Second review of the night's own code: a stray clears when a later removal works (N2), the start-up check never removes this process's own copy (N3), one copy per destination at a time (N4), RunTier2 refuses during a restore for every caller (N5), the import refusal no longer advises removal (N9); red-proved, race-clean; README; REPORT; unreleased

CHANGELOG.md

@@ -21,7 +21,16 @@
   text now fits an app that runs but is unhealthy or restarting (IsStackRunning counts only running/degraded) — „leállt,
   vagy hibásan indul … ha hibásan fut, távolítsd el"; the import path for those states stays a row (R-1187). C6: two
   main.go comments no longer say a box off at 05:30–06:00 always gets the proof made up (only with a missed backup leg).
-  C8: README — `backup.volumes` excluded leaves the app-data backups, not the `.fab` export or the whole-guest snapshot. Tests `TestStrayCopy_*` (backup, web,
+  C8: README — `backup.volumes` excluded leaves the app-data backups, not the `.fab` export or the whole-guest snapshot.
+- **A second fresh review of the same night's own code (N2–N5, N9).** N2: a container whose removal failed is a
+  per-name stray, cleared when a later removal works (it used to refuse every restore until a restart). N3: the start-up
+  check never removes a copy THIS process runs (`running` names). N4: one copy per destination at a time in a process —
+  a second run (the household's „Tier 2 on" save, the debug run) waits instead of removing the first's container. N5:
+  `RunTier2` itself refuses during a restore of that app (R-1180 for every caller, not only the night loop). One
+  background retry for strays and a failed start-up check; tests switch it off (`tier2RetryOff` — a timer outliving a test
+  would reach the host's real Docker). N9: the R-1187 (c) refusal no longer advises removing an unhealthy app (its data
+  may be newer than the bundle) — „kérd az üzemeltető segítségét". Tests `TestStrayCopy_AStrayClears…`, `…KeepsThis
+  ProcessesOwnCopy`, `…SameDestinationWaits`, `TestR1180_ADirectRunTier2…`, each red-proved; `-race` clean. Tests `TestStrayCopy_*` (backup, web,
   wiring; Docker-free seams), each red-proved; 9202 proof in felhom.eu `audits/night-2026-10-23/P1-straycopy/`.
 
 ## Unreleased — the second-drive copy no longer squeezes the apps' memory (R-1214), 2026-10-22 night