sage: row 240 (I4) carries Filbert N1, N4 and N5 from the 233 review; N2 and N3 go to DEFERRED (29922, sage-1727)

docs/plans/2026-10-20_installer-rows.md

@@ -256,6 +256,21 @@ r6 B2 as designed:
 
 The I3 run sheet's hostcheck item points at this row. I3's A1 and its fake don't change.
 
+### Carried from the I3 review (Filbert 29922 on #1735, sage-1727)
+
+Row 233 lands with three non-blocking notes that must be fixed before ops-01. This row takes them, and that
+widens its paths to `scripts/stack-upgrade.sh` and `packages/cli/tests/stack-upgrade.test.mjs`:
+- N1: after A5 confirms, a failed rename of the new args file calls `finish 1 args-failed` while the new copy
+  is live (`stack-upgrade.sh:280-282` at 1a1dc80ca). TOOLS.md and the run sheet define exit 1 as "the old copy
+  runs". Give this case its own exit code, add it to the exit table in TOOLS.md and the run sheet, and add a
+  test that makes the rename fail after A5 and expects the new code.
+- N4: run sheet section 3 doesn't put the pinned node's npm on root's PATH and doesn't name the `--claude`
+  path. The npm symlink `node_modules/.bin/claude` is what `case2-unit.sh:140` refuses. The sheet must name
+  the path the check accepts.
+- N5: run sheet sections 8 and 10 get their precheck lines.
+
+Filbert's N2 and N3 (no `$REPO` check, no signal handling between A2 and A5) are in DEFERRED.md, not here.
+
 ### Gate
 
 Filbert approves the manifest. The test file, the cli suite and every `scripts/test-*.sh` are green on

docs/plans/DEFERRED.md

@@ -216,6 +216,15 @@ at every gate. Started 2026-09-12 during the control board MVP.
   READMEs, `docs/TOOLS.md` and Sage's suite recipe should use the glob
   form wherever Node 24 is a target. Darkwing, S1 packet. (2026-10-04,
   #1518)
+- **`stack-upgrade.sh` doesn't check `$REPO`.** Nothing confirms the
+  source checkout is root-owned or that its tree is clean before the
+  upgrade builds from it. Filbert N2 on row 233 (29922, #1735).
+  (2026-10-21)
+- **`stack-upgrade.sh` has no signal handling between A2 and A5.** A HUP,
+  INT or TERM in that stretch leaves the run failed closed, but recovery
+  is by hand. A trap that writes the stop point and the recovery step to
+  the log would make it a sheet step. Filbert N3 on row 233 (29922,
+  #1735). (2026-10-21)
 
 ## Queue