felhom.eu/REPORT.md

REPORT — before the volunteer: the big night's P1 fixes, the two rulings, the publish (2026-09-15)

Releases: agent v0.131.0, controller v0.243.0 (MinAgent 0.131.0), hub v0.114.0, catalog templates (no version), installer ISO 1.27.1 published. Baselines re-verified at start: controller 406755f, agent 4586f0f, felhom.eu a028a9a, catalog 882a43e — all equal to the task table. Architecture read and cited: 03 §4, 05 (new §13/§14), 07 §6, 08 §6.2, 02 (settings after install).

Claims in the prompt that turned out wrong (first)

1. "The floor carries the agent release to every box" — false. The hub HOLDS a floor whose declared MinAgent is above the box's agent; an agent updates only by an operator-signed agent_update job (R-530). Delivered to demo-hp with the operator's keys; demo-felhom and Peti's box stay on 0.130.0.
2. "--restart always does not restart a killed container" — CORRECT, now measured (Docker 29.8.0, both policies exited 60 s after docker kill).
3. "Appliance registration knows no customer" — correct as read (api/appliance.go); not a trigger.
4. "a node_down mail would have gone at ~60 min" — not measured; unchanged as an inference.
5. "R-110 tag move" for the ISO — R-110 governs the host installer's installer-v* tag, which the ISO does not change; no tag was moved. "index page on iso.felhom.eu" — the bucket serves no index (R-504); the index is the website page felhom.eu/letoltes, published with the ISO.
6. "08-alarm-ladder.md §5 holds the cooldown" — it is in §6.1/§6.2; the ruling was written there.
7. "Park note in RUNBOOK-manual-build.md §4" — §4 is the golden image; the park note went to §3.1 (controller).

Parts

• A (R-523) agent supervisor — live on 9201: idle 59 s, parked held + unpark 25 s, swap deferred; crash-loop guard tripped for real and the hub mailed controller_crashloop; after the 30-minute pause the agent restarted it (09:36:24Z, dashboard 200 at 09:36:30Z) and the hub minted controller_restarted_by_agent; mid-deploy timing not measured.
• B (R-513) generated FileBrowser password — live on 9202 (generated) and 9201 (operator-set left alone); public 401.
• C (R-517/R-518) per-tier page live on 9201; absent-tier skip unit-proven; „0 B" found live and fixed (unreleased).
• D.1 (R-509) self-bind auto-send — shipped and red-proofed; live mail NOT checked (a throwaway customer's delete runs the RESET cascade on ep0 — fenced).
• D.2 node_* bypass the quiet hour (operator ruling) — red-proofed; recorded in 08 §6.2 and CONTEXT.md.
• D.3 (R-511) re-issue adopts — shipped, red-proofed; not provable on tester-1 (no host). STOP held: listing posted, operator said yes, one snapshot forgotten on ep0 (1 928 820 672 B logical), token kept, nothing else touched.
• D.4 (R-510) three GETs → 530 ×3 (no box, no tunnel); stays open; day-0 A.1 names the setting.
• E (R-512/R-514/R-515) catalog — live on 9202: stranger 400, 20/20 documents, peak 772 MB; OOM line not proven (R-528).
• F ISO 1.27.1 — uploaded; round trip sha256 25637007…c053, 1 705 322 496 B; .sha256 200; manifest 200; 1.26.1 kept for rollback; felhom.eu/letoltes 200. G11 PASS, G12 not measurable with the token.
• G docs: 03, 05 §13–14, 07 §6.4, 08 §6.2, 02, CONTEXT, RUNBOOK §3.1, day0 A.1, VOLUNTEER prerequisites.

Extra acts, stated

• The felhom.eu push was blocked by the due-checks gate (R-433 due today): the Gmail-read mailbox holds no Hetzner reply; re-dated to 2026-09-22 with the reason in the row. No --no-verify anywhere.
• The operator's three signing keys arrived mode 664; set to 600 (R-533).

Rows

Register rows 232 → 232: closed 9 (R-493, R-495, R-496, R-512, R-513, R-514, R-515, R-517, R-523); opened 9 (R-525 … R-533); narrowed R-509, R-510, R-511, R-518; R-433 re-dated.

Teardown, three layers

Machine: 9202 throwaways removed; 9201 controller running again (09:36:24Z); the killed homebox deploy created no container but left its app.yaml (09:04:55Z, keys only read) — moved aside to /root/homebox-app.yaml.p1fixes-residue, noted under R-531. Host: demo-hp park marker removed; agent 0.131.0 stays (the release). ep0: one tester-1 snapshot removed on yes. Hub: demo-hp floor override 0.243.0 kept (it delivers the release); no customer created or deleted.