admin
d85198b835
gates / gates (push) Successful in 1m51s
The Backup card's off-site part shows the window state (weekly switch, the normal cap, a waiting grant, the last window) and a form: optional limit -> a confirm step that names the customer and the limit -> the SAME route and rule as the script address (POST /offsite/window-grant/<customer>, wr(grpOffsite), the page's CSRF). A waiting grant can be cancelled. A raised limit above the store's measured snapshot count is refused (the 500 ceiling stays). Every grant and cancel: a log line and an operator-only info event offsite_window_grant (who, customer, limit). Tests TestR1299_* (five), red-proved by five mutations.