Gladex Agent Logs

            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
            '    *)\n'
            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;,
'    dns_lookup_failed)\n'
            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;\n'
            '    public_ip_unavailable)\n'
            '        DIAGNOSIS="no public IPv4 could be determined (every echo service rejected)."\n'
            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
            '    *)\n'
            '        DIAGNOSIS="the DNS lookup never completed (dig missing, unreachable or timed out)."\n'
            '        ACTION="check dig + resolver + WireGuard tunnel before trusting ANY verdict." ;;)


    "M28": ('    no_a_records)\n'

            '        DIAGNOSIS="the DNS A record for ${DOMAIN} is GONE (query completed, no answer)."\n'
            '        ACTION="inspect the zone with \'pdns-api.py records\'; do NOT rewrite DNS from here." ;;\n'
            '    dns_lookup_failed)\n'
            '        DIAGNOSIS="the DNS lookup never completed (dig missing, unreachable or timed out)."\n'
            '        ACTION="check dig + resolver + WireGuard tunnel before trusting ANY verdict." ;;\n'
            '    public_ip_unavailable)\n'
            '        DIAGNOSIS="no public IPv4 could be determined (every echo service rejected)."\n'
            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
            '    *)\n'
            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;,
'    no_a_records)\n'
            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;\n'
            '    dns_lookup_failed)\n'
            '        DIAGNOSIS="the DNS lookup never completed (dig missing, unreachable or timed out)."\n'
            '        ACTION="check dig + resolver + WireGuard tunnel before trusting ANY verdict." ;;\n'
            '    public_ip_unavailable)\n'
            '        DIAGNOSIS="no public IPv4 could be determined (every echo service rejected)."\n'
            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
            '    *)\n'
            '        DIAGNOSIS="the DNS A record for ${DOMAIN} is GONE (query completed, no answer)."\n'
            '        ACTION="inspect the zone with \'pdns-api.py records\'; do NOT rewrite DNS from here." ;;)
> build · mimo-v2.6-flash-free
← Edit repo/tests/test_ip_drift_cron.sh
Index: repo/tests/test_ip_drift_cron.sh
===================================================================
--- repo/tests/test_ip_drift_cron.sh
+++ repo/tests/test_ip_drift_cron.sh
@@ -1857,8 +1857,102 @@
             '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;',
             '    *)\n'
             '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
             '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;'),
+    # M27 — the default arm's SECOND exchange (queue item (x), 2026-10-06):
+    # after M25 the `*)` arm has traded with exactly ONE of the three named
+    # arms (`public_ip_unavailable`), so `default<->dns` and `default<->no_a`
+    # are the block's remaining untraded pairs — this is the first of those
+    # two. Both runs keep their own LABEL, still alert and still exit 3, so
+    # the output's shape is unchanged and only a reader that pins each arm to
+    # its own sentence reddens. The needle is the CONTIGUOUS three-arm span
+    # `dns_lookup_failed` + `public_ip_unavailable` + `*)` with only the two
+    # OUTER arms' `DIAGNOSIS=`/`ACTION=` pairs swapped and
+    # `public_ip_unavailable` in the middle left byte-identical — that
+    # untouched middle arm is what keeps M27 from collapsing into M18 (moves
+    # `dns`, the span's upper arm) or into M25 (moves `ip`, the same middle
+    # arm M27 must not touch). `${EXIT_CODE}` interpolation is carried across
+    # the move, so the receiving arm still prints the checker's real exit
+    # (counted once in the probe). Pinned to `err_dns → does not borrow the
+    # default arm's action` (a pin no mutant used before this one), whose
+    # siblings `err_dns → named arm action orders the lookup chain re-checked
+    # first` and `err_dns → named arm diagnosis says the lookup never
+    # completed` (M18's pin) redden with it, while the WHOLE `err_ip` and
+    # `err_no_a` blocks stay GREEN — the middle-arm-untouched proof, read
+    # green rather than merely absent. Probe measured **263 passed / 17
+    # failed** against the control **280 / 0**: 4 per scenario x 3 = 12 in
+    # the three-scenario loop, + the `:362` interpolation assertion, + the
+    # `named branch (dns_lookup_failed)` guard, + 3 in the `err_dns` block.
+    # The queue's own components summed to 18 (it wrote "4 on the named
+    # side") while predicting "17-shaped"; measured is **17**, the named-side
+    # component being **3** — counted, not carried.
+    "M27": ('    dns_lookup_failed)\n'
+            '        DIAGNOSIS="the DNS lookup never completed (dig missing, unreachable or timed out)."\n'
+            '        ACTION="check dig + resolver + WireGuard tunnel before trusting ANY verdict." ;;\n'
+            '    public_ip_unavailable)\n'
+            '        DIAGNOSIS="no public IPv4 could be determined (every echo service rejected)."\n'
+            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
+            '    *)\n'
+            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
+            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;',
+            '    dns_lookup_failed)\n'
+            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
+            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;\n'
+            '    public_ip_unavailable)\n'
+            '        DIAGNOSIS="no public IPv4 could be determined (every echo service rejected)."\n'
+            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
+            '    *)\n'
+            '        DIAGNOSIS="the DNS lookup never completed (dig missing, unreachable or timed out)."\n'
+            '        ACTION="check dig + resolver + WireGuard tunnel before trusting ANY verdict." ;;'),
+    # M28 — the LAST `case`-block exchange (queue item (x), 2026-10-06): the
+    # final untraded arm pair, `no_a_records` <-> `*)`, over the FULL
+    # four-arm span with `dns_lookup_failed` and `public_ip_unavailable` both
+    # left byte-identical — those two untouched arms are what keep M28 from
+    # collapsing into M20 (moves `dns`) or M21 (moves `ip`), each of which
+    # trades with the same upper arm from the other side. After it every one
+    # of C(4,2)=6 arm pairs has exchanged, so the exchange family is closed:
+    # the only `case` work left is the three single-half DIAGNOSIS borrows
+    # queued for whoever picks this up next. Same shape as M27 — arm LABELS
+    # in place, only the outer two arms' `DIAGNOSIS=`/`ACTION=` pairs swapped,
+    # `${EXIT_CODE}` carried across so the receiving arm still prints the
+    # checker's real exit (counted once in the probe). Pinned to `err_no_a →
+    # does not borrow the default arm's action` (a pin no mutant used before
+    # this one), whose siblings `err_no_a → named arm action points at the
+    # zone, never at a rewrite` and `err_no_a → named arm diagnosis says the
+    # A record is gone` (M8's pin) redden with it, while `err_no_a → does not
+    # borrow the dead-lookup diagnosis` (M20's pin) stays GREEN — no_a's new
+    # sentences are the default arm's, so the dead-lookup sentence is still
+    # absent, and that green is what distinguishes an *exchange* from a
+    # borrow on this arm — and while the WHOLE `err_dns` and `err_ip` blocks
+    # stay GREEN (the two untouched arms). Probe measured **263 passed / 17
+    # failed** against the control **280 / 0**: the same 12 + 1 + 1 + 3
+    # shape, with the loop's two unexpected needles now
+    # `does not diagnose a vanished A record` and `does not send the operator
+    # to the zone`.
+    "M28": ('    no_a_records)\n'
+            '        DIAGNOSIS="the DNS A record for ${DOMAIN} is GONE (query completed, no answer)."\n'
+            '        ACTION="inspect the zone with \'pdns-api.py records\'; do NOT rewrite DNS from here." ;;\n'
+            '    dns_lookup_failed)\n'
+            '        DIAGNOSIS="the DNS lookup never completed (dig missing, unreachable or timed out)."\n'
+            '        ACTION="check dig + resolver + WireGuard tunnel before trusting ANY verdict." ;;\n'
+            '    public_ip_unavailable)\n'
+            '        DIAGNOSIS="no public IPv4 could be determined (every echo service rejected)."\n'
+            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
+            '    *)\n'
+            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
+            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;',
+            '    no_a_records)\n'
+            '        DIAGNOSIS="checker failed without a classified cause (exit ${EXIT_CODE})."\n'
+            '        ACTION="run \'ip-drift-check --format json\' by hand and read its output." ;;\n'
+            '    dns_lookup_failed)\n'
+            '        DIAGNOSIS="the DNS lookup never completed (dig missing, unreachable or timed out)."\n'
+            '        ACTION="check dig + resolver + WireGuard tunnel before trusting ANY verdict." ;;\n'
+            '    public_ip_unavailable)\n'
+            '        DIAGNOSIS="no public IPv4 could be determined (every echo service rejected)."\n'
+            '        ACTION="check egress; no drift verdict can be trusted until this clears." ;;\n'
+            '    *)\n'
+            '        DIAGNOSIS="the DNS A record for ${DOMAIN} is GONE (query completed, no answer)."\n'
+            '        ACTION="inspect the zone with \'pdns-api.py records\'; do NOT rewrite DNS from here." ;;'),
 }
 needle, repl = M[os.environ["MUT_ID"]]
 path = os.environ["MUT_TARGET"]
 src = open(path).read()

> build · mimo-v2.6-flash-free
← Edit repo/tests/test_ip_drift_cron.sh
Index: repo/tests/test_ip_drift_cron.sh
===================================================================
--- repo/tests/test_ip_drift_cron.sh
+++ repo/tests/test_ip_drift_cron.sh
@@ -2008,8 +2008,10 @@
     run_mutation M23 'err_ip → named arm diagnosis says no public IPv4 could be found'
     run_mutation M24 'err_no_a → does not borrow the dead-lookup action'
     run_mutation M25 "err_int → default arm action points at the checker's own output"
     run_mutation M26 'err_int → does not declare the egress untrustworthy'
+    run_mutation M27 "err_dns → does not borrow the default arm's action"
+    run_mutation M28 "err_no_a → does not borrow the default arm's action"
 fi
 
 # =============================================================================
 echo ""

> build · mimo-v2.6-flash-free
$ cd /data/repo && bash -n tests/test_ip_drift_cron.sh && echo "bash -n OK"; grep -c '^    run_mutation M' tests/test_ip_drift_cron.sh; echo "=== plain ==="; bash tests/test_ip_drift_cron.sh 2>&1 | tail -2; echo "rc=${PIPESTATUS[0]}"
bash -n OK
28
=== plain ===

=== Results: 283 passed, 0 failed ===
rc=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && bash tests/test_ip_drift_cron.sh --mutations > /tmp/opencode/probe40/mut.out 2>&1; echo "rc=$?"; tail -2 /tmp/opencode/probe40/mut.out; echo "=== counts ==="; grep -c 'applied (its needle occurs exactly once)' /tmp/opencode/probe40/mut.out; grep -c 'is syntactically valid' /tmp/opencode/probe40/mut.out; grep -c 'suite goes red' /tmp/opencode/probe40/mut.out; grep -c 'wrong verdict lands on the intended assertion' /tmp/opencode/probe40/mut.out; grep -c 'suite stayed GREEN' /tmp/opencode/probe40/mut.out; grep -c 'precondition: needle occurs' /tmp/opencode/probe40/mut.out; grep -c 'does not parse' /tmp/opencode/probe40/mut.out; echo "=== M27/M28 lines ==="; grep 'M27 \|M28 \|M27 →\|M28 →' /tmp/opencode/probe40/mut.out
rc=0

=== Results: 396 passed, 0 failed ===
=== counts ===
28
28
28
28
0
0
0
=== M27/M28 lines ===
  ok   - M27 applied (its needle occurs exactly once)
  ok   - M27 is syntactically valid (red comes from behaviour, not a parse error)
  ok   - M27 → suite goes red (rc=1), the mutant did not survive
  ok   - M27 → wrong verdict lands on the intended assertion: 'err_dns → does not borrow the default arm's action'
  ok   - M28 applied (its needle occurs exactly once)
  ok   - M28 is syntactically valid (red comes from behaviour, not a parse error)
  ok   - M28 → suite goes red (rc=1), the mutant did not survive
  ok   - M28 → wrong verdict lands on the intended assertion: 'err_no_a → does not borrow the default arm's action'
> build · mimo-v2.6-flash-free

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Tue Oct  6 04:15:09 2026] 127.0.0.1:35786 Accepted
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35786 Closing
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35788 Accepted
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35788 Closing
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35796 Accepted
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35796 Closing
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35806 Accepted
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35806 Closing
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35820 Accepted
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35820 Closing
[Tue Oct  6 04:15:09 2026] 127.0.0.1:35826 Accepted
[Tue Oct  6 04:15:10 2026] 127.0.0.1:35826 Closing
[Tue Oct  6 04:15:10 2026] 127.0.0.1:35834 Accepted
[Tue Oct  6 04:15:10 2026] 127.0.0.1:35834 Closing
[Tue Oct  6 04:15:10 2026] 127.0.0.1:35844 Accepted
[Tue Oct  6 04:15:10 2026] 127.0.0.1:35844 Closing
[Tue Oct  6 04:15:10 2026] 127.0.0.1:35860 Accepted
[Tue Oct  6 04:15:10 2026] 127.0.0.1:35860 Closing
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39306 Accepted
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39306 Closing
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39320 Accepted
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39320 Closing
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39326 Accepted
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39326 Closing
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39330 Accepted
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39330 Closing
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39342 Accepted
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39342 Closing
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39356 Accepted
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39356 Closing
[Tue Oct  6 04:15:57 2026] 127.0.0.1:39362 Accepted
[Tue Oct  6 04:15:58 2026] 127.0.0.1:39362 Closing
[Tue Oct  6 04:15:58 2026] 127.0.0.1:39368 Accepted
[Tue Oct  6 04:15:58 2026] 127.0.0.1:39368 Closing
[Tue Oct  6 04:15:58 2026] 127.0.0.1:39382 Accepted
[Tue Oct  6 04:15:58 2026] 127.0.0.1:39382 Closing
[Tue Oct  6 04:15:58 2026] 127.0.0.1:39394 Accepted
[Tue Oct  6 04:15:58 2026] 127.0.0.1:39394 Closing
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48882 Accepted
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48882 Closing
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48888 Accepted
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48888 Closing
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48902 Accepted
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48902 Closing
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48912 Accepted
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48912 Closing
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48914 Accepted
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48914 Closing
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48926 Accepted
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48926 Closing
[Tue Oct  6 04:30:10 2026] 127.0.0.1:48936 Accepted
[Tue Oct  6 04:30:11 2026] 127.0.0.1:48936 Closing
[Tue Oct  6 04:30:11 2026] 127.0.0.1:48948 Accepted
[Tue Oct  6 04:30:11 2026] 127.0.0.1:48948 Closing
[Tue Oct  6 04:30:11 2026] 127.0.0.1:48956 Accepted
[Tue Oct  6 04:30:11 2026] 127.0.0.1:48956 Closing
[Tue Oct  6 04:30:11 2026] 127.0.0.1:48966 Accepted
[Tue Oct  6 04:30:11 2026] 127.0.0.1:48966 Closing
[Tue Oct  6 04:30:15 2026] 127.0.0.1:51794 Accepted