calibre-web: v4.0.6 -> v4.0.8, its first ladder step, both venues proven (R-462)

A new front-door fixture: a book uploaded through the app's own Upload form and read back through
its OPDS feed (listed, and the served EPUB carries the marker), with a wrong-password and an
absent-title control. Bench 9401 (harness v4, swap 0): proven, 10-min watch 0 kills (anon peak
19.3 %); the harness saw the household books folder's tree hash change, so the step carries
files_may_change (a night press needs a fresh whole copy). Box 9202: done in 64.6 s, the book read
back, and not one file in the books folder changed (per-file hashes before/after).
Written by upgrade-test.py --write-ladder.

Evidence: felhom.eu/documentation/audits/more-night-apps-2026-09-30/

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

templates/calibre-web/.felhom.yml

@@ -10,7 +10,7 @@ subdomain: "books"
 slug: "calibre-web"
 # catalog_since: the date THIS repo last changed this app's pinned images. Any commit that
 # changes an image: line must set this to the same day (see CLAUDE.md).
-catalog_since: "2026-07-12"
+catalog_since: "2026-09-30"
 
 # --- Resource hints (displayed on deploy screen) ---
 resources:
@@ -154,3 +154,9 @@ i18n:
         label: 'E-books to read in'
       - path: 'media/books'
         label: 'E-book library'
+
+# update_ladder — the test record: one tested step per line, oldest first (JSON flow mappings,
+# `09-update-architecture.md` §6.4 part 4). WRITTEN BY scripts/upgrade-test.py, never by hand;
+# gated by scripts/check-test-record.py. An image: move without a proven entry here is refused.
+update_ladder:
+  - {"from": {"calibre-web": "crocodilestick/calibre-web-automated:v4.0.6"}, "to": {"calibre-web": "crocodilestick/calibre-web-automated:v4.0.8"}, "digest": {"calibre-web": "sha256:5e00373854247750cc3e4479b492ae09293ff5e06ed10177f226634d97888679"}, "verdict": "proven", "tested_at": "2026-09-30T16:11:42Z", "harness_version": 4, "evidence": "felhom.eu/documentation/audits/more-night-apps-2026-09-30/bench/apps/calibre-web/bench/evidence/MV-calibre-web/verdict.json", "box_evidence": "felhom.eu/documentation/audits/more-night-apps-2026-09-30/box/calibre-web/step.txt", "memory_peak_pct": 19.3, "marks": {"files_may_change": true, "needs_person": null, "memory_tight": false}, "memory_basis": "anon", "memory_cgroup_peak_pct": 38.9}

templates/calibre-web/docker-compose.yml

@@ -20,7 +20,7 @@
 
 services:
   calibre-web:
-    image: crocodilestick/calibre-web-automated:v4.0.6
+    image: crocodilestick/calibre-web-automated:v4.0.8
     container_name: calibre-web
     restart: unless-stopped
     environment: