"why": "Managed-AI rollout (Claude session over the operator tunnel): verified box state after the WireGuard flip, staged the new release binary, installed the usage-pipe and AI env additions via lchat-env-install, and restarted the control/cloud services to pick them up.",