night watch: demo-hp converted docmost by itself; R-696 filed; teardown recorded

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -1,6 +1,6 @@
 # STATUS — what works, what's broken, what's next
 
-**Updated 2026-09-25 (evening). Both demo boxes run controller 0.274.0 and host agent 0.134.0. Hub 0.125.0.**
+**Updated 2026-09-26 (early morning). Both demo boxes run controller 0.274.0 and host agent 0.134.0. Hub 0.125.0.**
 
 **Decisions I took on my own** (you may reverse each):
 1. **docmost's database goes to PostgreSQL 18, not 17.** Its own makers already use 18. One move instead of two.
@@ -10,7 +10,7 @@
 **What I did, and it worked.**
 - **The box now converts a PostgreSQL database to a new main version.** Only for an app whose step was tested. docmost is the first. On the scratch box: the conversion took 42 seconds in total. The data came back.
 - **When it goes wrong, the box puts the old version back.** I tested three failures: a load error, an app that does not start, and a controller killed in the middle. Each time the old version came back with its data.
-- **docmost moved in the catalog.** Tonight the HP box's automatic update should convert its docmost by itself. I watch it.
+- **The HP box converted its docmost by itself in the night.** It took 54 seconds. Its users, spaces and pages are all still there.
 - **Kept data is never a dead end now.** When an app is installed over old files, the page asks: "Use my kept data" or "Start fresh". A new "Kept data" page shows every leftover folder. The household can look at it (read only), load it, or delete it (they must type the app's name). I tested all of it on the scratch box, in both languages.
 - **The hub's customer delete stops promising to clean Cloudflare.** It now lists what you remove by hand.
 
@@ -21,10 +21,11 @@
 - **The file browser cannot open nextcloud's kept folder.** The files are there and can be loaded or deleted.
 - **The HP box's restore test tries to test the golden template file and fails every 6 hours.** Not fixed (agent side).
 - **The memory check always calls docmost "tight".** Its memory grows with its limit. Filed.
+- **The box threw away docmost's old database copy too early on the HP box.** It trusted the wrong time for "a backup exists". The data is safe: the check proved every row came across, and tonight's backup is on the new version. Filed.
 - **Two quick deletes on the Kept data page can leave an empty folder that keeps coming back.** Seen once on the scratch box; no data involved. Cleared by hand. Filed.
 - **adventurelog stays on its old version.** I found how to skip its internet download. The move needs a choice.
 
-**Rows.** 7 opened, 3 closed. The list went from 334 to 338.
+**Rows.** 8 opened, 3 closed. The list went from 334 to 339.
 
 **Decision for you — D3: may the box ever delete kept data by itself?**
 - **A — never; only the household deletes it (I recommend this).** Cost: kept data can fill a drive. The drive-full warning names the kept folders and their sizes, so the household sees what to delete.