REPORT/CONTEXT: agent 0.159.1, the catalog allow-list (controller v0.328.0), its catalog gate (2026-10-17)

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -1,5 +1,10 @@
 # CONTEXT.md — Project Memory
 
+
+> **2026-10-17 (late) — v0.328.0 is the floor (MinAgent 0.158.1): the catalog allow-list (R-971, operator decision D2 = A).**
+> `internal/privpolicy` refuses container rights not on the compiled list before ANY compose write; refusal = nothing
+> written + `app_definition_refused` (hub ≥ 0.157.0) + an app-page line. Three security-review rounds fixed before the
+> release; a live finding on 9201 (rc.4) fixed in rc.5. Follow-ups R-1142 (cross-app appdata), R-1143 (`:latest`).
 > This file serves as persistent project memory across Claude Code sessions.
 > It replaces the auto-generated "Memory" from the claude.ai Project.
 > **Update this file at the end of each working session** with current state,