Files
felhom.eu/documentation/audits/DRILL-r102-tier2-unit-2026-08-31/phase4-destroy.log
T
admin c2de785bf2
gates / gates (push) Failing after 17s
R-102 + R-103 CLOSED (controller v0.229.0) — architecture, register, STATUS, drill evidence
07-backup-architecture: 6.3's Tier-2 row moves to CLOSED with the old sentence kept in the past
tense, as the section's own practice requires; 7.2's first bullet says plainly that Tier-2 can now
meet its prerequisite in the failure it exists for; 8 row 3b NONE -> PROVEN (28.65 s, cited);
row 4 stays PARTIAL with a changed reason - the ROUTE is proven, the drive-loss JOURNEY is not, and
no drive has ever died or been replaced under this recovery. 8.1's blanks updated per row.

6.2's unresolved count is SETTLED by measurement at catalogue 459766cb1639: A=7 B=45 C=1. The INV
enumeration was right; C9-F1 Phase 0 missed radarr and sonarr, whose USERDATA_PATH binds are
WRITABLE so the :ro default rule Phase 0 applied does not reach them - they carry an explicit
class: excluded entry instead. Class C is bentopdf. No catalogue file was changed.

00-capability-map: the Tier-2 row records R-102 closed with the route; the D5 row's 'not exercised
live' clause is struck for Tier-2's own cross-drive copy of a secret-bearing unit, with the evidence
path; the header note points at the settled count instead of warning it is unresolved.

Register: R-102, R-103 and their C9-F4 / C9-F1b aliases closed and compressed into CLOSED-ITEMS
(596 -> 593 lines, each naming git show 1623a4d5b5 for the original). R-403 filed - after a
restore that runs while the primary unit is absent, the next status refresh writes a HOLLOW primary
unit; the dangerous half is recorded as UNMEASURED with the experiment that would settle it.

R-242: sixth conviction of golden_currency_gate. THIS PUSH USES git push --no-verify, declared here
and in felhom-controller/REPORT.md - a BYPASS, not a waiver. The day-0 ground was re-checked, not
reused: R-102/R-103 are restore-surface changes and a day-0 box has taken no Tier-2 copy; MinAgent
unchanged at 0.129.0. OWED: bake a golden carrying 0.229.0, vouch it, raise the floor.

Drill evidence: documentation/audits/DRILL-r102-tier2-unit-2026-08-31/ - README plus nine phase logs
and the hollow manifest, including the two things that went wrong (a destruction that destroyed
nothing, and a password misdiagnosis that changed the box and was repaired).
2026-08-31 12:21:52 +02:00

33 lines
1.6 KiB
Plaintext

############ PHASE 4 (redo) — DESTROY the app's live data, for real ############
UTC 2026-08-31T10:01:46Z
NOTE: the first attempt used 'docker volume rm', which docker REFUSED because the stopped
containers still referenced the volumes. It printed nothing and destroyed nothing.
An unchecked exit code that looks like success is exactly the trap this drill tests for.
docmost Exited (1) 42 seconds ago
docmost-redis Exited (0) 42 seconds ago
docmost-postgres Exited (0) 29 seconds ago
--- sizes BEFORE the wipe
68989735 /var/lib/docker/volumes/docmost_docmost_postgres_data/_data
128 /var/lib/docker/volumes/docmost_docmost_storage/_data
49419992 /var/lib/docker/volumes/docmost_docmost_redis_data/_data
wiped docmost_docmost_postgres_data -> entries remaining: 0
wiped docmost_docmost_redis_data -> entries remaining: 0
wiped docmost_docmost_storage -> entries remaining: 0
--- sizes AFTER the wipe
0 /var/lib/docker/volumes/docmost_docmost_postgres_data/_data
0 /var/lib/docker/volumes/docmost_docmost_storage/_data
0 /var/lib/docker/volumes/docmost_docmost_redis_data/_data
--- PROOF OF LOSS through the OBSERVABLE, not the filesystem
1) the accented file:
(empty listing above = the file is gone)
2) the app's own database — start the DB container and ask it for the rows:
ERROR: relation "felhom_r102_discriminator" does not exist
LINE 1: SELECT count(*) FROM felhom_r102_discriminator;
^
^ an error or an empty database IS the proof: the rows cannot be read any more.
--- the PRIMARY unit is still aside:
ls: cannot access '/mnt/sys_drive/felhom-data/backups/primary/docmost': No such file or directory