# Operator decision 2 (2026-09-17, "yes"): vouch agent 0.132.0 for Day-0 installs
before: agent 0.131.0 (1118b552…), golden 0.245.0 (7a08aa1a…), min_agent 0.131.0, wrapper 104db0a4…
2026-09-17T09:55:22Z POST /configuration/artifacts agent_version=0.132.0 golden_version=0.245.0 min_agent=0.131.0 wrapper_sha256=<carried over>
  HTTP/1.1 303 See Other
  Location: /configuration?flash=golden_behind_fleet
  hub log: 2026/09/17 11:55:41 [WARN] artifact vouch REFUSED: golden 0.245.0 is older than the newest controller the fleet reports (0.246.0) — a fresh install would land on stale application code (R-120)

RESULT: REFUSED by the hub's R-120 gate, as the handler's source predicted (hub/internal/web/configs.go
handleSetArtifacts: the golden may not be older than the newest controller any box reports). Nothing was
stored — the check runs before SetArtifactManifest. The Day-0 manifest is still agent 0.131.0 / golden 0.245.0.
Vouching agent 0.132.0 therefore needs a golden >= 0.246.0 first. Put to the operator.

## ATTEMPT 2 of the vouch, after golden 0.246.0 was baked and published (2026-09-17T10:23:59Z)
POST /configuration/artifacts agent_version=0.132.0 golden_version=0.246.0 min_agent=0.131.0 wrapper_sha256=<carried over>
  HTTP/1.1 303 See Other
  Location: /configuration?flash=artifacts_set
  hub log: 2026/09/17 12:24:20 [INFO] Artifact manifest set: agent=0.132.0 golden=0.246.0 min_agent="0.131.0" wrapper_sha=true
  read back from /configuration:
    agent_sha256             4afe815749a41b327ebe4a98a4557ad2acffb1fa71740a3a8b8003473b835321
    golden_sha256            05b7559dd119a1d527b459730f6d500fa396f01fea9f863f3c317ad1e2bc4bd6
    wrapper_sha256           104db0a4401f65bbc476e82bfb1796433bcb36f8f8cce69efb3bb5c40fcb16b3
    min_agent                0.131.0
    min_agent                0.131.0
    min_controller_version   0.246.0
    vouched golden (v0.246.0)
