ISO 1.28.0 source: the console stops showing the pairing code once bound (R-535)

Measured 2026-09-16: 25 minutes after a successful bind AND claim the console still
showed the pairing code under a line promising the screen refreshes itself.

print_bound_banner is printed the moment the bind delivery lands. It does NOT name
the dashboard URL: the one-shot delivery carries the customer id, passphrase and
mode, not the domain, so naming an address would mean inventing one. The residue —
the console still does not reflect the later CLAIM, because this unit has exited by
then — is recorded in the changelog rather than implied away.

Not published: the built image needs the release gate and the operator's yes.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/CHANGELOG.md

@@ -1,3 +1,21 @@
+## ISO v1.28.0 — the console stops showing the pairing code once the box is connected (2026-09-16, R-535) — NOT PUBLISHED
+
+**The defect, measured on a fresh box 2026-09-16:** 25 minutes after a successful bind AND claim, with
+four apps deploying, the physical console still read „a doboz készen áll, és a párosításra vár" with
+the pairing code `37S-NFE`, under the line „Ez a képernyő magától frissül — nincs teendő a doboznál".
+A volunteer watching the monitor has no way to tell the box is finished, and the screen promises that
+waiting will update it.
+
+- **`felhom-bootstrap.sh`: `print_bound_banner`**, printed the moment the bind delivery lands (the
+  `200` branch, before `run_direct`). It replaces the pairing screen with „a doboz össze van kötve",
+  says the setup continues by itself, and says there is nothing left to do at the machine.
+- **What it deliberately does NOT say: the dashboard URL.** The one-shot delivery carries the customer
+  id, the passphrase and the mode — not the domain — so naming an address would mean inventing one.
+  The address is in the e-mail the customer already has. **The later CLAIM state is still not
+  reflected on the console**: this unit has exited by then (it hands over to the host install), so a
+  claim-aware console needs a different owner. R-535 is closed for the measured complaint — the code
+  stays on screen after binding — and that residue is recorded rather than implied away.
+
 ## ISO v1.27.1 — the FIRST boot is Felhom's too (2026-09-14, R-496) — NOT PUBLISHED
 
 **Why 1.27.0 was not enough, measured on its proof install (VM 331, screen s20):** `pvebanner.service` ran