night 2026-09-13/14: first "be a customer" rotation (adventurelog) — 7 defects found, 13 rows closed

New runbooks/nightly-rotation.md; observations_gate.py reads every section
(R-471); target-selection.md names real paths (R-461); R-93 carries the
fact that drill-r50 is gone. Register: R-473/R-474/R-466/R-471/R-453/R-461
and v0.240.0's R-477/R-478/R-480/R-482/R-484/R-485/R-486 closed; R-481,
R-483, R-487, R-488, R-489 opened. 09 §6.1, 07 §6, CONTEXT, STATUS note.
Evidence: audits/nightly-2026-09-13-adventurelog/, audits/v0240-2026-09-13/.

CONTEXT.md

@@ -31,6 +31,9 @@ on demo-hp — `documentation/audits/slice4-2026-09-13/`, design `09-update-arch
   successful unit restore lifts it.
 - **Anything that writes a restore point skips an app that is held OR updating** (capture, Tier 2, volume
   dump) — the updating half was found live (v0.238.1).
+- **Removal keeps the backups AND the Tier-2 record unless the customer asked for the backups to go**
+  (v0.240.0, R-486/R-474). A removal that forgets the record makes an intact mirror unrestorable — that
+  was live until v0.239.0. The first nightly rotation (adventurelog, 2026-09-13) found it.
 - **A release reaches the fleet by floor between golden bakes when its MinAgent is declared with the
   floor** (ruling 2026-09-13, hub v0.112.0, R-472 CLOSED). An undeclared floor above the golden is still
   held, and the forms refuse it. v0.239.0 arrived on both demo boxes this way in ~15 s. Never hand-deploy