hub v0.133.0 (R-859 test approvals end with the test; R-840 bundle on the System page, manifest, alarm); installer 1.31.0 (root files from the config bundle); bundle bootstrap script; golden 0.293.0 evidence; rulings 96–99; drill-r50 removed (evidence)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 20:18:37 +02:00
parent 6b820143f8
commit ff1db11db4
45 changed files with 1707 additions and 42 deletions
@@ -682,10 +682,14 @@ var operatorOnlyEvents = map[string]bool{
 	"offsite_window_large_grant": true,
 	// OS updates (hub v0.130.0, `11` §8 step 2): run failures, rings, switches and approvals are operator facts.
 	// os_update_applied is deliberately NOT here — it is the household's one line (info: recorded, never mailed).
-	"os_update_failed":           true,
-	"os_update_health_failed":    true,
-	"os_release_approved":        true,
-	"os_release_approved_now":    true,
+	"os_update_failed":        true,
+	"os_update_health_failed": true,
+	"os_release_approved":     true,
+	"os_release_approved_now": true,
+	// hub v0.133.0 (`11` §5.3.1): a TEST approval cancelled at a start without the override.
+	"os_release_cancelled": true,
+	// R-840 (hub v0.133.0): a box's root-owned config bundle behind the vouched one for 7 days.
+	"os_config_bundle_behind":    true,
 	"os_update_settings_changed": true,
 	// R-841 (hub v0.131.0): the tunnel alarm — a box fact the household can do nothing about from inside.
 	"tunnel_down":      true,