v0.290.0: the clean-up guard skips same-day superseded young snapshots instead of refusing (R-824), refuses above the weekly cap; a due set-aside deletion is handed to the hub's 7-day wait (decision 74, R-823)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 07:27:38 +02:00
parent c4bf730637
commit c1a73b24b3
10 changed files with 309 additions and 68 deletions
@@ -486,6 +486,9 @@ type OffboxTarget struct {
 	// hub's ACK stops reporting a superseded package. If the two halves could not be removed together
 	// this marker is what makes the box keep asking until they are (Scenario F).
 	AbandonPurgeRequested bool `json:"abandon_purge_requested,omitempty"`
+	// AbandonHubDueAt (v0.290.0, decision 74) — RFC3339: the deletion was HANDED TO THE HUB, which deletes
+	// the set-aside copy at this time unless cancelled. The box's own key cannot delete (decision 69).
+	AbandonHubDueAt string `json:"abandon_hub_due_at,omitempty"`
 	// AbandonPinnedEscrowKeySHA256 (R-302) — the hub's escrow key fingerprint AS CACHED AT THE MOMENT
 	// THE CUSTOMER DECIDED. It is NOT the current key and NOT re-read: the banner's retrieval promise
 	// is rendered only while the hub is still holding that same package.