docs(report): v0.138.0 live verification — 0.136→0.138 deployed, escrowed end-state confirmed

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017qDiBqKKQ5vPB5fXBqu7Kp

REPORT.md

@@ -94,9 +94,23 @@ so the one-liner "fire a report right after the ceremony" option was correctly s
 
 ## Deploy & live verification
 
-- Committed to `main`; image `gitea.dooplex.hu/admin/felhom-controller:0.138.0` built+pushed on 180;
-  demo guest 9201 update train **0.136.0 → 0.138.0** (two pending versions delivered cleanly).
-- Live card states observed: appended in the "Live verification" section after deploy.
+- Committed to `main` (`1203321`); image `gitea.dooplex.hu/admin/felhom-controller:0.138.0`
+  built+pushed on 180 (digest `sha256:49f9474c…`).
+- **Update train 0.136.0 → 0.138.0** delivered cleanly to guest 9201 (0.137.0 was built but never
+  deployed to the box; the bootstrap pull jumped straight to 0.138.0). `docker ps`:
+  `…felhom-controller:0.138.0 Up (healthy)`; startup clean (`Web UI listening on :8080`,
+  `Starting scheduler with 13 jobs`).
+- **Live end-state (matches the task target):**
+  - `settings.json` → `escrow_state: "escrowed"` (Phase-0 A already flipped it; no `ceremony_completed_at`
+    present, correct for an already-escrowed box) → renders the healthy **"A helyreállítási kód letétbe
+    helyezve"** branch (unchanged).
+  - offbox `enabled: true` + escrowed + Hetzner storagebox target ⇒ **`OffboxRunnable()` true**.
+  - New template strings confirmed in the deployed binary (embedded templates): "megerősítésre vár" ×2
+    (remote card + wizard note), "A megerősítés nem érkezett meg" ×1, "Mi történik ezután" ×1.
+- **Not live-rendered:** the awaiting/timeout cards themselves — they require an in-flight pending
+  ceremony, and re-running the ceremony is Viktor's supervised flow (would un-escrow → re-escrow the
+  live box). S-A/S-B/S-C are covered by the unit truth table + the persisted-field design; the card
+  markup is byte-identical to what the unit-verified booleans gate.
 
 **NOT done — Viktor's click:** the first "Távoli mentés most" (first offsite run) is the customer's, per
 the task. CC stops at escrowed-verified.