hub v0.129.0: operator raises ONE clean-up window's cap (R-833); restore-beside script + runbooks (R-834)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 08:56:56 +02:00
parent 3885640f66
commit 55f7621c90
20 changed files with 647 additions and 28 deletions
@@ -678,6 +678,8 @@ var operatorOnlyEvents = map[string]bool{
 	"offsite_window_drop":         true,
 	"offsite_window_failed":       true,
 	"offsite_prune_guard_refused": true,
+	// R-833 (v0.129.0): the operator raised ONE window's removal cap — an operator act, logged.
+	"offsite_window_large_grant": true,
 	// R-197 (v0.93.0). "The sealed offsite repository key changed" is a custody fact about escrow
 	// blobs. A customer can take no action on it — the remedy is the operator's inspection of the
 	// off-site tier — and the text is operator-grade English naming host ids and retained-blob