felhom.eu/documentation/audits/gate-restore-2026-10-15/newbox

R-1052 — a brand-new box installed from the public ISO reaches the floor by itself (2026-10-15)

Throwaway customer Tester3 (domain tester3.test, a reserved name that never resolves; no off-site, no PBS-DR — nothing on ep0). VM 9301 on demo-hp from ISO 1.29.0 (checksum = the published one), the graphical installer driven by qm sendkey; the household's path: the mailed bind link + pairing code + owner phrase, then the setup code.

• 02-timeline.txt — every step with its time. The golden 0.313.0 box moved to the floor 0.314.0 by itself 2 min 52 s after the bind (initiated_by „auto-floor"), before the household claimed the dashboard.
• screens/ — the installer and the console (pairing banner, then „the box is linked").
• 03-bind.txt, 05-claim.txt — the bind page's answer; the claim's 302 (the first try was a 200 refusal: the claim form has its own CSRF field).
• 06-version-on-the-box.txt — the box's own /api/selfupdate/status: a second channel beside the hub's reports.
• 07-poweroff.txt — the household's „turn off", recorded by the hub as deliberate (no alarm mails).
• 99-teardown.txt — VM 9301 destroyed. Left for the operator (session only): delete customer Tester3.

Not walked: SSH or a console login on the new host — Felhom replaces the root password at first boot (G1, vaulted in the hub), so the installer's password stops working; the vault was not opened for this.