v0.317.0: a second copy counts only on a proven different disk; the no-drive install speaks in words (felhom.eu architecture/16, build A)

Tier-2 and the one-copy notice ask the host agent (POST /disks/same-disk, agent 0.157.0): different +
proven -> made and counted; same disk -> not made (D1); unknown (VM, hidden USB serial) -> made, not
counted, the row says why (D2); a NAS never counts and no longer hides the notice (R-1075). An older
agent keeps the st_dev rule, logged once. D4: a data-folder or media app on a box with no drive is
refused in words with a link to the drives page (R-1068's raw-error half). MinAgent 0.157.0.

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb

CHANGELOG.md

@@ -1,3 +1,24 @@
+## v0.317.0 — a second copy counts only on a proven different disk; the no-drive install speaks in words (2026-10-15)
+
+**MinAgent: 0.157.0** — the same-disk verdict needs agent 0.157.0 (`FeatureSameDisk`, `POST /disks/same-disk`). Below it the
+box keeps exactly today's behaviour (the st_dev rule), logged once — so the image is safe on every box, but the global floor
+waits for the operator's vouch of agent 0.157.0. No golden (`09` §3 decision 250). Design: felhom.eu
+`architecture/16-storage-physical-identity.md` §4, §5 (D4 only), §8, §10 — operator rulings D1–D6, 2026-10-15.
+
+- **Tier-2 asks the agent** (`backup.Manager.diskRelation`): different + proven → made and counted; **same disk → not made**
+  (`16` D1); **unknown** (a VM, a USB case that hides the serial) → **made, not counted** (`16` D2) — the app's row says „A Felhom
+  nem tudja ellenőrizni, hogy ez a meghajtó valóban másik lemez-e…"; a NAS → never a target. A proven different drive beats an
+  unknown one. The verdict is asked again right before each run.
+- **The one-copy notice** (`/backups`) follows the same rule and moved to i18n, informal voice (R-1072's half): „Csak egy helyi
+  másolat készül: nincs második lemez, vagy ugyanazon a lemezen van, mint az adatok…" or, for an unknown second drive, „A Felhom
+  nem tudja ellenőrizni…". **A NAS no longer hides it** (R-1075).
+- **D4 (R-1068's raw-error half):** a data-folder or media app on a box with no drive is refused with „Ehhez az alkalmazáshoz egy
+  adattároló kell. A Meghajtók oldalon adhatsz hozzá egyet." and a link (API 400, `code: needs_drive`) — never the field name.
+- Tests: the four `16` §4 rows, an older agent, the recorded mark, the D4 sentence (both an app with and without the media marker),
+  the wiring in main.go — each red-proofed. Ten i18n parity pages refreshed: the only change is the new lines.
+- **Not changed, reported instead:** the drives page still offers `/mnt/sys_drive` for attaching (R-280, the reinstall-restore
+  way out); the design rejects it for media (`16` §11). The two disagree — filed for the operator as R-1082, not decided here.
+
 ## v0.316.4 — the clean-tree gate is a mechanism, not a sentence (2026-10-15)
 
 **MinAgent: 0.155.0** (unchanged). **Do not deploy `0.316.3`** — see below.