admin 74009014aa R-366: the hub retains the escrow when the whole-guest backup key changes ...

A reinstall mints a new PBS key K while R-241 keeps the restic password, so
the supersession rule (restic sha only) overwrote the only copy of the old K
and every pre-reinstall whole-guest archive became unopenable for good. The
current row is now also retained when the key fingerprint changes (case and
space ignored; an empty fingerprint is unknown, not a change).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-06 20:45:00 +02:00

..

testdata

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

app_update_seed_test.go

hub v0.120.0: app_update_undone/held reach the household, per app, in its language

2026-09-23 13:47:13 +02:00

appliance.go

…

config_version_test.go

…

customer_delete_purge_test.go

…

customer_delete.go

…

customer_reset_test.go

…

customer_reset.go

…

declared_floor_test.go

…

dr_recipe_test.go

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

dr_recipe.go

…

drtier_backfill_test.go

…

escrow_identity_retention_test.go

…

escrow_superseded_test.go

…

floor_declared.go

…

floor_source_test.go

…

floor_test.go

…

host_delete_demote_test.go

…

host_delete_test.go

…

host_oob_decode_test.go

…

host_oob.go

…

host_recovery_test.go

…

host_recovery.go

hub v0.135.0: CSRF on the Basic-auth path (R-135), console passwords sealed at rest (R-133), boxes left behind listed and alarmed (R-604, R-530), no-e-mail banner (R-508)

2026-10-05 11:12:56 +02:00

host_test.go

…

language_test.go

hub v0.118.0: the household's e-mails follow the household's language (R-558 Part A)

2026-09-18 16:20:11 +02:00

logbundle_test.go

…

logbundle.go

…

logtail.go

…

managed_floor_test.go

…

notifications_seed_test.go

…

offsite_keys.go

hub v0.129.0: operator raises ONE clean-up window's cap (R-833); restore-beside script + runbooks (R-834)

2026-10-04 08:56:56 +02:00

offsite_restage_test.go

…

offsite_seal_test.go

hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822

2026-10-03 16:57:04 +02:00

offsite_seal.go

hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822

2026-10-03 16:57:04 +02:00

os_updates.go

hub v0.133.0 (R-859 test approvals end with the test; R-840 bundle on the System page, manifest, alarm); installer 1.31.0 (root files from the config bundle); bundle bootstrap script; golden 0.293.0 evidence; rulings 96–99; drill-r50 removed (evidence)

2026-10-04 20:18:37 +02:00

pbsdr_test.go

…

pbsdr.go

R-879: seal box API keys, owner passphrases, controller keys and PBS-DR tokens at rest

2026-10-05 21:45:04 +02:00

pragma_test.go

…

r133_recovery_seal_test.go

hub v0.135.0: CSRF on the Basic-auth path (R-135), console passwords sealed at rest (R-133), boxes left behind listed and alarmed (R-604, R-530), no-e-mail banner (R-508)

2026-10-05 11:12:56 +02:00

r366_escrow_key_change_test.go

R-366: the hub retains the escrow when the whole-guest backup key changes

2026-10-06 20:45:00 +02:00

r581_newest_report_test.go

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

r879_box_seal_test.go

R-879: roll-back command felhom-hub -unseal-box-secrets

2026-10-05 21:45:04 +02:00

r879_box_seal.go

R-879: roll-back command felhom-hub -unseal-box-secrets

2026-10-05 21:45:04 +02:00

selfbind.go

burn-down Part B: 14 small rows fixed and closed across four repos (306 -> 292); no :latest in the hub build; gate list pinned; closed-id duplicates refused; R-262 subset pinned

2026-10-05 17:10:38 +02:00

snapshot.go

hub v0.136.0: nightly VACUUM INTO snapshot, keep 2 (R-173 decision A); hub PVC 2Gi + Longhorn default group; 09 rulings 125-127; 05 §16.3

2026-10-05 14:28:30 +02:00

store.go

R-366: the hub retains the escrow when the whole-guest backup key changes

2026-10-06 20:45:00 +02:00

telemetry_test.go

…

telemetry.go

…

wg_endpoints_test.go

…

wg_operator_test.go

…

wg_operator.go

…

wg_test.go

…

wg.go

…