Files

T

admin ffba9eb395 @

CAMPAIGN-5 findings doc (2026-07-14): NAS re-arm ring core + v0.129.0 fix live-proof

Findings-only. v0.129.0 F-A/F-B/F-C all CONFIRMED FIXED live on the fleet. NAS
re-arm ring core PASS on a fresh campaign NFS share: F10 start-limit clear +
reset-failed+rearmed, F9 per-share verdict (no empty sweep), F1/F2 clean removal,
F12 unit cycle-free. F8 improved (stub/mounted:false during outage) but reachable:true
still server-level. Reboot half of the matrix + upload/browser planes deferred with
procedures. No credential/R/blob committed.

Claude-Session: https://claude.ai/code/session_01LbMm4T7Ayzs1unB9pN6Uqd
@

2026-07-14 10:12:21 +02:00

2.7 KiB

Raw Blame History

felhom.eu — task reports

Overwrite this file with a summary of the most recent task only (uniform with the other repos; not cumulative). The cumulative hub history lives in hub/CHANGELOG.md; the scripts history lives in scripts/CHANGELOG.md.

CAMPAIGN-5 — NAS re-arm ring core + v0.129.0 fix live-proof — 2026-07-14

Full report: documentation/audits/CAMPAIGN-5-2026-07-14.md. Launch seed 22cf2c0983034e61. Findings-only.

Verdict

The v0.129.0 fixes are confirmed fixed live, and the agent v0.85 NAS re-arm plane holds on the core matrix. No CRITICAL/HIGH regressions in the exercised scope.

v0.129.0 fixes — all confirmed fixed live (the campaign's mandate)

F-B: drill 0.129.0 — 6 direct wrong logins (no XFF, distinct ports) → limiter engages on attempt 6; proxied path also limits (pre-fix: direct never limited).
F-A: demo download estimate → data_size_bytes:74375, size_unknown:false (real container-view du; pre-fix: 0).
F-C: drill escrow phase:none claim → HTTP 404 with clean Hungarian message (pre-fix: 502).

Enrollment (add wizard, verify-before-commit): PASS. Unit F12-clean (no network-online ordering).
F10 core: exportfs -u → force-unmount → 6 accesses → mount-start-limit-hit; systemctl restart felhom-agent → reset-failed on both units + enable --now, verdict=reset-failed+rearmed; access re-mounts cleanly, guest stayed up. PASS.
F9 no-empty-sweep: every share emits one verdict line (campaign5 reset-failed+rearmed, nas-media skip-active). PASS.
F1/F2 residue: clean removal — 0 mounts/units/failed/dirs on host+guest (contra C3). PASS.
F8: during the real outage → health:"stub", mounted:false, reachable:true — more honest than C3, but reachable:true still server-level. Observation.

Deferred (ready procedures in the audit doc)

The reboot half of the matrix (F10 guest-reboot, F11 idle/active on reboot, re-arm reboot-survival), F7 mid-backup cut, E drift-reconcile, the .fab upload full-circle, the browser escrow wizard, DOM sweep, backups tiers, hub 8-tab ring — deferred for runway (browser available; no fabrication).

Box state

Nothing down. Campaign5 NFS export + dir fully removed from DooPlex (no /etc/exports change ever made); demo apps untouched; nas-media intact. Both boxes healthy on 0.129.0. Campaign credential active — Viktor rotates. No R/blob produced. Samplers running (stop: pkill -f c4-sampler.sh on both PVE hosts, pkill -f hub-sampler.sh on 180). Evidence at 180:~/campaign5/.

2.7 KiB Raw Blame History