REPORT/CONTEXT: 2026-10-08 afternoon (R-304 operator mail, R-298 side fix)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -13,7 +13,9 @@ Last updated: 2026-10-04 (v0.293.0 — the Docker-socket self-heal, R-860)
 > decision 178).** R-899 (decision 177): a daytime press never cancels the night's whole-guest backup —
 > `internal/quiesce/nightowed.go` ledger, owed tiers never fire the valve; a press reaches the agent as `trigger=manual`.
 > R-304: the agent's new 424 `older_unchecked` → `RecoveryOlderUnchecked`, bundle key `recovery.older_unchecked` (hu+en).
-> MinAgent unchanged (0.131.0): both changes degrade safely against an older agent.
+> MinAgent unchanged (0.131.0): both changes degrade safely against an older agent. Afternoon (`a40729a`): the
+> operator-only `recovery_older_package` event (decision 183; needs the hub of the same day), no eject/format on a
+> backup-target drive (R-298 side fix), R-717 comments.
 
 > **2026-10-04 night — v0.293.0 (R-860; floor 0.293.0 on the demo customers only, golden 0.293.0 vouched):**
 > `internal/sockheal` — the controller exits after 60 s of socket REFUSALS (never timeouts, only after Docker answered

REPORT.md

@@ -1,4 +1,4 @@
-# REPORT — controller, 2026-10-08 (day): R-899 and R-304 on main, unreleased
+# REPORT — controller, 2026-10-08 (day + afternoon): R-899, R-304 (+ the operator mail) on main, unreleased
 
 **No release, no delivery today** (kernel night 8→9; `09` §3 decision 178). Both ship with tomorrow's release.
 
@@ -7,11 +7,18 @@
 | R-899 — a daytime „Mentés most" press never cancels the night's whole-guest backup (decision 177) | `6d07ca2` | `TestR899_*` (6, quiesce), `TestR899_PressCarriesTriggerManual` (agentapi) | rule off → the 2026-10-07 replay started nothing on night 2 (`started=[local local]`), plus 2 more failures; without the owed-tier valve guard an owed night ran outside the window (`started=[local local]` at 15:00) |
 | R-304 — „we do not know whether your code is wrong" when earlier packages were not all checked (agent 424) | `75b3b39` | `TestR304_OlderUnchecked_IsNotAWrongCode` (hu + en), `TestR304_Classify424` | without the handler case the page fell to the safe default „A művelet nem fejeződött be…" in both languages |
 
+| R-304 option C — operator mail when a code opens / may open an older package, once a day (decision 183) | `a40729a` | `TestR304_OlderPackageMail_*` | without the calls `events = []`; without the day check `sent 2 events, want still 1` |
+| R-298 side fix — no eject/format button on a backup-target drive; R-717 two stale comments | `a40729a` | parity fixtures `storage_full`/`storage_empty` regenerated (only the new JS lines differ) | — (JS; not verified in a browser) |
+
+**Needs the hub of the same day:** `recovery_older_package` is allowlisted only on hub main (`5beedcce`); against an older
+hub the push is refused (400) and only logged. A contract test caught a variable severity in the first draft
+(`TestR329_EveryEmittedSeverityIsInTheHubVocabulary`) — fixed to a literal.
+
 **Design:** `07` §6.1 (R-899 paragraph), `09` §3 decisions 177–178. The ledger is
 `<data>/whole-guest-ledger.json`, successes only, read only to decide due-ness. **MinAgent unchanged (0.131.0).**
 
 **Gates:** `go build/vet/test ./...` rc 0; `controller_gates.py --fast` rc 0. **CI:** job 1528 (`6d07ca2`) success; job
-1531 (`75b3b39`) success.
+1531 (`75b3b39`) success; job 1544 (`a40729a`) success.
 
 **Seen, filed (not fixed):** the recovery screen's other 14 messages are Hungarian-only Go literals and show in Hungarian
 on an English page — appended to R-516.