Session close 2026-09-29: R-710 closed live on demo-hp; STATUS, CONTEXT, REPORT-login-gate-2026-09-29

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -16,6 +16,17 @@
 > and holds nothing of its own; this file does hold its own content, namely the standing rulings below.
 
 
+> **2026-09-29 — operator rulings:** (1) CC changed the admin passwords of demo-hp's installed bookstack and calibre-web
+> (stored in the operator's credentials file as `DEMO_HP_BOOKSTACK_*` / `DEMO_HP_CALIBRE_*`, values never in a repo);
+> (2) decision 46 — the setup gate is SPIKED first. **The spike PASSED** (`audits/login-gate-2026-09-29/B/B-VERDICT.md`);
+> controller **v0.280.0** built it (`internal/stacks/setup_gate.go`, `internal/web/setup_gate.go`: forwardAuth →
+> `/__felhom_gate/auth`, handshake on `felhom.<domain>/__gate/start`, host-only gate cookie, key
+> `<data>/setup-gate.key`; the gate file is written BEFORE the first start; open = record, then remove the file) plus
+> R-710 (absent after_install record = not-run-yet for 30 min only; "I changed it"), R-709 (password fields off the
+> page), `generate: password:N:special`. Catalog `d0e7e2e`: gate on immich/n8n/audiobookshelf/uptime-kuma; mealie/wger/
+> calibre-web after_install (argv, never in code); romm/zipline notes; grafana R-708; wger R-712. Floor 0.280.0; both
+> demo boxes on it. R-707: 30 class-4 apps left. Report: `REPORT-login-gate-2026-09-29.md`.
+
 > **2026-09-28 evening — operator rulings (decisions 44, 45):** 44 — demo-hp's restore test uses `nvme-scratch` (the
 > agent's storage role was granted there with the operator's word; proven). 45 — no app is published with a login a
 > stranger knows: generated first password via `after_install:` where the app's own CLI can set it, else the page