REPORT: v0.138.0 (R-727)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

REPORT.md

@@ -1,15 +1,12 @@
-# REPORT — 2026-09-28: agent v0.137.0 vouched with golden 0.276.0
+# REPORT — 2026-09-30: v0.138.0 (R-727)
 
-No agent code changed. `configs/build-golden.sh` (v3.0.0) was USED, not changed, to bake golden 0.276.0 in the
-drill VM on DooPlex (RUNBOOK-manual-build §4.0–§4.1).
+Full session report: `felhom.eu/REPORT-fixes-first-tester-2026-09-30.md`.
 
-- **Vouched** in the hub's own form: `golden_version` 0.276.0, `agent_version` 0.137.0, `min_agent` 0.131.0 (the
-  MinAgent in controller v0.276.0's CHANGELOG header). The R-120 gate refused golden 0.258.0 first (negative
-  control). Rollback = the values before: agent 0.132.0, golden 0.258.0, min_agent 0.131.0.
-- **One sha, three places:** `766c9166…7627` in Gitea, on felhom-pve and on demo-hp.
-- **A new box comes up on it:** a Day-0 install (installer 1.28.0, `--force-gitea-golden`) in the drill VM fetched
-  agent 0.137.0 and golden 0.276.0 through the manifest, both sha-verified, and the controller answered healthy at
-  0.276.0 behind an armed claim gate. Not claimed.
-- CHANGELOG: the v0.137.0 entry carries the vouch.
-
-Evidence: `felhom.eu/documentation/audits/evidence-golden-0276-2026-09-28/`.
+- **Measured:** a PBS archive carries its key FINGERPRINT (PVE content `encrypted`), not a host id; the storage
+  carries its own (`GET /storage` → `encryption-key`). The restore test now skips an archive written with another
+  key and logs it by name; an unencrypted storage is not filtered; a failed storage read is UNKNOWN.
+- Tests `TestR727_*`; red-proof RP39 (the skip removed → the 2026-09-16 archive of an earlier box is picked).
+- Released by `release-agent.sh` (tag `v0.138.0`, sha256 `55916026…8195`, verified by download); **not vouched**.
+  Delivered by signed `agent_update` jobs to `demo-hp-bb76ea` and `demo-felhom-8363b5` (both committed within 340 s);
+  `-selftest=restore-test-due` on both reads each tier normally on 0.138.0.
+- ep0 (decision 51): the three drill archives in `tester-1`'s namespace removed; other namespaces byte-identical.