hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/CHANGELOG.md

@@ -1,3 +1,20 @@
+## gates + tools — burn-down round 2 (2026-10-05)
+
+- **R-819:** `check_stands.py` rule 3 also accepts an id found in `CLOSED-ITEMS.md`; registered as the `stands` gate in
+  `repo_gates.py` with three decoys (the „check the stand's status agrees" half is not built — too vague to build).
+- **R-857:** `golden_currency_gate.py` reads a bake directory with a suffix after its date and, for two bakes of one
+  version, the newest bake log; `RUNBOOK-manual-build.md`: re-vouch at once after a same-version re-bake (CASE 16, 17).
+- **R-555:** `wire_contract_gate.py` strips Go and template comments before matching receiver tokens (a tag named only in
+  a comment no longer counts as decoded); 6 fields that this surfaced are allow-listed — 4 with recorded reasons, 2
+  (`stacks.deployed`, `storage.decommissioned`) filed as R-888 for a decision. Decoy added; exemption removed.
+- **R-364:** `scripts/hu_grep.py` — search Hungarian text by bytes, refuse a zero unless an ASCII anchor hits and a
+  negative control misses (`test_hu_grep.py`; `REUSE.md`).
+- **R-587:** `iso/build-felhom-iso.sh` refuses a RELEASE build while a `*.rootpw.txt` sits in its output dir; the
+  build-deploy skill's publish block stops on one (`iso/test/test_rootpw_guard.py`, under a BusyBox PATH).
+- **R-725 (ISO half):** the bound-banner glyph (`iso/felhom-bootstrap.sh`, golden `bound.hu.txt`;
+  `iso/test/test_console_glyphs.py`). Ships with the next ISO.
+- **R-208:** `test_dockerfile_arg_order.py` (hub + controller Dockerfiles).
+
 ## hub-db-backup — the snapshot time is read the BusyBox way too (2026-10-05, CI fix)
 
 The new `script-tests` gate ran `test_hub_db_backup.py` on the CI runner (Alpine, BusyBox `date`) for the first time,