adminandClaude Opus 5.5 c28ce7ce2f R-1228: retire DooPlex's copy of the website (operator yes); the installer pin moves to INSTALLER-TAG ...

- INSTALLER-TAG (one line) is the only installer pin; publish-site-cloudflare.sh reads it.
- hostinstall gate 6c: pin file holds one tag, no manifest pins one, publish script takes
  the site from origin/main and scripts/ from the tag. Red seen on five mutants.
- manifests: webpage.yaml keeps only FileBrowser; contact-mailer.yaml loses the old
  felhom.eu/api Ingress (an orphan: glued to the next doc by a `80---` typo).
- R-110 fence text, manifests/website rules, build skill, runbooks, poster facts updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-11-07 23:10:21 +01:00

..

break-glass-sheet.md

Day 2026-10-23 close-out: rulings D31-D36 in CONTEXT; STATUS (releases done, do list, D35 dated, D37/D38); register 191 -> 184 (closed R-49 R-982 R-985 R-991 R-1204 R-1205 R-1225 R-1226 R-1227 R-1230 R-1234; opened R-1235 R-1236 R-1237); the break-glass sheet current (D32, one A4, HU+EN); runbooks for D33/D34; poster facts; evidence day-2026-10-23

2026-10-23 11:03:45 +02:00

break-glass.md

Installer step 4b: vault first, then set, then a PVE login (R-1145); host key off curl's argv (review F4); harness green and a gate (R-1146); hub 0.158.0 deploy evidence; independent review + verdicts

2026-10-18 12:50:49 +02:00

config-bundle.md

hub-safety session: R-135/R-133/R-604/R-530/R-508/R-509/R-880 closed, R-861/R-173/R-518/R-519 narrowed, R-879/R-881 opened (336 → 332); 03 §3.1, 05 §16, golden 0.296.0, the hub-DB off-site plan, STATUS

2026-10-05 13:47:57 +02:00

crash-guard.md

night fixes 2026-10-05: R-867/R-95/R-863..R-869 closed, R-870..R-876 opened (R-876 P2: repair misses dpkg's journal); Part E crash record; Part F spike; golden 0.294.0; rulings 100-103, CC decisions 104-108; STATUS

2026-10-05 08:26:23 +02:00

day0-install.md

R-1228: retire DooPlex's copy of the website (operator yes); the installer pin moves to INSTALLER-TAG

2026-11-07 23:10:21 +01:00

dooplex-remove-disk-Z6A07P2G.md

evening Part A: disk Z6A07P2G silenced 30 days by serial, Longhorn HDD4 removed, removal checklist + R-934; R-231 token out of the URL

2026-10-12 16:36:00 +02:00

ep0-datastore-copy.md

ep0-copy-gc: fail-safe guards (partial ep0 list aborts, one deletion per run, HOLD file) — from the commit security review; still not installed

2026-10-08 09:58:00 +02:00

gitea-restore.md

R-923/R-924: total-loss-of-dooplex runbook (every recovery secret, where it lives, walked on paper), break-glass sheet (names only), Vaultwarden off-site proven (push, restore test, throwaway start); 'off DooPlex' claims corrected; R-924 filed

2026-10-09 12:13:41 +02:00

iso-release-gate.md

morning 2026-10-22: ISO 1.30.0 published (W1, W7; gate + proof installs on both entries); download pages point at it; rows 184 -> 178 (closed R-1192, R-1177, R-1178, R-1180, R-1195, R-1199, R-1210; opened R-1216 the host-swap check too strict); STATUS, CONTEXT, report

2026-10-22 10:51:24 +02:00

logging-conventions.md

hub v0.48.0 CHANGELOG + logging-conventions: TRACE level + ring sizing/spill (controller fix-3/fix-6, CAMPAIGN-3 closed)

2026-07-12 10:31:26 +02:00

monthly-floating-retest.md

R-1303 built and live-proven (test mail arrived, seed run committed its memory); R-1305–R-1309 filed (file manager, 27 apps, image packages, floating tags, mail-only notices); docs 08 §11, B23, monthly §4a; STATUS

2026-10-26 23:51:45 +01:00

nightly-rotation.md

nodes.md, nightly-rotation.md: scratch guest 9202 takes its address by DHCP (.114 until 2026-10-19, now .121); read it from the guest

2026-10-19 21:30:39 +02:00

offsite-endpoint.md

Day 3 2026-10-19: passphrase locks once the box uses its own key (D19; hub 0.161.0, controller 0.334.0 floor), every ep0 household gets a prune job (tenantsync v1.3.0), demo-hp address clean; register 163 -> 161 (closed 3, opened R-1167)

2026-10-19 16:34:29 +02:00

os-updates-docker-undo.md

docs: 11 §5.7 System page, §5.8 Docker slow lane BUILT, §5.9 crash restart; 00/03/07/08; decisions 90-94 (CC unattended); runbooks docker-undo + crash-guard; register R-852 R-835 R-848 R-849 R-851 R-854 closed, R-853 R-855 R-856 opened, R-812 R-840 narrowed (334 -> 332); live evidence

2026-10-04 17:36:10 +02:00

os-updates-guest-undo.md

night 2026-10-04: the guest undo runbook (proven 48 s), R-866, A3 in progress

2026-10-04 22:37:25 +02:00

os-updates-host-undo.md

night 2026-10-04: the guest undo runbook (proven 48 s), R-866, A3 in progress

2026-10-04 22:37:25 +02:00

os-updates-test-waits.md

R-840/R-859/R-860 records: 11 §5.3.1 + §5.4.2, 03, 04, 00; runbooks config-bundle + os-updates-test-waits; register 333→334 (R-840/859/860 closed, R-861/862 opened); STATUS; report; evidence

2026-10-04 20:40:08 +02:00

pbs-phantom-cleanup.md

R-99 runbook (pbs-phantom-cleanup) + read-only ep0 listing: no phantom today, nothing deleted; R-444 trim measured on demo-hp; R-618 closed by ruling (150 -> 149)

2026-10-06 11:18:14 +02:00

pbs-phantom-list.py

R-99 runbook (pbs-phantom-cleanup) + read-only ep0 listing: no phantom today, nothing deleted; R-444 trim measured on demo-hp; R-618 closed by ruling (150 -> 149)

2026-10-06 11:18:14 +02:00

provider-questions-2026-09-01.md

provider questions: arm them against the Storage Box / Storage Share conflation (operator-found)

2026-09-01 18:59:37 +02:00

provisioning.md

docs: F3 provisioning runbook (vmid from full host list) + campaign F1/F2 resolution banner

2026-07-02 10:27:17 +02:00

publish-train-rules.md

R-1228: retire DooPlex's copy of the website (operator yes); the installer pin moves to INSTALLER-TAG

2026-11-07 23:10:21 +01:00

RUNBOOK-appliance-deployment.md

added runbooks

2026-07-10 19:41:04 +02:00

RUNBOOK-byo-deployment.md

added runbooks

2026-07-10 19:41:04 +02:00

RUNBOOK-ep0-datastore-volume-2026-07-27.md

docs: R-182 closed, R-90 closed on measurement, R-86 unblocked, ep0 record corrected

2026-08-03 14:00:54 +02:00

RUNBOOK-escrow-ceremony.md

host-install v1.16.0 (FELHOM_ESCROW via canonical sudoers fetch; hub hostInstallVersion synced, no deploy) + RUNBOOK-escrow-ceremony rewrite: controller wizard PRIMARY, CLI operator fallback, F1 threat-model paragraph (R over CF tunnel accepted 2026-07-13), stale-blob/supersede/void semantics

2026-07-13 19:01:46 +02:00

RUNBOOK-hub-db-offsite-backup.md

Day 2026-10-23 close-out: rulings D31-D36 in CONTEXT; STATUS (releases done, do list, D35 dated, D37/D38); register 191 -> 184 (closed R-49 R-982 R-985 R-991 R-1204 R-1205 R-1225 R-1226 R-1227 R-1230 R-1234; opened R-1235 R-1236 R-1237); the break-glass sheet current (D32, one A4, HU+EN); runbooks for D33/D34; poster facts; evidence day-2026-10-23

2026-10-23 11:03:45 +02:00

RUNBOOK-island-migration.md

Peti's box retired (operator ruling 2026-09-25): hub customer + Storage Box sub-account removed, ep0 held nothing; protected list = DooPlex + ep0; decision 34 (no leg resume, R-686 closed); R-688

2026-09-25 11:04:52 +02:00

RUNBOOK-local-api-endpoint-drift.md

hub v0.74.0: allow local_api_endpoint_drift; R-77 docs + R-78/79/80

2026-07-26 09:14:40 +02:00

RUNBOOK-manual-build.md

CC uses its hub token: live C3 proof (floor no-op 303 floor_set, vouch 403, session-only 403); R-1051 closed; skill floor step + prune script on the token; STATUS: change the hub password

2026-10-15 13:10:00 +02:00

RUNBOOK-manual-guest-restore.md

Review round 2 (batch 2 + close-out): 02/07/09/10/11/14/15/16/inventory facts corrected at file:line (EDITS.md), undocumented decisions as notes (R-1265), rulings left for the operator (R-1266); register 190 -> 207 (R-1251..R-1267 opened: R-1251 P1 cut drive-app restore put back over newer data, R-1252 P2 rejected backup block deletes second-drive copies - reproduced on 9202); STATUS D43-D45; CONTEXT; audit README

2026-10-24 16:12:30 +02:00

RUNBOOK-onboarding-draft-v4.md

docs(v1.24.0): R-59/R-60/R-61 SHIPPED — CHANGELOG, README, ROADMAP (+R-62), runbook, capability map, drill evidence, REPORT

2026-07-22 11:45:55 +02:00

RUNBOOK-open-retained-package.md

evening Part B: R-304 runbook + close, R-836 closed, R-528/R-435 dated, R-330 wire half closed; R-935 filed (core.bare flips)

2026-10-12 16:45:24 +02:00

RUNBOOK-pbs-prune-serverside-2026-07-27.md

docs: R-182 closed, R-90 closed on measurement, R-86 unblocked, ep0 record corrected

2026-08-03 14:00:54 +02:00

RUNBOOK-rehearsal-v3.md

hub v0.104.0: the guest network gets a reader (R-319), and the hub half of the naming (R-295)

2026-08-13 10:50:12 +02:00

RUNBOOK-vzdump-target-move-2026-07-29.md

Peti's box retired (operator ruling 2026-09-25): hub customer + Storage Box sub-account removed, ep0 held nothing; protected list = DooPlex + ep0; decision 34 (no leg resume, R-686 closed); R-688

2026-09-25 11:04:52 +02:00

secrets.md

R-1228: retire DooPlex's copy of the website (operator yes); the installer pin moves to INSTALLER-TAG

2026-11-07 23:10:21 +01:00

target-selection.md

Evening 2026-10-18: fresh install proven (R-1148), OnlyOffice walk (R-1018), one-sign-in spike (R-1100 READY), Redis volumes (R-1117), CI rows, golden 0.331.0 baked; register 168 -> 168 (closed 6, opened R-1149..R-1154)

2026-10-18 23:12:21 +02:00

TASK-identity-only-escrow.md

Peti's box retired (operator ruling 2026-09-25): hub customer + Storage Box sub-account removed, ep0 held nothing; protected list = DooPlex + ep0; decision 34 (no leg resume, R-686 closed); R-688

2026-09-25 11:04:52 +02:00

total-loss-of-dooplex.md

close-out 2026-10-30: R-1344 and R-1346 closed, R-1228 switched (D35) and narrowed; R-1352, R-1353 filed; 01/03/05 [DESIGN], total-loss + publish-train runbooks, poster facts; instruction files: the site publishes to Cloudflare Pages

2026-10-30 11:13:17 +01:00

VOLUNTEER-first-hour.en.md

night 2026-10-22: D3 wording in the volunteer guides (the website change is a ready patch — a push publishes); D6 drill-reader proof; P3 research; P6 repos-private readers (read only)

2026-10-22 16:22:28 +02:00

VOLUNTEER-first-hour.md

night 2026-10-22: D3 wording in the volunteer guides (the website change is a ready patch — a push publishes); D6 drill-reader proof; P3 research; P6 repos-private readers (read only)

2026-10-22 16:22:28 +02:00

whole-guest-backup-orphan-thin.md

hub v0.157.0: app_definition_refused (R-971), the vault time moves on a re-vault (R-954), the hub's own snapshot count (R-895 slice); uninstall knows felhom-thin-check

2026-10-17 16:27:51 +02:00

workspace-CLAUDE.md

D60 (CC never deletes from the secret store) and D56–D59 recorded: 09 §3 decisions 271–275, rows R-785/R-1311/R-1313/R-1315, the decide table cleared; D60 in workspace CLAUDE, 12, secrets runbook

2026-10-27 22:31:44 +01:00