v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

Red-proofs RP31-RP38. MinAgent 0.131.0 (unchanged).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/stacks/unattended.go

@@ -50,7 +50,9 @@ const (
 	LegSkipWindowEnd       = "window_end"
 	LegSkipSwitchedOff     = "switched_off"
 	LegSkipCancelled       = "cancelled"
-	legCurrent             = "current" // not a skip: nothing to do
+	// LegSkipStoppedByHousehold (R-721, v0.283.0): the household stopped the app; an update would start it.
+	LegSkipStoppedByHousehold = "stopped_by_household"
+	legCurrent                = "current" // not a skip: nothing to do
 
 	LegOutcomeDone    = "done"
 	LegOutcomeUndone  = "undone"
@@ -395,6 +397,9 @@ func (m *Manager) legCandidate(ctx context.Context, name string, o *UpdateLegOpt
 	if st.HoldReason != "" || st.updateHeld {
 		return LadderEntry{}, LegSkipHeld
 	}
+	if DesiredStateOf(*st) == DesiredStateStopped {
+		return LadderEntry{}, LegSkipStoppedByHousehold
+	}
 	if g := m.guards(); g != nil {
 		if held, _ := g.HoldFor(name); held {
 			return LadderEntry{}, LegSkipHeld