zipline: 4.6.1 -> 4.7.0, its first ladder step, both venues proven (R-462, R-742)

4.8.0 cannot be reached in one step: it refuses to start until the database has run the release
before it (prisma -> drizzle; measured on both venues; the box undid it by itself in 20 s). So the
first step is 4.7.0. Bench 9401 (harness v4, swap 0): the first user made through /api/setup and
logging in before and after, 10-min watch 0 kills (anon peak 41.7 %); the abort starts and serves.
Box 9202: done in 103.6 s through the setup gate, the user logs in. PostgreSQL 16 does not move.
Written by upgrade-test.py --write-ladder.

Evidence: felhom.eu/documentation/audits/more-night-apps-2026-09-30/

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

templates/zipline/.felhom.yml

@@ -10,7 +10,7 @@ subdomain: "img"
 slug: "zipline"
 # catalog_since: the date THIS repo last changed this app's pinned images. Any commit that
 # changes an image: line must set this to the same day (see CLAUDE.md).
-catalog_since: "2026-07-18"
+catalog_since: "2026-09-30"
 
 # --- Resource hints (displayed on deploy screen) ---
 resources:
@@ -121,3 +121,9 @@ i18n:
         label: 'Database password'
       - env_var: CORE_SECRET
         label: 'Encryption key'
+
+# update_ladder — the test record: one tested step per line, oldest first (JSON flow mappings,
+# `09-update-architecture.md` §6.4 part 4). WRITTEN BY scripts/upgrade-test.py, never by hand;
+# gated by scripts/check-test-record.py. An image: move without a proven entry here is refused.
+update_ladder:
+  - {"from": {"zipline": "ghcr.io/diced/zipline:4.6.1", "zipline-postgres": "postgres:16-alpine"}, "to": {"zipline": "ghcr.io/diced/zipline:4.7.0", "zipline-postgres": "postgres:16-alpine"}, "digest": {"zipline": "sha256:526fa08d2d3cf46bd959b2008987ca8d2a38b1ba840991b68cd9ff4b8c6a3fab", "zipline-postgres": "sha256:721873c34ceb9f8d8fc265984940dc982404c105f19ad51be9fdc5970a6080ea"}, "verdict": "proven", "tested_at": "2026-09-30T18:04:58Z", "harness_version": 4, "evidence": "felhom.eu/documentation/audits/more-night-apps-2026-09-30/bench/apps/zipline/bench/evidence/MV-zipline/verdict.json", "box_evidence": "felhom.eu/documentation/audits/more-night-apps-2026-09-30/box/zipline/step.txt", "memory_peak_pct": 41.7, "marks": {"files_may_change": false, "needs_person": null, "memory_tight": false}, "memory_basis": "anon", "memory_cgroup_peak_pct": 56.8}

templates/zipline/docker-compose.yml

@@ -10,7 +10,7 @@
 
 services:
   zipline:
-    image: ghcr.io/diced/zipline:4.6.1
+    image: ghcr.io/diced/zipline:4.7.0
     container_name: zipline
     restart: unless-stopped
     depends_on: