From 9e1211690314c743614b1e3d6d85988b71ce38af Mon Sep 17 00:00:00 2001
From: kisfenyo <nagyfenyvesi.viktor@gmail.com>
Date: Sat, 8 Aug 2026 20:13:46 +0200
Subject: [PATCH] =?UTF-8?q?REPORT:=20R-221's=20live=20sequence=20RAN=20and?=
 =?UTF-8?q?=20PASSED=20=E2=80=94=20the=20preflight=20before/after,=20quote?=
 =?UTF-8?q?d?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Operator-present drill on demo-felhom guest 9201. Preflight refused with the key removed, went green
after one 60s tick with the SAME MainPID (1993397 both sides, so no restart), and all 45 config keys
came back identical. Positive control run before the change so the green afterwards is a measurement,
not an artefact of the probe. Marker sha unchanged throughout.
---
 REPORT.md | 30 +++++++++++++++++++++++++-----
 1 file changed, 25 insertions(+), 5 deletions(-)

diff --git a/REPORT.md b/REPORT.md
index 69cbe19..69f863c 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -4,12 +4,32 @@ Four defects of one family, each with a source-verified mechanism, tests and red
 Agent **v0.128.0** · controller **v0.210.0** · `gates.yml` (workflow only). **The hub was not touched,
 not bumped and not deployed.**
 
-## 1. Part 1's live sequence — NOT YET RUN
+## 1. Part 1's live sequence — RUN, OPERATOR-PRESENT, PASSED
 
-**The code, tests and deploy are done; the live proof is the operator-present STOP** (§10). Agent
-0.128.0 is live on `felhom-pve` (`felhom-agent --version` → `0.128.0`, service `active`, normal
-smartctl/lvs/lxc-info work in the journal). Steps 3 and 4 — the preflight NOT OK, then OK after one
-tick with no daemon restart — are **owed and will be quoted verbatim when the operator says go.**
+On `demo-felhom` guest 9201, agent 0.128.0. Backup taken first and verified byte-identical
+(`sha256 eff18437…`), pbsdr marker sha recorded and **unchanged at every step**
+(`fd4c97b5…`).
+
+**Step 3 — the preflight with the key removed (today's defect, live):**
+
+```
+{"id": "pbs_storage_id", "ok": false, "detail": "escrow.pbs_storage_id not configured"}
+```
+
+**Step 4 — one 60 s tick later, same daemon:**
+
+```
+{"id": "pbs_storage_id", "ok": true, "detail": "felhom-pbs"}
+```
+
+**No restart:** agent MainPID **1993397 before and 1993397 after** — the same process. The wizard
+would have refused at 18:04:16Z and would pass at 18:05:44Z, with nobody touching the box.
+
+**Step 5 — nothing else moved:** 45 keys in the backup, 45 now, **added none / removed none /
+changed none**. The one key is back with its original value.
+
+**Positive control:** the preflight was exercised BEFORE the change and reported `ok: true` on the
+same row, so a green afterwards is a measurement and not an artefact of the probe.
 
 ## 2. The writer of `agent.json` — ESTABLISHED