# REPORT — agent v0.149.0 (2026-10-06, the operator's ten answers)

Full session report: `felhom.eu/REPORT.md`. Baseline `37e98f4` (v0.148.0).

- **R-444** (`09` §3 decision 139): a weekly `pct fstrim` of each running customer guest, daytime only (due Wednesday from
  10:00; never 01:00–06:59), under the one-heavy-op gate, logged, persisted, reported as `guest_disk_trim`; ONE exact sudo
  rule `FELHOM_FSTRIM` in the bundle. Measured by hand on demo-hp first: 24 s, thin pool 65.5 % → 33.4 %, app probes all 200.
- **R-856** (decision 143): `GET /host/crash-guard` for the controller.
- **R-99** (decision 140): the phantom WARN names `runbooks/pbs-phantom-cleanup.md`.

Released v0.149.0 (tag = `f277e61`, sha `6bcae9c2…`, bundle `e182c82d…`), vouched, signed `agent_update` + `agent_config_update`
to demo-hp, demo-felhom, Tester 1. Read back: all three on 0.149.0; the bundle installed on demo-hp (self-check 68/68) and
demo-felhom; `sudo -l` on both: `pct fstrim 9201` allowed, every decoy refused. Tester 2: nothing sent.