v0.351.0 (unreleased): old -rc controller images and old infra images are deleted (decision 56 amended, decision 285)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

REPORT.md

@@ -1,19 +1,20 @@
-# REPORT — v0.350.0 released as the global floor: Traefik v3.7.17 first (2026-11-03, attended)
+# REPORT — v0.351.0 in code: old test builds and old infrastructure images are deleted (2026-11-09, attended)
 
-**Plain words first.** Every box runs 0.350.0 since 08:18 CET. It closes a real hole: a stranger with no password could fill a box's web front door until it stopped. It also carries five small fixes.
+**Plain words first.** demo-hp's whole-box copy was too big for its system disk. Part of it was old images that
+nothing deletes: 25 old controller test builds and old copies of the system images (traefik, cloudflared, FileBrowser,
+Samba). The controller now deletes both kinds by itself, 3 minutes after each start. **Not released yet.**
 
-| Commit | CI | What |
-|---|---|---|
-| `c4b6844` | 2551 green | Traefik v3.7.17 (GHSA-xv5x-242w-7hf7); R-1347, R-1348, R-1339, R-1351, R-1323 |
-| `3764445` | 2560 green | R-1348: the mail names a restore |
-| `5c336d8` | 2568 green | v0.350.0 heading — the release build's commit. MinAgent 0.158.1 |
+| | |
+|---|---|
+| Version | 0.351.0 (CHANGELOG heading „unreleased"), MinAgent 0.158.1 unchanged |
+| Rulings | `09` §3 decision 56 amended, decision 285 new — operator 2026-11-09 („go with A") |
+| Tests | `TestControllerRetention_OldTestBuildsGo`, `_BoxOnATestBuildIsJudged`, `TestInfraRetention_*` (4); one existing rc expectation changed with the rule |
+| Red-proof | six code mutants, each test red: previous-pin keep, in-use check, R-863 lock, tag parser, running-version parser, release preference |
+| Green gate | `go build ./...`, `go vet ./...`, `go test -count=1 ./...` rc 0; `controller_gates.py --fast` OK |
 
-- rc.1 (`13e34d4`, `sha256:cbf4d42f…`) on 9202: walk green, sign-in works.
-- 0.350.0: `sha256:9ee53908e6d95f0340c41bf4eaba954280084a8e6927de59779440e3551df261`.
-- Per-box floors 08:04:24 CET: all three moved within 45 s, walk green, 26 public names answer, `https_only_check.py` green, sign-in works on Tester 1 and demo-hp (not driven on the lived-in N100).
-- One restore on Tester 1 on the release build: clean.
-- Global floor 08:18:16 CET, its own save; the 30-minute watch stayed healthy, 0 ERROR or held lines at the hub.
+**Measured cause** (felhom.eu `REPORT.md`): on demo-hp guest 9201, 2.2 GB of old controller images and 1.35 GB of old
+infra and helper images, of 27.5 GB. The same images were removed there by hand the same day, so a live proof needs
+a box that still has them (Tester 1: 37 images, 3.8 GB unused).
 
-**The load test on 9202:** v3.7.16 18.7 → 79.0 MiB after 920 NTLM connections, not released; v3.7.17 flat near 25 MiB for 25,116.
-
-**Test proof only:** R-1351 and R-1323 (their conditions did not fire). R-1347 and R-1348 were proven on the test image of the same code, not on the release build. Evidence: felhom.eu `documentation/audits/release-2026-11-03/part1/`.
+**Not done:** no image built, no box moved, no floor. The release path is the skill's: an `-rc` on the three test boxes,
+the box walk, then the tag and the floor.