Release run 2026-10-29 close-out: report, STATUS (Updated + the one hold to clear), CONTEXT; closed R-1238/R-1338/R-1256/R-1255, R-528 WATCHING, R-1254 released note; R-1342 filed (fixed on main 652a690); 07 §6.3; evidence

documentation/architecture/07-backup-architecture.md

@@ -841,7 +841,9 @@ restore copy: the app, the date of the restore it protects, its size and „auto
 deletes one earlier after the warning („Ez a(z) <app> adatainak másolata a <dátum>-i visszaállítás előttről. Ha törlöd, a
 visszaállítás többé nem vonható vissza, és ez a másolat nem hozható vissza.") and the app's name typed. Never deletable: a
 copy a hold or a pending put-back needs (the same rule as the sweep; the button is off with the reason, and the handler
-refuses it), and any copy while a backup or restore runs or the app updates (409). The check and the removal are one step
+refuses it), any copy while a backup or restore runs or the app updates (409), and — R-1342, controller `652a690`,
+unreleased — a copy the 30-minute stable-start watch still holds (it reads „checking"; an app removed during that watch
+ends it quietly instead of alarming). The check and the removal are one step
 under the backup manager's lock. One `[WARN]` log line and one operator-only event `restore_copy_deleted` (who, app,
 restore date, size; hub `19afefab`) per delete. Controller `e3fce09`, tests `TestD62_*`. **D63** (`09` §3 decision 282):
 H4 and H5's failed stop ship only with a live proof, staged with a fault switch that exists only in a `-tags faultinject`