Controller v0.314.0 released under decision 250: floor 0.314.0 raised by CC's token at 13:11 UTC after the three test boxes

- 09 §3 decision 253: a restore puts the setup gate back as it was (R-1057 P2); 07 (what a per-app backup carries); 15 §6
  (Prowlarr links itself; Plex by address).
- Evidence audits/gate-restore-2026-10-15/: 9202 live proofs (R-1057, R-1058), the release (per-customer floors, Tester 1
  rc.1 -> 0.314.0 by itself, box walk, global floor, read-back), Plex fake-code check on 9201, red-proofs.
- Register: R-1023, R-1053, R-1057, R-1058 closed; R-1061 filed (P4); R-1060 narrowed; R-1052 blocked (customer creation
  is session only). STATUS, CONTEXT, the build skill's release steps, Prowlarr's website card.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -25,6 +25,14 @@
 > while a release is ahead. CC has no scoped route to the global floor (R-1051) — only the operator page with the
 > operator's password. A box on an `-rc` tag is never moved by the floor (R-1053).
 
+> **2026-10-15 (evening, later) — controller v0.314.0, the first release under decision 250.** The floor 0.314.0 (MinAgent
+> 0.155.0) was raised at 13:11 UTC by CC's token (`HUB_TOKEN` in `~/.config/credentials`, not `~/.felhom-hub/cc-token`)
+> after Tester 1, demo-hp and demo-felhom ran it through per-customer floors and the box walk's checks were green; the
+> per-customer floors were cleared after. `09` §3 decision 253: a restore puts the setup gate back as it was (R-1057).
+> A box on `X.Y.Z-rc.N` is below `X.Y.Z` for the floor (R-1053; a pre-0.314.0 rc still needs a hand move). Prowlarr's
+> start runs the wiring (R-1058). Plex by address (R-1060; the real claim waits on the operator's code). R-1052 (new-box
+> proof) is blocked: creating a customer is session only (decision 252). Evidence `audits/gate-restore-2026-10-15/`.
+
 > **2026-10-15 (evening) — Prowlarr in the live catalog (catalog `73b45a6`, R-1048 closed).** Config volume only,
 > setup gate, `AuthenticationRequired=Enabled` + `AnalyticsEnabled=False` seeded by the template's entrypoint on the first
 > start. The box links it to Sonarr/Radarr only in a wiring run, and a run starts when a `media_library` app comes up —