"why": "Diagnosed the broken lchat try trial surface from tunnel-gateway logs; after the fix shipped, converged the fleet update early (operator call), restarted the tunnel gateway, and verified the trial surface live. Evening: activated the fleet hardening-posture dashboard (rescued install path, pre-created collector state dirs) verified its first publish, iterated it to a full-fleet view with per-box self-reports, and brought the second mesh box's long-behind build current so it self-reports and self-updates (root sessions on that box; its ledger collector is paused pending multi-box merge).",