R-1295 live on hub rc.1 (a fresh Tester4 install set up its whole-guest off-site tier; the box consumed the credential and made its first copy); R-1294 read: an honest plan the cap can never catch up with (D54); R-1291 design (08 §10, D53); design lines for R-1295, R-1285, R-1292, R-1294; R-1296 filed; STATUS.

STATUS.md

@@ -23,7 +23,7 @@
 - DooPlex: something sets the shared checkout to „bare" (R-935).
 
 ## What we work on
-- Next for CC: demo-hp's weekly off-site clean-up is refused by its own cap (R-1294); the BYO SSH clean-up runs one release late (R-1285).
+- Built today, not released: a fresh install's off-site set-up waits out PBS's permission cache and mails you if it still fails (R-1295); the BYO SSH clean-up in the same update (R-1285); the 50 % torrent rule leaves the alternative speed alone (R-1292).
 - Dated checks, run by CC. 2026-10-27: the qBittorrent line test on a seeding box, with DooPlex's qBittorrent as the peer (R-1250, your yes); the weekly clean-up window (R-435; the logs of the last one were lost to restarts). 2026-10-30: D35, website and installer to Cloudflare, starts (R-1228, ruled yes).
 
 ## Waiting on you — decide
@@ -32,6 +32,8 @@ Newest first. CC's pick is in the „Pick" column. Each row also has its full te
 
 | # | Row | Question | Pick (why) | The other option costs | If you do nothing | Blocked |
 |---|---|---|---|---|---|---|
+| D54 | R-1294 | demo-hp's weekly off-site clean-up is stuck: its plan (209 old copies, all from a test day and normal ageing) is above the safety cap (179), and it cannot catch up by itself. Prune it once by hand, or change the cap? | **Prune once** — on your yes, demo-hp gets one clean-up window with a raised cap of 220 through the hub's existing one-shot grant (the plan is honest: every removal is 7–30 days old, every app keeps ≥ 9 copies) | change the cap rule: code in hub + controller, and a weaker guard against a mass deletion | it is refused every Sunday, mails an error each week, and the store grows ~100 copies a week | — |
+| D53 | R-1291 | A stopped-and-held app (like Kimai for 11 days) should reach you. Operator-only reminders, or also mail the household for the two holds it can clear itself? | **Operator only first** (the design in `08` §10: a „Held apps" list and a reminder after a grace per reason; ~1.5 days of work) | also the household: two more customer mails to write and translate, and a mail about a stop they may not understand | held apps stay invisible until someone opens the app's page | — |
 | D38 | R-1235 | Put the newest golden (637 MB) into the nightly release copy on ep0 too? | **Yes** (a new install after a DooPlex loss needs it; it fits under the 3 GB cap) | leave it out: after a loss, no new install until a golden is rebuilt and vouched | the same | — |
 | D37 | R-1236 | Raise Gitea's memory limit from 1 GiB to 2 GiB? It was killed for memory 4 times in 17 days, once during today's release. | **Yes** (DooPlex has the RAM; a DooPlex change, so yours) | keep 1 GiB: a restart in release hours fails box updates and CI for a minute | the same | — |
 | D9 | R-1062 | Split the N100's USB drive in two, for multi-drive tests? | **No — keep one drive** (the lived-in box keeps its nightly whole-box backup) | Split: the box loses its local whole-box backup, or you buy a second drive first | it stays one drive; multi-drive tests stay on Tester 1 | — |
@@ -48,7 +50,7 @@ Newest first. CC's pick is in the „Pick" column. Each row also has its full te
 6. BIOS: on the N100, read „After Power Loss"; on the HP, set „Bypass F1 Prompt on Configuration Changes" to Enable. Since 2026-10-14.
 7. Pin the first Facebook post (R-917), and look at the new cover in the Facebook phone app (R-919). Since 2026-10-12.
 
-**2026-10-26.** On the hub's Hosts page, delete `Tester4-eb7371` (CC's fresh-install test VM, destroyed). If not: the hub alarms that the box went silent.
+**2026-10-26.** On the hub's Hosts page, delete `Tester4-b5ec39` (CC's R-1295 test VM, destroyed). If not: the hub alarms that the box went silent.
 **2026-10-23 do list.**
 1. Print the break-glass sheet (`documentation/runbooks/break-glass-sheet.md`, the part from „The sheet”, one A4), fill it by hand, keep it outside the home (D32; R-923, R-924). If not: after a DooPlex loss no off-site copy opens.
 2. On the hub's Hosts page: Discard appliance 49. If not: a dead entry alarms.