docs: v0.72.0 ship report + live validation, CONTEXT rulings, DIAG-f10 R-70/R-71 status annotations

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01NKSN3gSg4TKVBBqkwW2djR
2026-07-23 13:05:03 +02:00
parent 92681bda6c
commit 527d81cf70
3 changed files with 105 additions and 50 deletions
@@ -3,6 +3,25 @@
 > Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
 > `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.

+- **2026-07-23 — hub v0.72.0 + controller v0.161.0: R-70 SHIPPED + R-71(c) PARTIAL (the offsite
+  last mile is visible; burned credentials self-heal).** One detector
+  (`offsite.DeliveryStateFor` — secret-row timestamps × report offsite-presence), four consumers:
+  operator card (static "delivered once" copy DELETED; state+age, amber past 30 min, stale-staged
+  info line), `offsite_delivery_stuck` warning (≥1 h, 24 h durable cooldown via `LastEventAt` on
+  the events table — restart-proof), R-71c self-heal through the EXISTING Re-issue path
+  (`monitor.OffsiteReissuer` ← webServer, armed only with a provisioner; consumed ≥1 h + ≥4
+  offbox-less reports + zero offbox evidence; one restage/24 h; every firing = a warning event),
+  and the controller's truthful empty-state banner (v0.161.0, both boxes). **Rulings:** applied
+  wins (stale-staged is a flag, never a downgrade); cooldowns durable via events table; both new
+  events operator-only (no customerMessages, not in allowedEventTypes — pbsdr_* precedent);
+  **R-39(a) guard in the CALLER** — the heal re-reads the secret row at act time and refuses over
+  an unconsumed row; the store's clobber semantics stay (Re-issue depends on supersede). Clobber
+  red-proof observed (`reissue calls = 1` + row clobbered with the guard removed). Self-heal +
+  banner ship unit-proven, NOT live-fired (no broken box; F9 rule) — arms on the next natural
+  occurrence. Live: checker silent on the healthy fleet; demo-felhom's stale-staged specimen
+  intact (its cleanup is the operator's, post-validation). R-71(a) day-0 ordering OPEN → next
+  spec. Evidence: `REPORT.md` (2026-07-23).
+
 - **2026-07-23 — F10 offsite leg RESOLVED on demo-hp (diagnostic + designed-path repair + tier
  proof; no code changed).** The hub said "Provisioned" while the box said „Még nincs beállítva" —
  root cause: the day-0 managed update (0.153.0→0.156.0, 07-21 16:28) killed the offsite