Files
felhom.eu/documentation/audits/gate-restore-2026-10-15/README.md
T
admin 15cb62097c
gates / gates (push) Successful in 6m45s
Controller v0.314.0 released under decision 250: floor 0.314.0 raised by CC's token at 13:11 UTC after the three test boxes
- 09 §3 decision 253: a restore puts the setup gate back as it was (R-1057 P2); 07 (what a per-app backup carries); 15 §6
  (Prowlarr links itself; Plex by address).
- Evidence audits/gate-restore-2026-10-15/: 9202 live proofs (R-1057, R-1058), the release (per-customer floors, Tester 1
  rc.1 -> 0.314.0 by itself, box walk, global floor, read-back), Plex fake-code check on 9201, red-proofs.
- Register: R-1023, R-1053, R-1057, R-1058 closed; R-1061 filed (P4); R-1060 narrowed; R-1052 blocked (customer creation
  is session only). STATUS, CONTEXT, the build skill's release steps, Prowlarr's website card.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-15 15:21:28 +02:00

2.3 KiB
Raw Blame History

Controller v0.314.0 — the gate on restore, test builds and the floor, Prowlarr's link, Plex by address (2026-10-15)

Design read: architecture/09-update-architecture.md §3 decisions 46–49, 245–253; 07-backup-architecture.md; 15-media-library.md §6. Code: felhom-controller 17863fe + 97c992a.

folder / file what it proves
9202/00-rc1.txt scratch guest 9202 on 0.314.0-rc.1
9202/restore.txt R-1057 live: Prowlarr installed (no account), the Update's per-app backup, remove keeping backups, restore → a stranger: /ping 401, / 302 to the gate, /initialize.json 401; the household 200; „Kész" opens it
9202/02-controller-log.txt the box's own line: „restored with its setup gate CLOSED — it was closed when the backup was taken (R-1057)"
9202/link.txt R-1058 live: Sonarr, then Prowlarr → „a media app came up: prowlarr", linked ~40 s later, no button; a second run „unchanged"
release/01-tester1-rc1.txt Tester 1 put on 0.314.0-rc.1 by hand (rc.4 runs the old check and cannot leave by itself)
release/02-customer-floors.txt per-customer floors 0.314.0 / MinAgent 0.155.0 through CC's token: 303 floor_set ×3
release/03-boxes-move.txt demo-hp and demo-felhom on 0.314.0 within 13 s; Tester 1 at 13:09:38 by itself (R-1053 live), at its regular report (R-1061)
release/04-https-only.txt, 05-health.txt the box walk's checks on all three: https-only OK; 0 unhealthy, 0 restarting, 0 exited; controller healthy; dashboard 200
release/06-global-floor.txt the global floor 0.314.0, MinAgent 0.155.0, by CC's token: 303 floor_set at 13:11:04 UTC; read back from the hub DB with its WAL
release/07-clear-customer-floors.txt the three per-customer floors cleared (empty), read back
plex9201/01-fake-code.txt R-1060 live, partly: a FAKE code through the dashboard's claim call — Plex took it as local and asked plex.tv (500 after 938 ms; before the fix 401 in 0 ms)
plex9201/02-claim.txt the real claim, when the operator's code arrives (watcher)
tools/ walk_gate_restore.py, walk_link.py, repoint9202.py

Red-proofs (mutation runs) are quoted in the controller CHANGELOG entry and the report (REPORT-gate-restore-release-2026-10-15.md).