##### REFUSAL — a unit without the database password, over a newer install (rallly)
unit app.yaml now carries DB_PASSWORD: 0
deployed_at: "2026-10-16T21:32:19Z"
"dumps_at": "2026-10-16T21:24:17Z
23:35:13   [R] restoring rallly from snapshot 'helyi' (of 1 offered)
23:35:13   [R] POST /backup/restore -> HTTP/2 302 ['location: /backups/restore?flash=flash.restore.started']
23:35:13       +   0.0s restore (False, None, None)
23:35:19   [R] after restore: state=running hold=None phase=None
23:35:22 onbox restore: {"ok": true, "snapshot_id": "helyi", "http": "HTTP/2 302", "location": ["location: /backups/restore?flash=flash.restore.started"], "seconds": 6.1}
23:35:22   restore-status: {"running": false, "op": "restore", "stack": "rallly", "started_at": "2026-10-16T21:35:13.244020136Z", "last": {"op": "restore", "stack": "rallly", "ok": false, "message": "Visszaállítás sikertelen: Ezt a mentést nem lehet visszaállítani: nem tartalmazza az adatbázis jelszavát, és nélküle az alkalmazás nem tudna elindulni. A mostani telepítés érintetlen maradt.", "finished_at": "2026-10-16T21:35:13.253731205Z"}, "last_recent": true}
23:35:42 check rallly: deployed=True state=running hold=None
23:35:46   marker row: 'r1106-A2\nr1106-B' (want 'r1106-B' present)
23:35:49   rallly log auth errors (10 min) / status: 0 | Up | 3 | minutes | (healthy)
23:35:52   app login to its DB (the app's own DATABASE_URL user): 1
23:35:55   front door: 301

2026/10/16 21:35:13 restore_dbcreds.go:111: [ERROR] [backup] Restore REFUSED for rallly before any change: restore refused: the backup does not carry the database password: [DB_PASSWORD] (the current install is not older than the data, or no value at all) (R-1
unit restored: DB_PASSWORD lines 1
