admin cf6fec8d87 hub (unreleased): the System page answers 'is anything wrong?' and 'is anything waiting for me?' first ...

Needs attention, Waiting for you (one card per kernel/Docker/Proxmox set the button may approve), a
7-column Boxes table whose rows open to every old value, and a closed Details (release ids, cancelled
approvals, ring-0 counts, floors, crash guard and root files, Approve now - which now asks first).
Same data, buttons, routes and CSRF field. No deploy. Screenshots in audits/hub-system-page-2026-10-10/.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb

2026-10-10 15:38:25 +02:00

..

api

hub (unreleased, SECURITY): /preferences and /notify refuse a per-customer key acting for another household (403); red-proved

2026-10-09 12:48:54 +02:00

assets

…

claim

hub v0.123.0: app_stopped_unhealthy (decision 28); 09 decisions 26-28 recorded

2026-09-24 11:38:13 +02:00

cloudflare

hub R-138: the token's one zone must BE the customer's domain (order-independent; security review)

2026-10-08 15:17:05 +02:00

configgen

R-879: seal box API keys, owner passphrases, controller keys and PBS-DR tokens at rest

2026-10-05 21:45:04 +02:00

dbsnap

hub v0.136.0: nightly VACUUM INTO snapshot, keep 2 (R-173 decision A); hub PVC 2Gi + Longhorn default group; 09 rulings 125-127; 05 §16.3

2026-10-05 14:28:30 +02:00

gitea

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

hetznerapi

…

i18n

hub: household health mail points to the dashboard, no raw note (R-79, D3)

2026-10-08 15:17:05 +02:00

intent

hub: box presence from the wait channel + delete a switched-off box at once (R-30, D2)

2026-10-08 15:17:05 +02:00

mailhold

hub (unreleased): R-922 option A — a household's clear deletes its notification address (email_cleared); MAIL-HOLD — a restored hub sends no mail until released; two log lines drop the address; runbooks: mail hold is restore step 1; 07 §6.4 R-921 pre-check; R-921/R-922 narrowed

2026-10-09 12:37:29 +02:00

mailrelay

…

monitor

hub R-435: each clean-up window explains one fall only; a window stuck open past its deadline explains nothing (security review)

2026-10-08 15:17:05 +02:00

notify

hub (unreleased): R-922 option A — a household's clear deletes its notification address (email_cleared); MAIL-HOLD — a restored hub sends no mail until released; two log lines drop the address; runbooks: mail hold is restore step 1; 07 §6.4 R-921 pre-check; R-921/R-922 narrowed

2026-10-09 12:37:29 +02:00

offsite

R-32 (decision 167): RESET purges the off-site folder through the sub-account's own login before deleting it

2026-10-07 10:21:25 +02:00

offsiteheal

hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822

2026-10-03 16:57:04 +02:00

offsitekeys

R-32 (decision 167): RESET purges the off-site folder through the sub-account's own login before deleting it

2026-10-07 10:21:25 +02:00

osupdates

hub v0.145.0: the kernel approval rule (operator ruling 2026-10-10, 09 §3 decision 195) + release entry for the security fix, R-922, MAIL-HOLD

2026-10-10 09:27:54 +02:00

pbsdrheal

…

poke

…

semver

…

store

hub: operator actions for a box (D1, R-314/R-279/R-177, decision 185)

2026-10-08 15:17:06 +02:00

sysfacts

hub v0.143.0 (code): the kernel lane — the day-before household mail, the night instruction, the operator's kernel set (R-836, decision 172)

2026-10-07 15:34:14 +02:00

tenantsync

…

web

hub (unreleased): the System page answers 'is anything wrong?' and 'is anything waiting for me?' first

2026-10-10 15:38:25 +02:00

wgsync

…