felhom-controller/REPORT.md

REPORT — v0.341.0: the night update takes a security-fix step (2026-10-23, D39 = B, 09 §3 decision 255)

What: legCandidate takes proven OR security_fix; every other guard unchanged and in the same order; the leg names a taken security step in its log, its summary step and its summary line. Design read: 09-update-architecture.md §3 decisions 13–15, 52, 255.

Tests (internal/stacks/unattended_security_test.go, six): red-proved by four mutations — the OLD verdict line (taken + needs_person red), a security_fix returning before the guards (needs_person, held, stopped red), any verdict but unrecorded taken (unknown-verdict red), every step logged as a security fix (proven red). Held and stopped run BEFORE the verdict line, so the old line cannot turn them red; that is why their red-proof is a different mutation. go build, go vet, go test ./... green; controller_gates.py --fast OK.

Live: see the felhom.eu evidence documentation/audits/security-lane-2026-10-23/ (P2 old controller, P3 the rc).