v0.310.0: „A gép kikapcsolása" — the household turns the whole machine off (R-998); honest restart text (R-999)

POST /api/server/poweroff (dashboard login, POST only, the typed word KIKAPCSOLÁS / TURN OFF)
→ agent POST /host/poweroff (MinAgent 0.155.0; hidden for an older agent). The controller refuses
during its own backup/restore/app update; the agent's reasons are shown as household sentences.
„Kiszolgáló újraindítása" becomes „A Felhom újraindítása" and says it restarts the Felhom part;
/api/server/reboot is POST only (R-983). Tests red-proofed; parity fixtures regenerated on purpose.

controller/README.md

@@ -3282,6 +3282,21 @@ restart no longer signs the household out. Expiry is unchanged (7 days). Logout
 on disk too; rows written under another password are dropped at load; a revoking save that fails removes the file.
 Pinned by `internal/web/session_store_test.go` (`TestR35_*`).
 
+### 8a. Turning the machine off — „A gép kikapcsolása" (v0.310.0, R-998)
+
+Beállítások → Rendszer, after the restart cards. Dashboard login only (`RequireAuth` + CSRF; family members' app logins
+never reach the dashboard). The household types **KIKAPCSOLÁS** / **TURN OFF** (the server also takes the unaccented
+spelling); `POST /api/server/poweroff {"confirm": "…"}` → the agent's `POST /host/poweroff` (agent ≥ 0.155.0, the
+`host_poweroff` feature row). The agent shuts this guest down, then powers the host off; switching it on again needs the
+machine's power button — the card says so. Refusals come back as one household sentence: a backup/restore/update the
+controller sees itself, or the agent's reason (`too_soon_after_boot`, `already_requested_this_boot`, `backup_running`,
+`other_guests_running`, …). An agent known to be older hides the button and shows one line. The hub holds its silence
+alarms for 14 days (hub v0.149.0). Design: felhom.eu `documentation/architecture/14-host-power-off.md`. Tests:
+`internal/web/poweroff_handlers_test.go`.
+
+**„A Felhom újraindítása"** (was „Kiszolgáló újraindítása", R-999) restarts the guest — the dashboard and the apps —
+not the machine; its text now says so. `/api/server/reboot` is POST only (R-983, one of its seven).
+
 ### 9. Central Hub Reporting
 
 #### Operator actions (`internal/report/opactions.go`, `09` §3 decision 185)