From 5e97c44401381b00bbf83f235e88e5ce9f4c3fe8 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Tue, 29 Sep 2026 15:57:25 +0200 Subject: [PATCH] Decisions 48 (wanderer stays, A) and 49 (close sign-up now, A) recorded Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS --- documentation/architecture/09-update-architecture.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/documentation/architecture/09-update-architecture.md b/documentation/architecture/09-update-architecture.md index c2298985..dc33405d 100644 --- a/documentation/architecture/09-update-architecture.md +++ b/documentation/architecture/09-update-architecture.md @@ -527,6 +527,13 @@ R-636's louder repeated alarm. closed. **Proven on 9202:** 11 apps let a stranger sign up after the setup and refused it with the block; 11 more refuse by themselves; the window let a family member in and closed again. wanderer cannot be gated yet (R-714). Evidence `audits/gate-rollout-2026-09-29/`. +48. **wanderer stays in the catalog, with its page's warning, until its gate ships** — *operator ruling 2026-09-29 + evening (R-714, option A).* Outcome: *(filled in by the session that ships it)*. +49. **"Close sign-up now" for apps installed before decision 47** — *operator ruling 2026-09-29 evening (R-716, + option A).* The app page of an installed app whose template has a sign-up lock and whose install has none offers + one press that applies exactly what a fresh install gets after its setup. The box never applies it by itself: a + catalog change never touches an installed app (Part 0 of 2026-09-29 stays the rule). Outcome: *(filled in by the + session that ships it)*. Same day, operator: CC changes the admin passwords of demo-hp's installed bookstack and calibre-web and stores them in the operator's credentials file (not in any repo).