admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 0e22a0ecc7 manifests: revert the TEST-ONLY OS approval wait (ruled 24h + 1 night) admin 2026-10-04 11:14:42 +02:00
  • 44992360a4 manifests: TEST-ONLY OS approval wait 2m / 0 nights (Part G 2; reverted in the same session) admin 2026-10-04 11:12:04 +02:00
  • 66b7540b7a manifests: hub 0.130.0 admin 2026-10-04 10:58:53 +02:00
  • a23ae9e3dc golden waiver: renewed 3 days (bake is Part H of this session) admin 2026-10-04 10:56:55 +02:00
  • c5f91174f6 hub v0.130.0: OS updates, guest fast lane — rings, per-box switch, OS releases approved from ring 0, os-report, os_update desired block admin 2026-10-04 10:56:39 +02:00
  • 6ed79cd2e9 docs: rulings 2026-10-04 ~10:17 (decisions 78-80) admin 2026-10-04 10:24:28 +02:00
  • 1b74ddc0c9 off-site closed (R-833, R-834 closed; R-95 dated check; R-726 options) + OS-update spike: 11 corrected C1-C12, wrapper draft, answers; R-835..R-839 admin 2026-10-04 09:54:31 +02:00
  • 85e3e05e10 manifests: hub 0.129.0 admin 2026-10-04 08:58:02 +02:00
  • 55f7621c90 hub v0.129.0: operator raises ONE clean-up window's cap (R-833); restore-beside script + runbooks (R-834) admin 2026-10-04 08:56:56 +02:00
  • 3885640f66 docs: rulings 2026-10-04 (decisions 75-77); add 11-os-updates.md verbatim (NOT RATIFIED) admin 2026-10-04 08:42:38 +02:00
  • d07a1a904c Off-site safety finished: Parts A-F evidence, decision 74, golden 0.290.0 recorded (vouched, floor 0.290.0), restore walked from the DooPlex copy, register 330 -> 328 (R-823/824/826/827/828/830 closed; R-833, R-834 opened) admin 2026-10-04 07:39:59 +02:00
  • 7a0d0c027d hub: remove the OFFSITE_ABANDON_DELAY=3m test configuration (decision-74 live proof done) — set-aside deletions wait 7 days again admin 2026-10-04 07:12:33 +02:00
  • 5eee18cf16 hub v0.128.0 deployed — with OFFSITE_ABANDON_DELAY=3m as a logged TEST configuration for the decision-74 live proof (reverted next) admin 2026-10-04 07:06:40 +02:00
  • d3c50b50f6 hub v0.128.0: set-aside deletion through the hub after a 7-day wait (decision 74, R-823), key-file clean-up route (R-826), read-only key check (R-827), window cap = half admin 2026-10-04 07:05:21 +02:00
  • 697c2a7b10 Decisions 71-73 recorded before the work (ep0 copy keeps 8 weekly; tester-1 keys removed via registrar; token not rotated now) + R-831 token row, R-832 roadmap P4 admin 2026-10-04 06:57:19 +02:00
  • 710a2505f9 Part A/E scratch teardown on u629488-sub4 (authorized_keys byte-identical) admin 2026-10-03 21:30:11 +02:00
  • 2344589a5e Golden 0.289.1 recorded (baked, round-trip, vouched; floor 0.289.1 served), STATUS, session REPORT, runbook pveam note admin 2026-10-03 21:29:59 +02:00
  • 207ad19746 Off-site lock live: Parts D/E/F evidence, ep0 copy runbook, 06/07 facts, register (R-820/R-821/R-342 closed, R-825 opened+closed, R-95/R-822 narrowed, R-823/R-824/R-826/R-827/R-828/R-830 opened; 327 -> 330); hub window-sweep test (test-only) admin 2026-10-03 21:21:04 +02:00
  • cdfcc47b15 hub v0.127.0 deployed: manifest image tag + required OFFSITE_SECRET_KEY (Secret/offsite-secret-key, created out-of-band) admin 2026-10-03 16:58:23 +02:00
  • f417cdede1 hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822 admin 2026-10-03 16:56:42 +02:00
  • 5188dbdb44 Decisions 68-70 recorded before the work: weekly hub-opened prune window (option 2 rejected), hub = key registrar + password encrypted at rest, ep0 -> DooPlex nightly PBS pull-sync admin 2026-10-03 16:03:03 +02:00
  • 9268d9933b R-436 measured on the provider: append-only forced key HOLDS (403 on every delete), but the sub-account password defeats it (R-820); design proposal + ep0 options admin 2026-10-03 13:40:35 +02:00
  • f4c5466c39 Backlog triage Part E: RECOMMENDATION (top 29 = every P2, five themes, pick A off-site backup safety vs B box OS updates), STATUS decision, REPORT-backlog-triage-2026-10-03 admin 2026-10-03 09:24:43 +02:00
  • 33bbf8e94a Backlog triage Part D: ROADMAP cleaned (161 -> 123 lines, 81 -> 42 KB): intentions re-sorted P2/P3/P4, each names its 00 row; 33 shipped/killed/closed/moved items + the pre-invite checklist -> ROADMAP-HISTORY; UPDATE-ARC collapsed; one_register_gate reads suffix ids (R-50b found, moved to OPEN-ITEMS; decoy seen red) admin 2026-10-03 09:22:30 +02:00
  • 9f77865c2a Backlog triage Part C: every open row has a Category (11) and a Sev (P1-P4); OPEN-ITEMS grouped by category, severity order; register_shape_gate RULES 5-8 (columns by header, category, sev, defined state) with five decoys seen red; CLAUDE.md + PROMPT-TEMPLATE: new rows filed into their category admin 2026-10-03 09:18:42 +02:00
  • 71b8c8c62b Backlog triage Part B: 125 finished rows + 20 id-less rows moved to CLOSED-ITEMS (full text at 9e2786c); open rows normalised to one 6-column shape; narratives archived verbatim; closed_register_gate RULE 3 refuses a finished row in OPEN-ITEMS (decoys, seen red); rules rehomed to CONTEXT + 07 §11; loose notes triaged; R-814..R-819 filed; register 444 -> 325 admin 2026-10-03 09:17:22 +02:00
  • 9e2786c907 Backlog triage Part A: four roadmap items R-808..R-811 (OS updates, legal/business, independence spike, dashboard 2FA); findings R-812 (no OS security updates) + R-813 (no legal pages); 00 gap rows + new §H; CONTEXT records the 2026-10-03 request admin 2026-10-03 09:06:39 +02:00
  • 93052884b2 Persistence re-sweep of all 58 (R-801 closed: CLEAN 40 / UNDETERMINED 18 / BROKEN 0), R-788 + R-803 (papra) closed, R-804..R-807 opened; STATUS "Before the first paying customer"; REPORT-persistence-sweep-2026-10-02; register 442 admin 2026-10-02 16:54:26 +02:00
  • 5ed44ada6e Rulings 66 (licences) + 67 (userdata stays on remove, 07 §6.5); R-789..R-795 ruled, R-802 (lawyer review) opened; R-800 live proof on 9202 (0.288.0); floor 0.288.0; golden 0.288.0 baked + vouched admin 2026-10-02 14:16:41 +02:00
  • 2633dc1654 Family gate session close: B4 on demo-hp (real internet: member in, stranger 401; remove with data), REPORT-family-gate-2026-10-02, STATUS, R-800 (remove-with-data keeps userdata, operator), CONTEXT; register 436 admin 2026-10-02 10:43:10 +02:00
  • e6d1ebd152 Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT admin 2026-10-02 09:35:42 +02:00
  • 68c22907e5 Golden 0.287.0 baked + vouched (record); floor 0.287.0 (min_agent 0.131.0) — both demo boxes on 0.287.0 admin 2026-10-02 09:00:18 +02:00
  • 344081f064 website assets: Grimmory and MeTube logos (from their own images) and three screenshots each (their own UI + the family sign-in page they sit behind; 9202, headless Chrome) admin 2026-10-02 08:32:10 +02:00
  • e215351fe2 Record operator rulings 2026-10-02 morning: decision 64 (family gate GO), 65 (SparkyFitness option B + trigger) admin 2026-10-02 07:17:58 +02:00
  • cba2badade Evidence: SparkyFitness box walk (9202) and its licence text admin 2026-10-01 22:19:55 +02:00
  • 27f4e7d976 Session close: REPORT-visitors-2026-10-01, STATUS (go/no-go: the family gate; SparkyFitness licence), CONTEXT, capability map rows, R-783..R-787 (register 422) admin 2026-10-01 22:19:50 +02:00
  • 09ae93db05 Golden 0.286.1 baked + vouched (record); 01 §5 visitor addresses + §7 cloudflared in the guest (R-754); register: R-753/754/772/773 closed, R-775 narrowed, R-776..R-782 opened (410 → 417); live evidence (demo-hp real tunnel, 9202) admin 2026-10-01 22:05:24 +02:00
  • b50289074d Evidence: Part A (visitors apart — measurements, design, sweep, 9202 live) and the permanent-gate spike (items 1–6, VERDICT: PASS, build plan) admin 2026-10-01 21:26:23 +02:00
  • 7c50dba454 Permanent-gate spike: exit test written BEFORE the spike runs (decision 63) admin 2026-10-01 21:13:27 +02:00
  • 88810ad09f Record operator ruling 2026-10-01 evening: decision 63 — extend the box's own gate (A), order R-753 → spike → build on go admin 2026-10-01 20:29:45 +02:00
  • bc9c7b4934 New apps night: Radicale, Karakeep, Dawarich published; Grimmory held (R-775); fit table; R-765..R-775; STATUS, CONTEXT, report, evidence admin 2026-10-01 19:52:32 +02:00
  • 8e31b45006 website assets: Dawarich logo (from its own image) and three screenshots of its own UI (9202, headless Chrome) admin 2026-10-01 18:31:08 +02:00
  • ce2a10e995 New apps (in progress): fit table, Radicale + Karakeep evidence, R-765..R-774; wger hidden recorded admin 2026-10-01 18:01:40 +02:00
  • 0d4600741a website assets: Karakeep logo (from its own image) and three screenshots of its own UI (9202, headless Chrome) admin 2026-10-01 17:52:52 +02:00
  • 40f07429ff website assets: Radicale logo (from its own image) and three screenshots of its own web UI (bench 9401, headless Chrome) admin 2026-10-01 16:57:45 +02:00
  • 2d69c61556 New-app checklist: the pilot audit (wger as of 2026-09-29 and now, two 9202 walks), R-758..R-764 opened; STATUS, CONTEXT, report admin 2026-10-01 15:22:05 +02:00
  • b63654a299 Rulings 61-62 built: calibre-web generated login name, the registry prune rule; R-750/R-752 closed, R-756/R-757 opened; runbook 4.1a; STATUS, report, evidence admin 2026-10-01 13:29:46 +02:00
  • 11a673d597 Record the operator's rulings 61 (calibre-web generated login name) and 62 (registry retention rule) admin 2026-10-01 12:57:53 +02:00
  • 8dab40c7a7 Lockouts (R-752): decisions 58-60 (decided by CC unattended), the one address behind the tunnel (R-753), the registry answered (R-750); STATUS, report, evidence admin 2026-10-01 12:49:20 +02:00
  • 92a60c62bd Register: R-753 (one address behind the tunnel), R-754 (01 §7 says cloudflared on the host), R-755 (wger on runserver); evidence so far admin 2026-10-01 11:58:57 +02:00
  • 939553c82f Record: decision 57 kept by the operator (mealie 1-hour lock, no secret login name) admin 2026-10-01 10:54:11 +02:00
  • a6a9f0b245 Rulings 2026-10-01 built: report, STATUS (standing monthly line), decision 57 (mealie lockout, decided by CC unattended), R-747 narrowed, evidence admin 2026-10-01 10:20:44 +02:00
  • daacf84e30 Evidence (rulings 2026-10-01): Parts A-D so far; register: R-743, R-744, R-745, R-746, R-749, R-751 closed admin 2026-10-01 08:40:04 +02:00
  • b2f6c1626c Golden 0.285.0 baked, round-trip identical, vouched (agent 0.138.0, min_agent 0.131.0) admin 2026-10-01 08:28:30 +02:00
  • c12fd46f54 Evidence: the first full monthly re-test (decision 55) — nextcloud and sonarr re-tested and written; runbook: every app by default, the standing brief admin 2026-10-01 07:54:22 +02:00
  • 8699dba53d Register: R-751 (update clean-up nil-stack crash), R-752 (four more apps lockable by strangers) admin 2026-10-01 07:36:16 +02:00
  • 915b2292c7 Register: R-749 (retest-floating checks the bench before syncing it), R-750 (old controller tags gone from the registry) admin 2026-10-01 07:17:38 +02:00
  • 2076bf9b36 Record the operator's rulings of 2026-10-01: decisions 54-56 (monthly re-test owner and scope, two controller versions per box) admin 2026-10-01 07:16:08 +02:00
  • 3159892fab Both rulings built: same-tag re-tests (decision 52), image retention + the install hold (controller 0.284.2); golden 0.284.2 admin 2026-09-30 23:26:21 +02:00
  • 1de0f7c294 Rulings recorded before the work: 09 decisions 52 (R-740 A, tested same-tag fixes at night) and 53 (R-736 A, image retention) admin 2026-09-30 21:49:25 +02:00
  • 42bf40bd2c More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator) admin 2026-09-30 20:27:28 +02:00
  • 2866f6a318 immich's first start: cause measured, fixed in the catalog (R-732 closed); ISO clean-tree gate (R-730 closed) admin 2026-09-30 16:18:17 +02:00
  • 25cb3eb9c1 The last six PostgreSQL apps decided; the gate's wait seen live by day; catalog currency; stale rows admin 2026-09-30 14:47:12 +02:00
  • 2de56ce16b Golden 0.283.1 baked, round-trip verified, vouched with agent 0.138.0 (min_agent 0.131.0) admin 2026-09-30 11:40:17 +02:00
  • 11591f3a93 Fixes before the first tester: decisions 50/51 outcomes, register 359->361 (R-719/720/721/722/727 closed, R-723 fixed, R-724/725 narrowed, R-728/729 opened), STATUS with the Tester-2 checklist, report admin 2026-09-30 11:01:08 +02:00
  • 7e50098088 manifests: hub 0.126.0 admin 2026-09-30 10:36:53 +02:00
  • 80aeac71f6 hub v0.126.0: fresh connect link from the old one (R-719); day-one mails (R-723); bind-page wording (R-725); volunteer guide current (R-722); ep0 cleanup and release evidence admin 2026-09-30 10:35:17 +02:00
  • 27641ce9e7 added IE admin 2026-09-30 10:15:01 +02:00
  • 4951fc2283 Decisions 50 (apps off-site by default, R-720) and 51 (ep0 drill archives; restore test on own archives, R-727) recorded; Tester-2 read-only checklist admin 2026-09-30 09:49:41 +02:00
  • cdf974d186 DRILL new household on golden 0.282.0: 0 interventions; ready for a first real tester on a new record admin 2026-09-30 09:25:17 +02:00
  • be8f79e2f9 Drill new household: phase-2 night evidence; R-726 (orphaned off-site repo on a reused customer), R-727 (restore test picks a previous box's archive) admin 2026-09-30 08:47:58 +02:00
  • 178be6de51 Drill new household: phase-1 journal, A1 and A2 part 2 evidence admin 2026-09-29 21:58:12 +02:00
  • 78126575cb Register: R-719..R-725 from the new-household drill; R-505 closed (box-side hop proven); R-718 measured again admin 2026-09-29 21:56:48 +02:00
  • 1ec1819abc Drill new household: phase 0-1 evidence (walk steps 1-13, A2 bind typo, A3 phone) admin 2026-09-29 21:50:28 +02:00
  • 2bdda1161e Golden 0.282.0 baked, round-trip verified, vouched (agent 0.137.0, min_agent 0.131.0) admin 2026-09-29 20:51:00 +02:00
  • 8cadacb553 Sign-up lock 2026-09-29 evening: decisions 48/49 outcomes, two locks, wanderer closable, R-714/715/716 closed, R-717/718 opened; STATUS, CONTEXT, report admin 2026-09-29 17:19:43 +02:00
  • 5e97c44401 Decisions 48 (wanderer stays, A) and 49 (close sign-up now, A) recorded admin 2026-09-29 15:57:25 +02:00
  • 1749e73e50 Gate rollout 2026-09-29 afternoon: 32/34 gated, sign-up blocks (decision 47 + CC mechanism), R-713; R-707/R-711/R-713 closed, R-714..R-716 opened; STATUS, CONTEXT, report admin 2026-09-29 11:25:14 +02:00
  • fd9c77b92e Decision 47 recorded (R-711 option A: open sign-up closed after the first admin) admin 2026-09-29 09:35:17 +02:00
  • e649d46fea Session close 2026-09-29: R-710 closed live on demo-hp; STATUS, CONTEXT, REPORT-login-gate-2026-09-29 admin 2026-09-29 09:22:56 +02:00
  • b0f8ffb801 Part C/D: gate built + proven live (v0.280.0), defaults fixed, floor 0.280.0; decision 46 outcome; 01 §5 who may reach an app; R-707 narrowed, R-708/R-709/R-712 closed, R-713 filed admin 2026-09-29 09:20:47 +02:00
  • 14ae67f0b8 Part B: setup-gate spike on 9202 — verdict PASS written before any build; R-711 filed admin 2026-09-29 08:20:42 +02:00
  • 2b1cb246cf Decision 46 recorded (setup gate spiked first); Part A: demo-hp bookstack + calibre-web admin passwords changed; R-710 filed admin 2026-09-29 08:07:37 +02:00
  • 58226e9abb audits: Part G night read 2026-09-28/29 — legs normal, Part D no false alarm admin 2026-09-29 04:52:12 +02:00
  • adb8d904ca audits: demo-hp's first scheduled restore test on the NVMe passed (R-701) admin 2026-09-28 22:36:09 +02:00
  • 56d6de9808 decisions 44-45, FIRST-ADMIN link, register (R-701/R-702 closed, R-707..R-709), STATUS, report, evidence admin 2026-09-28 19:02:06 +02:00
  • aedaab8944 STATUS, report, register (R-691 closed live, R-704..R-706), Part E + D2 evidence admin 2026-09-28 15:56:50 +02:00
  • e76c3af418 audits: R-701 scheduled cycle after the trim — still refused (needs 31.0, has 23.9 GiB) admin 2026-09-28 14:20:36 +02:00
  • 2cc7495b58 register R-463: claper 17, calcom 18; teardown evidence admin 2026-09-28 11:51:28 +02:00
  • 2af6896348 09 decision 43: calcom -> 18; R-704 crash-loop hold survives reinstall admin 2026-09-28 11:49:50 +02:00
  • e129476750 register: R-703 closed (calcom 1536M, catalog 9555e73) admin 2026-09-28 11:48:56 +02:00
  • b9af5b3913 audits: calcom memory (R-703) + PG 16->18 bench and box proofs admin 2026-09-28 11:48:45 +02:00
  • 648f200cdf 09 §3 decision 43 (claper -> PG 17, CC unattended); CONTEXT admin 2026-09-28 10:56:15 +02:00
  • 5340aec56b audits: claper PG 16->17 bench + box proofs; calcom crash evidence admin 2026-09-28 10:55:25 +02:00
  • a8f790c0c6 docs: R-691 (2) built (07 §6.5), R-701 (a) measured, R-702 claper default admin, R-703 calcom OOM; evidence admin 2026-09-28 10:37:42 +02:00
  • 03df4c8220 audits: golden 0.276.0 baked, vouched with agent 0.137.0; Day-0 test install; demo-hp thin-pool reclaim numbers (R-701) admin 2026-09-28 09:45:17 +02:00
  • 4c31536909 night 09-27/28: paperless 16 copy released on a real 18 dump (v0.276.0); demo-hp restore test refused for space -> R-701 admin 2026-09-28 03:46:43 +02:00
  • 06744dbacc records-carried: controller v0.276.0 (R-697 closed, R-700 filed), 07 §6.6, register 336 -> 336, STATUS admin 2026-09-27 18:04:00 +02:00
  • b52cb6ec94 version-travel D1: agent 0.136.0 + 0.137.0 found and fixed on the box; records updated admin 2026-09-27 14:15:01 +02:00
  • 7696836f84 version-travel: session record, evidence B/C/D/R, 09 decision 42, 07 §6.5 decision, register 339 -> 336, STATUS (D4) admin 2026-09-27 13:02:33 +02:00