night 2026-10-23 so far: D30 live proof (re-key → new-key handshake; ep0-started handshakes heal a short clock jump by themselves), D4 patches v2 after review, test-night install/fixture evidence, DooPlex survival survey (read only) + PLAN, 03/05/07 + CONTEXT, total-loss runbook: MAIL-HOLD shipped

CONTEXT.md

@@ -16,6 +16,25 @@
 > and holds nothing of its own; this file does hold its own content, namely the standing rulings below.
 
 
+> **2026-10-22 evening — operator rulings D29, D30, D31 (CC's picks accepted; the decide rows now in `STATUS-HISTORY.md`).**
+> **D29** = no: the controller repository stays public for now (R-925). **D30** = the agent makes a new WireGuard key and
+> registers it on the existing peer path (R-1204). **D31** = the hub skips a deleted install that never made a key when it
+> decides the automatic PBS re-issue (R-1205). If the operator reverses one in the morning, its commit is reverted before
+> release (night brief 2026-10-23 §0).
+
+> **2026-10-22/23 night — what was built (night brief; nothing released, deployed, published or vouched).**
+> **Stray-copy fix** (R-1214/R-1180): controller `66a69d4` + `912e592` — the capped copy's container has a fixed name +
+> label `felhom.tier2-copy=1`, is removed by name on any error, every leftover is removed at start before the scheduler
+> and web server, a restore is refused while a copy runs (`backup.Tier2CopyBlocksRestore`, in-memory record + a stray
+> flag until the start-up removal succeeds); `--mount`, image ID, `--pull never`, `--no-healthcheck`. Proven on 9202 rc.5.
+> **D30:** agent `ae69ad4` (`wgtunnel/rekey.go`, 15 min, once an hour, `private.key.prev`); hub `84751cb0` pins the
+> alarm clearing. **D31:** hub `84751cb0` `store.LatestKeyHoldingHostDeletion` (hub 0.167.0 source, NOT built — a hub
+> image build is the morning's, with the deploy). **Review fixes:** controller `943c517` (C5 catch-up releases the
+> whole-guest hold before its checks; C3 text; C6/C8 wording); the D4 patches v2 (`audits/night-2026-10-23/P3-review/`).
+> **Images:** controller `0.340.0-rc.5` (= `66a69d4`) and `0.340.0-rc.6` (= `943c517`); no hub image tonight.
+> **Survey:** `audits/dooplex-survival-2026-10-22/PLAN.md` (G1–G10; the three biggest: the sheet, the registry, the
+> home line). Report: `REPORT-night-2026-10-23.md`.
+
 > **2026-10-22 15:47 — operator rulings, „all picks" (the decide table, rows now in `STATUS-HISTORY.md`).**
 > **D3** = change the zero-knowledge wording now, look again after the first sale (R-985). **D4** = root SSH from the
 > LAN by key only; the console password stays (R-982). **D5** = approve the minimum machine, `audits/sizing-2026-10-13/SIZING.md`