installer 1.36.1: http_code prints one status (R-1284, red-proved; committed, not published); R-1285 (BYO drop-in removed one bundle late), R-1286 (demo-hp kimai held since 10-14); release-2026-10-26 evidence: BYO proof, the three boxes on 0.343.0, Homepage gate on the drill

scripts/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 2026-10-25 — installer 1.36.1: the preflight words a refusal again (committed, NOT published)
+
+- **`felhom-host-install.sh` `http_code`** printed the status twice on a 4xx (`curl -f` prints `-w` and exits 22, and the
+  `|| curl …` fallback printed it again: „401401"), so the preflight's 401 („passphrase REJECTED"), 404 („customer not
+  found") and 409 (R-1167's „this customer already has a live box") branches never matched — every refusal read
+  „unexpected hub status 401401". Seen live on the BYO test VM (attended release run 2026-10-25). Now one curl without
+  `-f`, `|| true`. `test_hostinstall.py`: `test_http_code_prints_one_status_on_a_refusal` (seen failing on the old helper,
+  `documentation/audits/release-2026-10-26/redproof/installer-http-code-doubled.txt`). **Not published:** the public
+  script follows the `installer-v*` tag; a publish needs the tag and the webpage sync (felhom.eu R-1284).
+
 ## 2026-10-24 — `ep0-iperf3/`: the tunnel-only line-speed test server on ep0 (R-1247; operator ruling 2026-10-24 07:26)
 
 - **`ep0-iperf3/felhom-iperf3.service`** (new, installed by hand on ep0 2026-10-24): Debian's `iperf3 --server` bound to