# REPORT — v0.284.0 (2026-09-30 late evening)

- **Image retention (`09` §3 decision 53, R-736):** after a done/undone guarded Update and at remove, an app's older
  images are deleted; the box-wide keep set (containers, installed composes, installed/previous records) is read at
  delete time; exact id, never forced/pruned; paused while any update runs; a one-time sweep 3 min after start.
- **Install hold (R-741):** an `after_install` app is held behind the setup gate's door from its first start until the
  known login is replaced (after_install, or the household's "I changed it").
- Tests: `TestImageRetention_*` (6), `TestInstallHold_*` (6), parity fixture `app_info_install_hold`; red-proofs in
  `felhom.eu/documentation/audits/night-rulings-2026-09-30/{B,C}/`. Green gate: build, vet, test ./... rc=0.
- Evidence and the live proofs: `felhom.eu/documentation/audits/night-rulings-2026-09-30/`.