v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

Red-proofs RP31-RP38. MinAgent 0.131.0 (unchanged).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/backup_handlers.go

@@ -111,6 +111,10 @@ type guestBackupView struct {
 	RestorePass     bool
 	RestoreVerified string
 	RestoreTestedAt time.Time
+	// RestoreTier (R-727, v0.283.0) names the tier the last restore test read from, so a ✗ says WHERE —
+	// measured 2026-09-30: a bare ✗ above the local tier's heading read as „the local tier failed" while
+	// the PBS tier had.
+	RestoreTier string
 
 	CanTrigger bool // a backup trigger (quiesce loop) is wired
 
@@ -277,6 +281,13 @@ func (s *Server) loadGuestBackup(ctx context.Context, lang string) *guestBackupV
 		v.HasRestoreTest = true
 		v.RestorePass = rt.Pass
 		v.RestoreVerified = rt.Verified
+		switch strings.ToLower(rt.SourceTier) {
+		case "":
+		case "pbs", "felhom-pbs":
+			v.RestoreTier = msg("backup.tier.pbs")
+		default:
+			v.RestoreTier = msg("backup.tier.local", rt.SourceTier)
+		}
 		if t, perr := time.Parse(time.RFC3339, rt.TestedAt); perr == nil {
 			v.RestoreTestedAt = t
 		}