2.1 KiB
REPORT — the restore and backup holes, D43 = A, and the D44/D45 picks (2026-10-24 night, unattended)
Plain words first.
- A power cut during a restore of an app on a drive no longer brings old data back later (R-1251, the P1). Proven on Tester 1 with a real power-off and a drive that came back late.
- One wrong line in an app's backup settings no longer deletes its second-drive copy (R-1252). Proven on 9202.
- An export no longer overwrites a running restore's record (R-1253, proven on 9202); the hub saves a recovery package in one step (R-1254, tested, not deployed).
- BYO hosts keep their own SSH settings (your D43 = A, R-1257). Tested in the bundle's harness.
- The review's 32 notes have one line each with a pick: answer „all picks" or name the ones you disagree with.
- Nothing is released. Monday: controller v0.343.0, agent v0.165.0 + your vouch, hub v0.170.0.
Evidence and tables: documentation/audits/restore-holes-2026-10-24/README.md; the picks:
documentation/audits/review-round-2-2026-10-24/D44-D45-picks.md.
Commits: controller bb2809d, 062f9b4, 518a135, c9b4b82, e1613ae; felhom.eu dcf4f84c (hub) and this
commit (documents, register, STATUS, CONTEXT, evidence); felhom-agent c8d3c17, 4a1a849. CI by hash: in the final
report.
Register: before 207, after 208; opened 1 (R-1268), closed 0. R-1251/R-1252/R-1253/R-1257 → VERIFY (fixed on main, waits for the release); R-1254 → NARROWED (the hub half fixed); R-1265/R-1266 carry the picks; R-1267 extended.
Documents edited: 07 (the R-1251 rule after D22's paragraph; the R-1252 rule in §8.2a; a pointer in §6.5), 05
(the escrow transaction), 03 and 11 §1 (D43 = A). System poster: no fact on it changed (none of the four).
Instruction files: none edited.
Machines: Tester 1 and 9202 put back as found except leftover empty anonymous volumes of the R-1267 class (named in the audit). demo-hp: nothing provisioned; the catalog sweep's VM untouched. DooPlex, ep0, household boxes, the hub: not changed. No release, deploy, vouch, publish or catalog push.