hub v0.119.0 — English households get English words for their codes (R-597); R-596/R-598 closed

The setup code and the owner passphrase now follow the household's language,
one word longer in English so the entropy never drops (setup 3 hu / 4 en,
passphrase 5 hu / 6 en). List and count are chosen together so a caller cannot
pair an English list with a Hungarian count. Hungarian is byte-unchanged.

Three claims in the row were wrong and are recorded as such:
  - the RECOVERY CODE is minted by felhom-agent from the EFF list and has
    always been English; the hub does not own it and no row was added.
  - no claim mail states a word count; the only count wording was the bind
    page's passphrase hint, whose English half is now count-free.
  - the proposed phone-safe filter removes 68% of the list (5270 of 7772
    words) and was measured, then declined, with the reason in source.

Also: guide_quote_gate binds the English volunteer guide's three quoted
messages to the controller's English bundle — nothing did, so the guide would
have gone on quoting Hungarian after the fix. Seven decoys, all convicting,
including the name-for-fact one.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/runbooks/VOLUNTEER-first-hour.en.md

@@ -28,14 +28,15 @@
    button to press; the customer page shows when it went out (R-509, 2026-09-15).
 2. **Creates the Cloudflare tunnel and enters its token** on the customer's page — without it the
    dashboard address does not open (R-494).
-3. **Hands over the five-word "Owner passphrase" in person or in a message.** No e-mail contains it.
+3. **Hands over the "Owner passphrase" in person or in a message.** No e-mail contains it. It is
+   six English words for an English account, five Hungarian ones for a Hungarian account (R-597).
 
 ## What you will need
 
 - A machine where **all data will be erased** (the install overwrites the chosen disk completely).
 - A USB stick of at least 2 GB.
 - A network cable to your router.
-- The **Owner passphrase** (5 words) you received from Felhom.
+- The **Owner passphrase** (a few hyphen-joined words) you received from Felhom.
 - The e-mail account you gave to Felhom.
 
 ## 1. Download the installer (~1 minute)
@@ -77,7 +78,7 @@ Write the **pairing code** down. It is printed once in each language; both are t
    (valid for 7 days).
 2. Enter:
    - the **pairing code** from the box's screen;
-   - the **Owner passphrase** (5 words) you received from the Felhom operator.
+   - the **Owner passphrase** you received from the Felhom operator.
 3. Leave the box switched on. The next e-mail arrives in **about 3 minutes**.
 
 *(Note: the box's screen keeps showing the pairing code after it is connected — this is a known
@@ -90,8 +91,10 @@ fault, and you do not need to connect it again.)*
    If the address does not open, tell the operator.
 3. On the **"Set up the server"** page enter the **setup code** and choose a password of **at least
    12 characters**. This becomes your dashboard password.
-   **The code is three Hungarian words, with accents** (like `képző-szkítia-ásatás`) — copy and paste
-   it from the e-mail rather than typing it. This is a known fault (R-597).
+   **The code is the words in your e-mail, joined by hyphens** (for example
+   `abacus-wreath-ratio-abdomen`). You can type it or paste it; capitals and spaces instead of
+   hyphens are accepted. If it looks like Hungarian words with accents, tell the operator — an
+   English account should receive English words (R-597, fixed 2026-09-21).
 4. If the code did not arrive: **"Did not get the code? Ask for a new one"** — it always goes to the
    same e-mail address.
 
@@ -138,11 +141,13 @@ Once you are done, the bar disappears and the remote backup starts by itself.
 
 ## 9. Backups
 
-- **Backup → Overview:** you will see two yellow warnings. **They are still in Hungarian** on an
-  otherwise English page (a known fault, R-598), and they say: *only one copy is being made, there is
-  no second drive*, and *the system backup is on the same disk as the system, so it protects against
-  bad files but not against a disk failure*. **Both are true**: until there is a second drive or a
-  remote backup, this does not protect you against a disk failure.
+- **Backup → Overview:** you will see two yellow warnings, in English. One says only one copy is
+  being made and there is no second drive. The other is, word for word:
+
+  > The system backup is currently on the same disk as the system — so it protects against corrupted files, but not against a disk failure. Attach a second drive for full protection.
+
+  **Both are true**: until there is a second drive or a remote backup, this does not protect you
+  against a disk failure. (They were Hungarian until 2026-09-21 — R-598, now closed.)
 - **Backup → Apps → Back up now:** about 20 seconds, after which the date updates.
 - *An individual app's "Backup 2 settings" page may say that its data is "already part of the full
   system backup (PBS)" — this is not true on every box (known fault). The Overview page is the
@@ -165,14 +170,16 @@ same version it was before. You will have to sign in to the dashboard again.
 
 ## 13. If you mistype the code
 
-The setup page rejects it and you can type it again. **At the moment those particular messages are
-still in Hungarian**, even though the rest of the page is English — a wrong code answers
-„Hibás vagy lejárt kód" (*wrong or expired code*) and, after **five** wrong attempts, the page locks
-for 15 minutes with „Túl sok próbálkozás — próbáld újra 15 perc múlva." (*too many attempts, try
-again in 15 minutes*). This is a known fault (R-596). You can ask for a new code with the
+The setup page rejects it and you can type it again. A wrong code answers
+**"Wrong or expired code"**, and after **five** wrong attempts the page locks for 15 minutes with
+**"Too many attempts — try again in 15 minutes."** A password under twelve characters answers
+**"The password must be at least 12 characters long"**. You can ask for a new code with the
 "Did not get the code? Ask for a new one" link, and the sign-in page's "Forgot password" link leads
 to the same place.
 
+*(These messages were Hungarian until 2026-09-21 and were the one screen that stopped the first
+English walk — R-596, now closed.)*
+
 ## If you get stuck
 
 Write to **support@felhom.eu**, and send a screenshot if you can.