installer 1.32.0 published and read back (sha = tag); its nine rows closed (164 -> 155); golden 0.299.0 baked (pinned) for controller v0.299.0 (R-889)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-06 08:14:36 +02:00
parent dbede7975e
commit e6cfe6d6ae
7 changed files with 394 additions and 10 deletions
@@ -20,7 +20,7 @@
  The test now uses UTC; red-proved (back to the local date: CASE 7 fails, `EXPIRED on 2026-10-06` wanted, rc=0 got).
 - `RUNBOOK-manual-build.md` §4.1: the bake's runner script names `GOLDEN_DOCKER_PKGS` (the 0.298.0 bake missed it once).

-## felhom-host-install.sh 1.32.0 — the uninstall leaves nothing that holds a secret or a tunnel; pre-flight tells the truth (burn-down night, 2026-10-05; NOT published — ships with the tag `installer-v1.32.0`)
+## felhom-host-install.sh 1.32.0 — the uninstall leaves nothing that holds a secret or a tunnel; pre-flight tells the truth (burn-down night, 2026-10-05; PUBLISHED 2026-10-06 05:52Z as `installer-v1.32.0`, operator ruling — `09` §3 decision 137)

 - **R-275:** the uninstall removes the agent's config directory with every copy of the config in it (the `.bak*` glob
  missed `agent.json.campaign9-before` & co.), removes the sudoers' dotted copies, and names the vmbr9 stanza and the ISO