# REPORT — before the volunteer: the big night's P1 fixes, the two rulings, the publish (2026-09-15)

Releases: **agent v0.131.0**, **controller v0.243.0** (MinAgent 0.131.0), **hub v0.114.0**, catalog templates (no version),
**installer ISO 1.27.1 published**. Baselines re-verified at start: controller `406755f`, agent `4586f0f`, felhom.eu
`a028a9a`, catalog `882a43e` — all equal to the task table. Architecture read and cited: 03 §4, 05 (new §13/§14), 07 §6,
08 §6.2, 02 (settings after install).

## Claims in the prompt that turned out wrong (first)
1. **"The floor carries the agent release to every box"** — false. The hub HOLDS a floor whose declared MinAgent is
   above the box's agent; an agent updates only by an operator-signed `agent_update` job (R-530). Delivered to demo-hp
   with the operator's keys; demo-felhom and Peti's box stay on 0.130.0.
2. **"`--restart always` does not restart a killed container"** — CORRECT, now measured (Docker 29.8.0, both policies
   exited 60 s after `docker kill`).
3. **"Appliance registration knows no customer"** — correct as read (`api/appliance.go`); not a trigger.
4. **"a `node_down` mail would have gone at ~60 min"** — not measured; unchanged as an inference.
5. **"R-110 tag move" for the ISO** — R-110 governs the host installer's `installer-v*` tag, which the ISO does not
   change; no tag was moved. **"index page on iso.felhom.eu"** — the bucket serves no index (R-504); the index is the
   website page `felhom.eu/letoltes`, published with the ISO.
6. **"`08-alarm-ladder.md` §5 holds the cooldown"** — it is in §6.1/§6.2; the ruling was written there.
7. **"Park note in `RUNBOOK-manual-build.md` §4"** — §4 is the golden image; the park note went to §3.1 (controller).

## Parts
- **A (R-523)** agent supervisor — live on 9201: idle 59 s, parked held + unpark 25 s, swap deferred; crash-loop guard
  tripped for real and the hub mailed `controller_crashloop`; after the 30-minute pause the agent restarted it
  (09:36:24Z, dashboard 200 at 09:36:30Z) and the hub minted `controller_restarted_by_agent`; mid-deploy timing not measured.
- **B (R-513)** generated FileBrowser password — live on 9202 (generated) and 9201 (operator-set left alone); public 401.
- **C (R-517/R-518)** per-tier page live on 9201; absent-tier skip unit-proven; „0 B" found live and fixed (unreleased).
- **D.1 (R-509)** self-bind auto-send — shipped and red-proofed; **live mail NOT checked** (a throwaway customer's
  delete runs the RESET cascade on ep0 — fenced).
- **D.2** `node_*` bypass the quiet hour (operator ruling) — red-proofed; recorded in 08 §6.2 and CONTEXT.md.
- **D.3 (R-511)** re-issue adopts — shipped, red-proofed; not provable on tester-1 (no host). **STOP held**: listing
  posted, operator said yes, one snapshot forgotten on ep0 (1 928 820 672 B logical), token kept, nothing else touched.
- **D.4 (R-510)** three GETs → 530 ×3 (no box, no tunnel); stays open; day-0 A.1 names the setting.
- **E (R-512/R-514/R-515)** catalog — live on 9202: stranger 400, 20/20 documents, peak 772 MB; OOM line not proven (R-528).
- **F** ISO 1.27.1 — uploaded; round trip sha256 `25637007…c053`, 1 705 322 496 B; `.sha256` 200; manifest 200;
  1.26.1 kept for rollback; `felhom.eu/letoltes` 200. G11 PASS, G12 not measurable with the token.
- **G** docs: 03, 05 §13–14, 07 §6.4, 08 §6.2, 02, CONTEXT, RUNBOOK §3.1, day0 A.1, VOLUNTEER prerequisites.

## Extra acts, stated
- The felhom.eu push was blocked by the due-checks gate (R-433 due today): the Gmail-read mailbox holds no Hetzner reply;
  re-dated to 2026-09-22 with the reason in the row. No `--no-verify` anywhere.
- The operator's three signing keys arrived mode 664; set to 600 (R-533).

## Rows
Register rows **232 → 232**: closed 9 (R-493, R-495, R-496, R-512, R-513, R-514, R-515, R-517, R-523); opened 9
(R-525 … R-533); narrowed R-509, R-510, R-511, R-518; R-433 re-dated.

## Teardown, three layers
Machine: 9202 throwaways removed; 9201 controller running again (09:36:24Z); the killed homebox deploy created no container but left its `app.yaml`
(09:04:55Z, keys only read) — moved aside to `/root/homebox-app.yaml.p1fixes-residue`, noted under R-531.
Host: demo-hp park marker removed; agent 0.131.0 stays (the release). ep0: one tester-1 snapshot removed on yes.
Hub: demo-hp floor override 0.243.0 kept (it delivers the release); no customer created or deleted.