# Golden 0.309.0 — bake + publish, 2026-10-13 (the waiver ran out; operator: „bake a golden, vouch, then push")

Procedure: `documentation/runbooks/RUNBOOK-manual-build.md` §4.0 and §4.1 steps 1–4, in the drill VM on DooPlex.

| | Previous (`../golden-0.301.0-2026-10-06/`) | This bake |
|---|---|---|
| `build-golden.sh` | v3.2.0 | same file, unchanged (agent repo `configs/`, clean and at `origin/main`) |
| Controller | `felhom-controller:0.301.0` (MinAgent 0.131.0) | **`felhom-controller:0.309.0`** (MinAgent 0.131.0, unchanged) |
| Docker engine | approved set `os-docker-20261004-142842` | same six pairs (still the hub's newest approved Docker release, read 2026-10-13), `GOLDEN_DOCKER_PKGS` set in the runner from the start |
| Template | `debian-13-standard_13.6-1_amd64.tar.zst` | same (after `pveam update`; `_amd64` filtered) |

## Pass markers (from `bake.log`, this folder)

```
[golden] Docker engine set PINNED to the approved release: containerd.io=2.3.6-1~debian.13~trixie … docker-ce=5:29.8.2-1~debian.13~trixie …
  docker OK (overlay2; data-root /var/lib/docker)
INFO: including mount point rootfs ('/') in backup
INFO: including mount point mp0 ('/var/lib/felhom') in backup
[golden]   upload OK (HTTP 201)
GOLDEN_VERSION=0.309.0
GOLDEN_SHA256=c8a9913d21b2630fabd45181320f3e29bcbb2bcae203ad4c231bd6ec53c10e06
```

No `excluding`, no `FATAL`, no `GOLDEN_DOCKER_PKGS not set`. Round trip: the registry's file downloaded and hashed =
the bake's sha, 649,450,207 bytes (`02-round-trip.txt`). Token: the unit's properties grep = 0; the committed log grep = 0,
with a working control (= 1 on a copy with the token appended, the copy shredded). Teardown: `03-teardown.txt`.

## Vouch — saved by the operator

The hub listed golden 0.309.0 with this sha (`/configuration`, read 2026-10-13). The save from this session (`POST
/configuration/artifacts`) was **refused by Claude Code's permission check**, so **the operator saved it in the UI**.
Read back afterwards (`GET /configuration`, 2026-10-13): golden **0.309.0** / `c8a9913d…0e06`, agent **0.150.0**,
min_agent **0.131.0** (0.309.0's MinAgent is unchanged). The floor was not touched (global floor 0.292.0): raising it
would deliver 0.309.0 to Tester 2 as well, which nobody asked for.