D47 / R-1269 (P2): a new install never writes into an earlier install's backup — every install has an identity (install_id), the unit records it, every unit writer asks first; another install's unit is set aside whole (backups/set-aside/<app>/<stamp>, a D25 kept copy, „Visszaállítás” + „Eltávolítás” on the restore page); a move that fails refuses the write. Red-proved. Commit only.

controller/internal/stacks/import_record.go

@@ -40,6 +40,7 @@ func (m *Manager) SaveImportedAppConfig(stackDir string, env map[string]string)
 		}
 	}
 	carryLifeRecords(m.logger, name, priorRaw, cfg)
+	cfg.InstallID = NewInstallID() // D47: the bundle's data is no existing unit's data — a new install (after the carry)
 	if priorRaw != nil {
 		cfg.PinnedImages = priorRaw.PinnedImages
 		cfg.InstalledImages = priorRaw.InstalledImages