9a55f0bbc7
marketing/facebook: the Facebook APP measured; cover C to your layout (R-919)
main
admin2026-10-09 09:24:23 +02:00
ff27a107c8
D6 / R-138: every stored Cloudflare token checked once (operator present), all 4 PASS; R-138 closed
admin2026-10-09 09:00:05 +02:00
53ec983849
marketing/facebook: record why CI #856 went red (the runner, not the gates)
admin2026-10-09 08:44:23 +02:00
0cb169923c
Day 4 (2026-10-09): kernel night read back, release delivered, ep0-copy job live, D1-D4 proven; R-279/R-30/R-79/R-35/R-901 closed
admin2026-10-09 08:37:18 +02:00
b9073e8fb6
marketing/facebook: a phone has TWO views of the cover, not one (R-919)
admin2026-10-09 08:21:08 +02:00
69fa9cf784
ep0-copy-gc: read ep0's real {"data": [...]} namespace answer; any other shape aborts (found on the first live dry run, guard held)
admin2026-10-09 07:30:08 +02:00
ba7174012a
marketing/facebook: the mark alone on the profile, the real lettering on the covers
admin2026-10-09 07:29:56 +02:00
f0dc6a9d4e
Facebook Page: profile pictures, three covers, preview page and texts (marketing/facebook); R-916 opened
admin2026-10-08 19:19:50 +02:00
e9e6300cfc
Spike: Facebook Page reached after the operator's Page click; scheduled post + photo created, read back byte-equal, deleted
admin2026-10-08 18:38:25 +02:00
ff276ed7d9
Spike: Facebook Page access probe — key valid and non-expiring, reaches no Page (R-914, R-915 opened)
admin2026-10-08 18:03:27 +02:00
fe0dc0d03f
Decision sheet D1-D10: hub CHANGELOG, architecture notes (01, 04, 05, 07, 08, 10), register (VERIFY states, R-912), STATUS, report; decoy suite runs in a git worktree
admin2026-10-08 15:17:02 +02:00
87af859fc3
hub: operator actions for a box (D1, R-314/R-279/R-177, decision 185)
admin2026-10-08 14:38:53 +02:00
d604e624a3
hub: box presence from the wait channel + delete a switched-off box at once (R-30, D2)
admin2026-10-08 14:28:42 +02:00
e6184353db
hub R-138: the token's one zone must BE the customer's domain (order-independent; security review)
admin2026-10-08 14:35:50 +02:00
501312a4d2
hub R-138: refuse a token whose one zone also holds another customer's domain (security review)
admin2026-10-08 14:31:57 +02:00
700a2d06fe
hub: check a pasted Cloudflare token's reach before saving it (R-138 option C, decision 190)
admin2026-10-08 14:25:58 +02:00
e1ff3210eb
hub R-435: each clean-up window explains one fall only; a window stuck open past its deadline explains nothing (security review)
admin2026-10-08 14:38:24 +02:00
b15061efb2
hub R-435: a window explains at most its hub-set cap; unreadable windows fall back to the half-rule (security review)
admin2026-10-08 14:34:38 +02:00
d34dfc84c0
hub: one lost off-site snapshot outside a clean-up window is an error (R-435, D7)
admin2026-10-08 14:30:22 +02:00
135a8b02aa
hub: household health mail points to the dashboard, no raw note (R-79, D3)
admin2026-10-08 14:25:29 +02:00
a350776105
Logos: seven coloured app logos made white like the rest; five logo/picture sets renamed to the catalog slug
admin2026-10-08 15:14:19 +02:00
7585097f26
Dashboard layout: R-906/R-907 fixed on main (controller d5f2e47, 423b6d3), R-909..R-911 filed, evidence from 9202, report
admin2026-10-08 14:47:14 +02:00
4510dd7d05
09 §3 decisions 185-194: the operator's decision sheet D1-D10 recorded first; rulings in each row; R-717 closed (D5)
admin2026-10-08 14:25:15 +02:00
4ef2fee090
website gallery: report + live check after v2 (open, next, close by clicking the picture, swipe keeps it open, JS off opens the file)
admin2026-10-08 13:21:54 +02:00
42519a776a
gallery.js v2: when the last 'next' turns off, focus moves to the close button instead of the page behind (seen in the live check)
admin2026-10-08 13:18:40 +02:00
79c53b5f1a
website: one picture viewer (assets/gallery.js) for app and dashboard pictures — declared data-gallery sets, a click on the big picture closes, JS-off still opens the file; site gate 20 + 4 decoys; demo-hp language read back (hu); R-908 (old Resend key in homelab-manifests history); 131 -> 132
admin2026-10-08 13:14:24 +02:00
460135a15a
website dashboard: live check (pictures load, own language each, 376 px no sideways scroll), report
admin2026-10-08 12:50:44 +02:00
aaac24b05c
website: the dashboard shown — 4 real screenshots per language on the home page, 2 on the technology page (controller 0.303.0, demo-hp household guest, privacy-scanned); site gate 19 (pictures in the page's language) + decoy; R-906, R-907 (dashboard defects seen); 129 -> 131
admin2026-10-08 12:47:48 +02:00
4b5f74e46c
website dashboard screenshots: stopped at the baseline — scratch 9202 runs controller 0.301.0, the fleet 0.303.0; one question for the operator
admin2026-10-08 11:05:00 +02:00
2fd8ff79c5
R-887: a lost CI job seen today (controller 1549), re-run green; report line
admin2026-10-08 10:46:42 +02:00
0b6758d440
R-902 search: contact-mailer source NOT FOUND (DooPlex disks, web editor + history, 10 Gitea repos, build cache); binary kept in git; replacement plan; decoy suite takes a lock (two sessions' runs left a decoy planted)
admin2026-10-08 10:35:27 +02:00
b340c7417b
REPORT-day2-2026-10-08: the afternoon session
admin2026-10-08 10:26:29 +02:00
d9147b02de
R-415 fixed on hub main (no duplicate/nested/felhom.eu customer domain; R-138 option B); R-762 closed (9202 proven, catalog eec9a0d); R-905 opened (wger static in backups); decision sheet D10; 130 -> 129
admin2026-10-08 10:19:39 +02:00
78121aa475
Part F: nine one-page designs (R-314/279/177, R-30, R-79, R-35, R-717, R-138, R-435, R-893); R-177 and R-298 closed with evidence; R-415 re-filed (lost in the 2026-10-03 triage); STATUS decision sheet D1-D9; 131 -> 130
admin2026-10-08 10:12:46 +02:00
5beedcce1a
R-304 option C (hub half): recovery_older_package allowlisted and operator-only; design + row updated
admin2026-10-08 10:09:20 +02:00
83e6167145
ep0-copy-gc: fail-safe guards (partial ep0 list aborts, one deletion per run, HOLD file) — from the commit security review; still not installed
admin2026-10-08 09:58:00 +02:00
05becb04d0
R-901: a deleted customer's audit rows go 1 year after the deletion (hub, unreleased); ep0-copy removal job written, not installed (decision 181); both times in the privacy draft
admin2026-10-08 09:54:39 +02:00
b2dce901b2
website: the FAQ's GDPR answer names where copies and traffic go (R-900; text approved by the operator in chat)
admin2026-10-08 09:43:53 +02:00
aa843a2fa0
decoy suite: fake register ids R-903..907 -> R-99903..99907 (the real register reached R-903; the hook refused the push)
admin2026-10-08 09:25:26 +02:00
803af4798d
website: the language switch becomes a globe like the dashboard's (Magyar / English list, current marked, no JS); site.css v3; gate 13 checks the globe from one LANGS list; 5 decoys
admin2026-10-08 09:13:23 +02:00
67b3fd23d1
website refresh: true numbers (56 apps), claims checked against the capability map, ten missing apps, an English twin of every public page (public, choice B), 404 page; site gates 13-18 + 11 decoys; R-902 opened
admin2026-10-08 08:29:17 +02:00
b119301c6f
R-243: offsite_escrow_pending — an operator alarm when off-site is on and the escrow never done (7 days); 09 decisions 177-179; 07 R-899 note
admin2026-10-08 08:00:08 +02:00
2844d0b0e6
kernel lane Part E1 on the Tester 1 box: forced panic falls back, unhealthy boot self-reverts, healthy boot becomes the default (evidence)
admin2026-10-07 17:20:19 +02:00
2ccdf22081
R-897 filed: after a host restart the guest's first backup run can race the agent's drive re-bind (measured on demo-hp, kernel-lane arc)
admin2026-10-07 15:42:55 +02:00
ab3b7ea2f4
hub v0.143.0 (code): the kernel lane — the day-before household mail, the night instruction, the operator's kernel set (R-836, decision 172)
admin2026-10-07 15:34:14 +02:00
0c5dbfbfc1
09 §3 decisions 172-173 (kernel lane yes, option A + C; R-32 leftovers left, P4) recorded before the work
admin2026-10-07 14:59:19 +02:00
b0276c7197
Day 2026-10-07: Parts A-H done — hub 0.142.0 + agent 0.151.0 delivered, Proxmox lane proven on demo-felhom, kernel spike recorded; 130 -> 126
admin2026-10-07 14:19:58 +02:00
c79e475511
Kernel spike done (R-836): ESP one-shot and BootNext pass on all three boxes; watchdog fails; design with two operator questions
admin2026-10-07 13:08:03 +02:00
28da46a764
Kernel spike (R-836): Tester 1 and demo-felhom evidence; decision 171 (reboots without a per-reboot word, never DooPlex)
admin2026-10-07 12:46:10 +02:00
7942fb6713
day 2026-10-07: red-proofs for Parts B, C, D1, E, F
admin2026-10-07 10:22:59 +02:00
9c94a9c6c0
R-366 slice 2 (decision 168): one operator line when the box's whole-guest archives include another key's (edge-triggered)
admin2026-10-07 10:18:50 +02:00
e03b18ea21
R-32 (decision 167): RESET purges the off-site folder through the sub-account's own login before deleting it
admin2026-10-07 10:07:50 +02:00
aeca52ea54
R-105 (decision 169): retire the never-built slim DR record fields (no writer, no reader); 05 §9/§11, 06 §3.5 corrected
admin2026-10-07 10:02:19 +02:00
e7fb10200e
R-812 option A (hub): the Proxmox package set — candidate, operator approval, System page
admin2026-10-07 10:11:45 +02:00
c01ea2e7e9
03 §3.1: the controller-image write goes through a root verb (R-861 (a) A1); felhom-op's pct lines anchored (B2); decision 165
admin2026-10-07 10:03:03 +02:00
d061ac12fc
Part D step 2 (read-only listing; clean-up stopped: no bx11 main-account login) and Part H (Tester 2: no daily household mail)
admin2026-10-07 09:58:56 +02:00
52262c75c1
Part A: operator rulings 162-170 recorded; R-822 closed by ruling; R-836 P2; shared rule: no hub build/deploy without the operator
admin2026-10-07 09:54:13 +02:00
9828acc646
golden waiver: issued 2026-10-07, expires 2026-10-13 — controller 0.302.0 delivered by floor the day after the 0.301.0 bake; weekly bake due 2026-10-13
admin2026-10-07 09:29:15 +02:00
b58f3ccefd
Read-back Parts B and D (R-518: night stop 91 s, one press 80 s, page text holds); rule 11 — every helper prompt carries the brief's fences in full (decision 160); decision 161
admin2026-10-07 08:51:43 +02:00
a5cbc275a3
R-892: password reset done; the walk refused by the permission check (box unchanged)
admin2026-10-07 07:45:24 +02:00