Unattended pass via the controller API (Campaign-4 credential, real dashboard endpoints). Closes the v0.131.0 REPORT's "NOT live-validated" list: - 4P-2 F-S2 tier-2 appdata mirror byte-identical - 4P-3 F-S2 marker restore (resolved dir, additive-only) - 4P-4 storage page non-empty size - 4P-5 F-S3 scope=app migration round-trip, no ghost dir, no WARN New finding F-6C-1 (MEDIUM): tier-2 to an NFS target fails (rsync -a chown). PHASE 3 (browser) + 4-deep + Accept #1 deferred to a supervised/deep-budget 6D pass. No code shipped; paperless torn down; no credential/R/blob committed.
3.5 KiB
felhom.eu — task reports
Overwrite this file with a summary of the most recent task only (uniform with the other repos; not cumulative). The cumulative hub history lives in hub/CHANGELOG.md; the scripts history lives in scripts/CHANGELOG.md.
CAMPAIGN-6C — supervised planes + v0.131.0 F-S2/F-S3 live acceptance — 2026-07-14
controller 0.132.0 both guests · agent 0.88.0 · hub 0.54.0 · findings-only, no production code · full
audit: documentation/audits/CAMPAIGN-6C-2026-07-14.md · ledger 180:~/campaign6/6C-P0.md (seed
6C-20260714)
Continuation of CAMPAIGN-6B. Ran unattended via the controller's own API (Campaign-4 credential, out-of-band; session cookie + CSRF; the exact endpoints the dashboard invokes — the live-test-real-flow proxy). No credential/R/blob committed; cookie wiped at teardown.
Verdict: GREEN for the v0.131.0 acceptance
PHASE 4-paperless — all five legs PASS, which fully closes the "NOT live-validated" list in the v0.131.0 controller REPORT (deferred there to a supervised session):
- 4P-1 — deployed paperless-ngx on felhom-usb (the appdata-mismatch app: stack
paperless-ngx, dirappdata/paperless), ingested 3 varied docs through the real consume flow (OCR + PDF/A) →appdata/paperless/media= 11 files / 40 587 B. - 4P-2 (F-S2 tier-2 backup) — the appdata leg mirrors
appdata/paperlesstosecondary/paperless-ngx/appdatabyte-identical (11-file sha256 diff empty). Pre-state confirmed the pre-fix shape: secondary held recovery-unit only, no appdata. - 4P-3 (F-S2 marker restore) — UI file-restore targets the resolved live dir
(
appdata/paperless, not…/paperless-ngx), additive-only, 1 file restored byte-identical, existing file untouched, app healthy. - 4P-4 (storage page) — paperless-ngx shows a non-empty size (39.6 KB, from the resolved dir).
- 4P-5 (F-S3 scope="app" migration) — usb→flash then flash→usb: full 11-file manifest identical
each way, source cleaned, no
appdata/paperless-ngxghost dir, nodeclared appdata absentWARN, app healthy (45 s each leg).
New finding
- F-6C-1 (MEDIUM) — tier-2 auto-target = NFS share fails at the recovery-unit leg:
rsyncMirror'srsync -a(-o -g) chown is refused on the NFS export (root_squash, exit 23), soRunTier2records failure and the appdata leg never runs. Real drives (usb/flash) are unaffected; not an F-S2 regression. Suggest--no-owner --no-group/--chown(or exclude NFS from the auto tier-2 pick).
Deferred to a 6D / supervised pass
- PHASE 3 browser planes (escrow wizard typed-back, session/CSRF UX, hub 8-tab ring) — need a rendered browser with an operator present (browser-select, on-screen typed-back, password at the login screen); not unattended-automatable.
- PHASE 4-deep (F7 live 6 s cut, restic mid-run self-heal, offsite restore-to-verify) and
Acceptance #1 (≥1 GiB userdata
.fabfull-circle) — need large-dataset/timed-cut setup budget; the C6B-F1.fabfix is already code + live byte-compare verified in the v0.130.0 REPORT. - 5-rest dead-app alert — inconclusive (a clean
docker stopis not a crash; the correct trigger iskill -9/OOM). Observation logged for 6D.
Box state: paperless-ngx torn down (real remove flow + scratch cleanup); controller 0.132.0 healthy; other 6 apps untouched. Viktor rotates the controller + hub credentials after the campaign.