ISO 1.29.0 PUBLISHED — bilingual console, proven on both menu entries (R-559)

Live at iso.felhom.eu, sha256 dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571
db2fd8449a97e94829, and both download pages now name it.

Every gate criterion is recorded with its OBSERVED value in
documentation/tests/iso-release-1.29.0-2026-09-18/ — including two proof
installs from the published bytes, one per boot-menu entry, each with a first
boot AND one reboot: /etc/issue bilingual with zero hits for 8006, pvebanner
masked, package 1.29.0 installed, unit enabled and fired, pairing code present,
and the installed script byte-identical to repo HEAD. G11: the downloaded bytes
hash to the published checksum.

A defect was caught BETWEEN builds by looking at the screen rather than at the
config: the second menu entry read "Felhom telepítés (szöveges mód) / Install
Felhom (text mode)" — 58 characters — and the GRUB menu box cut it at "Instal".
The English half was unreadable on the boot screen. Shortened to "… / text" and
rebuilt; the published image is the rebuilt one. The Hungarian half is the part
that may not change, so the English half is the part that gave.

Teardown: VMs 323/324/325 destroyed, the two unclaimed appliance registrations
discarded (zero left in `registered`), guest 9201 untouched — 23 containers
before and after. The two stale *.rootpw.txt files were shredded from the
publish source directory before the upload ran from it (R-587, files gone; the
guard that would stop it recurring is still open).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/CHANGELOG.md

@@ -40,11 +40,17 @@ this publication**. Operator ruling **1b of 2026-09-17** supersedes that scope (
 and the download page ARE in scope"). G16 is rewritten: Hungarian FIRST, pinned by the golden, each
 secret named once per language. What it protects is now stronger, not weaker.
 
-**RELEASE STATE: the image is not built and not published.** `ISO_VERSION` is `1.29.0` in the build
-script and the source is ready, but publishing to `iso.felhom.eu` is public and irreversible and its
-runbook requires a proof install on **both** menu entries plus the 16-criterion gate against the exact
-uploaded bytes. That is the operator's step. The download pages therefore still name **1.28.0** — the
-image that is actually published — and a new gate refuses them naming different things.
+**RELEASE STATE: PUBLISHED 2026-09-18** — `felhom-installer-1.29.0-pve9.2-1.iso`, sha256
+`dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571db2fd8449a97e94829`, live at `iso.felhom.eu`, with
+both download pages updated to it. Every gate criterion recorded with its observed value in
+`documentation/tests/iso-release-1.29.0-2026-09-18/`, including proof installs on **both** menu
+entries (first boot AND one reboot each) and a verified round trip.
+
+**One defect was caught between builds, by looking at the screen rather than at the config:** the
+second menu entry read `Felhom telepítés (szöveges mód) / Install Felhom (text mode)` — 58 characters,
+and the GRUB menu box **cut it at `Instal`**. The English half was unreadable on the boot screen. It
+was shortened to `… / text`; the Hungarian half is what may not change, so the English half is the
+part that gave. The published image is the rebuilt one.
 
 ## i18n inventory + wire-contract allowlist entry (2026-09-17, localisation starter)
 

scripts/iso/grub/grub-release.cfg.tmpl

@@ -72,7 +72,7 @@ menuentry 'Felhom telepítés / Install Felhom' --class felhom --class os {
 @@INITRD@@
 }
 
-menuentry 'Felhom telepítés (szöveges mód) / Install Felhom (text mode)' --class felhom --class os {
+menuentry 'Felhom telepítés (szöveges mód) / text' --class felhom --class os {
     echo 'A Felhom telepítése indul szöveges módban...'
 @@LINUX_TUI@@
     echo 'Rendszerbetöltő betöltése...'