Instruction files kept true (09 §3 decision 150): stale gate lists, paths and facts corrected; no code change

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

REPORT.md

@@ -1,13 +1,10 @@
-# REPORT — controller v0.300.0 (2026-10-06, the operator's ten answers)
+# REPORT — instruction files kept true (2026-10-06 afternoon)
 
-Full session report: `felhom.eu/REPORT.md`. Baseline `13bda27` (v0.299.0). **MinAgent 0.131.0**.
+Operator ruling 2026-10-06 13:25 (`09` §3 decision 150): a session corrects a stale fact in an instruction file
+itself and names the edit; it may not loosen a rule. No code changed in this repo. The full session report, with every
+instruction-file edit (file, before, after, why), is `felhom.eu/REPORT.md`.
 
-- **R-645** (`09` §3 decision 142): the night backup skips an app that runs another version than it saved (pin ≠
-  running), in every night leg; one amber line on the backups page. Proven by `TestR645_HandLiftedHoldKeepsTheGoodUnit`
-  (red-proved). Residual: once the boot reconciler starts the new version, pin = running again (a design question).
-- **R-856** (decision 143): after a crash boot of the host, app mails wait ~15 min; a normal boot keeps 90 s; unknown =
-  normal. Reads the agent's new `GET /host/crash-guard` (agent v0.149.0). Live on demo-hp and demo-felhom: both logged the
-  NORMAL branch with the right reason; the crash branch is covered by tests only (no crash allowed).
-
-Released: image `felhom-controller:0.300.0`, golden 0.300.0 (pinned Docker set), vouched with agent 0.149.0, floors 0.300.0
-for demo-hp, demo-felhom, Tester 1 — all three run it. Full suite rc 0, gates rc 0, CI 1424 success.
+Edits here:
+- `.claude/rules/unprompted-work.md`: new §5 (the standing rule, verbatim); the copies line now names felhom.eu, felhom-controller, app-catalog-felhom.eu and the workspace root (it said „all three repos").
+- `.claude/rules/gates.md`: command `python3 controller/scripts/controller_gates.py` (from `controller/`) → `python3 scripts/controller_gates.py` from `controller/`. Why: the old path does not exist from there (the runner's own usage line and CI use the new one). The list of ten local gates → a pointer to `GATES` (fourteen local + three shared + the advisory `golden-notice`). `observations_gate.py` added to the shared list. Decoy gate path gained `felhom.eu/`.
+- `CLAUDE.md`: the same command fix in the Commands table; „Protected stacks (traefik, cloudflared, felhom-controller)" → „…, and always samba" (`internal/config/config.go` `alwaysProtectedStacks`); design pointer `architecture/01/02/03-*.md` → `architecture/NN-*.md` (01–03 for this repo; 07, 09, 10).