# REPORT — controller v0.264.0: the household is told when an update is undone or held (2026-09-23)

`09` §6.4 parts 2–3; R-606, R-620, R-646. Commit `bc27894`. MinAgent 0.131.0 (unchanged). Needs hub
v0.120.0 (deployed first). **Floor raised to 0.264.0** after the live proof. Full report, mails and
evidence: `felhom.eu/REPORT.md`, `felhom.eu/documentation/audits/undo-fleet-2026-09-23/`.

## Not done, or changed
- R-606 has three leftovers → **R-647**: a reader in the other language than the box sees a HELD sentence
  in the box's language; the English mail's raw `Note:` keeps the Hungarian `copy_holds`; two log wordings.
- Added beyond the brief: a one-time box-side seed + two notifications-page toggles (the page pushes its
  list to the hub on save, which would undo the hub's migration).
- The undone line ends „nincs teendőd" (the product's „te" voice), not „teendője nincs".

## What shipped
- `app_update_undone` (warning) / `app_update_held` (error), one per app per outcome, via
  `Manager.SetUpdateEventSink` (main.go); held mails carry the hold sentence in the household's language.
- Update sentences stored as key + args and rendered per reader on both pages and `GET /api/stacks/<n>`;
  stored Hungarian byte-identical.
- `BackfillAppliedMeta` at startup (R-646). Disabled notifier: one WARN per type, then DEBUG (R-620).

## Red-proofs (9, each seen failing)
Backfill stores nothing; `dropped()` not called; undone event not emitted; held event not emitted; page
error text not localised; hold sentence ignores the language; `UpdateErrorIn` returns Hungarian; box
seed not run; sink not wired in main (retried with a compiling mutation). Messages in `felhom.eu/REPORT.md` §6.

## Live
9202: undone + held, pages hu/en, WARN-then-DEBUG, backfill 3. 9201 (hub on): 4 household + 4 operator
mails in hu and en, `notification_log` 937–946 all sent, backfill 10. Both torn down to their standing
apps and the live catalog; both on 0.264.0.

`go test ./...` rc=0; `controller_gates.py` rc=0.