Off-site safety finished: Parts A-F evidence, decision 74, golden 0.290.0 recorded (vouched, floor 0.290.0), restore walked from the DooPlex copy, register 330 -> 328 (R-823/824/826/827/828/830 closed; R-833, R-834 opened)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 07:39:59 +02:00
parent 7a0d0c027d
commit d07a1a904c
17 changed files with 667 additions and 33 deletions
@@ -737,6 +737,10 @@ its length, and both fixes cost something the household would notice — operato
    2026-10-04 (morning).*
 73. **The Hetzner storage API token shown in the 2026-10-03 session transcript is NOT rotated now — the operator's
    choice** (R-831 holds the rotation steps). *Operator ruling 2026-10-04 (morning).*
+74. **A household's "delete my earlier off-site backups" is carried out by the HUB, after a hub-enforced wait of 7
+    days from the box's request (R-823)**; the household (a recovery on the box) or the operator can cancel in that
+    time; the hub deletes only `<repo>.orphaned-<…>`, never the live repository; every request, cancel and deletion is
+    an operator event. *Operator brief 2026-10-04 (Part E).* Built hub v0.128.0 + controller v0.290.0.

 ### 2026-09-30 (day) — operator notes, recorded before the work