# ISO release gate — felhom-installer-1.27.0 (2026-09-14)

**SUPERSEDED BY 1.27.1 — never to be published.** Its proof install (VM 331) still showed the Proxmox `:8006` block on the first boot (R-496). Built and gated; the proof installs and the first-hour walk are Phase 4 of the
doorstep task; publishing waits for the operator's yes (task Phase 5 STOP).

| | |
|---|---|
| file | `felhom-installer-1.27.0-pve9.2-1.iso` |
| sha256 | `2e2f96d30682537585612c5f277c4afa51375434a95e35a231be6d7e3d5c2ab5` |
| size | 1 705 322 496 B |
| built from | felhom.eu `6fd8c87` (manifest `repo-commit`); `HEAD` at gate time `63f29c6` changes only `manifests/hub.yaml` |
| package | `felhom-bootstrap_1.27.0_all.deb`, 13 060 B |

Every observed value and what was scanned for: `gate-run.txt` (run in `felhom-iso-assistant:trixie`
against the exact output file, stock ISO `proxmox-ve_9.2-1.iso` for the enumeration).

| criterion | result | observed |
|---|---|---|
| G1 no answer file | **PASS** | `0`; control: `/auto-installer-capable` found by the same `find` (`1`) |
| G2 no root password | **PASS** | `0` hash patterns across every added file + the package tree; no `.rootpw.txt` |
| G3 no SSH key | **PASS** | `0` |
| G4 no customer identity | **PASS (reviewed)** | 2 hits, both non-values: `Authorization: Bearer $token` (a header built from a runtime file) and the `FELHOM_RETRIEVAL_PASSPHRASE=` *parse check* string |
| G5 enumeration | **PASS** | 4 paths added (`felhomtheme/` ×3, the `.deb`), 3 removed (stock theme); content scan 0 hits, planted control `1` |
| G6 menu | **PASS** | 2 entries, `default=0`, `timeout=15`, `timeout_style=menu`; banned tokens `0`; **extra: `proxmox-start-auto-installer` in a live line `0`** (the build log's "lifted kernel line … auto-installer" is the repack's source read, not what ships) |
| G7 package | **PASS** | one `felhom-*.deb`, Version `1.27.0`, `Depends` lines `0` |
| G8 postinst | **PASS** | forbidden systemctl verbs `0`, network tools `0`, `set -e` `0`, last line `exit 0` |
| G9 payload = HEAD | **PASS** | `felhom-bootstrap.sh` `730b204b…afa6` = repo; `.service` `cf2e4678…9af3` = repo |
| G10 committed | **PASS** | `scripts/iso/` porcelain empty; `HEAD == origin/main` |
| G11 round trip | *publish-time* | — |
| G12 bucket private | *publish-time* | — |
| G13 directories | **PASS** | `./etc/felhom/`, `./usr/local/sbin/`, `./lib/systemd/system/` each `1` |
| G14 a person chooses the disk | **static half PASS** | no answer file (G1), `filter.` keys `0`; the proof-install half is the walk |
| G15 console after first boot + reboot | **static half PASS** | `systemctl mask pvebanner.service` present; issue text names `8006` `0`; the live half is the walk |
| G16 Hungarian, one name | **static half PASS** | `jelszavad` `0`; `Tulajdonosi jelmondat` `1`; negative control `isszaáll` `0`; English `printf` review list empty; GRUB titles and echo lines Hungarian |