diff --git a/CONTEXT.md b/CONTEXT.md
index 8b7ad01..a027b5f 100644
--- a/CONTEXT.md
+++ b/CONTEXT.md
@@ -7,7 +7,12 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-10-03 evening (v0.289.1 — the off-site key cannot delete, decisions 68–69)
+Last updated: 2026-10-04 (v0.290.0 — the clean-up guard lets honest windows through, the set-aside deletion is the hub's)
+
+> **2026-10-04 — v0.290.0 (floored, golden 0.290.0 vouched, needs hub v0.128.0):** `offsiteGuard` EXCLUDES a young
+> snapshot superseded the same day in its group (R-824) and REFUSES above the hub's `max_remove` (half); a due
+> abandonment on the pinned tier is handed to the hub (`OffsiteAbandonClient`), which deletes after 7 days unless
+> cancelled (decision 74); a recovery cancels at the hub. Weekly windows ON fleet-wide since 2026-10-04.
 
 > **2026-10-03 (evening) — v0.289.0 + v0.289.1 (floored 0.289.1, golden 0.289.1 vouched, needs hub v0.127.0):** the
 > hub-provisioned off-site tier is reached through an APPEND-ONLY key the hub's registrar pins
diff --git a/REPORT.md b/REPORT.md
index 085a5fd..8f03706 100644
--- a/REPORT.md
+++ b/REPORT.md
@@ -1,16 +1,10 @@
-# REPORT — v0.289.0 / v0.289.1: the off-site key cannot delete (decisions 68–69) — 2026-10-03
+# REPORT — v0.290.0: the clean-up guard lets honest windows through; set-aside deletion via the hub — 2026-10-04
 
-Full session report: `felhom.eu/REPORT-offsite-lock-build-2026-10-03.md`. Architecture: `07-backup-architecture.md`
-(custody block, threat rows 9/10/12), `06` §3.6, `09` §3 decisions 68–70.
+Full session report: `felhom.eu/REPORT-offsite-finish-2026-10-04.md`. Decisions 68–74 (`09` §3).
 
-- **v0.289.0:** append-only `rclone:` transport for the hub tier; the box sends only its public key to the hub
-  registrar and proves the pin before configuring; both `forget` sites, the move-aside and the abandonment leave the
-  box on that tier; retention only inside a hub window behind the fake-snapshot guard (R-822).
-- **v0.289.1 (found live):** the provider's rclone NOTICE broke every `--json` parse → the box recorded 0 snapshots as
-  measured and the hub mailed a false `offsite_snapshots_dropped`. The notice is stripped; an unreadable count keeps
-  the last value with `stats_known=false`. **Two releases this session — the second one fixes a defect the first put
-  live; the one-release rule was broken on purpose and is named here.**
-- Tests + red-proofs: `felhom.eu/documentation/audits/offsite-lock-build-2026-10-03/partC/red-proofs-controller.txt`.
-- Live: demo-felhom 11→13 snapshots, demo-hp 91→100 (history kept); a delete from each box refused (403); restore of
-  one file and `check` through the pinned key on each. Floor 0.289.1 served to both; golden 0.289.1 baked + vouched.
-- **MinAgent 0.131.0** (unchanged).
+- **R-824:** a young snapshot superseded the same day is excluded (kept for a later window), not a refusal; a plan above
+  the hub's weekly cap refuses (R-833 records the cost). Live: window 2 on demo-hp, no refusal, 127→127.
+- **R-823 / decision 74:** a due abandonment is handed to the hub (7-day wait, cancellable); a recovery cancels at the hub;
+  the page keeps the hub's date. Live on tester-1 via the hub.
+- Red-proofs: `felhom.eu/documentation/audits/offsite-finish-2026-10-04/red-proofs-controller.txt`.
+- Both demo boxes on 0.290.0; floor 0.290.0 served; golden 0.290.0 baked and vouched. **MinAgent 0.131.0** (unchanged).