REPORT + CONTEXT: v0.264.0 live proof and floor raise

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -7,7 +7,18 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-09-23 (v0.263.2 — a failed update puts the app back by itself)
+Last updated: 2026-09-23 (v0.264.0 — the household is told when an update is undone or held)
+
+> **2026-09-23 (evening) — v0.264.0 (`09` §6.4 parts 2–3; R-606, R-620, R-646).** Two events,
+> `app_update_undone` / `app_update_held`, one per app per outcome, via `Manager.SetUpdateEventSink`
+> (main.go) → `NotifyAppUpdateUndone` / `NotifyAppUpdateHeld`; on by default and seeded once on existing
+> boxes (`app_update_events_seeded`), with two toggles on the notifications page (the page pushes the
+> list to the hub on save). Update sentences are stored as key + args (`UpdateErrorKey/Args`,
+> `update.error.*`, `update.refusal.*`, `update.phase.*`, `hold.*`) and rendered per reader
+> (`updatePhaseText` / `updateErrorText` / `holdText`, `RestoreHoldForLang`, `UpdateErrorIn`); stored
+> Hungarian unchanged. Startup `BackfillAppliedMeta` (R-646). Disabled notifier WARNs once per type
+> (R-620). Needs hub v0.120.0. Floor 0.264.0. Leftovers: R-647. Evidence:
+> `felhom.eu/documentation/audits/undo-fleet-2026-09-23/`.
 
 > **2026-09-23 — v0.263.0 → v0.263.2 (R-637, `09` §3 decisions 15 + 19).** A failed health check after
 > an update is now UNDONE: phase `copying` (after the pull, the app stopped anyway) copies every NAMED