100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
adminandClaude Opus 5.5	ddbcabebb4	hub v0.179.1: a host boot ends "the host needs a restart" at once (demo-felhom 2026-11-08) ... The host layer's reboot-needed run is cut at the host's last boot (crash guard last_boot_at, one minute skew margin): the kernel step's reboot is reported on the kernel layer, so the flag outlived it until the next night. Feeds the System page and the 14-day alarm. Test TestRebootNeeded_ClearedByAHostBootAfterTheClaim, red on two mutants. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-08 07:21:50 +01:00
adminandClaude Opus 5.5	6f293aa151	R-1228 closed (old website copy retired, headers restored); agent 0.172.1 delivered; STATUS + REPORT ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-07 23:33:12 +01:00
adminandClaude Opus 5.5	7e56d1665b	website: _headers restores X-Frame-Options and text/plain for /scripts/ on Cloudflare Pages (lost with the 2026-10-30 move) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-07 23:20:04 +01:00
adminandClaude Opus 5.5	c28ce7ce2f	R-1228: retire DooPlex's copy of the website (operator yes); the installer pin moves to INSTALLER-TAG ... - INSTALLER-TAG (one line) is the only installer pin; publish-site-cloudflare.sh reads it. - hostinstall gate 6c: pin file holds one tag, no manifest pins one, publish script takes the site from origin/main and scripts/ from the tag. Red seen on five mutants. - manifests: webpage.yaml keeps only FileBrowser; contact-mailer.yaml loses the old felhom.eu/api Ingress (an orphan: glued to the next doc by a `80---` typo). - R-110 fence text, manifests/website rules, build skill, runbooks, poster facts updated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-07 23:10:21 +01:00
adminandClaude Opus 5.5	7c6d3236df	Test-box check 2026-11-07: demo-hp space freed (R-548 note), N100 pve-step R6 diary entry (agent 0.172.1), STATUS do-list, R-1228 due date moved (asked) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-07 22:52:27 +01:00
admin	a7e86fd273	Release 2026-11-03 close-out: every box on 0.350.0 with Traefik v3.7.17; golden 0.350.0 + agent 0.172.0 vouched; hub 0.179.0; catalog f4c5c79 ... Closed: R-1354, R-1347, R-1348, R-1339, R-1351, R-1323, R-1302, R-1352, R-1331, R-1356, R-1359 (235 -> 224). R-548 and R-1361 carry today's readings.	2026-11-03 10:26:23 +01:00
admin	01a44d5626	Hub manifest to 0.179.0 on the operator's yes (R-1352); the 30-minute watch, the agent 0.172.0 release lines, the hub build log	2026-11-03 09:01:21 +01:00
admin	57d46201d6	Release 2026-11-03: controller 0.350.0 evidence (load test, walks, restore, floor); golden 0.350.0 baked (sha 082e2e040de5); hub v0.179.0 heading ... Traefik's memory on 9202: v3.7.16 18.7 -> 79.0 MiB after 920 connections, not released; v3.7.17 flat near 25 MiB for 25,116 connections. Golden 0.350.0 waits for its fresh-install proof and the operator's vouch. Not 0.349.0.	2026-11-03 08:43:56 +01:00
admin	47f5011797	Golden 0.349.0 baked and published on the operator's word (sha 9d97e7c5ec3e); waits for the vouch ... The Sunday 2026-11-01 bake was missed and golden_currency_gate.py was red at 8 days. Baked at the floor (0.349.0, MinAgent 0.158.1) with the hub's newest approved Docker release, os-docker-20261026-190351. Registry round trip matches. Token scan 0, control 1. The drill VM is back on virgin. It carries Traefik v3.7.16 until controller 0.350.0 reaches the box (R-1354). No fresh install was run.	2026-11-03 07:31:05 +01:00
admin	e95d083f47	Close-out security night 2026-11-02/03: R-1303, R-1310, R-1324, R-1334, R-1336 closed; R-1354-R-1365 filed; 8 claims walked (31 -> 23), capability map + stands; STATUS (release list, D66), CONTEXT, report. Docs only.	2026-11-03 04:58:42 +01:00
admin	17820abbe3	Security night 2026-11-02: part 3 live proofs (R-1347, R-1348, R-1339, R-1351, Traefik), part 5 walks, big-step walks on the drill (Paperless, n8n 3, SparkyFitness). Evidence only. Docs only.	2026-11-03 04:08:23 +01:00
admin	03a71b68e6	Evidence: redact a dead session token of a throwaway Actual (the app was removed by the walk). Docs only.	2026-11-03 00:30:42 +01:00
admin	d02c0c2cd8	Security night 2026-11-02: the triage, six proven 9202 walks + the negative control, three bench runs, the watch's logs on both runners (evidence only); 05/07 design lines for R-1352, R-1347, R-1348. Docs only.	2026-11-03 00:26:52 +01:00
admin	2f7e836f68	R-1352: the does-not-answer alarm is not mailed after the restart mail of the same episode. Hub commit only.	2026-11-02 23:16:16 +01:00
admin	4afa8c3cde	security watch: seven pins it can never read are a stated GAP, so the source streaks reset; a read timeout is retried; every failed source is printed (R-1334); R-1310's rules (another package, every GHSA a release names, a word-only line, date tags)	2026-11-02 22:38:51 +01:00
admin	3cda7e8d6c	close-out 2026-10-30: R-1344 and R-1346 closed, R-1228 switched (D35) and narrowed; R-1352, R-1353 filed; 01/03/05 [DESIGN], total-loss + publish-train runbooks, poster facts; instruction files: the site publishes to Cloudflare Pages	2026-10-30 11:13:17 +01:00
admin	e0e55bf852	manifests: contact-mailer-api publishes only /api/contact (Exact) and limits a client to 20 requests a minute	2026-10-30 10:57:52 +01:00
admin	53107f1b48	D35/R-1228: publish-site-cloudflare.sh (dry run, refusals); the contact form posts to api.felhom.eu	2026-10-30 10:54:29 +01:00
admin	bd74a613bf	manifests: contact-mailer-api ingress for api.felhom.eu (D35/R-1228, operator yes 2026-10-30) — the form's endpoint once the site is on Cloudflare	2026-10-30 10:50:28 +01:00
admin	cea8a90763	manifests: hub 0.178.0 (R-1346 database speed, R-1344 restart event); memory limit 256Mi -> 1Gi (operator yes 2026-10-30)	2026-10-30 10:18:31 +01:00
admin	f1ab634c4b	R-1228: D35 started 2026-10-30 (brief Part 3) — the dated check removed	2026-10-30 10:01:49 +01:00
admin	a13c69b01a	hub 0.178.0: the database speed (R-1346) — four indexes and one hint for the five statements that read whole tables (vouch fleet check, OS alarm agent versions, the 04:30 prune inside its write lock, the apps page); the manifest save in one transaction; the slow-statement line (SQL only, never values); evidence p1-r1344 + p2-r1346	2026-10-30 09:52:03 +01:00
admin	be538975fc	hub: controller_unresponsive_restart (R-1344 restart, agent >= 0.171.0) — one mail per restart, not also controller_restarted_by_agent; the unresponsive alarm text says what the agent will do	2026-10-30 09:23:51 +01:00
admin	e7d9c46370	close-out 2026-10-29 evening release (D65 = A): 04/09/03/05/08 [DESIGN]; R-1349, R-1350 closed (proven live); R-1351 filed; R-1346 measured (the save's own DB step); R-1344 planned events; CONTEXT, STATUS, report, evidence	2026-10-29 20:21:20 +01:00
admin	8cc555be6c	manifest: hub 0.177.0 (Reboot guest, R-1346 slow-request line + vouch timing)	2026-10-29 16:53:29 +01:00
admin	636022dc31	hub 0.177.0: Reboot guest on the host page (D65 = A, reboot_guest in the agent's closed list, 30-minute expiry); R-1346: the slow-request line and the vouch save's per-leg timing	2026-10-29 16:36:34 +01:00
admin	dd3e4137ee	close-out 2026-10-29 afternoon release: R-1343/R-1342/R-1340/R-1341 closed (controller 0.348.0, proven live); R-1349 (guest reboot, decide D65), R-1350 (app_start_failed after a clear) filed; R-1344 numbers so far; CONTEXT (D64), STATUS, report, evidence	2026-10-29 15:25:05 +01:00
admin	e4d91043e4	docs: operator restart + clear hold [DESIGN] lines (03, 05, 08); R-1346/R-1347/R-1348 filed; release-2026-10-29b evidence (restart presses, clear_hold, health log so far, controller 0.348.0 walk)	2026-10-29 14:45:38 +01:00
admin	c1f3a163ea	hub v0.176.1: manifest bump (Restart controller for every guest; token presses named) — on the operator's yes 2026-10-29	2026-10-29 13:39:29 +01:00
admin	2ccf180b3c	hub v0.176.1: a token press is recorded by the token's name (was „basic auth") — test red first	2026-10-29 13:03:36 +01:00
admin	d0dbc6f1cd	hub v0.176.1: Restart controller for every guest of a customer host (0.176.0 gated it on a controller version the agent does not report — found live); R-1345 filed (token scopes cannot be edited) — test red first	2026-10-29 12:57:14 +01:00
admin	682015db86	hub v0.176.0: manifest bump (Restart controller, Clear hold D64, controller_unresponsive R-1344) — on the operator's yes 2026-10-29	2026-10-29 12:43:12 +01:00
admin	3d0c907b56	hub: Restart controller (the agent's closed list on the host-report reply) and Clear hold (D64 = B, the controller's list) on the host page, each behind a confirm; controller_unresponsive (R-1344, alarm only); 04 §6.1 + 09 §3 decision 283; wire gate declares both new wires; R-1344 filed — tests red first	2026-10-29 12:31:33 +01:00
admin	70862fa7b3	R-1343 filed: the hold clear is written back by the running controller's next save; STATUS gives the one-command clear + restart	2026-10-29 11:54:36 +01:00
admin	7c69c726a0	Release run 2026-10-29 close-out: report, STATUS (Updated + the one hold to clear), CONTEXT; closed R-1238/R-1338/R-1256/R-1255, R-528 WATCHING, R-1254 released note; R-1342 filed (fixed on main 652a690); 07 §6.3; evidence	2026-10-29 11:17:03 +01:00
admin	650aa0cf99	Release run 2026-10-29: hub 0.175.0 ceremony + watch, agent 0.168.0 on the three test boxes, controller 0.347.0 walk + local restore + OOM + D62 end to end on Tester 1 (evidence); R-1341 filed; R-1339/R-1340 moved to their sections, headers recounted	2026-10-29 10:12:40 +01:00
admin	d6352cd8bf	hub v0.175.0: manifest bump (R-1255 escrow edges + D62 restore_copy_deleted) — on the operator's yes 2026-10-29	2026-10-29 09:34:56 +01:00
admin	41f8f67015	D63 live: R-1256 H4 + H5 failed stop proven on Tester 1 (test build); D62 proven live; R-1340 filed (hold mail tells the option-C story for any cause); 07 §6.3 [FACT]; evidence audits/d63-2026-10-29/	2026-10-29 09:24:12 +01:00
admin	bf69bb91ac	D62 + D63 (operator 2026-10-29 08:17): 09 §3 decisions 281/282; 07 §6.3 [DESIGN] — restore copies 30 days + Törlés most; prove-or-revert for H4/H5	2026-10-29 08:54:41 +01:00
admin	19afefab55	hub(D62): restore_copy_deleted accepted and operator-only — the household's restore-copy delete is recorded (test red first)	2026-10-29 08:23:29 +01:00
admin	7799ef5f54	Night 2026-10-28 close-out: report, STATUS morning list, CONTEXT (CC decisions), R-1256/R-1238 states, R-1339 filed, Plex box walk evidence, catalog morning patches (prepared, not pushed)	2026-10-29 05:19:59 +01:00
admin	7a6b9ff19d	night 2026-10-28: R-1256 [DESIGN] + H5/H8 live facts in 07; fault.selfheal walked on 9202 (evidence)	2026-10-29 04:45:53 +01:00
admin	6a6dd94dac	Register: R-528's state leads with OPEN (register-shape RULE 8)	2026-10-29 02:42:56 +01:00
admin	0abed37f3e	Night 2026-10-28 (part): R-1256 H5 proven live on 9202 (a busy volume is not written into; the live data put back, no hold); claim fail.customer-self-restore re-walked (route proven, the person still open); rows R-1254/R-1255/R-528/R-1338 state; Plex evidence; two dead bench tokens redacted from evidence	2026-10-29 02:39:32 +01:00
admin	d8752de9e3	Night 2026-10-28 (part): R-1338 — the memory mark reads the live anon (decision 22 refined; bench 27.7 %, 9202 25.1 %, catalog patch prepared, not pushed); claim fault.already-paired walked on Tester 1's console (33 -> 32 not walked); evidence	2026-10-29 00:14:46 +01:00
admin	8a3df79fda	Night 2026-10-28 (part): design notes R-1255/R-1254 (03), R-528 (08, live on Tester 1 + the operator's mail); capability map E8/E9 PROVEN-LIVE, B2 re-checked; 2 claims walked (35 -> 33 not walked); evidence + red-proofs	2026-10-29 00:00:44 +01:00
admin	1ee6d5a507	hub: R-1255 escrow edges (HUNT-3 H3/H4) — the carry takes the package with a hash; set-aside names unique per run; the purge never takes a reused path's package ... Tests red before the fix: TestR1255_TheCarryTakesTheNewestPackageThatHasAHash, TestR1255_APurgeNeverDeletesAPackageAReusedPathStillNeeds, TestR1255_TwoSetAsidesOnOneDayGetTwoNames. Commit only; rides the next hub release.	2026-10-28 22:40:01 +01:00
admin	05595ecff6	Gitea 28.2.0 live (R-1315 closed; D57 -> decision 280: imports only from GitHub/Codeberg/GitLab); R-1338: the Meilisearch cap helps on the bench, not on 9202 — measured, not pushed; STATUS, CONTEXT, evidence	2026-10-28 21:35:56 +01:00
admin	1be7aa87dc	Big steps close-out: Wanderer, Termix, Homepage, Seerr live (bench + box + undo); R-1335/R-1311/R-1320/R-1317 closed, R-1338 opened, R-1334 VERIFY (0 refused in two dry runs, no login); 09 decision 279 + [DESIGN] path rule; STATUS, CONTEXT, evidence	2026-10-28 18:23:33 +01:00
admin	3c0a33c1a0	R-1334 evidence: dry run 2459 log	2026-10-28 13:08:41 +01:00
admin	8644450db2	image reader waits out a registry 429 and tries again (3 tries); 08 + changelog: the dry-run measurement of the Docker Hub change (0 refused), two runners = two tag caches (R-1334)	2026-10-28 13:08:33 +01:00
admin	fe677bae94	security watch: Docker Hub requests spaced, a 429 retried (NOT CHECKED only after the last try), tag lists cached 24 h per registry path on the runner (R-1334); W14	2026-10-28 12:43:38 +01:00
admin	1c8f9ef924	Runtime fixes 2026-10-28 close-out: lane batches 3+4 live (papra, dawarich, adventurelog), R-1332 closed (10 live / 4 big step / 6 no fix), TABLE final, AdventureLog runs 2-4 evidence, 9202 back on the live catalog; CONTEXT, STATUS, REPORT	2026-10-28 12:04:26 +01:00
admin	ac95ca4fc3	STATUS 2026-10-28 (day): the steps live, the waiting apps in one line; D61 ruled and moved to history	2026-10-28 10:49:00 +01:00
admin	e381172846	register: section counts after the runtime-fixes rows	2026-10-28 10:40:43 +01:00
admin	47e1ef062b	Runtime fixes 2026-10-28: TABLE of the 20 apps (calibre-web loads Brotli — corrected; file manager does not, 3 boxes), lane batches 1+2 evidence; 09 decisions 277 (D61, operator) + 278 and the lane batch; R-1313/R-1322/R-1327 closed; R-1334..R-1337 opened; app rows updated	2026-10-28 10:40:31 +01:00
admin	29e9cd36a6	security watch: remember a notice per group — a catalog pin and a DooPlex pin of one image no longer share one memory entry (old entries copied once, no re-mail); W13	2026-10-28 10:39:41 +01:00
admin	73c91eacce	security watch: the RUNTIME line names the zstd decoder in words, not the module repr (R-1327)	2026-10-28 10:33:39 +01:00
admin	a3247d9f44	security watch reads zstd layers in CI by itself (R-1327): pinned zstandard 0.25.0 wheel, sha256-checked; RUNTIME log line; HA 2026.9.4 and RomM 5.4.1 dropped from the cache for the CI fill proof; Immich v3.3.5 power-cut repair evidence	2026-10-28 07:59:34 +01:00
admin	3d3cd3ad7c	Night 2026-10-27/28: Immich and Home Assistant lane walks proven (drill), Wanderer hidden in the drill, R-1322/R-1313 updated; STATUS (D61 RomM, the morning list), CONTEXT with the unattended decisions	2026-10-27 23:36:25 +01:00
admin	f5a4995da5	security watch sees runtimes (R-1327) and DooPlex (R-1328); HTTP2Shell rows R-1329–R-1332; R-1326 closed ... - scripts/image_runtime.py: Node / Python Brotli / brotlicffi / apk / dpkg read from an image's registry config and layers (no pull; HEAD for the nightly digest; zstd via the zstd program where present; quay.io, index.docker.io). - security_watch.py: a „runtime" source (security_watch_runtimes.json), cached by digest in state.json (154 images, filled on DooPlex tonight); ghcr.io tag lists are paged; the DooPlex group (own block, homelab next-step). - dooplex_inventory.py + documentation/security-watch/dooplex-workloads.txt (89 images, homelab-manifests 5aeec8d). - Tests W10–W12 (58 checks) + test_image_runtime.py (13), each red-proved. - audits/http2shell-2026-10-27: the Home Assistant lane walk (proven), HOMELAB-LIST.md (19 to update), the run log. - 08 §11 design line; 09 §3 decision 276 (HA monthly = same main version; decided by CC unattended).	2026-10-27 23:23:02 +01:00
admin	503692a1da	D60 (CC never deletes from the secret store) and D56–D59 recorded: 09 §3 decisions 271–275, rows R-785/R-1311/R-1313/R-1315, the decide table cleared; D60 in workspace CLAUDE, 12, secrets runbook	2026-10-27 22:31:44 +01:00
admin	a69ddbde56	hub manifest (R-1326): a startupProbe gives the hub up to 180 s to start (measured 31–36 s); liveness unchanged after start	2026-10-27 21:45:58 +01:00
admin	f633d48bab	R-1299 CLOSED: the clean-up window button (hub 0.174.0/0.174.1, live grant + cancel on tester-1); R-1326 filed (hub start-up vs liveness); R-1237 updated (46 dead names removed with sec rm); 07/05 design lines; secrets runbook: sec rm	2026-10-27 21:16:48 +01:00
admin	714ee236b2	hub v0.174.1: manifest bump (R-1299 event row + Backup & DR tab) — on the operator's yes 2026-10-27	2026-10-27 20:22:46 +01:00
admin	de57c090bf	hub(R-1299): the window grant/cancel event is really stored (0.174.0 wrote no row); the block moves to the Backup & DR tab	2026-10-27 20:12:43 +01:00
admin	1796112508	Security app updates 2026-10-27, close-out: Jellyfin 12.4 live (catalog 540f185; bench + box + the undo proven, R-1314 filed and closed); per-box floors cleared after a clean 30-min watch; TRIAGE states; STATUS (four picks D56-D59); teardown; REPORT-security-app-updates-2026-10-27.md	2026-10-27 19:26:39 +01:00
admin	33f3cd7af0	hub v0.174.0: manifest bump (R-1299, the clean-up window button) — on the operator's yes 2026-10-27	2026-10-27 19:22:20 +01:00
admin	d85198b835	hub(R-1299): the one-time clean-up window gets a button on the customer page ... The Backup card's off-site part shows the window state (weekly switch, the normal cap, a waiting grant, the last window) and a form: optional limit -> a confirm step that names the customer and the limit -> the SAME route and rule as the script address (POST /offsite/window-grant/<customer>, wr(grpOffsite), the page's CSRF). A waiting grant can be cancelled. A raised limit above the store's measured snapshot count is refused (the 500 ceiling stays). Every grant and cancel: a log line and an operator-only info event offsite_window_grant (who, customer, limit). Tests TestR1299_* (five), red-proved by five mutations.	2026-10-27 17:23:37 +01:00
admin	7610f69e7c	Security app updates 2026-10-27: 14 security-fix steps + 2 normal steps live (catalog 06e603e, 7b0071e, 65a6b11); controller v0.346.1 (traefik, file manager, cloudflared) floor set; R-1304 and R-1306 CLOSED, R-1305 NARROWED; R-1313, R-1315–R-1325 filed (big steps left, three observations); 09 decision 255 and B23: the batch use of the lane; evidence	2026-10-27 17:22:02 +01:00
admin	7c75162a18	REPORT-release-2026-10-27: the night's fixes, the line test, the release block; the floor watch and the per-box clear (evidence)	2026-10-27 16:13:40 +01:00
admin	acd79a78cc	Release block 2026-10-27: hub 0.173.0, agent 0.167.0, controller 0.346.0 released; R-1250 fixed the same day and proven; ten rows closed, R-1312 opened ... - audits/linetest-2026-10-27/: the hold failed four times as built (qBittorrent drains ~14 s), the fix 710ceac, the test through the hold on 0.346.0-rc.1 (94.5 Mbit/s, the limit back exactly), teardown. - audits/release-2026-10-27/: builds, agent release + signed updates, per-box and global floors, box walk. - 09 §3 decisions 269 (R-1250 fix the same day) and 270 (R-1218 live proof waived); D55's window result in 268. - 08 §: the drain-wait design line. STATUS, CONTEXT, register (223 -> 214).	2026-10-27 15:45:59 +01:00
admin	708a34512e	Security app updates 2026-10-27: evidence of batch 1 (box walks rallly, romm, code-server, outline, vikunja; wishlist + bookstack bench and box; jellyfin bench; the walk's negative control). Docs only.	2026-10-27 15:08:44 +01:00
admin	bbc3acb817	hub v0.173.0: manifest bump (D53 held apps, R-1218 hub half, Go 1.27.3) — on the operator's yes 2026-10-27	2026-10-27 09:31:45 +01:00
admin	29134c52c2	security_watch: a GitHub Actions advisory is not listed; an empty fix with a closed range reads 'after X' (R-1310 part; test W9, red first)	2026-10-27 09:16:58 +01:00
admin	ba06b873b9	Security app updates, Part 1: the triage of 38 flagged pins (TRIAGE.md, per-app notes, PICKS.md); R-1306 triaged; R-1310 (watch classifier) and R-1311 (Termix X-Forwarded-For) filed	2026-10-27 09:06:38 +01:00
admin	c6248dbfc5	R-1303: the GitHub key is in place (CI dry job 2415 read every repo in one night); first real night (job 2413) mailed nothing, as designed; STATUS do-item removed	2026-10-27 07:55:04 +01:00
admin	8744eab80d	R-1174 CLOSED: the status gate refuses from 2026-10-27 (hand run: clean copy rc 0, a copy citing a closed row rc 1); R-1250's due check moves one day (the line test runs today, from 10:00 CET) ... The nightly CI job 2412 convicted both due checks, as designed.	2026-10-27 05:16:43 +01:00
admin	626275b187	R-1303 built and live-proven (test mail arrived, seed run committed its memory); R-1305–R-1309 filed (file manager, 27 apps, image packages, floating tags, mail-only notices); docs 08 §11, B23, monthly §4a; STATUS	2026-10-26 23:51:45 +01:00
admin	6ee23a3b8f	R-1303: watch — abandoned templates are GAP, a seed's unread pins stay pending (no storm after a seed); 38 checks	2026-10-26 23:34:29 +01:00
admin	1f62d62915	R-1303: the nightly security watch — security_watch.py, the shared pin list + upstream gate, 35 tests, the CI job (03:40 UTC)	2026-10-26 23:20:06 +01:00
admin	97ae7086c0	R-1303 (P2): the security watch — spike: which notice sources catch the controls; R-1304 (P3): traefik v3.7.13 inside 12 October advisories	2026-10-26 22:57:07 +01:00
admin	ae3db89ab3	night fixes 2026-10-26: live proofs (R-1220, R-1232, R-1187, R-1298), register states, design lines; R-1300 filed; R-528 design ... Evidence audits/night-fixes-2026-10-26/ (scanned: 0 secret hits).	2026-10-26 22:17:36 +01:00
admin	cc0fb962f3	R-1300 CLOSED: controller 0.345.1 (cloudflared 2026.10.3) on every box; R-1301 filed (N100 host clock, chrony fails at boot); 01: cloudflared follows Cloudflare's security notices	2026-10-26 21:41:05 +01:00
admin	f680720ecd	STATUS: R-1300 (P1) — the tunnel's bad-certificate trust, until 0.345.1 reaches each box	2026-10-26 20:58:42 +01:00
admin	ffb91d89e7	R-1300 (P1, Security): cloudflared 2026.9.3 trusts the eMudhra weak-key intermediates — the list, the origin check (not affected), evidence	2026-10-26 20:50:39 +01:00
admin	3720bd1f03	audits: R-972 govulncheck before/after (Go 1.27.3)	2026-10-26 20:42:41 +01:00
admin	d625a1437d	hub build(R-972): Go 1.27.3 + golang:1.27.3-alpine3.24 builder (GO-2026-6809) — govulncheck 1 → 0 called	2026-10-26 20:42:35 +01:00
admin	09b5f02fc3	hub(R-1218): never replace a recovery package that seals the off-site key with one that seals none (409) ... SaveHostEscrowWithIdentity refuses (ErrEscrowWouldDropRepoKey); the PUT answers 409. Red-proved (store: superseded=true; API: 500). Two older tests pinned the old demotion and are updated. Commit only.	2026-10-26 20:21:08 +01:00
admin	99c0f5e310	D55 = 260 recorded (09 §3 decision 268); the grant set and read back; R-1299 filed (no grant button)	2026-10-26 20:11:22 +01:00
admin	3ca9b71c73	R-435 read and closed: the 2026-10-26 windows (hub records + mailbox; box logs lost to restarts, said plainly)	2026-10-26 19:17:19 +01:00
admin	4955744462	docs: STATUS D55 (the D54 grant needs the operator: CC's token lacks offsite:write; the cap), R-1294/R-1297 rows, CONTEXT	2026-10-26 19:06:41 +01:00
admin	e33ec8210a	D53 built + live-proven (08 §10 [DESIGN — built]); R-1297 decoys: register-shape decoys assert the script's exit ... - 08 §10: built (controller 5bd03ad, hub 7e57e824, commit only); putback_pending as on the wire; as-built notes - audits/d53-held-apps-2026-10-26: live proof on 9202 against a test hub (3-min grace), red-proofs, teardown - R-1291 BUILT (not released); R-1298 filed (9202's orphan holds + PrivateBin leftover) - test_gate_decoys.py: the register-shape cases also run the script and assert its exit code — R-1297's decoy 2 showed an inert main() passed every case (9 cases red with it now) - audits/r1297-ci-trim-2026-10-26: runners, times, decoys	2026-10-26 19:03:07 +01:00
admin	7e57e824a2	hub(D53): held apps reach the operator — mirror, Held apps list (host + Hosts page), reminder after the grace ... app_held / app_hold_cleared allow-listed and operator-only; handleEvent mirrors them in held_apps; HeldAppsChecker sends ONE app_held_reminder (warning, operator-only, per-app cooldown) after the grace per reason (6 h / 1 d / 3 d), then weekly; recorded before sending; stale rows not reminded; the hub never clears a hold. Test-only alerting.held_app_grace_override. TestD53_* in api/monitor/notify/web, red-proved by six mutations. Commit only.	2026-10-26 18:25:00 +01:00
admin	ecd82abab8	ci(R-1297 A): heavy suites by path on a branch push, all on a tag and nightly; no second full gate run ... - script_tests_gate.py: test_gate_decoys / test_due_checks_gate / dooplex-offsite run on a CI branch push only when one of their paths changed (FELHOM_CHANGED_FILES); no list, an empty or unreadable list = every suite - gates.yml: nightly schedule 03:20 UTC; the list is set only for push:refs/heads/*; a trimmed commits array (total_commits > listed) is an unknown list - test_repo_gates.py and test_due_checks_gate.py group G drive the real runner with GATES narrowed to their labels, instead of the whole gate set a second time (130 s each in CI) - red-proved: filter cases, workflow pins (old gates.yml), inert run_gate, unregistered due-checks	2026-10-26 18:14:23 +01:00
admin	8143a2c872	docs: record D53, D54 and R-1297 (B) (09 §3 decisions 265-267); STATUS moves the two picks to history	2026-10-26 18:07:22 +01:00
admin	2354b9084c	2026-10-26 afternoon: R-1295 and R-1292 closed (hub 0.172.0 + tenantsync v1.4.0 on ep0; controller 0.345.0, floor 13:27:04Z); R-1297 filed (CI speed, operator: both); STATUS (D53, D54), CONTEXT, the run's report.	2026-10-26 14:33:48 +01:00
admin	69443d3c4e	hub v0.172.0 RELEASED (13:08 UTC); felhom-tenantsync v1.4.0 INSTALLED on ep0 (operator yes); R-1292 live on Tester 1 (PASS; run 1 was an instrument failure, kept).	2026-10-26 14:17:07 +01:00
admin	a90a9745a8	hub: image 0.172.0 (R-1295; operator yes 2026-10-26)	2026-10-26 14:04:22 +01:00
admin	232f42d21e	R-1295 live on hub rc.1 (a fresh Tester4 install set up its whole-guest off-site tier; the box consumed the credential and made its first copy); R-1294 read: an honest plan the cap can never catch up with (D54); R-1291 design (08 §10, D53); design lines for R-1295, R-1285, R-1292, R-1294; R-1296 filed; STATUS.	2026-10-26 13:42:47 +01:00