Files
felhom.eu/documentation/audits/R411-R414-2026-09-01/04-observer-debug-enable.txt
T
admin f41a1a0ad8
gates / gates (push) Failing after 18s
R-411/408/407, R-414, R-412a leg 1, R-410, R-406 CLOSED; determination + live evidence
Part 2.1's determination is the first artifact: the scratch resolver was consciously OUT OF
SCOPE for R-356, not excluded on state-only grounds - established from R-356's own commit
08eb1a6, whose tests say 'the prepared scratch still resolves ... only the DESTINATION
moves'. So 07 section 6.3's rule applies and now has a FOURTH consumer, and the section
says so.

Live evidence: the collision rerun on demo-hp with the sampler positively controlled first
(12 locks=1 across a real check, 4 locks=0 quiet), showing unlock --remove-all 0 times where
the drill saw it twice; and the proof reaching verdict pass on demo-felhom - the box that
could not run it at all - recorded where last_proof_result had been ABSENT every night.

Capability map: the off-site proof row now records that the nightly firing IS proven (it ran
unattended at 05:30 on demo-hp) and that a driveless box can now be proved.

Register: six rows closed and compressed. OPEN 176 -> 170, CLOSED 152 -> 158.
2026-09-01 10:36:54 +02:00

31 lines
1.3 KiB
Plaintext

=== current logging level (to be restored) ===
logging:
file: ""
level: info
backup taken
logging:
file: ""
level: debug
=== THE PROOF ON A BOX WITH ZERO REGISTERED DRIVES ===
{"data":{"duration_ms":2452,"missing":null,"no_snapshot":false,"reason":"","skip_reason":"","skipped":false,"snapshot":"851e6dce","stack":"opengist","verdict":"pass"},"message":"A mentés tartalmazza az alkalmazás adatait","ok":true}
[http=200]
=== what it recorded (last night this was ABSENT) ===
last_proof_result 'pass'
last_proof_stack 'opengist'
last_proof_snapshot '851e6dce'
last_proof_reason '<ABSENT>'
last_proof_run '2026-09-01T08:28:00Z'
proved_snapshots {'opengist': '851e6dce'}
=== the log line (last night: a WARN and nothing else) ===
auth: valid session for POST /api/debug/backup/offsite-proof
proof: refusing to remove /mnt/sys_drive/felhom-data/backups/offsite-proof/opengist — it is not inside a proof root
proof: opengist PASSED on snapshot 851e6dce in 2.452s — the backup holds what this app should have
proof: refusing to remove /mnt/sys_drive/felhom-data/backups/offsite-proof/opengist — it is not inside a proof root
=== where did the scratch resolve to, and is it gone? ===
offsite-proof root: opengist
(empty or absent = the copy was deleted, as it must be)