D65 = A: the busy file the agent reads before an operator reboot, and the household's 'Felhom support restarted your box' line; R-1350: a hold clear records the wanted stop so no app_start_failed follows it

controller/README.md

@@ -3663,6 +3663,19 @@ starts a countdown or shortens one (`TestOpActions_ClosedList`). The box's log r
   dropped from the app-stop marker too; its copy stays on disk. The update's in-memory „held" flag
   (`stacks.Manager.ForgetUpdateHeld`) goes with it; the hold reporter's next tick (≤1 min) sends `app_hold_cleared`.
   Refused, nothing changed: a bad name, or an app with no hold. No new event type: the hub records the result.
+  **R-1350 (2026-10-29):** for an app that is not up, the clear records the stop as WANTED (desired state „stopped",
+  `stacks.Manager.RecordStopWantedIfDown`) once the hold is found and BEFORE it is lifted
+  (`AppStopGuard.ClearHoldByOperatorThen`), so the dead-app scan sends no „Telepített alkalmazás nem fut" for it and the
+  boot reconciler does not start it; the household's Start records „running" and ends it.
+- **The busy file for the host agent (D65 = A, 2026-10-29; `internal/busymark`).** While a backup, a restore, an
+  off-site run, the night catch-up, an app update or an app export/import runs, the controller rewrites
+  `<data dir>/ctl/busy` every 15 s (line 1 the UTC time, line 2 what runs, 0600) and removes it when idle. The agent reads
+  it before the operator's „Reboot guest" and refuses while it is fresh (≤ 90 s); a controller that stopped writing it
+  does not block the reboot.
+- **„Felhom support restarted your box" (D65 = A).** At start the controller asks the agent `GET /guest/operator-reboot`
+  (retrying for up to 10 minutes; a 404 from an older agent ends it) and the dashboard shows one neutral line,
+  „A Felhom ügyfélszolgálata HH:MM-kor újraindította a dobozt." / „Felhom support restarted your box at HH:MM.", until a
+  day has passed since the reboot.
 - **The box command `--clear-restore-hold <app>`** (`pct exec <vmid> -- docker exec felhom-controller felhom-controller
   --clear-restore-hold <app>`) asks the running controller over a unix socket, `<data dir>/ctl/hold.sock` (0600 in a
   0700 dir, peer uid checked, nothing on TCP — not reachable through traefik, the LAN or an app), and says no restart is