felhom-agent/REPORT.md

REPORT — docs: CLAUDE.md refresh (stable orientation, complete layout)

Date: 2026-07-03 · Class: docs-only (no code, no version bump, no deploy) Baseline: main @ 2a024b6039 (v0.61.0 live on felhom-pve — unchanged)

CLAUDE.md rewritten (diffstat: +86/−71):

• Deleted the "Current: v0.31.0" narrative + per-slice history (stale by 30 versions; current state lives in CONTEXT.md + CHANGELOG top — standing rule: no version-pinned state in CLAUDE.md).
• Layout completed: all 17 internal/ packages + cmd/felhom-opsign (old file listed 9; verified against the tree). Missing were: capability, desired, escrow, guesthook, lanresolver, localapi, provision, signedjobs.
• Build/deploy compressed to a summary table + felhom-build-deploy skill pointer. Facts re-verified live on felhom-pve: non-root felhom-agent service user, ExecStart=/usr/local/bin/felhom-agent --config /etc/felhom-agent/agent.json, sudoers at /etc/sudoers.d/felhom-agent, live --version = 0.61.0.
• Kept verbatim: the Proxmox-model load-bearing rules (API-first, 3-exception root-CLI fence, UPID WaitTask, TLS pinning, privsep gotcha), demo-host section, trunk-based + RUNBOOK conventions.

Consolidated cross-repo report: felhom.eu/REPORT.md.