hub v0.114.0: self-bind auto-send while a customer waits for a box (R-509); node_* bypass the quiet hour (ruling 2026-09-15); PBS re-issue adopts an endpoint token (R-511); controller supervisor events (R-523); event registers

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

hub/cmd/hub/main.go

@@ -597,6 +597,8 @@ func main() {
 	// offsite_delivery_stuck (warning, 24h/customer) and self-heals it via the Re-issue path
 	// (offsite_credential_restaged, one restage/customer/24h, R-39(a)-guarded). Cooldowns are
 	// durable (events table), so a hub restart neither floods nor silently re-heals.
+	// R-523: the agent's in-guest controller supervisor → controller_restarted_by_agent / controller_crashloop.
+	controllerSupervisorChecker := monitor.NewControllerSupervisorChecker(dataStore, dispatcher.ProcessEvent, logger)
 	offsiteDeliveryChecker := monitor.NewOffsiteDeliveryChecker(dataStore, offsiteHealReissuer, dispatcher.ProcessEvent, logger)
 	go func() {
 		ticker := time.NewTicker(60 * time.Second)
@@ -617,6 +619,7 @@ func main() {
 				offsiteChecker.Check()
 				restoreTestChecker.Check() // R-85: restore-test failure + per-tier staleness
 				offsiteDeliveryChecker.Check()
+				controllerSupervisorChecker.Check()
 				if offsiteBoxChecker != nil {
 					offsiteBoxChecker.Check() // R-5: restic pool-box aggregate (fetch-throttled internally)
 				}