felhom.eu/REPORT-app-guides-2026-10-15.md

REPORT — app user guides, night of 2026-10-15 (felhom.eu side)

The full report is app-catalog-felhom.eu/REPORT.md. This file is the felhom.eu half only (a second session writes REPORT-<topic>.md, never the shared REPORT.md).

• Spec saved: documentation/audits/app-guides-2026-10-15/TASK.md (it existed only in the operator's message).
• Evidence: documentation/audits/app-guides-2026-10-15/ — A/ pilot (label checks, Plex box check, the controller loader on the five), B/ every other app (label check + draft per app, the loader over all 62 shown guides), tools/ (labelcheck, apply_guide, validate_draft, apply_batch), part0-redproofs.txt, credential-guard-redproof.txt.
• Rows opened: R-1085, R-1086, R-1089, R-1090, R-1091, R-1092. R-1088 (another session's row) extended. None closed.
• Code: scripts/read_credential.py + its test — the same-file guard (R-1088), red-proved.
• STATUS: one „works" line, D11 and D12, and the „read the Plex and Sonarr guide" line.

Morning of 2026-10-16 — the owed rendering check

• The operator restored ~/.config/credentials from backup. CC checked the key names only (17 keys); no value read.
• Rendering check ran, 07:20 UTC, through https://felhom.enkisfelhom.hu (demo-hp 9201, controller 0.317.0): login 302 + session; /apps/plex/guide and /apps/sonarr/guide, Hungarian and ?lang=en. Each page: 4 data-guide-section, 1 FAQ block with 6 entries, data-guide-checked equal to the catalog. Every rendered string (33 Plex, 35 Sonarr, per language) equals the catalog text on main (ec864b5); a changed line in memory was seen to fail the compare. Evidence: documentation/audits/app-guides-2026-10-15/render-check-2026-10-16.txt.
• Read only: nothing installed, removed, restarted or set; logged out after. Teardown: provisioned nothing.
• R-1088 updated, not closed: restore and check done; the hub token rotation is still the operator's.
• STATUS: the „read the guides" line now says the robot check passed; the R-1088 line now asks for the rotation only.

2026-10-16 — the operator's answers applied

• Token rotated (operator). CC checked the token in the credentials file works on the hub: /hosts and /configuration 200 with it, 302 without it. R-1088 CLOSED.
• D11 → stop advising the change. Catalog 5cc9e0e: qBittorrent's first step now says keep the generated password; qBittorrent and Transmission field descriptions no longer say „change it later". R-1086 CLOSED.
• D12 → reword. Catalog 5cc9e0e: Cal.com names Apple Calendar or CalDAV, not Google/Outlook; BentoPDF says the browser does the work and the file stays on the device. R-1091 stays open for its other items; (1) and (2) are marked done.
• Register: 178 → 176 rows; 0 opened, 2 closed (moved to CLOSED-ITEMS.md). STATUS: D11, D12 and the token line removed.
• Gates: catalog --fast and 12 test files green; felhom.eu repo_gates.py --fast green before the push.