admin a6acb0f762 Hub v0.149.0: clamp a future deliberate-off time; hold a customer only when all its hosts are off (R-998) ...

Security review of 50e47e29: requested_at is the box's clock — a future value is cut to the hub's
now; CustomerDeliberatelyOff now needs every host of the customer held (one machine of two no
longer silences the other), and fails closed on a read error or no host. Both red-proofed.

2026-10-13 19:52:12 +02:00

..

api

Hub v0.149.0: clamp a future deliberate-off time; hold a customer only when all its hosts are off (R-998)

2026-10-13 19:52:12 +02:00

assets

feat(hub): Configuration page, asset seedOrUpdate, English UI

2026-02-25 09:34:43 +01:00

claim

hub v0.123.0: app_stopped_unhealthy (decision 28); 09 decisions 26-28 recorded

2026-09-24 11:38:13 +02:00

cloudflare

hub R-138: the token's one zone must BE the customer's domain (order-independent; security review)

2026-10-08 15:17:05 +02:00

configgen

R-879: seal box API keys, owner passphrases, controller keys and PBS-DR tokens at rest

2026-10-05 21:45:04 +02:00

dbsnap

hub v0.136.0: nightly VACUUM INTO snapshot, keep 2 (R-173 decision A); hub PVC 2Gi + Longhorn default group; 09 rulings 125-127; 05 §16.3

2026-10-05 14:28:30 +02:00

gitea

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

hetznerapi

hub v0.64.0 — offsite pool-box aggregate: fill, oversubscription, per-customer bars, operator alert (R-5)

2026-07-17 20:15:34 +02:00

i18n

hub: household health mail points to the dashboard, no raw note (R-79, D3)

2026-10-08 15:17:05 +02:00

intent

hub: box presence from the wait channel + delete a switched-off box at once (R-30, D2)

2026-10-08 15:17:05 +02:00

mailhold

hub (unreleased): R-922 option A — a household's clear deletes its notification address (email_cleared); MAIL-HOLD — a restored hub sends no mail until released; two log lines drop the address; runbooks: mail hold is restore step 1; 07 §6.4 R-921 pre-check; R-921/R-922 narrowed

2026-10-09 12:37:29 +02:00

mailrelay

hub v0.18.0: app-email passthrough POST /api/v1/mail → Resend SMTP

2026-06-29 08:45:22 +02:00

monitor

Hub v0.149.0: clamp a future deliberate-off time; hold a customer only when all its hosts are off (R-998)

2026-10-13 19:52:12 +02:00

notify

hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33

2026-10-12 14:54:14 +02:00

offsite

hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33

2026-10-12 14:54:14 +02:00

offsiteheal

hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822

2026-10-03 16:57:04 +02:00

offsitekeys

R-32 (decision 167): RESET purges the off-site folder through the sub-account's own login before deleting it

2026-10-07 10:21:25 +02:00

osupdates

Hub v0.149.0: a box the household switched off is not an outage for 14 days (R-998)

2026-10-13 19:47:02 +02:00

pbsdrheal

hub v0.68.0 — auth_failed self-heal, consumed_at honesty gauge, wrapper drift (R-39 + R-50b(a))

2026-07-21 10:01:35 +02:00

poke

hub v0.59.0: Direction-2a agent-plane immediate-sync poke sender + ep0 felhom-poke surface

2026-07-16 22:48:15 +02:00

semver

hub v0.45.0: floor-UI separation + effective-floor source + per-box MinAgent conditional floor

2026-07-11 15:33:14 +02:00

store

Hub v0.149.0: clamp a future deliberate-off time; hold a customer only when all its hosts are off (R-998)

2026-10-13 19:52:12 +02:00

sysfacts

hub v0.143.0 (code): the kernel lane — the day-before household mail, the night instruction, the operator's kernel set (R-836, decision 172)

2026-10-07 15:34:14 +02:00

tenantsync

hub v0.65.0 — PBS DR storage visibility (ep0 usage op) + Offsite tab split + dual dashboard gauges (R-5)

2026-07-17 21:13:30 +02:00

web

Hub v0.149.0: a box the household switched off is not an outage for 14 days (R-998)

2026-10-13 19:47:02 +02:00

wgsync

hub: wgsync fix — constrain HostKeyAlgorithms to the pinned key's type

2026-07-03 23:52:08 +02:00