# Golden 0.282.0 — baked, published and vouched 2026-09-29

The weekly bake (operator ruling 2026-09-13, R-468), and the one before a fresh install: the new-household
drill of 2026-09-30 (`audits/DRILL-new-household-2026-09-30.md`) installs from it.

| | |
|---|---|
| `GOLDEN_VERSION` | 0.282.0 (controller image `gitea.dooplex.hu/admin/felhom-controller:0.282.0`) |
| `GOLDEN_SHA256` | `a3436b5fcd4870a73eba893e7d48223969a5ea2014dbf4472140b9d61f776347` |
| archive | 651 170 938 B (anonymous download, sha re-computed off the registry: identical) |
| template | `debian-13-standard_13.6-1_amd64.tar.zst` — listed with `pveam available` on the day, `_amd64` filtered |
| markers | `docker OK (overlay2` 1 · `including mount point` 2 (rootfs, mp0) · `upload OK (HTTP 201)` 1 · `excluding` 0 · `FATAL` 0 |
| token leak | **0** in the committed `bake.log` and every evidence file; the planted control (a throwaway copy with the token appended) read **1** |
| registry | `…/generic/felhom-golden/0.282.0/golden.tar.zst` → 404 before, 206 after |
| teardown | CT 9100 destroyed `--purge`; token, runner and log shredded inside the VM; qemu exited; `drill.qcow2` reverted to `virgin` |
| vouched | `Artifact manifest set: agent=0.137.0 golden=0.282.0 min_agent="0.131.0"` (MinAgent from the controller CHANGELOG v0.282.0 header); the R-120 gate then refused golden 0.276.0 (negative control) and the manifest stayed on 0.282.0 |

Evidence: `documentation/audits/evidence-drill-new-household-2026-09-30/golden/` (`bake-driver.txt`, `bake-full.log`,
`roundtrip.txt`, `vouch.txt`).