Files
felhom.eu/documentation/audits/d63-2026-10-29
..

D63 + D62 live proofs — Tester 1, 2026-10-29 (attended)

Test build 0.347.0-rc.1-d63fault = controller e3fce09 built with -tags faultinject on top of the local release candidate 0.347.0-rc.1 (never pushed; removed from the box after). The release image carries no fault switch (grep -c "FAULT INJECTED": 0 on 0.347.0-rc.1, 2 on the test image). Driver: d63_live.py (box_walk helpers).

File What it shows
run-setup.log, run-setup2.log first setup tries. A hand-edited compose at "3.8.0" kept 3.8.1's digest, and the backup refused the app (R-645: it ran a version other than its pin) — so no unit. Both reverted. These runs pushed one backup_run_failures event (Radicale not protected off-site) — caused by this setup.
run-setup3.log the real setup: Radicale backed up at its catalog 3.8.1 (local unit + off-site snapshot 78002a51).
run-pull.log the off-site snapshot pulled to the restore scratch (the wizard's two steps).
run-h4.log, run-h4b.log, run-h4c.log failed seeds: 401 from Radicale. Cause: the harness, not the app — the generated login lives only in the deploying process, a new process sent an empty password. NOT 3.8.0 (an early guess, withdrawn).
run-h4d.log H4 proven: live 3.8.0 (true digest 0d60d544…), snapshot 3.8.1; fault after the compose write; the live definition written back before the start; app on 3.8.0, no hold, T1 + T2 read back.
run-d62.log first D62 try: the script typed the wrong name (a parsing bug in the script) → 400; its "copy gone" line came from a finder that could not see /mnt/sys_drive (wrong).
run-d62b.log D62 proven: the list line with the date and „automatikusan törlődik", the warning text, wrong name 400, right name 200, the copy gone, the log line; the hub event 400 (hub 0.174.1 does not know the type).
run-h5.log H5's failed stop proven: busy volume not written into; the put-back's stop failed; nothing put back; copy kept; app held; the held copy's button off. Its operator mail text is wrong for this case → R-1340.
run-teardown.log, tester1-after.txt the app removed; controller back on 0.346.1; test image removed; 15 anonymous volumes (R-1267's PrivateBin class, made by this session's five backup runs) removed by name — 268 volumes, as before. The Radicale restore hold record stays (clearing a hold is the operator's).
controller-full.log the controller's whole log 07:50 → teardown.