REPORT: the 2026-10-26 attended release run. Docs only.

REPORT.md

@@ -1,26 +1,26 @@
-# REPORT — D50 retention gate, R-1280, R-1285: committed, not released (2026-10-25 night)
+# REPORT — agent v0.166.0 released and vouched (2026-10-26, attended release run)
 
-**Plain words first.** Three agent changes are on `main`. None is released. The release (v0.166.0) is Monday's and
-waits for the operator's vouch (felhom.eu `STATUS.md`, the Monday list).
+**Plain words first.** Agent 0.166.0 runs on Tester 1, demo-hp and demo-felhom, and the operator vouched it at 10:04:55
+CET, so new installs get it (a fresh install today fetched it). A signed job's window is now at most 24 hours — seen
+live. One part is not done: on a BYO host the SSH clean-up still comes one release late (R-1285, back to OPEN).
 
-## Each change, before → after
+## Release
 
-| Row | Commit | Before | After | Proof |
-|---|---|---|---|---|
-| R-1290 (D50 = A) | `feaaa0e` | the published-versions gate knew no keep rule | it asserts the newest 5 released versions plus the pinned MinAgent floor (0.158.1) and the day-0 agent (0.165.0) in `scripts/retention-policy.json`; a pin with no tag fails | decoys seen failing; CI 2339 ✓ |
-| R-1280 | `d912307` | a signed job's window could be any length | at most 24 h — the verifier (`ErrWindowTooLong`), the root wrapper (`MAX_WINDOW_S`) and `felhom-opsign -ttl`; exactly 24 h is accepted | red-proof; unit tests; not live |
-| R-1285 | `abcc1e6` | a BYO host upgraded from an old wrapper kept our SSH drop-in until its NEXT bundle (the old wrapper planned the new bundle) | after every bundle install the agent runs the new wrapper's `bundle-policy` pass; the file is removed in one update; a failing `sshd -t` puts it back | red-proof; live on a BYO test VM: one signed run gave `BUNDLE POLICY REMOVED`; the test package was deleted after (204, then 404) |
+- From a clean clone at `aa69114` (CI 2351 ✓): tag `v0.166.0`; binary sha256
+  `3f22c65b78914632fa476292f6b58e5af3ed9e9900f3a5a7a347a9c0bfea9c5c`; bundle
+  `093772c1bda8b974e86ed45472f8fadc8992f247563f5739876102a5156003a3`; verified by independent download.
+- Delivered by signed `agent_update` + `agent_config_update`: each box COMPLETED, bundle INSTALLED, self-check 76/76,
+  update committed.
+- D50 pin `day0_agent` → 0.166.0 (`b890b57`, CI 2356 ✓); the published gate green.
 
-## CI (by commit hash, `jobs` endpoint)
+## Live checks
 
-`feaaa0e` 2339 ✓ · `d912307` 2344 ✓ · `abcc1e6` 2345 ✓ — all `run_attempt` 1.
+- **R-1280 (closed):** a 25 h signed job on demo-hp → „REJECTED signed op — executor not called … op validity window too
+  long (25h0m0s)"; a 30 min job ran. `felhom-opsign -ttl 25h` refuses (rc 2); 24 h accepted.
+- **R-1285 (back to OPEN):** in the normal two-job delivery the bundle job runs in the OLD 0.165.0 process (demo-hp: bundle
+  09:03:07–09:03:09 CET, restart into 0.166.0 at 09:03:10), so no policy pass ran on that bundle. Under 0.166.0 a later
+  bundle logged „BUNDLE POLICY DONE install_mode=appliance removed=0" — the pass is wired; its delivery order is not.
+  No BYO host is in the fleet. Fix options in the row.
+- **R-1289 (hub):** the vouch logged „behind the fleet's 0.344.0" — a release version.
 
-## Teardown
-
-The BYO test VM (demo-hp 9372) was uninstalled through the product and destroyed. Its hub host record needs the
-operator's delete (felhom.eu `STATUS.md`).
-
-## Evidence
-
-felhom.eu `documentation/audits/night-2026-10-25/` (`redproof-d50.txt`, `redproof-r1280.txt`, `redproof-r1285.txt`,
-`rig/r1285-live.txt`).
+Evidence: felhom.eu `documentation/audits/release-monday-2026-10-26/agent-0166/`.