admin 0b7a8dbf63 architecture 13: the threat model (draft) from the security review

2026-10-12 17:18:08 +02:00

..

capability-map-detail

answers 2026-10-12 Parts D, F, G: controller 0.308.0 delivered, the capability map restructured, the notification design; 128 -> 97

2026-10-12 15:54:44 +02:00

_design-review.md

fix: update repo-name refs after deploy-felhom-compose -> felhom-controller rename

2026-06-08 14:03:13 +02:00

_hub-review.md

moved documentation to felhom.eu

2026-06-08 13:50:14 +02:00

_recovery-inventory-2026-07-28.md

hub v0.88.0 — the WAL that never was (R-172)

2026-08-02 21:06:29 +02:00

00-capability-map.md

answers 2026-10-12 Parts D, F, G: controller 0.308.0 delivered, the capability map restructured, the notification design; 128 -> 97

2026-10-12 15:54:44 +02:00

01-topology-and-trust.md

answers 2026-10-12 Part A: the 38 rulings recorded (09 §3 196-233), 17 rows closed (128 -> 112), R-933 filed

2026-10-12 14:07:50 +02:00

02-controller-module-map.md

answers 2026-10-12 Parts D, F, G: controller 0.308.0 delivered, the capability map restructured, the notification design; 128 -> 97

2026-10-12 15:54:44 +02:00

03-host-agent.md

03 §3.1: the controller-image write goes through a root verb (R-861 (a) A1); felhom-op's pct lines anchored (B2); decision 165

2026-10-07 10:21:24 +02:00

04-control-plane-authorization.md

dooplex-offsite: the operator signing keys ride the nightly encrypted copy; restore test proves each key matches its public half (R-924, operator ruling option A)

2026-10-09 14:49:08 +02:00

05-hub-architecture.md

hub (unreleased): the System page answers 'is anything wrong?' and 'is anything waiting for me?' first

2026-10-10 15:38:25 +02:00

06-offsite-connectivity.md

architecture: the system poster committed, its facts given a home, and a rule to keep them together

2026-10-09 18:09:50 +02:00

07-backup-architecture.md

answers 2026-10-12 Part A: the 38 rulings recorded (09 §3 196-233), 17 rows closed (128 -> 112), R-933 filed

2026-10-12 14:07:50 +02:00

08-alarm-ladder.md

answers 2026-10-12 Parts D, F, G: controller 0.308.0 delivered, the capability map restructured, the notification design; 128 -> 97

2026-10-12 15:54:44 +02:00

09-update-architecture.md

answers 2026-10-12 Part A: the 38 rulings recorded (09 §3 196-233), 17 rows closed (128 -> 112), R-933 filed

2026-10-12 14:07:50 +02:00

10-localisation.md

Decision sheet D1-D10: hub CHANGELOG, architecture notes (01, 04, 05, 07, 08, 10), register (VERIFY states, R-912), STATUS, report; decoy suite runs in a git worktree

2026-10-08 15:18:31 +02:00

11-os-updates.md

hub (unreleased): the System page answers 'is anything wrong?' and 'is anything waiting for me?' first

2026-10-10 15:38:25 +02:00

12-agent-tooling.md

Night 2026-10-06: catalog fixes held on night-held-2026-10-06 (R-777, R-612, R-782, R-805, R-806, R-733); decision 159 (CC unattended); R-392 closed (12-agent-tooling.md)

2026-10-06 21:13:25 +02:00

13-threat-model.md

architecture 13: the threat model (draft) from the security review

2026-10-12 17:18:08 +02:00

felhom-system-poster.facts.md

architecture: the system poster committed, its facts given a home, and a rule to keep them together

2026-10-09 18:09:50 +02:00

felhom-system-poster.html

architecture: the system poster committed, its facts given a home, and a rule to keep them together

2026-10-09 18:09:50 +02:00

where-felhom-stands-2026-08-09-snapshot.html

Verify the standing picture against source: 12 downgrades, and the decay ran both ways

2026-08-09 18:40:49 +02:00

where-felhom-stands.html

answers 2026-10-12 Part A: the 38 rulings recorded (09 §3 196-233), 17 rows closed (128 -> 112), R-933 filed

2026-10-12 14:07:50 +02:00

where-felhom-stands.yaml

answers 2026-10-12 Part A: the 38 rulings recorded (09 §3 196-233), 17 rows closed (128 -> 112), R-933 filed

2026-10-12 14:07:50 +02:00