Golden 0.283.1 baked, round-trip verified, vouched with agent 0.138.0 (min_agent 0.131.0)

Operator's word 2026-09-30, before Tester-2's install. R-120 control refused 0.282.0 afterwards. Token scan 0.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -2,7 +2,7 @@
 
 **Ready for the first real tester (Tester-2): yes, once you check two things — the tunnel's route in Cloudflare, and which of the two connect mails your friend uses.**
 
-**Updated 2026-09-30. Both demo boxes run controller 0.283.1 and host agent 0.138.0. Hub 0.126.0. New installs get golden 0.282.0 with agent 0.137.0.**
+**Updated 2026-09-30. Both demo boxes run controller 0.283.1 and host agent 0.138.0. Hub 0.126.0. New installs get golden 0.283.1 with agent 0.138.0 (baked and vouched 2026-09-30).**
 
 **Decisions today** (yours, recorded): every new app goes off-site by itself (50); the three drill backups on ep0 go, and the restore test uses only the box's own backups (51).
 
@@ -23,5 +23,4 @@
 
 **What needs you.**
 1. **The Tester-2 tunnel route** (above). If you do nothing and it is missing, your friend's dashboard answers an error page.
-2. **A golden before your friend installs?** The rule says bake one before any fresh install; this task did not include it. Option A (my pick): I bake 0.283.1 before the install — the box then starts on today's code. Option B: skip it — the box starts on 0.282.0 and updates itself to 0.283.1 within seconds (proven on both demo boxes today). If you do nothing, B happens.
-3. **D4, the image copies:** unchanged. If you do nothing, nothing changes.
+2. **D4, the image copies:** unchanged. If you do nothing, nothing changes.