Gladex Agent Logs

 M tests/test_registry_coverage.sh
 M tools/REGISTRY.md
 CHANGELOG.md                    |  20 +++
 agent-logs/PROGRESS.md          |  24 ++++
 tests/test_registry_coverage.sh | 282 ++++++++++++++++++++++++++++++++++++----
 tools/REGISTRY.md               | 120 ++++++++++++++---
 4 files changed, 402 insertions(+), 44 deletions(-)
> build · mimo-v2.6-flash-free
$ cd /data/repo && git add -A && git commit -q -F - <<'MSG' ; echo "COMMIT_RC=$?"; git log --oneline -1
(98) the three documented non-2 codes become CONTRACTS: DECLARED_PAIRS holds tool|flag|expected|argv for repo-lint --sha 3, immich-roundtrip --email 3 and smtp-relay-probe --expect-open never-2 (probed against loopback only, never the tool's default set), a sixth partition bucket cl_declared with its own cl_declared_ok/cl_declared_seen and an exit-3 no-scope guard, G35-G39 on the live tree and control C32 mutating die()'s SIGNATURE so a declared code that stops being true reddens exactly once - suite 264 -> 280, cl_other 25 -> 22, candidate (b) rejected in the prose it would have lied to, changelog [0.4.150]
MSG
COMMIT_RC=0
06cb8dc (98) the three documented non-2 codes become CONTRACTS: DECLARED_PAIRS holds tool|flag|expected|argv for repo-lint --sha 3, immich-roundtrip --email 3 and smtp-relay-probe --expect-open never-2 (probed against loopback only, never the tool's default set), a sixth partition bucket cl_declared with its own cl_declared_ok/cl_declared_seen and an exit-3 no-scope guard, G35-G39 on the live tree and control C32 mutating die()'s SIGNATURE so a declared code that stops being true reddens exactly once - suite 264 -> 280, cl_other 25 -> 22, candidate (b) rejected in the prose it would have lied to, changelog [0.4.150]
> build · mimo-v2.6-flash-free
$ cd /data/repo && git push origin main 2>&1 | tail -3; git status -sb | head -3; ./tools/repo-lint --sha HEAD 2>&1 | tail -3; echo "RC=$?"
To git://git.gladex.de/gladex.git
   a1515d3..06cb8dc  main -> main
## main...origin/main
  go-compile: 45 module file(s) compile clean (1.707s)
  changelog-version: 155 changelog version heading(s), 155 unique, 5320 citation(s) checked, 0 missing, 4902 bare token(s) counted
result: all 165 linted file(s) parse clean (exit 0)
RC=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && start=$(date +%s); ./tools/regression-run --format json > /tmp/opencode/reg98.json 2>/tmp/opencode/reg98.err; rc=$?; end=$(date +%s); echo "EXIT=$rc ELAPSED=$((end-start))s"; python3 -c "
import json;d=json.load(open('/tmp/opencode/reg98.json'))
print({k:d.get(k) for k in ('total','passed','failed','skipped','ok','conflicts') if k in d})
print('suites', len(d.get('suites',[])))"; grep -c '"failed": *[1-9]' /tmp/opencode/reg98.json || true; tail -2 /tmp/opencode/reg98.err
EXIT=0 ELAPSED=873s
{'ok': True, 'conflicts': []}
suites 73
0
> build · mimo-v2.6-flash-free
$ cd /data/repo && python3 -c "
import json;d=json.load(open('/tmp/opencode/reg98.json'))
print(list(d.keys()))
print({k:v for k,v in d.items() if not isinstance(v,(list,dict))})"; ./tools/system-status 2>&1 | tail -25
['tool', 'timestamp', 'mode', 'repo_root', 'tests_dir', 'suites_discovered', 'suites', 'totals', 'baseline', 'shapes', 'conflicts', 'error', 'ok', 'exit_code']
{'tool': 'regression-run', 'timestamp': '2026-10-01T04:27:32Z', 'mode': 'run', 'repo_root': '/data/repo', 'tests_dir': '/data/repo/tests', 'suites_discovered': 73, 'baseline': None, 'error': None, 'ok': True, 'exit_code': 0}
  api-stats                 [OK] 200
  page-info                 [OK] 200
  page-stats                [OK] 200
  page-team                 [OK] 200
  cloud                     [OK] nextcloud 200 installed=true; immich 200 pong; 5/5 containers up
  DNS:gladex.de             [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:dev.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:git.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:info.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:stats.gladex.de       [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:team.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:log.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  MX:gladex.de              [OK] 10 gladex.de. on 1.1.1.1+8.8.8.8
  SOA:gladex.de             [WARN] serial=2026092602 consistent on 1.1.1.1+8.8.8.8; mname=placeholder (NEEDS-INVESTOR open)
  tls-cert-expiry           [OK] 82d left
  tls-cert-expiry-photos    [OK] 84d left
  investor-messages         [OK] 0 unread dev=0 prod=0
  investor-duty             [OK] owed=0 unread=0 unreplied=0 open=0
  git-tree                  [OK] clean
  queue-source              [OK] one queue: [0.4.150] pointer-only, 111 item line(s) frozen across 107 section(s), 108 PROGRESS bullet(s)
  go-tests                  [OK] passing (worktree)
  go-compile                [OK] 45 module file(s) compile clean (1.715s) (commit 06cb8dc)
  promote-gates             [WARN] not promotable (newest reviewer-mailbox entry 2026-09-30T02:26:00Z, 1d 2h old): verdict REFUSED: verdict VERDICT-20260930T022500-team-sofia.md is STALE (promoted source [app/src/php, examples/workflows] changed 50201s after it \u2014 re-review required) | dev-sync OK | commit-lint OK | ship-tree OK (commit 06cb8dc)

Overall: ALL SYSTEMS HEALTHY
> build · mimo-v2.6-flash-free
$ cd /data/repo && python3 -c "
import json;d=json.load(open('/tmp/opencode/reg98.json'))
print('totals',d['totals']); print('baseline',d['baseline'])"
totals {'passed': 6466, 'failed': 0, 'skipped': 0, 'suites_run': 73}
baseline None
> build · mimo-v2.6-flash-free
$ cd /data/repo && for e in dev prod; do printf '%s unread=' "$e"; sqlite3 /opt/startup/$e/data/messages.db "SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0"; done; ./tools/inbox-status; echo "inbox RC=$?"; grep -c '^## ' INBOX.md; grep '^## ' INBOX.md | grep -v HANDLED | wc -l; sqlite3 /opt/startup/dev/data/messages.db "SELECT max(id) FROM messages WHERE direction='agent_to_investor'"; sqlite3 /opt/startup/prod/data/messages.db "SELECT max(id) FROM messages WHERE direction='agent_to_investor'"
dev unread=0
prod unread=0
inbox-status — STEP 0 investor duty

  messages unread : dev 0 / prod 0 / total 0
  last reply      : dev 141 / prod 106
  INBOX.md        : 79 entries, 79 handled, 0 open

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
inbox RC=0
79
0
141
106
> build · mimo-v2.6-flash-free
$ cd /data/repo && for p in "dev:8000" "prod:8001"; do h=${p%:*}; port=${p#*:}; code=$(curl -s -o /tmp/opencode/cl_$h.html -w '%{http_code}' http://127.0.0.1:$port/changelog); api=$(curl -s http://127.0.0.1:$port/api/changelog); hz=$(curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:$port/healthz); printf '%s /changelog=%s bytes=%s token150=%s /healthz=%s api=' "$h" "$code" "$(stat -c%s /tmp/opencode/cl_$h.html)" "$(grep -c '0.4.150' /tmp/opencode/cl_$h.html)" "$hz"; printf '%s\n' "$api" | python3 -c "import sys,json;d=json.load(sys.stdin);print('total=%s first=%s last=%s'%(d.get('total'),d.get('releases',[{}])[0].get('version'),d.get('releases',[{}])[-1].get('version')))"; done; md5sum /tmp/opencode/cl_dev.html /tmp/opencode/cl_prod.html
dev /changelog=200 bytes=1171570 token150=2 /healthz=200 api=total=155 first=None last=None
prod /changelog=200 bytes=1171570 token150=2 /healthz=200 api=total=155 first=None last=None
92cd38bf681419843053128fcce7c0be  /tmp/opencode/cl_dev.html
92cd38bf681419843053128fcce7c0be  /tmp/opencode/cl_prod.html
> build · mimo-v2.6-flash-free
$ cd /data/repo && curl -s http://127.0.0.1:8000/api/changelog | python3 -c "import sys,json;d=json.load(sys.stdin);print(list(d.keys()));import itertools;print(d.get('versions',[None])[:2], d.get('versions',[None])[-2:])"; ./tools/healthcheck 2>&1 | grep -iE "dev|prod|HEALTH" | head -6; ./tools/source-sync-check 2>&1 | tail -2; echo "sync RC=$?"
['service', 'version', 'total', 'versions']
[{'version': '0.4.28', 'date': '2026-09-24', 'description': 'Go CLI joins the single version train: build.sh derives its version from this changelog (was a hardcoded 0.2.0), download badge + docs CLI mentions follow, all four binaries rebuilt', 'sections': {'fixed': ['**Go CLI version train** (queued at 0.4.27): `app/src/go/build.sh` hardcoded `VERSION="0.2.0"`, so every rebuild reported **0.2.0** while the product train had moved to 0.4.x — the downloaded binary, the `/download` badge (`$version = \'0.2.0\'`) and two `/docs` mentions (`Go CLI binary (v0.2.0)` and the ASCII diagram\'s `gladex v0.2.0`) advertised numbers ~26 entries behind this changelog: exactly the drift class 0.4.27 closed for the app\'s nine stale `0.3.0` literals, just on the CLI side. `build.sh` also ignored the README-documented `VERSION=x.y.z ./build.sh` override (silently clobbered by the literal).', '**`gladex version --remote` was structurally incoherent**: it compares the local binary against `https://gladex.de/api/version` (the **app** train), so a CLI pinned at 0.2.0 reported "update available" against every already-current download — and would keep reporting it at whatever stale number the train stopped at. After this fix the check compares like with like: changelog top = app const = binary `version --json` = download badge = docs mentions.', "Fix: `build.sh` parses the top `## [x.y.z]` entry out of `CHANGELOG.md` (`VERSION=` env override preserved — README's documented custom-version invocation now actually works instead of being ignored); `/download`'s badge reads `GLADEX_APP_VERSION` instead of a literal; the two `/docs` CLI mentions carry the current train number and are now **guarded by a test** (they were unguarded, i.e. permanently stale-prone). App train moved to **0.4.28** with it (`GLADEX_APP_VERSION` + `/docs` payloads/footer, repo+dev+prod byte-identical). `build.sh` also `cd`s into its own directory first — module resolution starts at the CWD, so invoking it from anywhere but `app/src/go` (the repo root, `/tmp`) died with `go: cannot find main module` even though every other path in the script was already `SCRIPT_DIR`-relative; guarded behaviourally by building from the repo root.", 'Rebuilt all four copies — `app/bin/gladex`, `app/src/go/gladex`, dev, prod — md5-identical, reporting `0.4.28`.'], 'tests': ['**`tests/test_cli_version.php`** (35 assertions, 3 mutations): `build.sh` derives from the changelog with no hardcoded `VERSION="x.y.z"` literal, keeps the env override and `cd`s to its script dir (behavioural: built from the repo root — the cwd trap — reporting the changelog top, and from `/tmp` with `VERSION=9.9.9` where the override must win); `download.php` has no version literal (token scan; comments don\'t count) and renders the badge from the const (behavioural: const `9.9.9` → badge `v9.9.9`, proving wiring not coincidence; standalone-without-const → `0.0.0` sentinel); the two `/docs` CLI mentions parse and equal the changelog top (stale number → FAIL); all four binaries report the changelog top via `version --json` with a real commit sha and are md5-identical. Mutations that MUST be detected: reintroduced `$version = \'0.2.0\'` (static + behavioural), reintroduced `VERSION="0.2.0"` in build.sh, stale `gladex v0.1.0` docs mention.'], 'notes': ["Trains are now ONE. `version.go`'s `0.1.0-dev` fallback (plain `go build`, no ldflags) is deliberate and unchanged — README documents it as the quick-build default. Binary `commit:` embeds the source commit (built after commit 1 of this run, before the binary commit)."]}}, {'version': '0.4.27', 'date': '2026-09-24', 'description': 'version drift closed: nine stale `0.3.0` literals across app+docs collapse into one `GLADEX_APP_VERSION` constant sourced from this changelog', 'sections': {'added': ['**`const GLADEX_APP_VERSION`** (top of `app/src/php/app.php`) — the single place the app version lives: `/healthz`, `/api/version`, `/api/health`, `/api/changelog` and `/api/endpoints` all report it instead of five duplicated literals; CHANGELOG.md is the version train, the constant must equal its top entry.', "**`gladex_app_version_of($path)`** in `app/src/php/db.php` (included by both callers) — reads the version out of a *deployed* `app.php` copy without executing it: prefers `const GLADEX_APP_VERSION`, falls back to the old `'version' => '...'` pattern so a half-synced env copy reports its old-but-correct value instead of `unknown`. Used by the `/stats` page dev/prod rows and the `/api/stats` payload.", "**`tests/test_app_version.php`** (39 assertions, 3 mutations): constant declared exactly once and equal to the changelog top entry; five endpoint usages; no stray `'version' => 'x.y.z'` literals in app.php (the `gladex-stats` payload schema `0.1.0` is the allowlisted exception); the `db.php` helper resolves new-style, old-style, missing (`null`) and unparseable (`unknown`) fixtures plus the real file; `/docs` example payloads + footer match the constant; repo+dev+prod copies all agree with the changelog top; `php -l` on the four touched files. Mutations that MUST be detected: stale constant value, reintroduced stray literal, stale docs footer."], 'fixed': ['**Version drift**: CHANGELOG has been the single version train since 0.3.0 — app features (team page, webmail, routing fixes) shipped under 0.4.x — yet every version-bearing surface still reported **0.3.0**: `/healthz`, `/api/version`, `/api/health`, `/api/changelog`, `/api/endpoints` (5 literals) and the `/docs` page (3 example payloads + `Gladex API Reference v` footer). All report 0.4.27 now: a reader of the changelog and of `/api/version` finally sees the same number.', "**`/stats` + `/api/stats` dev/prod version rows grepped `'version' => '...'`** — against the constant-based file that pattern skips past the constant and would match the `gladex-stats` schema literal, printing `0.1.0`; both rows now go through `gladex_app_version_of()`."], 'notes': ['Deliberately NOT touched (separate version trains, out of scope for this step): the Go CLI (`build.sh` VERSION / `gladex version --json`) and the `gladex-stats` payload schema version.'], 'verification': ['repo copy first (env copies deliberately stale → suite must flag them), then dev+prod deployed: full suite green; `source-sync-check` in sync; `version-check` OK dev=prod=0.4.27; live `/healthz`, `/api/version`, `/docs` footer report 0.4.27 on both envs.']}}] [{'version': '0.4.149', 'date': '2026-10-01', 'description': "queue item (92): A16's floor becomes an equality — the epilog row count is read a second time by Python's own parser, so a pair the `sed` pattern cannot spell goes red instead of silently losing a section", 'sections': {'changed — one assertion, no tool edit': ['**The defect: A16 counts a floor, so it cannot see a SHORT list.** `[0.4.132]`\'s extraction guard is `assert_ge … 1 "${#EPILOG[@]}"` — an extractor that understands five of six rows passes it, and a row the tuple\'s own spelling hid from the `s/^[[:space:]]*("…", "…"),$/` pattern (a pair split across two lines, a trailing-comma style change) is caught by *neither* guard: A16 sees a non-empty list, A17 only asks about the seven labels it pins, and every derived loop (`A3`, `A4`, `A5`, `help_section()`\'s terminator set) simply stops iterating the row it never received — the suite keeps reporting the same greens while testing one section fewer. A suite that loses coverage by quietly asking fewer questions is exactly the class this file exists to catch; this was the last known way to lose one.', "**The pair count is read a SECOND time, by a reader that does not care how the tuple is laid out.** `A16b` parses `EPILOG_PAIRS` out of the tool with Python's own `ast.literal_eval` (the block between `^EPILOG_PAIRS = (` and `^)`, evaluated as a literal) and asserts `len(...)` **equals** `${#EPILOG[@]}`. The two readers share no code and no assumption: one is a two-line `sed` substitution demanding both quoted fields and a trailing comma on one line, the other is Python's parser, which accepts any layout the language accepts. A reader that cannot count at all (no block, unparseable content, Python failing) yields an empty answer and **reddens** — an input that was not read is never a pass, the same non-vacuity rule A16 states, one direction stricter.", "**The tool is untouched**: `tools/regression-run` did not change, so `EPILOG_PAIRS` still carries its seven pairs, `--help` still renders seven sections and `GLADEX_APP_VERSION` stays **0.4.28** (the changelog's *first* heading did not move). No `app/src/php` edit → no reviewer gate, no promote."], 'verified — 325 → 326, and three controls that put the blind spot back': ['**`bash tests/test_regression_run.sh` → 326 passed, 0 failed**, against **325 / 0** measured at the same `HEAD` before the step: one assertion added, none removed or loosened.', "**Control 3 — the blind spot itself, one red**: an EIGHTH pair spelled across two lines and placed FIRST in the tuple (so no known label follows it and no byte-comparison can notice the extra rendered section) → **321 passed, 1 failed, and the only red is A16b** (`want=8 got=7`), with A16's floor still green, A17's seven pins still green and every derived loop still green — the queue item's own sentence, reproduced with the new guard as its sole witness. 321 + 1 + section G's four shipped-location `SKIP`s = 326, so the control's arithmetic closes instead of being asserted.", '**Control 1 — the same two-line pair placed LAST**: **320 passed, 2 failed** (A16b plus A5.7, whose terminator set cannot bound a label the extraction never saw). **Control 2 — the trailing comma dropped from the last pair**: **316 passed, 3 failed** (A16b `want=7 got=6`, A17.7, A5.6) with the derived loops iterating three rows fewer, 316 + 3 + 4 skips = 323 = 326 − 3. Both controls are the *downstream* reds A16b now names first rather than the only reds — reported as measured, not trimmed.', "`tools/REGISTRY.md` refreshed in the same commit: **325 → 326** at its four figure sites, the derived-list sentence gaining its third pin (A16b) and the **325 → 326** movement line, section A's map naming A16b beside A16, and the `Status` line carrying all three control figures.", '**STEP 0 ran first**: 0 unread `investor_to_agent` in both databases, `tools/inbox-status` → exit 0, "OK - nothing owed (0 unread, 0 open entries all replied)", **79 entries / 79 handled / 0 open**, `grep \'^## \' INBOX.md | grep -v HANDLED` empty. No investor row was owed, so none was inserted. Spend **0.00** (free `*-free` models only), zero DNS writes, no mail sent, no `app/src/php` edit → no reviewer gate and no promote.'], 'queue -> agent-logs/progress.md': []}}, {'version': '0.4.150', 'date': '2026-10-01', 'description': "queue item (98): the three documented non-2 codes become CONTRACTS — a `DECLARED_PAIRS` table, a sixth partition bucket, five assertions and a control that turns `die()`'s default off", 'sections': {'changed — one suite, three declarations, no tool edit': ['**(98) closed by assertion instead of comment.** `[0.4.140]` measured that three value-taking pairs reject a type-invalid value with a documented **non-2** code — `repo-lint --sha not-a-hex-digest` → **3**, `immich-roundtrip --email not-an-email-address` → **3**, `smtp-relay-probe --expect-open not-an-endpoint` → **1** — declared them out of the probing scope (they sat in `cl_other`, printed and unasserted) and queued them as **(98)**. This step gives that declaration a table: `run_check()` carries `local DECLARED_PAIRS=\'tool|flag|expected|argv\'`, one row per pair holding the **exact argv each code was measured with**, so the probe can never drift from the claim. The reader is a single `grep -m1 -F -- "<tool>|<flag>|" ` followed by a field-verified match on both fields, so a pair the table does not name falls through to `cl_other` exactly as it did before — nothing was reclassified quietly, and `cl_other` printed the difference (**25 → 22**).', "**The candidate chosen and the one rejected, with the reason recorded where a reader will find it.** Candidate (a), *accept the documented codes in the reader as contracts*, shipped; (b), *repair the tools to exit 2*, did not: repo-lint's own table defines `3` as *cannot verify: unknown revision*, `tests/test_repo_lint.sh` pins `--sha deadbeef123` → 3 and `R16` pins the refusal *still* to exit 3, and the tool's `--help` promises **any rev git accepts** — so an unresolvable revision answering *cannot verify* is the truth, and a `2` would be a usage error for an argument the parser accepted. The pair is held to `3`, by two suites that now agree.", '**`smtp-relay-probe --expect-open` is declared `non2`, not `1`, and the difference is the whole point of reading it.** That digit measures **relay state** — the table defines `1` as *OPEN RELAY detected* — so pinning `1` would make every one of this suite\'s ~35 child runs depend on Postfix being up and redden ~40 assertions that test something else entirely (the "a red that was the assertion\'s wiring" defect this file already spent a control on). What is true of that pair whatever the environment does is narrower and still worth asserting: a malformed `ENDPOINT` is never read as a usage error, so the contract is **never 2** — Postfix up answers 1, Postfix down answers 3, a deny-all answers 0, and none of them is a usage error. The probe is `--expect-open not-an-endpoint 127.0.0.1:25`: the *positional* endpoint (loopback) is the only socket dialed, the flag\'s value is only ever a set-membership string, and the tool\'s default set — which carries the VPS path — is never reached. The live digit is printed as `cl_declared_seen` rather than asserted, and the suite\'s hermeticity claim is amended from *no network* to *no EXTERNAL network* in both this file\'s header and `tools/REGISTRY.md`, naming the one loopback probe.', '**The partition gains a sixth bucket, and every reader of it moves with it**: `cl_fmt + cl_port + cl_enum + cl_num + cl_declared + cl_other == cl_scope`, new SUMMARY keys `cl_declared` / `cl_declared_ok` / `cl_declared_seen`, `ERROR class_declared_no_scope` (exit **3**) refusing a table that matched nothing — an input that was not read is never a pass — **G35–G39** on the live tree (keys present, scope **exactly 3** rather than a floor so a pair quietly leaving its option list reddens, `cl_declared_ok == cl_declared`, `cl_other == 22`, `cl_declared_seen` printed) and control **C32**. `G38` pinning `cl_other` is what stops a pair falling *back* out of the table from vanishing rather than reporting.', "**A stale figure inside the (73) prose corrected while it was being amended.** It read *18 enum + 14 numeric + 4 PORT + 18 `--format` + 24 other = 61*, which counts the 18 `--format` pairs twice and does not sum; the disjoint class is **1** (`source-sync-check --env {dev,prod,both}` — the same block already said so two paragraphs later, *1 enum + 14 numeric*) and **61 = 1 + 14 + 4 + 18 + 24**. Corrected in `tests/test_registry_coverage.sh`'s header and in `tools/REGISTRY.md`; no figure the suite asserts moved."], 'verified — 264 → 280, and the control that makes a declared code stop being true': ['**`bash tests/test_registry_coverage.sh` → 280 passed, 0 failed (4m11s)** against **264 / 0 (3m53s)** measured at `a1515d3` before the step: **16 assertions added, none removed or loosened** — **G35–G39** (5) and **C32a–C32k** (11). Live `SUMMARY` at the close: `cl_declared=3 cl_declared_ok=3 cl_declared_seen=1,3,3 cl_other=22 cl_scope=62 violations=0`, i.e. `18+4+1+14+3+22 = 62` closes arithmetically instead of being asserted, alongside `tools=22 registered=31`, `fig_disc=73 fig_claim=73 fig_head=73 fig_src=consistent`, exit **0**.', "**Control C32 — the declared code stops being true, and exactly one red names it.** `tools/repo-lint`'s `die()` is mutated at its **signature** (`exit_code=EXIT_CANNOT` → `exit_code=0`), never at the constant, because the default is bound once at `def` time and rewriting the constant would leave `die()` answering 3 and the plant a no-op — which is why `C32a` asserts the *behaviour* and not the substitution. The mutant makes an unresolvable `--sha` report a non-verdict as a passing run: the exact harm (98) names, and a mutant that ran **green through every assertion in this file before this item existed**. On that tree `C32a`–`C32d` prove the plant took while `--help` (0), an unknown flag (2) and a bad `--format` (2) are untouched — so section E and the (65) class have nothing to find — then exit **1**, `VIOLATION badvalue_contract repo-lint:sha-declared`, `DIAG declared_probe repo-lint:--sha want=3 got=0`, `violations=1`, `cl_declared=3` with `cl_declared_ok=2`, and the six-bucket partition still closing: **11/11**.", "**The checker's own first bug, caught by the assertions this item added.** The draft bound the table row to `dcode` while the comparison read `$dexpect` — declared `local`, therefore always empty — so all three pairs were *counted* and none could ever *satisfy*: `cl_declared=3 cl_declared_ok=0`, three spurious `badvalue_contract` violations and **242 passed / 38 failed**, every red downstream of that one field name (`A1`, `A3` want 0 got 3, and each control's `exactly one violation` seeing 4). One `read` list later: **280 / 0**.", '**Supporting suites run on this tree**: `bash tests/test_repo_lint.sh` → **461 passed, 0 failed**, `bash tests/test_queue_source.sh` → **181 passed, 0 failed**, `bash tests/test_commit_gate.sh` → **41 passed, 0 failed**. No file under `tools/` that is *executed* changed (only `tools/REGISTRY.md` was written), so the tool census is unchanged (**22 tools, 31 registered sections, 73 suites**, the `- Live:` figure untouched at **73**); no `app/src/php` edit → **no reviewer gate and no promote**.'], 'queue -> agent-logs/progress.md': []}}]
dev: HEALTHY
  Response: {"status":"ok","service":"gladex-investor-app","env":"dev","timestamp":1790829817,"version":"0.4.28"}
prod: HEALTHY
  Response: {"status":"ok","service":"gladex-investor-app","env":"prod","timestamp":1790829817,"version":"0.4.28"}
  prod src/php                 14 files  OK
result: in sync — 44 file(s) across 2 env(s) (exit 0)
sync RC=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && git show --stat --format='%h %cI%n%s' 06cb8dc | tail -8; git status -sb | head -2; date -u +%Y-%m-%dT%H:%MZ
06cb8dc 2026-10-01T06:26:59+02:00
(98) the three documented non-2 codes become CONTRACTS: DECLARED_PAIRS holds tool|flag|expected|argv for repo-lint --sha 3, immich-roundtrip --email 3 and smtp-relay-probe --expect-open never-2 (probed against loopback only, never the tool's default set), a sixth partition bucket cl_declared with its own cl_declared_ok/cl_declared_seen and an exit-3 no-scope guard, G35-G39 on the live tree and control C32 mutating die()'s SIGNATURE so a declared code that stops being true reddens exactly once - suite 264 -> 280, cl_other 25 -> 22, candidate (b) rejected in the prose it would have lied to, changelog [0.4.150]

 CHANGELOG.md                    |  20 +++
 agent-logs/PROGRESS.md          |  24 ++++
 tests/test_registry_coverage.sh | 282 ++++++++++++++++++++++++++++++++++++----
 tools/REGISTRY.md               | 120 ++++++++++++++---
 4 files changed, 402 insertions(+), 44 deletions(-)
## main...origin/main
2026-10-01T04:43Z
> build · mimo-v2.6-flash-free
$ cd /data/repo && cat >> agent-logs/PROGRESS.md <<'ENTRY'

### Closing measurements for the (98) entry above (commit `06cb8dc`, pushed)

- **The step's own commit**: `06cb8dc` at **2026-10-01T04:26:59Z**, **4 files, 402 insertions / 44 deletions** — `tests/test_registry_coverage.sh` (+238/-44: the `DECLARED_PAIRS` table, the sixth bucket, `G35`–`G39`, control `C32`, the header's (98) record and the corrected `1 enum` figure), `tools/REGISTRY.md` (120 lines: the (73) prose, the partition paragraph, the *Granularity declared* paragraph, the suite's **Tests**/**Status** lines and the three tools' contract notes), `CHANGELOG.md` (`[0.4.150]`, +20) and this entry — through `.githooks/pre-commit` (**exit 0** over the full index), pushed `a1515d3..06cb8dc` to `origin` (`git://git.gladex.de/gladex.git`); `git status -sb` → `## main...origin/main`, no ahead marker, worktree clean.

- **The gate re-read on the committed HEAD (`06cb8dc`)**: `tools/repo-lint --sha HEAD` → **exit 0**, **155 changelog version headings / 155 unique / 5,320 citations checked / 0 missing / 4,902 bare tokens counted**, 165 linted files parse clean, 45 Go modules compile clean (1.7 s) — `154 → 155` is this entry's own heading, and `[0.4.150]`, cited by the suite and by `REGISTRY.md` before the heading existed, now resolves in history. `tools/queue-source-check` → exit 0, `one queue: [0.4.150] pointer-only, 111 item line(s) frozen across 107 section(s), 108 PROGRESS bullet(s)`.

- **Supporting suites, all run this run on the working tree**: `test_registry_coverage.sh` **280/0 (4m11s)** — re-run *after* the `REGISTRY.md` edits, since that file's figures are what this suite reads — against **264/0 (3m53s)** at `a1515d3`; `test_repo_lint.sh` **461/0**; `test_queue_source.sh` **181/0**; `test_commit_gate.sh` **41/0**; `test_changelog_api.php` **86/0**; `test_app_version.php` **39/0** (the changelog's *first* heading is still `[0.4.28]`, so `GLADEX_APP_VERSION` stays **0.4.28**).

- **Full regression on the pushed tree**: `./tools/regression-run --format json` → **73 suites / 6,466 passed / 0 failed / 0 skipped, `ok: true`, exit 0, `conflicts: []`** (873 s), with `test_registry_coverage.sh` inside it. The arithmetic closes rather than being asserted: the previous run recorded **6,450**, and 6,450 + **16** = **6,466**, i.e. the whole delta of this run's regression is exactly this step's sixteen new assertions and nothing else moved.

- **All gates on the pushed tree**: `tools/system-status` → **Overall: ALL SYSTEMS HEALTHY**, `git-tree [OK] clean`, `go-compile [OK] … (commit 06cb8dc)`, `go-tests [OK] passing (worktree)`, `investor-duty [OK] owed=0 unread=0 unreplied=0 open=0`, `queue-source [OK] one queue: [0.4.150] pointer-only`, `cloud [OK] nextcloud 200 installed=true; immich 200 pong; 5/5 containers up`, all `DNS:`/`MX:` **[OK]** (read-only lookups, no write), `tls-cert-expiry [OK] 82d` — plus the same **two pre-existing WARNs** this run neither touched nor worsened: `SOA … mname=placeholder (NEEDS-INVESTOR open)` and `promote-gates … verdict VERDICT-20260930T022500-team-sofia.md is STALE (… re-review required)` with `dev-sync OK | commit-lint OK | ship-tree OK (commit 06cb8dc)` — the **reviewer's** next review; `app/src/php` was not edited here, so this run introduced neither the staleness nor a candidate for it. `tools/source-sync-check` → **in sync, 44 files across 2 envs, exit 0**; `tools/healthcheck` → **dev HEALTHY / prod HEALTHY**, both **0.4.28**.

- **Served, not assumed — the changelog page is the investor-visible surface and it reads this file**: `GET /changelog` → **200 on dev `:8000` and prod `:8001`, 1,171,570 bytes each, one md5 `92cd38bf681419843053128fcce7c0be` across both**, the token `0.4.150` present **twice in each response**; `GET /api/changelog` → **total 155, first `0.4.28`, last `0.4.150`** — the *first* heading did not move, so `GLADEX_APP_VERSION` stays **0.4.28**; `GET /healthz` → **200 on both**. No `app/src/php` edit → **no reviewer gate and no promote was needed or executed**.

- **STEP 0 re-verified at the very close, three ways**: direct SQL on both live DBs → `SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod**; `tools/inbox-status` → **exit 0, "OK - nothing owed (0 unread, 0 open entries all replied)"**, **79 entries / 79 handled / 0 open**, last reply **dev 141 / prod 106**; `grep '^## ' INBOX.md | grep -v HANDLED` → **0**. **Nothing was owed, so no row was inserted this run** — the thread was not written at all, and the three open decisions remain his: **(93)**, **(97)**, and the senior-role hire staged at `hiring/queue/ruben-stoll.json`.

- **Safety, unchanged to the end**: model spend **0.00** (free `*-free` models only; `tools/budget-show` → **5.00 / 1.50 / 3.50** for month 2026-09); no `app/src/php` edit → **no reviewer gate and no promote**, prod untouched (healthcheck **0.4.28** throughout); no service restarted (`agent-loop` untouched — still **(99)**), **zero DNS writes** (no `pdns-api.py` call; the DNS lines above are resolvers *answering*), **no mail sent**; **no other identity's file edited by me** — only the four files in `06cb8dc` plus this closing section; Nextcloud `{"installed":true}`, Immich `{"res":"pong"}`, `/opt/cloud` untouched; `hiring/queue/ruben-stoll.json` unchanged and still the investor's call; no history rewrite; no new option, no JSON key, no `GLADEX_APP_VERSION` bump (stays **0.4.28**), no new test suite (**22 tools, 31 registered sections, 73 suites** unchanged, `- Live:` figure untouched at **73**); the C32 mutant exists only inside the suite's own `mktemp` sandbox (trap-removed) and is never committed — the live `tools/repo-lint` is byte-identical to `HEAD`'s.

- **Next run**: **(93)** or **(97)(a)** the moment the investor answers, otherwise the oldest carried machinery item — **(99)**, which needs a service restart this loop does not do unilaterally, so **(100)** is the next step that can land without one.
ENTRY
./tools/queue-source-check; echo "RC=$?"; tail -2 agent-logs/PROGRESS.md | cut -c1-140
queue-source-check: OK - one queue: [0.4.150] pointer-only, 111 item line(s) frozen across 107 section(s), 108 PROGRESS bullet(s)
RC=0

- **Next run**: **(93)** or **(97)(a)** the moment the investor answers, otherwise the oldest carried machinery item — **(99)**, which nee
> build · mimo-v2.6-flash-free
$ cd /data/repo && git status --short; md5sum tools/repo-lint; git show HEAD:tools/repo-lint | md5sum; git add -A && git commit -q -F - <<'MSG'; echo "RC=$?"; git push origin main 2>&1 | tail -2; git status -sb | head -2
(98) closing: full regression on the pushed tree 73/6466/0 (6450 + 16 = the whole delta), repo-lint 155 headings / 5320 citations / 0 missing on 06cb8dc, served /changelog 200 both envs carrying 0.4.150 (one md5), queue-source 111 frozen / 108 bullets, STEP 0 re-verified 0/0
MSG
M agent-logs/PROGRESS.md
d9b7bfb58c8cded4c43694997a71705a  tools/repo-lint
d9b7bfb58c8cded4c43694997a71705a  -
RC=0
To git://git.gladex.de/gladex.git
   06cb8dc..cee7334  main -> main
## main...origin/main
> build · mimo-v2.6-flash-free
$ cd /data/repo && ./tools/system-status 2>&1 | tail -2; ./tools/repo-lint --sha HEAD 2>&1 | tail -2; ./tools/inbox-status | tail -2; for e in dev prod; do printf '%s unread=' $e; sqlite3 /opt/startup/$e/data/messages.db "SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0"; done; git log --oneline -2 | cut -c1-70; git status --short | wc -l
Overall: ALL SYSTEMS HEALTHY
  changelog-version: 155 changelog version heading(s), 155 unique, 5325 citation(s) checked, 0 missing, 4910 bare token(s) counted
result: all 165 linted file(s) parse clean (exit 0)

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
dev unread=0
prod unread=0
cee7334 (98) closing: full regression on the pushed tree 73/6466/0 (64
06cb8dc (98) the three documented non-2 codes become CONTRACTS: DECLAR
0
> build · mimo-v2.6-flash-free
Done — queue item **(98)** landed, verified and pushed.

## STEP 0 (first, and re-verified last)
0 unread `investor_to_agent` in both DBs → `tools/inbox-status` exit 0, "nothing owed", 79 entries / 79 handled / 0 open, last reply dev 141 / prod 106. No row inserted; thread untouched.

## The step: the three "non-2" tool/flag pairs are now machine-checked contracts
**`tests/test_registry_coverage.sh`** only (plus docs):

- `DECLARED_PAIRS` = `tool|flag|expected|argv` — `repo-lint|--sha|3`, `immich-roundtrip|--email|3`, `smtp-relay-probe|--expect-open|non2|not-an-endpoint 127.0.0.1:25`, read by `grep -m1 -F` + field-verified on both fields (unmatched pairs still fall to `cl_other`).
- Sixth partition bucket `cl_declared` / `cl_declared_ok` / `cl_declared_seen`, `ERROR class_declared_no_scope` (exit 3), new **G35–G39** (incl. `cl_other == 22`), new **C32** (11 assertions) mutating `repo-lint`'s `die()` at its *signature* (`EXIT_CANNOT` → `0`), because the default is bound at def time.
- `smtp` declared `non2` (its digit measures relay state) and probed on **loopback only** — never the tool's default set; hermeticity claim amended "no network" → "no EXTERNAL network".
- Also corrected a stale figure in the (73) prose: `18 enum` → `1 enum`, so `61 = 1 + 14 + 4 + 18 + 24` actually sums.

**Bug found and fixed during the run**: the draft's `read` bound the row to `dcode` while the comparison read `$dexpect` (always empty) → 242/38; one field name later → green. Second failure was cosmetic (subject spelling `repo-lint:sha-declared` per the `${flag#--}` convention).

## Verification
| check | result |
|---|---|
| `test_registry_coverage.sh` | **280 / 0** (was 264/0 at `a1515d3`) — 16 added, none loosened |
| live SUMMARY | `cl_declared=3 cl_declared_ok=3 cl_declared_seen=1,3,3 cl_other=22 cl_scope=62 violations=0` (18+4+1+14+3+22 = 62) |
| control C32 | 11/11, exactly one red: `badvalue_contract repo-lint:sha-declared` + `DIAG … want=3 got=0` |
| supporting suites | repo-lint 461/0, queue-source 181/0, commit-gate 41/0, changelog-api 86/0, app-version 39/0 |
| full regression | **73 suites / 6,466 / 0 / 0**, ok, no conflicts — 6,450 + 16 = the whole delta |
| repo-lint on HEAD | 155 headings, 5,325 citations, **0 missing** (`[0.4.150]` resolves) |
| system-status | **ALL SYSTEMS HEALTHY** (same 2 pre-existing WARNs: SOA placeholder, promote-gates STALE) |
| served | `/changelog` 200 both envs, one md5, `0.4.150` ×2; `/api/changelog` total 155, first `0.4.28`, last `0.4.150` |

## Commits pushed to `origin`
- `06cb8dc` — the step (4 files, +402/−44) through `.githooks/pre-commit`
- `cee7334` — closing measurements

No `app/src/php` edit → no reviewer gate/promote; no executed `tools/` file edited (live `repo-lint` md5 = HEAD's); zero DNS writes, no mail, no service restarts, spend **0.00** (budget 5.00 / 1.50 / 3.50). Queue: **(98) STRUCK**; next candidate **(93)** or **(97)(a)** on the investor's answer, otherwise **(99)** (needs a restart this loop won't do unilaterally) → **(100)**.
exit=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Thu Oct  1 06:55:10 2026] 127.0.0.1:37000 Accepted
[Thu Oct  1 06:55:10 2026] 127.0.0.1:37000 Closing
[Thu Oct  1 06:55:10 2026] 127.0.0.1:37008 Accepted
[Thu Oct  1 06:55:10 2026] 127.0.0.1:37008 Closing
[Thu Oct  1 06:55:11 2026] 127.0.0.1:37020 Accepted
[Thu Oct  1 06:55:11 2026] 127.0.0.1:37020 Closing
[Thu Oct  1 06:55:11 2026] 127.0.0.1:37024 Accepted
[Thu Oct  1 06:55:12 2026] 127.0.0.1:37024 Closing
[Thu Oct  1 06:55:12 2026] 127.0.0.1:37038 Accepted
[Thu Oct  1 06:55:12 2026] 127.0.0.1:37038 Closing
[Thu Oct  1 06:55:13 2026] 127.0.0.1:37054 Accepted
[Thu Oct  1 06:55:13 2026] 127.0.0.1:37054 Closing
[Thu Oct  1 06:55:13 2026] 127.0.0.1:37064 Accepted
[Thu Oct  1 06:55:13 2026] 127.0.0.1:37064 Closing
[Thu Oct  1 06:55:14 2026] 127.0.0.1:37066 Accepted
[Thu Oct  1 06:55:14 2026] 127.0.0.1:37066 Closing
[Thu Oct  1 06:55:14 2026] 127.0.0.1:56324 Accepted
[Thu Oct  1 06:55:14 2026] 127.0.0.1:56324 Closing
[Thu Oct  1 06:55:15 2026] 127.0.0.1:56340 Accepted
[Thu Oct  1 06:55:15 2026] 127.0.0.1:56340 Closing
[Thu Oct  1 06:55:16 2026] 127.0.0.1:56346 Accepted
[Thu Oct  1 06:55:16 2026] 127.0.0.1:56346 Closing
[Thu Oct  1 06:55:16 2026] 127.0.0.1:56362 Accepted
[Thu Oct  1 06:55:16 2026] 127.0.0.1:56362 Closing
[Thu Oct  1 06:55:17 2026] 127.0.0.1:56370 Accepted
[Thu Oct  1 06:55:17 2026] 127.0.0.1:56370 Closing
[Thu Oct  1 06:55:17 2026] 127.0.0.1:56374 Accepted
[Thu Oct  1 06:55:17 2026] 127.0.0.1:56374 Closing
[Thu Oct  1 06:55:18 2026] 127.0.0.1:56390 Accepted
[Thu Oct  1 06:55:18 2026] 127.0.0.1:56390 Closing
[Thu Oct  1 06:55:18 2026] 127.0.0.1:56398 Accepted
[Thu Oct  1 06:55:18 2026] 127.0.0.1:56398 Closing
[Thu Oct  1 06:55:19 2026] 127.0.0.1:56410 Accepted
[Thu Oct  1 06:55:19 2026] 127.0.0.1:56410 Closing
[Thu Oct  1 06:55:20 2026] 127.0.0.1:56418 Accepted
[Thu Oct  1 06:55:20 2026] 127.0.0.1:56418 Closing
[Thu Oct  1 06:55:21 2026] 127.0.0.1:56422 Accepted
[Thu Oct  1 06:55:21 2026] 127.0.0.1:56422 Closing
[Thu Oct  1 06:55:21 2026] 127.0.0.1:56438 Accepted
[Thu Oct  1 06:55:21 2026] 127.0.0.1:56438 Closing
[Thu Oct  1 06:55:22 2026] 127.0.0.1:56446 Accepted
[Thu Oct  1 06:55:22 2026] 127.0.0.1:56446 Closing
[Thu Oct  1 06:55:22 2026] 127.0.0.1:56452 Accepted
[Thu Oct  1 06:55:22 2026] 127.0.0.1:56452 Closing
[Thu Oct  1 06:55:24 2026] 127.0.0.1:56458 Accepted
[Thu Oct  1 06:55:24 2026] 127.0.0.1:56458 Closing
[Thu Oct  1 06:55:24 2026] 127.0.0.1:51756 Accepted
[Thu Oct  1 06:55:24 2026] 127.0.0.1:51756 Closing
[Thu Oct  1 06:55:26 2026] 127.0.0.1:51772 Accepted
[Thu Oct  1 06:55:26 2026] 127.0.0.1:51772 Closing
[Thu Oct  1 06:55:26 2026] 127.0.0.1:51786 Accepted
[Thu Oct  1 06:55:26 2026] 127.0.0.1:51786 Closing
[Thu Oct  1 06:55:27 2026] 127.0.0.1:51798 Accepted
[Thu Oct  1 06:55:27 2026] 127.0.0.1:51798 Closing
[Thu Oct  1 06:55:27 2026] 127.0.0.1:51814 Accepted
[Thu Oct  1 06:55:27 2026] 127.0.0.1:51814 Closing
[Thu Oct  1 06:55:27 2026] 127.0.0.1:51824 Accepted
[Thu Oct  1 06:55:27 2026] 127.0.0.1:51824 Closing
[Thu Oct  1 06:55:27 2026] 127.0.0.1:51826 Accepted