felhom.eu/REPORT-day-2026-10-08.md

REPORT — 2026-10-08 (day): six parts, tonight's kernel night untouched

(Written as REPORT-day-2026-10-08.md because another session worked in this clone today — the website refresh.)

Part	Result
A — a daytime press never cancels the night (R-899)	Done on main, ships tomorrow. Controller 6d07ca2 (ledger; red-proved), agent 4c69c25 (no OS leg after a press; the "ring 1" label fixed). The household "tonight" mail case is removed by the rule; no hub change needed.
B — the old recovery code (R-304)	Honesty fix done on main, ships tomorrow — but in the agent (91b9405) and the controller (75b3b39), not the hub: the hub never sees the code (zero-knowledge), so it cannot check a row; it already reports what it withheld. Design with two questions: documentation/audits/day-2026-10-08/design-R-304.md.
C — alarm when a box never backs up off-site (R-243)	Done on hub main b119301c, ships tomorrow. 7 days (decision 179). Will fire once for Tester 2 after the deploy. 08 §6.3 updated.
D — wger's real web server (R-762)	Half done. Bench: 2 workers, 43–44 % memory, 0 kills, 0 restarts in 10 min, login/CSS/photo 200. 9202 not done: the drill-catalog write was refused by the permission check; nothing pushed. No ladder step applies (same images).
E — legal drafts (R-813)	Done, not published. documentation/legal/: ÁSZF, privacy notice, imprint, consent text; 98 placeholders, 20 guesses listed. Two findings filed (R-900, R-901).
F — DooPlex backup failure mail (R-232 a)	Done with your yes. One test mail reached the inbox; no backup started. documentation/audits/day-2026-10-08/r232/.

Rows: 127 before → 130 after. Opened 2 (R-900, R-901). Closed 0. (The third new row, R-902, is the parallel website session's.)

Waits for tomorrow's releases:

• controller: R-899 (ledger, trigger=manual), R-304 (424 → "we do not know", hu + en). MinAgent unchanged.
• agent: R-899 (no OS leg after a press; after-boot ring label), R-304 (424 older_unchecked). Binary only.
• hub: R-243 offsite_escrow_pending (expect one Tester 2 mail).
• catalog: nothing (Part D not pushed).

Operator rulings recorded first (09 §3): 177 (R-899 option A), 178 (today: no touch of the kernel night). CC's pick: 179 (R-243's 7-day line — operator may reverse).

Machines: demo-hp, demo-felhom, Tester 1: read only (two log/state reads on demo-hp). Bench 9401: started and stopped again by the Part D helper; its project removed. 9202: read only. DooPlex: Part F only (one script, one key file). Hub: read only (a copy of its database, with the -wal, read and deleted). No release, no deploy, no reboot, no prune.

CI (by head commit): controller 1528, 1531; agent 1529, 1530; felhom.eu 1532 — all success.

Seen, not fixed: the recovery screen's 14 older messages are Hungarian-only (appended to R-516). A side note from Part D: 9202's recipe-importer was removed by something else between 08:0x and 08:35 — not by this session.

Decisions for you

1. Part D on 9202 — may CC write to the shared drill catalog (bring it up to date, un-hide wger there, point 9202 at it), as the 2026-10-06 sessions did? My pick: yes — it is a test catalog, and wger stays hidden on the real one. If you do nothing: wger keeps the slower development server, and it stays hidden.
2. R-304 — keep the promise "old backups stay recoverable" as worded, and add an operator mail when a household's code opens an old package? My pick: yes to the mail (small; it makes "contact support" true in practice). If you do nothing: nothing is built; you hear only when a household writes to you.