felhom.eu/REPORT.md

REPORT — localisation slice 5: the catalog read path, the copy gate, and the pilot (R-560)

2026-09-20. Three repos touched: felhom-controller v0.257.0 (the read path), app-catalog-felhom.eu (freeze + gate + pilot), felhom.eu (this file, the architecture document, the register, STATUS, the audit). Hub, agent, ISO and website untouched.

What the operator has to do

Read the English of the three pilot apps — quoted in full in app-catalog-felhom.eu/REPORT.md — and say "go", or say what to change. Fifty more apps follow whatever is said. Ten minutes now against a day of rework later. This is the §16 default of the plan and it was taken: Part C is not started.

And, separately: raise the fleet floor to 0.257.0. Until it moves, only demo-hp can read an English app block at all. Nothing breaks if it waits.

What was proven, and how it was seen

Endpoint level. No browser exists on DooPlex, so every page was fetched with curl from inside the guest at the controller's container address, with the customer Host header and a real logged-in session — the same handlers and templates a browser drives, with only the drawing skipped.

claim	evidence
The English app pages show English catalog text	demo-hp on 0.257.0: privatebin, paperless-ngx, romm app pages, the Apps list, two deploy pages
The Hungarian did not move	the same seven pages in Hungarian, before and after the catalog push: byte-identical apart from the per-session CSRF token — equal byte counts and equal hashes once normalised
An old controller ignores the block	demo-felhom on 0.255.0: with the block synced (confirmed positively — the sync named the three apps and the block is in both the cache and the stack copy), pages hash identically before and after, and no parse warning in a 93-line log window that contains the sync's own lines
The gate can convict	33 decoy cases in the catalog repo, every one seen to convict or to pass as intended
The read path is not hollow	nine red-proofs in the controller, each seen to fail and then revert

What is still Hungarian on an English app page

Measured with an accent scan AND an ASCII-folded stem scan, each with a positive and a negative control. Three things; the first is correct.

1. The language picker's own „Magyar" button — a picker names each language in its own tongue.
2. The update badge „Naprakész" and its tooltip — R-589. Slice 1 listed it; slice 2 was to take it and closed without it.
3. The data-folder card's consequence sentence — R-590. It makes a promise about the customer's files, and the label above it is already English, so the line reads half and half.

The Apps list also shows fifty Hungarian descriptions: those are the apps nobody has translated yet.

Claims in the plan that turned out wrong

the plan said	measured
"835 strings and the table is the complete list of copy fields"	1 032 copy strings; the table omitted deploy_fields[].placeholder (13 of them) and counted only the strings with an accent
"832 with a Hungarian letter"	832 ✔
"three are ASCII-only Hungarian words — „Igen", „Nem", „Nincs""	~120 are ASCII-only Hungarian, and those three do not occur in this catalog at all. This is the one that chose an instrument: an accent-only gate passes „Aldomain" (53×) and „A szerver domain neve" (53×) inside an English block
"catalog copy reaches 13 templates"	four: dashboard.html (the app rows' second line), stacks.html (the Apps list), app_info.html (the app page, including the data-folder cards) and deploy.html. A fifth, app_export.html, reads .Stack.Meta.Subdomain — configuration, not copy. Five handler sites feed them
"no gate reads copy at all"	✔ correct — none did
"the sync is 15 min with no pin"	✔ correct; a manual trigger exists (POST /api/sync, the dashboard's "Sablonok frissítése") and was used
"yaml.Unmarshal is non-strict"	✔ correct, and stronger than stated: this repo constructs no yaml.Decoder at all, so there is no KnownFields anywhere that could be turned on
the line numbers (metadata.go L15/L123/L158/L316)	✔ all correct

Rows

Opened: R-589 (the update badge is Hungarian on an English page), R-590 (the data-folder card's backup promise is Hungarian on an English page), R-591 (Stack.Copy() deep-copies five Meta fields and not the new I18n map — safe today, which is why it is a row and not a fix), R-592 (three defects inside the new catalog gate, closed the same session, each found by its own decoy rather than by reading it).

Updated: R-560 — Parts A and B done, Part C waiting on the operator's read.

Register: 281 → 285 rows.

Documents changed here

• documentation/architecture/10-localisation.md — §7 rewritten from [DESIGN, proposed] to [FACT] measured, with the corrected numbers, the key-matching rules, and the gate's five checks; new §10.6 for the slice.
• documentation/backlog/OPEN-ITEMS.md — the four rows above, and R-560's progress.
• STATUS.md — the operator note, in plain language, with the one read that is being asked for.
• documentation/audits/i18n-slice5-2026-09-20/ — the captures from both boxes, the Hungarian parity table, the English leftover scan with its controls, and a README saying what was NOT proven.

Teardown, three layers

• Machine: nothing installed or removed on either demo box; no app deployed; no VM created. Guest 9201 on demo-hp was restarted onto the new controller image, which is the deploy itself.
• Host: the staged password file and the capture scripts were shredded from both Proxmox hosts and both guests; ls confirms they are gone.
• Hub: nothing. No floor change, no golden, no vouch, no appliance registration.

Both boxes left on Hungarian.