## 2026-09-29T18:49:26Z vouch — BEFORE
name="min_agent" value="0.131.0"
<option value="0.137.0" data-sha="766c9166…" selected
<option value="0.276.0" data-sha="d8e27393…" selected
name="min_agent" value="0.131.0"
name="wrapper_sha256" value=""
## 2026-09-29T18:49:43Z the vouch: golden 0.282.0 + agent 0.137.0 + min_agent 0.131.0 (MinAgent from controller CHANGELOG v0.282.0 header); hub sha for 0.282.0 == the anonymous round-trip sha
HTTP/1.1 303 See Other
Location: /configuration?flash=artifacts_set
2026/09/29 20:50:11 [INFO] Artifact manifest set: agent=0.137.0 golden=0.282.0 min_agent="0.131.0" wrapper_sha=false
## AFTER (read back)
<option value="0.137.0" data-sha="766c9166916a1bd3674b0dc69081f8a7619e770f1402d8ad7705b395937e7627" selected
<option value="0.282.0" data-sha="a3436b5fcd4870a73eba893e7d48223969a5ea2014dbf4472140b9d61f776347" selected
name="min_agent" value="0.131.0"
## 2026-09-29T18:50:21Z R-120 gate, negative control AFTER the vouch: try golden 0.276.0
HTTP/1.1 303 See Other
Location: /configuration?flash=golden_behind_fleet
2026/09/29 20:50:11 [INFO] Artifact manifest set: agent=0.137.0 golden=0.282.0 min_agent="0.131.0" wrapper_sha=false
2026/09/29 20:50:27 [WARN] artifact vouch REFUSED: golden 0.276.0 is older than the newest controller the fleet reports (0.282.0) — a fresh install would land on stale application code (R-120)
  manifest after the refusal (must still be 0.282.0):
    <option value="0.137.0" data-sha="766c9166916a1bd3674b0dc69081f8a7619e770f1402d8ad7705b395937e7627" selected
    <option value="0.282.0" data-sha="a3436b5fcd4870a73eba893e7d48223969a5ea2014dbf4472140b9d61f776347" selected
