# WORKING.md — Active Session Tracker

Agent work only. The human decides when it's done.
A commit is blocked while any task below remains unchecked.

## Current Tasks

(session state persisted to Redmine #367/#368, Discourse audit #298 reply 51,
Discourse k8s wiki #305 reply 8, and git PFVCluster d3c5ae8/1f44a19)

- [x] k3s HA control plane rebuilt: 3/3 cnodes Ready, etcd quorum, taints [#367]
- [x] Proxmox tuning applied (ssd/discard, queues=2, cpuunits, startup order) [#367]
- [x] Founder moved cnode disks to TS5-SSD; etcd latency 4-5s → <1s [#367]
- [x] Workers joined: tsys3/6/7/9 + ultix-streaming (replaces tsys5 slot) [#368]
- [x] Serial bounce wave completed; test pod schedules on worker only [#368]
- [x] post-setup.sh kubectl bug + join-workers.sh timeouts fixed; tuning codified [#367][#368]
- [x] ultix-offstage excluded (unreachable) — join when back on tailnet [#368]
- [x] hap-bridge removed from pfv-bms host (unsupported_system_software fixed; supported=true) [#619]
- [x] hap-bridge.py merge fix + 5 unit tests (babd6d2) [#619]
- [x] Core watchdog re-enabled (founder-approved); community SSH add-on confirmed gone [#344]
- [x] Lock DHCP-table verdict: no lock OUIs, BLE-only likely — answered in needfromcharles §3 [#619]
- [x] iDRAC probes: both live, TLS1.0-only, no Redfish (hardware gen), SNMP off — #625 note + creds ask §9
- [x] HA backup pre-cleanup-2026-09-02 verified (692MB); image prune 0B (nothing dangling; 4GB optional via -a, left to founder)