STATUS + CONTEXT + DRILL record: conversion, kept data, D3; 09 decision 39; R-655 measured

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -14,6 +14,19 @@
 > language, one screen, no identifiers in the prose. Same subjects, different readers; merging them
 > would make one of the two audiences stop reading. `STATUS.md` is also a **view of `OPEN-ITEMS.md`**
 > and holds nothing of its own; this file does hold its own content, namely the standing rulings below.
+## 2026-09-25 (evening) — PostgreSQL conversion (controller v0.273.0), kept data (v0.274.0), hub v0.125.0
+
+- **Controller v0.273.0** = `09` §6.4 part 10 for docmost: `stacks/pgconvert.go`, only on a ladder step marked
+  `engine_conversion`; unmarked PostgreSQL major moves refused (preflight + job). **v0.274.0** = decision 36 (kept data:
+  install choice, `/kept-data`, read-only file-browser source, `<drive>/kept` protected and never backed up) + R-690 +
+  R-692. Floor 0.274.0 (MinAgent 0.131.0). 9202 runs 0.274.0 on the DRILL catalog (reset to live at teardown).
+- **Catalog:** harness v4; the engine gate's proof clause; **docmost `postgres:16` → `18` moved** (`afd3a60`, mount
+  `/var/lib/postgresql`, docmost limit 512M); nextcloud `after_load`.
+- **Decisions taken by CC unattended, operator may reverse (`09` §3):** 37 (target 18, not 17), 38 (`pg_dumpall` from
+  the old engine, zero tolerated load errors), 39 (docmost 384M → 512M).
+- **Hub v0.125.0:** the customer delete lists the Cloudflare items to remove by hand (R-688 half).
+- Record: `documentation/audits/DRILL-night-2026-09-26.md`.
+
 ## Rulings 2026-09-25 (evening, operator)
 
 - **`09` §3 decision 35 — part 10 is built now, docmost first** (D1 option A). The box converts a PostgreSQL