v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

Operator rulings 2026-10-12, 09 §3 decisions 196, 204-207, 223, 227. MinAgent 0.131.0 unchanged.
R-255's sweep found one leak, fixed here: an optional-config secret_input was rendered into its
settings page; it is now revealed on demand. Hungarian parity fixtures re-captured once for R-562.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/report/builder.go

@@ -91,7 +91,7 @@ func BuildReport(
 
 	// Storage — root filesystem + all registered storage paths
 	r.Storage = []StorageReport{
-		{Mount: "/", Label: "SSD", TotalGB: sysInfo.DiskTotalGB, UsedGB: sysInfo.DiskUsedGB, Percent: sysInfo.DiskPercent},
+		rootStorageEntry(sysInfo),
 	}
 	for _, sp := range storagePaths {
 		if sp.Decommissioned {
@@ -328,3 +328,14 @@ func buildStacksReport(stackMgr *stacks.Manager) StacksReport {
 
 	return sr
 }
+
+// rootStorageEntry is the report's "/" entry. When the root statfs failed (DiskKnown false) the
+// zeros it carries are not a measurement, so the entry says so (R-266): the hub skips banding it
+// instead of reading a failed read as an empty disk.
+func rootStorageEntry(sysInfo system.SystemInfo) StorageReport {
+	return StorageReport{
+		Mount: "/", Label: "SSD",
+		TotalGB: sysInfo.DiskTotalGB, UsedGB: sysInfo.DiskUsedGB, Percent: sysInfo.DiskPercent,
+		ReadFailed: !sysInfo.DiskKnown,
+	}
+}