felhom-controller/REPORT.md

REPORT — controller v0.264.0: the household is told when an update is undone or held (2026-09-23)

09 §6.4 parts 2–3; R-606, R-620, R-646. Commit bc27894. MinAgent 0.131.0 (unchanged). Needs hub v0.120.0 (deployed first). Floor raised to 0.264.0 after the live proof. Full report, mails and evidence: felhom.eu/REPORT.md, felhom.eu/documentation/audits/undo-fleet-2026-09-23/.

Not done, or changed

• R-606 has three leftovers → R-647: a reader in the other language than the box sees a HELD sentence in the box's language; the English mail's raw Note: keeps the Hungarian copy_holds; two log wordings.
• Added beyond the brief: a one-time box-side seed + two notifications-page toggles (the page pushes its list to the hub on save, which would undo the hub's migration).
• The undone line ends „nincs teendőd" (the product's „te" voice), not „teendője nincs".

What shipped

• app_update_undone (warning) / app_update_held (error), one per app per outcome, via Manager.SetUpdateEventSink (main.go); held mails carry the hold sentence in the household's language.
• Update sentences stored as key + args and rendered per reader on both pages and GET /api/stacks/<n>; stored Hungarian byte-identical.
• BackfillAppliedMeta at startup (R-646). Disabled notifier: one WARN per type, then DEBUG (R-620).

Red-proofs (9, each seen failing)

Backfill stores nothing; dropped() not called; undone event not emitted; held event not emitted; page error text not localised; hold sentence ignores the language; UpdateErrorIn returns Hungarian; box seed not run; sink not wired in main (retried with a compiling mutation). Messages in felhom.eu/REPORT.md §6.

Live

9202: undone + held, pages hu/en, WARN-then-DEBUG, backfill 3. 9201 (hub on): 4 household + 4 operator mails in hu and en, notification_log 937–946 all sent, backfill 10. Both torn down to their standing apps and the live catalog; both on 0.264.0.

go test ./... rc=0; controller_gates.py rc=0.