# REPORT — controller v0.334.0 (2026-10-19, third day brief)

**Shipped and the floor for every box** (14:31 UTC, MinAgent 0.158.1) after Tester 1, demo-hp and demo-felhom took it by
the normal update path (per-box floors 14:16 UTC) and the box walk was green on all three. Image `0.334.0` digest
`sha256:deeabe59d932cd60f8939a37bccf94f145555101fc7be64b6c5cc15f3557031a`, built from `546eef3`; rc.1 on demo-hp only.

- **R-1159 (operator decision D19 „box key first, then lock"):** the live config refresh pulls `GET /api/v1/box-config/{id}`
  with the box's own hub key (`report.PullConfigPreferKey`, wired in `main.go`'s `ConfigRefresher`); the retrieval
  passphrase only against a hub without the route or before the box has a key; a refused key is never retried with the
  passphrase. Hub 0.161.0 then refuses passphrase keys for a box on this version that has reported.
- Tests: `TestR1159_RefreshUsesTheBoxKey` (red-proved: the old pull made 0 key pulls), `TestR1159_MainWiresTheKeyFirstRefresh`.
- Live on demo-hp: the box's own key → 200 with its config, a wrong key → 401; after its first 0.334.0 report the
  passphrase → 409 with no key (felhom.eu `audits/day-2026-10-19c/P4/`).
- Box walk (`P5/`): 0 unhealthy, 0 allow-list refusals, catalog in sync; https-only 28 OK; „Fájlok ↗" unchanged.