felhom-agent/REPORT.md

REPORT — agent v0.149.0 (2026-10-06, the operator's ten answers)

Full session report: felhom.eu/REPORT.md. Baseline 37e98f4 (v0.148.0).

• R-444 (09 §3 decision 139): a weekly pct fstrim of each running customer guest, daytime only (due Wednesday from 10:00; never 01:00–06:59), under the one-heavy-op gate, logged, persisted, reported as guest_disk_trim; ONE exact sudo rule FELHOM_FSTRIM in the bundle. Measured by hand on demo-hp first: 24 s, thin pool 65.5 % → 33.4 %, app probes all 200.
• R-856 (decision 143): GET /host/crash-guard for the controller.
• R-99 (decision 140): the phantom WARN names runbooks/pbs-phantom-cleanup.md.

Released v0.149.0 (tag = f277e61, sha 6bcae9c2…, bundle e182c82d…), vouched, signed agent_update + agent_config_update to demo-hp, demo-felhom, Tester 1. Read back: all three on 0.149.0; the bundle installed on demo-hp (self-check 68/68) and demo-felhom; sudo -l on both: pct fstrim 9201 allowed, every decoy refused. Tester 2: nothing sent.