D65 = A: the busy file the agent reads before an operator reboot, and the household's 'Felhom support restarted your box' line; R-1350: a hold clear records the wanted stop so no app_start_failed follows it

CHANGELOG.md

@@ -1,3 +1,28 @@
+## Unreleased — the household line after an operator reboot and the busy file for it (D65 = A); a hold clear records the wanted stop (R-1350)
+
+### 2026-10-29 (evening)
+
+**MinAgent: 0.158.1** (unchanged). The new `GET /guest/operator-reboot` is asked once at start; an older agent answers
+404, and such an agent cannot reboot from the hub either — nothing to show, nothing broken. The busy file is read BY the
+agent (≥ the reboot_guest commit); an older agent never reads it.
+
+- **D65 = A — the busy file (`internal/busymark`).** `<data dir>/ctl/busy`, rewritten every 15 s while a backup, a
+  restore, an off-site run, the night catch-up, an app update or an app export/import runs; removed when idle and at
+  start. The agent refuses the operator's „Reboot guest" while it is fresh. Tests `TestBusyFileFollowsTheWork`,
+  `TestBusyMarkPathIsTheOneTheAgentReads` (the path is the agent's guest path), `TestBusyMarkIsWiredAtStartup`.
+- **D65 = A — „Felhom support restarted your box at <time>."** The dashboard's one neutral line for a day after an
+  operator reboot, HU/EN (`dashboard.operator_reboot`); the idle dashboard is byte-identical (the parity fixtures pass
+  unchanged). Tests `TestOperatorRebootNotice_*`, `TestWatchOperatorReboot_RetriesAndKeepsTheTime`.
+- **R-1350 — no „installed app is not running" after the operator's hold clear.** Measured 2026-10-29 14:57 on Tester 1:
+  gokapi's crash-loop hold cleared from the hub, the app stayed stopped, and 30 s later `app_start_failed` went out —
+  the hold had kept it out of the dead-app scan while the household's recorded wish was still „running". The clear now
+  records the stop as wanted (desired state „stopped") for an app that is not up, once the hold is found and before it
+  is lifted; a running app's wish is left alone; a refused clear records nothing; the household's Start ends it.
+  Tests `TestR1350_*` (the consequence through `classifyRunStates`, the order against the lift, the refusal, the up
+  check, the wiring).
+- Every new test seen failing by a mutation (17 mutants; two first-run mutants that did not compile were re-made so they
+  compile, and then failed).
+
 ## v0.348.0 (2026-10-29) — clear_hold from the hub (D64 = B); the box command clears through the running controller (R-1343); the held-app mail and line name the real cause (R-1340); the OOM line once per kill (R-1341); the restore copy safe during the stable-start watch (R-1342) — built from the commit carrying this heading
 
 ### 2026-10-29 (afternoon)