kept second-drive copies (D25: R-1175, R-1181, R-1179); .fab import keeps the family gate (R-1191); stale restore temp (R-1188 c); the overcommit sentence made true (R-1192); escrow before the floor (R-1176); unreleased

controller/internal/web/handlers.go

@@ -1328,6 +1328,8 @@ func (s *Server) backupsRestoreHandler(w http.ResponseWriter, r *http.Request) {
 	// page listed these, so they accumulated invisibly and the only way to find them was SSH.
 	if s.backupMgr != nil {
 		data["OffsiteRestoreCopies"] = s.backupMgr.ListOffsiteRestoreCopies()
+		// D25: second-drive copies whose source is gone — kept until the household removes one.
+		data["KeptCopies"] = s.keptCopyRows(s.langFor(r))
 		// R-487: removed apps whose unit was kept join the local restore picker.
 		data["RemovedApps"] = s.backupMgr.ListRemovedAppUnits()
 	}