# STATUS — what works, what's broken, what's next

**Ready for the first real tester (Tester-2): yes. You confirmed the tunnel route and the connect mails (2026-09-30).**

**Updated 2026-10-01 (evening). Both demo boxes run controller 0.285.0 and host agent 0.138.0. Hub 0.126.0. New installs get golden 0.285.0 with agent 0.138.0.**

**Tester-2 — read only, from the hub.** The customer record exists. Tester-2's box has not registered yet.

## Your request of today — the new-app checklist — built

- **The checklist is in the app catalog.** 60 checks in 10 groups. Each check says how to test it and why it exists.
- **A new app cannot reach the live catalog without its filled-in copy.** A check on every push and in CI refuses it.
  I tested that check with 16 fake cases, and I broke the check on purpose 5 times to prove the fake cases notice.
- **The 53 old apps are not re-tested.** One page shows what each already has. For example: 24 of 53 show a measured
  memory check, 26 of 53 show a tested update.
- **The test on wger:** the first draft found 2 of this week's 4 wger problems. It missed the phone-app login and the
  missing update step for a brand-new app. I sharpened those checks. Now all 4 are caught.

## What broke, and what I did

- **The checklist found three more wger problems, on the live catalog.** Nothing fixed today (this task changes no app).
  - wger loads no styling and shows no uploaded photo. The pages look broken.
  - A stranger can make a wger account after you set it up. Every anonymous visit adds a "guest" account.
  - wger cannot send e-mail. A "forgot password" mail never leaves the box.
- Eight apps show a smaller memory figure than they really use. The apps are not affected; the number on the screen is.
- Earlier today, built: your two afternoon decisions — calibre-web's secret login name (the HP demo box's new name is in
  your credentials file), and the registry clean-up rule (it deleted nothing). Found: a box makes up a value when a
  template gains a new generated field (calibre-web). Written down.

**Rows.** This evening: 7 opened, 0 closed. The list went from 392 to 399 rows.

## What needs you

1. **Nothing urgent.** Two questions from earlier stay open, and nothing breaks if you wait: should apps see each
   visitor's real address (a bigger build), and is the design document or the build right about where the tunnel runs?

## Standing steps

- **Monthly security re-test: last run 2026-10-01, next due ~2026-11-01.** (You start it with the standing brief.)
- **Weekly:** the golden bake (around 8 October).
- **Registry clean-up:** only when the registry disk fills; "show me" mode first, then a person decides.