Files
felhom.eu/documentation/tests/golden-0.284.2-2026-09-30
admin 3159892fab
gates / gates (push) Successful in 27s
Both rulings built: same-tag re-tests (decision 52), image retention + the install hold (controller 0.284.2); golden 0.284.2
- Decision 52: catalog 6a3ead9 (re-test entries, gates, decoys, the monthly command); proven end to end on 9202
  through the leg; runbook monthly-floating-retest.md; nothing to re-test on the engine lines today.
- Decision 53 + R-741: controller v0.284.2 (0.284.0/0.284.1 never floored — two wiring faults found live on 9202);
  floor 0.284.2; one-time sweep 9202 26.6 -> 5.7 GB, demo-hp 24.3 -> 13.5 GB; the install hold proven as a stranger.
- Golden 0.284.2 baked, round-trip identical, vouched (agent 0.138.0, min_agent 0.131.0); the gate prints OK.
- Rows 377 -> 383: opened R-743..R-748, closed R-736, R-737, R-740, R-741, R-748; narrowed R-739, R-698, R-446.
- register_shape_gate: a lettered id (R-88a) is a row too (R-748), with a decoy seen red.

Evidence: documentation/audits/night-rulings-2026-09-30/, documentation/tests/golden-0.284.2-2026-09-30/.
Report: REPORT-night-rulings-2026-09-30.md.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-30 23:26:21 +02:00
..

Golden 0.284.2 — baked, published and vouched 2026-09-30 (late evening)

Baked because a new controller release (v0.284.2 — image retention, decision 53; the install hold, R-741) came out, and the golden rule wants one before 4 October once a new version exists. RUNBOOK-manual-build.md §4.0/§4.1 verbatim.

GOLDEN_VERSION 0.284.2 (controller image gitea.dooplex.hu/admin/felhom-controller:0.284.2)
GOLDEN_SHA256 f72810065b26d0e118e5ffeedc64f984222f0cc9aafc91ec885cd0513451ff67
archive 652 295 660 B; downloaded again from Gitea and hashed: identical (02-round-trip.txt)
template debian-13-standard_13.6-1_amd64.tar.zst — after pveam update, _amd64 filtered (01-launch.txt)
markers docker OK (overlay2 · including mount point rootfs + mp0 · upload OK (HTTP 201) · excluding 0 · FATAL 0 (bake.log)
token leak 0 in the committed bake.log and in every file here; the planted control read 1 (04-leak-check.txt); 0 in the unit's properties
teardown CT 9100 destroyed --purge; token, runner and log shredded inside the VM; qemu exited; drill.qcow2 reverted to virgin
vouched Artifact manifest set: agent=0.138.0 golden=0.284.2 min_agent="0.131.0" — three fields: agent 0.138.0 kept (≥ MinAgent), min_agent 0.131.0 from the controller CHANGELOG v0.284.2 header (05-vouch.txt)

No agent release: the controller's MinAgent is unchanged (0.131.0) and the vouched agent 0.138.0 satisfies it.