2136 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	20a77d367b	Data-loss hunt: R-1180 proven against production code (the nightly rsync --delete mirror runs while a restore holds the backup flag and deletes the files being restored)	2026-10-20 13:02:50 +02:00
admin	a57a8363df	Data-loss hunt: R-1191 (P1, proven live on 9202) — a .fab import makes a family-only app public (stranger 401 -> 200); R-1187 narrowed; register 169 -> 170; STATUS P1 line	2026-10-20 12:58:30 +02:00
admin	bffe2d9dea	Data-loss hunt 2026-10-20 C4: register 153 -> 169 (opened R-1175..R-1190: two P1 — shares second copy pruned by another drive's group, box rebuilt after the host delete cannot reach its off-site history; R-1177 proven LIVE on 9202 — a failed local restore destroys live data with no copy); STATUS: the P1 line and decisions D22, D23	2026-10-20 12:31:34 +02:00
admin	242584af4e	Status view report: CI jobs 2131-2133 green, by head_sha ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 12:28:00 +02:00
admin	43e5a5496d	Data-loss hunt 2026-10-20: four reviewers' candidates, C2 verdicts, proofs (D1 shares second copy pruned, K1 escrow unreachable after host delete, R5 whole restore leaves app stopped while saying untouched, T9 hub jobs run twice on 25 Oct); rehearsal A5 manifest, B1 notes, B9 words, tools	2026-10-20 12:13:19 +02:00
admin	c701b2530b	Status view: session report (REPORT-status-view-2026-10-20.md); STATUS points to the rehearsal's screenshot folder ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 12:06:50 +02:00
admin	54d1ee8210	Status view, part 4 (the instruction): CLAUDE.md end-of-session checklist — how to update STATUS.md in five lines (replace the Updated paragraph, never prepend; a dated morning list in do; remove what you finished; the decide-row rule; the gate checks it, R-1174). A format rule under PROMPT-TEMPLATE §9 rule 9 (decision 150); no safety rule loosened ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:59:54 +02:00
admin	1d7071e8fd	Status view, part 3 (the gate): scripts/status_view_gate.py in repo_gates.py (fast: pre-push + CI) — size outside decide, one Updated paragraph, English outside quotes, cited rows open, no decided row in decide, the P1 and every operator-owned row on the page; WARN-FIRST until 2026-10-27, then it refuses; 39 decoy cases (red-proved per check and on both sides of the date); filed R-1174 (P4, Process & tooling) + its due check 2026-10-27; R-919 owner cell -> operator (the upload and the look); register 152 -> 153 ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:59:48 +02:00
admin	9ec5f76a88	Status view, part 2 (the page): STATUS.md rebuilt from the register — 107 lines / 31,695 bytes -> one screen (50 lines, about 5,400 characters outside the decide table); decide table: 8 open decisions (13 decided rows out, rulings checked in CLOSED-ITEMS); do list checked against the hub and DooPlex (7 done items out, 7 'still needed? yes/no'); old page byte for byte in STATUS-HISTORY.md ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:59:41 +02:00
admin	f84f94d987	Rehearsal 2026-10-20 (Tester4) + data-loss hunt: baselines, B1 install evidence, A6 drawn order, tools, first two reviewers' candidates ... No release, deploy or publish. Off-site is OFF for Tester4 and the owner passphrase is needed from the operator (bind blocked after 2 of 5 tries).	2026-10-20 11:57:55 +02:00
admin	2954b0be3a	Status view, part 1 (register pass): register 156 -> 152 (closed R-1121 file gone, R-1118 retirement done, R-231 in git + green run; R-993 merged into R-991); R-132 narrowed (rotation done, hash field left), R-1049 -> WATCHING (fix live since hub 0.151.0); hub + local read evidence ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:43:58 +02:00
admin	5c487313fa	Night brief part 2 (run by day 2026-10-20): register 160 -> 156 (closed R-1001, R-1011, R-1167, R-1070, R-1010, R-893, R-1169; opened R-1171..R-1173; R-1019/R-462 narrowed, R-49 READY -> D21, R-1083 re-stated); 07 §6.3 option A as the design; STATUS morning list; report part 2; P4 Immich plan, P7 release evidence	2026-10-20 11:06:00 +02:00
admin	bcaa9576b2	Night 2 evidence: P2 R-893 option A live proof on 9202 (forced failure put back exactly; normal restore OK; teardown); P5 R-462 coverage and currency list	2026-10-20 10:47:37 +02:00
admin	301f4e9e92	Night 2 (2026-10-20) evidence: P1 hub 0.162.0 deploy, installer 1.35.0 publish, agent 0.161.0 release+delivery+host_busy live; P2 R-893 red-proofs; P3 R-1019 classifier before/after	2026-10-20 09:32:53 +02:00
admin	b0ae2c574a	installer 1.35.0 published (operator yes, 2026-10-20): both webpage git-sync pins -> installer-v1.35.0 (R-1167)	2026-10-20 08:13:57 +02:00
admin	e1d349f100	hub manifest: 0.161.0 -> 0.162.0 (operator yes, 2026-10-20 morning) installer-v1.35.0	2026-10-20 07:59:47 +02:00
admin	7d7868e5e5	Night 2026-10-19 Part 10: ep0's first weekly prune matched the dry runs (only tester-1's 10-04 copy removed; every household has a rule) -> R-1162 closed, register 161 -> 160; R-895 and R-435 due dates moved 10-20 -> 10-21 with the reason; P10 evidence	2026-10-20 06:00:58 +02:00
admin	189eb82eb0	Night 2026-10-19: register 161 -> 161 (closed R-921, R-953, R-986; opened R-1168..R-1170; R-1001/R-1011/R-1010/R-1070/R-1167 READY, R-893 READY with the measured design note -> D20, R-1083 gap); morning list in STATUS; 03/05/07/11 updated; R-893 evidence	2026-10-19 21:44:10 +02:00
admin	f92fa5a8c8	nodes.md, nightly-rotation.md: scratch guest 9202 takes its address by DHCP (.114 until 2026-10-19, now .121); read it from the guest	2026-10-19 21:30:39 +02:00
admin	5d0dfeac5f	hostinstall harness: the two R-1167 behaviour cases SKIP out loud where there is no curl (the CI runner; CI 2106/2108 red)	2026-10-19 21:30:33 +02:00
admin	15f7428871	security_scan_gate.py: govulncheck (called vulns) + gitleaks on the pushed commits in every repo's fast set and CI, warn-first, with an accepted-hits file and 8 decoys (R-986); first scan triaged: 0 real secrets, 0 called vulnerabilities; evidence for R-953 and the 0.335.0 release	2026-10-19 21:03:23 +02:00
admin	d92a712ee4	felhom-host-install.sh 1.35.0 (not published): the hub's live-box 409 is worded in EN and HU at the preflight, host-enroll and the controller.yaml fetch, with harness cases (R-1167)	2026-10-19 20:35:21 +02:00
admin	5f31da04bc	hub v0.162.0 (built, not deployed): no repeat mail after a restart for a known-down host or an already-reported stale restore test (R-1001); the Day-0 agent list leaves out packages without the felhom-agent file, a vouch of one is refused (R-1011); an absent tunnel reads 'none set up' (R-1070)	2026-10-19 20:27:01 +02:00
admin	a28f162c66	Day 3 2026-10-19: passphrase locks once the box uses its own key (D19; hub 0.161.0, controller 0.334.0 floor), every ep0 household gets a prune job (tenantsync v1.3.0), demo-hp address clean; register 163 -> 161 (closed 3, opened R-1167)	2026-10-19 16:34:29 +02:00
admin	97f27a7528	manifests: hub 0.161.0 (R-1159, R-1165; operator yes 2026-10-19)	2026-10-19 16:07:37 +02:00
admin	b6a911c3f9	hub v0.161.0: passphrase keys only until the box uses its own (box-config route; R-1159, D19); ep0 namespaces without a prune job alarmed, tenantsync v1.3.0 creates the job (R-1165)	2026-10-19 15:55:45 +02:00
admin	224fe41e06	Day 2 2026-10-19: ep0 keep-weekly 2 (D18), passphrase measured (R-1159 READY, D19), hub 0.160.0 deployed, controller 0.333.0 floor, gofmt gates; register 167 -> 163 (closed 6, opened R-1165, R-1166)	2026-10-19 12:20:37 +02:00
admin	73f3899266	REPORT website git-sync: CI results; the 09:5x DNS blip noted	2026-10-19 12:02:31 +02:00
admin	e2c35007b5	Website git-sync in-cluster: R-1163 closed with evidence, R-1164 opened (P4); report	2026-10-19 11:51:54 +02:00
admin	fd75003e17	webpage: the four git-syncs read Gitea in-cluster; sidecars retry forever (--max-failures=-1); gate 6 keeps the --repo values identical ... On 2026-10-19 09:24 the public path to Gitea failed once and the sidecar exited (max-failures defaults to 0). Anonymous in-cluster fetch proven first (main and installer-v1.34.0 resolve to the public hashes).	2026-10-19 11:38:44 +02:00
admin	5d3cb5c132	manifests: hub 0.160.0 (R-1156, R-1157, R-1158; operator yes 2026-10-19)	2026-10-19 11:25:37 +02:00
admin	a17db0c3c8	hub-gofmt gate in repo_gates.py with its decoys (R-1160)	2026-10-19 10:40:55 +02:00
admin	503c93fada	hub v0.160.0: a live re-enroll mails the operator (R-1156); further refused backups counted, alarm once a day (R-1157); the reinstall's off-site re-issue says what it still does (R-1158)	2026-10-19 10:34:41 +02:00
admin	d5e3c8b0d9	hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)	2026-10-19 10:26:36 +02:00
admin	db2371c6f5	Day 2026-10-19: agent 0.160.0 (released, not vouched), controller 0.332.0 floor (one sign-in R-1100, escrow confirm R-1151), hub 0.159.0 deployed (R-1150, R-1154), R-1153 not a defect, old-restic check passed; register 168 -> 166 (closed 10, opened R-1155..R-1162)	2026-10-19 05:38:38 +02:00
admin	200ab6530b	hub 0.159.0 to the manifest (operator yes in advance, 2026-10-19); P1 delivery evidence (agent 0.160.0 on all three hosts)	2026-10-19 04:10:23 +02:00
admin	5622ce2735	Day 2026-10-19 P1 evidence: agent 0.160.0 release, demo-hp delivery, backup + cap, escrow confirm/abandon, R-1093 on the format route	2026-10-19 03:52:34 +02:00
admin	afc939bb3c	R-887 closed: 381 CI jobs since the S21 change, 0 lost (the 3 re-runs' first attempts ran 47-49 s; control: the known lost attempt ran 11 m 48 s); register 168 -> 167	2026-10-19 03:42:11 +02:00
admin	b505ce4ba0	hub v0.159.0 (R-1154, after security review): the enroll reuse path re-issues nothing, it warns the operator ... The first draft (5121536f, unpushed) re-issued the claim code and the off-site login on a reuse whose old box was stale or switched off. A security review flagged it: the caller holds only the household's retrieval passphrase, and both re-issues are operator session-only actions (05 section 17.5, 09 decision 252, R-1055/R-1059). Now the reuse path classifies the old box and re-issues nothing: gone -> host_reinstall_over_old_host (warning, mailed to the operator: delete the old host and re-run, or re-issue by hand); live -> host_reenroll_while_live (info). The mint path after the operator's delete is unchanged and still re-issues. The once-per-silence record and the claim engine comment edit are reverted. 05 section 8, README and CHANGELOG updated; tests red-proved.	2026-10-19 03:29:44 +02:00
admin	5121536f10	hub v0.159.0: a refused whole-guest backup has its own alarm (R-1150); a reinstall re-issues the claim code and the off-site login when the old host is stale or off (R-1154) ... R-1150: the agent's localapi:backup-cadence-cap is a separate per-host state in HostCapabilityChecker: alone it raises whole_guest_backup_refused (warning, plain text, agent reason in details) and whole_guest_backup_refusal_cleared (info); other critical caps keep agent_capability_degraded/_recovered unchanged. New types operator-only and hub-origin only (not in allowedEventTypes: the suspected controller must not post them). agent_capability_degraded/_recovered join operatorOnlyEvents (the checker's "never the customer" claim was configuration only). R-1154: handleHostEnroll's reuse path re-issues (claim code + off-site login) when no controller wait is open and either deliberate_off_at is held or both the host report and the controller report are older than alerting.stale_threshold (wired from main); once per silence (host_reenroll_reissued record, also written at mint); a live box gets nothing re-issued and the skip is recorded (host_reenroll_not_reissued). 05 section 8 [DESIGN]. Tests red-proved; go build/vet/test green.	2026-10-19 03:18:34 +02:00
admin	e4f022a0d9	Evening 2026-10-18: fresh install proven (R-1148), OnlyOffice walk (R-1018), one-sign-in spike (R-1100 READY), Redis volumes (R-1117), CI rows, golden 0.331.0 baked; register 168 -> 168 (closed 6, opened R-1149..R-1154)	2026-10-18 23:12:21 +02:00
admin	b9b56c47c0	CLAUDE.md CI pull check: a rerun replaces the attempt the jobs endpoint shows; read actions/tasks when run_attempt > 1 (R-1137) ... Measured 2026-10-18 on controller jobs 1944 and 1959: same job id, run_attempt 2, conclusion and log are the rerun's; actions/tasks keeps one task per attempt (1962 failure + 1964 success; 1978 failure + 1980 success).	2026-10-18 20:51:52 +02:00
admin	1fe9f84893	CI workflow: the failure mail links the public run page, by run id (R-1135) ... The alarm step built its link from GITHUB_SERVER_URL, which on this runner is the in-cluster Gitea address, and from the run NUMBER, which Gitea 1.26 reads as a run id first (felhom.eu /actions/runs/1116 opened run id 1116 = run number 613). Now https://gitea.dooplex.hu + GITHUB_RUN_ID, and the link is printed into the job log as ALARM-LINK. Same change in all four repos.	2026-10-18 20:34:59 +02:00
admin	7f7081d127	Day 2026-10-18: report, CONTEXT; old-restic check not run yet (demo-hp's clean-up window opens after the 2026-10-19 04:15 CEST run), STATUS time corrected ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-18 16:36:53 +02:00
admin	e881115c43	Day 2026-10-18: register (173 -> 168; closed R-1140 R-1144 R-1145 R-1146 R-1147 R-1036; opened R-1148), STATUS, agent 0.159.2 delivery evidence	2026-10-18 14:41:34 +02:00
admin	37cb83c166	Estimator: Immich peak 3,290 -> 3,983 MB from the 4,000-photo import (R-1147, operator yes 2026-10-18); Immich alone on 8 GB now 'does not fit' ... Rebuilt sizing-data.json; data cache-bust v5; SIZING.md table and the pinned test cases moved with it. Before/after: audits/day-2026-10-18/P6-before-after.md.	2026-10-18 14:36:14 +02:00
admin	3332eb0919	manifests: publish installer 1.34.0 (tag installer-v1.34.0; vault-first step 4b, --rotate-recovery-only) — operator yes 2026-10-18	2026-10-18 14:28:18 +02:00
admin	624bcdc372	installer 1.34.0 (pushed; tag follows): vault-first step 4b (R-1145), --rotate-recovery-only (R-1141), harness gate (R-1146); R-895 dated check installer-v1.34.0	2026-10-18 14:22:44 +02:00
admin	88aecf55b6	Installer step 4b: vault first, then set, then a PVE login (R-1145); host key off curl's argv (review F4); harness green and a gate (R-1146); hub 0.158.0 deploy evidence; independent review + verdicts ... Live on demo-hp (--rotate-recovery-only): vault time moved, new value 200, old 401. Harness 52/0; the R1145 cases fail against HEAD. Publishes only with the next installer tag.	2026-10-18 12:50:49 +02:00
admin	4c319ddeb9	Deploy hub v0.158.0 (operator yes 2026-10-18 12:16): manifests/hub.yaml image tag	2026-10-18 12:21:14 +02:00