docs: felhom.eu REPORT (hub F2 + install-script preservation) + TESTRUN F2-closed

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pg8ANF97SEeKYSN5Jxw3qJ

documentation/audits/TESTRUN-fullstack-2026-06-29.md

@@ -156,6 +156,21 @@ next fresh boot).
 
 ---
 
+## F2 CLOSED (2026-06-29) + prevention shipped
+
+The testrun surfaced **F2**: a channel/host failure present at startup/reseed alerted only on a live
+transition, so a born-down (e.g. a controller booting into pin_mismatch) was dashboard-only, no
+operator email. **Closed** — controller **v0.91.0** (`alerted`-flag rework) + hub **v0.21.0** (checkers
+seed only healthy; born-degraded/stale emits on first Check, cooldown dedups). Live-validated: a
+controller restarted into a regenerated-leaf channel logged `[channel] agent channel DOWN
+(unseeded->down:pin_mismatch)` and **pushed `agent_channel_pin_mismatch`** (~60 s) — the capstone's
+missing half (detection at startup). **Prevention** for the original incident also shipped: agent
+**v0.46.0** loud-WARNs a regenerated leaf (`leaf REGENERATED — pins now INVALID`), and
+`felhom-host-install.sh` gained `--preserve-state-from` (keeps the leaf/pin stable across a reinstall)
++ a populated-host guard (refuse to regenerate the leaf on a host with guests). The §K prevention
+recommendation is now implemented; the full live reinstall is the only piece awaiting a supervised run.
+(F1 swap-rollback `RestartCount` hardening remains backlog.)
+
 ## Final state — known-good
 
 agent 0.45.0 / controller 0.90.0 / hub 0.20.0; leaf fp == pinned fp `60b5974d…`; capabilities 45/45