felhom.eu/REPORT-day2-2026-10-08.md

REPORT — 2026-10-08 (afternoon): the morning's four answers built, wger finished, one sheet of decisions

(REPORT-day2-… because another session — the website and mailer work — writes in this clone today.)

Part	Result
A — Cloudflare as a row	Done. R-904 (P4, Security & access, owner operator, DEFERRED — after the first customers). Each fact cites 01; „TLS ends at the edge" and „flood protection" are NOT written in 01 — said so in the row.
B — honest FAQ (R-900)	Done and live with your yes in chat. Both pages, visible text and structured data (website b2dce901). Live read-back: new sentence 2× per page, old line 0×. No other page makes the claim (ASCII search, control „Hetzner"). R-900 closed.
C — deletion times (R-901)	Hub: done on main (05becb04), ships tomorrow. DooPlex job: written and tested, not installed (scripts/ep0-copy-gc/, runbook updated; fail-safe guards added after the commit security review: partial list aborts, one deletion per run, HOLD file). Both times in the privacy draft. R-901 stays open until both are live — see D9. Found: events were already pruned at 90 days for everyone; the year bites notification_log, which had no deletion at all. Active customers' notification_log still has none (noted in the draft).
D — wger on 9202 (R-762)	Done. 9202: 2 workers, anon 246 MiB = 64 % of 384M, 0 kills, 0 restarts over 600 s, login/CSS/photo 200. Catalog eec9a0d (CI 1546 success). No ladder step applies (images unchanged — the writer refuses a same-digest re-test; 09 §5.4 renders the catalog template). Drill catalog written and reverted (decision 182). R-762 closed; R-905 opened (283 MB of rebuildable style files in every wger backup).
E — operator mail for old codes (R-304)	Done on main: controller a40729a (once a day per box, never the code), hub 5beedcce (allowlisted, operator-only). Ships tomorrow — the controller needs the hub of the same day.
F — designs + sheet	Done. 8 design files + 1 combined; R-177 and R-298 closed with evidence; R-415 found LOST in the 2026-10-03 triage, re-filed, then FIXED on hub main (R-138 option B: no duplicate, nested or felhom.eu customer domain). Small fixes: R-717's two stale comments; R-298's eject/format button hidden on a backup-target drive. Not done: R-79 option A (~2 h, no decision needed — next session), R-554, R-462.

Rows: 131 before → 129 after. Opened 3 (R-904, R-415 re-filed, R-905). Closed 5 (R-900, R-177, R-298, R-415, R-762). (The brief said 130; the website session's R-903 made it 131 before this session started.)

Rulings recorded first: 09 §3 decisions 180–184.

Waits for tomorrow's releases:

• hub: R-243 alarm (morning), R-901 one-year deletion, R-304 recovery_older_package, R-415 domain guard.
• controller: morning's R-899 + R-304 honest message; afternoon's R-304 operator mail, R-298 button fix.
• agent: morning's R-899 + ring label + R-304 424 (nothing new this afternoon).
• catalog: already pushed (wger gunicorn; reaches a box at its next sync — no box runs wger).
• DooPlex: the ep0-copy removal job — D9.

Machines: demo-hp, demo-felhom, Tester 1: read only (two storage.cfg/lsblk reads by a design helper). 9202: wger installed and removed through the product; catalog pointer restored (same controller.yaml sha256). Bench 9401: stopped, as found. Hub: read only (three DB copies with -wal, each deleted). DooPlex: no change. No release, no deploy, no reboot, no prune. The website changed only after your yes.

CI (by head commit): felhom.eu 1540, 1541, 1542, 1543, 1545 success; controller 1544 success; catalog 1546 success. Controller job 1549 (05e1292, report-only) was LOST — 13.5 min, every step failed at one second, no log; the same tree passed locally; re-run → success. Recorded in R-887 (its dated check is about exactly this). One push was refused once by the local hook (a site check caught the website session's half-saved page); re-run green, pushed normally — no --no-verify.

Decisions: the sheet D1–D10 in STATUS.md („all as picked", or name the numbers you change). Full designs: documentation/audits/day-2026-10-08/.