felhom-agent/REPORT.md

REPORT — agent v0.159.2 released (2026-10-18)

In plain words. The pool check that names an orphan snapshot now runs only after a whole-box backup has failed — not before every backup. Released today; it runs on demo-hp, Tester 1 and demo-felhom. The vouch is the operator's.

• sha256 4d98868e922d6c10665a6c0da9323e8627ea9c589094e81d27d741e625d9d8f9, bundle 477704ea2980948433ffc34bb59f008cc11410fd9683d386bfd3e2f085d55bc9, tag v0.159.2; no configs/ change since 0.159.1.
• Live proof on demo-hp: a whole-guest backup of 9201 (snapshot mode, completed) wrote 0 felhom-thin-check sudo lines; the night's backup on 0.159.1 wrote 1. The failure leg is covered by TestBackup_SnapshotFailure_NamesTheOrphan.
• Delivered on the operator's yes by signed jobs (agent_update + agent_config_update): all three hosts update committed, capability probe 75/75. Evidence: felhom.eu documentation/audits/day-2026-10-18/P4/.
• The independent review of 2026-10-18 found nothing in this change.