4867ec1804
Diagnosed: 9202's paperless-ngx app.yaml named <drive>/userdata/paperless-ngx, written by the 2026-09-22 drill harness through POST /api/stacks/<n>/deploy, which accepted it (RefuseAsAppNamespace matches by prefix). The boot sweep then asked a folder whether it was a mountpoint and HELD the app. The deploy page offers drive roots only, so a household could not reach this; every other caller is now refused with a sentence naming the drive (settings.DriveOfSubPath). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS