# REPORT — 2026-10-26 night → 2026-10-27 afternoon: the night's fixes, the line test, one release block

**Safest reading taken alone:** none needed today — every release step had the operator's yes in the session.

## Plain words first

1. **The night's fixes:** all released today. Proven live: kept data (R-1220), the reinstalled box's off-site tier
   (R-1232), app-file export/import (R-1187 a, b, g), held-app reports (R-1298, D53). Not live: R-1219 (handler test, as
   the brief allowed) and R-1218 (the operator waived its live proof — no product path reaches the case on a hub box).
2. **The line test:** ran — but only after a same-day fix. As built, the hold was refused four times (qBittorrent keeps
   sending ~14 s after it is slowed). With the fix: **94.5 Mbit/s**, the seeder's own limit back **exactly**.
3. **Released:** hub 0.173.0, agent 0.167.0 (not vouched yet), controller 0.346.0 (global floor 15:37 CET).
4. **D55 grant seen:** yes — the window ran 03:18 UTC, 223 of 223 removed (373 → 150), no alarm.
5. **The operator still does:** vouch agent 0.167.0; revoke the token `cc-d55-window`; delete hub host
   `Tester4-b5dbbd`.

## Versions, digests, CI by commit

| | Version | Image / sha256 | From | CI |
|---|---|---|---|---|
| hub | 0.173.0 | `sha256:458bfb03e614db4b7abd6442e6af15c652ba4b9b4509fe2b0efe00ac979b8f52` | `29134c52` (manifest `bbc3acb8`) | 2418, 2419 ✓ |
| agent | 0.167.0 | agent `28bdd2826f45f3767880fcff4d3105afb7247c09c0ced99d78b3a978d8d826f0`, bundle `9d0344164b22634159984bfbcdaf77c53e6d2423812973ed8b4f2135a7ed1268` | `54d3a10` (tag `v0.167.0`) | 2400, 2420 ✓ |
| controller | 0.346.0 | `sha256:3d910b039fc52f08366c657774d9664320d6913fdebdd3deb2bbbb01d7eb9dd3` | `b1b9be3` (fix `710ceac`) | 2421, 2423 ✓ |
| controller rc | 0.346.0-rc.1 | `sha256:bfa091e9…` | `710ceac` | 2421 ✓ |

## Each fix, before → after

- **R-1250** (`710ceac`): four holds refused „not quiet" (4.0–4.2 Mbit/s) → held, slowed after 22 s, 94.5 Mbit/s, limit
  5898240 back exactly; the 50 % rule kept the normal slot (0.15 % move). `audits/linetest-2026-10-27/`.
- **R-1232**: `due:false` (a foreign archive counted) → `due:true / absent`, first whole-box copy at once (night).
- **R-1220 / R-1187 / R-1298**: see `audits/night-fixes-2026-10-26/`.
- **R-1218** hub: a key-less upload over a keyed package → 409 (red-proved); controller: stage when the FILE exists
  (red-proved). Live proof waived (`09` §3 decision 270).
- **R-1285**: the bundle pass now runs right after the commit in the normal delivery (all three boxes) — the BYO removal
  itself is still unproven (stays VERIFY).
- **R-1174** (dated check): the status gate refuses since today — a hand run convicted a copy, rc 1.

## Release steps

Hub: yes 09:30 CET → build, manifest, sync of Deployment/hub only, Synced/Healthy, the digest matches, the „Held apps"
list renders, 30 min: 0 events, 0 WARN, reports flowing, no alarm mail. Agent: yes → release-agent.sh from a clean clone,
signed updates (demo-felhom 10:26, Tester 1 10:32, demo-hp 13:49 after its test). Controller: rc.1 on 9201 and Tester 1
(9202 was session 2's) → 0.346.0 → per-box floors 15:09 → all three „update successful" → box walk green (start logs 0
errors, every app healthy, https-only green, held apps 0 = 0) → yes → global floor 15:37 → 30-min watch clean → per-box
floors cleared 16:09 (DB reads empty). `audits/release-2026-10-27/`.

## Teardown

Machine: the throwaway qBittorrent on 9201 removed through the product (shared library folder and older backups kept —
older than the test), forwarder and seed gone. Host: nothing provisioned on demo-hp today. DooPlex: the test torrent,
its data and folder removed, 326 torrents as before. Hub: per-box floors cleared; `Tester4-b5dbbd` (last night) waits for
the operator. Tester 1's off-site switch: the operator switched it off and on again; the box never saw it (R-1312).

## Register

Before 223 open → after 214. Closed 11 (R-1174 and R-1250, R-1261, R-1218, R-1219, R-1220, R-1232, R-1187, R-1298,
R-972, R-1291). Opened 1: R-1312 (the hub's off-site switch did not reach the box).

## Observations

- FILED R-1312 — the hub page's off-site switch does not change the box's saved target.
- NOT-A-FINDING: the line-test slot is not 10:00 — each host has its own slot minute (demo-hp 95, Tester 1 213,
  demo-felhom 20), by design; the brief's 09:25 start was early, not wrong.
- NOT-A-FINDING: the off-site push WARNs „radarr/sonarr/prowlarr/qbittorrent: not deployed — unit-only" on demo-hp —
  designed (`offbox_capture.go`, decision §2.4: kept units of removed apps).
- NOT-A-FINDING: the 50 % rule did not re-set qBittorrent after the new test — the line moved 0.15 %, inside its 20 % band.
- The 0.345.1 container's log was dropped when the rc replaced it; the four refusal lines were recovered from this
  session's earlier reads, and the agent journal holds them independently (said in the evidence).
- The nightly CI run 2412 failed on the two due checks, by design; one operator mail at 03:24 UTC.
- A pushed commit message (`ae3db89a`) names the new row „R-1300"; the register uses R-1302 (the number was taken).