admin dfd854474e drill 0.243.0 complete: 0 interventions, the connect e-mail proven, NOT ready for a volunteer ...

The automatic connect e-mail is proven with a real mailbox: the host record was
deleted at 12:22:59Z and the mail reached the customer at 12:23:00Z, one second
later, with selfbind_link_sent (host delete) on the timeline. The requirement was
two minutes. The hub refuses to delete an ONLINE host with no override, so the
record had to fall stale first — that wait is part of the proof.

Interventions: 0. Every P1 fix this drill set out to prove held on a fresh box.
The verdict is still no, for a new reason: a one-drive box with no off-site tier
keeps none of the household's own files in any backup, the page says otherwise,
and the restore that should save them makes it worse (R-537, R-538).

Teardown, three layers, stated. Customer tester-1 kept; RESET never used; nothing
on the off-site server written or removed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-09-16 14:27:04 +02:00

..

_design-review.md

fix: update repo-name refs after deploy-felhom-compose -> felhom-controller rename

2026-06-08 14:03:13 +02:00

_hub-review.md

moved documentation to felhom.eu

2026-06-08 13:50:14 +02:00

_recovery-inventory-2026-07-28.md

hub v0.88.0 — the WAL that never was (R-172)

2026-08-02 21:06:29 +02:00

00-capability-map.md

drill 0.243.0 complete: 0 interventions, the connect e-mail proven, NOT ready for a volunteer

2026-09-16 14:27:04 +02:00

01-topology-and-trust.md

doorstep: console is Felhom's (ISO 1.27.0 source), passphrase hand-over copy (hub 0.113.0 source), rulings

2026-09-14 17:26:53 +02:00

02-controller-module-map.md

docs: supervisor (03), node_* ruling (08, CONTEXT), per-tier page + tier skip (07), self-bind triggers + PBS-DR lifecycle (05), settings after install (02), park + No TLS Verify runbooks, volunteer prerequisites

2026-09-15 10:42:53 +02:00

03-host-agent.md

docs: supervisor (03), node_* ruling (08, CONTEXT), per-tier page + tier skip (07), self-bind triggers + PBS-DR lifecycle (05), settings after install (02), park + No TLS Verify runbooks, volunteer prerequisites

2026-09-15 10:42:53 +02:00

04-control-plane-authorization.md

hub v0.115.0: host_* mails skip the quiet hour (ruling 2, R-529); ruling 1 recorded (CC may sign agent_update until the first paying customer)

2026-09-16 10:53:22 +02:00

05-hub-architecture.md

docs: supervisor (03), node_* ruling (08, CONTEXT), per-tier page + tier skip (07), self-bind triggers + PBS-DR lifecycle (05), settings after install (02), park + No TLS Verify runbooks, volunteer prerequisites

2026-09-15 10:42:53 +02:00

06-offsite-connectivity.md

One register, enforced by a gate; closed work compressed into siblings (R-376..R-378)

2026-08-22 12:13:54 +02:00

07-backup-architecture.md

docs: supervisor (03), node_* ruling (08, CONTEXT), per-tier page + tier skip (07), self-bind triggers + PBS-DR lifecycle (05), settings after install (02), park + No TLS Verify runbooks, volunteer prerequisites

2026-09-15 10:42:53 +02:00

08-alarm-ladder.md

hub v0.115.0: host_* mails skip the quiet hour (ruling 2, R-529); ruling 1 recorded (CC may sign agent_update until the first paying customer)

2026-09-16 10:53:22 +02:00

09-update-architecture.md

evening: rules file in place; R-483 CLOSED (catalog, operator-confirmed); R-479 CLOSED (controller v0.241.0, proven live); R-481 blocked on the one-host-one-customer model; R-491 filed

2026-09-13 21:57:47 +02:00

where-felhom-stands-2026-08-09-snapshot.html

Verify the standing picture against source: 12 downgrades, and the decay ran both ways

2026-08-09 18:40:49 +02:00

where-felhom-stands.html

where-felhom-stands: bring the picture up to 2026-08-22, and stop the page disagreeing with its source

2026-08-22 10:36:42 +02:00

where-felhom-stands.yaml

where-felhom-stands: bring the picture up to 2026-08-22, and stop the page disagreeing with its source

2026-08-22 10:36:42 +02:00