v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 07:27:38 +02:00
parent c4bf730637
commit c1a73b24b3
10 changed files with 309 additions and 68 deletions
@@ -160,7 +160,7 @@ backups, monitoring and notifications. All Proxmox/disk operations are delegated
  the box sends only its public key (`offsiteapply.HubRegistrar`) and never sees the sub-account password. Transport is
  restic `rclone:` over ssh port 23 (`settings.OffboxTarget.Transport = "rclone-pinned"`); the household's own SFTP NAS
  is unchanged. Retention runs only inside a hub-opened weekly window, behind the fake-snapshot guard
-  (`backup/offbox_window.go`); the orphan move-aside is the hub's; a due abandonment is deferred to the operator.
+  (`backup/offbox_window.go`; v0.290.0: a young snapshot superseded the same day is skipped, not refused); the orphan move-aside is the hub's; a due abandonment is handed to the hub, which deletes the set-aside copy after a 7-day wait unless cancelled (decision 74).
  **Apps go off-site by themselves (v0.283.0, decision 50):** a fresh install on a box whose customer has off-site
  switches the app's off-site copy ON (`settings.DefaultOffboxOnForNewApp`, deploy-done hook); an earlier choice is
  kept. Older apps: one press on both backup pages (`/backup/offbox/enable-all`, „Nem most" dismisses). The size