felhom.eu/documentation/audits/website-refresh-2026-10-08/claims.md

# Website claim table — 2026-10-08

Every factual sentence on the public Hungarian pages, checked against `architecture/00-capability-map.md` (map),
`07-backup-architecture.md` (07), `09-update-architecture.md` (09), `10-localisation.md` (10), the catalog
(`app-catalog-felhom.eu` `32d134639c0c`) and the licence read (`audits/licences-2026-10-02/TABLE.md`).
**Rule applied: a claim without a PROVEN-LIVE or IMPLEMENTED row is cut or softened, never kept on hope.**
Service and business statements (what we do for a customer, prices, process) have no capability row; they are
marked *service* and kept unless a product fact contradicts them.

Verdicts: **keep** · **fix** (wrong, corrected) · **cut** (no backing row; removed or replaced by a backed sentence) ·
**add** (shipped since July, backed). Counts at the end.

## Numbers and facts that were simply wrong

| # | Page / place | Old | Basis | Verdict → new |
|---|---|---|---|---|
| N1 | index meta, card, CTA; technologiak; alkalmazasok title/meta/og/twitter | "53" apps | catalog: 58 templates; `plant-it` lifecycle `abandoned`, `wger` `hidden` → the controller's `visibleCatalogStacks` offers **56** for a new install (`felhom-controller/controller/internal/web/handlers.go` §visibleCatalogStacks) | **fix** → 56 everywhere |
| N2 | gyik (2 visible + 2 JSON-LD) | "több mint 45" | same | **fix** → 56 |
| N3 | alkalmazasok JSON-LD | `numberOfItems: 45` | same | **fix** → 56 |
| N4 | alkalmazasok stats | "49 Elérhető alkalmazás" | the page showed 49 cards incl. two not offered | **fix** → 56 |
| N5 | index, alkalmazasok, gyik ×3 | "mind 100% nyílt forráskódú" / "Minden szoftver … 100% … nyílt forráskódú" / "Az összes alkalmazás nyílt forráskódú" | licence read: Plex, Emby proprietary; n8n (Sustainable Use), Outline (BUSL-1.1), Tandoor (Commons Clause), SparkyFitness (non-commercial) not OSI; Recipe Importer Felhom's own, no licence — **49 of 56 OSI** | **fix** → "szinte mind"; the exceptions badged on their cards; stat "49 nyílt forráskódú" |
| N6 | alkalmazasok cards | Emby, n8n, Outline, Tandoor badged "Open Source"; Plex "Freemium" | same | **fix** → *Zárt forráskód* (Plex, Emby), *Korlátozott licenc* (n8n, Outline, Tandoor, SparkyFitness), *Felhom saját* (Recipe Importer) |
| N7 | alkalmazasok | Plant-it, wger cards | catalog lifecycle abandoned / hidden — a household cannot install them | **cut** |
| N8 | alkalmazasok | "Calibre-web" → github janeczku/calibre-web | the catalog ships Calibre-Web Automated (`crocodilestick/calibre-web-automated`) | **fix** name + link |
| N9 | alkalmazasok | FileBrowser card as an installable app | moved out of the catalog 2026-02-15 as a built-in; map E "File access via browser" IMPLEMENTED (FileBrowser infra app) | **keep, as built-in** — badge "Beépített", category count "6 alkalmazás + 1 beépített"; reason: it is on every box, so a household meets it |
| N10 | alkalmazasok | ten catalog apps missing (dawarich, docmost, grimmory, homebox, karakeep, mealie, metube, radicale, recipe-importer, sparkyfitness) | catalog | **add** (Part B) |
| N11 | alkalmazasok CTA | "Ez csak egy részlet a telepíthető alkalmazásokból" | the page now lists the whole catalog | **fix** → "Ez a teljes katalógus" |
| N12 | technologiak, after `</html>` | "Summary: 13 files included, 218 skipped" (a file-dump footer, rendered on the page) | — | **cut** (gate 18 now refuses text after `</html>`) |
| N13 | index meta | "kétszintű automatikus mentés" | 07 §6: Tier 1 (own unit), Tier 2 (second drive), Tier 3 (off-site); map C Tier-2 + Offsite PROVEN-LIVE | **fix** → háromszintű (index ×3, technologiak ×2, biztonsagimentes, gyik) |
| N14 | index meta, index tile, technologiak ×6 | "magyar nyelvű vezérlőpult" | map E "The dashboard in English": PROVEN-LIVE for every dashboard template | **fix** → "magyar vagy angol" |

## index.html

| # | Claim | Basis | Verdict |
|---|---|---|---|
| I1 | photos upload automatically; scanned papers recognised and searchable; films and music in browser + app | map E Phone photo backup PROVEN-LIVE; Documents/OCR PROVEN-LIVE; media apps (catalog) | keep |
| I2 | box folders in Windows Explorer / Mac Finder; per-share read-only | map E SMB server PROVEN-LIVE | keep |
| I3 | nightly backup … shares in both | map C Tier-2 + Offsite PROVEN-LIVE; shares in tier 2 + off-site (R-7b) | fix → three levels; "(ha van)" for the second drive (a one-drive box is DEGRADED, map C) |
| I4 | recovery code shown once, we cannot recover it | map A escrow ceremony PROVEN-LIVE | keep |
| I5 | apps from the dashboard, no command line, all open source, all on your machine | map B deploy PROVEN-LIVE; licence read | fix (N5) |
| I6 | remote monitoring; dashboard self-updates; we see failures | map G controller self-update PROVEN-LIVE (demo); map F alerting IMPLEMENTED | keep; **add** OS security updates — map G OS updates PARTIAL with guest/host Debian + Docker lanes PROVEN-LIVE (the kernel lane is not claimed) |
| I7 | (new card) careful app updates: only tested versions, backup first, the box puts the previous version back | map B "catalog holds only TESTED steps" PROVEN; "Update is GUARDED" PROVEN-LIVE; "A failed update is UNDONE by the box itself" PROVEN-LIVE | **add** |
| I8 | (new card) dashboard in Hungarian or English; mails follow | map E dashboard in English PROVEN-LIVE (templates); 10 §10.4 hub mails follow the household (slice 3 closed) | **add** |
| I9 | works when the internet is down | map E LAN access IMPLEMENTED (never drilled, R-19) | keep (IMPLEMENTED) |
| I10 | deleted file back from backup | map B "A file app comes back WHOLE from the second drive" PROVEN-LIVE | keep |
| I11 | "Hardverhiba esetén az egész rendszer visszaállítható egy új gépre, a titkosított távoli mentésből" | map A "customer's own UNAIDED recovery journey" PROVEN-LIVE for the DATA after the box was destroyed and rebuilt; map C guest-loss DR: "a restore to a DIFFERENT host is unmeasured" | fix → the apps' data back onto the reinstalled system from the remote backup, with the recovery code |
| I12 | "Senki más nem fér hozzájuk" | gyik itself says the operator has remote access | fix → not on Google's/Microsoft's servers; off-site only encrypted |
| I13 | "Nincs havi előfizetés … Csak az áramért fizetsz" | the service has a monthly fee (gyik "havi üzemeltetési díj (opcionális)") | fix → no storage subscription; electricity and, if wanted, the management |
| I14 | no 15 GB limit, add TBs | map D drive enrollment PROVEN-LIVE | keep |
| I15 | 5-step process; "Mit kapsz" list | *service* | keep; "Soha többé nem veszíted el az adataidat" **cut** (absolute) → three-level backups |
| I16 | app category previews incl. Plant-it, wger | catalog | fix → Mealie, Homebox; + Docmost, Dawarich |
| I17 | tiles: "SSL, tűzfal, VPN védelem"; "SSD + HDD, RAID védelem" | no firewall/VPN/RAID row; tunnel PROVEN-LIVE (map E) | cut → "HTTPS, titkosított alagút, nyitott port nélkül"; "második meghajtó a mentéseknek" |
| I18 | 3-2-1 "semmi sem vész el, még katasztrófa esetén sem" | absolute | fix → an encrypted copy survives far away |
| I19 | Zárt teszt: one shared household password | map E multi-user MISSING | keep (still true) |
| I20 | Zárt teszt: "TV-re streamelés hamarosan jön" | map E DLNA MISSING; "hamarosan" is a promise with no roadmap date | fix → "még nincs" |
| I21 | JSON-LD knowsLanguage "hu" | the site now has English twins and the contact page answers in English | fix → ["hu","en"] |

## technologiak.html

| # | Claim | Basis | Verdict |
|---|---|---|---|
| T1 | containers explained; "Docker / Podman" | the box runs Docker only | fix → Docker |
| T2 | dashboard list: catalog, resource view, backups, updates "egy kattintással, naplózással", monitoring | map B/F rows (IMPLEMENTED/PROVEN) | keep; updates fix → tested versions, backup first, automatic undo (I7) |
| T3 | layer stack incl. "pillanatkép" | no row for a Proxmox snapshot before a change | fix → "a teljes doboz mentése" |
| T4 | "Pillanatkép minden változtatás előtt" | none (the update path takes a backup, not a snapshot — map B) | cut → "Mentés frissítés előtt" (PROVEN-LIVE) |
| T5 | whole system backed up "és … egy új gépre is visszaállítható" | map C whole-guest backup + guest-loss DR PROVEN-LIVE; different host unmeasured | fix → restorable from it, no "new machine" |
| T6 | "És ha többre van szükséged… Windows VM, pfSense… kérésre" | no row; the product runs one guest | cut → one base, one job |
| T7 | reverse proxy: Traefik / Nginx Proxy Manager / Caddy | only Traefik runs (map E) | fix → Traefik + the tunnel |
| T8 | UFW, Fail2ban, Geo-blocking, WireGuard VPN | no row for any; WireGuard is the OPERATOR's tunnel (map E), not a household VPN | cut → no open port (tunnel), own sign-in, family gate (map E PROVEN on 9202), security updates (map G) |
| T9 | storage SSD/HDD; "több lemez önmagában nem mentés" | general | keep |
| T10 | hardware tiers and estimated prices | *service* | keep |

## biztonsagimentes.html

| # | Claim | Basis | Verdict |
|---|---|---|---|
| B1 | "hogy soha ne veszíts el semmit"; meta "Adataid soha nem vesznek el"; og "semmi nem vész el" | absolute | fix ×3 |
| B2 | 3-2-1 rule explained | general | keep |
| B3 | off-site options: buddy system, office, encrypted cloud; "Személyre szabjuk … haver szerver, iroda … ennek megfelelően állítjuk be" | the product's off-site is one thing: restic → a storage box we provide (map C Offsite PROVEN-LIVE); no buddy/office row | keep the options as general education; **cut** "személyre szabjuk"; add: the box uses the provided encrypted storage, the other two are not set up today |
| B4 | "Kritikus adatok … havi pár száz forint" | the operator's own (hidden) price page says 1 500 Ft / 100 GB / month | fix → "a mentett adatmennyiségtől függ" (no number invented) |
| B5 | automatic, incremental | map C | keep; add the three levels |
| B6 | whole box "új gépre is visszaállítható (titkosított offsite mentésből)" | as I11/T5 | fix |
| B7 | recovery code, operator zero-knowledge | map A | keep |
| B8 | monitoring: failed backup, filling storage, connection fault → e-mail | map C failed backup to operator PROVEN-LIVE; fill warning PROVEN-LIVE; F alerting IMPLEMENTED | keep |

## gyik.html (41 questions; the JSON-LD is now rebuilt from the visible answers, gate 17)

| # | Claim | Basis | Verdict |
|---|---|---|---|
| G1 | "bármilyen nyílt forráskódú alkalmazás telepíthető" | only catalog apps install | fix → the catalog's apps |
| G2 | "több mint 45" ×4; "bármi egyedi igényt is megoldunk" | N2 | fix; "if missing we look at adding it" |
| G3 | adding apps: "mi telepítjük és bekonfiguráljuk" | the household installs from the dashboard (map B) | fix |
| G4 | power cut: BIOS auto-on (*service*); "Az adatok nem vesznek el" | power-outage audit 2026-07-22 full self-heal; map C crash/power-loss self-heal PROVEN-LIVE | fix → recovers by itself, tried with a real power cut |
| G5 | remote access "VPN kapcsolaton vagy reverse proxy-n" | tunnel PROVEN-LIVE; no household VPN | fix |
| G6 | security: "tűzfal" | no row | fix → HTTPS, updates, sign-ins, family gate, no open port |
| G7 | operator access; "önálló modell … távoli hozzáférést eltávolítjuk … mentési kulcsokat kizárólag te ismered" | operator OOB IMPLEMENTED; no "self-managed" mode exists (map E "leave Felhom" MISSING, R-810) | cut the model; keep the true half (recovery code only the household knows) |
| G8 | "az adataid soha nem hagyják el a hálózatodat" | off-site copy leaves, encrypted | fix |
| G9 | ransomware: "vissza tudjuk állítani az adataidat a legutolsó mentésből" | no drill against ransomware | fix → an encrypted copy is kept far away |
| G10 | GDPR household exemption | legal opinion, not product | keep (R-813 owns legal text) |
| G11 | backups 3-2-1, nightly, incremental | map C | keep + three levels |
| G12 | disk failure: "visszaállíthatók egy új lemezre"; "Nagyobb rendszereknél RAID" | per-app restore PROVEN-LIVE; SMART watch PROVEN-LIVE; no RAID row | fix; RAID cut |
| G13 | daily central check of backups; restore tests | map F `expected_backup_missed` IMPLEMENTED; map A restore-proof UNATTENDED PROVEN-LIVE | keep |
| G14 | off-site defined via friend/office/cloud | B3 | fix → on the box it is our encrypted storage |
| G15 | updates: tested; "rendszer-pillanatkép" before every update | catalog TESTED steps PROVEN; no snapshot | fix (T4) + OS security updates |
| G16 | cancel: "a rendszer tovább működik" | the LOST-hub half only (map E row "leave Felhom" MISSING, R-810) | fix → works on the home network; remote access/off-site agreed at cancellation |
| G17 | Felhom shuts down: all apps open source | N5 | fix → almost all |
| G18 | hidden costs: "100% ingyenes és nyílt forráskódú"; off-site "havi néhány száz forint … ingyenes alternatívák (haver rendszer)" | N5; B4 | fix |
| G19 | OS: "minden változtatás előtt pillanatképet … akár egy új gépre" ; Proxmox "Pillanatkép minden változtatás előtt" | T4, T5 | fix |
| G20 | VPN question: "kifejezetten ajánljuk … Modern VPN megoldásokat használunk" | no household VPN | fix → not needed; not set up today |
| G21 | everything else (hardware, noise, power use, internet speed, phone apps, family accounts, migration, domain, more storage, costs) | *service* / general / map E multi-user MISSING stated honestly | keep |

## kapcsolat.html, letoltes.html, szolgaltatasok-nonpublic.html

| # | Claim | Basis | Verdict |
|---|---|---|---|
| K1 | reply within 24 h on working days; "Miben segíthetünk" list | *service* | keep |
| K2 | consent text | R-813 owns it | keep (translated as is on the English page) |
| L1 | installer 1.29.0, size, SHA-256 | gate 12 (both pages agree) | keep |
| P1 | nonpublic prices page: an app count? | none on the page | nothing to fix (only the nav switch added) |

## Counts

Counted by script over the rows above (first word of the verdict cell), 78 rows:

| Verdict | Rows |
|---|---|
| keep | 25 (+1 "nothing to fix", P1) |
| fix | 42 |
| cut | 7 |
| add | 3 |

A row can carry more than one sentence; the rows with "fix" include the added sentences listed in them
(three backup levels, OS security updates).