admin
2de56ce16b
gates / gates (push) Successful in 26s
Operator's word 2026-09-30, before Tester-2's install. R-120 control refused 0.282.0 afterwards. Token scan 0. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
20 lines
1.5 KiB
Markdown
20 lines
1.5 KiB
Markdown
# Golden 0.283.1 — baked, published and vouched 2026-09-30
|
|
|
|
Baked on the operator's word of 2026-09-30, before the first real tester's fresh install (Tester-2), so the box
|
|
starts on the controller that carries decision 50 and the R-721 fix.
|
|
|
|
| | |
|
|
|---|---|
|
|
| `GOLDEN_VERSION` | 0.283.1 (controller image `gitea.dooplex.hu/admin/felhom-controller:0.283.1`) |
|
|
| `GOLDEN_SHA256` | `02c8b3361b10345cc7a6fc3bf4807467347aa58b7597971d00315f040f889bd0` |
|
|
| archive | 651 955 260 B (anonymous download, sha re-computed off the registry: identical) |
|
|
| template | `debian-13-standard_13.6-1_amd64.tar.zst` — listed with `pveam available` on the day, `_amd64` filtered |
|
|
| markers | `docker OK (overlay2` 1 · `including mount point` 2 (rootfs, mp0) · `upload OK (HTTP 201)` 1 · `excluding` 0 · `FATAL` 0 |
|
|
| token leak | **0** in the committed `bake.log` and every evidence file; the planted control read **1** |
|
|
| registry | `…/generic/felhom-golden/0.283.1/golden.tar.zst` → 404 before, 206 after |
|
|
| teardown | CT 9100 destroyed `--purge`; token, runner and log shredded inside the VM; qemu exited; `drill.qcow2` reverted to `virgin` |
|
|
| vouched | `Artifact manifest set: agent=0.138.0 golden=0.283.1 min_agent="0.131.0"` (agent 0.138.0 sha `55916026…8195`, MinAgent from the controller CHANGELOG v0.283.1 header); the R-120 gate then refused golden 0.282.0 and the manifest stayed |
|
|
|
|
Evidence: `documentation/audits/evidence-golden-0283-2026-09-30/` (`bake-driver.txt`, `bake-full.log`, `roundtrip.txt`,
|
|
`vouch.txt`).
|