admin f417cdede1 hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822 ...

Part A evidence (migration spike, sftp-written repo through the pinned rclone key) and the hub
red-proofs under documentation/audits/offsite-lock-build-2026-10-03/. Manifest bump follows after
the image is built and Secret/offsite-secret-key exists.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-03 16:57:04 +02:00

..

testdata/mail_goldens

hub v0.123.0: app_stopped_unhealthy (decision 28); 09 decisions 26-28 recorded

2026-09-24 11:38:13 +02:00

app_update_events_test.go

hub v0.120.0: app_update_undone/held reach the household, per app, in its language

2026-09-23 13:47:13 +02:00

backup_run_digest_test.go

hub v0.90.1 — the digest's per-app lines stop repeating the filesystem figures (R-182)

2026-08-03 13:54:02 +02:00

backup_target_message_test.go

hub v0.81.0 — E-2: backup_target_absent gets its own signal (ships first)

2026-07-29 07:55:18 +02:00

cooldown_tier_test.go

hub v0.78.0 — R-97a: whole-guest backup events, operator-only

2026-07-27 16:59:05 +02:00

dispatcher_box_reachability_test.go

hub v0.106.0: report loss of visibility into the off-site stores (R-339)

2026-08-18 19:27:33 +02:00

dispatcher_offsite_delivery_test.go

hub v0.72.0 — R-70 + R-71c: offsite delivery-state detector, card, stuck event, R-39(a)-guarded self-heal restage

2026-07-23 12:59:04 +02:00

dispatcher_recovery_test.go

hub v0.118.0: the household's e-mails follow the household's language (R-558 Part A)

2026-09-18 16:20:11 +02:00

dispatcher_test.go

hub v0.118.0: the household's e-mails follow the household's language (R-558 Part A)

2026-09-18 16:20:11 +02:00

dispatcher.go

hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822

2026-10-03 16:57:04 +02:00

language_test.go

hub v0.118.1: the test mail follows the language too (R-558)

2026-09-18 16:25:20 +02:00

mail_golden_test.go

hub v0.120.0: app_update_undone/held reach the household, per app, in its language

2026-09-23 13:47:13 +02:00

node_liveness_cooldown_test.go

hub v0.118.0: the household's e-mails follow the household's language (R-558 Part A)

2026-09-18 16:20:11 +02:00

operator_only_test.go

hub v0.79.0 — R-97c: make the operator-only claim true

2026-07-27 17:54:47 +02:00

r329_app_start_failed_test.go

hub v0.107.0: the hub rewrote a severity and said nothing (R-387); golden 0.223.0

2026-08-23 11:57:26 +02:00

r389_cooldown_grain_test.go

hub v0.123.0: app_stopped_unhealthy (decision 28); 09 decisions 26-28 recorded

2026-09-24 11:38:13 +02:00

r672_storage_cooldown_test.go

hub v0.124.0: a thin pool is critical at 90% (data or metadata), one alarm per pool per 6 h (R-672)

2026-09-24 16:26:17 +02:00

r723_first_hour_test.go

hub v0.126.0: fresh connect link from the old one (R-719); day-one mails (R-723); bind-page wording (R-725); volunteer guide current (R-722); ep0 cleanup and release evidence

2026-09-30 10:35:18 +02:00

recovery_unit_dispatch_test.go

hub v0.90.1 — the digest's per-app lines stop repeating the filesystem figures (R-182)

2026-08-03 13:54:02 +02:00

templates_offbox_test.go

hub v0.118.0: the household's e-mails follow the household's language (R-558 Part A)

2026-09-18 16:20:11 +02:00

templates.go

hub v0.123.0: app_stopped_unhealthy (decision 28); 09 decisions 26-28 recorded

2026-09-24 11:38:13 +02:00