admin
2bdda1161e
gates / gates (push) Successful in 25s
The weekly bake (R-468 cadence) and the one before the new-household drill. R-120 negative control: golden 0.276.0 refused after the vouch. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
Golden 0.282.0 — baked, published and vouched 2026-09-29
The weekly bake (operator ruling 2026-09-13, R-468), and the one before a fresh install: the new-household
drill of 2026-09-30 (audits/DRILL-new-household-2026-09-30.md) installs from it.
GOLDEN_VERSION |
0.282.0 (controller image gitea.dooplex.hu/admin/felhom-controller:0.282.0) |
GOLDEN_SHA256 |
a3436b5fcd4870a73eba893e7d48223969a5ea2014dbf4472140b9d61f776347 |
| archive | 651 170 938 B (anonymous download, sha re-computed off the registry: identical) |
| template | debian-13-standard_13.6-1_amd64.tar.zst — listed with pveam available on the day, _amd64 filtered |
| markers | docker OK (overlay2 1 · including mount point 2 (rootfs, mp0) · upload OK (HTTP 201) 1 · excluding 0 · FATAL 0 |
| token leak | 0 in the committed bake.log and every evidence file; the planted control (a throwaway copy with the token appended) read 1 |
| registry | …/generic/felhom-golden/0.282.0/golden.tar.zst → 404 before, 206 after |
| teardown | CT 9100 destroyed --purge; token, runner and log shredded inside the VM; qemu exited; drill.qcow2 reverted to virgin |
| vouched | Artifact manifest set: agent=0.137.0 golden=0.282.0 min_agent="0.131.0" (MinAgent from the controller CHANGELOG v0.282.0 header); the R-120 gate then refused golden 0.276.0 (negative control) and the manifest stayed on 0.282.0 |
Evidence: documentation/audits/evidence-drill-new-household-2026-09-30/golden/ (bake-driver.txt, bake-full.log,
roundtrip.txt, vouch.txt).