R-1199: a box whose household never saved its notification choice pushes the default list its page shows at start, so the hub mails by it; unreleased

2026-10-21 23:40:21 +02:00
parent 5776d54901
commit ba22f9b2d9
5 changed files with 88 additions and 1 deletions
@@ -105,6 +105,14 @@
  line; the controller re-creates its definition while sharing is on. Any other refused share is still named.
  `TestW28_TheSystemDropZoneIsNotNamedAsRefused`.

+- **R-1199 — a box whose household never saved its notification choice now tells the hub the list its page shows.**
+  Measured the night of 2026-10-21 (felhom.eu `audits/night-2026-10-21/P5-checks/`): the box's page showed the
+  default list ticked (disk warning, drive disconnected, second-drive failure …) but pushed nothing until the household
+  saved the page, and the hub mails the household only by its own stored list — for Tester4 a list saved 2026-10-18,
+  two days before the rehearsal box existed, without those three; the household got one alarm of nine. Now the
+  start-up sync also runs when no choice was ever saved, with the default list and no address (the hub's no-clobber
+  guard keeps the stored address). A saved choice is unchanged (R-922). *Decided by CC unattended — the box's page is
+  the source, following `08`'s „the household decides"; operator may reverse.* `TestR1199_*` (red-proved).
 ## v0.337.0 (2026-10-21) — kept second-drive copies (D25: R-1175, R-1181, R-1179); a `.fab` import keeps the family gate (R-1191); a stale restore temp no longer blocks the retry (R-1188 c); the overcommit sentence made true (R-1192); escrow recorded before the floor (R-1176); a finished off-site abandonment closes on the hub's word (R-1182); storage labels follow the language (W26)

 **MinAgent: 0.158.1** — the floor's, carried; no agent change is needed by this release (the R-1192 swap fix is the