felhom-controller/REPORT.md

REPORT — v0.281.0: "Done" asks the app first; sign-up closed after the first admin (decision 47); R-713 (2026-09-29 afternoon)

Architecture: felhom.eu/documentation/architecture/09-update-architecture.md §3 decisions 46–47, 01-topology-and-trust.md §5. Evidence: felhom.eu/documentation/audits/gate-rollout-2026-09-29/. Session report: felhom.eu/REPORT-gate-rollout-2026-09-29.md.

• The press asks the probe first (409 while "not done" or unreadable); an app without a probe confirms in the page. Live: zipline pressed before its setup → 409.
• Sign-up block (signup_block:), written when the gate opens and BEFORE the gate comes down (a failed write keeps the gate closed); answered by /__felhom_gate/signup-closed; the household's 15-minute window. Live on 9202: 11 apps refused a stranger with the block; the window let a family member in and closed again. Never on an app this box did not gate (Part 0; read on both demo boxes after the catalog push).
• R-713: code-bound after_install values refused; ${NAME|base64}. Live: claper with " and #{.
• Tests: TestSetupGateButton_*, TestSignupBlock_*, TestSignupClosed_*, TestSetupGatePage_ConfirmAndSignupCard, TestR713_*; full suite, vet and controller gates green; parity fixtures regenerated for the changed button only. Red-proofs RP17–RP24, each seen failing on an assertion (RP22 re-run after its first mutation did not compile).
• Delivered: floor 0.281.0; both demo boxes run it. MinAgent 0.131.0 (unchanged).