R-858 closed (agent v0.142.1, ruling 95): the Docker step restarts the socket users; incident evidence; STATUS; report addendum

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -3,8 +3,17 @@
 **Ready for the first real tester (Tester-2): yes. You confirmed the tunnel route and the connect mails (2026-09-30).**
 
 **Updated 2026-10-04 (late evening): the hub has a System page with every box's versions and the update buttons; Docker
-updates are built; a crashed box restarts by itself, at most twice an hour. Both demo boxes run host agent 0.142.0 and
-controller 0.292.0. Hub 0.132.0. Installer 1.30.0. New installs get golden 0.292.0 (re-made: live-restore on, Docker 29.8.2) with agent 0.142.0.**
+updates are built; a crashed box restarts by itself, at most twice an hour. Both demo boxes run host agent 0.142.1 and
+controller 0.292.0. Hub 0.132.0. Installer 1.30.0. New installs get golden 0.292.0 (re-made: live-restore on, Docker 29.8.2) with agent 0.142.1.**
+
+## Today (2026-10-04, ~18:30): you found a bug — the Docker update blinded the box's controller
+
+- **What happened:** the Docker update on the N100 restarted Docker itself. The apps kept running (as designed), but
+  the controller and the web router kept a connection to the OLD Docker, so the controller could not see anything:
+  the hub showed the N100 DOWN from 14:18 to 15:57. demo-hp had the same fault; the crash test happened to heal it.
+- **Fixed (your choice):** after a Docker update the box now restarts just those two (about 10 seconds, apps untouched),
+  and the update's health check now asks "can the controller really reach Docker?". Released as host agent 0.142.1,
+  proven twice on demo-hp, on both demo boxes now, and approved for new installs.
 
 ## Today (2026-10-04, late evening): the System page, Docker updates, the crash restart
 
@@ -34,7 +43,7 @@ controller 0.292.0. Hub 0.132.0. Installer 1.30.0. New installs get golden 0.292
   an "app stopped" mail besides "restarted after a crash" — whether to calm that is a later choice for you.
 - **New-install image re-made** with live-restore on and the approved Docker version, and approved in the hub with host
   agent 0.142.0. New boxes also get the crash guard (installer 1.30.0).
-- **Rows:** 5 closed, 1 opened-and-closed the same day, 4 opened. The list went from 334 to 333.
+- **Rows:** 6 closed, 1 opened-and-closed the same day, 5 opened. The list went from 334 to 333.
 
 **Needs you later (nothing breaks if you wait):**
 - Installed boxes still get new root files only by hand (the long-standing gap; there are no other boxes today).