# felhom.eu — task reports

> **Overwrite** this file with a summary of the most recent task only (uniform with the other repos; not cumulative). The cumulative hub history lives in [hub/CHANGELOG.md](hub/CHANGELOG.md); the scripts history lives in [scripts/CHANGELOG.md](scripts/CHANGELOG.md).

## CAMPAIGN-6C — supervised planes + v0.131.0 F-S2/F-S3 live acceptance — 2026-07-14

**controller 0.132.0 both guests · agent 0.88.0 · hub 0.54.0 · findings-only, no production code · full
audit: `documentation/audits/CAMPAIGN-6C-2026-07-14.md` · ledger `180:~/campaign6/6C-P0.md` (seed
`6C-20260714`)**

Continuation of CAMPAIGN-6B. Ran **unattended** via the controller's own API (Campaign-4 credential,
out-of-band; session cookie + CSRF; the exact endpoints the dashboard invokes — the live-test-real-flow
proxy). No credential/R/blob committed; cookie wiped at teardown.

### Verdict: GREEN for the v0.131.0 acceptance

**PHASE 4-paperless — all five legs PASS**, which **fully closes the "NOT live-validated" list in the
v0.131.0 controller REPORT** (deferred there to a supervised session):

- **4P-1** — deployed paperless-ngx on felhom-usb (the appdata-mismatch app: stack `paperless-ngx`, dir
  `appdata/paperless`), ingested 3 varied docs through the real consume flow (OCR + PDF/A) →
  `appdata/paperless/media` = 11 files / 40 587 B.
- **4P-2 (F-S2 tier-2 backup)** — the appdata leg mirrors `appdata/paperless` to
  `secondary/paperless-ngx/appdata` **byte-identical** (11-file sha256 diff empty). Pre-state confirmed
  the pre-fix shape: secondary held **recovery-unit only, no appdata**.
- **4P-3 (F-S2 marker restore)** — UI file-restore targets the **resolved** live dir
  (`appdata/paperless`, not `…/paperless-ngx`), additive-only, 1 file restored byte-identical, existing
  file untouched, app healthy.
- **4P-4 (storage page)** — paperless-ngx shows a non-empty size (**39.6 KB**, from the resolved dir).
- **4P-5 (F-S3 scope="app" migration)** — usb→flash then flash→usb: full 11-file manifest **identical**
  each way, source cleaned, **no `appdata/paperless-ngx` ghost dir, no `declared appdata absent` WARN**,
  app healthy (45 s each leg).

### New finding

- **F-6C-1 (MEDIUM)** — tier-2 auto-target = NFS share fails at the recovery-unit leg: `rsyncMirror`'s
  `rsync -a` (`-o -g`) chown is refused on the NFS export (root_squash, exit 23), so `RunTier2` records
  failure and the appdata leg never runs. Real drives (usb/flash) are unaffected; **not an F-S2
  regression**. Suggest `--no-owner --no-group`/`--chown` (or exclude NFS from the auto tier-2 pick).

### Deferred to a 6D / supervised pass

- **PHASE 3 browser planes** (escrow wizard typed-back, session/CSRF UX, hub 8-tab ring) — need a
  rendered browser with an operator present (browser-select, on-screen typed-back, password at the
  login screen); not unattended-automatable.
- **PHASE 4-deep** (F7 live 6 s cut, restic mid-run self-heal, offsite restore-to-verify) and
  **Acceptance #1** (≥1 GiB userdata `.fab` full-circle) — need large-dataset/timed-cut setup budget;
  the C6B-F1 `.fab` fix is already code + live byte-compare verified in the v0.130.0 REPORT.
- **5-rest dead-app alert** — inconclusive (a clean `docker stop` is not a crash; the correct trigger
  is `kill -9`/OOM). Observation logged for 6D.

**Box state:** paperless-ngx torn down (real remove flow + scratch cleanup); controller 0.132.0 healthy;
other 6 apps untouched. Viktor rotates the controller + hub credentials after the campaign.