# Golden 0.313.0 — bake + publish, 2026-10-15 (bake first: `09` §3 decision 247)

Why: controller 0.313.0 (media apps on every drive and the drive events, R-1023; Plex without the race, R-1028/R-1045) is RELEASED only when its golden is
baked; then the operator vouches it and raises the floor. Procedure: `documentation/runbooks/RUNBOOK-manual-build.md`
§4.0 and §4.1 steps 1–4, in the drill VM on DooPlex. The script came from CC's clean `felhom-agent` clone at
`origin/main` (`7d4e564`).

| | Previous (`../golden-0.312.0-2026-10-15/`) | This bake |
|---|---|---|
| `build-golden.sh` | v3.2.0 | same file, unchanged |
| Controller | `felhom-controller:0.312.0` (MinAgent 0.155.0) | **`felhom-controller:0.313.0`** (**MinAgent 0.155.0**, unchanged) |
| Docker engine | approved set (six pairs) | same six pairs, `GOLDEN_DOCKER_PKGS` set from the start |
| Template | `debian-13-standard_13.6-1_amd64.tar.zst` | same (after `pveam update`; `_amd64` filtered) |

## Pass markers (from `bake.log`, this folder)

```
[golden] build-golden.sh v3.2.0 — baking controller gitea.dooplex.hu/admin/felhom-controller:0.313.0
[golden] Docker engine set PINNED to the approved release: containerd.io=2.3.6-1~debian.13~trixie … docker-ce=5:29.8.2-1~debian.13~trixie …
  docker OK (overlay2; data-root /var/lib/docker)
INFO: including mount point rootfs ('/') in backup
INFO: including mount point mp0 ('/var/lib/felhom') in backup
[golden]   upload OK (HTTP 201)
GOLDEN_VERSION=0.313.0
GOLDEN_SHA256=43301c09a5ffcde39a53c9e86002691b63351f0e0d6780c58a49ddd1ce20c3d6
```

No `excluding`, no `FATAL`, no `GOLDEN_DOCKER_PKGS not set` (the `Cannot set LC_*` lines are locale warnings); the
unit `Result=success`. Round trip: the registry's file downloaded and hashed = the bake's sha, 648,827,648 bytes
(`02-round-trip.txt`). Token: the unit's properties grep = 0; the committed log grep = 0, with a working control (= 1 on
a copy with the token appended, the copy shredded). Teardown: `03-teardown.txt` (CT 9100 purged, token/script/log
shredded in the VM, VM off, disk back to `virgin`).

## Vouch — the operator's act (then the floor, a separate save)

Three fields together (runbook §4.1 step 5): golden **0.313.0**, agent **0.156.1** (NOT the `0.156.1-step1` entry,
R-1011), min_agent **0.155.0** (0.313.0's MinAgent). Then the global floor **0.313.0** / min_agent **0.155.0**.