REPORT/R-190: the alert pair closed — one loss, one email, one recovery

The 20-minute latch expired at 10:20:29 and the hub logged degraded -> ok
(agent_capability_recovered) at 10:30:40. Final state on both boxes: agent
0.124.1, two ACL rows on /storage/felhom-backup.

REPORT.md

@@ -137,6 +137,16 @@ Grant deleted by hand (both rows — user and token), which reproduces R-190 and
           pveum acl list | grep -c felhom-backup → 2   (both rows restored)
 ```
 
+**And the pair CLOSED**, which is the other half of "exactly one alert per loss":
+
+```
+10:20:29  the 20-minute latch expires
+10:30:40  hub: Host capability: demo-felhom-8363b5 degraded → ok (agent_capability_recovered)
+```
+
+So one lost grant produced **one degraded event + one operator e-mail + one recovery**, and nothing
+further. Final state on both boxes: agent `0.124.1`, two ACL rows on `/storage/felhom-backup`.
+
 Scenario E is unchanged from v0.123.0 — a failed repair, or one that does not survive the re-read,
 leaves the capability degraded with the failure in its reason.