Audit journal
Integrity checkpoints
Hash-chained checkpoints over the operations journal — each signs everything through a given sequence number.
ACP-0007 19 Jul 2026, 02:00 seq 63 a41b…9c2e site-controller-key-01
ACP-0006 12 Jul 2026, 02:00 seq 54 7f30…b18d site-controller-key-01
ACP-0005 5 Jul 2026, 02:00 seq 46 2c9a…4e07 site-controller-key-01Open security advisories
Provenance timeline
-
nas01.zala.local:/backup/smartrack · 412 MB · verified
-
through seq 63 · a41b…9c2e
-
Cycle count: location empty — reel marked missing — u-nagyp · ST-IN-01
-
Cycle count: location empty — reel marked missing — u-nagyp · ST-IN-01
-
Backing up Szabó László on the SMT-1 night shift; needs to run the WO-1042 → WO-1043 changeover.
-
Placed; sensor confirmation pending within grace window — u-kovacsm · ST-IN-01
-
Sensor confirm arrived 41 s late — grace window absorbed it, no alarm escalation — u-kovacsm · ST-IN-01
-
nas01.zala.local:/backup/smartrack · 409 MB · verified
-
Staged to kitting row — u-tothe · ST-KIT-01 — WO-1042
-
Staged to kitting row — u-tothe · ST-KIT-01 — WO-1042
-
Staged to kitting row — u-tothe · ST-KIT-01 — WO-1042
-
Staged to kitting row — u-tothe · ST-KIT-01 — WO-1042
-
Staged to kitting row — u-tothe · ST-KIT-01 — WO-1042
-
ARIS support (ticket ZS-2214) — encrypted to vendor public key · sha256:c3d4…77af
-
Investigating ticket ZS-2214 (R2 controller offline); wants to correlate audit entries with gateway logs.
-
Staged · Adds grace-window tuning UI and Gen02 wireless watchdog fix. Staged; canary apply planned for the 2026-07-20 maintenance window (R2 first).
-
nas01.zala.local:/backup/smartrack · 401 MB · verified
-
nas01.zala.local:/backup/smartrack · 396 MB · verified · restore drill: pass
-
through seq 54 · 7f30…b18d
-
MES consumption sync — u-szabol · ST-OUT-01 — WO-1042
-
MES consumption sync — u-szabol · ST-OUT-01 — WO-1042
-
MES consumption sync — u-szabol · ST-OUT-01 — WO-1042
-
MES consumption sync — u-szabol · ST-OUT-01 — WO-1042
-
Auto-outbound pick (PTL-guided) — u-tothe · ST-OUT-01 — WO-1042
-
Auto-outbound pick (PTL-guided) — u-tothe · ST-OUT-01 — WO-1042
-
Integration Runner file connector follows symlinks outside the allowlisted drop folder — Integration Runner 1.4.0–1.4.2 (file transport) → fixed in 1.5.0 (mitigated)
-
Auto-outbound pick (PTL-guided) — u-kovacsm · ST-OUT-01 — WO-1042
-
Auto-outbound pick (PTL-guided) — u-kovacsm · ST-OUT-01 — WO-1042
-
through seq 46 · 2c9a…4e07
-
MES consumption sync — u-szabol · ST-OUT-02 — WO-1041
-
MES consumption sync — u-szabol · ST-OUT-02 — WO-1041
-
MES consumption sync — u-szabol · ST-OUT-02 — WO-1041
-
MES consumption sync — u-szabol · ST-OUT-02 — WO-1041
-
Auto-outbound pick (PTL-guided) — u-kovacsm · ST-OUT-02 — WO-1041
-
Auto-outbound pick (PTL-guided) — u-kovacsm · ST-OUT-02 — WO-1041
-
Auto-outbound pick (PTL-guided) — u-nagyp · ST-OUT-02 — WO-1041
-
Auto-outbound pick (PTL-guided) — u-nagyp · ST-OUT-02 — WO-1041
-
Applied · N-1→N upgrade with exercised rollback path — the rollback record is the evidence, not an embarrassment.
-
1.4.1 → 1.4.0 — First apply attempt (1.4.1) failed post-flight health check on gateway GW-02; rolled back cleanly from pre-update backup, then 1.4.2 applied successfully
-
nas01.zala.local:/backup/smartrack · 388 MB · verified
-
Return from line, counted on splice scale — u-nagyp · ST-IN-01 — WO-1041
-
Return from line, counted on splice scale — u-kovacsm · ST-IN-01 — WO-1041
-
Return from line, counted on splice scale — u-nagyp · ST-IN-01 — WO-1041
-
Issued to line — u-nagyp · ST-OUT-02 — WO-1041
-
Return from line, counted on splice scale — u-kovacsm · ST-IN-01 — WO-1041
-
Issued to line — u-kovacsm · ST-OUT-02 — WO-1041
-
Issued to line — u-nagyp · ST-OUT-02 — WO-1041
-
Issued to line — u-kovacsm · ST-OUT-02 — WO-1041
-
RL-24068 — Released to stock · Supplier confirmed LOT after label reprint — released back to stock
-
Cycle count — no variance — u-tothe · ST-IN-01
-
Return from line, counted on splice scale — u-tothe · ST-IN-01 — WO-1040
-
Return from line, counted on splice scale — u-kovacsm · ST-IN-01 — WO-1040
-
Issued to line — u-tothe · ST-OUT-02 — WO-1040
-
Return from line, counted on splice scale — u-nagyp · ST-IN-01 — WO-1040
-
Issued to line — u-kovacsm · ST-OUT-02 — WO-1040
-
Return from line, counted on splice scale — u-kovacsm · ST-IN-01 — WO-1040
-
Return from line, counted on splice scale — u-nagyp · ST-IN-01 — WO-1040
-
Issued to line — u-nagyp · ST-OUT-02 — WO-1040
-
Issued to line — u-kovacsm · ST-OUT-02 — WO-1040
-
Issued to line — u-nagyp · ST-OUT-02 — WO-1040
-
RL-24073 — Scrapped · Moisture indicator tripped in transit — 40 pcs scrapped, remainder re-baked
-
Gateway Agent journal replay could accept unsigned entries after restore — Gateway Agent ≤ 1.3.9 → fixed in 1.4.0 (patched)
-
Cycle count — no variance — u-tothe · ST-IN-01
-
Return from line, counted on splice scale — u-kovacsm · ST-IN-01 — WO-1039
-
Return from line, counted on splice scale — u-nagyp · ST-IN-01 — WO-1039
-
Return from line, counted on splice scale — u-kovacsm · ST-IN-01 — WO-1039
-
Issued to line — u-kovacsm · ST-OUT-01 — WO-1039
-
Issued to line — u-nagyp · ST-OUT-01 — WO-1039
-
Issued to line — u-kovacsm · ST-OUT-01 — WO-1039
-
Witnessed drill: recover admin access with identity provider unavailable (no live incident) · 34 min · rotated 12 May 2026, 13:15
-
Moved to final slot — u-tothe · ST-IN-01
-
Temporary putaway — kitting row full — u-tothe · ST-IN-01
-
site-controller → SPARE-NODE-01 — Drill: controller image restored to spare hardware, health tests green, rack reconciliation clean — recovery receipt filed
-
u-nagyp · ST-IN-01
-
u-kovacsm · ST-IN-01
-
u-nagyp · ST-IN-01
-
u-kovacsm · ST-IN-01
-
u-nagyp · ST-IN-01
-
u-kovacsm · ST-IN-01
-
u-nagyp · ST-IN-01
-
u-kovacsm · ST-IN-01
-
u-nagyp · ST-IN-01
-
74 reels imported · 3 quarantined · 12 accounts reset-required
-
u-kovacsm · ST-IN-01