admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
3eca98f1353f0fab2dcc556e5a49d4ca44bce225
felhom.eu/documentation/audits
T
History
admin 3eca98f135
gates / gates (push) Successful in 6m41s
Details
storage identity build B, Part 1: the D3 space check (proposal, waits for the operator); R-1087, R-1088 
Measured four boxes, the hub's five host reports, every catalog image's registry size and one whole-box copy's
thin-pool use. Proposal: mp0 50/100/130 GiB, reserve max(16 GiB, 10 %) capped at 48 GiB -> the internal place
about 42/182/590/1,510 GB for 256 GB/512 GB/1 TB/2 TB. STATUS D10 asks for the operator's ok.

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb
2026-10-15 22:51:03 +02:00
..
answers-2026-10-12
R-917: the first Facebook post is published (19:00:07, permalink 200); only the operator's pin left
2026-10-12 19:04:48 +02:00
app-guides-2026-10-15
app guides night: R-1085 (the floor can still offer spoiled tag 0.316.3), R-1086 (qBittorrent password advice breaks the media wiring); pilot evidence and tools
2026-10-15 22:37:08 +02:00
app-page-2026-10-15b/P0
docs: the app page's layout, the asset tag, and a version number pushed once (controller v0.316.0)
2026-10-15 20:33:10 +02:00
backlog-triage-2026-10-03
Backlog triage Part E: RECOMMENDATION (top 29 = every P2, five themes, pick A off-site backup safety vs B box OS updates), STATUS decision, REPORT-backlog-triage-2026-10-03
2026-10-03 09:24:43 +02:00
backup-close-2026-10-04
off-site closed (R-833, R-834 closed; R-95 dated check; R-726 options) + OS-update spike: 11 corrected C1-C12, wrapper draft, answers; R-835..R-839
2026-10-04 09:54:31 +02:00
burndown2-2026-10-05
burn-down round 2: controller v0.297.0 rows closed (23), golden 0.297.0 evidence, delivery evidence, 23-row unchecked table, STATUS/CONTEXT/REPORT (292 -> 199; 1 opened, 94 closed)
2026-10-05 20:41:50 +02:00
burndown-2026-10-05
hub-db-backup: parse the snapshot time in a form BusyBox date reads (CI red since ab2b304: 9/15 on the Alpine runner)
2026-10-05 17:29:05 +02:00
calibre-name-and-prune-2026-10-01
Rulings 61-62 built: calibre-web generated login name, the registry prune rule; R-750/R-752 closed, R-756/R-757 opened; runbook 4.1a; STATUS, report, evidence
2026-10-01 13:29:46 +02:00
catalog-currency-2026-09-30
The last six PostgreSQL apps decided; the gate's wait seen live by day; catalog currency; stale rows
2026-09-30 14:47:12 +02:00
catchup-2026-10-05
catch-up session 2026-10-05: design 07 §6.1.1 (a box that is not always on), 08 §6.4; rulings 109-111, CC decisions 112-118; R-871/R-873..R-877 closed, R-872 narrowed (dated check), R-878 opened; live evidence; STATUS
2026-10-05 10:29:22 +02:00
cleanup-2026-09-23
Clean-up evening: R-634 cause fixed, held badge, OOM storm; floor 0.265.0
2026-09-23 17:40:01 +02:00
dashboard-layout-2026-10-08
Dashboard layout: R-906/R-907 fixed on main (controller d5f2e47, 423b6d3), R-909..R-911 filed, evidence from 9202, report
2026-10-08 14:47:14 +02:00
day-2026-10-07
09 §3 decisions 172-173 (kernel lane yes, option A + C; R-32 leftovers left, P4) recorded before the work
2026-10-07 14:59:19 +02:00
day-2026-10-08
R-415 fixed on hub main (no duplicate/nested/felhom.eu customer domain; R-138 option B); R-762 closed (9202 proven, catalog eec9a0d); R-905 opened (wger static in backups); decision sheet D10; 130 -> 129
2026-10-08 10:19:39 +02:00
design-build-2026-10-06
Design build done: R-469, R-638 closed; R-518/R-717/R-762 narrowed, R-528 stopped by its measurement; delivery + teardown evidence; STATUS, CONTEXT, REPORT (137 -> 137; 2 opened, 2 closed); section counts recomputed
2026-10-06 16:11:28 +02:00
dooplex-survival-2026-10-09
R-924: live run + restore test evidence; STATUS and report
2026-10-09 15:02:37 +02:00
DRILL-backup-truth-2026-08-21/evidence
DRILL closeout: the scheduled cycle agrees, the abandonment sweep watched firing, R-366
2026-08-22 05:25:30 +02:00
DRILL-cooldown-grain-2026-08-23
docs(hub v0.108.0): the delivery grain, the cooldown ruling, and gate 11's first subject
2026-08-23 14:12:23 +02:00
DRILL-r102-tier2-unit-2026-08-31
R-102 + R-103 CLOSED (controller v0.229.0) — architecture, register, STATUS, drill evidence
2026-08-31 12:21:52 +02:00
DRILL-r329-r386-2026-08-23
docs(R-329/R-386/R-387): the severity contract, the intent ruling, and Part 5 recorded
2026-08-23 12:03:49 +02:00
DRILL-r356-hot-only-restore-2026-08-22
R-356 docs: correct R-107 in the architecture, record the design, refresh STATUS, compress the register
2026-08-22 13:26:10 +02:00
DRILL-r356b-driveless-db-restore-2026-08-22
DRILL R-356b: the off-site restore for a driveless app that HAS a database
2026-08-22 16:33:45 +02:00
DRILL-r361-2026-08-22
R-361 docs: the [FACT], the negative that cancelled Part 2, R-383/R-384, golden 0.221.1
2026-08-23 00:33:12 +02:00
DRILL-r379-rollback-2026-08-22
R-379/R-380 docs: the failure ladder, the drill record, register housekeeping
2026-08-22 18:40:22 +02:00
DRILL-r384-dead-db-alarm-2026-08-23
R-385: make an UNRECORDED golden fail the currency gate; file R-386; own the alarm ladder
2026-08-23 07:59:52 +02:00
DRILL-r403-tier2-delete-2026-08-31
R-403 CLOSED (controller v0.230.0), R-404 filed as a decision for Viktor
2026-08-31 14:39:29 +02:00
DRILL-soak-2026-08-31
soak drill COMPLETE: 7 phases, 4 findings, the observer found the worst one (R-414)
2026-09-01 06:07:13 +02:00
evidence-agent-transport-leak-2026-08-20
agent 0.130.0 published and vouched; R-347 closed, R-349 + R-350 filed
2026-08-20 12:54:54 +02:00
evidence-backup-promise-2026-09-16
the volunteer's own path verified: felhom.eu/letoltes serves 1.28.0
2026-09-16 20:27:25 +02:00
evidence-bignight-2026-09-14
BIGNIGHT teardown complete: VM destroyed, host deleted, ep0 peer gone, customer and its ep0 data kept
2026-09-15 01:05:05 +02:00
evidence-chaos-fixes-2026-09-17
golden 0.246.0 baked and vouched with agent 0.132.0; controller floor 0.246.0 (operator decisions)
2026-09-17 12:25:52 +02:00
evidence-chaos-night-2026-09-17
chaos night: the accident logs that were never committed
2026-09-17 10:13:23 +02:00
evidence-doorstep-walk-1270-2026-09-14
doorstep teardown complete: host tester-1-8603a2 deleted, ep0 peer gone, customer kept; ep0 DR data retained for ruling
2026-09-14 18:52:09 +02:00
evidence-drill-0243-2026-09-16
drill 0.243.0 complete: 0 interventions, the connect e-mail proven, NOT ready for a volunteer
2026-09-16 14:27:04 +02:00
evidence-drill-fresh-install-0242-2026-09-14
drill 0242: teardown complete in three layers; R-501 filed
2026-09-14 16:40:59 +02:00
evidence-drill-new-household-2026-09-30
DRILL new household on golden 0.282.0: 0 interventions; ready for a first real tester on a new record
2026-09-30 09:25:17 +02:00
evidence-drill-r95-recovery-2026-09-01
DRILL R-95: the recovery route does not exist — stopped before the destructive phase
2026-09-01 16:55:50 +02:00
evidence-drill-retained-key-2026-08-12
DRILL: the retained key works, and the customer cannot reach it
2026-08-12 17:41:56 +02:00
evidence-ep0-established-connections-2026-08-20
SPIKE ep0 connections: CI green by run id (360/237, 19672e685)
2026-08-20 10:42:50 +02:00
evidence-ep0-fd-2026-08-18
INCIDENT + registers: ep0's PBS proxy served nobody for 9.5h (R-336..R-338)
2026-08-18 06:09:38 +02:00
evidence-ep0-pbs-upgrade-2026-08-18
RUNBOOK ep0: PBS 4.2.2-1 -> 4.2.5-1, slope unchanged as predicted (R-341)
2026-08-18 12:26:53 +02:00
evidence-fixes-first-tester-2026-09-30
Fixes before the first tester: decisions 50/51 outcomes, register 359->361 (R-719/720/721/722/727 closed, R-723 fixed, R-724/725 narrowed, R-728/729 opened), STATUS with the Tester-2 checklist, report
2026-09-30 11:01:08 +02:00
evidence-golden-0276-2026-09-28
STATUS, report, register (R-691 closed live, R-704..R-706), Part E + D2 evidence
2026-09-28 15:56:50 +02:00
evidence-golden-0283-2026-09-30
Golden 0.283.1 baked, round-trip verified, vouched with agent 0.138.0 (min_agent 0.131.0)
2026-09-30 11:40:17 +02:00
evidence-p1fixes-2026-09-15
REPORT + STATUS: P1 fixes — supervisor proven incl. crash-loop resume and hub events; publish; rows
2026-09-15 11:45:21 +02:00
evidence-r316-2026-08-13
REPORT: installer v1.28.0 published and verified live; evidence, and the Part 1 logs I lost again
2026-08-13 08:19:41 +02:00
evidence-r341-plus7d-2026-08-30
R-341 check taken, and the golden-currency bypass declared
2026-08-30 18:49:53 +02:00
evidence-r353-r360-live-2026-08-30
Register + architecture for controller v0.226.0 (R-353/357/358/360/396), and R-395 fixed
2026-08-30 19:39:41 +02:00
evidence-recovery-code-2026-09-16
R-543 closed: the household is asked for the recovery code (controller v0.245.0)
2026-09-16 21:20:51 +02:00
evidence-rehearsal-2026-08-09
Rehearsal 2026-08-09 COMPLETE: data BYTE-IDENTICAL, journey needs a shell twice
2026-08-09 12:35:26 +02:00
evidence-spike-app-update-2026-09-01
SPIKE: what an app update actually does, and which other paths do it too
2026-09-01 21:35:32 +02:00
evidence-spike-restic-restore-2026-08-31
R-87 SPIKE: measured, do not build it as written (R-407..R-409 filed)
2026-08-31 15:59:09 +02:00
facebook-first-post-2026-10-09
facebook: the first post SCHEDULED for 2026-10-12 19:00 (R-917 -> VERIFY)
2026-10-09 15:14:55 +02:00
facebook-page-api-2026-10-08
Spike: Facebook Page reached after the operator's Page click; scheduled post + photo created, read back byte-equal, deleted
2026-10-08 18:38:25 +02:00
facebook-page-details-2026-10-09
facebook: the Meta app is LIVE (R-915 closed); website lockup entry
2026-10-09 14:06:35 +02:00
facebook-page-setup-2026-10-08
marketing/facebook: the phone check ran after all — the cover IS cut on phones (R-919)
2026-10-08 21:50:57 +02:00
family-gate-2026-10-02
Family gate session close: B4 on demo-hp (real internet: member in, stranger 401; remove with data), REPORT-family-gate-2026-10-02, STATUS, R-800 (remove-with-data keeps userdata, operator), CONTEXT; register 436
2026-10-02 10:43:10 +02:00
fixtures
docs(audits): first genuinely failing disk — the SMART PASSED trap
2026-08-14 07:57:07 +02:00
forum-research-2026-10-12
Audit: three years of the PROHARDVER! home-server forum read against Felhom; R-990, R-991 filed
2026-10-12 22:20:52 +02:00
gate-restore-2026-10-15
R-1052 closed: a new box from the public ISO (golden 0.313.0) reached the floor 0.314.0 by itself, 2 min 52 s after the bind (throwaway customer Tester3, VM removed)
2026-10-15 16:07:08 +02:00
gate-rollout-2026-09-29
Gate rollout 2026-09-29 afternoon: 32/34 gated, sign-up blocks (decision 47 + CC mechanism), R-713; R-707/R-711/R-713 closed, R-714..R-716 opened; STATUS, CONTEXT, report
2026-09-29 11:25:14 +02:00
https-only-2026-10-14
https only (R-1033, P1): controller v0.312.0 proven on Tester 1, demo-hp, demo-felhom (29 names); scripts/https_only_check.py; 01/13/poster facts; decision 246 (decided by CC unattended); R-1033 P1 narrowed; R-1041..R-1043
2026-10-14 22:49:54 +02:00
hub-db-offsite-2026-10-05
the size rule: a small finding is fixed in the session, not filed; reports state four register numbers (burn-down Part D)
2026-10-05 16:43:19 +02:00
hub-safety-2026-10-05
hub-safety session: R-135/R-133/R-604/R-530/R-508/R-509/R-880 closed, R-861/R-173/R-518/R-519 narrowed, R-879/R-881 opened (336 → 332); 03 §3.1, 05 §16, golden 0.296.0, the hub-DB off-site plan, STATUS
2026-10-05 13:47:57 +02:00
hub-system-page-2026-10-10
hub (unreleased): the System page answers 'is anything wrong?' and 'is anything waiting for me?' first
2026-10-10 15:38:25 +02:00
hub-tokens-2026-10-15
Operator's three steps verified: hub password changed (DB vs 02:00 snapshot), HUB_PW gone from CC's credentials, demo-hp floor cleared; STATUS + total-loss runbook S16
2026-10-15 14:05:58 +02:00
i18n-2026-09-17
i18n starter: 10-localisation.md, live evidence, capability row, STATUS + CONTEXT
2026-09-17 14:58:35 +02:00
i18n-closing-2026-09-21
floor 0.259.0 raised; R-601 withdrawn as FALSE; R-604 filed
2026-09-21 09:13:57 +02:00
i18n-slice1-2026-09-17
i18n slice 1 release C (controller v0.250.0): R-556 CLOSED, live evidence, R-565..R-568, decision 6 superseded
2026-09-17 18:50:16 +02:00
i18n-slice2-2026-09-18
ops: fleet floor raised to 0.255.0 — and it delivered on its own
2026-09-18 15:37:15 +02:00
i18n-slice3-2026-09-18
docs: localisation slice 3 CLOSED — evidence, R-558/R-555 closed, R-585 filed
2026-09-18 17:11:15 +02:00
i18n-slice4-2026-09-18
slice 4: bilingual console + the English download page is live (R-559)
2026-09-18 17:47:58 +02:00
i18n-slice5-2026-09-20
Localisation slice 5 CLOSED: the catalog speaks English and the floor is at 0.257.0
2026-09-20 16:40:59 +02:00
i18n-slice6-2026-09-20
drill evidence: drop the raw PPM screendumps, keep the PNGs
2026-09-20 19:26:33 +02:00
immich-first-start-2026-09-30
immich's first start: cause measured, fixed in the catalog (R-732 closed); ISO clean-tree gate (R-730 closed)
2026-09-30 16:18:17 +02:00
immich-repair-2026-10-14
Immich repair on every box: rollout read-back, R-1021 closed, R-1007 dated line, F12 fleet delivery, STATUS, report
2026-10-14 19:28:13 +02:00
kept-offsite-2026-09-28
STATUS, report, register (R-691 closed live, R-704..R-706), Part E + D2 evidence
2026-09-28 15:56:50 +02:00
kernel-lane-2026-10-07
kernel lane: report, STATUS, CONTEXT, R-836 where-it-stopped, R-898 filed; 126 -> 128
2026-10-07 18:19:03 +02:00
kernel-night-2026-10-07
kernel night 7->8 read back: demo-felhom passed (7.0.14-20 default, ~1.5 min), demo-hp no step (R-899 filed); 126 -> 127
2026-10-08 06:41:20 +02:00
kernel-night-2026-10-08/readback
audits: kernel night 8->9 read-back; release 2026-10-09 delivery evidence (agent update signed, floors 0.304.0)
2026-10-09 07:14:20 +02:00
kernel-night-2026-10-09/readback
kernel night 9→10 read back: demo-hp 7.0.14-22 (~3.5 min down), demo-felhom 7.0.14-23 (~65 s), no false alarm, Approve kernel set not shown (boxes on different kernels)
2026-10-10 07:36:10 +02:00
kernel-spike-2026-10-07
kernel lane: report, STATUS, CONTEXT, R-836 where-it-stopped, R-898 filed; 126 -> 128
2026-10-07 18:19:03 +02:00
ladder-2026-09-24
2026-09-24: 09 decisions 24-25, part 5 shipped; the whole-copy truth table; fourth suppression; rows; STATUS; evidence
2026-09-24 08:52:42 +02:00
licences-2026-10-02
Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT
2026-10-02 09:35:42 +02:00
lockouts-2026-10-01
Rulings 61-62 built: calibre-web generated login name, the registry prune rule; R-750/R-752 closed, R-756/R-757 opened; runbook 4.1a; STATUS, report, evidence
2026-10-01 13:29:46 +02:00
login-gate-2026-09-29
Session close 2026-09-29: R-710 closed live on demo-hp; STATUS, CONTEXT, REPORT-login-gate-2026-09-29
2026-09-29 09:22:56 +02:00
logins-nvme-2026-09-28
audits: Part G night read 2026-09-28/29 — legs normal, Part D no false alarm
2026-09-29 04:52:12 +02:00
m3-2026-10-11
report: M3 live - the changelog, the session report and the operator's screen
2026-10-11 16:00:57 +02:00
mailer-source-2026-10-08
R-902 search: contact-mailer source NOT FOUND (DooPlex disks, web editor + history, 10 Gitea repos, build cache); binary kept in git; replacement plan; decoy suite takes a lock (two sessions' runs left a decoy planted)
2026-10-08 10:35:27 +02:00
media-all-drives-2026-10-14
Media folder fix: live read-back on demo-hp 9201 (hardlink, live catalog bc54c01); R-1014/1015/1016/1030 closed, R-1019 narrowed, R-1039/1040 filed; report
2026-10-14 22:01:09 +02:00
media-build-2026-10-15
Controller v0.314.0 released under decision 250: floor 0.314.0 raised by CC's token at 13:11 UTC after the three test boxes
2026-10-15 15:21:28 +02:00
media-drive-events-2026-10-14
K6-2: Plex claimed AFTER start with the household's code — 200, claimed 0->1, open door closed (401); plex-k6 removed; R-1028 proven path, R-1022 step 7 done
2026-10-15 08:01:50 +02:00
media-folder-fix-2026-10-14
Media folder fix: live read-back on demo-hp 9201 (hardlink, live catalog bc54c01); R-1014/1015/1016/1030 closed, R-1019 narrowed, R-1039/1040 filed; report
2026-10-14 22:01:09 +02:00
mockups-2026-10-11
context: operator ruling 2026-10-11 - none of the three directions; M3 follows
2026-10-11 13:38:08 +02:00
more-night-apps-2026-09-30
More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator)
2026-09-30 20:27:28 +02:00
morning-after-2026-10-06
morning after: R-889 delivered (controller v0.299.0, df's percent read back), R-776/R-613 proven on 9202 and live, R-585/R-621 delivered; ten operator questions on one page in STATUS; report (164 -> 150; 0 opened, 14 closed)
2026-10-06 08:50:08 +02:00
n100-lived-in-2026-10-15
The N100 becomes the lived-in box (09 §3 decision 254): media apps installed and wired through the dashboard; films proven never off-site; the USB split NOT done (it is the whole-guest backup target)
2026-10-15 16:59:15 +02:00
new-app-checklist-2026-10-01
New-app checklist: the pilot audit (wger as of 2026-09-29 and now, two 9202 walks), R-758..R-764 opened; STATUS, CONTEXT, report
2026-10-01 15:22:05 +02:00
new-apps-2026-10-01
Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT
2026-10-02 09:35:42 +02:00
new-apps-2026-10-10
New apps 2026-10-10: Grocy and LubeLogger on the website; Monica stopped
2026-10-10 12:34:05 +02:00
night-2026-09-23
night shift 2026-09-23: the record, the register, the morning note
2026-09-24 00:24:04 +02:00
night-2026-09-24
tools: liveR669.py (the R-669 live proof)
2026-09-24 17:06:23 +02:00
night-2026-09-25
tools: live272.py (the v0.272.0 live proofs)
2026-09-25 11:34:04 +02:00
night-2026-09-26
night watch: demo-hp converted docmost by itself; R-696 filed; teardown recorded
2026-09-26 04:42:47 +02:00
night-2026-10-04
night 2026-10-04: Tester 2 read 06:20 local
2026-10-05 06:20:28 +02:00
night-burndown-2026-10-05
burn-down night: morning note, STATUS top (164), CONTEXT, report (199 -> 164; 1 opened, 36 closed)
2026-10-06 05:08:10 +02:00
night-burndown-2026-10-06
Read-back done, releases delivered (hub 0.141.0, agent 0.150.0, controller 0.302.0, catalog 872039d), R-892 proven on the Tester 1 box; 7 rows closed (137 -> 130)
2026-10-07 09:30:55 +02:00
night-fixes-2026-10-05
night fixes 2026-10-05: System page read after demo-hp's facts caught up (R-853 delay, ~17 min)
2026-10-05 08:31:49 +02:00
night-power-2026-10-13
Night power drill complete: 8 real cuts on demo-hp (all came back), the estimator checked on a second machine and on 8 GB; R-1003..R-1009 filed; STATUS to one screen (history moved byte for byte); G18 and F5 corrected
2026-10-14 09:40:16 +02:00
night-rulings-2026-09-30
Both rulings built: same-tag re-tests (decision 52), image retention + the install hold (controller 0.284.2); golden 0.284.2
2026-09-30 23:26:21 +02:00
nightly-2026-09-13-adventurelog
evening: rules file in place; R-483 CLOSED (catalog, operator-confirmed); R-479 CLOSED (controller v0.241.0, proven live); R-481 blocked on the one-host-one-customer model; R-491 filed
2026-09-13 21:57:47 +02:00
nightly-2026-09-13b-bentopdf
second night: scratch guest 9202 built (R-481 CLOSED, persists); controller v0.242.0 delivered (R-487 R-491 R-490 R-476 R-456 CLOSED, R-489 re-scoped); R-492 filed; rotation restarted from bentopdf; morning note
2026-09-13 23:06:21 +02:00
offsite-append-only-2026-10-03
R-436 measured on the provider: append-only forced key HOLDS (403 on every delete), but the sub-account password defeats it (R-820); design proposal + ep0 options
2026-10-03 13:40:35 +02:00
offsite-finish-2026-10-04
Off-site safety finished: Parts A-F evidence, decision 74, golden 0.290.0 recorded (vouched, floor 0.290.0), restore walked from the DooPlex copy, register 330 -> 328 (R-823/824/826/827/828/830 closed; R-833, R-834 opened)
2026-10-04 07:39:59 +02:00
offsite-lock-build-2026-10-03
Part A/E scratch teardown on u629488-sub4 (authorized_keys byte-identical)
2026-10-03 21:30:11 +02:00
omv-vm-2026-10-15
Felhom in a VM on OpenMediaVault 8 (KVM plugin): tried on an exact copy of the pilot's box; Hungarian guide; R-1068..R-1073; capability A23
2026-10-15 19:24:59 +02:00
os-docker-crash-2026-10-04
R-858 closed (agent v0.142.1, ruling 95): the Docker step restarts the socket users; incident evidence; STATUS; report addendum
2026-10-04 18:35:40 +02:00
os-guest-lane-2026-10-04
OS updates guest fast lane: records — 11 §8.1 BUILT, 03 cloudflared corrected, 07 §6.1 OS leg, 00 PARTIAL, monthly runbook infra pins, golden 0.291.0 record + vouch, register 331 -> 333 (R-837/838/726/843 closed; R-840/841/842/844/845 opened), STATUS, report
2026-10-04 11:41:50 +02:00
os-host-lane-2026-10-04
docs: OS updates steps 3+4 BUILT (11 §8.2/§8.3, §5.6 kernel facts, §5.8 Docker slow lane design), 00/03/07/08 updated, decisions 84-86 (CC unattended), host undo runbook (proved), register: R-841 R-845 R-846 R-850 closed, R-848 R-849 R-851 opened, R-836 R-812 narrowed (332 -> 333); STATUS; live evidence
2026-10-04 14:47:21 +02:00
os-updates-spike-2026-10-04
off-site closed (R-833, R-834 closed; R-95 dated check; R-726 options) + OS-update spike: 11 corrected C1-C12, wrapper draft, answers; R-835..R-839
2026-10-04 09:54:31 +02:00
permanent-gate-2026-10-01
Evidence: Part A (visitors apart — measurements, design, sweep, 9202 live) and the permanent-gate spike (items 1–6, VERDICT: PASS, build plan)
2026-10-01 21:26:23 +02:00
persistence-sweep-2026-10-02
Persistence re-sweep of all 58 (R-801 closed: CLEAN 40 / UNDETERMINED 18 / BROKEN 0), R-788 + R-803 (papra) closed, R-804..R-807 opened; STATUS "Before the first paying customer"; REPORT-persistence-sweep-2026-10-02; register 442
2026-10-02 16:54:26 +02:00
pg-calcom-claper-2026-09-28
decisions 44-45, FIRST-ADMIN link, register (R-701/R-702 closed, R-707..R-709), STATUS, report, evidence
2026-09-28 19:02:06 +02:00
pg-last-six-2026-09-30
Website + evidence: the Usenet pair (R-988 closed), and the drill route filed as R-989
2026-10-12 22:58:59 +02:00
plugmeter-2026-10-13
Bench: plugmeter reads the N100's metered plug (tinytuya + Home Assistant from the catalog)
2026-10-13 17:07:26 +02:00
power-cut-fixes-2026-10-14
R-1009 closed (estimator live, read back); R-1007: the operator's ruling recorded, and Immich v3.2.4 rebuilds single photos
2026-10-14 15:40:23 +02:00
poweroff-2026-10-13
Power-off live proof complete (R-998, R-999 closed): the hub held 2 h 56 min, the power button brought the N100 back, the hold ended; HP plug + BIOS; R-1002 filed; F11 PROVEN-LIVE
2026-10-14 00:08:56 +02:00
probe-fix-2026-09-22
romm OOM storm on demo-hp: fixed, measured, closed (R-635)
2026-09-22 18:04:49 +02:00
prowlarr-2026-10-15
Prowlarr linked on 9201 (live catalog): R-1048 closed, R-1058 filed; the session report
2026-10-15 13:14:32 +02:00
qbittorrent-2026-10-12
Website: the two download clients on the app page; the campaign's evidence; R-988 filed
2026-10-12 21:03:11 +02:00
r459-close-2026-09-13
R-459 CLOSED (MariaDB converts itself, proven by harness + live), golden 0.236.0 (R-467), the golden waiver (R-468)
2026-09-13 10:14:37 +02:00
r459-spike-2026-09-06
SPIKE R-459: the skipped MariaDB conversion is stable, and the trade it implied does not exist
2026-09-06 17:42:19 +02:00
r553-2026-09-17
R-553 + R-563 CLOSED (controller v0.251.0): evidence, 10 §9 rewritten, R-569..R-571, slice-2 dependency
2026-09-17 21:11:31 +02:00
r649-2026-09-23
R-649 closed: a failed install removes what it started (operator ruling); floor 0.266.0
2026-09-23 18:14:38 +02:00
r672-2026-09-24
R-672 session: audit README (not done first, wrong claims), STATUS, capability map, register 344->341, topic REPORT
2026-09-24 17:06:09 +02:00
r840-config-bundle-2026-10-04
R-840/R-859/R-860 records: 11 §5.3.1 + §5.4.2, 03, 04, 00; runbooks config-bundle + os-updates-test-waits; register 333→334 (R-840/859/860 closed, R-861/862 opened); STATUS; report; evidence
2026-10-04 20:40:08 +02:00
r890-instructions-2026-10-06
Part C: R-644, R-763, R-764 closed (wger's fixes proven on 9202), R-762/R-717 stopped with reasons; STATUS, CONTEXT, REPORT (142 -> 137; 0 opened, 5 closed)
2026-10-06 14:03:28 +02:00
R411-R414-2026-09-01
R-411/408/407, R-414, R-412a leg 1, R-410, R-406 CLOSED; determination + live evidence
2026-09-01 10:36:54 +02:00
R442-2026-09-13
R-442 CLOSED (controller v0.236.0): "delete my data too" deletes it or refuses; R-465..467 opened
2026-09-13 09:07:08 +02:00
readback-2026-10-07
Read-back done, releases delivered (hub 0.141.0, agent 0.150.0, controller 0.302.0, catalog 872039d), R-892 proven on the Tester 1 box; 7 rows closed (137 -> 130)
2026-10-07 09:30:55 +02:00
records-carried-2026-09-27
night 09-27/28: paperless 16 copy released on a real 18 dump (v0.276.0); demo-hp restore test refused for space -> R-701
2026-09-28 03:46:43 +02:00
redesign-2026-10-10
docs: record the placement change and re-measure after it
2026-10-11 09:29:47 +02:00
register-shrink-2026-10-10
STATUS: the 2026-10-10 decision sheet (S1-S38, T1-T19) and the register-shrink report; R-903 live read-back
2026-10-10 15:57:06 +02:00
release-2026-10-09
D6 / R-138: every stored Cloudflare token checked once (operator present), all 4 PASS; R-138 closed
2026-10-09 09:00:05 +02:00
release-2026-10-10
release 2026-10-10: CI runner restart (operator yes) evidence; report
2026-10-10 11:11:31 +02:00
retest-2026-10
Evidence: the first full monthly re-test (decision 55) — nextcloud and sonarr re-tested and written; runbook: every app by default, the standing brief
2026-10-01 07:54:22 +02:00
retire-peti-2026-09-25
Peti retired (record complete); controller v0.272.0 live proofs + floor 0.272.0; register 339 -> 334; STATUS
2026-09-25 11:33:27 +02:00
rulings-2026-10-01
Rulings 2026-10-01 built: report, STATUS (standing monthly line), decision 57 (mealie lockout, decided by CC unattended), R-747 narrowed, evidence
2026-10-01 10:20:44 +02:00
rulings-r472-r475-2026-09-13
docs: rulings 7 and 8 shipped and proven live (R-470/R-472/R-475 CLOSED); R-477..R-480 opened
2026-09-13 17:54:23 +02:00
security-review-2026-10-12
security review: FINDINGS.md (short form) and COVERAGE.md
2026-10-12 17:15:40 +02:00
selfhst-survey-2026-10-12
Audit: selfh.st survey 2023-2025 read against Felhom; R-989 filed
2026-10-12 22:09:10 +02:00
seo-2026-10-10
marketing + seo: the three-week tester campaign, schedule-post --link, the not-indexed audit
2026-10-10 16:13:23 +02:00
seo-2026-10-14
SEO audit: live read-back and the price evidence (the Google yearly price is not in the page HTML)
2026-10-14 18:55:13 +02:00
signup-lock-2026-09-29
Sign-up lock 2026-09-29 evening: decisions 48/49 outcomes, two locks, wanderer closable, R-714/715/716 closed, R-717/718 opened; STATUS, CONTEXT, report
2026-09-29 17:19:43 +02:00
sizing-2026-10-13
Prowlarr evidence (R-1048) + its apps-page card; the stated app count 62 -> 63; R-1057 filed
2026-10-15 12:58:18 +02:00
sizing-check-2026-10-14
R-1009 closed (estimator live, read back); R-1007: the operator's ruling recorded, and Immich v3.2.4 rebuilds single photos
2026-10-14 15:40:23 +02:00
slice4-2026-09-13
Slice 4 shipped (R-448/R-443/R-439 CLOSED, proven live); R-472..R-476; the floor-between-bakes claim corrected
2026-09-13 12:30:17 +02:00
storage-identity-2026-10-15
Storage that knows its physical disks: design draft 16 + spike; R-1074..R-1079; STATUS D10
2026-10-15 20:08:08 +02:00
storage-identity-buildA-2026-10-15
storage identity build A: 16 accepted + §13 build status; D14; close R-1072/R-1074/R-1075; open R-1083/R-1084; live evidence
2026-10-15 21:49:38 +02:00
storage-identity-buildB-2026-10-15
storage identity build B, Part 1: the D3 space check (proposal, waits for the operator); R-1087, R-1088
2026-10-15 22:51:03 +02:00
ten-answers-2026-10-06
ten answers done: R-444 seen working live (weekly trim + System page), closed; STATUS, CONTEXT, REPORT (150 -> 142; 2 opened, 10 closed)
2026-10-06 13:09:04 +02:00
the-28-2026-09-22
corrections: calibre-web restore was REFUSED, calcom was INCONCLUSIVE
2026-09-22 20:18:37 +02:00
undo-bakeoff-2026-09-23
Undo bake-off: copy the folder wins (09 §3 decisions 19-20, §6.1a)
2026-09-23 10:28:56 +02:00
undo-fleet-2026-09-23
The household is told: controller v0.264.0 + hub v0.120.0 proven live, floor 0.264.0
2026-09-23 14:39:31 +02:00
undo-live-2026-09-23
The undo, built and proven live: controller v0.263.2 (09 decision 15)
2026-09-23 12:25:13 +02:00
update-arc-2026-09-21
Update arc resumed: the state measured, R-524/R-520/R-589/R-469 closed, seven questions put to the operator
2026-09-21 13:13:23 +02:00
update-arc-gaps-2026-09-21
Update night 2026-09-21: Phase 0 and Phase 1 evidence, the drill method, and two instrument fixes
2026-09-21 21:17:46 +02:00
update-night-2026-09-21
THE TWENTY-EIGHT: every app no drill had touched, walked in one night
2026-09-22 16:00:56 +02:00
update-rulings-2026-09-23
Update arc: the undo and ladder spiked, the build plan for the 2026-09-23 rulings
2026-09-23 08:54:41 +02:00
upgrade-spike-2026-09-06/evidence
SPIKE: an upgrade test that runs again — and a real defect in our own bookstack template
2026-09-06 11:48:57 +02:00
usenet-2026-10-12
Website + evidence: the Usenet pair (R-988 closed), and the drill route filed as R-989
2026-10-12 22:58:59 +02:00
v0240-2026-09-13
R-452 CLOSED: the catalog-since gate (hook-enforced); 09 §8.2 limitation lifted; STATUS note updated
2026-09-13 19:42:42 +02:00
v0241-2026-09-13
evening: rules file in place; R-483 CLOSED (catalog, operator-confirmed); R-479 CLOSED (controller v0.241.0, proven live); R-481 blocked on the one-host-one-customer model; R-491 filed
2026-09-13 21:57:47 +02:00
v0242-2026-09-14
second night: scratch guest 9202 built (R-481 CLOSED, persists); controller v0.242.0 delivered (R-487 R-491 R-490 R-476 R-456 CLOSED, R-489 re-scoped); R-492 filed; rotation restarted from bentopdf; morning note
2026-09-13 23:06:21 +02:00
v0262-live-2026-09-22
floor raised 0.261.0 -> 0.262.1, MinAgent 0.131.0 declared
2026-09-22 22:10:38 +02:00
version-travel-2026-09-26
night 09-27/28: paperless 16 copy released on a real 18 dump (v0.276.0); demo-hp restore test refused for space -> R-701
2026-09-28 03:46:43 +02:00
visitors-2026-10-01
Evidence: SparkyFitness box walk (9202) and its licence text
2026-10-01 22:19:55 +02:00
website-dashboard-2026-10-08
website dashboard: live check (pictures load, own language each, 376 px no sideways scroll), report
2026-10-08 12:50:44 +02:00
website-gallery-2026-10-08
website gallery: report + live check after v2 (open, next, close by clicking the picture, swipe keeps it open, JS off opens the file)
2026-10-08 13:21:54 +02:00
website-globe-2026-10-08
website globe: report, live check (desktop JS on/off, 376 px menu), R-903 (no-JS phone menu); 130 -> 131
2026-10-08 09:21:16 +02:00
website-refresh-2026-10-08
website refresh: report, live check (all 14 pages 200, 404 page, hreflang/canonical read back, 376 px no sideways scroll), measured claim counts
2026-10-08 08:32:47 +02:00
AUDIT-blast-radius-hostroot-localapi-2026-07-02.md
docs: AUDIT — host-root + local-API blast radius (non-Proxmox-token axes)
2026-07-02 10:43:19 +02:00
AUDIT-gate-decoys-2026-09-01.md
the decoy sweep: 29 gates read, 16 fooled, 10 fixed - and a gate that refuses the next one (R-421)
2026-09-01 12:39:45 +02:00
AUDIT-hub-gui-2026-06-30.md
docs(audit): hub GUI vs current architecture findings (2026-06-30)
2026-06-30 20:13:48 +02:00
AUDIT-nas-cwa-rca-2026-07-11.md
docs: Q1c GREEN — reboot survival automatic since agent 0.84.0 (feature doc + audit §7 + CONTEXT + REPORT)
2026-07-11 21:25:14 +02:00
AUDIT-power-outage-recovery-2026-07-22.md
docs: ISO train v1.25.0 — REPORT (belt/apt/R-63/gate/vault live), F9 resolved, R-63 shipped, nodes belt+vault, F8 checklist; critical golden<floor finding
2026-07-23 15:48:01 +02:00
AUDIT-vacation-remote-ops-2026-07-20.md
docs(audits): remote-ops remediation — F1 mitigated, F2 closed, F3 fixed (v0.149.0), Immich resolved; R-50..R-53 minted
2026-07-20 09:09:25 +02:00
B3-storage-lifecycle-2026-06-15.md
docs: B3 live storage-lifecycle exercise + feature sweep (2026-06-15)
2026-06-15 12:39:44 +02:00
BIGNIGHT-household-month-2026-09-14.md
BIGNIGHT teardown complete: VM destroyed, host deleted, ep0 peer gone, customer and its ep0 data kept
2026-09-15 01:05:05 +02:00
bughunt-reconcile-2026-06-13.md
docs(audits): authoritative remediation records (deep-sweep + bughunt-reconcile)
2026-06-13 19:28:25 +02:00
CAMPAIGN-3-2026-07-11.md
CAMPAIGN-3: morning RCA — host loss = F12 CRITICAL automount ordering cycle (hardware exonerated); box recovered to defined state
2026-07-12 06:55:40 +02:00
CAMPAIGN-4-2026-07-13.md
@
2026-07-14 00:45:20 +02:00
CAMPAIGN-5-2026-07-14.md
@
2026-07-14 10:12:21 +02:00
CAMPAIGN-6A-2026-07-14.md
@
2026-07-14 12:17:26 +02:00
CAMPAIGN-6B-2026-07-14-PROMPT.md
@
2026-07-14 12:17:26 +02:00
CAMPAIGN-6B-2026-07-14.md
CAMPAIGN-6B: note credential fully reverted at cleanup
2026-07-14 13:32:14 +02:00
CAMPAIGN-6C-2026-07-14-PROMPT.md
CAMPAIGN-6B: note credential fully reverted at cleanup
2026-07-14 13:32:14 +02:00
CAMPAIGN-6C-2026-07-14.md
CAMPAIGN-6C: v0.131.0 F-S2/F-S3 live acceptance (4P-1..4P-5 all PASS) + F-6C-1
2026-07-14 20:01:13 +02:00
CAMPAIGN-6D-2026-07-15.md
docs: 6D audit — tag campaign6 autofs finding as track-only (operator reboot)
2026-07-15 19:48:43 +02:00
CAMPAIGN-6E-2026-07-15.md
docs(audit): CAMPAIGN-6E — P-TIER2 deep-4 + P4-DEEP timing (all 8 legs PASS)
2026-07-15 21:11:39 +02:00
CAMPAIGN-7-catalog-sweep-2026-07-19.md
CAMPAIGN 7 doc: MAJOR breaking-note table (§6.3)
2026-07-19 03:30:50 +02:00
CAMPAIGN-8-backup-restore-2026-07-27.md
F-LEAK: record all three attempts; the ACL fix is consumed by use, the fenced destroy is the fix
2026-07-28 11:32:45 +02:00
CAMPAIGN-9-restore-proof-2026-07-28.md
C9-F1 (honesty half) + C9-F2 shipped in controller v0.183.0; C9-F1b and C9-F4 filed
2026-07-28 19:08:25 +02:00
CAMPAIGN-10-closeout-2026-08-02.md
Campaign 10 closeout Part 2: teardown complete — five layers, each verified gone
2026-08-02 10:11:21 +02:00
CAMPAIGN-10-two-storage-soak-2026-07-31.md
Campaign 10: M-band RTO measured — RTO ~= 40s + 26.9s/GB, and a capacity ceiling that matters more
2026-08-02 08:31:51 +02:00
CAMPAIGN-11-recovery-journey-2026-08-05.md
R-201 re-walk: the data PASSES again, the journey still FAILS — two dead ends, down from four
2026-08-06 12:18:29 +02:00
CAMPAIGN-12-class-sweep-2026-08-08.md
CAMPAIGN 12 — the class sweep: golden 0.208.0 baked (awaiting vouch), R-256..R-263 filed, gating ranked
2026-08-07 23:07:42 +02:00
CAMPAIGN-nomercy-2026-07-06.md
docs(audit): closure appendix — F2 closed, F4-UX fixed, healthcheck class fixed
2026-07-06 20:43:52 +02:00
CAMPAIGN-offsite-overnight-2026-07-10.md
campaign: offsite overnight soak 2026-07-10 — PASS + 1 HIGH finding (crash-mid-prune stale lock)
2026-07-10 04:32:32 +02:00
CAMPAIGN-pool-effects-2026-07-01.md
docs: F3 provisioning runbook (vmid from full host list) + campaign F1/F2 resolution banner
2026-07-02 10:27:17 +02:00
catalog-currency-2026-09-30.md
More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator)
2026-09-30 20:27:28 +02:00
D5-drive-alone-restore-2026-07-30.md
D5 SHIPPED: Tier-1/2 restore no longer depends on the whole-guest tier
2026-07-30 16:58:06 +02:00
deep-sweep-2026-06-13.md
docs(audits): AGENT-001 -> MERGED + DEPLOYED (agent v0.30.0)
2026-06-13 22:32:23 +02:00
DIAG-agent-channel-2026-07-26.md
DIAG: agent-channel banner is a stale controller.yaml endpoint, not island fallout
2026-07-26 08:51:45 +02:00
DIAG-backup-missed-2026-07-26.md
docs(audits): R-80 DIAG — expected_backup_missed root-caused to in-memory agent backup store
2026-07-26 09:59:35 +02:00
DIAG-bootrecon-drive-absent-2026-08-02.md
docs: R-157 A / R-170 / R-171 closed — boot recovery finished
2026-08-02 20:38:21 +02:00
DIAG-f10-demo-hp-offsite-2026-07-23.md
docs(R-71): SHIPPED (a)+(c) — the apply-bridge settle-gate (controller v0.162.0)
2026-07-24 07:49:11 +02:00
DIAG-immich-restore-2026-07-19.md
docs: DIAG round 2 — H1 confirmed, H4 found; two standing rulings landed
2026-07-19 13:04:58 +02:00
DIAG-immich-restore-round2-2026-07-19.md
docs: DIAG round 2 — H1 confirmed, H4 found; two standing rulings landed
2026-07-19 13:04:58 +02:00
DIAG-r116-disks-payload-2026-07-30.md
docs: write down which boxes are disposable (target selection by blast radius)
2026-07-30 08:13:58 +02:00
DIAG-sharing-2026-07-20.md
docs: DIAG addendum 2 — S-3 fixed (samba 1.1.0 mDNS + v0.152.0 copy); Finder sidebar stays OPEN
2026-07-20 13:40:55 +02:00
DIAG-smart-passed-trap-2026-08-14.md
docs(audits): first genuinely failing disk — the SMART PASSED trap
2026-08-14 07:57:07 +02:00
DIAGNOSE-drive-bind-after-reprovision-2026-06-23.md
docs(audit): DIAGNOSE re-enrolled drives not binding after 9201 re-provision
2026-06-23 17:15:30 +02:00
DIAGNOSE-offbox-repo-orphaned-2026-07-17.md
docs: offsite continuity Part B REPORT/CONTEXT; DIAGNOSE incident→fix pointer; capability map (offsite reinstall-continuity + escrow retention); ROADMAP R-25 (TOCTOU hardening) + R-26 (guided old-history recovery)
2026-07-17 10:55:17 +02:00
DISPOSITION-ia-finding2-systemdisks-2026-07-13.md
audits: disposition — backups-IA finding 2 (legacy-boot SystemDisks dead wizard) RESOLVED by felhom-agent v0.87.0 (slaves-walk, operator ruling 2026-07-13); live evidence drill replay + felhom-pve byte-identical regression; remaining: supervised wizard leg + Day-0 manifest vouch
2026-07-13 13:21:14 +02:00
DOORSTEP-walk-1270-2026-09-14.md
doorstep teardown complete: host tester-1-8603a2 deleted, ep0 peer gone, customer kept; ep0 DR data retained for ruling
2026-09-14 18:52:09 +02:00
DRILL-appdata-restore-2026-07-04.md
docs(audit): app-data restore drill 2026-07-04 (guest 9201)
2026-07-04 22:53:07 +02:00
DRILL-chaos-night-2026-09-17.md
chaos night teardown complete: hub host record deleted, connect mail quoted, ep0 unchanged
2026-09-17 09:27:10 +02:00
DRILL-day0-cleanroom-2026-07-03.md
docs: golden 0.98.3 live — D.1b retired, drill B1/B5 fixed, backlog note resolved + evidence doc
2026-07-03 18:38:28 +02:00
DRILL-day0-take2-2026-07-12.md
docs: hub v0.53.0 closing bundle - CHANGELOG + CONTEXT (both operator rulings verbatim) + take-two F-14 disposition (SHIPPED, gated on escrow-acked deletion provenance)
2026-07-13 15:02:44 +02:00
DRILL-day0-vm-2026-07-12.md
docs: DR-tier-by-default batch — decisions 1-5 in CONTEXT, day0 ACL advice reversed, ceremony decision-4 policy block, WG disclosure (tester agreement + GO-LIVE D3), drill F-disposition table, REPORT
2026-07-12 20:43:25 +02:00
DRILL-first-hour-en-0258-2026-09-20.md
Teardown verified on ep0, and the two periods I got wrong (R-600)
2026-09-20 19:48:20 +02:00
DRILL-fresh-install-0242-2026-09-14.md
drill: a stranger's first hour on 0.242.0 — 1 intervention, not ready for a volunteer
2026-09-14 16:17:47 +02:00
DRILL-golden-098-2026-07-03.md
Backlog triage Part B: 125 finished rows + 20 id-less rows moved to CLOSED-ITEMS (full text at 9e2786c); open rows normalised to one 6-column shape; narratives archived verbatim; closed_register_gate RULE 3 refuses a finished row in OPEN-ITEMS (decoys, seen red); rules rehomed to CONTEXT + 07 §11; loose notes triaged; R-814..R-819 filed; register 444 -> 325
2026-10-03 09:17:22 +02:00
DRILL-new-household-2026-09-30.md
DRILL new household on golden 0.282.0: 0 interventions; ready for a first real tester on a new record
2026-09-30 09:25:17 +02:00
DRILL-night-2026-09-23.md
night shift 2026-09-23: the record, the register, the morning note
2026-09-24 00:24:04 +02:00
DRILL-night-2026-09-24.md
night 2026-09-24: record the test-password slip; runner state out of the evidence tree
2026-09-24 14:55:35 +02:00
DRILL-night-2026-09-25.md
night 2026-09-25: DRILL record, Part D real night, STATUS morning note, register 341 -> 338
2026-09-25 04:54:52 +02:00
DRILL-night-2026-09-26.md
night watch: demo-hp converted docmost by itself; R-696 filed; teardown recorded
2026-09-26 04:42:47 +02:00
DRILL-prove-fixes-0243-2026-09-16.md
drill 0.243.0 complete: 0 interventions, the connect e-mail proven, NOT ready for a volunteer
2026-09-16 14:27:04 +02:00
DRILL-r201-night-run-2026-08-04.md
R-201 PASSED: a customer's file survived a machine rebuild and came back byte-identical
2026-08-04 23:18:47 +02:00
DRILL-r201-offsite-recovery-2026-08-04.md
R-203 shipped: the app and its backup agree, and 'ok' means it — R-201 unblocked
2026-08-04 18:52:14 +02:00
DRILL-retained-key-2026-08-12.md
Correct the drill's wall clock to the measured end time (17:45, not the estimated 17:55)
2026-08-12 17:45:23 +02:00
DRILL-the-28-2026-09-22-HEAD.md
corrections: calibre-web restore was REFUSED, calcom was INCONCLUSIVE
2026-09-22 20:18:37 +02:00
DRILL-the-28-2026-09-22.md
corrections: calibre-web restore was REFUSED, calcom was INCONCLUSIVE
2026-09-22 20:18:37 +02:00
DRILL-update-night-2026-09-21.md
Update night: record the one later catalog commit, and re-prove no image line moved
2026-09-21 23:14:52 +02:00
DRILL-version-travel-2026-09-26.md
version-travel D1: agent 0.136.0 + 0.137.0 found and fixed on the box; records updated
2026-09-27 14:15:01 +02:00
E2D-fresh-vm-2026-07-29.md
Record work, banked first: shrink the E-2d row, create the missing capability-map rows
2026-07-29 23:34:06 +02:00
FINDING-app-email-rollout-2026-06-29.md
docs: FINDING — app-email rollout mechanism gaps (calcom/nextcloud/immich)
2026-06-29 10:32:56 +02:00
host-addresses-visible-2026-07-31.md
docs: host-addresses audit + capability-map row + REPORT (agent 0.119.0 / hub 0.85.0)
2026-07-31 08:55:53 +02:00
I18N-INVENTORY-2026-09-17.md
i18n starter: inventory (script + audit), rows R-553..R-562, language allowlisted in wire-contract gate
2026-09-17 14:50:29 +02:00
INCIDENT-ep0-pbs-fd-exhaustion-2026-08-18.md
RUNBOOK ep0: PBS 4.2.2-1 -> 4.2.5-1, slope unchanged as predicted (R-341)
2026-08-18 12:26:53 +02:00
INCIDENT-guest-dhclient-killed-2026-07-20.md
docs: INCIDENT — guest 9201 dhclient killed as a host orphan; tunnel down ~1h15m
2026-07-20 12:09:01 +02:00
LEDGER-instruction-closeout-2026-08-06.md
docs: close out the instruction arc — t740 corrected on evidence, registers, ledger, S-37
2026-08-06 11:49:22 +02:00
LEDGER-instruction-trim-2026-08-06.md
docs+gate: instruction files cannot silently regrow (R-229)
2026-08-06 09:38:52 +02:00
LEDGER-instruction-trim-part2-2026-08-06.md
docs: backup verified IN the repository — snapshot b587f775, 118/118 + 40/40 (R-229)
2026-08-06 11:22:34 +02:00
live-drive-findings-2026-06-14.md
docs(audits/backlog): preserve live-drive findings+fixspec and M18/M19 fix-plans
2026-06-14 11:00:26 +02:00
live-drive-fixspec-2026-06-14.md
docs: F9/F20-BUG2/F20-BUG3 FIXED (agent v0.31.0, live-validated); queue golden controller-tag follow-up
2026-06-14 15:43:07 +02:00
PROBE-FIX-2026-09-22.md
probe fix, the gate, and the promotion train (R-618 closed, R-630..632 opened)
2026-09-22 11:10:58 +02:00
R106-R109-recipe-completeness-2026-07-30.md
R-106/R-109 audit + registers: shipped at agent 0.118.1, plus R-125
2026-07-30 13:28:10 +02:00
R108-network-app-namespace-2026-07-30.md
R-108 CLOSED — D5's precondition is met (controller v0.187.0)
2026-07-30 14:21:44 +02:00
R116-PART5-2026-07-30.md
R-116 Part 5 FAILED: the fix shipped, C5 still fails, mechanism NOT isolated
2026-07-30 07:15:31 +02:00
R116-v0116-2026-07-30.md
docs(R-116): CLOSED — proven live; capability row F to PROVEN-LIVE; R-120 filed
2026-07-30 09:34:08 +02:00
R117-v0117-2026-07-30.md
docs(R-117): CLOSED — proven live on demo-hp; R-121 filed for agent-on-box drift
2026-07-30 12:42:26 +02:00
R120-golden-rebake-2026-07-30.md
docs(R-120): CLOSED on both halves — golden current, and the class has a gate that refuses
2026-07-30 10:48:16 +02:00
R-63-console-font-drill-2026-07-23.png
drill: R-63 ő/ű captured live on the KVM HP (+ pairing + rootpw); HP SVM-enable fix; evidence PNG
2026-07-23 20:46:27 +02:00
RECON-dooplex-backup-2026-08-06.md
RECON: what DooPlex's own backup actually protects (R-232) — read-only, nothing changed
2026-08-06 12:16:38 +02:00
RECON-offsite-dr-chain-2026-08-04.md
RECON: trace the offsite DR chain link by link — it does not join up (R-198..R-201)
2026-08-04 12:16:04 +02:00
RECON-subdomain-onboarding-2026-07-31.md
the golden gate reads a fact not a name (R-410); R-133's collision resolved (R-406, R-416)
2026-09-01 10:19:55 +02:00
REHEARSAL-byo-reinstall-2026-08-09.md
Rehearsal 2026-08-09 COMPLETE: data BYTE-IDENTICAL, journey needs a shell twice
2026-08-09 12:35:26 +02:00
REPORT-DRILL-backup-truth-2026-08-21.md
R-354 + R-355 CLOSED, proven live; golden 0.218.0 baked; R-367 filed
2026-08-22 10:11:46 +02:00
REPORT-ep0-pbs-upgrade-2026-08-18.md
DRILL 2026-08-21: the off-site restore never replays named volumes (R-354..R-365)
2026-08-21 23:30:27 +02:00
REPORT-mis-called-defect-and-sweep-2026-08-22.md
One register, enforced by a gate; closed work compressed into siblings (R-376..R-378)
2026-08-22 12:13:54 +02:00
REPORT-r316-installer-v1.28.0-2026-08-13.md
hub v0.104.0: the guest network gets a reader (R-319), and the hub half of the naming (R-295)
2026-08-13 10:50:12 +02:00
REPORT-small-debts-and-first-reader-2026-08-13.md
REPORT + CONTEXT: the third name, the second door, and a number that answered a different question
2026-08-13 16:01:45 +02:00
REPORT-v0.218.0-r354-r355-2026-08-22.md
Correct the placement mis-framing, and file what we wrote down and never filed (R-368..R-375)
2026-08-22 11:18:08 +02:00
RERUN-p1p3-2026-07-06.md
docs(audit): closure appendix — F2 closed, F4-UX fixed, healthcheck class fixed
2026-07-06 20:43:52 +02:00
RESEARCH-SYNTHESIS-2026-10-13.md
research doc added
2026-10-13 06:47:09 +02:00
RETIRE-peti-2026-09-25.md
Peti retired (record complete); controller v0.272.0 live proofs + floor 0.272.0; register 339 -> 334; STATUS
2026-09-25 11:33:27 +02:00
RUNBOOK-usb-enrollment-3bfix-2026-07-01.md
docs: RUNBOOK result — USB enrollment on pool-scoped ACL (residual CLOSED)
2026-07-01 13:52:44 +02:00
SESSION-C-2026-07-29.md
Correct the Session C audit: the union row is DEDUPED AWAY, not written false
2026-07-29 23:51:17 +02:00
SPIKE-a1-pool-membership-read-2026-07-03.md
docs: SPIKE — A1 pool-membership read for the stale-lock reaper
2026-07-03 13:00:00 +02:00
SPIKE-agent-pin-mismatch-2026-06-29.md
spike(pin-mismatch): §9 Outcome — R1 executed, controller↔agent service restored
2026-06-29 15:08:58 +02:00
SPIKE-agent-selfupdate-2026-07-05.md
docs(audit): SPIKE — agent self-update rollback mechanics (systemd 257 semantics on felhom-pve)
2026-07-05 14:45:58 +02:00
SPIKE-app-update-2026-09-01.md
SPIKE: what an app update actually does, and which other paths do it too
2026-09-01 21:35:32 +02:00
SPIKE-backup-classification-2026-07-14.md
docs(audit): backup-classification spike — coupling model VALIDATED (Immich DB-only restore broken-not-empty); offsite=unit-only live-proven; NEW F-S1 (tier-2 copies no userdata) + F-S2 (paperless-ngx appdata skipped); round-trip verdict: exclusion scoping
2026-07-14 16:39:55 +02:00
SPIKE-baremetal-iso-2026-07-16.md
docs(spike): bare-metal Felhom ISO — R-21 spiked (all mechanisms GREEN on nested virt)
2026-07-16 11:29:03 +02:00
SPIKE-catalog-data-paths-2026-07-26.md
SPIKE: catalog-derived userdata skeleton + import surfaces (2026-07-26)
2026-07-26 06:59:46 +02:00
SPIKE-ci-runner-2026-08-02.md
docs: R-168 SHIPPED, R-29 CLOSED on the demonstrated alarm, R-169 minted
2026-08-02 16:35:34 +02:00
SPIKE-connectivity-wireguard-2026-07-03.md
docs: R-182 closed, R-90 closed on measurement, R-86 unblocked, ep0 record corrected
2026-08-03 14:00:54 +02:00
SPIKE-controller-agent-channel-health-2026-06-29.md
docs: felhom.eu REPORT (HostLeafChecker) + hub README + self-health arc complete (spike doc)
2026-06-29 23:32:12 +02:00
SPIKE-controller-escrow-2026-07-13.md
audits: SPIKE controller-driven escrow ceremony — daemon-context mechanics ALL GO (drill VM, agent 0.87.0): PTY re-key no-TTY 3/3, sudoers refusal matrix 5/5, R pipe round-trip proven, env_reset clean, --upload hub-verified ~2.4s; premise correction: capability probes are list-mode
2026-07-13 17:15:52 +02:00
SPIKE-controllerswap-narrow-grants-2026-06-29.md
docs: controller-swap narrow-grant Option A IMPLEMENTED (agent v0.45.0) — spike + multidrive pointers resolved
2026-06-29 19:46:17 +02:00
SPIKE-day0-firstboot-handshake-2026-06-26.md
REPORT + Day-0 doc: BUNDLE slice (hub v0.16.0 artifact manifest + host-install v1.1.0 self-install)
2026-06-28 09:03:34 +02:00
SPIKE-decommission-migration-2026-06-14.md
docs(spike): bake in locked fork decisions (B0 gate cleared)
2026-06-14 18:14:08 +02:00
SPIKE-dooplex-buildcache-2026-08-05.md
docs: P6 EXECUTED — containerd store moved to SSD2; reboot deferred (R-209, R-209a)
2026-08-05 10:27:40 +02:00
SPIKE-dr-bindmount-source-2026-07-07.md
docs: campaign-2 R1/R2 root-cause correction + DR bind-mount source spike
2026-07-07 19:08:03 +02:00
SPIKE-dr-recipe-2026-06-16.md
docs(audit): SPIKE — Phase 2 DR recipe + storage diagnosis (report-only)
2026-06-16 14:18:39 +02:00
SPIKE-drive-enrollment-2026-07-01.md
docs: spike status — Impl-2b DONE (raw enrollment live: ctrl v0.95.0 + agent v0.58.0)
2026-07-01 21:27:48 +02:00
SPIKE-ep0-established-connections-2026-08-20.md
agent 0.130.0 published and vouched; R-347 closed, R-349 + R-350 filed
2026-08-20 12:54:54 +02:00
SPIKE-ep0-storagebox-2026-07-09.md
docs(audit): ep0 Hetzner Storage Box SSHFS + PBS-datastore feasibility spike
2026-07-09 09:48:57 +02:00
SPIKE-facebook-page-api-2026-10-08.md
Spike: Facebook Page reached after the operator's Page click; scheduled post + photo created, read back byte-equal, deleted
2026-10-08 18:38:25 +02:00
SPIKE-felhom-sshd-2026-07-05.md
docs(audit): dedicated felhom-sshd instance spike (2026-07-05) — GO
2026-07-05 18:18:37 +02:00
SPIKE-firstboot-nic-sweep-2026-07-22-screen.png
docs(v1.24.0): R-59/R-60/R-61 SHIPPED — CHANGELOG, README, ROADMAP (+R-62), runbook, capability map, drill evidence, REPORT
2026-07-22 11:45:55 +02:00
SPIKE-firstboot-nic-sweep-2026-07-22.md
docs(v1.24.0): R-59/R-60/R-61 SHIPPED — CHANGELOG, README, ROADMAP (+R-62), runbook, capability map, drill evidence, REPORT
2026-07-22 11:45:55 +02:00
SPIKE-hetzner-api-provisioning-2026-07-09.md
docs(audit): Hetzner API provisioning spike — both offsite models FIT
2026-07-09 17:46:43 +02:00
SPIKE-immediate-sync-transport-2026-07-16.md
docs(spike): immediate-sync transport — poke-relay vs long-poll, both GO/complementary
2026-07-16 20:00:01 +02:00
SPIKE-infra-backup-2026-06-15.md
docs(audit): SPIKE — characterize Infra Backup (revive vs retire)
2026-06-16 10:04:55 +02:00
SPIKE-intermediary-mount-2026-06-15.md
docs(spike): stable intermediary mount — swap drive underneath (C1-immune, no-restart)
2026-06-15 15:26:37 +02:00
SPIKE-island-bridge-2026-07-25.md
R-50: A4 fresh-provision validated (agent auto-net1 live); spike caveat closed
2026-07-25 14:36:56 +02:00
SPIKE-lan-discovery-2026-07-18.md
spike(R-6): human Explorer leg PASSED (nmbd) + stack torn down, report-clean
2026-07-18 10:50:14 +02:00
SPIKE-multidrive-mutual-exclusion-2026-06-29.md
docs: controller-swap narrow-grant Option A IMPLEMENTED (agent v0.45.0) — spike + multidrive pointers resolved
2026-06-29 19:46:17 +02:00
SPIKE-nas-dsm-2026-07-11.md
audit(Q1c): NAS automount trigger does NOT survive a guest reboot (empty-dir FAIL) + follow-up
2026-07-11 15:43:26 +02:00
SPIKE-nas-storage-2026-06-29.md
spike: NAS network storage (media automount + restic backup target) — findings
2026-06-29 11:44:40 +02:00
SPIKE-nas-verify-2026-07-11.md
docs(audit): record SPIKE-nas-verify findings-doc commit hash (b57f6c1)
2026-07-11 08:20:22 +02:00
SPIKE-offsite-credential-recovery-2026-08-04.md
RECON: trace the offsite DR chain link by link — it does not join up (R-198..R-201)
2026-08-04 12:16:04 +02:00
SPIKE-oob-wg-operator-peer-2026-07-05.md
docs(audit): OOB-over-WG operator-peer spike (2026-07-05) — GO
2026-07-05 17:01:35 +02:00
SPIKE-pbs-tier-provisioning-2026-07-10.md
spike: PBS DR tier provisioning SLICE 0 — all 3 mechanisms settled (token-create impossible -> pinned sudoers; ep0 tenancy op-set + stdout secret transport proven; encryption-key autogen births K, pvesm remove deletes it)
2026-07-10 20:12:26 +02:00
SPIKE-pbsdr-selfheal-2026-07-15.md
docs: SPIKE PBS-DR self-heal — root cause = consumed secret, not missing descriptor
2026-07-15 17:53:42 +02:00
SPIKE-pool-scoped-acl-2026-07-01.md
docs: REPORT + spike-doc status for host-install v1.6.0 (pool-scoped ACL, live-migrated)
2026-07-01 13:02:16 +02:00
SPIKE-r82-phase0-2026-07-26.md
docs(ep0): relocate the felhom-offsite PBS datastore onto the 100 GB volume
2026-07-27 09:36:11 +02:00
SPIKE-r95-offsite-delete-2026-09-01.md
SPIKE R-95: the safety net cannot be seen from the box - and that RAISES the urgency
2026-09-01 13:55:35 +02:00
SPIKE-r117-bind-liveness-2026-07-30.md
docs(R-117): the hang case measured — an I/O probe turns a wedged drive into an unkillable agent
2026-07-30 11:49:59 +02:00
SPIKE-r165-mp1-merge-2026-08-02.md
docs: R-167 + R-158 CLOSED, R-165 SPIKED, R-174..R-177 filed
2026-08-02 23:56:16 +02:00
SPIKE-r165-phase0-2026-08-03.md
audits: R-165 Phase 0 — P1 and P2 measured, nothing changed
2026-08-03 06:34:26 +02:00
SPIKE-r241-recovery-offer-2026-08-07.md
SPIKE R-241 — ruled: a MINTING defect, not a screen-predicate defect
2026-08-07 08:53:16 +02:00
SPIKE-r459-mariadb-upgrade-2026-09-06.md
SPIKE R-459: the skipped MariaDB conversion is stable, and the trade it implied does not exist
2026-09-06 17:42:19 +02:00
SPIKE-raw-drive-enroll-2026-06-15.md
docs: SPIKE raw-drive plug-and-enroll (GATE, 2026-06-15)
2026-06-15 10:57:33 +02:00
SPIKE-recovery-unit-space-2026-08-02.md
SPIKE: recovery-unit space — the ceiling is real on mp1, overflow is clean, but silent (R-158)
2026-08-02 09:07:09 +02:00
SPIKE-restic-password-custody-2026-07-09.md
docs(audit): fork-4 restic-password custody spike — VALIDATED (escrow-under-R)
2026-07-09 14:15:01 +02:00
SPIKE-restic-restore-test-2026-08-31.md
R-87 SPIKE: measured, do not build it as written (R-407..R-409 filed)
2026-08-31 15:59:09 +02:00
SPIKE-restic-snapshot-shape-2026-07-14.md
SPIKE restic snapshot shape: record findings-doc commit hash 0771d58
2026-07-14 21:18:36 +02:00
SPIKE-smart-coverage-2026-07-25.md
docs: SPIKE — SMART coverage on real hw (why the card shows Nincs adat); findings-only
2026-07-25 07:56:02 +02:00
SPIKE-smtp-app-relay-2026-06-28.md
docs(audit): SPIKE findings — on-box SMTP app-relay (apps → shim → hub → Resend)
2026-06-28 19:27:07 +02:00
SPIKE-storagebox-restic-direct-2026-07-09.md
docs(audit): restic→Storage Box direct-from-residential spike (FIT/IPv4)
2026-07-09 11:05:36 +02:00
SPIKE-universal-iso-2-2026-07-31.md
SPIKE 2 complete: locked root closes the PVE web UI; before-network gives a measured zero window
2026-07-31 13:57:21 +02:00
SPIKE-universal-iso-3-2026-07-31.md
hub v0.104.0: the guest network gets a reader (R-319), and the hub half of the naming (R-295)
2026-08-13 10:50:12 +02:00
SPIKE-universal-iso-4-2026-07-31.md
SPIKE 4: a .deb in the ISO DOES deliver on an interactive install
2026-07-31 15:35:07 +02:00
SPIKE-universal-iso-2026-07-31.md
SPIKE: a universal ISO needs a different disk strategy and a locked root
2026-07-31 12:12:35 +02:00
SPIKE-upgrade-test-2026-09-06.md
SPIKE: an upgrade test that runs again — and a real defect in our own bookstack template
2026-09-06 11:48:57 +02:00
SPIKE-userdata-layout-2026-06-14.md
docs(spike): userdata/ layout + shared-storage ownership mapping (report-only gate)
2026-06-14 21:15:24 +02:00
storage-lifecycle-acceptance-2026-06-15.md
docs: M3 live re-verification addendum (closes E14/E15 residual) + two controller UI fixes
2026-06-15 21:53:10 +02:00
tester-gate-golden-0.188.0-2026-07-31.md
Tester gate: golden re-baked to 0.188.0, fresh-install proof PASSED — a fresh box is safe to hand to a tester
2026-07-31 08:27:36 +02:00
TESTRUN-fullstack-2026-06-29.md
audit: §D supervised reboot done — F2-a + F2-b red-proofs PASS (findings closed)
2026-06-30 10:04:59 +02:00
UPDATE-ARC-STATE-2026-09-21.md
File R-607 (a sync that says 'no change' while the cache moves) and sharpen the audit
2026-09-21 13:14:10 +02:00
VALIDATION-fork4-custody-2026-07-09.md
docs(audit): fork-4 custody VALIDATED end-to-end live (supervised)
2026-07-09 16:31:58 +02:00
VALIDATION-newbox-restore-2026-07-10.md
validation: new-box restore round-trip PASS (9/9 sha-identical) + old-archive retirement decision
2026-07-10 09:29:22 +02:00
VALIDATION-offbox-storagebox-2026-07-09.md
docs(audit): offbox v0.104.0 VALIDATED live against the Storage Box (supervised)
2026-07-09 13:17:52 +02:00
VALIDATION-offsite-provisioning-e2e-2026-07-09.md
validation record: offsite provisioning live e2e PASS (2026-07-09) + CONTEXT/REPORT
2026-07-09 22:04:44 +02:00