R-302 docs: register rows, the two rules earned twice, STATUS

Closes R-296 (verified: shipped in v0.212.0) and R-301 (premise confirmed, fixed
in v0.213.0). Files R-302 with WHY the obvious condition was rejected, and R-303
for the missing markOrphaned guard - the co-render is now harmless, not
impossible. Bake evidence for golden 0.213.0.

STATUS.md

@@ -1,6 +1,6 @@
 # STATUS — what works, what's broken, what's next
 
-**Updated 2026-08-12.**
+**Updated 2026-08-12 (evening).**
 
 > **A view, not a source.** `documentation/backlog/OPEN-ITEMS.md` is the authority; this page restates
 > part of it in plain words, and **nothing may exist only here**. **Items, not paragraphs. One screen.**
@@ -8,27 +8,32 @@
 
 ## Waiting on you
 
-- **Raise the update floor to 0.212.0.** It is **0.200.0**, and boxes auto-update to the *floor*, never
-  to the newest — so everything below reaches **newly installed machines only**, and both demo boxes sit
-  where they are. One field, reversible. The hold that could block it does not apply (min agent 0.127.0
-  is below the vouched agent 0.128.0). Recommended: do it and watch two disposable boxes move first.
-- **Vouch golden 0.212.0** (three fields: golden 0.212.0, agent 0.128.0, min agent 0.127.0).
-- **R-296 / R-301 — two wording decisions** that need your call before anyone writes Hungarian at a
-  customer. R-301 is the more interesting one: a banner still says the old promise, and it is probably
-  true where it renders.
+- **Vouch golden 0.213.0** — three fields together: golden **0.213.0**, agent **0.128.0**, min agent
+  **0.127.0**. Both are already verified downloadable and selectable.
+- **Raise the floor to 0.213.0** afterwards if you want the fix on the existing machines. The floor is
+  **0.212.0** (raised 2026-08-12; both demo boxes confirmed on it), and boxes update to the *floor*,
+  never to the newest — so until you raise it, v0.213.0 reaches newly installed machines only. One
+  field, reversible; the R-216 hold does not apply, since min agent 0.127.0 is below the vouched 0.128.0.
+- **R-303 — one coherence decision**, ranked low: a box can still raise the "we cannot open your new
+  backups" card while counting down to deleting the old ones. The two no longer contradict each other,
+  but the state is odd and the wrong fix would hide a real second fault.
 
 ## What works
 
 Both demo machines are home, healthy and reporting on the approved pair. Off-site is credentialed on
 `demo-hp` and its repository still opens with the machine's own key. `drill-r50` is blocked, as intended.
 
-## Shipped, delivered to fresh installs
+## Shipped
 
 - **The drive can be re-attached after a reinstall** (R-280). The restore page said *"this is two
   clicks"* over an empty list; it was zero clicks and needed an internal path no customer could produce.
 - **The orphan card stops promising** that set-aside off-site copies can be reopened — twice over
   (R-294, then **R-299**, which was the same claim in the plural, in the *always-visible* half, missed
   because the guard matched one inflection of a Hungarian verb).
+- **The countdown banner stops promising retrieval it cannot see is still true** (R-302). The promise
+  is now conditional on the hub still holding the package it held when the customer decided — pinned
+  then, compared now. A sweep found the same claim in five places; a fourth was fixed with it and a
+  fifth deliberately left, because it is true where it renders.
 - **One name per secret, box side** (R-295): the dashboard code is „Beállító kód" everywhere;
   „Visszaállító kód" is retired. It collided with the escrow „Helyreállítási kód" and cost a real code.