docs(pilot): GL-6 F5 (dashboard public DNS absent post-reinstall); bridge OK

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

documentation/pilot/DRILL-GL6-2026-07-08.md

@@ -184,6 +184,20 @@ pre-fix. Real 9201 + its state.json untouched (verified: daemon active, controll
 **GL6-F4 CLOSED + live-validated.** (GL6-F3 stays a GL-7 command requirement `--allow-new-leaf`;
 guard-narrowing to `felhom_guests` recorded as a candidate. GL6-F1/F2 remain v1.11.x candidates.)
 
-## Gate 2 — [Viktor]: <pending — F4 fixed + proven; interactive 2b bring-to-life next (CC via browser)>
+### Phase 2b — bring-to-life: BLOCKED on public DNS (GL6-F5), browser bridge confirmed working
+
+- **Browser bridge: WORKS** — created a tab group, navigated to the dashboard; the failure below is
+  the SITE, not the bridge.
+- **GL6-F5 (onboarding, Viktor/Cloudflare):** after the byo reinstall, `felhom.demo-felhom.eu` does
+  NOT resolve publicly — `curl` from the box (outbound internet) returns `Could not resolve host`.
+  The cloudflared tunnel is UP (QUIC + HTTP/2 to argotunnel, precheck all pass, same tunnel token),
+  and the dashboard is healthy IN-GUEST (`HTTP 200`, "Beállítás" setup page) — so the controller +
+  tunnel are fine; the missing piece is the public DNS CNAME `felhom.demo-felhom.eu → <tunnel>.cfargotunnel.com`.
+  The controller does not auto-(re)create the dashboard's own DNS record on reinstall. **This blocks
+  the 2b real-pipeline rehearsal** (password set + drive re-enroll need the dashboard reachable in a
+  browser). NOT an install-correctness defect — the install is green; it is a Cloudflare-zone /
+  onboarding gap that also matters for Peti (GL-7 / G9).
+
+## Gate 2 — [Viktor]: <pending — install green + F4 proven; 2b blocked on F5 (public DNS), decision below>
 
 *(Phases 3–6 appended as they run.)*