v0.278.0: a hold left by an earlier install no longer holds the new one (R-704)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-28 15:34:57 +02:00
parent 1ee6dbe184
commit 7cba0bfca7
9 changed files with 232 additions and 6 deletions
@@ -1,3 +1,24 @@
+## v0.278.0 — a hold left by an earlier install no longer holds the new one (R-704) (2026-09-28)
+
+**MinAgent: 0.131.0** (unchanged). Needs hub v0.123.0 (unchanged). New strings: none. Evidence:
+`felhom.eu/documentation/audits/kept-offsite-2026-09-28/` (E2b, redproofs RP4–RP6),
+`…/pg-calcom-claper-2026-09-28/box/calcom/hold.txt`.
+
+- **Found live 2026-09-28.** demo-hp's fresh nextcloud (installed 10:13) carried an update hold from a nextcloud of
+  2026-09-13 — set before v0.242.0, whose removal did not clear it. The backup leg then skipped the new install's
+  volumes and unit ("the app is HELD stopped"), so its off-site snapshot held no data, and its page showed a two-week-old
+  failure. On 9202 a calcom crash-loop stop (decision 28) survived two removes and refused the new install's update.
+- **Removal** (`settings.ClearUpdateHold`) now clears the crash-loop stop too, not only the update hold.
+- **A new install** — a plain install or "use my kept data" — drops a leftover update or crash-loop hold of an app that
+  is not installed (`Router.dropLeftoverHold`), which also heals holds already left on boxes. A restore hold (R-379)
+  is never touched by either: it stays operator-cleared.
+- The kept load's unit restore now goes through the same seam as the off-site load (`keptUnitRestore`).
+- Tests: `TestR704_ClearUpdateHoldClearsTheInstallsHoldsOnly`, `TestR704_AFreshInstallDropsALeftoverHold` (the "use"
+  path end to end behind seams, the R-379 negative, and the plain install's call before `DeployStack`). Red-proofs
+  RP4–RP6, each seen failing.
+- **Second controller release this session** (the rule is one): R-704 blocked the brief's off-site proof on demo-hp and
+  there is no product route to clear the leftover hold.
+
 ## v0.277.0 — „Use my kept data" and Load also bring the database back from the off-site copy (R-691 (2)) (2026-09-28)

 **MinAgent: 0.131.0** (unchanged). Needs hub v0.123.0 (unchanged). New strings: `kept.backup.offsite`,