doorstep walk on ISO 1.27.x: 1 intervention (R-505), STOP before publish

ISO 1.27.1 gated PASS and proven live: first-boot console Felhom-only,
pvebanner masked across a proven reboot. Hub v0.113.0 hand-over copy live
(R-497 closed). Full first hour walked again on customer tester-1 (three
disks + one disk): deploy, use, backup, removal, byte-identical restore,
power cut, typo all PASS. The tunnel gives a fresh box no routes: 12/12
503 from DooPlex (R-505); the record has no e-mail (R-508). Rows R-507,
R-508 filed; R-496/R-495 fixed/answered awaiting publish; day-0 A.1 no
longer claims the controller creates hostnames (R-506). NOT PUBLISHED.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/CHANGELOG.md

@@ -1,3 +1,20 @@
+## ISO v1.27.1 — the FIRST boot is Felhom's too (2026-09-14, R-496) — NOT PUBLISHED
+
+**Why 1.27.0 was not enough, measured on its proof install (VM 331, screen s20):** `pvebanner.service` ran
+at the first boot before `felhom-bootstrap` could mask it, so the household's first screen still carried
+the Proxmox `:8006` block; the Felhom text below it lost ő/ű (painted before the Latin-2 font loads).
+
+- **postinst:** masks `pvebanner.service` by symlink to `/dev/null` (a file act — valid in the
+  systemd-less installer chroot) and writes `/etc/issue`; both guarded, still `exit 0`.
+- **bootstrap:** the same issue text, byte-identical, without ő/ű — the second line of defence.
+- **harness:** scenario PI runs the postinst in a container; no-ő/ű checks; red first against 1.27.0;
+  55/55 green.
+
+**Proven live on VM 332 (ISO 1.27.1, one disk):** first-boot console shows only Felhom text; after a
+proven reboot `pvebanner` is `masked`, `/etc/issue` has 0 × `8006`, the postinst log records both acts.
+Gate PASS: `documentation/tests/iso-release-1.27.1-2026-09-14/`. sha256
+`25637007d5a7120ff9faa6b5b7ead3e33c0a361ac2d67e9fd4e0ee77c034c053`.
+
 ## ISO v1.27.0 — the console is Felhom's, and names the passphrase once (2026-09-14, R-496)
 
 **Measured in the 2026-09-14 first-hour drill (screen s29):** the first text a household read on a fresh