PART 4.2 — the abandonment sweep, watched firing. 2026-08-22.

State created 2026-08-21 23:08-23:09 CEST:
  set-aside store  u629488-sub3:/home/felhom-repo-superseded-drill-20260821  (config/data/index/snapshots)
  countdown        started 2026-08-07, due 2026-08-20  (written into settings.json, controller restarted)
  product CLI      "abandonment countdown RUNNING … deleted on: 2026-08-20 … days left: 0"

05:10 CEST — the daily `offsite-abandon-sweep` job fired.
  /home on the storage box now stamped 03:10Z
  /home/felhom-repo-superseded-drill-20260821   -> GONE
  /home/felhom-repo  (the LIVE repository)      -> present, mtime still Aug 4  ** survived **

05:13 CEST — the hub half. Event 3025 `offsite_abandon_purged`:
  "Az ügyfél korábbi távoli mentései és a hozzájuk tartozó megőrzött helyreállítási csomag is
   törölve (1 csomag). Az ügyfél döntése alapján, a 14 napos türelmi idő lejárta után."
  demo-hp's row in host_escrow_superseded: REMOVED (there was exactly one).
  demo-felhom's rows 4, 11, 12: ALL PRESENT — the protected fixtures were not touched.

Controller closed itself out: every abandon_* field removed from settings.json;
`--abandon-status` reports "no abandonment countdown is running on this box".

VERDICT: the two-phase commit's promise — "it removes BOTH halves or neither" — is confirmed
live for the first time. It removed exactly the recorded set-aside path and nothing else.
