D65 = A: the busy file the agent reads before an operator reboot, and the household's 'Felhom support restarted your box' line; R-1350: a hold clear records the wanted stop so no app_start_failed follows it

controller/internal/backup/hold_clear.go

@@ -39,6 +39,13 @@ func IsValidHoldStack(s string) bool { return isSafeStackName(s) }
 // returns the hold it lifted. A waiting put-back is dropped from the app-stop marker too (see above). Refusals
 // (ErrHoldBadStack, ErrNotHeld) change nothing.
 func (g *AppStopGuard) ClearHoldByOperator(stack string) (settings.RestoreHold, error) {
+	return g.ClearHoldByOperatorThen(stack, nil)
+}
+
+// ClearHoldByOperatorThen is ClearHoldByOperator with beforeLift run once the hold is FOUND and before it is lifted,
+// under the same lock (R-1350: the household's „the stop is wanted" is recorded before the hold stops keeping the app out
+// of the dead-app scan). beforeLift is not run on a refusal.
+func (g *AppStopGuard) ClearHoldByOperatorThen(stack string, beforeLift func()) (settings.RestoreHold, error) {
 	if !isSafeStackName(stack) {
 		return settings.RestoreHold{}, ErrHoldBadStack
 	}
@@ -51,6 +58,9 @@ func (g *AppStopGuard) ClearHoldByOperator(stack string) (settings.RestoreHold,
 	if !ok {
 		return settings.RestoreHold{}, ErrNotHeld
 	}
+	if beforeLift != nil {
+		beforeLift()
+	}
 	cleared, err := g.holds.ClearRestoreHold(stack)
 	if err != nil {
 		return h, err