# REPORT — docs: CLAUDE.md refresh (stable orientation, complete layout)

**Date:** 2026-07-03 · **Class:** docs-only (no code, no version bump, no deploy)
**Baseline:** `main` @ `2a024b6039` (v0.61.0 live on felhom-pve — unchanged)

CLAUDE.md rewritten (diffstat: +86/−71):
- Deleted the "Current: v0.31.0" narrative + per-slice history (stale by 30 versions; current state
  lives in CONTEXT.md + CHANGELOG top — standing rule: no version-pinned state in CLAUDE.md).
- Layout completed: all 17 `internal/` packages + `cmd/felhom-opsign` (old file listed 9; verified
  against the tree). Missing were: capability, desired, escrow, guesthook, lanresolver, localapi,
  provision, signedjobs.
- Build/deploy compressed to a summary table + `felhom-build-deploy` skill pointer. Facts re-verified
  live on felhom-pve: non-root `felhom-agent` service user, `ExecStart=/usr/local/bin/felhom-agent
  --config /etc/felhom-agent/agent.json`, sudoers at `/etc/sudoers.d/felhom-agent`, live `--version`
  = 0.61.0.
- Kept verbatim: the Proxmox-model load-bearing rules (API-first, 3-exception root-CLI fence, UPID
  WaitTask, TLS pinning, privsep gotcha), demo-host section, trunk-based + RUNBOOK conventions.

Consolidated cross-repo report: `felhom.eu/REPORT.md`.