hub v0.155.0: the floor can never deliver a withdrawn controller build (R-1085); RomM/Ghost evidence

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

hub/internal/api/handler.go

@@ -677,6 +677,14 @@ func (h *Handler) handleReport(w http.ResponseWriter, r *http.Request) {
 			h.logger.Printf("[INFO] managed floor SERVED for %s: floor %s, agent requirement %q from %s (golden %s)",
 				payload.CustomerID, fd.Floor, fd.MinAgent, src, fd.GoldenVersion)
 		}
+	} else if fd.HeldSpoiled {
+		// R-1085: a withdrawn build — ONE [WARN] per change naming the tag and why, not one per report.
+		note := "spoiled|" + fd.RequestedFloor
+		if prev, ok := h.floorNotes.Load(payload.CustomerID); !ok || prev.(string) != note {
+			h.floorNotes.Store(payload.CustomerID, note)
+			h.logger.Printf("[WARN] managed floor HELD for %s: %s (controller floor withheld)",
+				payload.CustomerID, fd.HoldReason())
+		}
 	} else if fd.Held {
 		h.floorNotes.Delete(payload.CustomerID)
 		// ONE sentence, from the decision itself — the two hold reasons must never drift apart