REPORT + CONTEXT: 2026-10-04 night (R-840 / R-860)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -7,7 +7,13 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-10-04 (v0.290.0 — the clean-up guard lets honest windows through, the set-aside deletion is the hub's)
+Last updated: 2026-10-04 (v0.293.0 — the Docker-socket self-heal, R-860)
+
+> **2026-10-04 night — v0.293.0 (R-860; floor 0.293.0 on the demo customers only, golden 0.293.0 vouched):**
+> `internal/sockheal` — the controller exits after 60 s of socket REFUSALS (never timeouts, only after Docker answered
+> once) so Docker restarts it on the current socket, then restarts any other socket user on an older inode (traefik).
+> Measured: only a `docker.socket` restart re-creates the file. Live: 9202 104 s, demo-hp 9201 120 s, ids unchanged.
+> The global floor stays 0.292.0 until Tester 2 may move (operator ruling 97 limited Tester 2 to three acts).
 
 > **2026-10-04 — v0.290.0 (floored, golden 0.290.0 vouched, needs hub v0.128.0):** `offsiteGuard` EXCLUDES a young
 > snapshot superseded the same day in its group (R-824) and REFUSES above the hub's `max_remove` (half); a due