felhom-controller/REPORT.md

REPORT — v0.341.0: the night update takes a security-fix step (2026-10-23, D39 = B, 09 §3 decision 255)

What: legCandidate takes proven OR security_fix; every other guard unchanged and in the same order; the leg names a taken security step in its log, its summary step and its summary line. Design read: 09-update-architecture.md §3 decisions 13–15, 52, 255.

Tests (internal/stacks/unattended_security_test.go, six): red-proved by four mutations — the OLD verdict line (taken + needs_person red), a security_fix returning before the guards (needs_person, held, stopped red), any verdict but unrecorded taken (unknown-verdict red), every step logged as a security fix (proven red). Held and stopped run BEFORE the verdict line, so the old line cannot turn them red; that is why their red-proof is a different mutation. go build, go vet, go test ./... green; controller_gates.py --fast OK.

Live (felhom.eu documentation/audits/security-lane-2026-10-23/): on 0.340.0 the night leg skipped the drill's security step (not_proven) and a hand press took it; on 0.341.0-rc.1 the night leg logged plex: security fix CVE-2026-96652,… taken and ended done (second-drive copy and undo copy first). Released: image 0.341.0 from 63dcccf (CI 2264 / #471 success); per-box floors on the three test boxes, all on 0.341.0 by 11:15:31 UTC, box walk green; global floor 0.341.0 / MinAgent 0.158.1 at 11:24:47 UTC on the operator's yes; per-box floors cleared.