admin/felhom.eu

Fork 0

Files

T

History

admin 8257ff1cbe

gates / gates (push) Successful in 12m37s

Details

Plex2Shell impact on Felhom: verdict NOT REACHED; R-1241 (P1), R-1242 (P3) opened (register 186 -> 188)

Read-only audit of whether the hacked Plex pod on DooPlex (HM-040, 2026-10-17 -> 10-23) reached Felhom's
secrets. Two no-login doors existed (the Longhorn NFS export and the Longhorn API); neither was used:
nfsd accepted 0 new connections in the window (positive control), no off-schedule Longhorn backup or volume.
Evidence in documentation/audits/plex2shell-felhom-impact-2026-10-23/. The NFS export was narrowed from *
to 10.42.0.0/16 on the operator's yes (host change, not in git). 13-threat-model.md: attacker j and one
boundary row. STATUS: verdict, the P1, one do item.

2026-10-23 17:53:43 +02:00

CLOSED-ITEMS.md

D39 = B: 09 §3 decision 255 (the security-fix step) + a dated note on decision 13; capability B23; R-1239 closed, R-1240 opened, R-1238 updated (register 186 -> 186); STATUS/CONTEXT; nodes.md (9202 password, Tester 1 DHCP); evidence security-lane-2026-10-23 (controller 0.341.0, global floor 11:24 UTC)

2026-10-23 13:35:38 +02:00

FOLLOWUP-nas-automount-guest-reboot-reassert.md

Backlog triage Part B: 125 finished rows + 20 id-less rows moved to CLOSED-ITEMS (full text at 9e2786c); open rows normalised to one 6-column shape; narratives archived verbatim; closed_register_gate RULE 3 refuses a finished row in OPEN-ITEMS (decoys, seen red); rules rehomed to CONTEXT + 07 §11; loose notes triaged; R-814..R-819 filed; register 444 -> 325

2026-10-03 09:17:22 +02:00

OPEN-ITEMS.md

Plex2Shell impact on Felhom: verdict NOT REACHED; R-1241 (P1), R-1242 (P3) opened (register 186 -> 188)

2026-10-23 17:53:43 +02:00

README.md

2026-10-03 09:17:22 +02:00

ROADMAP-HISTORY.md

Backlog triage Part D: ROADMAP cleaned (161 -> 123 lines, 81 -> 42 KB): intentions re-sorted P2/P3/P4, each names its 00 row; 33 shipped/killed/closed/moved items + the pre-invite checklist -> ROADMAP-HISTORY; UPDATE-ARC collapsed; one_register_gate reads suffix ids (R-50b found, moved to OPEN-ITEMS; decoy seen red)

2026-10-03 09:22:30 +02:00

ROADMAP.md

Decisions 71-73 recorded before the work (ep0 copy keeps 8 weekly; tester-1 keys removed via registrar; token not rotated now) + R-831 token row, R-832 roadmap P4

2026-10-04 06:57:19 +02:00

SPEC-app-data-placement-2026-08-21.md

Correct the placement mis-framing, and file what we wrote down and never filed (R-368..R-375)

2026-08-22 11:18:08 +02:00

SPEC-r85-phase4-5-2026-07-26.md

2026-10-03 09:17:22 +02:00

STATUS-HISTORY.md

Plex2Shell impact on Felhom: verdict NOT REACHED; R-1241 (P1), R-1242 (P3) opened (register 186 -> 188)

2026-10-23 17:53:43 +02:00

README.md

documentation/backlog/

OPEN-ITEMS.md is the register of open work and the file to read first — it holds only what is open, one row per item, every row with a category, a severity, a state and an owner (the layout is at its top). CLOSED-ITEMS.md holds every finished row, compressed, with the commit that keeps its full text; a row moves there in the same commit that closes it (scripts/closed_register_gate.py RULE 3). ROADMAP.md holds intentions — features and spikes that do not exist yet — and ROADMAP-HISTORY.md the shipped and killed ones. An R-n id is minted once and never reused.

The other files in this folder — verdict per file (2026-10-03 triage)

File	Verdict
`SPEC-app-data-placement-2026-08-21.md`	KEEP — still referenced by open rows R-352 (placement still open) and R-368.
`SPEC-r85-phase4-5-2026-07-26.md`	KEEP as history — a spec of shipped work (R-85, agent v0.104.0). `CONTEXT.md` and `architecture/00-capability-map.md` link here.
`FOLLOWUP-nas-automount-guest-reboot-reassert.md`	FINISHED, kept in place — shipped in agent v0.84/v0.85 (CAMPAIGN-3). Not moved because `CONTEXT.md`, `controller/network-storage-nas.md` and `felhom-controller/CONTEXT.md` link to this path.

Moved to documentation/archive/ on 2026-10-03 (finished; nothing open refers to them):

FIX-M18-NOTES.md — dump re-validation every 5 min. FIXED in controller v0.62.0 @ f8afe5c (2026-06-14).
FIX-M19-NOTES.md — deriveStackName misattribution edge. FIXED in controller v0.62.0 @ 6bab68b (2026-06-14).
FOLLOWUP-golden-default-controller-tag.md — the golden baked a stale controller. FIXED in felhom-agent @ ceca355 (2026-07-03): build-golden.sh v2.0.0 makes the controller tag a mandatory argument. Evidence: ../audits/DRILL-golden-098-2026-07-03.md.
DIAGNOSIS-f9-storage-registration-gap-2026-06-14.md — a read-only diagnosis of June 2026, superseded by the shipped F9 fixes (controller CHANGELOG.md cites it as history).

The archive also holds OPEN-ITEMS-narratives-2026-10-03.md: the campaign write-ups, rulings and ranking paragraphs that sat between the register's tables until the triage, word for word.