felhom.eu

testdata

hub v0.131.0: the tunnel status is true (R-841: three states, tunnel_down after two not_running reports, unknown never alarms); OS updates per layer (guest/host separate approved sets, host candidate leaves out kernel/boot/firmware, host_release in the box block), the fleet view and four hourly operator alarms (11 §8 steps 3+4); red-proofs in audits/os-host-lane-2026-10-04

2026-10-04 13:05:00 +02:00

appliance_test.go

hub v0.62.0 + scripts v1.19.0 — R-21 slice C: the universal secret-free ISO

2026-07-17 15:07:31 +02:00

appliance.go

hub v0.66.0 + ISO v1.20.0: customer self-bind (R-27 slice 1)

2026-07-17 23:56:53 +02:00

artifact_test.go

…

backup_run_digest_event_test.go

hub v0.90.0 — a dropped notification leaves a trace, and the backup digest arrives (R-182)

2026-08-03 13:46:48 +02:00

backup_target_event_test.go

hub v0.81.0 — E-2: backup_target_absent gets its own signal (ships first)

2026-07-29 07:55:18 +02:00

chaosnight_events_test.go

hub v0.123.0: app_stopped_unhealthy (decision 28); 09 decisions 26-28 recorded

2026-09-24 11:38:13 +02:00

claim_ack_test.go

…

config_version_ack_test.go

…

controller_supervisor_event_test.go

hub v0.114.0: self-bind auto-send while a customer waits for a box (R-509); node_* bypass the quiet hour (ruling 2026-09-15); PBS re-issue adopts an endpoint token (R-511); controller supervisor events (R-523); event registers

2026-09-15 10:05:41 +02:00

crash_test.go

hub v0.132.0: the System page (versions + OS updates with the ring/switch/approve buttons, R-852), the Hosts Proxmox/kernel column, the operator-approved Docker engine release (2 healthy ring-0 nights), the crash-guard events (R-851); evidence audits/os-docker-crash-2026-10-04

2026-10-04 16:16:02 +02:00

crash.go

hub v0.132.0: the System page (versions + OS updates with the ring/switch/approve buttons, R-852), the Hosts Proxmox/kernel column, the operator-approved Docker engine release (2 healthy ring-0 nights), the crash-guard events (R-851); evidence audits/os-docker-crash-2026-10-04

2026-10-04 16:16:02 +02:00

desired_test.go

…

dr_test.go

…

dr.go

…

escrow_get_test.go

hub v0.94.0: a box can fetch its own sealed recovery package (R-199 link 6)

2026-08-04 13:39:27 +02:00

escrow_repo_key_changed_test.go

hub v0.93.0: the retention keeps the key it was built to keep (R-198) + three honesty fixes (R-197, R-192, R-196)

2026-08-04 12:56:58 +02:00

escrow_retained_get_test.go

hub v0.103.0 — a host can read the packages we kept for it (R-311)

2026-08-12 18:43:07 +02:00

escrow_test.go

hub v0.93.0: the retention keeps the key it was built to keep (R-198) + three honesty fixes (R-197, R-192, R-196)

2026-08-04 12:56:58 +02:00

event_test.go

hub v0.73.1: allowlist disk_health_degraded (controller v0.169.0 disk-health)

2026-07-24 21:35:01 +02:00

floor_ack_test.go

…

handler.go

hub v0.132.0: the System page (versions + OS updates with the ring/switch/approve buttons, R-852), the Hosts Proxmox/kernel column, the operator-approved Docker engine release (2 healthy ring-0 nights), the crash-guard events (R-851); evidence audits/os-docker-crash-2026-10-04

2026-10-04 16:16:02 +02:00

host_enroll_test.go

…

host_recovery_test.go

…

host_test.go

…

logbundle_ack_test.go

…

logtail_ack_test.go

…

mail_test.go

…

mail.go

…

managed_floor_ack_test.go

…

offsite_test.go

hub v0.129.0: operator raises ONE clean-up window's cap (R-833); restore-beside script + runbooks (R-834)

2026-10-04 08:56:56 +02:00

offsite.go

hub v0.128.0: set-aside deletion through the hub after a 7-day wait (decision 74, R-823), key-file clean-up route (R-826), read-only key check (R-827), window cap = half

2026-10-04 07:05:21 +02:00

os_updates_test.go

hub v0.131.0: the tunnel status is true (R-841: three states, tunnel_down after two not_running reports, unknown never alarms); OS updates per layer (guest/host separate approved sets, host candidate leaves out kernel/boot/firmware, host_release in the box block), the fleet view and four hourly operator alarms (11 §8 steps 3+4); red-proofs in audits/os-host-lane-2026-10-04

2026-10-04 13:05:00 +02:00

os_updates.go

hub v0.130.0: OS updates, guest fast lane — rings, per-box switch, OS releases approved from ring 0, os-report, os_update desired block

2026-10-04 10:56:39 +02:00

pbsdr_test.go

hub: R-39 core — stamp a secret GENERATION into the pbs_dr descriptor

2026-07-21 09:52:04 +02:00

pbsdr.go

…

poke_seam_test.go

hub v0.63.0 — system-initiated immediacy: wire poke/bump at every mutation site that lacked one

2026-07-17 17:30:41 +02:00

preferences_guard_test.go

hub v0.71.0: paired recovery mails (F11), prefs seeding at claim + empty-email no-clobber (F12), priority headers + operator test leg (F14-light)

2026-07-22 20:57:29 +02:00

r387_severity_visibility_test.go

hub v0.107.0: the hub rewrote a severity and said nothing (R-387); golden 0.223.0

2026-08-23 11:57:26 +02:00

recovery_unit_event_test.go

hub v0.89.0 — the two halves of decision D-c (R-167, R-158)

2026-08-02 23:19:13 +02:00

tunnel_test.go

hub v0.131.0: the tunnel status is true (R-841: three states, tunnel_down after two not_running reports, unknown never alarms); OS updates per layer (guest/host separate approved sets, host candidate leaves out kernel/boot/firmware, host_release in the box block), the fleet view and four hourly operator alarms (11 §8 steps 3+4); red-proofs in audits/os-host-lane-2026-10-04

2026-10-04 13:05:00 +02:00

wait_test.go

…

wait.go

…

wg_test.go

…

wg.go

hub v0.63.0 — system-initiated immediacy: wire poke/bump at every mutation site that lacked one

2026-07-17 17:30:41 +02:00

whole_guest_event_test.go

hub v0.78.0 — R-97a: whole-guest backup events, operator-only

2026-07-27 16:59:05 +02:00