R-1261: the line hold holds every running seeder, drops the record of an app removed while held, and puts back the qBittorrent slot it held (alternative speed). Red-proved. Commit only.

CHANGELOG.md

@@ -1,3 +1,24 @@
+## Unreleased (next: v0.344.0) — the line hold's three edges (R-1261) (2026-10-25 night) — committed, not released
+
+**MinAgent: 0.158.1** (unchanged). The hold acts only on a box whose agent reports `waiting_for_quiet` (≥ 0.165.0).
+
+### The line hold holds every seeder, forgets a removed app, and puts back the slot it held (R-1261, P3)
+
+- **Every running seeder is held** (`internal/upwatch/linehold.go` `SeedLineTestNow`): qBittorrent AND Transmission —
+  one left seeding kept the uplink busy and the agent refused the test „not quiet" every 15 minutes. All records are
+  written first (settings `upwatch.line_test_holds`), then every app is held; one failed hold puts every app back; the
+  release puts each back. A record the 0.343.0 controller left (`line_test_hold`) is honoured and cleared.
+- **An app removed while held drops its record** (`RecoverHold`, `Service.TorrentInstalled`, wired from the stack
+  manager): the record used to wait for an app that never runs again, and qBittorrent's 50 % rule stayed off for good.
+  A stopped but installed app keeps its record, as before.
+- **qBittorrent's speed mode:** its `transfer/uploadLimit` / `setUploadLimit` act on the slot of the CURRENT mode
+  (measured on 5.2.4, felhom.eu `documentation/audits/night-2026-10-25/r1261-qbittorrent-api-measured.txt`). The hold
+  now names its slot (`HeldLimit.Alt`) and reads and writes it through `app/preferences` (`up_limit` /
+  `alt_up_limit`), so a household's switch to the alternative speed during the test can no longer leave 1 KiB/s in the
+  other slot.
+- Tests: `linehold_r1261_test.go` (a fake qBittorrent that behaves as measured), `cmd/controller/r1261_wiring_test.go`.
+  Each seen failing with its fix switched off: felhom.eu `documentation/audits/night-2026-10-25/redproof-r1261.txt`.
+
 ## v0.343.0 (2026-10-25) — RELEASED on the operator's yes (attended release run; image sha256:bb3da72a…, from `e2a9761`, CI 2330; global floor 17:53:42 UTC, MinAgent 0.158.1) — a restore tells the truth, downloads first and never touches an earlier install's backup; the line test for a box that seeds all day (R-1250, R-1251–R-1253, R-1269–R-1271, R-1279; D47, D48, D49 = A)
 
 **MinAgent: 0.158.1** (unchanged): an agent before 0.165.0 never reports `waiting_for_quiet`, so nothing is held. Attended