admin 0e88b7eb99 Media drive events, night 2026-10-14: 15 §10 (event x app, measured), K4-K8 evidence, rows R-1044..R-1049, narrowed R-1022/1023/1024/1026/1028/1037/1038, night report ...

- 15-media-library.md §10: what the box does on each drive event, per app, with the measured call; the guards
  that ARE needed and the ones that are NOT (K1: nothing lost while a drive is gone).
- Evidence K4 (dead-drive check: mountinfo `shutdown`, stat unreliable), K5 (restart), K6 (unclaimed Plex),
  K7 (old Sonarr/Radarr repair on the bench), K8 (hub received the drive-return events and mailed none), K9 (files identical).
- nightly-rotation.md runs scripts/https_only_check.py first every night; scripts/CHANGELOG.md entry.
- STATUS, CONTEXT (decisions 244-246), REPORT-night-2026-10-14.md.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-14 23:40:26 +02:00

..

break-glass-sheet.md

dooplex-offsite: the operator signing keys ride the nightly encrypted copy; restore test proves each key matches its public half (R-924, operator ruling option A)

2026-10-09 14:49:08 +02:00

break-glass.md

hub v0.84.0 — break-glass console credential on the host page

2026-07-31 08:19:36 +02:00

config-bundle.md

hub-safety session: R-135/R-133/R-604/R-530/R-508/R-509/R-880 closed, R-861/R-173/R-518/R-519 narrowed, R-879/R-881 opened (336 → 332); 03 §3.1, 05 §16, golden 0.296.0, the hub-DB off-site plan, STATUS

2026-10-05 13:47:57 +02:00

crash-guard.md

night fixes 2026-10-05: R-867/R-95/R-863..R-869 closed, R-870..R-876 opened (R-876 P2: repair misses dpkg's journal); Part E crash record; Part F spike; golden 0.294.0; rulings 100-103, CC decisions 104-108; STATUS

2026-10-05 08:26:23 +02:00

day0-install.md

answers 2026-10-12 Part A: the 38 rulings recorded (09 §3 196-233), 17 rows closed (128 -> 112), R-933 filed

2026-10-12 14:07:50 +02:00

dooplex-remove-disk-Z6A07P2G.md

evening Part A: disk Z6A07P2G silenced 30 days by serial, Longhorn HDD4 removed, removal checklist + R-934; R-231 token out of the URL

2026-10-12 16:36:00 +02:00

ep0-datastore-copy.md

ep0-copy-gc: fail-safe guards (partial ep0 list aborts, one deletion per run, HOLD file) — from the commit security review; still not installed

2026-10-08 09:58:00 +02:00

gitea-restore.md

R-923/R-924: total-loss-of-dooplex runbook (every recovery secret, where it lives, walked on paper), break-glass sheet (names only), Vaultwarden off-site proven (push, restore test, throwaway start); 'off DooPlex' claims corrected; R-924 filed

2026-10-09 12:13:41 +02:00

iso-release-gate.md

burn-down Part B: 14 small rows fixed and closed across four repos (306 -> 292); no :latest in the hub build; gate list pinned; closed-id duplicates refused; R-262 subset pinned

2026-10-05 17:10:38 +02:00

logging-conventions.md

hub v0.48.0 CHANGELOG + logging-conventions: TRACE level + ring sizing/spill (controller fix-3/fix-6, CAMPAIGN-3 closed)

2026-07-12 10:31:26 +02:00

monthly-floating-retest.md

OS updates guest fast lane: records — 11 §8.1 BUILT, 03 cloudflared corrected, 07 §6.1 OS leg, 00 PARTIAL, monthly runbook infra pins, golden 0.291.0 record + vouch, register 331 -> 333 (R-837/838/726/843 closed; R-840/841/842/844/845 opened), STATUS, report

2026-10-04 11:41:50 +02:00

nightly-rotation.md

Media drive events, night 2026-10-14: 15 §10 (event x app, measured), K4-K8 evidence, rows R-1044..R-1049, narrowed R-1022/1023/1024/1026/1028/1037/1038, night report

2026-10-14 23:40:26 +02:00

offsite-endpoint.md

docs: R-182 closed, R-90 closed on measurement, R-86 unblocked, ep0 record corrected

2026-08-03 14:00:54 +02:00

os-updates-docker-undo.md

docs: 11 §5.7 System page, §5.8 Docker slow lane BUILT, §5.9 crash restart; 00/03/07/08; decisions 90-94 (CC unattended); runbooks docker-undo + crash-guard; register R-852 R-835 R-848 R-849 R-851 R-854 closed, R-853 R-855 R-856 opened, R-812 R-840 narrowed (334 -> 332); live evidence

2026-10-04 17:36:10 +02:00

os-updates-guest-undo.md

night 2026-10-04: the guest undo runbook (proven 48 s), R-866, A3 in progress

2026-10-04 22:37:25 +02:00

os-updates-host-undo.md

night 2026-10-04: the guest undo runbook (proven 48 s), R-866, A3 in progress

2026-10-04 22:37:25 +02:00

os-updates-test-waits.md

R-840/R-859/R-860 records: 11 §5.3.1 + §5.4.2, 03, 04, 00; runbooks config-bundle + os-updates-test-waits; register 333→334 (R-840/859/860 closed, R-861/862 opened); STATUS; report; evidence

2026-10-04 20:40:08 +02:00

pbs-phantom-cleanup.md

R-99 runbook (pbs-phantom-cleanup) + read-only ep0 listing: no phantom today, nothing deleted; R-444 trim measured on demo-hp; R-618 closed by ruling (150 -> 149)

2026-10-06 11:18:14 +02:00

pbs-phantom-list.py

R-99 runbook (pbs-phantom-cleanup) + read-only ep0 listing: no phantom today, nothing deleted; R-444 trim measured on demo-hp; R-618 closed by ruling (150 -> 149)

2026-10-06 11:18:14 +02:00

provider-questions-2026-09-01.md

provider questions: arm them against the Storage Box / Storage Share conflation (operator-found)

2026-09-01 18:59:37 +02:00

provisioning.md

docs: F3 provisioning runbook (vmid from full host list) + campaign F1/F2 resolution banner

2026-07-02 10:27:17 +02:00

publish-train-rules.md

hub v0.112.0: a floor carries a declared MinAgent past the golden (R-472)

2026-09-13 16:47:11 +02:00

RUNBOOK-appliance-deployment.md

added runbooks

2026-07-10 19:41:04 +02:00

RUNBOOK-byo-deployment.md

added runbooks

2026-07-10 19:41:04 +02:00

RUNBOOK-ep0-datastore-volume-2026-07-27.md

docs: R-182 closed, R-90 closed on measurement, R-86 unblocked, ep0 record corrected

2026-08-03 14:00:54 +02:00

RUNBOOK-escrow-ceremony.md

host-install v1.16.0 (FELHOM_ESCROW via canonical sudoers fetch; hub hostInstallVersion synced, no deploy) + RUNBOOK-escrow-ceremony rewrite: controller wizard PRIMARY, CLI operator fallback, F1 threat-model paragraph (R over CF tunnel accepted 2026-07-13), stale-blob/supersede/void semantics

2026-07-13 19:01:46 +02:00

RUNBOOK-hub-db-offsite-backup.md

hub (unreleased): R-922 option A — a household's clear deletes its notification address (email_cleared); MAIL-HOLD — a restored hub sends no mail until released; two log lines drop the address; runbooks: mail hold is restore step 1; 07 §6.4 R-921 pre-check; R-921/R-922 narrowed

2026-10-09 12:37:29 +02:00

RUNBOOK-island-migration.md

Peti's box retired (operator ruling 2026-09-25): hub customer + Storage Box sub-account removed, ep0 held nothing; protected list = DooPlex + ep0; decision 34 (no leg resume, R-686 closed); R-688

2026-09-25 11:04:52 +02:00

RUNBOOK-local-api-endpoint-drift.md

hub v0.74.0: allow local_api_endpoint_drift; R-77 docs + R-78/79/80

2026-07-26 09:14:40 +02:00

RUNBOOK-manual-build.md

golden 0.298.0 baked (pinned Docker set; the first unpinned bake replaced before any vouch); golden gate test on the gate's UTC clock; bake runbook names GOLDEN_DOCKER_PKGS

2026-10-06 00:47:45 +02:00

RUNBOOK-manual-guest-restore.md

hub v0.129.0: operator raises ONE clean-up window's cap (R-833); restore-beside script + runbooks (R-834)

2026-10-04 08:56:56 +02:00

RUNBOOK-onboarding-draft-v4.md

docs(v1.24.0): R-59/R-60/R-61 SHIPPED — CHANGELOG, README, ROADMAP (+R-62), runbook, capability map, drill evidence, REPORT

2026-07-22 11:45:55 +02:00

RUNBOOK-open-retained-package.md

evening Part B: R-304 runbook + close, R-836 closed, R-528/R-435 dated, R-330 wire half closed; R-935 filed (core.bare flips)

2026-10-12 16:45:24 +02:00

RUNBOOK-pbs-prune-serverside-2026-07-27.md

docs: R-182 closed, R-90 closed on measurement, R-86 unblocked, ep0 record corrected

2026-08-03 14:00:54 +02:00

RUNBOOK-rehearsal-v3.md

hub v0.104.0: the guest network gets a reader (R-319), and the hub half of the naming (R-295)

2026-08-13 10:50:12 +02:00

RUNBOOK-vzdump-target-move-2026-07-29.md

Peti's box retired (operator ruling 2026-09-25): hub customer + Storage Box sub-account removed, ep0 held nothing; protected list = DooPlex + ep0; decision 34 (no leg resume, R-686 closed); R-688

2026-09-25 11:04:52 +02:00

secrets.md

security review part 4: 18 finding rows (R-970..R-987), notes on R-935/R-132/R-908, the rotation date in secrets.md (101 -> 119 rows)

2026-10-12 17:10:19 +02:00

target-selection.md

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

TASK-identity-only-escrow.md

Peti's box retired (operator ruling 2026-09-25): hub customer + Storage Box sub-account removed, ep0 held nothing; protected list = DooPlex + ep0; decision 34 (no leg resume, R-686 closed); R-688

2026-09-25 11:04:52 +02:00

total-loss-of-dooplex.md

dooplex-offsite: the operator signing keys ride the nightly encrypted copy; restore test proves each key matches its public half (R-924, operator ruling option A)

2026-10-09 14:49:08 +02:00

VOLUNTEER-first-hour.en.md

hub v0.126.0: fresh connect link from the old one (R-719); day-one mails (R-723); bind-page wording (R-725); volunteer guide current (R-722); ep0 cleanup and release evidence

2026-09-30 10:35:18 +02:00

VOLUNTEER-first-hour.md

website refresh: true numbers (56 apps), claims checked against the capability map, ten missing apps, an English twin of every public page (public, choice B), 404 page; site gates 13-18 + 11 decoys; R-902 opened

2026-10-08 08:29:17 +02:00

workspace-CLAUDE.md

Decisions 149-150 recorded; instruction files kept true; R-890, R-891, R-644 closed, R-469 narrowed (142 -> 139)

2026-10-06 13:52:28 +02:00