v0.326.0: CONTEXT, REPORT

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -7,7 +7,12 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-10-17 (v0.325.0 — burndown 3: limiters, family fingerprints, samba label, path guard, gates in a worktree)
+Last updated: 2026-10-17 (v0.326.0 — FileBrowser's default checked every run; the decoy suite is a full-run gate)
+
+> **2026-10-17 (afternoon) — v0.326.0.** R-977: `EnsureFileBrowserAdminPassword` probes the default login once per
+> FileBrowser RUN (`fbStartedAt`, `fbProbedRun`), with ~20 s for a new run to answer; measured on 9202 before (default 200
+> for 10 min after a re-created volume) and after (replaced in 2 s). The tunnel-before-claim question is the operator's
+> (R-1120). R-1116: `gate-decoys` in the full run (not `--fast`: 22 s, edits real files — R-1122).
 
 > **2026-10-17 (day) — v0.325.0 (burndown 3).** R-1111 `reserveAttempt` is the one limiter body (dashboard sign-in,
 > share password, escrow re-auth). R-1112 `family.json` stores fingerprints; an old file is converted when the