46504938ba
Idempotent LAN->island migration procedure with rollback table + abort criteria (firewall LAST). Validated verbatim on drill VM 300: rolled to r50pre, migrated, island /storage 200, LAN DNS held on the LAN IP (Finding-1 pin), apps healthy, hub reports 0.96.0. No rollback fired.