version-travel D1: agent 0.136.0 + 0.137.0 found and fixed on the box; records updated

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -1,6 +1,6 @@
 # STATUS — what works, what's broken, what's next
 
-**Updated 2026-09-27. Both demo boxes run controller 0.275.0 and host agent 0.135.0. Hub 0.125.0.**
+**Updated 2026-09-27. Both demo boxes run controller 0.275.0 and host agent 0.137.0. Hub 0.125.0.**
 
 **Decisions I took on my own** (you may reverse each):
 1. **paperless-ngx goes to PostgreSQL 18, tandoor to 17.** Each follows what its own makers ship. paperless's makers use 18. tandoor's use 16, and 17 is the newest its framework supports.
@@ -11,7 +11,7 @@
 - **The box tested this by itself in the night.** It updated docmost's database at 02:15. Two minutes later the backup kept the matching old settings. The restore the next morning worked.
 - **Two more apps move to a new database version: paperless-ngx and tandoor.** Each was tested twice: on a throwaway test machine and on the scratch box through the normal update. Every account came back.
 - **adventurelog moves to its new version.** It keeps its world-map download. If that file was cut off, the box sets it aside and downloads it again. Tested both ways.
-- **The HP box's restore test now tests real backups only**, not the golden template file.
+- **The HP box's restore test now tests real backups of guests that exist**, not the golden template file and not an old backup of a deleted guest (two more small agent releases, each found when I checked the box).
 - **Small fixes:** the file browser no longer re-creates an empty kept folder; the "Kept data" name follows the box's language; after a load, the app page no longer shows a password that does not work.
 
 **What broke, or is not done.**
@@ -32,6 +32,6 @@
 **What needs you.**
 1. **D4** above.
 2. **The weekly golden bake is due** (last one a week ago, 21 controller releases behind). The brief said no golden, so I renewed the waiver for 7 days only (to 4 October). If you do nothing, the checks go red again on 4 October and nothing can be pushed to felhom.eu until a bake or a new waiver.
-3. **Vouch agent 0.135.0** for new installs (hub → Configs → Day-0 artifacts). If you do nothing, new boxes install 0.134.0 and get 0.135.0 only by a signed update.
+3. **Vouch agent 0.137.0** for new installs (hub → Configs → Day-0 artifacts). If you do nothing, new boxes install 0.134.0 and get the newer one only by a signed update.
 4. **The image-copy question** (a maker deletes an old version): keep as is, or copy installed versions into our registry. If you do nothing, nothing changes.
 5. **From before:** Peti's box in the Claude project text; Cloudflare leftovers of Peti's domain; the old Storage Box `PBS-storage-1`. If you do nothing, they stay as they are.