2146 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	53d962d95b	Volunteer guide (HU+EN): the console's „linked" text replaces the stale „known bug: the code stays on screen" note; „Mentés most" takes ~2 min with eight apps (measured in the 2026-10-20 rehearsal)	2026-10-20 20:12:20 +02:00
admin	836b47f1ec	Rehearsal: B6 #16 English pass, #9 two-at-once (as expected), #13 second drive (not offered as backup target), #4 drive pulled (handled well; last uploads 0 bytes → R-1196 P3); B9 W24-W29	2026-10-20 20:07:30 +02:00
admin	bb187f3503	Rehearsal: B8 all seven restore paths pass (NFC/NFD: both names return); B6 #2 power cut mid-restore → R-1195 (P2, proven live: the app runs on the backup's data, the page says only interrupted); B6 #5 slow line; register 173 -> 174	2026-10-20 19:43:31 +02:00
admin	9db8aacdad	Rehearsal: R-1193 corrected and narrowed to P3 (the operator mailbox shows host_stale at 13:33 and app_oom; the household was told nothing); R-1192 second freeze + the app_oom hint; R-1194 (P3 VERIFY) fresh box's felhom-sshd config invalid; B6 #5 slow-line result	2026-10-20 19:10:42 +02:00
admin	78278502ac	Rehearsal 2026-10-20: second freeze and plug pull, memory watch, Mentés most, B6 #5 started; B9 words W7-W23; tools	2026-10-20 18:32:20 +02:00
admin	2228b9f6b4	Rehearsal: R-1192 (P1) the 8 GB minimum box froze ~1 h on the family's first afternoon, plug pulled to recover; R-1193 (P2) the hub showed it OK throughout; register 170 -> 172; STATUS P1 line and a note on D5	2026-10-20 16:38:27 +02:00
admin	ee743477b4	Rehearsal 2026-10-20 B2-B4: bound (operator passphrase), claimed, recovery code, family (accented names refused), second disk initialised, 8 of 9 apps (Jellyfin refused on memory), first uploads froze the box ~1 h (hub said OK); screenshots gallery	2026-10-20 16:34:30 +02:00
admin	ad6397308c	Rehearsal 2026-10-20: guide §3 quotes the console the box really shows; bind-page screenshots (codes never shown); app upload and gallery tools; R-1189 (d) (e) confirmed in code	2026-10-20 13:17:29 +02:00
admin	d750a90d0e	Data-loss hunt: R-1188 (c) proven — a leftover .felhom-restoring blocks every retry of the second drive's whole restore	2026-10-20 13:11:32 +02:00
admin	a942ae90d6	Data-loss hunt: R-1185 proven (an invalid dump replaces the good one, no error); R-1182 confirmed in code; DST replay of the controller scheduler (once each on 25 Oct; spring 02:30 dump collides with the 03:30 copy)	2026-10-20 13:07:39 +02:00
admin	20a77d367b	Data-loss hunt: R-1180 proven against production code (the nightly rsync --delete mirror runs while a restore holds the backup flag and deletes the files being restored)	2026-10-20 13:02:50 +02:00
admin	a57a8363df	Data-loss hunt: R-1191 (P1, proven live on 9202) — a .fab import makes a family-only app public (stranger 401 -> 200); R-1187 narrowed; register 169 -> 170; STATUS P1 line	2026-10-20 12:58:30 +02:00
admin	bffe2d9dea	Data-loss hunt 2026-10-20 C4: register 153 -> 169 (opened R-1175..R-1190: two P1 — shares second copy pruned by another drive's group, box rebuilt after the host delete cannot reach its off-site history; R-1177 proven LIVE on 9202 — a failed local restore destroys live data with no copy); STATUS: the P1 line and decisions D22, D23	2026-10-20 12:31:34 +02:00
admin	242584af4e	Status view report: CI jobs 2131-2133 green, by head_sha ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 12:28:00 +02:00
admin	43e5a5496d	Data-loss hunt 2026-10-20: four reviewers' candidates, C2 verdicts, proofs (D1 shares second copy pruned, K1 escrow unreachable after host delete, R5 whole restore leaves app stopped while saying untouched, T9 hub jobs run twice on 25 Oct); rehearsal A5 manifest, B1 notes, B9 words, tools	2026-10-20 12:13:19 +02:00
admin	c701b2530b	Status view: session report (REPORT-status-view-2026-10-20.md); STATUS points to the rehearsal's screenshot folder ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 12:06:50 +02:00
admin	54d1ee8210	Status view, part 4 (the instruction): CLAUDE.md end-of-session checklist — how to update STATUS.md in five lines (replace the Updated paragraph, never prepend; a dated morning list in do; remove what you finished; the decide-row rule; the gate checks it, R-1174). A format rule under PROMPT-TEMPLATE §9 rule 9 (decision 150); no safety rule loosened ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:59:54 +02:00
admin	1d7071e8fd	Status view, part 3 (the gate): scripts/status_view_gate.py in repo_gates.py (fast: pre-push + CI) — size outside decide, one Updated paragraph, English outside quotes, cited rows open, no decided row in decide, the P1 and every operator-owned row on the page; WARN-FIRST until 2026-10-27, then it refuses; 39 decoy cases (red-proved per check and on both sides of the date); filed R-1174 (P4, Process & tooling) + its due check 2026-10-27; R-919 owner cell -> operator (the upload and the look); register 152 -> 153 ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:59:48 +02:00
admin	9ec5f76a88	Status view, part 2 (the page): STATUS.md rebuilt from the register — 107 lines / 31,695 bytes -> one screen (50 lines, about 5,400 characters outside the decide table); decide table: 8 open decisions (13 decided rows out, rulings checked in CLOSED-ITEMS); do list checked against the hub and DooPlex (7 done items out, 7 'still needed? yes/no'); old page byte for byte in STATUS-HISTORY.md ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:59:41 +02:00
admin	f84f94d987	Rehearsal 2026-10-20 (Tester4) + data-loss hunt: baselines, B1 install evidence, A6 drawn order, tools, first two reviewers' candidates ... No release, deploy or publish. Off-site is OFF for Tester4 and the owner passphrase is needed from the operator (bind blocked after 2 of 5 tries).	2026-10-20 11:57:55 +02:00
admin	2954b0be3a	Status view, part 1 (register pass): register 156 -> 152 (closed R-1121 file gone, R-1118 retirement done, R-231 in git + green run; R-993 merged into R-991); R-132 narrowed (rotation done, hash field left), R-1049 -> WATCHING (fix live since hub 0.151.0); hub + local read evidence ... Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-20 11:43:58 +02:00
admin	5c487313fa	Night brief part 2 (run by day 2026-10-20): register 160 -> 156 (closed R-1001, R-1011, R-1167, R-1070, R-1010, R-893, R-1169; opened R-1171..R-1173; R-1019/R-462 narrowed, R-49 READY -> D21, R-1083 re-stated); 07 §6.3 option A as the design; STATUS morning list; report part 2; P4 Immich plan, P7 release evidence	2026-10-20 11:06:00 +02:00
admin	bcaa9576b2	Night 2 evidence: P2 R-893 option A live proof on 9202 (forced failure put back exactly; normal restore OK; teardown); P5 R-462 coverage and currency list	2026-10-20 10:47:37 +02:00
admin	301f4e9e92	Night 2 (2026-10-20) evidence: P1 hub 0.162.0 deploy, installer 1.35.0 publish, agent 0.161.0 release+delivery+host_busy live; P2 R-893 red-proofs; P3 R-1019 classifier before/after	2026-10-20 09:32:53 +02:00
admin	b0ae2c574a	installer 1.35.0 published (operator yes, 2026-10-20): both webpage git-sync pins -> installer-v1.35.0 (R-1167)	2026-10-20 08:13:57 +02:00
admin	e1d349f100	hub manifest: 0.161.0 -> 0.162.0 (operator yes, 2026-10-20 morning) installer-v1.35.0	2026-10-20 07:59:47 +02:00
admin	7d7868e5e5	Night 2026-10-19 Part 10: ep0's first weekly prune matched the dry runs (only tester-1's 10-04 copy removed; every household has a rule) -> R-1162 closed, register 161 -> 160; R-895 and R-435 due dates moved 10-20 -> 10-21 with the reason; P10 evidence	2026-10-20 06:00:58 +02:00
admin	189eb82eb0	Night 2026-10-19: register 161 -> 161 (closed R-921, R-953, R-986; opened R-1168..R-1170; R-1001/R-1011/R-1010/R-1070/R-1167 READY, R-893 READY with the measured design note -> D20, R-1083 gap); morning list in STATUS; 03/05/07/11 updated; R-893 evidence	2026-10-19 21:44:10 +02:00
admin	f92fa5a8c8	nodes.md, nightly-rotation.md: scratch guest 9202 takes its address by DHCP (.114 until 2026-10-19, now .121); read it from the guest	2026-10-19 21:30:39 +02:00
admin	5d0dfeac5f	hostinstall harness: the two R-1167 behaviour cases SKIP out loud where there is no curl (the CI runner; CI 2106/2108 red)	2026-10-19 21:30:33 +02:00
admin	15f7428871	security_scan_gate.py: govulncheck (called vulns) + gitleaks on the pushed commits in every repo's fast set and CI, warn-first, with an accepted-hits file and 8 decoys (R-986); first scan triaged: 0 real secrets, 0 called vulnerabilities; evidence for R-953 and the 0.335.0 release	2026-10-19 21:03:23 +02:00
admin	d92a712ee4	felhom-host-install.sh 1.35.0 (not published): the hub's live-box 409 is worded in EN and HU at the preflight, host-enroll and the controller.yaml fetch, with harness cases (R-1167)	2026-10-19 20:35:21 +02:00
admin	5f31da04bc	hub v0.162.0 (built, not deployed): no repeat mail after a restart for a known-down host or an already-reported stale restore test (R-1001); the Day-0 agent list leaves out packages without the felhom-agent file, a vouch of one is refused (R-1011); an absent tunnel reads 'none set up' (R-1070)	2026-10-19 20:27:01 +02:00
admin	a28f162c66	Day 3 2026-10-19: passphrase locks once the box uses its own key (D19; hub 0.161.0, controller 0.334.0 floor), every ep0 household gets a prune job (tenantsync v1.3.0), demo-hp address clean; register 163 -> 161 (closed 3, opened R-1167)	2026-10-19 16:34:29 +02:00
admin	97f27a7528	manifests: hub 0.161.0 (R-1159, R-1165; operator yes 2026-10-19)	2026-10-19 16:07:37 +02:00
admin	b6a911c3f9	hub v0.161.0: passphrase keys only until the box uses its own (box-config route; R-1159, D19); ep0 namespaces without a prune job alarmed, tenantsync v1.3.0 creates the job (R-1165)	2026-10-19 15:55:45 +02:00
admin	224fe41e06	Day 2 2026-10-19: ep0 keep-weekly 2 (D18), passphrase measured (R-1159 READY, D19), hub 0.160.0 deployed, controller 0.333.0 floor, gofmt gates; register 167 -> 163 (closed 6, opened R-1165, R-1166)	2026-10-19 12:20:37 +02:00
admin	73f3899266	REPORT website git-sync: CI results; the 09:5x DNS blip noted	2026-10-19 12:02:31 +02:00
admin	e2c35007b5	Website git-sync in-cluster: R-1163 closed with evidence, R-1164 opened (P4); report	2026-10-19 11:51:54 +02:00
admin	fd75003e17	webpage: the four git-syncs read Gitea in-cluster; sidecars retry forever (--max-failures=-1); gate 6 keeps the --repo values identical ... On 2026-10-19 09:24 the public path to Gitea failed once and the sidecar exited (max-failures defaults to 0). Anonymous in-cluster fetch proven first (main and installer-v1.34.0 resolve to the public hashes).	2026-10-19 11:38:44 +02:00
admin	5d3cb5c132	manifests: hub 0.160.0 (R-1156, R-1157, R-1158; operator yes 2026-10-19)	2026-10-19 11:25:37 +02:00
admin	a17db0c3c8	hub-gofmt gate in repo_gates.py with its decoys (R-1160)	2026-10-19 10:40:55 +02:00
admin	503c93fada	hub v0.160.0: a live re-enroll mails the operator (R-1156); further refused backups counted, alarm once a day (R-1157); the reinstall's off-site re-issue says what it still does (R-1158)	2026-10-19 10:34:41 +02:00
admin	d5e3c8b0d9	hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)	2026-10-19 10:26:36 +02:00
admin	db2371c6f5	Day 2026-10-19: agent 0.160.0 (released, not vouched), controller 0.332.0 floor (one sign-in R-1100, escrow confirm R-1151), hub 0.159.0 deployed (R-1150, R-1154), R-1153 not a defect, old-restic check passed; register 168 -> 166 (closed 10, opened R-1155..R-1162)	2026-10-19 05:38:38 +02:00
admin	200ab6530b	hub 0.159.0 to the manifest (operator yes in advance, 2026-10-19); P1 delivery evidence (agent 0.160.0 on all three hosts)	2026-10-19 04:10:23 +02:00
admin	5622ce2735	Day 2026-10-19 P1 evidence: agent 0.160.0 release, demo-hp delivery, backup + cap, escrow confirm/abandon, R-1093 on the format route	2026-10-19 03:52:34 +02:00
admin	afc939bb3c	R-887 closed: 381 CI jobs since the S21 change, 0 lost (the 3 re-runs' first attempts ran 47-49 s; control: the known lost attempt ran 11 m 48 s); register 168 -> 167	2026-10-19 03:42:11 +02:00
admin	b505ce4ba0	hub v0.159.0 (R-1154, after security review): the enroll reuse path re-issues nothing, it warns the operator ... The first draft (5121536f, unpushed) re-issued the claim code and the off-site login on a reuse whose old box was stale or switched off. A security review flagged it: the caller holds only the household's retrieval passphrase, and both re-issues are operator session-only actions (05 section 17.5, 09 decision 252, R-1055/R-1059). Now the reuse path classifies the old box and re-issues nothing: gone -> host_reinstall_over_old_host (warning, mailed to the operator: delete the old host and re-run, or re-issue by hand); live -> host_reenroll_while_live (info). The mint path after the operator's delete is unchanged and still re-issues. The once-per-silence record and the claim engine comment edit are reverted. 05 section 8, README and CHANGELOG updated; tests red-proved.	2026-10-19 03:29:44 +02:00
admin	5121536f10	hub v0.159.0: a refused whole-guest backup has its own alarm (R-1150); a reinstall re-issues the claim code and the off-site login when the old host is stale or off (R-1154) ... R-1150: the agent's localapi:backup-cadence-cap is a separate per-host state in HostCapabilityChecker: alone it raises whole_guest_backup_refused (warning, plain text, agent reason in details) and whole_guest_backup_refusal_cleared (info); other critical caps keep agent_capability_degraded/_recovered unchanged. New types operator-only and hub-origin only (not in allowedEventTypes: the suspected controller must not post them). agent_capability_degraded/_recovered join operatorOnlyEvents (the checker's "never the customer" claim was configuration only). R-1154: handleHostEnroll's reuse path re-issues (claim code + off-site login) when no controller wait is open and either deliberate_off_at is held or both the host report and the controller report are older than alerting.stale_threshold (wired from main); once per silence (host_reenroll_reissued record, also written at mint); a live box gets nothing re-issued and the skip is recorded (host_reenroll_not_reissued). 05 section 8 [DESIGN]. Tests red-proved; go build/vet/test green.	2026-10-19 03:18:34 +02:00