felhom.eu

testdata

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

api_tokens.go

hub v0.152.0: operator access tokens with scopes (09 §3 decision 251, operator 2026-10-15 11:38)

2026-10-15 12:20:35 +02:00

app_log_residue_test.go

hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33

2026-10-12 14:54:14 +02:00

app_log_residue.go

hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33

2026-10-12 14:54:14 +02:00

app_update_seed_test.go

hub v0.120.0: app_update_undone/held reach the household, per app, in its language

2026-09-23 13:47:13 +02:00

appliance.go

hub v0.66.0 + ISO v1.20.0: customer self-bind (R-27 slice 1)

2026-07-17 23:56:53 +02:00

config_version_test.go

hub v0.26.0: pull-based config delivery + retire inbound GUI controls

2026-06-30 21:49:33 +02:00

customer_delete_purge_test.go

hub v0.60.1: host deletion demotes escrow custody (never destroys) + customer-delete purge point + S6b obsolete

2026-07-17 11:25:38 +02:00

customer_delete.go

hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33

2026-10-12 14:54:14 +02:00

customer_reset_test.go

hub v0.93.0: the retention keeps the key it was built to keep (R-198) + three honesty fixes (R-197, R-192, R-196)

2026-08-04 12:56:58 +02:00

customer_reset.go

hub: operator actions for a box (D1, R-314/R-279/R-177, decision 185)

2026-10-08 15:17:06 +02:00

declared_floor_test.go

hub v0.112.0: a floor carries a declared MinAgent past the golden (R-472)

2026-09-13 16:47:11 +02:00

deleted_customer_audit_test.go

R-901: a deleted customer's audit rows go 1 year after the deletion (hub, unreleased); ep0-copy removal job written, not installed (decision 181); both times in the privacy draft

2026-10-08 09:54:39 +02:00

deleted_customer_audit.go

R-901: a deleted customer's audit rows go 1 year after the deletion (hub, unreleased); ep0-copy removal job written, not installed (decision 181); both times in the privacy draft

2026-10-08 09:54:39 +02:00

deliberateoff.go

Hub v0.149.0: clamp a future deliberate-off time; hold a customer only when all its hosts are off (R-998)

2026-10-13 19:52:12 +02:00

disk_summary_read_failed_test.go

hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33

2026-10-12 14:54:14 +02:00

domain_conflict.go

R-415 fixed on hub main (no duplicate/nested/felhom.eu customer domain; R-138 option B); R-762 closed (9202 proven, catalog eec9a0d); R-905 opened (wger static in backups); decision sheet D10; 130 -> 129

2026-10-08 10:19:39 +02:00

dr_recipe_test.go

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

dr_recipe.go

R-109 + R-122: the recipe assembly stops dropping sections (hub v0.83.0)

2026-07-30 13:13:56 +02:00

drtier_backfill_test.go

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

escrow_abandon_scope_test.go

hub v0.163.0: a rebuilt box gets the household's sealed package back (R-1176); one run per daily job on clock-change days (R-1183); a scoped abandonment purge (R-1182); the new-link page says the old box is still linked (R-1203)

2026-10-21 13:36:45 +02:00

escrow_carry_test.go

hub v0.163.0: a rebuilt box gets the household's sealed package back (R-1176); one run per daily job on clock-change days (R-1183); a scoped abandonment purge (R-1182); the new-link page says the old box is still linked (R-1203)

2026-10-21 13:36:45 +02:00

escrow_carry.go

hub v0.163.0: a rebuilt box gets the household's sealed package back (R-1176); one run per daily job on clock-change days (R-1183); a scoped abandonment purge (R-1182); the new-link page says the old box is still linked (R-1203)

2026-10-21 13:36:45 +02:00

escrow_identity_retention_test.go

R-105 (decision 169): retire the never-built slim DR record fields (no writer, no reader); 05 §9/§11, 06 §3.5 corrected

2026-10-07 10:21:25 +02:00

escrow_stale_retired_test.go

hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33

2026-10-12 14:54:14 +02:00

escrow_superseded_test.go

hub v0.93.0: the retention keeps the key it was built to keep (R-198) + three honesty fixes (R-197, R-192, R-196)

2026-08-04 12:56:58 +02:00

floor_declared.go

hub v0.112.0: a floor carries a declared MinAgent past the golden (R-472)

2026-09-13 16:47:11 +02:00

floor_source_test.go

hub v0.45.0: floor-UI separation + effective-floor source + per-box MinAgent conditional floor

2026-07-11 15:33:14 +02:00

floor_test.go

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

host_delete_demote_test.go

hub v0.93.0: the retention keeps the key it was built to keep (R-198) + three honesty fixes (R-197, R-192, R-196)

2026-08-04 12:56:58 +02:00

host_delete_test.go

hub v0.93.0: the retention keeps the key it was built to keep (R-198) + three honesty fixes (R-197, R-192, R-196)

2026-08-04 12:56:58 +02:00

host_oob_decode_test.go

hub v0.99.0 — the hub can see whether the operator can get in (R-260); G-1 gate closes, R-247 closes

2026-08-08 08:47:02 +02:00

host_oob.go

hub v0.99.0 — the hub can see whether the operator can get in (R-260); G-1 gate closes, R-247 closes

2026-08-08 08:47:02 +02:00

host_recovery_test.go

hub v0.84.0 — break-glass console credential on the host page

2026-07-31 08:19:36 +02:00

host_recovery.go

hub v0.157.0: app_definition_refused (R-971), the vault time moves on a re-vault (R-954), the hub's own snapshot count (R-895 slice); uninstall knows felhom-thin-check

2026-10-17 16:27:51 +02:00

host_test.go

hub: shared host_detail_body sub-template + customer Host tab (v0.47.0 part 3)

2026-07-11 21:17:44 +02:00

language_test.go

hub v0.118.0: the household's e-mails follow the household's language (R-558 Part A)

2026-09-18 16:20:11 +02:00

logbundle_test.go

hub v0.46.0: observability pass — per-box log pulls, bundle custody, 72h TTL + secret gate

2026-07-11 16:57:47 +02:00

logbundle.go

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

logtail.go

hub v0.43.0: remote app-log diagnostics — copyable issues + context + on-demand log tails + range/dismissal fixes

2026-07-10 16:03:32 +02:00

managed_floor_test.go

hub: the held-floor REASON must match the CAUSE (CAMPAIGN-11 follow-on)

2026-08-05 17:53:24 +02:00

notifications_seed_test.go

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

offsite_keys.go

hub R-435: each clean-up window explains one fall only; a window stuck open past its deadline explains nothing (security review)

2026-10-08 15:17:05 +02:00

offsite_restage_test.go

R-204 item 4 (hub half): the hub answers a rebuilt box's request (hub v0.96.0)

2026-08-05 10:48:18 +02:00

offsite_seal_test.go

hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822

2026-10-03 16:57:04 +02:00

offsite_seal.go

hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822

2026-10-03 16:57:04 +02:00

offsite_snapshots.go

Hub v0.158.0 code (built, NOT deployed): agent-only vouch, R-895 snapshot alarms, the hub's own 90-day access log (R-1140 A); installer --rotate-recovery-only (R-1141); 02/03/05/09 + break-glass

2026-10-17 23:31:34 +02:00

opactions_test.go

hub: operator actions for a box (D1, R-314/R-279/R-177, decision 185)

2026-10-08 15:17:06 +02:00

opactions.go

hub: operator actions for a box (D1, R-314/R-279/R-177, decision 185)

2026-10-08 15:17:06 +02:00

os_updates.go

hub v0.143.0 (code): the kernel lane — the day-before household mail, the night instruction, the operator's kernel set (R-836, decision 172)

2026-10-07 15:34:14 +02:00

pbsdr_test.go

hub: R-39 core — stamp a secret GENERATION into the pbs_dr descriptor

2026-07-21 09:52:04 +02:00

pbsdr.go

R-879: seal box API keys, owner passphrases, controller keys and PBS-DR tokens at rest

2026-10-05 21:45:04 +02:00

pragma_test.go

hub v0.88.0 — the WAL that never was (R-172)

2026-08-02 21:06:29 +02:00

r105_retired_fields_test.go

R-105 (decision 169): retire the never-built slim DR record fields (no writer, no reader); 05 §9/§11, 06 §3.5 corrected

2026-10-07 10:21:25 +02:00

r133_recovery_seal_test.go

hub v0.135.0: CSRF on the Basic-auth path (R-135), console passwords sealed at rest (R-133), boxes left behind listed and alarmed (R-604, R-530), no-e-mail banner (R-508)

2026-10-05 11:12:56 +02:00

r366_escrow_key_change_test.go

R-366: the hub retains the escrow when the whole-guest backup key changes

2026-10-06 20:45:00 +02:00

r435_windows_between_test.go

hub R-435: each clean-up window explains one fall only; a window stuck open past its deadline explains nothing (security review)

2026-10-08 15:17:05 +02:00

r581_newest_report_test.go

hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

2026-10-05 19:43:37 +02:00

r879_box_seal_test.go

R-879: roll-back command felhom-hub -unseal-box-secrets

2026-10-05 21:45:04 +02:00

r879_box_seal.go

R-879: roll-back command felhom-hub -unseal-box-secrets

2026-10-05 21:45:04 +02:00

r954_revault_set_at_test.go

hub v0.157.0: app_definition_refused (R-971), the vault time moves on a re-vault (R-954), the hub's own snapshot count (R-895 slice); uninstall knows felhom-thin-check

2026-10-17 16:27:51 +02:00

selfbind.go

burn-down Part B: 14 small rows fixed and closed across four repos (306 -> 292); no :latest in the hub build; gate list pinned; closed-id duplicates refused; R-262 subset pinned

2026-10-05 17:10:38 +02:00

snapshot.go

hub v0.136.0: nightly VACUUM INTO snapshot, keep 2 (R-173 decision A); hub PVC 2Gi + Longhorn default group; 09 rulings 125-127; 05 §16.3

2026-10-05 14:28:30 +02:00

spoiled_tags_test.go

hub v0.155.0: the floor can never deliver a withdrawn controller build (R-1085); RomM/Ghost evidence

2026-10-16 12:24:39 +02:00

spoiled_tags.go

hub v0.155.0: the floor can never deliver a withdrawn controller build (R-1085); RomM/Ghost evidence

2026-10-16 12:24:39 +02:00

store.go

hub 0.164.0 (unreleased): host_swap_short / host_swap_ok operator alarm from the agent's host and guest swap numbers (R-1192 follow-up); wire gate allowlists guests.spec.swap_bytes

2026-10-21 21:55:15 +02:00

telemetry_test.go

hub v0.43.0: remote app-log diagnostics — copyable issues + context + on-demand log tails + range/dismissal fixes

2026-07-10 16:03:32 +02:00

telemetry.go

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

wg_endpoints_test.go

hub: offsite multi-endpoint management UI (v0.47.0 part 5)

2026-07-11 21:35:24 +02:00

wg_operator_test.go

feat(hub): operator OOB peer + oob_peer_ip desired-state merge (H1 Part 1)

2026-07-05 22:08:06 +02:00

wg_operator.go

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

wg_test.go

hub: S2 store — host-bound WG peers (register/re-key/adopt), one-per-host index, BumpHostDesired

2026-07-04 00:39:24 +02:00

wg.go

hub: offsite multi-endpoint management UI (v0.47.0 part 5)

2026-07-11 21:35:24 +02:00