docs: v0.87.0 REPORT — deploy transcript (drill first, then felhom-pve 62/62 caps), 13.3 byte-identical regression, the live IA replay (hot-added /dev/sdb now offered; sda never), Gitea publish sha; supervised UI leg + manifest vouch remain

REPORT.md

@@ -62,11 +62,23 @@ Red-proofs (mutate → fail → revert, verbatim):
 
 Full suite: `go test ./...` green (all packages; recovery-code flake did not fire).
 
-## §13 deploy + regression
+## §13 deploy + regression (DONE) + the IA replay (agent half)
 
-- (Filled at deploy — build 0.87.0 on 180 → drill host first with `.bak-0.86.0` backup +
-  restart + clean journal, then felhom-pve; 13.3 = post-upgrade `/disks` + `/disks/candidates`
-  diffed against the §3 pre-captures.)
+- Built on 180 (`sha256 2447d4a3…dc7a`); deployed **drill host first** (0.86.0 → 0.87.0,
+  `.bak-0.86.0` kept, service active, clean journal), then **felhom-pve** (0.86.0 → 0.87.0,
+  `.bak-0.86.0` kept, capabilities self-check **62/62 ok, degraded=0, inactive=0**).
+- **13.3 regression (felhom-pve, the §3 pre-captures vs post):** `/disks` roles BYTE-IDENTICAL
+  (all 7 targets: felhom-usb/felhom-flash/raw-sdb user-data, local/local-lvm system,
+  felhom-pbs/felhom-offsite backup) and `/disks/candidates` identical (empty pre and post).
+- **The exact IA-failure replay (drill, API level — the endpoint the wizard UI invokes):**
+  hot-added a 5 GB scsi disk to qm 300 (`local-lvm:vm-300-disk-1`, appears as /dev/sdb in the
+  drill PVE) → `GET /disks/candidates` now returns
+  `initialize: [{device:/dev/sdb, 5 GiB, QEMU HARDDISK, data_bearing:false}]` — pre-fix the
+  same call returned empty (drill-pre-0870.txt). The root disk sda is NOT offered (safety
+  direction). **The scratch disk is left ATTACHED for the supervised UI leg.**
+- Published to Gitea: `AGENT_VERSION=0.87.0`, `AGENT_SHA256=2447d4a345115db0b380779f251750f3d8c48ba9e89aeaac162fd8c74ce8dc7a`
+  (creds from the 180 docker-config, out-of-band). felhom.eu disposition note:
+  `documentation/audits/DISPOSITION-ia-finding2-systemdisks-2026-07-13.md` (commit `74fa61c`).
 
 ## STOPPED for Viktor (per the task's STOP)