# REPORT — agent v0.159.2 released (2026-10-18)

**In plain words.** The pool check that names an orphan snapshot now runs only after a whole-box backup has failed — not
before every backup. Released today; it runs on demo-hp, Tester 1 and demo-felhom. The vouch is the operator's.

- sha256 `4d98868e922d6c10665a6c0da9323e8627ea9c589094e81d27d741e625d9d8f9`, bundle
  `477704ea2980948433ffc34bb59f008cc11410fd9683d386bfd3e2f085d55bc9`, tag `v0.159.2`; no `configs/` change since 0.159.1.
- Live proof on demo-hp: a whole-guest backup of 9201 (snapshot mode, completed) wrote **0** `felhom-thin-check` sudo
  lines; the night's backup on 0.159.1 wrote 1. The failure leg is covered by `TestBackup_SnapshotFailure_NamesTheOrphan`.
- Delivered on the operator's yes by signed jobs (agent_update + agent_config_update): all three hosts `update
  committed`, capability probe 75/75. Evidence: felhom.eu `documentation/audits/day-2026-10-18/P4/`.
- The independent review of 2026-10-18 found nothing in this change.