338 Commits

Author	SHA1	Message	Date
admin	a08bd3cbd5	architecture: the system poster committed, its facts given a home, and a rule to keep them together ... PART A -- the poster. documentation/architecture/felhom-system-poster.html (307 KB). Secret scan first: ZERO IPv4, zero PEM blocks, zero ssh keys, zero Bearer. The one EAA... match is base64 inside an embedded "mime":"font/woff2" blob, not a Facebook token. "token"/"secret"/"password" appear 11 times and every one is a NAME ("6. ep0 read token", "the hub seal key"); the poster itself says "Names only; no secret values". All five long base64 blobs are declared assets: 1 image/png, 3 text/javascript, 1 font/woff2. It renders with NO network: the source mentions cdn.jsdelivr.net and Google Fonts, but the loaded requests are only the HTML plus blob:/data: URLs -- the bundler inlined everything. Measured, not assumed, and it matters: this is a disaster-recovery document, so needing the internet to draw would be a defect. No console errors. The operator's three Claude Design fixes are all present: (a) no "WG" badge, WireGuard only for the tunnel, no badge on the ep0-copy tile; (b) the box -> ep0 arrow reads "encrypted on the box, sent through WireGuard"; (c) "Known gaps" holds two items and NOT the household-keys sentence, which is now a neutral "By design" note under the ep0 household namespace. ONE FACT ON IT WAS WRONG. The felhom.eu tile said "served from DooPlex through Cloudflare". It is not: Cloudflare is DNS only and the traffic goes direct -- measured this morning for the privacy notice, which states exactly that. The poster would have contradicted a published page. Fixed in place (a label): "served from DooPlex, Cloudflare DNS only". The first wording overflowed the fixed-size tile, so it was shortened to fit and the evidence lives in the facts file instead -- checked by re-rendering, not by hoping. PART B -- the facts and the rule. DESIGN-PROMPT-...md is renamed felhom-system-poster.facts.md (one home per fact), with the three fixes folded in as explicit instructions so a regeneration cannot undo them, plus a new "Badges" section saying a "WG" chip must never come back. New rule, section 6 "The system poster stays true", added IDENTICALLY to all five copies of unprompted-work.md (the four repos and the workspace root on DooPlex; verified identical by diff before and after) and to PROMPT-TEMPLATE.md's end-of-session checklist as a FIFTH coupled artifact. scripts/poster_facts_gate.py WARNS when the facts file has a newer commit than the poster. It never fails a push, deliberately: a refresh needs Claude Design and the operator, --no-verify is forbidden here, so a blocking gate would leave deleting it as the only way out. It compares COMMIT times, not mtimes, because a checkout rewrites mtimes and every fresh clone would shout. RED-PROOF -- and it found a real bug in the gate. The first run warned correctly but exited 1: a single non-ASCII character in its own warning raised UnicodeEncodeError on this cp1250 console. A gate whose entire contract is "never fails a push" was failing pushes. Fixed (ASCII output + an encode guard), and the decoy now asserts BOTH the warning and exit 0. Three branches proven: facts newer -> warns, rc 0; poster newer -> quiet, rc 0; poster missing -> "could not tell", rc 2, not a false all-clear. The decoy itself was seen to fail, twice, on Linux (the suite needs fcntl and cannot run on Windows): breaking the warning gives STALE_WARNS=False, and making it exit 1 gives RC_STALE=1. All 80 felhom.eu decoys behave. PART C -- do box reports pass through Cloudflare? NO. Two channels. DNS from PUBLIC resolvers (not DooPlex's own, which answers the LAN address): hub.felhom.eu is a CNAME to dooplex.hopto.org -> 37.191.56.193, not a Cloudflare address, and no cf-ray comes back. The manifest: an ordinary k3s Ingress, Cloudflare named only in a DNS setup comment. THE CONTROL that makes the negative mean something: iso.felhom.eu resolves to 172.67.x / 104.21.x, real Cloudflare addresses -- so the method does detect proxying. So nothing is added to the Cloudflare row: the hub path does not touch it. 06-offsite-connectivity.md section 1 claimed the public edge is a Cloudflare-Tunnel and "DooPlex has no public IP" -- both untrue today. Kept and marked STALE with the measurement rather than rewritten, because that paragraph is the reason ep0 exists and the argument needs its premise visible. total-loss-of-dooplex.md's "today a CNAME to dooplex.hopto.org" is confirmed correct. Register: 137 before, 137 after, 0 opened, 0 closed -- every finding here was small and fixed in the session.	2026-10-09 18:09:50 +02:00
admin	96f68f1b44	dooplex-offsite: the operator signing keys ride the nightly encrypted copy; restore test proves each key matches its public half (R-924, operator ruling option A) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-09 14:49:08 +02:00
admin	07773bf58f	R-923: STATUS, capability map, session report (break the circle) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-09 13:01:29 +02:00
admin	d55c590c5a	hub (unreleased): R-922 option A — a household's clear deletes its notification address (email_cleared); MAIL-HOLD — a restored hub sends no mail until released; two log lines drop the address; runbooks: mail hold is restore step 1; 07 §6.4 R-921 pre-check; R-921/R-922 narrowed ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-09 12:37:29 +02:00
admin	4c388a398b	R-923/R-924: total-loss-of-dooplex runbook (every recovery secret, where it lives, walked on paper), break-glass sheet (names only), Vaultwarden off-site proven (push, restore test, throwaway start); 'off DooPlex' claims corrected; R-924 filed ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-09 12:13:41 +02:00
admin	81c835827e	R-232/R-173: hub restored into a throwaway k3s (runbook §3 steps 4–5 proven, corrected); R-173, R-861, R-518 closed; R-921, R-922 filed; STATUS, capability map, report ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-09 10:54:59 +02:00
admin	fe0dc0d03f	Decision sheet D1-D10: hub CHANGELOG, architecture notes (01, 04, 05, 07, 08, 10), register (VERIFY states, R-912), STATUS, report; decoy suite runs in a git worktree ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-08 15:18:31 +02:00
admin	4510dd7d05	09 §3 decisions 185-194: the operator's decision sheet D1-D10 recorded first; rulings in each row; R-717 closed (D5) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-08 14:25:15 +02:00
admin	97c260c56b	09 decisions 180-184 (the 09:04/09:07 rulings); R-904 (Cloudflare, deferred) opened; R-900 closed (FAQ published); R-901/R-762/R-304 ruled; 131 -> 131 ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-08 09:47:44 +02:00
admin	803af4798d	website: the language switch becomes a globe like the dashboard's (Magyar / English list, current marked, no JS); site.css v3; gate 13 checks the globe from one LANGS list; 5 decoys ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-08 09:13:23 +02:00
admin	67b3fd23d1	website refresh: true numbers (56 apps), claims checked against the capability map, ten missing apps, an English twin of every public page (public, choice B), 404 page; site gates 13-18 + 11 decoys; R-902 opened ... Part A: claim table documentation/audits/website-refresh-2026-10-08/claims.md; "100% open source" corrected from the licence read; unbacked claims cut (firewall, RAID, snapshots, new-machine restore, self-managed mode, household VPN, "never lost"). Part B: dawarich, docmost, grimmory, homebox, karakeep, mealie, metube, radicale, recipe-importer, sparkyfitness cards; plant-it and wger cut (not offered). Part C: /en/ twins, nav language switch, hreflang both ways, sitemap with xhtml:link, og-image-en.png. Part D: site_gates.py twins/lang/same-apps/no-Hungarian/FAQ-JSON-LD/tail. Operator ruling 9 + choice B in 10-localisation.md §11, §10.7. Register: R-902 (contact mailer source in no repo); R-813, R-784, R-559 annotated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-08 08:29:17 +02:00
admin	b119301c6f	R-243: offsite_escrow_pending — an operator alarm when off-site is on and the escrow never done (7 days); 09 decisions 177-179; 07 R-899 note ... Hub code unreleased; ships with tomorrow's hub release. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-08 08:00:08 +02:00
admin	a0ff737ebb	09 §3 decisions 174-176 (mail text + reply address; window kept; fixes today, both demo boxes tonight) recorded first ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 18:36:14 +02:00
admin	ab3b7ea2f4	hub v0.143.0 (code): the kernel lane — the day-before household mail, the night instruction, the operator's kernel set (R-836, decision 172) ... KernelDue / KernelNotify (09-20 h Budapest, one per 20 h, max 3, registered address, only an accepted mail counts) / os_update.kernel {kver, tonight} (no mail, no step) / layer kernel ingest + operator events / Approve kernel set after every ring-0 box booted it healthily after a night stage / two System page cells. 11 §5.11 written; §5.10 status corrected (proven). Installer uninstall knows the two GRUB generators (unreleased). Evidence: audits/kernel-lane-2026-10-07/ (red-proofs, boot timing). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 15:34:14 +02:00
admin	0c5dbfbfc1	09 §3 decisions 172-173 (kernel lane yes, option A + C; R-32 leftovers left, P4) recorded before the work ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 14:59:19 +02:00
admin	28da46a764	Kernel spike (R-836): Tester 1 and demo-felhom evidence; decision 171 (reboots without a per-reboot word, never DooPlex) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 12:46:10 +02:00
admin	9c94a9c6c0	R-366 slice 2 (decision 168): one operator line when the box's whole-guest archives include another key's (edge-triggered) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 10:21:25 +02:00
admin	e03b18ea21	R-32 (decision 167): RESET purges the off-site folder through the sub-account's own login before deleting it ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 10:21:25 +02:00
admin	aeca52ea54	R-105 (decision 169): retire the never-built slim DR record fields (no writer, no reader); 05 §9/§11, 06 §3.5 corrected ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 10:21:25 +02:00
admin	e7fb10200e	R-812 option A (hub): the Proxmox package set — candidate, operator approval, System page ... Layer pve: never auto-approved; the candidate is the Proxmox userspace set every ring-0 box reports (kernel / boot / firmware names left out); the operator's "Approve Proxmox set" button appears only after 2 healthy night pve steps on every ring-0 box; an approval nudges no box (ring 1 by a signed os_pve_step). 11 §5.10 written (BUILT, unreleased, not yet proven live); §8 step 6 split (userspace §5.10, kernel R-836). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 10:21:25 +02:00
admin	c01ea2e7e9	03 §3.1: the controller-image write goes through a root verb (R-861 (a) A1); felhom-op's pct lines anchored (B2); decision 165 ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 10:21:24 +02:00
admin	52262c75c1	Part A: operator rulings 162-170 recorded; R-822 closed by ruling; R-836 P2; shared rule: no hub build/deploy without the operator ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 09:54:13 +02:00
admin	b58f3ccefd	Read-back Parts B and D (R-518: night stop 91 s, one press 80 s, page text holds); rule 11 — every helper prompt carries the brief's fences in full (decision 160); decision 161 ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 08:51:43 +02:00
admin	caa79e95c6	Night 2026-10-06: catalog fixes held on night-held-2026-10-06 (R-777, R-612, R-782, R-805, R-806, R-733); decision 159 (CC unattended); R-392 closed (12-agent-tooling.md) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 21:13:25 +02:00
admin	ed8b10330c	Night 2026-10-06: designs R-105, R-812, R-861, R-32, R-822 (rows point at them); R-895 filed; 03 §3.1 and 07 corrected ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 20:44:06 +02:00
admin	8e2dc2049f	Night 2026-10-06: R-894 fixed on agent main (07 §6.1), R-892 still blocked (no agent key in this shell); night log started ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 20:34:53 +02:00
admin	01c4a5d2a9	Decisions 157-158 recorded; R-892 corrected (VM 341), R-894 filed (unreadable off-site storage reads due after an agent restart); Part C/E/F evidence; nodes.md: the Tester 1 box; 11 §5.8: the memory-kill check ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 19:18:14 +02:00
admin	eed1dbd80c	hub v0.140.0: a failed operator mail is retried (1, 5, 15 min); a Docker set needs a passing memory-kill check on every ring-0 box (decision 157) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 19:14:00 +02:00
admin	8db4425d98	Decisions 151-156 recorded; design build evidence (R-638 measured safe, R-528 stopped by its measurement, R-518/R-717/R-762 built); golden 0.301.0; 07/08/09 updated; R-892, R-893 filed ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 16:05:55 +02:00
admin	a29ee9dd33	Decisions 149-150 recorded; instruction files kept true; R-890, R-891, R-644 closed, R-469 narrowed (142 -> 139) ... Decision 150 (operator 13:25): sessions correct stale facts in instruction files themselves, naming each edit; never loosen a rule. Added to unprompted-work.md §5 (all copies) and PROMPT-TEMPLATE.md §9. CLAUDE.md gates paragraph (R-891), architecture pointer, docs/website rules, the doubled R-286 sentence in the workspace CLAUDE.md. Decision 149: vaultwarden's step proven on bench 9401 and box 9202 (evidence here). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 13:52:28 +02:00
admin	bfdea83204	ten answers: golden 0.300.0 baked (pinned), delivery evidence; R-645 R-856 R-747 R-774 R-734 R-624 R-502 R-99 closed; R-890/R-891 filed; 03 gains FELHOM_FSTRIM and GET /host/crash-guard (149 -> 143) ... CI 1423 (929e59e8) was red on golden-currency: it read controller v0.300.0 before this commit recorded its golden. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 12:24:43 +02:00
admin	8c65ff0cf2	ten operator rulings recorded (09 §3 139-148, A for all; CC's pick differed on 2, 8, 9); decoy test survives a missing REPORT.md; session REPORT.md ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 11:12:43 +02:00
admin	dbede7975e	installer 1.32.0 published: both webpage.yaml pins -> installer-v1.32.0 (09 decisions 137-138 recorded) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 07:50:48 +02:00
admin	d41ea5486b	burn-down night: decoy exemptions emptied (R-426 closed); R-889 opened (disk percent vs df); ctrl-d rows recorded; decision 136; section counts recounted (164) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 02:12:31 +02:00
admin	6534876e88	burn-down night: R-426 felhom.eu decoys (16 -> 12 exemptions; three foolable gates fixed), decision 135 ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 01:16:45 +02:00
admin	4aa4d8374e	burn-down night: ctrl-a lane recorded (R-126 R-270 R-616 R-498 R-682 R-757 R-522 R-575 R-718 on controller main; R-585/R-516 partial; R-856 back to the operator; R-138/R-79/R-298 need a design; R-756 a live reading); decision 134 ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 23:22:44 +02:00
admin	8925dcc633	burn-down night: hub v0.138.0 source (R-879 seal + roll-back, R-136, R-283, R-349/R-276 hub halves), gates R-315/R-422 closed, R-325/R-426 partial, decisions 132-133, 05 §16 (195 -> 193) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 21:48:25 +02:00
admin	86def579ed	burn-down night: installer 1.32.0 on main (R-275 R-276 R-881 R-306 R-130 R-180 R-179 R-310 R-274; ships with installer-v1.32.0), decision 131; agent halves R-349/R-25 recorded; R-444/R-99 need the operator; R-531 closed stale (196 -> 195) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 21:27:42 +02:00
admin	c8da8e0439	burn-down night: rulings §1 recorded (09 §3 decisions 128-130); R-888, R-337, R-375 closed by ruling; R-126/R-856 rulings in their rows; night log (199 -> 196) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 21:09:04 +02:00
admin	557629d2bf	hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 19:43:37 +02:00
admin	f5a0aeb0b8	burn-down Part A: 24 rows closed as fixed by later work, 2 duplicates merged, R-376/R-817/R-818 done (335 -> 306); Part A table ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 16:53:02 +02:00
admin	afba622fb6	R-173 option A in force (hub DB nightly to ep0, restore-tested, alarmed); R-519 proven live on 9202 and closed; R-173/R-232 narrowed; R-882..R-885 opened (332 -> 335); runbook §3 tested; hubdb-check ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 16:14:13 +02:00
admin	d4be9f6ff1	hub v0.136.0: nightly VACUUM INTO snapshot, keep 2 (R-173 decision A); hub PVC 2Gi + Longhorn default group; 09 rulings 125-127; 05 §16.3 ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 14:28:30 +02:00
admin	0826e41b31	hub-safety session: R-135/R-133/R-604/R-530/R-508/R-509/R-880 closed, R-861/R-173/R-518/R-519 narrowed, R-879/R-881 opened (336 → 332); 03 §3.1, 05 §16, golden 0.296.0, the hub-DB off-site plan, STATUS ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 13:47:57 +02:00
admin	9bb45eaaa2	catch-up session 2026-10-05: design 07 §6.1.1 (a box that is not always on), 08 §6.4; rulings 109-111, CC decisions 112-118; R-871/R-873..R-877 closed, R-872 narrowed (dated check), R-878 opened; live evidence; STATUS ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 10:29:22 +02:00
admin	5fd2656021	night fixes 2026-10-05: R-867/R-95/R-863..R-869 closed, R-870..R-876 opened (R-876 P2: repair misses dpkg's journal); Part E crash record; Part F spike; golden 0.294.0; rulings 100-103, CC decisions 104-108; STATUS ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 08:26:23 +02:00
admin	79f07a7f10	R-840/R-859/R-860 records: 11 §5.3.1 + §5.4.2, 03, 04, 00; runbooks config-bundle + os-updates-test-waits; register 333→334 (R-840/859/860 closed, R-861/862 opened); STATUS; report; evidence ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-04 20:40:08 +02:00
admin	ff1db11db4	hub v0.133.0 (R-859 test approvals end with the test; R-840 bundle on the System page, manifest, alarm); installer 1.31.0 (root files from the config bundle); bundle bootstrap script; golden 0.293.0 evidence; rulings 96–99; drill-r50 removed (evidence) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-04 20:18:37 +02:00
admin	6b820143f8	R-858 closed (agent v0.142.1, ruling 95): the Docker step restarts the socket users; incident evidence; STATUS; report addendum ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-04 18:35:40 +02:00
admin	0c55336fba	docs: 11 §5.7 System page, §5.8 Docker slow lane BUILT, §5.9 crash restart; 00/03/07/08; decisions 90-94 (CC unattended); runbooks docker-undo + crash-guard; register R-852 R-835 R-848 R-849 R-851 R-854 closed, R-853 R-855 R-856 opened, R-812 R-840 narrowed (334 -> 332); live evidence ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-04 17:36:10 +02:00