# REPORT — controller, the night of 2026-10-21: D22 (the put-back for every restore), the first-hour words, R-1199 — COMMITTED, NOT RELEASED

**Brief:** the unattended night brief of 2026-10-21 (Parts 2–5). Architecture read: felhom.eu `07-backup-architecture.md`
§6.3/§8 (the restore failure ladder, R-893 option A as built), `08-alarm-ladder.md` (notification groups),
`10-localisation.md`. Test image **`0.338.0-rc.2`** (`sha256:ae52c93ebb83af1c646986119a1b74b07f992ffb03017624d052ece6266ec748`)
from `f0abdd0`, smoke-tested on 9202 (every page 200, 0 error/panic lines), 9202 put back on 0.337.0. `0.338.0-rc.1`
(`d582feb`) carried the D22 proof. **The release (0.338.0, MinAgent 0.158.1) is the operator's morning yes.**

| Row | What | Proof |
|---|---|---|
| R-1177 / D22 | The local unit restore measures, copies and puts back exactly on any failure (reuses `offbox_restore_undo.go`) | 9202 rc.1: damaged unit → live data back (A,C), app running; `TestR1177_*` red-proved |
| R-1195 / D22 | A restore cut by a power loss / killed controller is put back at start (`restore_crash_putback.go`, marker `undo`) | 9202 rc.1: kill -9 after the volume step → A,C,D kept, app running; `TestR1195_*` (local + off-site) red-proved |
| R-1178 | Second-drive whole restore asks the unit's refusals first | `TestR1178_*` red-proved |
| R-1180 | No second-drive mirror of an app while a restore of it runs | `TestR1180_*` (production rsync) red-proved |
| R-1199 | A box with no saved notification choice pushes the default list at start | `TestR1199_*` red-proved; *decided by CC unattended* |
| R-1192 follow-up | Install page: „A gépen nincs elég cserehely (swap)…" when memory is tight and the host's swap is short | `TestR1192_SwapShort*` red-proved |
| W9–W29 | First-hour words (family names with accents, drive name pre-filled, sharing asks for its password, off-site failure in Hungarian, operator detail behind „Haladó"/„Részletek") | per-row tests in CHANGELOG, red-proved |
| W22 | Two restore refusals in Hungarian (`restore_busy`, `restore_no_drive`) | gates + parity |
| — | Fixed: `TestR603_*` was red on main since 0.337.0 (two English apostrophes) | `go test ./...` green |

Commits: `d582feb`, `37b79ca`, `8c1e290`, `28b05d6`, `5776d54`, `ba22f9b`, `f0abdd0`. CI: green by job id for the
pushes checked (2175, 2178; the rest in the night report). Evidence: felhom.eu `documentation/audits/night-2026-10-21/`.