burn-down night: R-426 felhom.eu decoys (16 -> 12 exemptions; three foolable gates fixed), decision 135

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/CHANGELOG.md

@@ -1,3 +1,10 @@
+## gates — R-426: the felhom.eu exemptions get decoys, and three gates that could be fooled are fixed (burn-down night, 2026-10-06)
+
+- R-426: hostinstall gate — the R-185 grant count now counts only real path-qualified invocations (the dry-run echo had stood in for a deleted grant) and the age-install check ignores commented-out lines; four decoys in test_gate_decoys.py, `felhom.eu/hostinstall` leaves the decoy-coverage EXEMPT list.
+- R-426: due-checks gate — four decoys in test_gate_decoys.py (orphaned id named only in prose, the due-today boundary and its due-tomorrow genuine article, the block marker named in prose); `felhom.eu/due-checks` leaves the decoy-coverage EXEMPT list.
+- R-426: one-register gate — DONE/IDEA now judged on the state cell's leading verdict (an open ROADMAP row reading `READY — … R-86 CLOSED` escaped as shipped); five decoys in test_gate_decoys.py; `felhom.eu/one-register` leaves the decoy-coverage EXEMPT list (R-424's idea-row hole, operator-accepted 2026-10-05, is asserted BY DESIGN).
+- R-426: decoy-coverage gate prints STALE EXEMPTION for an exempt gate that already has a decoy (named, not convicted, to avoid cross-repo coupling); dead `felhom-controller/offbox-rename` entry removed. EXEMPT now 12 entries, none in felhom.eu.
+
 ## gates — the golden gate's test reads the gate's own clock (2026-10-06, fixed without a row)
 
 - `test_golden_currency_gate.py` took „today" from the LOCAL date while `golden_currency_gate.read_waiver` uses UTC; between