Files
felhom.eu/documentation/audits/website-dashboard-2026-10-08/captions-claims.md
T

24 lines
2.8 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Dashboard pictures — every caption is a claim (2026-10-08)
Pictures: demo-hp's household guest 9201, controller **0.303.0** (the fleet's version), read only — the only change
was the household language switched to English for the English pictures and straight back to Hungarian (both
switches answered 302; the launcher read back `lang="hu"`, first sidebar item „Indítópult"). Taken from scratch guest
9202 with headless Chrome through 9201's traefik (`192.168.0.155`, host `felhom.enkisfelhom.hu`), 1440 × 900.
| Picture | Caption (hu / en) | Capability-map row | Status |
|---|---|---|---|
| `dashboard-start-*` | „Indítópult — minden alkalmazásod egy kattintásra." / „Launcher — every app you have, one click away." | E „Indítópult (app launcher) — one-tap grid of the household's openable apps" | IMPLEMENTED |
| `dashboard-apps-*` | „Alkalmazások — telepítés pár kattintással, és látod, mi fut és mi naprakész." / „Apps — install in a few clicks, and see what runs and what is up to date." | B „Deploy an app from the catalog" (PROVEN-LIVE); B „What VERSION a box is running, and whether it is behind the catalog" (PROVEN-LIVE) | PROVEN-LIVE |
| `dashboard-app-*` | „Egy alkalmazás oldala — mire jó, hova tedd a fájlokat, és hogyan kezdj hozzá." / „An app's page — what it is for, where your files go, and how to start." | B „App lifecycle: start/stop/restart/update/logs/remove/redeploy" (PROVEN-LIVE); the page's copy is the catalog's (`10-localisation.md` §7, slice 5); the drop-zone link is map E „File access via browser" (IMPLEMENTED, R-75) | PROVEN-LIVE / IMPLEMENTED |
| `dashboard-backups-*` | „Mentések — minden éjjel minden alkalmazás adatbázisa mentésre kerül, és ellenőrizzük." / „Backups — every night each app's database is backed up and checked." | C „Nightly DB dumps (postgres/mariadb autodiscovery), atomic writes" (PROVEN-LIVE); the picture shows the night's run at 04:16 with a table count per database | PROVEN-LIVE |
Not published (taken, kept off the site): the backups **overview** (on demo-hp it truthfully shows an amber „the whole-box
backup is on the system disk" notice — not a household's normal state), the **System** page (operator details: the
template source and the monitoring address), and the **phone** view (the launcher's share button runs off the right edge
at 390 px — R-907).
Privacy: `privacy-scan.txt` (per picture: e-mail, IPv4, long hex, the host's serial, password/recovery words, any domain
other than the test domain `enkisfelhom.hu`; positive control an app name known to be on the page — found on all 8).
The only long hex value is the page's hidden CSRF field, which is not visible in the picture. The two password-word hits
are help text („a jelszó a Beállítások oldalon", „password manager"), not a password.