Requirement #1112 — Hub preview134 live activation (child #1114)

Source PR2680/main c641a82626d16c1ad627fb977011f14835ec9b2c; actual tested PR merge cec099ea545293959117aebfb3edbbb99616122e has the same tree. Dedicated scheduled CI38341909946: SQLite38/PostgreSQL29 PASS, four assertion witnesses RED, ten required checks PASS. The original SQLite-only terminal-trigger suite keeps its supported backend. The independent queue-time slice is delivered; parent #1105 remains open for exact task/thread/turn activity leases (#1113).

Formal main release 38342053049: build, all FOUR gates, aggregate and preview publication/registry readback SUCCESS. Public version 0.9.0-preview.134 equals the main gated tarball byte-for-byte; 1244263 bytes; SHA256 14cd606f422f098b97d4003f51d53803231b90bf83c693d67323aa966fc1d61f; SRI sha512-TVAkZ5hh62chiShgANdspWTa5vnLzKeTDNW7VZ2Scaloh0k4s82e2C2Q6FOj7BohAJBDtkvlXF3Iim8V4jtVIA==. preview134, latest unchanged preview30.

Deployment PR2681/main 875137cbe333fd83da97a8f008d1c84186ad8c26; dedicated launcher Docker38342291848 and ten required checks PASS; server tree unchanged from release main. Managed manifest/lock select preview134 with the exact public SRI; every transitive dependency entry is preserved. Installed package:346 files match public artifact. Runtime $HOME/.commhub/runtime-v117-preview134/node_modules/@sleep2agi/commhub-server/bin/commhub.ts; rollback $HOME/.commhub/runtime-v116-preview133.

Private owner-only VACUUM INTO backup $HOME/.commhub/backups/schedule1112-p134-x7jwx17a; 744067072 bytes, integrity ok. Offline read-only, network-none Docker schema/migration preflight PASS; preserved snapshot counts {"sessions": 331, "tasks": 81531, "nodes": 302, "networks": 7, "requirements": 1114, "api_tokens": 641, "user_inbox": 2691}. Host Bun1.4.0 executes the pinned driver on the offline copy; no live DB, credentials or Hub HTTP entrypoint mounted. Data continues to change after the backup; these counts are snapshot facts.

Confirmed 2026-10-13T03:36:09.412881+00:00: selected commhub-hub PID 584652 -> 607441, restart 91 -> 92; secured health134. Actual process entrypoint verified. Installed profile equals deployment main; base and original environment file metadata unchanged, no --update-env. Business node runtime/thread/model/provider/login settings unchanged.

Bounded natural observation 2026-10-13T03:37:49.975913+00:00: same PID/restart; 115 sessions with fresh heartbeat since activation, SSE 128, events [{"event_type": "task.replied", "to_status": "replied", "n": 1}, {"event_type": "task.send.delivered", "to_status": "delivered", "n": 3}, {"event_type": "task.warning.delivered_stale_30s", "to_status": "delivered", "n": 4}, {"event_type": "task.warning.delivered_stale_60s", "to_status": "delivered", "n": 3}]; selected new vault-master-key/panic/segfault markers0. Baseline preceding5min: {"heartbeats5min": 111, "events": [{"event_type": "task.replied", "n": 7}, {"event_type": "task.send.delivered", "n": 6}, {"event_type": "task.started", "n": 3}, {"event_type": "task.warning.delivered_stale_30s", "n": 8}, {"event_type": "task.warning.delivered_stale_60s", "n": 5}]}. Windows differ; short observation does not establish whole-fleet ACK/model execution, long-term stability or disaster recovery. Other warning events remain recorded rather than represented as zero.

Recovery authority remains deploy/hub/README.md and the versioned base/profile/managed lock. Port/proxy and environment source retain their recorded configuration. Rollback restores the prior profile/runtime; production data and original-value secrets require private backups/security authority. Key recovery NOT_COVERED; no complete DR claim.
