felhom.eu/REPORT-day2-2026-10-08.md

# REPORT — 2026-10-08 (afternoon): the morning's four answers built, wger finished, one sheet of decisions

(`REPORT-day2-…` because another session — the website and mailer work — writes in this clone today.)

| Part | Result |
|---|---|
| **A** — Cloudflare as a row | **Done.** R-904 (P4, Security & access, owner operator, DEFERRED — after the first customers). Each fact cites `01`; „TLS ends at the edge" and „flood protection" are NOT written in `01` — said so in the row. |
| **B** — honest FAQ (R-900) | **Done and live** with your yes in chat. Both pages, visible text and structured data (website `b2dce901`). Live read-back: new sentence 2× per page, old line 0×. No other page makes the claim (ASCII search, control „Hetzner"). R-900 closed. |
| **C** — deletion times (R-901) | **Hub: done on main** (`05becb04`), ships tomorrow. **DooPlex job: written and tested, not installed** (`scripts/ep0-copy-gc/`, runbook updated; fail-safe guards added after the commit security review: partial list aborts, one deletion per run, HOLD file). Both times in the privacy draft. R-901 stays open until both are live — see D9. Found: `events` were already pruned at 90 days for everyone; the year bites `notification_log`, which had no deletion at all. Active customers' `notification_log` still has none (noted in the draft). |
| **D** — wger on 9202 (R-762) | **Done.** 9202: 2 workers, anon 246 MiB = 64 % of 384M, 0 kills, 0 restarts over 600 s, login/CSS/photo 200. Catalog `eec9a0d` (CI 1546 success). No ladder step applies (images unchanged — the writer refuses a same-digest re-test; `09` §5.4 renders the catalog template). Drill catalog written and reverted (decision 182). R-762 closed; R-905 opened (283 MB of rebuildable style files in every wger backup). |
| **E** — operator mail for old codes (R-304) | **Done on main**: controller `a40729a` (once a day per box, never the code), hub `5beedcce` (allowlisted, operator-only). Ships tomorrow — the controller needs the hub of the same day. |
| **F** — designs + sheet | **Done.** 8 design files + 1 combined; R-177 and R-298 closed with evidence; R-415 found LOST in the 2026-10-03 triage, re-filed, then FIXED on hub main (R-138 option B: no duplicate, nested or felhom.eu customer domain). Small fixes: R-717's two stale comments; R-298's eject/format button hidden on a backup-target drive. **Not done:** R-79 option A (~2 h, no decision needed — next session), R-554, R-462. |

**Rows: 131 before → 129 after. Opened 3 (R-904, R-415 re-filed, R-905). Closed 5 (R-900, R-177, R-298, R-415, R-762).**
(The brief said 130; the website session's R-903 made it 131 before this session started.)

**Rulings recorded first:** `09` §3 decisions 180–184.

**Waits for tomorrow's releases:**
- **hub:** R-243 alarm (morning), R-901 one-year deletion, R-304 `recovery_older_package`, R-415 domain guard.
- **controller:** morning's R-899 + R-304 honest message; afternoon's R-304 operator mail, R-298 button fix.
- **agent:** morning's R-899 + ring label + R-304 424 (nothing new this afternoon).
- **catalog:** already pushed (wger gunicorn; reaches a box at its next sync — no box runs wger).
- **DooPlex:** the `ep0-copy` removal job — D9.

**Machines:** demo-hp, demo-felhom, Tester 1: read only (two `storage.cfg`/`lsblk` reads by a design helper). 9202: wger
installed and removed through the product; catalog pointer restored (same `controller.yaml` sha256). Bench 9401: stopped,
as found. Hub: read only (three DB copies with `-wal`, each deleted). DooPlex: no change. No release, no deploy, no reboot,
no prune. The website changed only after your yes.

**CI (by head commit):** felhom.eu 1540, 1541, 1542, 1543, 1545 success; controller 1544 success; catalog 1546 success.
Controller job 1549 (`05e1292`, report-only) was LOST — 13.5 min, every step failed at one second, no log; the same
tree passed locally; re-run → success. Recorded in R-887 (its dated check is about exactly this). One push was refused once by the local hook (a site check caught the website session's half-saved page); re-run green,
pushed normally — no `--no-verify`.

**Decisions:** the sheet D1–D10 in `STATUS.md` („all as picked", or name the numbers you change). Full designs:
`documentation/audits/day-2026-10-08/`.