# REPORT — demo-hp's full local tier, and what the whole-box copy holds (2026-11-09, attended)

**Plain words first.** demo-hp did not restart on 11-08/09. Its local whole-box copy was refused for space again
(12.5 GiB free, 13.3 GiB needed), so the night's OS run and its kernel step waited. With the operator's yes, CC freed
space and filed the causes. The controller now deletes two kinds of old images by itself: v0.351.0, **released the
same day** (global floor 12:18 UTC, MinAgent 0.158.1).

## What the whole-box copy holds (demo-hp guest 9201, `docker system df -v`, measured)

| Part | Size |
|---|---|
| Images used by containers | 13.2 GB |
| The apps' undo images (decision 53, on purpose) | 9.8 GB |
| Old controller images (25 of them test builds) | 2.2 GB |
| Old infrastructure and helper images | 1.35 GB |
| Docker volumes (app data) | ~1.5 GB |
| `sys_drive` | 1.3 GB |

Packed: 9.8 GB, on a 39 GB system disk. The N100 writes its copy to its 1 TB backup drive (`felhom-backup`), 1.5 GB.
Tester 1 and demo-hp write to the system disk (`local`). The same old-image pattern was on all three boxes (43–48% of
image space unused; most of it is undo images).

## What was done on demo-hp (operator's yes)

- Inside guest 9201: 36 unused images deleted by name (25 old controller test builds; traefik v3.6.7/v3.7.13;
  cloudflared 2026.6.0/2026.9.3; Samba 1.1.0; FileBrowser 1.3.3; alpine:3.20, curl, hello-world). The undo images,
  the previous controller (0.349.0) and the previous pins were kept. Images 27.56 → 24.15 GB.
- On the host: installer ISO 1.30.0 removed from `local` (`pvesm free`); its sha256 `590d7b9b…` matched the copy on
  DooPlex and the file on iso.felhom.eu (HTTP 200). The old golden archive 0.236.0 stays (no other copy found).
- `local`: 12.5 → 14.0 GiB free, above the 13.3 GiB the space check asks.
- Evidence off-git: `/mnt/5_hdd/felhom.eu/evidence/demo-hp-images-2026-11-09/` (before, cleanup, journal noise).

**Not yet observed:** tonight's local copy, OS run and kernel step on demo-hp. Positive observable: a new
`vzdump-lxc-9201-2026_11_10-*.tar.zst` in `/var/lib/vz/dump/`, then the host's boot time after the kernel step.

## Product changes

- Controller v0.351.0 (felhom-controller CHANGELOG): decision 56 amended (old `-rc` controller images go) and decision
  285 (pinned infrastructure images keep the pin and the previous pin). Six mutants red-proved.
- **Released 2026-11-09** (`documentation/audits/release-2026-11-09/README.md`): rc.1 by hand on Tester 1 (37 → 24
  images, 12 controller + 2 infrastructure images deleted, about 1 GB freed, because the test builds share layers);
  per-box floors 12:14 UTC, all three test boxes on 0.351.0 by 12:15; each box's own pass deleted what the rule says
  (demo-felhom: 1 controller + 5 infrastructure images); walk green on all three, `https_only_check.py` rc 0; global
  floor 0.351.0 / MinAgent 0.158.1 at 12:18 UTC, read back from the hub log and the configuration page; per-box floors
  cleared.
- `09-update-architecture.md` §3: decision 285 added, decision 56 amended.

## Register

Rows before 223, after 225; opened 2 (R-1366 the whole-box copy carries every image — operator decision; R-1367 the
host journal's sudo session noise), closed 0. R-548 extended with the 11-09 refusal and the clean-up.

Architecture read: `07-backup-architecture.md` (tiers), `09-update-architecture.md` §3 (decisions 53, 56).
System poster: no fact changed (no backup tier, time or retention moved).