## RPC1: the v0.289 guard — a young removal always refuses (no same-day exclusion)
=== RUN   TestOffsiteGuard_SameDaySupersededYoungExcluded
    offbox_window_test.go:222: the window must run, not refuse: [{ID:2 CountBefore:3 CountAfter:3 Removed:0 Outcome:guard-refused Reason:the policy would remove snapshot night from 2026-10-03T02:00:00Z — younger than 8 days and not superseded the same day, which honest retention never does}]
--- FAIL: TestOffsiteGuard_SameDaySupersededYoungExcluded (0.00s)

## RPC2: the v0.289 guard cap (take the oldest, never refuse)
=== RUN   TestOffsiteGuard_AboveWeeklyCapRefused
    offbox_window_test.go:201: ids=[o5-full o4-full o3-full o2-full o1-full o0-full] why=""
--- FAIL: TestOffsiteGuard_AboveWeeklyCapRefused (0.00s)

## RPC3: a recovery that does not cancel at the hub
=== RUN   TestAbandon_PinnedHandsToHubAndFollows
    offbox_window_test.go:334: cancels=0 status={Active:false StartedAt:0001-01-01 00:00:00 +0000 UTC DueAt:0001-01-01 00:00:00 +0000 UTC DaysLeft:0 RepoPath:/home/felhom-repo.orphaned-20260901 PurgeRequested:false HubPending:false HubDueAt:0001-01-01 00:00:00 +0000 UTC RetrievalStillOffered:false}
--- FAIL: TestAbandon_PinnedHandsToHubAndFollows (0.00s)

## restored:
ok  	gitea.dooplex.hu/admin/felhom-controller/internal/backup	0.020s
