admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
5188dbdb448e7cf19b991690a64cfc340596674f
felhom.eu/documentation/audits
T
History
admin 9268d9933b
gates / gates (push) Successful in 29s
Details
R-436 measured on the provider: append-only forced key HOLDS (403 on every delete), but the sub-account password defeats it (R-820); design proposal + ep0 options 
Spike, no product change. Venue u629488-sub4 (tester-1, operator ruling); scratch repo removed,
authorized_keys restored byte-identical. Closed R-436 (due-check cleared), R-430. Opened R-820,
R-821, R-822. R-95 and R-342 updated. 07 §D [FACT] block. STATUS: two operator decisions.
Register 326 -> 327.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-03 13:40:35 +02:00
..
backlog-triage-2026-10-03
Backlog triage Part E: RECOMMENDATION (top 29 = every P2, five themes, pick A off-site backup safety vs B box OS updates), STATUS decision, REPORT-backlog-triage-2026-10-03
2026-10-03 09:24:43 +02:00
calibre-name-and-prune-2026-10-01
Rulings 61-62 built: calibre-web generated login name, the registry prune rule; R-750/R-752 closed, R-756/R-757 opened; runbook 4.1a; STATUS, report, evidence
2026-10-01 13:29:46 +02:00
catalog-currency-2026-09-30
The last six PostgreSQL apps decided; the gate's wait seen live by day; catalog currency; stale rows
2026-09-30 14:47:12 +02:00
cleanup-2026-09-23
…
DRILL-backup-truth-2026-08-21/evidence
…
DRILL-cooldown-grain-2026-08-23
…
DRILL-r102-tier2-unit-2026-08-31
…
DRILL-r329-r386-2026-08-23
…
DRILL-r356-hot-only-restore-2026-08-22
…
DRILL-r356b-driveless-db-restore-2026-08-22
…
DRILL-r361-2026-08-22
…
DRILL-r379-rollback-2026-08-22
…
DRILL-r384-dead-db-alarm-2026-08-23
…
DRILL-r403-tier2-delete-2026-08-31
…
DRILL-soak-2026-08-31
…
evidence-agent-transport-leak-2026-08-20
…
evidence-backup-promise-2026-09-16
…
evidence-bignight-2026-09-14
…
evidence-chaos-fixes-2026-09-17
…
evidence-chaos-night-2026-09-17
…
evidence-doorstep-walk-1270-2026-09-14
…
evidence-drill-0243-2026-09-16
…
evidence-drill-fresh-install-0242-2026-09-14
…
evidence-drill-new-household-2026-09-30
DRILL new household on golden 0.282.0: 0 interventions; ready for a first real tester on a new record
2026-09-30 09:25:17 +02:00
evidence-drill-r95-recovery-2026-09-01
…
evidence-drill-retained-key-2026-08-12
…
evidence-ep0-established-connections-2026-08-20
…
evidence-ep0-fd-2026-08-18
…
evidence-ep0-pbs-upgrade-2026-08-18
…
evidence-fixes-first-tester-2026-09-30
Fixes before the first tester: decisions 50/51 outcomes, register 359->361 (R-719/720/721/722/727 closed, R-723 fixed, R-724/725 narrowed, R-728/729 opened), STATUS with the Tester-2 checklist, report
2026-09-30 11:01:08 +02:00
evidence-golden-0276-2026-09-28
STATUS, report, register (R-691 closed live, R-704..R-706), Part E + D2 evidence
2026-09-28 15:56:50 +02:00
evidence-golden-0283-2026-09-30
Golden 0.283.1 baked, round-trip verified, vouched with agent 0.138.0 (min_agent 0.131.0)
2026-09-30 11:40:17 +02:00
evidence-p1fixes-2026-09-15
…
evidence-r316-2026-08-13
…
evidence-r341-plus7d-2026-08-30
…
evidence-r353-r360-live-2026-08-30
…
evidence-recovery-code-2026-09-16
…
evidence-rehearsal-2026-08-09
…
evidence-spike-app-update-2026-09-01
…
evidence-spike-restic-restore-2026-08-31
…
family-gate-2026-10-02
Family gate session close: B4 on demo-hp (real internet: member in, stranger 401; remove with data), REPORT-family-gate-2026-10-02, STATUS, R-800 (remove-with-data keeps userdata, operator), CONTEXT; register 436
2026-10-02 10:43:10 +02:00
fixtures
…
gate-rollout-2026-09-29
Gate rollout 2026-09-29 afternoon: 32/34 gated, sign-up blocks (decision 47 + CC mechanism), R-713; R-707/R-711/R-713 closed, R-714..R-716 opened; STATUS, CONTEXT, report
2026-09-29 11:25:14 +02:00
i18n-2026-09-17
…
i18n-closing-2026-09-21
…
i18n-slice1-2026-09-17
…
i18n-slice2-2026-09-18
…
i18n-slice3-2026-09-18
…
i18n-slice4-2026-09-18
…
i18n-slice5-2026-09-20
…
i18n-slice6-2026-09-20
…
immich-first-start-2026-09-30
immich's first start: cause measured, fixed in the catalog (R-732 closed); ISO clean-tree gate (R-730 closed)
2026-09-30 16:18:17 +02:00
kept-offsite-2026-09-28
STATUS, report, register (R-691 closed live, R-704..R-706), Part E + D2 evidence
2026-09-28 15:56:50 +02:00
ladder-2026-09-24
…
licences-2026-10-02
Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT
2026-10-02 09:35:42 +02:00
lockouts-2026-10-01
Rulings 61-62 built: calibre-web generated login name, the registry prune rule; R-750/R-752 closed, R-756/R-757 opened; runbook 4.1a; STATUS, report, evidence
2026-10-01 13:29:46 +02:00
login-gate-2026-09-29
Session close 2026-09-29: R-710 closed live on demo-hp; STATUS, CONTEXT, REPORT-login-gate-2026-09-29
2026-09-29 09:22:56 +02:00
logins-nvme-2026-09-28
audits: Part G night read 2026-09-28/29 — legs normal, Part D no false alarm
2026-09-29 04:52:12 +02:00
more-night-apps-2026-09-30
More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator)
2026-09-30 20:27:28 +02:00
new-app-checklist-2026-10-01
New-app checklist: the pilot audit (wger as of 2026-09-29 and now, two 9202 walks), R-758..R-764 opened; STATUS, CONTEXT, report
2026-10-01 15:22:05 +02:00
new-apps-2026-10-01
Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT
2026-10-02 09:35:42 +02:00
night-2026-09-23
…
night-2026-09-24
tools: liveR669.py (the R-669 live proof)
2026-09-24 17:06:23 +02:00
night-2026-09-25
tools: live272.py (the v0.272.0 live proofs)
2026-09-25 11:34:04 +02:00
night-2026-09-26
night watch: demo-hp converted docmost by itself; R-696 filed; teardown recorded
2026-09-26 04:42:47 +02:00
night-rulings-2026-09-30
Both rulings built: same-tag re-tests (decision 52), image retention + the install hold (controller 0.284.2); golden 0.284.2
2026-09-30 23:26:21 +02:00
nightly-2026-09-13-adventurelog
…
nightly-2026-09-13b-bentopdf
…
offsite-append-only-2026-10-03
R-436 measured on the provider: append-only forced key HOLDS (403 on every delete), but the sub-account password defeats it (R-820); design proposal + ep0 options
2026-10-03 13:40:35 +02:00
permanent-gate-2026-10-01
Evidence: Part A (visitors apart — measurements, design, sweep, 9202 live) and the permanent-gate spike (items 1–6, VERDICT: PASS, build plan)
2026-10-01 21:26:23 +02:00
persistence-sweep-2026-10-02
Persistence re-sweep of all 58 (R-801 closed: CLEAN 40 / UNDETERMINED 18 / BROKEN 0), R-788 + R-803 (papra) closed, R-804..R-807 opened; STATUS "Before the first paying customer"; REPORT-persistence-sweep-2026-10-02; register 442
2026-10-02 16:54:26 +02:00
pg-calcom-claper-2026-09-28
decisions 44-45, FIRST-ADMIN link, register (R-701/R-702 closed, R-707..R-709), STATUS, report, evidence
2026-09-28 19:02:06 +02:00
pg-last-six-2026-09-30
The last six PostgreSQL apps decided; the gate's wait seen live by day; catalog currency; stale rows
2026-09-30 14:47:12 +02:00
probe-fix-2026-09-22
…
r459-close-2026-09-13
…
r459-spike-2026-09-06
…
r553-2026-09-17
…
r649-2026-09-23
…
r672-2026-09-24
R-672 session: audit README (not done first, wrong claims), STATUS, capability map, register 344->341, topic REPORT
2026-09-24 17:06:09 +02:00
R411-R414-2026-09-01
…
R442-2026-09-13
…
records-carried-2026-09-27
night 09-27/28: paperless 16 copy released on a real 18 dump (v0.276.0); demo-hp restore test refused for space -> R-701
2026-09-28 03:46:43 +02:00
retest-2026-10
Evidence: the first full monthly re-test (decision 55) — nextcloud and sonarr re-tested and written; runbook: every app by default, the standing brief
2026-10-01 07:54:22 +02:00
retire-peti-2026-09-25
Peti retired (record complete); controller v0.272.0 live proofs + floor 0.272.0; register 339 -> 334; STATUS
2026-09-25 11:33:27 +02:00
rulings-2026-10-01
Rulings 2026-10-01 built: report, STATUS (standing monthly line), decision 57 (mealie lockout, decided by CC unattended), R-747 narrowed, evidence
2026-10-01 10:20:44 +02:00
rulings-r472-r475-2026-09-13
…
signup-lock-2026-09-29
Sign-up lock 2026-09-29 evening: decisions 48/49 outcomes, two locks, wanderer closable, R-714/715/716 closed, R-717/718 opened; STATUS, CONTEXT, report
2026-09-29 17:19:43 +02:00
slice4-2026-09-13
…
the-28-2026-09-22
…
undo-bakeoff-2026-09-23
…
undo-fleet-2026-09-23
…
undo-live-2026-09-23
…
update-arc-2026-09-21
…
update-arc-gaps-2026-09-21
…
update-night-2026-09-21
…
update-rulings-2026-09-23
…
upgrade-spike-2026-09-06/evidence
…
v0240-2026-09-13
…
v0241-2026-09-13
…
v0242-2026-09-14
…
v0262-live-2026-09-22
…
version-travel-2026-09-26
night 09-27/28: paperless 16 copy released on a real 18 dump (v0.276.0); demo-hp restore test refused for space -> R-701
2026-09-28 03:46:43 +02:00
visitors-2026-10-01
Evidence: SparkyFitness box walk (9202) and its licence text
2026-10-01 22:19:55 +02:00
AUDIT-blast-radius-hostroot-localapi-2026-07-02.md
…
AUDIT-gate-decoys-2026-09-01.md
…
AUDIT-hub-gui-2026-06-30.md
…
AUDIT-nas-cwa-rca-2026-07-11.md
…
AUDIT-power-outage-recovery-2026-07-22.md
…
AUDIT-vacation-remote-ops-2026-07-20.md
…
B3-storage-lifecycle-2026-06-15.md
…
BIGNIGHT-household-month-2026-09-14.md
…
bughunt-reconcile-2026-06-13.md
…
CAMPAIGN-3-2026-07-11.md
…
CAMPAIGN-4-2026-07-13.md
…
CAMPAIGN-5-2026-07-14.md
…
CAMPAIGN-6A-2026-07-14.md
…
CAMPAIGN-6B-2026-07-14-PROMPT.md
…
CAMPAIGN-6B-2026-07-14.md
…
CAMPAIGN-6C-2026-07-14-PROMPT.md
…
CAMPAIGN-6C-2026-07-14.md
…
CAMPAIGN-6D-2026-07-15.md
…
CAMPAIGN-6E-2026-07-15.md
…
CAMPAIGN-7-catalog-sweep-2026-07-19.md
…
CAMPAIGN-8-backup-restore-2026-07-27.md
…
CAMPAIGN-9-restore-proof-2026-07-28.md
…
CAMPAIGN-10-closeout-2026-08-02.md
…
CAMPAIGN-10-two-storage-soak-2026-07-31.md
…
CAMPAIGN-11-recovery-journey-2026-08-05.md
…
CAMPAIGN-12-class-sweep-2026-08-08.md
…
CAMPAIGN-nomercy-2026-07-06.md
…
CAMPAIGN-offsite-overnight-2026-07-10.md
…
CAMPAIGN-pool-effects-2026-07-01.md
…
catalog-currency-2026-09-30.md
More apps update themselves at night (30+2 -> 35+3); the same-name security-fix gap measured (R-740, decision for the operator)
2026-09-30 20:27:28 +02:00
D5-drive-alone-restore-2026-07-30.md
…
deep-sweep-2026-06-13.md
…
DIAG-agent-channel-2026-07-26.md
…
DIAG-backup-missed-2026-07-26.md
…
DIAG-bootrecon-drive-absent-2026-08-02.md
…
DIAG-f10-demo-hp-offsite-2026-07-23.md
…
DIAG-immich-restore-2026-07-19.md
…
DIAG-immich-restore-round2-2026-07-19.md
…
DIAG-r116-disks-payload-2026-07-30.md
…
DIAG-sharing-2026-07-20.md
…
DIAG-smart-passed-trap-2026-08-14.md
…
DIAGNOSE-drive-bind-after-reprovision-2026-06-23.md
…
DIAGNOSE-offbox-repo-orphaned-2026-07-17.md
…
DISPOSITION-ia-finding2-systemdisks-2026-07-13.md
…
DOORSTEP-walk-1270-2026-09-14.md
…
DRILL-appdata-restore-2026-07-04.md
…
DRILL-chaos-night-2026-09-17.md
…
DRILL-day0-cleanroom-2026-07-03.md
…
DRILL-day0-take2-2026-07-12.md
…
DRILL-day0-vm-2026-07-12.md
…
DRILL-first-hour-en-0258-2026-09-20.md
…
DRILL-fresh-install-0242-2026-09-14.md
…
DRILL-golden-098-2026-07-03.md
Backlog triage Part B: 125 finished rows + 20 id-less rows moved to CLOSED-ITEMS (full text at 9e2786c); open rows normalised to one 6-column shape; narratives archived verbatim; closed_register_gate RULE 3 refuses a finished row in OPEN-ITEMS (decoys, seen red); rules rehomed to CONTEXT + 07 §11; loose notes triaged; R-814..R-819 filed; register 444 -> 325
2026-10-03 09:17:22 +02:00
DRILL-new-household-2026-09-30.md
DRILL new household on golden 0.282.0: 0 interventions; ready for a first real tester on a new record
2026-09-30 09:25:17 +02:00
DRILL-night-2026-09-23.md
…
DRILL-night-2026-09-24.md
…
DRILL-night-2026-09-25.md
night 2026-09-25: DRILL record, Part D real night, STATUS morning note, register 341 -> 338
2026-09-25 04:54:52 +02:00
DRILL-night-2026-09-26.md
night watch: demo-hp converted docmost by itself; R-696 filed; teardown recorded
2026-09-26 04:42:47 +02:00
DRILL-prove-fixes-0243-2026-09-16.md
…
DRILL-r201-night-run-2026-08-04.md
…
DRILL-r201-offsite-recovery-2026-08-04.md
…
DRILL-retained-key-2026-08-12.md
…
DRILL-the-28-2026-09-22-HEAD.md
…
DRILL-the-28-2026-09-22.md
…
DRILL-update-night-2026-09-21.md
…
DRILL-version-travel-2026-09-26.md
version-travel D1: agent 0.136.0 + 0.137.0 found and fixed on the box; records updated
2026-09-27 14:15:01 +02:00
E2D-fresh-vm-2026-07-29.md
…
FINDING-app-email-rollout-2026-06-29.md
…
host-addresses-visible-2026-07-31.md
…
I18N-INVENTORY-2026-09-17.md
…
INCIDENT-ep0-pbs-fd-exhaustion-2026-08-18.md
…
INCIDENT-guest-dhclient-killed-2026-07-20.md
…
LEDGER-instruction-closeout-2026-08-06.md
…
LEDGER-instruction-trim-2026-08-06.md
…
LEDGER-instruction-trim-part2-2026-08-06.md
…
live-drive-findings-2026-06-14.md
…
live-drive-fixspec-2026-06-14.md
…
PROBE-FIX-2026-09-22.md
…
R106-R109-recipe-completeness-2026-07-30.md
…
R108-network-app-namespace-2026-07-30.md
…
R116-PART5-2026-07-30.md
…
R116-v0116-2026-07-30.md
…
R117-v0117-2026-07-30.md
…
R120-golden-rebake-2026-07-30.md
…
R-63-console-font-drill-2026-07-23.png
…
RECON-dooplex-backup-2026-08-06.md
…
RECON-offsite-dr-chain-2026-08-04.md
…
RECON-subdomain-onboarding-2026-07-31.md
…
REHEARSAL-byo-reinstall-2026-08-09.md
…
REPORT-DRILL-backup-truth-2026-08-21.md
…
REPORT-ep0-pbs-upgrade-2026-08-18.md
…
REPORT-mis-called-defect-and-sweep-2026-08-22.md
…
REPORT-r316-installer-v1.28.0-2026-08-13.md
…
REPORT-small-debts-and-first-reader-2026-08-13.md
…
REPORT-v0.218.0-r354-r355-2026-08-22.md
…
RERUN-p1p3-2026-07-06.md
…
RETIRE-peti-2026-09-25.md
Peti retired (record complete); controller v0.272.0 live proofs + floor 0.272.0; register 339 -> 334; STATUS
2026-09-25 11:33:27 +02:00
RUNBOOK-usb-enrollment-3bfix-2026-07-01.md
…
SESSION-C-2026-07-29.md
…
SPIKE-a1-pool-membership-read-2026-07-03.md
…
SPIKE-agent-pin-mismatch-2026-06-29.md
…
SPIKE-agent-selfupdate-2026-07-05.md
…
SPIKE-app-update-2026-09-01.md
…
SPIKE-backup-classification-2026-07-14.md
…
SPIKE-baremetal-iso-2026-07-16.md
…
SPIKE-catalog-data-paths-2026-07-26.md
…
SPIKE-ci-runner-2026-08-02.md
…
SPIKE-connectivity-wireguard-2026-07-03.md
…
SPIKE-controller-agent-channel-health-2026-06-29.md
…
SPIKE-controller-escrow-2026-07-13.md
…
SPIKE-controllerswap-narrow-grants-2026-06-29.md
…
SPIKE-day0-firstboot-handshake-2026-06-26.md
…
SPIKE-decommission-migration-2026-06-14.md
…
SPIKE-dooplex-buildcache-2026-08-05.md
…
SPIKE-dr-bindmount-source-2026-07-07.md
…
SPIKE-dr-recipe-2026-06-16.md
…
SPIKE-drive-enrollment-2026-07-01.md
…
SPIKE-ep0-established-connections-2026-08-20.md
…
SPIKE-ep0-storagebox-2026-07-09.md
…
SPIKE-felhom-sshd-2026-07-05.md
…
SPIKE-firstboot-nic-sweep-2026-07-22-screen.png
…
SPIKE-firstboot-nic-sweep-2026-07-22.md
…
SPIKE-hetzner-api-provisioning-2026-07-09.md
…
SPIKE-immediate-sync-transport-2026-07-16.md
…
SPIKE-infra-backup-2026-06-15.md
…
SPIKE-intermediary-mount-2026-06-15.md
…
SPIKE-island-bridge-2026-07-25.md
…
SPIKE-lan-discovery-2026-07-18.md
…
SPIKE-multidrive-mutual-exclusion-2026-06-29.md
…
SPIKE-nas-dsm-2026-07-11.md
…
SPIKE-nas-storage-2026-06-29.md
…
SPIKE-nas-verify-2026-07-11.md
…
SPIKE-offsite-credential-recovery-2026-08-04.md
…
SPIKE-oob-wg-operator-peer-2026-07-05.md
…
SPIKE-pbs-tier-provisioning-2026-07-10.md
…
SPIKE-pbsdr-selfheal-2026-07-15.md
…
SPIKE-pool-scoped-acl-2026-07-01.md
…
SPIKE-r82-phase0-2026-07-26.md
…
SPIKE-r95-offsite-delete-2026-09-01.md
…
SPIKE-r117-bind-liveness-2026-07-30.md
…
SPIKE-r165-mp1-merge-2026-08-02.md
…
SPIKE-r165-phase0-2026-08-03.md
…
SPIKE-r241-recovery-offer-2026-08-07.md
…
SPIKE-r459-mariadb-upgrade-2026-09-06.md
…
SPIKE-raw-drive-enroll-2026-06-15.md
…
SPIKE-recovery-unit-space-2026-08-02.md
…
SPIKE-restic-password-custody-2026-07-09.md
…
SPIKE-restic-restore-test-2026-08-31.md
…
SPIKE-restic-snapshot-shape-2026-07-14.md
…
SPIKE-smart-coverage-2026-07-25.md
…
SPIKE-smtp-app-relay-2026-06-28.md
…
SPIKE-storagebox-restic-direct-2026-07-09.md
…
SPIKE-universal-iso-2-2026-07-31.md
…
SPIKE-universal-iso-3-2026-07-31.md
…
SPIKE-universal-iso-4-2026-07-31.md
…
SPIKE-universal-iso-2026-07-31.md
…
SPIKE-upgrade-test-2026-09-06.md
…
SPIKE-userdata-layout-2026-06-14.md
…
storage-lifecycle-acceptance-2026-06-15.md
…
tester-gate-golden-0.188.0-2026-07-31.md
…
TESTRUN-fullstack-2026-06-29.md
…
UPDATE-ARC-STATE-2026-09-21.md
…
VALIDATION-fork4-custody-2026-07-09.md
…
VALIDATION-newbox-restore-2026-07-10.md
…
VALIDATION-offbox-storagebox-2026-07-09.md
…
VALIDATION-offsite-provisioning-e2e-2026-07-09.md
…