golden 0.246.0 baked and vouched with agent 0.132.0; controller floor 0.246.0 (operator decisions)

Decision 1 delivered: floor 0.246.0 served, the N100 on 0.246.0 within seconds;
Peti's box is DOWN on the hub and receives it when it reports.

Decision 2: the agent vouch was refused by R-120 until a newer golden existed.
On the operator's choice, golden 0.246.0 was baked (sha 05b7559d, amd64, all
markers, token leak 0 with control 1, registry 200 before teardown) and vouched
together with agent 0.132.0. golden_currency_gate: WAIVED -> OK. Bake evidence
filed where the gate and runbook read it: tests/golden-0.246.0-2026-09-17/.

Recorded, none reaching the registry: a first attempt on the arm64 template
(my version sort), a self-matching pkill, and an OOM-killed watcher whose
post-bake steps were done by hand.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/audits/evidence-chaos-fixes-2026-09-17/decision2-vouch-agent-0132.txt

@@ -1,11 +0,0 @@
-# Operator decision 2 (2026-09-17, "yes"): vouch agent 0.132.0 for Day-0 installs
-before: agent 0.131.0 (1118b552…), golden 0.245.0 (7a08aa1a…), min_agent 0.131.0, wrapper 104db0a4…
-2026-09-17T09:55:22Z POST /configuration/artifacts agent_version=0.132.0 golden_version=0.245.0 min_agent=0.131.0 wrapper_sha256=<carried over>
-  HTTP/1.1 303 See Other
-  Location: /configuration?flash=golden_behind_fleet
-  hub log: 2026/09/17 11:55:41 [WARN] artifact vouch REFUSED: golden 0.245.0 is older than the newest controller the fleet reports (0.246.0) — a fresh install would land on stale application code (R-120)
-
-RESULT: REFUSED by the hub's R-120 gate, as the handler's source predicted (hub/internal/web/configs.go
-handleSetArtifacts: the golden may not be older than the newest controller any box reports). Nothing was
-stored — the check runs before SetArtifactManifest. The Day-0 manifest is still agent 0.131.0 / golden 0.245.0.
-Vouching agent 0.132.0 therefore needs a golden >= 0.246.0 first. Put to the operator.