answers 2026-10-12 Parts D, F, G: controller 0.308.0 delivered, the capability map restructured, the notification design; 128 -> 97

- closed: R-922 R-255 R-266 R-333 R-577 R-554 R-562 (controller 0.308.0 on demo-hp, demo-felhom, Tester 1), R-288 (map 212 KB -> 48 KB, detail per section)
- R-521 narrowed to F7; R-388 design in 08 §8.1 (two questions for the operator)
- privacy draft: why the registered address stays (S1); 02 module map: setup wizard deleted
- STATUS + REPORT-answers-2026-10-12.md; docs.md routing line names capability-map-detail/

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/architecture/02-controller-module-map.md

@@ -53,7 +53,7 @@ Risk tags: **clean** · **needs-rework** · **hazard** (entangles a delete-targe
 - The **disk/storage/host half deletes wholesale to the agent**: all of `storage/`,
   `monitor/watchdog.go`, the restic/cross-drive/disk-layout/drive-mount parts of `backup/`,
   `report/infra_backup*`+`infra_pull`, and the host-physical parts of `system/`.
-- The **setup wizard (`setup/`) is obsolete** — the agent provisions the controller.
+- The **setup wizard (`setup/`) was obsolete and is DELETED** (controller v0.308.0, R-554, `09` §3 decision 222) — the agent provisions the controller; a box that cannot get its configuration shows one waiting page (`bootstrap.WaitForConfig`).
 - **The single biggest hazard is `backup/`**: the keep side (DB dumps, Docker-volume
   archive, per-app restore — needed by `appexport/` and the backup UI) and the delete side
   (restic, cross-drive, drive-mount) are **interleaved inside the same files**
@@ -209,7 +209,6 @@ own; every caller that is not the customer must decide for itself whether the ap
 | `selftest/` | Startup checks (docker/dirs/catalog/hub/**restic repos**/mountpoint) | backup, config, settings, system |
 | `selfupdate/` | Self-update: pull image, edit compose, `up -d` | config |
 | `settings/` | `settings.json` persistent state: **storage paths/disconnect/decommission**, cross-drive cfg, notif prefs, geo, integration state, DB-validation cache | — |
-| `setup/` | **First-run wizard** (scan drives, hub-restore, manual config) | backup, config, report, settings, web |
 | `stacks/` | Docker Compose lifecycle, deploy + memory validation, metadata (`.felhom.yml`), HDD-data delete | config, crypto, system |
 | `storage/` | **Physical disk** scan/format/attach/mount/migrate/fstab/safety | backup, settings, util |
 | `sync/` | Catalog git-sync (pull templates) | config |
@@ -297,7 +296,7 @@ own; every caller that is not the customer must decide for itself whether the ap
 | File | Class | Reason | Risk |
 |---|---|---|---|
 | `notify/notifier.go` | **KEEP/MODIFY** | Direct hub event channel (own API key) — keep; prune infra event types that move to the agent (`storage_disconnected`, `crossdrive_*`, `disaster_recovery_*`). | clean |
-| `recovery/info.go` | **DELETE (obsolete)** | Generates a DR text guide (OS install, docker-setup.sh, hub restore UI); DR is now agent+hub provisioning. | clean |
+| `recovery/info.go` | **KEEP (rewritten v0.308.0)** | `recovery-info.txt` (only when a retrieval password is set): points at the dashboard's Restore page and the ten-word recovery code, in the box's language (R-554). | clean |
 | `scheduler/scheduler.go` | **KEEP** | Generic cron/interval, Budapest TZ. | clean |
 | `selftest/selftest.go` | **PORT** | Keep docker/dirs/catalog/hub checks; drop restic-repo + system-data **mountpoint** checks (→agent). | needs-rework |
 
@@ -323,7 +322,7 @@ own; every caller that is not the customer must decide for itself whether the ap
 |---|---|---|---|
 | `settings/settings.go` (1101 L) | **MODIFY (split)** | Keep notif prefs, integration state, geo, DB-validation cache, cross-drive *intent*. The **storage-path registry** (`StoragePath` with `Disconnected`/`DisconnectedAt`/`StoppedStacks`/decommission) is disk-management state → reshape to **per-volume placement** fed by the agent's storage manifest; disconnect/decommission/migrate state leaves. (UUID is *not* a persisted field — runtime-derived from fstab.) | hazard |
 
-### `setup/` — all DELETE (obsolete); the agent provisions the controller
+### `setup/` — DELETED in controller v0.308.0 (R-554); kept here as the record
 | File | Class | Reason | Risk |
 |---|---|---|---|
 | `handlers.go`,`setup.go`,`csrf.go`,`network.go` | **DELETE (obsolete)** | First-run wizard (hub-restore, manual config, LAN-IP detection). | needs-rework |