CHANGELOG: the burn-down night (R-758, R-127a, R-798, R-763, R-764, R-786, R-731; R-776/R-613 held for 9202)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CHANGELOG.md

@@ -1,3 +1,28 @@
+## 2026-10-05 (night) — the burn-down night: honest memory figures, encryption keys flagged, wger closed to strangers (R-758, R-127a, R-798, R-763, R-764, R-786, R-731) + two stale gate tools
+
+**What runs on a box changed:** memory FIGURES in eight `.felhom.yml` (deploy screen + soft over-commit warning only; the
+hard refusal reads `mem_request`, unchanged); `data_key` flags on four fields (read only on the restore paths); grimmory's
+env (`API_DOCS_ENABLED=false` replaces the dead `SWAGGER_ENABLED`, default false — no behaviour change); wger's compose
+and `.felhom.yml` (wger is `lifecycle: hidden` — no box runs it). No image, version, ladder or healthcheck changed.
+
+- **R-758:** `mem_limit` is the sum of the compose limits in adventurelog, bookstack, calcom, claper, kimai, nextcloud,
+  outline, zipline; new `--fast` gate `mem-limit-sum` (stdlib, CI runs it) with decoys; red-proved.
+- **R-127 (leg a):** `data_key: true` on n8n `N8N_ENCRYPTION_KEY`, calcom `CALENDSO_ENCRYPTION_KEY`, wanderer
+  `POCKETBASE_ENCRYPTION_KEY`, bookstack `APP_KEY` (encrypts two-factor secrets); new `--fast` gate `data-key` (a name
+  rule + a registry with reasons) with decoys; red-proved. Leg (b) is controller work.
+- **R-798:** grimmory sets the API-docs switch v3.5.0 reads.
+- **R-763:** wger closes its own sign-up and guest users after the first admin (`ALLOW_REGISTRATION=False`,
+  `ALLOW_GUEST_USERS=False`). Hidden app; the 9202 stranger walk is owed before it is offered again.
+- **R-764:** wger sends mail through the box's relay (`smtp_mapping`, plaintext :2526, `ENABLE_EMAIL` gate). Hidden app;
+  the 9202 boots (mail ON and OFF) are owed.
+- **R-786:** SparkyFitness onboarding record — 1.6 done (every env read of the server source listed); 1.7 read in source.
+- **R-731:** `scripts/check-currency.py` (stdlib) makes the tag-shape-switch control standing, with fixture tests.
+- **Fixed without a row:** `test_gate_decoys.py`'s copy-i18n ratchet ABOVE case removes English instead of adding it
+  (it could not fail once coverage was complete — red on `main`); `check-probe-matches-compose.py` accepts `--all`
+  (`catalog_gates.py --all` read INCONCLUSIVE on a clean tree).
+- **Held back, not on `main`** (each owes a 9202 proof first; they touch apps real boxes run): R-776 (kimai, zipline,
+  vikunja, nextcloud see each visitor behind the tunnel), R-613 (nextcloud's probe asks for `"installed":true`).
+
 ## 2026-10-05 — burn-down round 2: copy, gate and harness fixes (R-760, R-593, R-594, R-605, R-781, R-806) + a stale runner test
 
 No image, version, ladder, environment or healthcheck that runs on a box changed.