pilot: publish-train 0.81/0.113 results — Peti live, floor auto-confirm proof captured

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

CONTEXT.md

@@ -3,6 +3,19 @@
 > Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
 > `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.
 
+- **2026-07-11 — PUBLISH TRAIN 0.81/0.113 COMPLETE — PETI LIVE on agent 0.81.0 + controller 0.113.0.**
+  Record: `documentation/pilot/RUNBOOK-publish-0.81-0.113-2026-07-11.md`. Agent 0.81.0 published
+  (sha `914bb3b5…30df0b`, live-bytes, anon-verified) + golden 0.113.0 baked/published (sha
+  `66de5e64…82054c`, drill VM, virgin-reverted); manifest + signed `agent_update`
+  (key-id `felhom-op-1`) by Viktor → Peti 0.79.0→0.81.0 clean (no rollback); **floor auto-confirm
+  proof CAPTURED** (10:41 0.112.0 → 10:42 0.113.0, anonymous pull proven on HIS box) — KEY LEARNING:
+  the hub UI manifest screen ALSO sets the GLOBAL floor as a DB `hub_settings.min_controller_version`
+  row that OVERRIDES the env and acts immediately (this is how Peti reached 0.112 and now 0.113
+  before the GitOps env bump `16390d0`); a transient forbidden skew (ctrl 0.113 + agent 0.79,
+  ~10 min) was benign only because zero NAS shares existed — next train: save the floor field LAST.
+  OPEN: Peti journal-group one-liner (E), temp Git Sync creds deletion (G1), **hub bearer key
+  rotation now DUE** (committed in manifests/hub.yaml + screenshot-exposed this session).
+
 - **2026-07-11 — NAS verify-before-commit SHIPPED (agent v0.81.0 + controller v0.113.0 LIVE on demo;
   host-install v1.13.0).** The spike's production task landed same-day: add = agent verify (retry=0
   unit, journal-classified, auto-rollback) → controller uid-1000 write probe (--netprobe re-exec) →