# TASK114 catalog pass

Stand: 2026-09-05 · Grok + Osaurus `foundation` (hallucinated; discarded) · Jan GP hung 0 tools (killed)

STATUS: ok (partial notes only)

FINDING:
- services-catalog ↔ ports-whitelist ↔ mail-catalog: coherent for pixel/firefly/vecigate (git/mm/buildbot + WAN 212.51.151.254 present).
- domains.conf holds Taler stacks; services-catalog correctly stays non-Taler/company — no duplicate stacks.
- mail-catalog planes (firefly / mail.anastasis.lu / pixel) match ports whitelist mail hosts.
- Soft gap: no dedicated `tortuna` services row (only WAN DNAT ports on vecigate) — intentional per comments.
- Soft gap: apex `taler-ops.ch` is mail+domains; services has `www.taler-ops.ch` company web only.

NEXT: no catalog edit required; optional later: document tortuna-as-DNAT-only in services header comment.