controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/scripts/i18n_missing_gate.py

@@ -38,7 +38,7 @@ TEMPLATE_ROOTS = [os.path.join(CTRL, "internal", "web", "templates")]
 MARKER = re.compile(r'\{\{\s*T\s+"([A-Za-z0-9_.\-]+)"\s*\}\}')
 
 EN_MISSING_CEILING = 0
-HU_FORMAL_CEILING = 19  # 6 -> 10 -> 12 -> 16 (slice 1) -> 18 (slice 2 release A) -> 19 (v0.268.0): the count follows the
+HU_FORMAL_CEILING = 18  # 6 -> 10 -> 12 -> 16 (slice 1) -> 18 (slice 2 release A) -> 19 (v0.268.0) -> 18 (v0.269.0): the count follows the
 # conversion, it is not a judgement. Moving a Go literal into hu.json makes an „ön" form the gate could
 # not see before VISIBLE to it -- the two that arrived are `flash.login.password_changed` („kérjük")
 # and `alert.deadapp.group` („nézze meg"), both word-for-word what the Go code already said. Slice 2 may
@@ -47,6 +47,7 @@ HU_FORMAL_CEILING = 19  # 6 -> 10 -> 12 -> 16 (slice 1) -> 18 (slice 2 release A
 # 19 (v0.268.0, R-659): `hold.update.no_whole_copy` („kérjük … ne indítsa újra és ne törölje") is the
 # OPERATOR's copy, given word for word in the brief of 2026-09-24 with its ruling (option A) — not reworded
 # here. The register question (ön vs te) stays R-516's.
+# 18 again (v0.269.0, `09` §3 decision 27): the operator moved that sentence to the informal voice.
 
 EN_FORBIDDEN = re.compile(r"\b(please|kindly)\b", re.I)