admin b6638ac4fc docs: the app page's layout, the asset tag, and a version number pushed once (controller v0.316.0) ...

02-controller-module-map.md "The app page" gains the layout rules [DESIGN] — one column of one
width, a section is a hairline not a card, a box means something (blue = the app is waiting for
you, amber = something is risky, nothing else), the hero is not a box, and a success is not a
banner. Plus the asset-tag rule: every shell's stylesheet address is derived from the BUILD, not
the version, because the origin sends no validator and a cached copy can therefore only expire or
be addressed differently.

09-update-architecture.md gains §0 [DESIGN]: a version number is pushed once. It belongs at the TOP
of that document because everything below it compares versions — the floor moves a box by comparing
a number, the button offers the highest tag, and a box re-pulls a tag only when the tag changes.
Two images under one number is therefore not untidiness; it is a box running the wrong code that
can never be told.

R-1080 filed and closed: 0.315.0 was pushed three times from three different commits. Closed rather
than left open because no box is stranded — exactly one guest ran it and it ran the registry's
current digest, and the floor was 0.314.0 so nothing else could have taken it.

audits/app-page-2026-10-15b/P0/ carries the measurement and its honest caveat: the stale Cloudflare
object is no longer reproducible, because the first probe of the session forced its revalidation.
What is shown is every precondition, the proof an aged entry existed (cf-cache-status EXPIRED), and
the elimination of the only other candidate. The six stylesheet bodies are reduced to their sizes,
sha256s and rule counts — one 99 KB file does not need six copies in git to make the point.

.claude/rules/unprompted-work.md item 6, all four versioned copies: a version number is pushed once,
stated as a FACT about what the build now enforces rather than as a new rule.

STATUS: the operator's one look, through the public address.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0117kRTSgs3rJWUFGxyoWN6Y

2026-10-15 20:33:10 +02:00

..

answers-2026-10-12

R-917: the first Facebook post is published (19:00:07, permalink 200); only the operator's pin left

2026-10-12 19:04:48 +02:00

app-page-2026-10-15b/P0

docs: the app page's layout, the asset tag, and a version number pushed once (controller v0.316.0)

2026-10-15 20:33:10 +02:00

backlog-triage-2026-10-03

Backlog triage Part E: RECOMMENDATION (top 29 = every P2, five themes, pick A off-site backup safety vs B box OS updates), STATUS decision, REPORT-backlog-triage-2026-10-03

2026-10-03 09:24:43 +02:00

backup-close-2026-10-04

off-site closed (R-833, R-834 closed; R-95 dated check; R-726 options) + OS-update spike: 11 corrected C1-C12, wrapper draft, answers; R-835..R-839

2026-10-04 09:54:31 +02:00

burndown2-2026-10-05

burn-down round 2: controller v0.297.0 rows closed (23), golden 0.297.0 evidence, delivery evidence, 23-row unchecked table, STATUS/CONTEXT/REPORT (292 -> 199; 1 opened, 94 closed)

2026-10-05 20:41:50 +02:00

burndown-2026-10-05

hub-db-backup: parse the snapshot time in a form BusyBox date reads (CI red since ab2b304: 9/15 on the Alpine runner)

2026-10-05 17:29:05 +02:00

calibre-name-and-prune-2026-10-01

Rulings 61-62 built: calibre-web generated login name, the registry prune rule; R-750/R-752 closed, R-756/R-757 opened; runbook 4.1a; STATUS, report, evidence

2026-10-01 13:29:46 +02:00

catalog-currency-2026-09-30

The last six PostgreSQL apps decided; the gate's wait seen live by day; catalog currency; stale rows

2026-09-30 14:47:12 +02:00

catchup-2026-10-05

catch-up session 2026-10-05: design 07 §6.1.1 (a box that is not always on), 08 §6.4; rulings 109-111, CC decisions 112-118; R-871/R-873..R-877 closed, R-872 narrowed (dated check), R-878 opened; live evidence; STATUS

2026-10-05 10:29:22 +02:00

cleanup-2026-09-23

Clean-up evening: R-634 cause fixed, held badge, OOM storm; floor 0.265.0

2026-09-23 17:40:01 +02:00

dashboard-layout-2026-10-08

Dashboard layout: R-906/R-907 fixed on main (controller d5f2e47, 423b6d3), R-909..R-911 filed, evidence from 9202, report

2026-10-08 14:47:14 +02:00

day-2026-10-07

09 §3 decisions 172-173 (kernel lane yes, option A + C; R-32 leftovers left, P4) recorded before the work

2026-10-07 14:59:19 +02:00

day-2026-10-08

R-415 fixed on hub main (no duplicate/nested/felhom.eu customer domain; R-138 option B); R-762 closed (9202 proven, catalog eec9a0d); R-905 opened (wger static in backups); decision sheet D10; 130 -> 129

2026-10-08 10:19:39 +02:00

design-build-2026-10-06

Design build done: R-469, R-638 closed; R-518/R-717/R-762 narrowed, R-528 stopped by its measurement; delivery + teardown evidence; STATUS, CONTEXT, REPORT (137 -> 137; 2 opened, 2 closed); section counts recomputed

2026-10-06 16:11:28 +02:00

dooplex-survival-2026-10-09

R-924: live run + restore test evidence; STATUS and report

2026-10-09 15:02:37 +02:00

DRILL-backup-truth-2026-08-21/evidence

DRILL closeout: the scheduled cycle agrees, the abandonment sweep watched firing, R-366

2026-08-22 05:25:30 +02:00

DRILL-cooldown-grain-2026-08-23

docs(hub v0.108.0): the delivery grain, the cooldown ruling, and gate 11's first subject

2026-08-23 14:12:23 +02:00

DRILL-r102-tier2-unit-2026-08-31

R-102 + R-103 CLOSED (controller v0.229.0) — architecture, register, STATUS, drill evidence

2026-08-31 12:21:52 +02:00

DRILL-r329-r386-2026-08-23

docs(R-329/R-386/R-387): the severity contract, the intent ruling, and Part 5 recorded

2026-08-23 12:03:49 +02:00

DRILL-r356-hot-only-restore-2026-08-22

R-356 docs: correct R-107 in the architecture, record the design, refresh STATUS, compress the register

2026-08-22 13:26:10 +02:00

DRILL-r356b-driveless-db-restore-2026-08-22

DRILL R-356b: the off-site restore for a driveless app that HAS a database

2026-08-22 16:33:45 +02:00

DRILL-r361-2026-08-22

R-361 docs: the [FACT], the negative that cancelled Part 2, R-383/R-384, golden 0.221.1

2026-08-23 00:33:12 +02:00

DRILL-r379-rollback-2026-08-22

R-379/R-380 docs: the failure ladder, the drill record, register housekeeping

2026-08-22 18:40:22 +02:00

DRILL-r384-dead-db-alarm-2026-08-23

R-385: make an UNRECORDED golden fail the currency gate; file R-386; own the alarm ladder

2026-08-23 07:59:52 +02:00

DRILL-r403-tier2-delete-2026-08-31

R-403 CLOSED (controller v0.230.0), R-404 filed as a decision for Viktor

2026-08-31 14:39:29 +02:00

DRILL-soak-2026-08-31

soak drill COMPLETE: 7 phases, 4 findings, the observer found the worst one (R-414)

2026-09-01 06:07:13 +02:00

evidence-agent-transport-leak-2026-08-20

agent 0.130.0 published and vouched; R-347 closed, R-349 + R-350 filed

2026-08-20 12:54:54 +02:00

evidence-backup-promise-2026-09-16

the volunteer's own path verified: felhom.eu/letoltes serves 1.28.0

2026-09-16 20:27:25 +02:00

evidence-bignight-2026-09-14

BIGNIGHT teardown complete: VM destroyed, host deleted, ep0 peer gone, customer and its ep0 data kept

2026-09-15 01:05:05 +02:00

evidence-chaos-fixes-2026-09-17

golden 0.246.0 baked and vouched with agent 0.132.0; controller floor 0.246.0 (operator decisions)

2026-09-17 12:25:52 +02:00

evidence-chaos-night-2026-09-17

chaos night: the accident logs that were never committed

2026-09-17 10:13:23 +02:00

evidence-doorstep-walk-1270-2026-09-14

doorstep teardown complete: host tester-1-8603a2 deleted, ep0 peer gone, customer kept; ep0 DR data retained for ruling

2026-09-14 18:52:09 +02:00

evidence-drill-0243-2026-09-16

drill 0.243.0 complete: 0 interventions, the connect e-mail proven, NOT ready for a volunteer

2026-09-16 14:27:04 +02:00

evidence-drill-fresh-install-0242-2026-09-14

drill 0242: teardown complete in three layers; R-501 filed

2026-09-14 16:40:59 +02:00

evidence-drill-new-household-2026-09-30

DRILL new household on golden 0.282.0: 0 interventions; ready for a first real tester on a new record

2026-09-30 09:25:17 +02:00

evidence-drill-r95-recovery-2026-09-01

DRILL R-95: the recovery route does not exist — stopped before the destructive phase

2026-09-01 16:55:50 +02:00

evidence-drill-retained-key-2026-08-12

DRILL: the retained key works, and the customer cannot reach it

2026-08-12 17:41:56 +02:00

evidence-ep0-established-connections-2026-08-20

SPIKE ep0 connections: CI green by run id (360/237, 19672e685)

2026-08-20 10:42:50 +02:00

evidence-ep0-fd-2026-08-18

INCIDENT + registers: ep0's PBS proxy served nobody for 9.5h (R-336..R-338)

2026-08-18 06:09:38 +02:00

evidence-ep0-pbs-upgrade-2026-08-18

RUNBOOK ep0: PBS 4.2.2-1 -> 4.2.5-1, slope unchanged as predicted (R-341)

2026-08-18 12:26:53 +02:00

evidence-fixes-first-tester-2026-09-30

Fixes before the first tester: decisions 50/51 outcomes, register 359->361 (R-719/720/721/722/727 closed, R-723 fixed, R-724/725 narrowed, R-728/729 opened), STATUS with the Tester-2 checklist, report

2026-09-30 11:01:08 +02:00

evidence-golden-0276-2026-09-28

STATUS, report, register (R-691 closed live, R-704..R-706), Part E + D2 evidence

2026-09-28 15:56:50 +02:00

evidence-golden-0283-2026-09-30

Golden 0.283.1 baked, round-trip verified, vouched with agent 0.138.0 (min_agent 0.131.0)

2026-09-30 11:40:17 +02:00

evidence-p1fixes-2026-09-15

REPORT + STATUS: P1 fixes — supervisor proven incl. crash-loop resume and hub events; publish; rows

2026-09-15 11:45:21 +02:00

evidence-r316-2026-08-13

REPORT: installer v1.28.0 published and verified live; evidence, and the Part 1 logs I lost again

2026-08-13 08:19:41 +02:00

evidence-r341-plus7d-2026-08-30

R-341 check taken, and the golden-currency bypass declared

2026-08-30 18:49:53 +02:00

evidence-r353-r360-live-2026-08-30

Register + architecture for controller v0.226.0 (R-353/357/358/360/396), and R-395 fixed

2026-08-30 19:39:41 +02:00

evidence-recovery-code-2026-09-16

R-543 closed: the household is asked for the recovery code (controller v0.245.0)

2026-09-16 21:20:51 +02:00

evidence-rehearsal-2026-08-09

Rehearsal 2026-08-09 COMPLETE: data BYTE-IDENTICAL, journey needs a shell twice

2026-08-09 12:35:26 +02:00

evidence-spike-app-update-2026-09-01

SPIKE: what an app update actually does, and which other paths do it too

2026-09-01 21:35:32 +02:00

evidence-spike-restic-restore-2026-08-31

R-87 SPIKE: measured, do not build it as written (R-407..R-409 filed)

2026-08-31 15:59:09 +02:00

facebook-first-post-2026-10-09

facebook: the first post SCHEDULED for 2026-10-12 19:00 (R-917 -> VERIFY)

2026-10-09 15:14:55 +02:00

facebook-page-api-2026-10-08

Spike: Facebook Page reached after the operator's Page click; scheduled post + photo created, read back byte-equal, deleted

2026-10-08 18:38:25 +02:00

facebook-page-details-2026-10-09

facebook: the Meta app is LIVE (R-915 closed); website lockup entry

2026-10-09 14:06:35 +02:00

facebook-page-setup-2026-10-08

marketing/facebook: the phone check ran after all — the cover IS cut on phones (R-919)

2026-10-08 21:50:57 +02:00

family-gate-2026-10-02

Family gate session close: B4 on demo-hp (real internet: member in, stranger 401; remove with data), REPORT-family-gate-2026-10-02, STATUS, R-800 (remove-with-data keeps userdata, operator), CONTEXT; register 436

2026-10-02 10:43:10 +02:00

fixtures

docs(audits): first genuinely failing disk — the SMART PASSED trap

2026-08-14 07:57:07 +02:00

forum-research-2026-10-12

Audit: three years of the PROHARDVER! home-server forum read against Felhom; R-990, R-991 filed

2026-10-12 22:20:52 +02:00

gate-restore-2026-10-15

R-1052 closed: a new box from the public ISO (golden 0.313.0) reached the floor 0.314.0 by itself, 2 min 52 s after the bind (throwaway customer Tester3, VM removed)

2026-10-15 16:07:08 +02:00

gate-rollout-2026-09-29

Gate rollout 2026-09-29 afternoon: 32/34 gated, sign-up blocks (decision 47 + CC mechanism), R-713; R-707/R-711/R-713 closed, R-714..R-716 opened; STATUS, CONTEXT, report

2026-09-29 11:25:14 +02:00

https-only-2026-10-14

https only (R-1033, P1): controller v0.312.0 proven on Tester 1, demo-hp, demo-felhom (29 names); scripts/https_only_check.py; 01/13/poster facts; decision 246 (decided by CC unattended); R-1033 P1 narrowed; R-1041..R-1043

2026-10-14 22:49:54 +02:00

hub-db-offsite-2026-10-05

the size rule: a small finding is fixed in the session, not filed; reports state four register numbers (burn-down Part D)

2026-10-05 16:43:19 +02:00

hub-safety-2026-10-05

hub-safety session: R-135/R-133/R-604/R-530/R-508/R-509/R-880 closed, R-861/R-173/R-518/R-519 narrowed, R-879/R-881 opened (336 → 332); 03 §3.1, 05 §16, golden 0.296.0, the hub-DB off-site plan, STATUS

2026-10-05 13:47:57 +02:00

hub-system-page-2026-10-10

hub (unreleased): the System page answers 'is anything wrong?' and 'is anything waiting for me?' first

2026-10-10 15:38:25 +02:00

hub-tokens-2026-10-15

Operator's three steps verified: hub password changed (DB vs 02:00 snapshot), HUB_PW gone from CC's credentials, demo-hp floor cleared; STATUS + total-loss runbook S16

2026-10-15 14:05:58 +02:00

i18n-2026-09-17

i18n starter: 10-localisation.md, live evidence, capability row, STATUS + CONTEXT

2026-09-17 14:58:35 +02:00

i18n-closing-2026-09-21

floor 0.259.0 raised; R-601 withdrawn as FALSE; R-604 filed

2026-09-21 09:13:57 +02:00

i18n-slice1-2026-09-17

i18n slice 1 release C (controller v0.250.0): R-556 CLOSED, live evidence, R-565..R-568, decision 6 superseded

2026-09-17 18:50:16 +02:00

i18n-slice2-2026-09-18

ops: fleet floor raised to 0.255.0 — and it delivered on its own

2026-09-18 15:37:15 +02:00

i18n-slice3-2026-09-18

docs: localisation slice 3 CLOSED — evidence, R-558/R-555 closed, R-585 filed

2026-09-18 17:11:15 +02:00

i18n-slice4-2026-09-18

slice 4: bilingual console + the English download page is live (R-559)

2026-09-18 17:47:58 +02:00

i18n-slice5-2026-09-20

Localisation slice 5 CLOSED: the catalog speaks English and the floor is at 0.257.0

2026-09-20 16:40:59 +02:00

i18n-slice6-2026-09-20

drill evidence: drop the raw PPM screendumps, keep the PNGs

2026-09-20 19:26:33 +02:00

immich-first-start-2026-09-30

immich's first start: cause measured, fixed in the catalog (R-732 closed); ISO clean-tree gate (R-730 closed)

2026-09-30 16:18:17 +02:00

immich-repair-2026-10-14

Immich repair on every box: rollout read-back, R-1021 closed, R-1007 dated line, F12 fleet delivery, STATUS, report

2026-10-14 19:28:13 +02:00

kept-offsite-2026-09-28

STATUS, report, register (R-691 closed live, R-704..R-706), Part E + D2 evidence

2026-09-28 15:56:50 +02:00

kernel-lane-2026-10-07

kernel lane: report, STATUS, CONTEXT, R-836 where-it-stopped, R-898 filed; 126 -> 128

2026-10-07 18:19:03 +02:00

kernel-night-2026-10-07

kernel night 7->8 read back: demo-felhom passed (7.0.14-20 default, ~1.5 min), demo-hp no step (R-899 filed); 126 -> 127

2026-10-08 06:41:20 +02:00

kernel-night-2026-10-08/readback

audits: kernel night 8->9 read-back; release 2026-10-09 delivery evidence (agent update signed, floors 0.304.0)

2026-10-09 07:14:20 +02:00

kernel-night-2026-10-09/readback

kernel night 9→10 read back: demo-hp 7.0.14-22 (~3.5 min down), demo-felhom 7.0.14-23 (~65 s), no false alarm, Approve kernel set not shown (boxes on different kernels)

2026-10-10 07:36:10 +02:00

kernel-spike-2026-10-07

kernel lane: report, STATUS, CONTEXT, R-836 where-it-stopped, R-898 filed; 126 -> 128

2026-10-07 18:19:03 +02:00

ladder-2026-09-24

2026-09-24: 09 decisions 24-25, part 5 shipped; the whole-copy truth table; fourth suppression; rows; STATUS; evidence

2026-09-24 08:52:42 +02:00

licences-2026-10-02

Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT

2026-10-02 09:35:42 +02:00

lockouts-2026-10-01

Rulings 61-62 built: calibre-web generated login name, the registry prune rule; R-750/R-752 closed, R-756/R-757 opened; runbook 4.1a; STATUS, report, evidence

2026-10-01 13:29:46 +02:00

login-gate-2026-09-29

Session close 2026-09-29: R-710 closed live on demo-hp; STATUS, CONTEXT, REPORT-login-gate-2026-09-29

2026-09-29 09:22:56 +02:00

logins-nvme-2026-09-28

audits: Part G night read 2026-09-28/29 — legs normal, Part D no false alarm

2026-09-29 04:52:12 +02:00

m3-2026-10-11

report: M3 live - the changelog, the session report and the operator's screen

2026-10-11 16:00:57 +02:00

mailer-source-2026-10-08

R-902 search: contact-mailer source NOT FOUND (DooPlex disks, web editor + history, 10 Gitea repos, build cache); binary kept in git; replacement plan; decoy suite takes a lock (two sessions' runs left a decoy planted)

2026-10-08 10:35:27 +02:00

media-all-drives-2026-10-14

Media folder fix: live read-back on demo-hp 9201 (hardlink, live catalog bc54c01); R-1014/1015/1016/1030 closed, R-1019 narrowed, R-1039/1040 filed; report

2026-10-14 22:01:09 +02:00

media-build-2026-10-15

Controller v0.314.0 released under decision 250: floor 0.314.0 raised by CC's token at 13:11 UTC after the three test boxes

2026-10-15 15:21:28 +02:00

media-drive-events-2026-10-14

K6-2: Plex claimed AFTER start with the household's code — 200, claimed 0->1, open door closed (401); plex-k6 removed; R-1028 proven path, R-1022 step 7 done

2026-10-15 08:01:50 +02:00

media-folder-fix-2026-10-14

Media folder fix: live read-back on demo-hp 9201 (hardlink, live catalog bc54c01); R-1014/1015/1016/1030 closed, R-1019 narrowed, R-1039/1040 filed; report

2026-10-14 22:01:09 +02:00

mockups-2026-10-11

context: operator ruling 2026-10-11 - none of the three directions; M3 follows

2026-10-11 13:38:08 +02:00

more-night-apps-2026-09-30

More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator)

2026-09-30 20:27:28 +02:00

morning-after-2026-10-06

morning after: R-889 delivered (controller v0.299.0, df's percent read back), R-776/R-613 proven on 9202 and live, R-585/R-621 delivered; ten operator questions on one page in STATUS; report (164 -> 150; 0 opened, 14 closed)

2026-10-06 08:50:08 +02:00

n100-lived-in-2026-10-15

The N100 becomes the lived-in box (09 §3 decision 254): media apps installed and wired through the dashboard; films proven never off-site; the USB split NOT done (it is the whole-guest backup target)

2026-10-15 16:59:15 +02:00

new-app-checklist-2026-10-01

New-app checklist: the pilot audit (wger as of 2026-09-29 and now, two 9202 walks), R-758..R-764 opened; STATUS, CONTEXT, report

2026-10-01 15:22:05 +02:00

new-apps-2026-10-01

Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT

2026-10-02 09:35:42 +02:00

new-apps-2026-10-10

New apps 2026-10-10: Grocy and LubeLogger on the website; Monica stopped

2026-10-10 12:34:05 +02:00

night-2026-09-23

night shift 2026-09-23: the record, the register, the morning note

2026-09-24 00:24:04 +02:00

night-2026-09-24

tools: liveR669.py (the R-669 live proof)

2026-09-24 17:06:23 +02:00

night-2026-09-25

tools: live272.py (the v0.272.0 live proofs)

2026-09-25 11:34:04 +02:00

night-2026-09-26

night watch: demo-hp converted docmost by itself; R-696 filed; teardown recorded

2026-09-26 04:42:47 +02:00

night-2026-10-04

night 2026-10-04: Tester 2 read 06:20 local

2026-10-05 06:20:28 +02:00

night-burndown-2026-10-05

burn-down night: morning note, STATUS top (164), CONTEXT, report (199 -> 164; 1 opened, 36 closed)

2026-10-06 05:08:10 +02:00

night-burndown-2026-10-06

Read-back done, releases delivered (hub 0.141.0, agent 0.150.0, controller 0.302.0, catalog 872039d), R-892 proven on the Tester 1 box; 7 rows closed (137 -> 130)

2026-10-07 09:30:55 +02:00

night-fixes-2026-10-05

night fixes 2026-10-05: System page read after demo-hp's facts caught up (R-853 delay, ~17 min)

2026-10-05 08:31:49 +02:00

night-power-2026-10-13

Night power drill complete: 8 real cuts on demo-hp (all came back), the estimator checked on a second machine and on 8 GB; R-1003..R-1009 filed; STATUS to one screen (history moved byte for byte); G18 and F5 corrected

2026-10-14 09:40:16 +02:00

night-rulings-2026-09-30

Both rulings built: same-tag re-tests (decision 52), image retention + the install hold (controller 0.284.2); golden 0.284.2

2026-09-30 23:26:21 +02:00

nightly-2026-09-13-adventurelog

evening: rules file in place; R-483 CLOSED (catalog, operator-confirmed); R-479 CLOSED (controller v0.241.0, proven live); R-481 blocked on the one-host-one-customer model; R-491 filed

2026-09-13 21:57:47 +02:00

nightly-2026-09-13b-bentopdf

second night: scratch guest 9202 built (R-481 CLOSED, persists); controller v0.242.0 delivered (R-487 R-491 R-490 R-476 R-456 CLOSED, R-489 re-scoped); R-492 filed; rotation restarted from bentopdf; morning note

2026-09-13 23:06:21 +02:00

offsite-append-only-2026-10-03

R-436 measured on the provider: append-only forced key HOLDS (403 on every delete), but the sub-account password defeats it (R-820); design proposal + ep0 options

2026-10-03 13:40:35 +02:00

offsite-finish-2026-10-04

Off-site safety finished: Parts A-F evidence, decision 74, golden 0.290.0 recorded (vouched, floor 0.290.0), restore walked from the DooPlex copy, register 330 -> 328 (R-823/824/826/827/828/830 closed; R-833, R-834 opened)

2026-10-04 07:39:59 +02:00

offsite-lock-build-2026-10-03

Part A/E scratch teardown on u629488-sub4 (authorized_keys byte-identical)

2026-10-03 21:30:11 +02:00

omv-vm-2026-10-15

Felhom in a VM on OpenMediaVault 8 (KVM plugin): tried on an exact copy of the pilot's box; Hungarian guide; R-1068..R-1073; capability A23

2026-10-15 19:24:59 +02:00

os-docker-crash-2026-10-04

R-858 closed (agent v0.142.1, ruling 95): the Docker step restarts the socket users; incident evidence; STATUS; report addendum

2026-10-04 18:35:40 +02:00

os-guest-lane-2026-10-04

OS updates guest fast lane: records — 11 §8.1 BUILT, 03 cloudflared corrected, 07 §6.1 OS leg, 00 PARTIAL, monthly runbook infra pins, golden 0.291.0 record + vouch, register 331 -> 333 (R-837/838/726/843 closed; R-840/841/842/844/845 opened), STATUS, report

2026-10-04 11:41:50 +02:00

os-host-lane-2026-10-04

docs: OS updates steps 3+4 BUILT (11 §8.2/§8.3, §5.6 kernel facts, §5.8 Docker slow lane design), 00/03/07/08 updated, decisions 84-86 (CC unattended), host undo runbook (proved), register: R-841 R-845 R-846 R-850 closed, R-848 R-849 R-851 opened, R-836 R-812 narrowed (332 -> 333); STATUS; live evidence

2026-10-04 14:47:21 +02:00

os-updates-spike-2026-10-04

off-site closed (R-833, R-834 closed; R-95 dated check; R-726 options) + OS-update spike: 11 corrected C1-C12, wrapper draft, answers; R-835..R-839

2026-10-04 09:54:31 +02:00

permanent-gate-2026-10-01

Evidence: Part A (visitors apart — measurements, design, sweep, 9202 live) and the permanent-gate spike (items 1–6, VERDICT: PASS, build plan)

2026-10-01 21:26:23 +02:00

persistence-sweep-2026-10-02

Persistence re-sweep of all 58 (R-801 closed: CLEAN 40 / UNDETERMINED 18 / BROKEN 0), R-788 + R-803 (papra) closed, R-804..R-807 opened; STATUS "Before the first paying customer"; REPORT-persistence-sweep-2026-10-02; register 442

2026-10-02 16:54:26 +02:00

pg-calcom-claper-2026-09-28

decisions 44-45, FIRST-ADMIN link, register (R-701/R-702 closed, R-707..R-709), STATUS, report, evidence

2026-09-28 19:02:06 +02:00

pg-last-six-2026-09-30

Website + evidence: the Usenet pair (R-988 closed), and the drill route filed as R-989

2026-10-12 22:58:59 +02:00

plugmeter-2026-10-13

Bench: plugmeter reads the N100's metered plug (tinytuya + Home Assistant from the catalog)

2026-10-13 17:07:26 +02:00

power-cut-fixes-2026-10-14

R-1009 closed (estimator live, read back); R-1007: the operator's ruling recorded, and Immich v3.2.4 rebuilds single photos

2026-10-14 15:40:23 +02:00

poweroff-2026-10-13

Power-off live proof complete (R-998, R-999 closed): the hub held 2 h 56 min, the power button brought the N100 back, the hold ended; HP plug + BIOS; R-1002 filed; F11 PROVEN-LIVE

2026-10-14 00:08:56 +02:00

probe-fix-2026-09-22

romm OOM storm on demo-hp: fixed, measured, closed (R-635)

2026-09-22 18:04:49 +02:00

prowlarr-2026-10-15

Prowlarr linked on 9201 (live catalog): R-1048 closed, R-1058 filed; the session report

2026-10-15 13:14:32 +02:00

qbittorrent-2026-10-12

Website: the two download clients on the app page; the campaign's evidence; R-988 filed

2026-10-12 21:03:11 +02:00

r459-close-2026-09-13

R-459 CLOSED (MariaDB converts itself, proven by harness + live), golden 0.236.0 (R-467), the golden waiver (R-468)

2026-09-13 10:14:37 +02:00

r459-spike-2026-09-06

SPIKE R-459: the skipped MariaDB conversion is stable, and the trade it implied does not exist

2026-09-06 17:42:19 +02:00

r553-2026-09-17

R-553 + R-563 CLOSED (controller v0.251.0): evidence, 10 §9 rewritten, R-569..R-571, slice-2 dependency

2026-09-17 21:11:31 +02:00

r649-2026-09-23

R-649 closed: a failed install removes what it started (operator ruling); floor 0.266.0

2026-09-23 18:14:38 +02:00

r672-2026-09-24

R-672 session: audit README (not done first, wrong claims), STATUS, capability map, register 344->341, topic REPORT

2026-09-24 17:06:09 +02:00

r840-config-bundle-2026-10-04

R-840/R-859/R-860 records: 11 §5.3.1 + §5.4.2, 03, 04, 00; runbooks config-bundle + os-updates-test-waits; register 333→334 (R-840/859/860 closed, R-861/862 opened); STATUS; report; evidence

2026-10-04 20:40:08 +02:00

r890-instructions-2026-10-06

Part C: R-644, R-763, R-764 closed (wger's fixes proven on 9202), R-762/R-717 stopped with reasons; STATUS, CONTEXT, REPORT (142 -> 137; 0 opened, 5 closed)

2026-10-06 14:03:28 +02:00

R411-R414-2026-09-01

R-411/408/407, R-414, R-412a leg 1, R-410, R-406 CLOSED; determination + live evidence

2026-09-01 10:36:54 +02:00

R442-2026-09-13

R-442 CLOSED (controller v0.236.0): "delete my data too" deletes it or refuses; R-465..467 opened

2026-09-13 09:07:08 +02:00

readback-2026-10-07

Read-back done, releases delivered (hub 0.141.0, agent 0.150.0, controller 0.302.0, catalog 872039d), R-892 proven on the Tester 1 box; 7 rows closed (137 -> 130)

2026-10-07 09:30:55 +02:00

records-carried-2026-09-27

night 09-27/28: paperless 16 copy released on a real 18 dump (v0.276.0); demo-hp restore test refused for space -> R-701

2026-09-28 03:46:43 +02:00

redesign-2026-10-10

docs: record the placement change and re-measure after it

2026-10-11 09:29:47 +02:00

register-shrink-2026-10-10

STATUS: the 2026-10-10 decision sheet (S1-S38, T1-T19) and the register-shrink report; R-903 live read-back

2026-10-10 15:57:06 +02:00

release-2026-10-09

D6 / R-138: every stored Cloudflare token checked once (operator present), all 4 PASS; R-138 closed

2026-10-09 09:00:05 +02:00

release-2026-10-10

release 2026-10-10: CI runner restart (operator yes) evidence; report

2026-10-10 11:11:31 +02:00

retest-2026-10

Evidence: the first full monthly re-test (decision 55) — nextcloud and sonarr re-tested and written; runbook: every app by default, the standing brief

2026-10-01 07:54:22 +02:00

retire-peti-2026-09-25

Peti retired (record complete); controller v0.272.0 live proofs + floor 0.272.0; register 339 -> 334; STATUS

2026-09-25 11:33:27 +02:00

rulings-2026-10-01

Rulings 2026-10-01 built: report, STATUS (standing monthly line), decision 57 (mealie lockout, decided by CC unattended), R-747 narrowed, evidence

2026-10-01 10:20:44 +02:00

rulings-r472-r475-2026-09-13

docs: rulings 7 and 8 shipped and proven live (R-470/R-472/R-475 CLOSED); R-477..R-480 opened

2026-09-13 17:54:23 +02:00

security-review-2026-10-12

security review: FINDINGS.md (short form) and COVERAGE.md

2026-10-12 17:15:40 +02:00

selfhst-survey-2026-10-12

Audit: selfh.st survey 2023-2025 read against Felhom; R-989 filed

2026-10-12 22:09:10 +02:00

seo-2026-10-10

marketing + seo: the three-week tester campaign, schedule-post --link, the not-indexed audit

2026-10-10 16:13:23 +02:00

seo-2026-10-14

SEO audit: live read-back and the price evidence (the Google yearly price is not in the page HTML)

2026-10-14 18:55:13 +02:00

signup-lock-2026-09-29

Sign-up lock 2026-09-29 evening: decisions 48/49 outcomes, two locks, wanderer closable, R-714/715/716 closed, R-717/718 opened; STATUS, CONTEXT, report

2026-09-29 17:19:43 +02:00

sizing-2026-10-13

Prowlarr evidence (R-1048) + its apps-page card; the stated app count 62 -> 63; R-1057 filed

2026-10-15 12:58:18 +02:00

sizing-check-2026-10-14

R-1009 closed (estimator live, read back); R-1007: the operator's ruling recorded, and Immich v3.2.4 rebuilds single photos

2026-10-14 15:40:23 +02:00

slice4-2026-09-13

Slice 4 shipped (R-448/R-443/R-439 CLOSED, proven live); R-472..R-476; the floor-between-bakes claim corrected

2026-09-13 12:30:17 +02:00

storage-identity-2026-10-15

Storage that knows its physical disks: design draft 16 + spike; R-1074..R-1079; STATUS D10

2026-10-15 20:08:08 +02:00

ten-answers-2026-10-06

ten answers done: R-444 seen working live (weekly trim + System page), closed; STATUS, CONTEXT, REPORT (150 -> 142; 2 opened, 10 closed)

2026-10-06 13:09:04 +02:00

the-28-2026-09-22

corrections: calibre-web restore was REFUSED, calcom was INCONCLUSIVE

2026-09-22 20:18:37 +02:00

undo-bakeoff-2026-09-23

Undo bake-off: copy the folder wins (09 §3 decisions 19-20, §6.1a)

2026-09-23 10:28:56 +02:00

undo-fleet-2026-09-23

The household is told: controller v0.264.0 + hub v0.120.0 proven live, floor 0.264.0

2026-09-23 14:39:31 +02:00

undo-live-2026-09-23

The undo, built and proven live: controller v0.263.2 (09 decision 15)

2026-09-23 12:25:13 +02:00

update-arc-2026-09-21

Update arc resumed: the state measured, R-524/R-520/R-589/R-469 closed, seven questions put to the operator

2026-09-21 13:13:23 +02:00

update-arc-gaps-2026-09-21

Update night 2026-09-21: Phase 0 and Phase 1 evidence, the drill method, and two instrument fixes

2026-09-21 21:17:46 +02:00

update-night-2026-09-21

THE TWENTY-EIGHT: every app no drill had touched, walked in one night

2026-09-22 16:00:56 +02:00

update-rulings-2026-09-23

Update arc: the undo and ladder spiked, the build plan for the 2026-09-23 rulings

2026-09-23 08:54:41 +02:00

upgrade-spike-2026-09-06/evidence

SPIKE: an upgrade test that runs again — and a real defect in our own bookstack template

2026-09-06 11:48:57 +02:00

usenet-2026-10-12

Website + evidence: the Usenet pair (R-988 closed), and the drill route filed as R-989

2026-10-12 22:58:59 +02:00

v0240-2026-09-13

R-452 CLOSED: the catalog-since gate (hook-enforced); 09 §8.2 limitation lifted; STATUS note updated

2026-09-13 19:42:42 +02:00

v0241-2026-09-13

evening: rules file in place; R-483 CLOSED (catalog, operator-confirmed); R-479 CLOSED (controller v0.241.0, proven live); R-481 blocked on the one-host-one-customer model; R-491 filed

2026-09-13 21:57:47 +02:00

v0242-2026-09-14

second night: scratch guest 9202 built (R-481 CLOSED, persists); controller v0.242.0 delivered (R-487 R-491 R-490 R-476 R-456 CLOSED, R-489 re-scoped); R-492 filed; rotation restarted from bentopdf; morning note

2026-09-13 23:06:21 +02:00

v0262-live-2026-09-22

floor raised 0.261.0 -> 0.262.1, MinAgent 0.131.0 declared

2026-09-22 22:10:38 +02:00

version-travel-2026-09-26

night 09-27/28: paperless 16 copy released on a real 18 dump (v0.276.0); demo-hp restore test refused for space -> R-701

2026-09-28 03:46:43 +02:00

visitors-2026-10-01

Evidence: SparkyFitness box walk (9202) and its licence text

2026-10-01 22:19:55 +02:00

website-dashboard-2026-10-08

website dashboard: live check (pictures load, own language each, 376 px no sideways scroll), report

2026-10-08 12:50:44 +02:00

website-gallery-2026-10-08

website gallery: report + live check after v2 (open, next, close by clicking the picture, swipe keeps it open, JS off opens the file)

2026-10-08 13:21:54 +02:00

website-globe-2026-10-08

website globe: report, live check (desktop JS on/off, 376 px menu), R-903 (no-JS phone menu); 130 -> 131

2026-10-08 09:21:16 +02:00

website-refresh-2026-10-08

website refresh: report, live check (all 14 pages 200, 404 page, hreflang/canonical read back, 376 px no sideways scroll), measured claim counts

2026-10-08 08:32:47 +02:00

AUDIT-blast-radius-hostroot-localapi-2026-07-02.md

docs: AUDIT — host-root + local-API blast radius (non-Proxmox-token axes)

2026-07-02 10:43:19 +02:00

AUDIT-gate-decoys-2026-09-01.md

the decoy sweep: 29 gates read, 16 fooled, 10 fixed - and a gate that refuses the next one (R-421)

2026-09-01 12:39:45 +02:00

AUDIT-hub-gui-2026-06-30.md

docs(audit): hub GUI vs current architecture findings (2026-06-30)

2026-06-30 20:13:48 +02:00

AUDIT-nas-cwa-rca-2026-07-11.md

docs: Q1c GREEN — reboot survival automatic since agent 0.84.0 (feature doc + audit §7 + CONTEXT + REPORT)

2026-07-11 21:25:14 +02:00

AUDIT-power-outage-recovery-2026-07-22.md

docs: ISO train v1.25.0 — REPORT (belt/apt/R-63/gate/vault live), F9 resolved, R-63 shipped, nodes belt+vault, F8 checklist; critical golden<floor finding

2026-07-23 15:48:01 +02:00

AUDIT-vacation-remote-ops-2026-07-20.md

docs(audits): remote-ops remediation — F1 mitigated, F2 closed, F3 fixed (v0.149.0), Immich resolved; R-50..R-53 minted

2026-07-20 09:09:25 +02:00

B3-storage-lifecycle-2026-06-15.md

docs: B3 live storage-lifecycle exercise + feature sweep (2026-06-15)

2026-06-15 12:39:44 +02:00

BIGNIGHT-household-month-2026-09-14.md

BIGNIGHT teardown complete: VM destroyed, host deleted, ep0 peer gone, customer and its ep0 data kept

2026-09-15 01:05:05 +02:00

bughunt-reconcile-2026-06-13.md

docs(audits): authoritative remediation records (deep-sweep + bughunt-reconcile)

2026-06-13 19:28:25 +02:00

CAMPAIGN-3-2026-07-11.md

CAMPAIGN-3: morning RCA — host loss = F12 CRITICAL automount ordering cycle (hardware exonerated); box recovered to defined state

2026-07-12 06:55:40 +02:00

CAMPAIGN-4-2026-07-13.md

@

2026-07-14 00:45:20 +02:00

CAMPAIGN-5-2026-07-14.md

@

2026-07-14 10:12:21 +02:00

CAMPAIGN-6A-2026-07-14.md

@

2026-07-14 12:17:26 +02:00

CAMPAIGN-6B-2026-07-14-PROMPT.md

@

2026-07-14 12:17:26 +02:00

CAMPAIGN-6B-2026-07-14.md

CAMPAIGN-6B: note credential fully reverted at cleanup

2026-07-14 13:32:14 +02:00

CAMPAIGN-6C-2026-07-14-PROMPT.md

CAMPAIGN-6B: note credential fully reverted at cleanup

2026-07-14 13:32:14 +02:00

CAMPAIGN-6C-2026-07-14.md

CAMPAIGN-6C: v0.131.0 F-S2/F-S3 live acceptance (4P-1..4P-5 all PASS) + F-6C-1

2026-07-14 20:01:13 +02:00

CAMPAIGN-6D-2026-07-15.md

docs: 6D audit — tag campaign6 autofs finding as track-only (operator reboot)

2026-07-15 19:48:43 +02:00

CAMPAIGN-6E-2026-07-15.md

docs(audit): CAMPAIGN-6E — P-TIER2 deep-4 + P4-DEEP timing (all 8 legs PASS)

2026-07-15 21:11:39 +02:00

CAMPAIGN-7-catalog-sweep-2026-07-19.md

CAMPAIGN 7 doc: MAJOR breaking-note table (§6.3)

2026-07-19 03:30:50 +02:00

CAMPAIGN-8-backup-restore-2026-07-27.md

F-LEAK: record all three attempts; the ACL fix is consumed by use, the fenced destroy is the fix

2026-07-28 11:32:45 +02:00

CAMPAIGN-9-restore-proof-2026-07-28.md

C9-F1 (honesty half) + C9-F2 shipped in controller v0.183.0; C9-F1b and C9-F4 filed

2026-07-28 19:08:25 +02:00

CAMPAIGN-10-closeout-2026-08-02.md

Campaign 10 closeout Part 2: teardown complete — five layers, each verified gone

2026-08-02 10:11:21 +02:00

CAMPAIGN-10-two-storage-soak-2026-07-31.md

Campaign 10: M-band RTO measured — RTO ~= 40s + 26.9s/GB, and a capacity ceiling that matters more

2026-08-02 08:31:51 +02:00

CAMPAIGN-11-recovery-journey-2026-08-05.md

R-201 re-walk: the data PASSES again, the journey still FAILS — two dead ends, down from four

2026-08-06 12:18:29 +02:00

CAMPAIGN-12-class-sweep-2026-08-08.md

CAMPAIGN 12 — the class sweep: golden 0.208.0 baked (awaiting vouch), R-256..R-263 filed, gating ranked

2026-08-07 23:07:42 +02:00

CAMPAIGN-nomercy-2026-07-06.md

docs(audit): closure appendix — F2 closed, F4-UX fixed, healthcheck class fixed

2026-07-06 20:43:52 +02:00

CAMPAIGN-offsite-overnight-2026-07-10.md

campaign: offsite overnight soak 2026-07-10 — PASS + 1 HIGH finding (crash-mid-prune stale lock)

2026-07-10 04:32:32 +02:00

CAMPAIGN-pool-effects-2026-07-01.md

docs: F3 provisioning runbook (vmid from full host list) + campaign F1/F2 resolution banner

2026-07-02 10:27:17 +02:00

catalog-currency-2026-09-30.md

More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator)

2026-09-30 20:27:28 +02:00

D5-drive-alone-restore-2026-07-30.md

D5 SHIPPED: Tier-1/2 restore no longer depends on the whole-guest tier

2026-07-30 16:58:06 +02:00

deep-sweep-2026-06-13.md

docs(audits): AGENT-001 -> MERGED + DEPLOYED (agent v0.30.0)

2026-06-13 22:32:23 +02:00

DIAG-agent-channel-2026-07-26.md

DIAG: agent-channel banner is a stale controller.yaml endpoint, not island fallout

2026-07-26 08:51:45 +02:00

DIAG-backup-missed-2026-07-26.md

docs(audits): R-80 DIAG — expected_backup_missed root-caused to in-memory agent backup store

2026-07-26 09:59:35 +02:00

DIAG-bootrecon-drive-absent-2026-08-02.md

docs: R-157 A / R-170 / R-171 closed — boot recovery finished

2026-08-02 20:38:21 +02:00

DIAG-f10-demo-hp-offsite-2026-07-23.md

docs(R-71): SHIPPED (a)+(c) — the apply-bridge settle-gate (controller v0.162.0)

2026-07-24 07:49:11 +02:00

DIAG-immich-restore-2026-07-19.md

docs: DIAG round 2 — H1 confirmed, H4 found; two standing rulings landed

2026-07-19 13:04:58 +02:00

DIAG-immich-restore-round2-2026-07-19.md

docs: DIAG round 2 — H1 confirmed, H4 found; two standing rulings landed

2026-07-19 13:04:58 +02:00

DIAG-r116-disks-payload-2026-07-30.md

docs: write down which boxes are disposable (target selection by blast radius)

2026-07-30 08:13:58 +02:00

DIAG-sharing-2026-07-20.md

docs: DIAG addendum 2 — S-3 fixed (samba 1.1.0 mDNS + v0.152.0 copy); Finder sidebar stays OPEN

2026-07-20 13:40:55 +02:00

DIAG-smart-passed-trap-2026-08-14.md

docs(audits): first genuinely failing disk — the SMART PASSED trap

2026-08-14 07:57:07 +02:00

DIAGNOSE-drive-bind-after-reprovision-2026-06-23.md

docs(audit): DIAGNOSE re-enrolled drives not binding after 9201 re-provision

2026-06-23 17:15:30 +02:00

DIAGNOSE-offbox-repo-orphaned-2026-07-17.md

docs: offsite continuity Part B REPORT/CONTEXT; DIAGNOSE incident→fix pointer; capability map (offsite reinstall-continuity + escrow retention); ROADMAP R-25 (TOCTOU hardening) + R-26 (guided old-history recovery)

2026-07-17 10:55:17 +02:00

DISPOSITION-ia-finding2-systemdisks-2026-07-13.md

audits: disposition — backups-IA finding 2 (legacy-boot SystemDisks dead wizard) RESOLVED by felhom-agent v0.87.0 (slaves-walk, operator ruling 2026-07-13); live evidence drill replay + felhom-pve byte-identical regression; remaining: supervised wizard leg + Day-0 manifest vouch

2026-07-13 13:21:14 +02:00

DOORSTEP-walk-1270-2026-09-14.md

doorstep teardown complete: host tester-1-8603a2 deleted, ep0 peer gone, customer kept; ep0 DR data retained for ruling

2026-09-14 18:52:09 +02:00

DRILL-appdata-restore-2026-07-04.md

docs(audit): app-data restore drill 2026-07-04 (guest 9201)

2026-07-04 22:53:07 +02:00

DRILL-chaos-night-2026-09-17.md

chaos night teardown complete: hub host record deleted, connect mail quoted, ep0 unchanged

2026-09-17 09:27:10 +02:00

DRILL-day0-cleanroom-2026-07-03.md

docs: golden 0.98.3 live — D.1b retired, drill B1/B5 fixed, backlog note resolved + evidence doc

2026-07-03 18:38:28 +02:00

DRILL-day0-take2-2026-07-12.md

docs: hub v0.53.0 closing bundle - CHANGELOG + CONTEXT (both operator rulings verbatim) + take-two F-14 disposition (SHIPPED, gated on escrow-acked deletion provenance)

2026-07-13 15:02:44 +02:00

DRILL-day0-vm-2026-07-12.md

docs: DR-tier-by-default batch — decisions 1-5 in CONTEXT, day0 ACL advice reversed, ceremony decision-4 policy block, WG disclosure (tester agreement + GO-LIVE D3), drill F-disposition table, REPORT

2026-07-12 20:43:25 +02:00

DRILL-first-hour-en-0258-2026-09-20.md

Teardown verified on ep0, and the two periods I got wrong (R-600)

2026-09-20 19:48:20 +02:00

DRILL-fresh-install-0242-2026-09-14.md

drill: a stranger's first hour on 0.242.0 — 1 intervention, not ready for a volunteer

2026-09-14 16:17:47 +02:00

DRILL-golden-098-2026-07-03.md

Backlog triage Part B: 125 finished rows + 20 id-less rows moved to CLOSED-ITEMS (full text at 9e2786c); open rows normalised to one 6-column shape; narratives archived verbatim; closed_register_gate RULE 3 refuses a finished row in OPEN-ITEMS (decoys, seen red); rules rehomed to CONTEXT + 07 §11; loose notes triaged; R-814..R-819 filed; register 444 -> 325

2026-10-03 09:17:22 +02:00

DRILL-new-household-2026-09-30.md

DRILL new household on golden 0.282.0: 0 interventions; ready for a first real tester on a new record

2026-09-30 09:25:17 +02:00

DRILL-night-2026-09-23.md

night shift 2026-09-23: the record, the register, the morning note

2026-09-24 00:24:04 +02:00

DRILL-night-2026-09-24.md

night 2026-09-24: record the test-password slip; runner state out of the evidence tree

2026-09-24 14:55:35 +02:00

DRILL-night-2026-09-25.md

night 2026-09-25: DRILL record, Part D real night, STATUS morning note, register 341 -> 338

2026-09-25 04:54:52 +02:00

DRILL-night-2026-09-26.md

night watch: demo-hp converted docmost by itself; R-696 filed; teardown recorded

2026-09-26 04:42:47 +02:00

DRILL-prove-fixes-0243-2026-09-16.md

drill 0.243.0 complete: 0 interventions, the connect e-mail proven, NOT ready for a volunteer

2026-09-16 14:27:04 +02:00

DRILL-r201-night-run-2026-08-04.md

R-201 PASSED: a customer's file survived a machine rebuild and came back byte-identical

2026-08-04 23:18:47 +02:00

DRILL-r201-offsite-recovery-2026-08-04.md

R-203 shipped: the app and its backup agree, and 'ok' means it — R-201 unblocked

2026-08-04 18:52:14 +02:00

DRILL-retained-key-2026-08-12.md

Correct the drill's wall clock to the measured end time (17:45, not the estimated 17:55)

2026-08-12 17:45:23 +02:00

DRILL-the-28-2026-09-22-HEAD.md

corrections: calibre-web restore was REFUSED, calcom was INCONCLUSIVE

2026-09-22 20:18:37 +02:00

DRILL-the-28-2026-09-22.md

corrections: calibre-web restore was REFUSED, calcom was INCONCLUSIVE

2026-09-22 20:18:37 +02:00

DRILL-update-night-2026-09-21.md

Update night: record the one later catalog commit, and re-prove no image line moved

2026-09-21 23:14:52 +02:00

DRILL-version-travel-2026-09-26.md

version-travel D1: agent 0.136.0 + 0.137.0 found and fixed on the box; records updated

2026-09-27 14:15:01 +02:00

E2D-fresh-vm-2026-07-29.md

Record work, banked first: shrink the E-2d row, create the missing capability-map rows

2026-07-29 23:34:06 +02:00

FINDING-app-email-rollout-2026-06-29.md

docs: FINDING — app-email rollout mechanism gaps (calcom/nextcloud/immich)

2026-06-29 10:32:56 +02:00

host-addresses-visible-2026-07-31.md

docs: host-addresses audit + capability-map row + REPORT (agent 0.119.0 / hub 0.85.0)

2026-07-31 08:55:53 +02:00

I18N-INVENTORY-2026-09-17.md

i18n starter: inventory (script + audit), rows R-553..R-562, language allowlisted in wire-contract gate

2026-09-17 14:50:29 +02:00

INCIDENT-ep0-pbs-fd-exhaustion-2026-08-18.md

RUNBOOK ep0: PBS 4.2.2-1 -> 4.2.5-1, slope unchanged as predicted (R-341)

2026-08-18 12:26:53 +02:00

INCIDENT-guest-dhclient-killed-2026-07-20.md

docs: INCIDENT — guest 9201 dhclient killed as a host orphan; tunnel down ~1h15m

2026-07-20 12:09:01 +02:00

LEDGER-instruction-closeout-2026-08-06.md

docs: close out the instruction arc — t740 corrected on evidence, registers, ledger, S-37

2026-08-06 11:49:22 +02:00

LEDGER-instruction-trim-2026-08-06.md

docs+gate: instruction files cannot silently regrow (R-229)

2026-08-06 09:38:52 +02:00

LEDGER-instruction-trim-part2-2026-08-06.md

docs: backup verified IN the repository — snapshot b587f775, 118/118 + 40/40 (R-229)

2026-08-06 11:22:34 +02:00

live-drive-findings-2026-06-14.md

docs(audits/backlog): preserve live-drive findings+fixspec and M18/M19 fix-plans

2026-06-14 11:00:26 +02:00

live-drive-fixspec-2026-06-14.md

docs: F9/F20-BUG2/F20-BUG3 FIXED (agent v0.31.0, live-validated); queue golden controller-tag follow-up

2026-06-14 15:43:07 +02:00

PROBE-FIX-2026-09-22.md

probe fix, the gate, and the promotion train (R-618 closed, R-630..632 opened)

2026-09-22 11:10:58 +02:00

R106-R109-recipe-completeness-2026-07-30.md

R-106/R-109 audit + registers: shipped at agent 0.118.1, plus R-125

2026-07-30 13:28:10 +02:00

R108-network-app-namespace-2026-07-30.md

R-108 CLOSED — D5's precondition is met (controller v0.187.0)

2026-07-30 14:21:44 +02:00

R116-PART5-2026-07-30.md

R-116 Part 5 FAILED: the fix shipped, C5 still fails, mechanism NOT isolated

2026-07-30 07:15:31 +02:00

R116-v0116-2026-07-30.md

docs(R-116): CLOSED — proven live; capability row F to PROVEN-LIVE; R-120 filed

2026-07-30 09:34:08 +02:00

R117-v0117-2026-07-30.md

docs(R-117): CLOSED — proven live on demo-hp; R-121 filed for agent-on-box drift

2026-07-30 12:42:26 +02:00

R120-golden-rebake-2026-07-30.md

docs(R-120): CLOSED on both halves — golden current, and the class has a gate that refuses

2026-07-30 10:48:16 +02:00

R-63-console-font-drill-2026-07-23.png

drill: R-63 ő/ű captured live on the KVM HP (+ pairing + rootpw); HP SVM-enable fix; evidence PNG

2026-07-23 20:46:27 +02:00

RECON-dooplex-backup-2026-08-06.md

RECON: what DooPlex's own backup actually protects (R-232) — read-only, nothing changed

2026-08-06 12:16:38 +02:00

RECON-offsite-dr-chain-2026-08-04.md

RECON: trace the offsite DR chain link by link — it does not join up (R-198..R-201)

2026-08-04 12:16:04 +02:00

RECON-subdomain-onboarding-2026-07-31.md

the golden gate reads a fact not a name (R-410); R-133's collision resolved (R-406, R-416)

2026-09-01 10:19:55 +02:00

REHEARSAL-byo-reinstall-2026-08-09.md

Rehearsal 2026-08-09 COMPLETE: data BYTE-IDENTICAL, journey needs a shell twice

2026-08-09 12:35:26 +02:00

REPORT-DRILL-backup-truth-2026-08-21.md

R-354 + R-355 CLOSED, proven live; golden 0.218.0 baked; R-367 filed

2026-08-22 10:11:46 +02:00

REPORT-ep0-pbs-upgrade-2026-08-18.md

DRILL 2026-08-21: the off-site restore never replays named volumes (R-354..R-365)

2026-08-21 23:30:27 +02:00

REPORT-mis-called-defect-and-sweep-2026-08-22.md

One register, enforced by a gate; closed work compressed into siblings (R-376..R-378)

2026-08-22 12:13:54 +02:00

REPORT-r316-installer-v1.28.0-2026-08-13.md

hub v0.104.0: the guest network gets a reader (R-319), and the hub half of the naming (R-295)

2026-08-13 10:50:12 +02:00

REPORT-small-debts-and-first-reader-2026-08-13.md

REPORT + CONTEXT: the third name, the second door, and a number that answered a different question

2026-08-13 16:01:45 +02:00

REPORT-v0.218.0-r354-r355-2026-08-22.md

Correct the placement mis-framing, and file what we wrote down and never filed (R-368..R-375)

2026-08-22 11:18:08 +02:00

RERUN-p1p3-2026-07-06.md

docs(audit): closure appendix — F2 closed, F4-UX fixed, healthcheck class fixed

2026-07-06 20:43:52 +02:00

RESEARCH-SYNTHESIS-2026-10-13.md

research doc added

2026-10-13 06:47:09 +02:00

RETIRE-peti-2026-09-25.md

Peti retired (record complete); controller v0.272.0 live proofs + floor 0.272.0; register 339 -> 334; STATUS

2026-09-25 11:33:27 +02:00

RUNBOOK-usb-enrollment-3bfix-2026-07-01.md

docs: RUNBOOK result — USB enrollment on pool-scoped ACL (residual CLOSED)

2026-07-01 13:52:44 +02:00

SESSION-C-2026-07-29.md

Correct the Session C audit: the union row is DEDUPED AWAY, not written false

2026-07-29 23:51:17 +02:00

SPIKE-a1-pool-membership-read-2026-07-03.md

docs: SPIKE — A1 pool-membership read for the stale-lock reaper

2026-07-03 13:00:00 +02:00

SPIKE-agent-pin-mismatch-2026-06-29.md

spike(pin-mismatch): §9 Outcome — R1 executed, controller↔agent service restored

2026-06-29 15:08:58 +02:00

SPIKE-agent-selfupdate-2026-07-05.md

docs(audit): SPIKE — agent self-update rollback mechanics (systemd 257 semantics on felhom-pve)

2026-07-05 14:45:58 +02:00

SPIKE-app-update-2026-09-01.md

SPIKE: what an app update actually does, and which other paths do it too

2026-09-01 21:35:32 +02:00

SPIKE-backup-classification-2026-07-14.md

docs(audit): backup-classification spike — coupling model VALIDATED (Immich DB-only restore broken-not-empty); offsite=unit-only live-proven; NEW F-S1 (tier-2 copies no userdata) + F-S2 (paperless-ngx appdata skipped); round-trip verdict: exclusion scoping

2026-07-14 16:39:55 +02:00

SPIKE-baremetal-iso-2026-07-16.md

docs(spike): bare-metal Felhom ISO — R-21 spiked (all mechanisms GREEN on nested virt)

2026-07-16 11:29:03 +02:00

SPIKE-catalog-data-paths-2026-07-26.md

SPIKE: catalog-derived userdata skeleton + import surfaces (2026-07-26)

2026-07-26 06:59:46 +02:00

SPIKE-ci-runner-2026-08-02.md

docs: R-168 SHIPPED, R-29 CLOSED on the demonstrated alarm, R-169 minted

2026-08-02 16:35:34 +02:00

SPIKE-connectivity-wireguard-2026-07-03.md

docs: R-182 closed, R-90 closed on measurement, R-86 unblocked, ep0 record corrected

2026-08-03 14:00:54 +02:00

SPIKE-controller-agent-channel-health-2026-06-29.md

docs: felhom.eu REPORT (HostLeafChecker) + hub README + self-health arc complete (spike doc)

2026-06-29 23:32:12 +02:00

SPIKE-controller-escrow-2026-07-13.md

audits: SPIKE controller-driven escrow ceremony — daemon-context mechanics ALL GO (drill VM, agent 0.87.0): PTY re-key no-TTY 3/3, sudoers refusal matrix 5/5, R pipe round-trip proven, env_reset clean, --upload hub-verified ~2.4s; premise correction: capability probes are list-mode

2026-07-13 17:15:52 +02:00

SPIKE-controllerswap-narrow-grants-2026-06-29.md

docs: controller-swap narrow-grant Option A IMPLEMENTED (agent v0.45.0) — spike + multidrive pointers resolved

2026-06-29 19:46:17 +02:00

SPIKE-day0-firstboot-handshake-2026-06-26.md

REPORT + Day-0 doc: BUNDLE slice (hub v0.16.0 artifact manifest + host-install v1.1.0 self-install)

2026-06-28 09:03:34 +02:00

SPIKE-decommission-migration-2026-06-14.md

docs(spike): bake in locked fork decisions (B0 gate cleared)

2026-06-14 18:14:08 +02:00

SPIKE-dooplex-buildcache-2026-08-05.md

docs: P6 EXECUTED — containerd store moved to SSD2; reboot deferred (R-209, R-209a)

2026-08-05 10:27:40 +02:00

SPIKE-dr-bindmount-source-2026-07-07.md

docs: campaign-2 R1/R2 root-cause correction + DR bind-mount source spike

2026-07-07 19:08:03 +02:00

SPIKE-dr-recipe-2026-06-16.md

docs(audit): SPIKE — Phase 2 DR recipe + storage diagnosis (report-only)

2026-06-16 14:18:39 +02:00

SPIKE-drive-enrollment-2026-07-01.md

docs: spike status — Impl-2b DONE (raw enrollment live: ctrl v0.95.0 + agent v0.58.0)

2026-07-01 21:27:48 +02:00

SPIKE-ep0-established-connections-2026-08-20.md

agent 0.130.0 published and vouched; R-347 closed, R-349 + R-350 filed

2026-08-20 12:54:54 +02:00

SPIKE-ep0-storagebox-2026-07-09.md

docs(audit): ep0 Hetzner Storage Box SSHFS + PBS-datastore feasibility spike

2026-07-09 09:48:57 +02:00

SPIKE-facebook-page-api-2026-10-08.md

Spike: Facebook Page reached after the operator's Page click; scheduled post + photo created, read back byte-equal, deleted

2026-10-08 18:38:25 +02:00

SPIKE-felhom-sshd-2026-07-05.md

docs(audit): dedicated felhom-sshd instance spike (2026-07-05) — GO

2026-07-05 18:18:37 +02:00

SPIKE-firstboot-nic-sweep-2026-07-22-screen.png

docs(v1.24.0): R-59/R-60/R-61 SHIPPED — CHANGELOG, README, ROADMAP (+R-62), runbook, capability map, drill evidence, REPORT

2026-07-22 11:45:55 +02:00

SPIKE-firstboot-nic-sweep-2026-07-22.md

docs(v1.24.0): R-59/R-60/R-61 SHIPPED — CHANGELOG, README, ROADMAP (+R-62), runbook, capability map, drill evidence, REPORT

2026-07-22 11:45:55 +02:00

SPIKE-hetzner-api-provisioning-2026-07-09.md

docs(audit): Hetzner API provisioning spike — both offsite models FIT

2026-07-09 17:46:43 +02:00

SPIKE-immediate-sync-transport-2026-07-16.md

docs(spike): immediate-sync transport — poke-relay vs long-poll, both GO/complementary

2026-07-16 20:00:01 +02:00

SPIKE-infra-backup-2026-06-15.md

docs(audit): SPIKE — characterize Infra Backup (revive vs retire)

2026-06-16 10:04:55 +02:00

SPIKE-intermediary-mount-2026-06-15.md

docs(spike): stable intermediary mount — swap drive underneath (C1-immune, no-restart)

2026-06-15 15:26:37 +02:00

SPIKE-island-bridge-2026-07-25.md

R-50: A4 fresh-provision validated (agent auto-net1 live); spike caveat closed

2026-07-25 14:36:56 +02:00

SPIKE-lan-discovery-2026-07-18.md

spike(R-6): human Explorer leg PASSED (nmbd) + stack torn down, report-clean

2026-07-18 10:50:14 +02:00

SPIKE-multidrive-mutual-exclusion-2026-06-29.md

docs: controller-swap narrow-grant Option A IMPLEMENTED (agent v0.45.0) — spike + multidrive pointers resolved

2026-06-29 19:46:17 +02:00

SPIKE-nas-dsm-2026-07-11.md

audit(Q1c): NAS automount trigger does NOT survive a guest reboot (empty-dir FAIL) + follow-up

2026-07-11 15:43:26 +02:00

SPIKE-nas-storage-2026-06-29.md

spike: NAS network storage (media automount + restic backup target) — findings

2026-06-29 11:44:40 +02:00

SPIKE-nas-verify-2026-07-11.md

docs(audit): record SPIKE-nas-verify findings-doc commit hash (b57f6c1)

2026-07-11 08:20:22 +02:00

SPIKE-offsite-credential-recovery-2026-08-04.md

RECON: trace the offsite DR chain link by link — it does not join up (R-198..R-201)

2026-08-04 12:16:04 +02:00

SPIKE-oob-wg-operator-peer-2026-07-05.md

docs(audit): OOB-over-WG operator-peer spike (2026-07-05) — GO

2026-07-05 17:01:35 +02:00

SPIKE-pbs-tier-provisioning-2026-07-10.md

spike: PBS DR tier provisioning SLICE 0 — all 3 mechanisms settled (token-create impossible -> pinned sudoers; ep0 tenancy op-set + stdout secret transport proven; encryption-key autogen births K, pvesm remove deletes it)

2026-07-10 20:12:26 +02:00

SPIKE-pbsdr-selfheal-2026-07-15.md

docs: SPIKE PBS-DR self-heal — root cause = consumed secret, not missing descriptor

2026-07-15 17:53:42 +02:00

SPIKE-pool-scoped-acl-2026-07-01.md

docs: REPORT + spike-doc status for host-install v1.6.0 (pool-scoped ACL, live-migrated)

2026-07-01 13:02:16 +02:00

SPIKE-r82-phase0-2026-07-26.md

docs(ep0): relocate the felhom-offsite PBS datastore onto the 100 GB volume

2026-07-27 09:36:11 +02:00

SPIKE-r95-offsite-delete-2026-09-01.md

SPIKE R-95: the safety net cannot be seen from the box - and that RAISES the urgency

2026-09-01 13:55:35 +02:00

SPIKE-r117-bind-liveness-2026-07-30.md

docs(R-117): the hang case measured — an I/O probe turns a wedged drive into an unkillable agent

2026-07-30 11:49:59 +02:00

SPIKE-r165-mp1-merge-2026-08-02.md

docs: R-167 + R-158 CLOSED, R-165 SPIKED, R-174..R-177 filed

2026-08-02 23:56:16 +02:00

SPIKE-r165-phase0-2026-08-03.md

audits: R-165 Phase 0 — P1 and P2 measured, nothing changed

2026-08-03 06:34:26 +02:00

SPIKE-r241-recovery-offer-2026-08-07.md

SPIKE R-241 — ruled: a MINTING defect, not a screen-predicate defect

2026-08-07 08:53:16 +02:00

SPIKE-r459-mariadb-upgrade-2026-09-06.md

SPIKE R-459: the skipped MariaDB conversion is stable, and the trade it implied does not exist

2026-09-06 17:42:19 +02:00

SPIKE-raw-drive-enroll-2026-06-15.md

docs: SPIKE raw-drive plug-and-enroll (GATE, 2026-06-15)

2026-06-15 10:57:33 +02:00

SPIKE-recovery-unit-space-2026-08-02.md

SPIKE: recovery-unit space — the ceiling is real on mp1, overflow is clean, but silent (R-158)

2026-08-02 09:07:09 +02:00

SPIKE-restic-password-custody-2026-07-09.md

docs(audit): fork-4 restic-password custody spike — VALIDATED (escrow-under-R)

2026-07-09 14:15:01 +02:00

SPIKE-restic-restore-test-2026-08-31.md

R-87 SPIKE: measured, do not build it as written (R-407..R-409 filed)

2026-08-31 15:59:09 +02:00

SPIKE-restic-snapshot-shape-2026-07-14.md

SPIKE restic snapshot shape: record findings-doc commit hash 0771d58

2026-07-14 21:18:36 +02:00

SPIKE-smart-coverage-2026-07-25.md

docs: SPIKE — SMART coverage on real hw (why the card shows Nincs adat); findings-only

2026-07-25 07:56:02 +02:00

SPIKE-smtp-app-relay-2026-06-28.md

docs(audit): SPIKE findings — on-box SMTP app-relay (apps → shim → hub → Resend)

2026-06-28 19:27:07 +02:00

SPIKE-storagebox-restic-direct-2026-07-09.md

docs(audit): restic→Storage Box direct-from-residential spike (FIT/IPv4)

2026-07-09 11:05:36 +02:00

SPIKE-universal-iso-2-2026-07-31.md

SPIKE 2 complete: locked root closes the PVE web UI; before-network gives a measured zero window

2026-07-31 13:57:21 +02:00

SPIKE-universal-iso-3-2026-07-31.md

hub v0.104.0: the guest network gets a reader (R-319), and the hub half of the naming (R-295)

2026-08-13 10:50:12 +02:00

SPIKE-universal-iso-4-2026-07-31.md

SPIKE 4: a .deb in the ISO DOES deliver on an interactive install

2026-07-31 15:35:07 +02:00

SPIKE-universal-iso-2026-07-31.md

SPIKE: a universal ISO needs a different disk strategy and a locked root

2026-07-31 12:12:35 +02:00

SPIKE-upgrade-test-2026-09-06.md

SPIKE: an upgrade test that runs again — and a real defect in our own bookstack template

2026-09-06 11:48:57 +02:00

SPIKE-userdata-layout-2026-06-14.md

docs(spike): userdata/ layout + shared-storage ownership mapping (report-only gate)

2026-06-14 21:15:24 +02:00

storage-lifecycle-acceptance-2026-06-15.md

docs: M3 live re-verification addendum (closes E14/E15 residual) + two controller UI fixes

2026-06-15 21:53:10 +02:00

tester-gate-golden-0.188.0-2026-07-31.md

Tester gate: golden re-baked to 0.188.0, fresh-install proof PASSED — a fresh box is safe to hand to a tester

2026-07-31 08:27:36 +02:00

TESTRUN-fullstack-2026-06-29.md

audit: §D supervised reboot done — F2-a + F2-b red-proofs PASS (findings closed)

2026-06-30 10:04:59 +02:00

UPDATE-ARC-STATE-2026-09-21.md

File R-607 (a sync that says 'no change' while the cache moves) and sharpen the audit

2026-09-21 13:14:10 +02:00

VALIDATION-fork4-custody-2026-07-09.md

docs(audit): fork-4 custody VALIDATED end-to-end live (supervised)

2026-07-09 16:31:58 +02:00

VALIDATION-newbox-restore-2026-07-10.md

validation: new-box restore round-trip PASS (9/9 sha-identical) + old-archive retirement decision

2026-07-10 09:29:22 +02:00

VALIDATION-offbox-storagebox-2026-07-09.md

docs(audit): offbox v0.104.0 VALIDATED live against the Storage Box (supervised)

2026-07-09 13:17:52 +02:00

VALIDATION-offsite-provisioning-e2e-2026-07-09.md

validation record: offsite provisioning live e2e PASS (2026-07-09) + CONTEXT/REPORT

2026-07-09 22:04:44 +02:00