CONTEXT: agent v0.80.0 slice-2 shipped, demo adoption-proven, Peti phase pending

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

CONTEXT.md

@@ -3,6 +3,20 @@
 > Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
 > `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.
 
+- **2026-07-11 — PBS DR tier SLICE 2 SHIPPED (agent v0.80.0): the apply-bridge — demo
+  ADOPTION-PROVEN live + PUBLISHED; the supervised Peti phase PENDING.** Full chain fired on the
+  demo: hub enable (storage-id `felhom-offsite`) → tenantsync provisioned ns `demo-felhom` on ep0
+  → agent ADOPTED the manual entry (tenancy entry-owned, "entry wins"; staged secret asserted
+  UNCONSUMED; DR green; `escrow.pbs_storage_id` seeded). Laws red-proof-verified: set-only (K
+  destruction guard), secret-on-stdin, verify-pin-before-consume, loud consumed-failed. Part 0
+  evidence: write path needs the §4b dual-grant exactly (403 `Datastore.AllocateSpace` → re-assert
+  → token vzdump OK); demo grants restored. Live finding fixed: escrow seed = in-place write
+  (/etc/felhom-agent dir is root-owned; rename impossible for the non-root agent). 0.80.0
+  published (`f2ba62ca…f06d2`, == deployed bytes). **NEXT = RUNBOOK-peti-pbsdr-2026-07-11.md**
+  (Peti box prep: sudoers+wrapper+wg_tunnel enable — no tunnel/OOB on his box today; Viktor opsign
+  0.80.0; hub enable → FRESH path, K born, degradation clears; ceremony → auto-confirm → first
+  offsite run = the arc closes). Detail: felhom-agent/REPORT.md + CHANGELOG v0.80.0.
+
 - **2026-07-10 — PBS DR tier SLICE 1 SHIPPED+LIVE (hub v0.44.0): ep0 tenantsync surface + hub
   provisioning.** `felhom-tenantsync` v1.0.0 installed on ep0 (second forced-command key, peersync
   untouched — hashes asserted; smoke caught + fixed the client `{"data":[…]}` json wrap; orphan