2370 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
felhom security watch	599ea69551	security-watch: memory of 2026-11-06 (R-1303). Docs only.	2026-11-06 03:44:46 +00:00
felhom security watch	085dc93cea	security-watch: memory of 2026-11-05 (R-1303). Docs only.	2026-11-05 03:41:34 +00:00
felhom security watch	e57d0c6171	security-watch: memory of 2026-11-04 (R-1303). Docs only.	2026-11-04 03:44:59 +00:00
admin	a7e86fd273	Release 2026-11-03 close-out: every box on 0.350.0 with Traefik v3.7.17; golden 0.350.0 + agent 0.172.0 vouched; hub 0.179.0; catalog f4c5c79 ... Closed: R-1354, R-1347, R-1348, R-1339, R-1351, R-1323, R-1302, R-1352, R-1331, R-1356, R-1359 (235 -> 224). R-548 and R-1361 carry today's readings.	2026-11-03 10:26:23 +01:00
admin	01a44d5626	Hub manifest to 0.179.0 on the operator's yes (R-1352); the 30-minute watch, the agent 0.172.0 release lines, the hub build log	2026-11-03 09:01:21 +01:00
admin	57d46201d6	Release 2026-11-03: controller 0.350.0 evidence (load test, walks, restore, floor); golden 0.350.0 baked (sha 082e2e040de5); hub v0.179.0 heading ... Traefik's memory on 9202: v3.7.16 18.7 -> 79.0 MiB after 920 connections, not released; v3.7.17 flat near 25 MiB for 25,116 connections. Golden 0.350.0 waits for its fresh-install proof and the operator's vouch. Not 0.349.0.	2026-11-03 08:43:56 +01:00
admin	47f5011797	Golden 0.349.0 baked and published on the operator's word (sha 9d97e7c5ec3e); waits for the vouch ... The Sunday 2026-11-01 bake was missed and golden_currency_gate.py was red at 8 days. Baked at the floor (0.349.0, MinAgent 0.158.1) with the hub's newest approved Docker release, os-docker-20261026-190351. Registry round trip matches. Token scan 0, control 1. The drill VM is back on virgin. It carries Traefik v3.7.16 until controller 0.350.0 reaches the box (R-1354). No fresh install was run.	2026-11-03 07:31:05 +01:00
admin	e95d083f47	Close-out security night 2026-11-02/03: R-1303, R-1310, R-1324, R-1334, R-1336 closed; R-1354-R-1365 filed; 8 claims walked (31 -> 23), capability map + stands; STATUS (release list, D66), CONTEXT, report. Docs only.	2026-11-03 04:58:42 +01:00
felhom security watch	329d769d89	security-watch: memory of 2026-11-03 (R-1303). Docs only.	2026-11-03 03:44:53 +00:00
admin	17820abbe3	Security night 2026-11-02: part 3 live proofs (R-1347, R-1348, R-1339, R-1351, Traefik), part 5 walks, big-step walks on the drill (Paperless, n8n 3, SparkyFitness). Evidence only. Docs only.	2026-11-03 04:08:23 +01:00
admin	03a71b68e6	Evidence: redact a dead session token of a throwaway Actual (the app was removed by the walk). Docs only.	2026-11-03 00:30:42 +01:00
admin	d02c0c2cd8	Security night 2026-11-02: the triage, six proven 9202 walks + the negative control, three bench runs, the watch's logs on both runners (evidence only); 05/07 design lines for R-1352, R-1347, R-1348. Docs only.	2026-11-03 00:26:52 +01:00
admin	2f7e836f68	R-1352: the does-not-answer alarm is not mailed after the restart mail of the same episode. Hub commit only.	2026-11-02 23:16:16 +01:00
felhom security watch	a560e69954	security-watch: memory of 2026-11-02 (R-1303). Docs only.	2026-11-02 21:59:33 +00:00
admin	4afa8c3cde	security watch: seven pins it can never read are a stated GAP, so the source streaks reset; a read timeout is retried; every failed source is printed (R-1334); R-1310's rules (another package, every GHSA a release names, a word-only line, date tags)	2026-11-02 22:38:51 +01:00
felhom security watch	c25b790ce9	security-watch: memory of 2026-11-02 (R-1303). Docs only.	2026-11-02 03:44:17 +00:00
felhom security watch	f196e74e60	security-watch: memory of 2026-11-01 (R-1303). Docs only.	2026-11-01 03:41:13 +00:00
felhom security watch	38baf4b543	security-watch: memory of 2026-10-31 (R-1303). Docs only.	2026-10-31 03:44:22 +00:00
admin	3cda7e8d6c	close-out 2026-10-30: R-1344 and R-1346 closed, R-1228 switched (D35) and narrowed; R-1352, R-1353 filed; 01/03/05 [DESIGN], total-loss + publish-train runbooks, poster facts; instruction files: the site publishes to Cloudflare Pages	2026-10-30 11:13:17 +01:00
admin	e0e55bf852	manifests: contact-mailer-api publishes only /api/contact (Exact) and limits a client to 20 requests a minute	2026-10-30 10:57:52 +01:00
admin	53107f1b48	D35/R-1228: publish-site-cloudflare.sh (dry run, refusals); the contact form posts to api.felhom.eu	2026-10-30 10:54:29 +01:00
admin	bd74a613bf	manifests: contact-mailer-api ingress for api.felhom.eu (D35/R-1228, operator yes 2026-10-30) — the form's endpoint once the site is on Cloudflare	2026-10-30 10:50:28 +01:00
admin	cea8a90763	manifests: hub 0.178.0 (R-1346 database speed, R-1344 restart event); memory limit 256Mi -> 1Gi (operator yes 2026-10-30)	2026-10-30 10:18:31 +01:00
admin	f1ab634c4b	R-1228: D35 started 2026-10-30 (brief Part 3) — the dated check removed	2026-10-30 10:01:49 +01:00
admin	a13c69b01a	hub 0.178.0: the database speed (R-1346) — four indexes and one hint for the five statements that read whole tables (vouch fleet check, OS alarm agent versions, the 04:30 prune inside its write lock, the apps page); the manifest save in one transaction; the slow-statement line (SQL only, never values); evidence p1-r1344 + p2-r1346	2026-10-30 09:52:03 +01:00
admin	be538975fc	hub: controller_unresponsive_restart (R-1344 restart, agent >= 0.171.0) — one mail per restart, not also controller_restarted_by_agent; the unresponsive alarm text says what the agent will do	2026-10-30 09:23:51 +01:00
felhom security watch	28f3e15738	security-watch: memory of 2026-10-30 (R-1303). Docs only.	2026-10-30 03:44:05 +00:00
admin	e7d9c46370	close-out 2026-10-29 evening release (D65 = A): 04/09/03/05/08 [DESIGN]; R-1349, R-1350 closed (proven live); R-1351 filed; R-1346 measured (the save's own DB step); R-1344 planned events; CONTEXT, STATUS, report, evidence	2026-10-29 20:21:20 +01:00
admin	8cc555be6c	manifest: hub 0.177.0 (Reboot guest, R-1346 slow-request line + vouch timing)	2026-10-29 16:53:29 +01:00
admin	636022dc31	hub 0.177.0: Reboot guest on the host page (D65 = A, reboot_guest in the agent's closed list, 30-minute expiry); R-1346: the slow-request line and the vouch save's per-leg timing	2026-10-29 16:36:34 +01:00
admin	dd3e4137ee	close-out 2026-10-29 afternoon release: R-1343/R-1342/R-1340/R-1341 closed (controller 0.348.0, proven live); R-1349 (guest reboot, decide D65), R-1350 (app_start_failed after a clear) filed; R-1344 numbers so far; CONTEXT (D64), STATUS, report, evidence	2026-10-29 15:25:05 +01:00
admin	e4d91043e4	docs: operator restart + clear hold [DESIGN] lines (03, 05, 08); R-1346/R-1347/R-1348 filed; release-2026-10-29b evidence (restart presses, clear_hold, health log so far, controller 0.348.0 walk)	2026-10-29 14:45:38 +01:00
admin	c1f3a163ea	hub v0.176.1: manifest bump (Restart controller for every guest; token presses named) — on the operator's yes 2026-10-29	2026-10-29 13:39:29 +01:00
admin	2ccf180b3c	hub v0.176.1: a token press is recorded by the token's name (was „basic auth") — test red first	2026-10-29 13:03:36 +01:00
admin	d0dbc6f1cd	hub v0.176.1: Restart controller for every guest of a customer host (0.176.0 gated it on a controller version the agent does not report — found live); R-1345 filed (token scopes cannot be edited) — test red first	2026-10-29 12:57:14 +01:00
admin	682015db86	hub v0.176.0: manifest bump (Restart controller, Clear hold D64, controller_unresponsive R-1344) — on the operator's yes 2026-10-29	2026-10-29 12:43:12 +01:00
admin	3d0c907b56	hub: Restart controller (the agent's closed list on the host-report reply) and Clear hold (D64 = B, the controller's list) on the host page, each behind a confirm; controller_unresponsive (R-1344, alarm only); 04 §6.1 + 09 §3 decision 283; wire gate declares both new wires; R-1344 filed — tests red first	2026-10-29 12:31:33 +01:00
admin	70862fa7b3	R-1343 filed: the hold clear is written back by the running controller's next save; STATUS gives the one-command clear + restart	2026-10-29 11:54:36 +01:00
admin	7c69c726a0	Release run 2026-10-29 close-out: report, STATUS (Updated + the one hold to clear), CONTEXT; closed R-1238/R-1338/R-1256/R-1255, R-528 WATCHING, R-1254 released note; R-1342 filed (fixed on main 652a690); 07 §6.3; evidence	2026-10-29 11:17:03 +01:00
admin	650aa0cf99	Release run 2026-10-29: hub 0.175.0 ceremony + watch, agent 0.168.0 on the three test boxes, controller 0.347.0 walk + local restore + OOM + D62 end to end on Tester 1 (evidence); R-1341 filed; R-1339/R-1340 moved to their sections, headers recounted	2026-10-29 10:12:40 +01:00
admin	d6352cd8bf	hub v0.175.0: manifest bump (R-1255 escrow edges + D62 restore_copy_deleted) — on the operator's yes 2026-10-29	2026-10-29 09:34:56 +01:00
admin	41f8f67015	D63 live: R-1256 H4 + H5 failed stop proven on Tester 1 (test build); D62 proven live; R-1340 filed (hold mail tells the option-C story for any cause); 07 §6.3 [FACT]; evidence audits/d63-2026-10-29/	2026-10-29 09:24:12 +01:00
admin	bf69bb91ac	D62 + D63 (operator 2026-10-29 08:17): 09 §3 decisions 281/282; 07 §6.3 [DESIGN] — restore copies 30 days + Törlés most; prove-or-revert for H4/H5	2026-10-29 08:54:41 +01:00
admin	19afefab55	hub(D62): restore_copy_deleted accepted and operator-only — the household's restore-copy delete is recorded (test red first)	2026-10-29 08:23:29 +01:00
admin	7799ef5f54	Night 2026-10-28 close-out: report, STATUS morning list, CONTEXT (CC decisions), R-1256/R-1238 states, R-1339 filed, Plex box walk evidence, catalog morning patches (prepared, not pushed)	2026-10-29 05:19:59 +01:00
admin	7a6b9ff19d	night 2026-10-28: R-1256 [DESIGN] + H5/H8 live facts in 07; fault.selfheal walked on 9202 (evidence)	2026-10-29 04:45:53 +01:00
felhom security watch	ecae56559c	security-watch: memory of 2026-10-29 (R-1303). Docs only.	2026-10-29 03:45:11 +00:00
admin	6a6dd94dac	Register: R-528's state leads with OPEN (register-shape RULE 8)	2026-10-29 02:42:56 +01:00
admin	0abed37f3e	Night 2026-10-28 (part): R-1256 H5 proven live on 9202 (a busy volume is not written into; the live data put back, no hold); claim fail.customer-self-restore re-walked (route proven, the person still open); rows R-1254/R-1255/R-528/R-1338 state; Plex evidence; two dead bench tokens redacted from evidence	2026-10-29 02:39:32 +01:00
admin	d8752de9e3	Night 2026-10-28 (part): R-1338 — the memory mark reads the live anon (decision 22 refined; bench 27.7 %, 9202 25.1 %, catalog patch prepared, not pushed); claim fault.already-paired walked on Tester 1's console (33 -> 32 not walked); evidence	2026-10-29 00:14:46 +01:00