# felhom.eu — task reports

> **Overwrite** this file with a summary of the most recent task only (uniform with the other repos; not cumulative). The cumulative hub history lives in [hub/CHANGELOG.md](hub/CHANGELOG.md).

---

# REPORT — Hub: ingest agent pbs_snapshots (v0.7.4) (2026-06-09)

## Outcome

**Code committed + pushed (changelogged as `v0.7.4`); image build/deploy deferred to an
operator decision.** The felhom-agent slice-6 Phase B work populates the host-report's
`pbs_snapshots` (PBS offsite inventory + per-snapshot verify-state). This is the hub half:
accept + persist them. Minimal — the authoritative offsite policy is hub-owned (slice 10).

## What landed (`hub/internal/api/handler.go`, `host_test.go`, golden)

- `hostReportPayload` gains a `hostPBSSnapshot` mirror struct matching the agent's
  `hub.PBSSnapshot` field-for-field, persisted via the existing `report_json` column.
- The handler logs a **FAILED PBS verify prominently** (`[WARN]` — the loudest offsite-DR
  signal); the host-report info line now counts pbs-snapshots too.
- The shared `testdata/host-report.golden.json` carries a populated `pbs_snapshots[0]`,
  **byte-identical** with felhom-agent's copy; `TestHostPBSSnapshot_GoldenContract` is the
  hub half of the bidirectional key-set test. `go test ./internal/api/` is green.

## Backward compatibility

An agent that omits/empties `pbs_snapshots` is accepted unchanged. The legacy controller
report path is untouched (frozen until the slice-10 cutover).

## Deploy

> Per the GitOps flow (`CLAUDE.md`): build+push `gitea.dooplex.hu/admin/felhom-hub:v0.7.4`,
> bump `manifests/hub.yaml`, commit, then sync the `felhom` ArgoCD app. **Deferred** at this
> checkpoint — the change is backward-compatible, so the live hub (v0.7.3) keeps ingesting
> host-reports fine until then.