: ~10 collateral of one app finding (F1 vaultwarden
SMTP crash-loop), ~8 harness mis-scores of correct product refusals
(single-flight 409, needs-confirmation), rest harness-calibration incl. the P9
volid-format bug (DR mechanism itself works - recovered 9201 manually from R1).
Genuine findings: F1 vaultwarden SMTP_HOST (HIGH), F2 decommission agent-403
(MED), F3 gitea-outage sync recovery (MED). No production code changed; demo
left running+healthy at R1, notifications restored.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
2026-07-06 12:23:12 +02:00