R-50: A4 fresh-provision validated (agent auto-net1 live); spike caveat closed

- A4: scratch guest provisioned from golden on the island-configured drill came
  up with net1 automatically (zero manual edits) — the v0.96.0 provisioning path
  proven live. Spike method caveat CLOSED.
- REPORT: Phase A done + vouched 0.96.0; B0/B1/A4 done; B2/B3 await operator go.

REPORT.md

@@ -26,8 +26,18 @@ fresh install writes island config an older agent ignores → guest has no islan
 plane. This is the one hard ordering constraint.
 
 ## Status of the phases
-- **Phase A (artifacts): DONE + committed** (agent `dfd5d73`; this repo this commit). Agent build/publish
-  + hub deploy + golden unchanged (net1 comes from the agent, so no re-bake).
-- **Phase B (migration): pending** — `RUNBOOK-island-migration.md` + drill migration (B1) + fresh-install
-  validation (A4), then demo-hp (B2) and demo-felhom (B3) behind operator go/no-go STOP points.
-- **Phase C (Peti cluster): parked** — its own supervised runbook + a new ROADMAP row.
+- **Phase A (artifacts): DONE.** Agent v0.96.0 committed (`dfd5d73`), **published** (sha `af938601…`) and
+  **VOUCHED** in the hub Day-0 manifest (agent 0.96.0; golden 0.161.0 / min_agent 0.93.0 / wrapper
+  preserved). host-install v1.19.0 + hub sync committed (`485321f`). Golden unchanged (net1 comes from the
+  agent). Live site serves 1.19.0.
+- **Phase B (migration): B0+B1+A4 DONE; B2/B3 pending operator go.**
+  - **B0** `RUNBOOK-island-migration.md` written (`4650493`).
+  - **B1** drill migration ran verbatim → island `/storage` **HTTP 200**, LAN DNS held on the LAN IP
+    (Finding-1 pin), apps healthy, hub reports 0.96.0. No rollback.
+  - **A4** the agent auto-attached `net1` on the island at provision (scratch guest from golden, **zero
+    manual edits**) → the provisioning path is proven live (spike method caveat CLOSED). F1 replay + cold
+    reboot were proven on the same drill (spike P6/P7). *(A literal ISO wipe-reinstall was not run — the
+    surgical provision proves the R-50-specific behavior; the ISO/first-boot/day-0 glue is unchanged.)*
+  - **B2 demo-hp / B3 demo-felhom:** await your go/no-go (each its own STOP). The runbook + rollback table
+    are ready; apps stay up throughout.
+- **Phase C (Peti cluster): parked** — its own supervised runbook + a new ROADMAP row (to add at Phase 5).