hub v0.155.0: the floor can never deliver a withdrawn controller build (R-1085); RomM/Ghost evidence

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

hub/internal/web/server.go

@@ -73,10 +73,10 @@ type Server struct {
 	// offsiteKeyAudit runs the daily off-site key check on demand (decision 69). nil → 503.
 	offsiteKeyAudit func(ctx context.Context) any
 	// offsiteWindowAdmin: operator one-shot grant / weekly switch (decision 68). nil → 503.
-	offsiteWindowGrant  func(customerID string) error
+	offsiteWindowGrant    func(customerID string) error
 	offsiteWindowGrantMax func(customerID string, maxRemove int) error
 	osUpdates             OSUpdateAdmin
-	offsiteWindowSwitch func(on bool) error
+	offsiteWindowSwitch   func(on bool) error
 	// operator key-file clean-up (decision 72) and abandonment cancel (decision 74). nil → 503.
 	offsiteRemoveUnpinned func(ctx context.Context, customerID string) (int, error)
 	offsiteAbandonCancel  func(customerID, by string) (int, error)
@@ -139,7 +139,7 @@ func New(store *store.Store, passwordHash, apiKey, version string, staleThreshol
 		// mailHeld drives the MAIL-HOLD banner on every operator page (internal/mailhold). Read at render time, so the
 		// banner disappears the moment the marker is gone. Pinned by TestMailHoldBanner_*.
 		"mailHeld": func() bool { return srv != nil && srv.mailHold.Held() },
-		"timeAgo": timeAgo,
+		"timeAgo":  timeAgo,
 		"timeAgoPtr": func(t *time.Time) string {
 			if t == nil {
 				return "—"
@@ -1234,6 +1234,11 @@ func (s *Server) renderConfiguration(w http.ResponseWriter, r *http.Request, cre
 		"AssetLastSync": assetLastSync,
 		"GlobalFloor":   s.store.GetGlobalMinControllerVersion(),
 		"FloorRes":      s.store.ResolveGlobalFloor(),
+		// R-1085: why the effective global floor is a withdrawn build ("" = it is not) — boxes are served no floor.
+		"FloorWithdrawn": func() string {
+			r, _ := store.SpoiledControllerTag(s.store.ResolveGlobalFloor().Effective)
+			return r
+		}(),
 		// R-472: the MinAgent declared with the global floor, and the golden it is compared against.
 		"FloorDeclaredMinAgent": s.store.GlobalFloorDeclaredMinAgent(),
 		"FloorGoldenVersion":    s.store.GetArtifactManifest().GoldenVersion,