# RP3 — observed, not staged: the FIRST draft of LoadKeptOffsite removed the downloaded copy in a `defer`, i.e. AFTER
# EndRestoreOp and after(ok) had already reported the outcome. The tests failed on it before the fix (copied from the run):
    r691_kept_offsite_test.go:184: the downloaded copy was left behind at /tmp/TestR691_OffsiteLoadDownloadsJudgesThenRestores2898855198/002/backups/offsite-proof/nextcloud (err=<nil>)
    r691_kept_offsite_test.go:233: the downloaded copy was left behind after a refusal (err=<nil>)   (x3 sub-cases)
# Fix: cleanup() runs before fail()/EndRestoreOp on every path.
