Gladex Agent Logs

Log:
  - 2026-09-20: init, no domains ordered yet
  - 2026-09-20: investor APPROVED gladex.de (1.50/mo). Awaiting registrar purchase + DNS creds.
  - 2026-09-20: purchase completed same day — RDAP status active (changed 2026-09-20T11:10:57+02:00), DNS wired via pdns wrapper (A apex/dev/git/info/stats/log/team -> 77.90.15.49, MX 10 gladex.de), dig-verified; DOMAIN.md holds evidence.
  - 2026-09-24: ledger narrative corrected — spent-line still said "purchase pending at registrar" 4 days after registration (queued candidate #1); numbers unchanged (1.50/3.50, no money moved), log history above kept verbatim.
  - 2026-10-01: month rolled per brief §4 (balance resets to 5.00 on the 1st, unspent does NOT roll over). September history above is kept verbatim; September closed at spent 1.50 / remaining 3.50.
  - 2026-10-02: October opened at spent 0.00 / remaining 5.00 because no October charge exists in any file on this box — while gladex.de is a known 1.50/mo recurring cost with NO renewal date recorded anywhere. Figure to be corrected the moment the investor answers REPORT.md §14.
=== queue-source-check ===
queue-source-check: FAIL - 1 violation(s): [0.4.223] is not named in agent-logs/PROGRESS.md - the newest CHANGELOG entry has no record in the authoritative file
  - [0.4.223] is not named in agent-logs/PROGRESS.md - the newest CHANGELOG entry has no record in the authoritative file
rc=1
$ cd /data/repo && for t in test_queue_source test_repo_lint test_leak_figure_readers; do printf '%s: ' "$t"; timeout 600 bash tests/$t.sh 2>&1 | grep -Ei "passed|result|failed" | tail -2; echo "---"; done
test_queue_source: queue-source-check suite: 278 passed, 0 failed
---
test_repo_lint: PASS: M20 planted: the derivation is defeated, not bypassed
repo-lint suite: 473 passed, 0 failed
---
test_leak_figure_readers: leak-figure-readers suite: 41 passed, 0 failed
---
> build · mimo-v2.6-flash-free
$ cd /data/repo && git status --porcelain; echo "--- md5 ip-drift-cron ---"; md5sum tools/ip-drift-cron; git show HEAD:tools/ip-drift-cron | md5sum; echo "--- ahead/behind ---"; git rev-list --left-right --count origin/main...HEAD; echo "--- failed units ---"; systemctl --failed --no-legend; echo "rc=$?"; crontab -l | head -3
M CHANGELOG.md
 M tests/test_ip_drift_cron.sh
 M tools/REGISTRY.md
--- md5 ip-drift-cron ---
2816126cb8bad48aabd03be621c2a60c  tools/ip-drift-cron
2816126cb8bad48aabd03be621c2a60c  -
--- ahead/behind ---
0	0
--- failed units ---
rc=0
0 3 * * 0 /data/repo/tools/ip-drift-cron gladex.de
*/15 * * * * /data/repo/tools/red-watch >> /data/agent-logs/red-watch-cron.log 2>&1
$ cd /data/repo && ./tools/red-watch 2>&1 | tail -5; echo "rc=$?"; ./tools/system-status 2>&1 | tail -25
FAIL A16 system-status json exits 0 (kind=rc key=sysj want=0)
  FAIL A17 json channel says overall ok (kind=contains key=sysj want="overall":"ok")
  FAIL A18 json channel says zero errors (kind=contains key=sysj want="errors":0)
  log=/data/agent-logs/red-watch-20261005.log
  alerts=/data/agent-logs/red-watch-ALERTS.log
rc=0


Command exceeded timeout of 120000 ms. Retry with a larger timeout if the command is expected to take longer.
> build · mimo-v2.6-flash-free
$ cd /data/repo && timeout 600 ./tools/system-status 2>&1 | tail -30; echo "rc=$?"
api-uptime                [OK] 200
  api-endpoints             [OK] 200
  api-changelog             [OK] 200
  api-stats                 [OK] 200
  page-info                 [OK] 200
  page-stats                [OK] 200
  page-team                 [OK] 200
  cloud                     [OK] nextcloud 200 installed=true; immich 200 pong; 5/5 containers up
  DNS:gladex.de             [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:dev.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:git.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:info.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:stats.gladex.de       [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:team.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:log.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  MX:gladex.de              [OK] 10 gladex.de. on 1.1.1.1+8.8.8.8
  SOA:gladex.de             [WARN] serial=2026092602 consistent on 1.1.1.1+8.8.8.8; mname=placeholder (NEEDS-INVESTOR open)
  ip-drift                  [OK] [2026-10-05T11:09:59Z] OK: No drift (egress matches DNS A record) (9h old)
  tls-cert-expiry           [OK] 77d left
  tls-cert-expiry-photos    [OK] 80d left
  investor-messages         [OK] 0 unread dev=0 prod=0
  investor-duty             [OK] owed=0 unread=0 unreplied=0 open=0
  git-tree                  [WARN] 3 uncommitted changes
  red-watch                 [WARN] red, failed=12, since 2026-10-05T20:16:47Z, 2m old; FAIL A3 tree clean AND in sync with origin/main (kind=is key=git) ;; FAIL A4 queue-source-check exits 0 (kind=rc key=qsc) ;; FAIL A5 queue has exactly one home (kind=contains key=qsc) ;; FAIL A6 newest CHANGELOG queue is pointer-only (kind=contains key=qsc) ;; FAIL A7 queue-source-check json exits 0 (kind=rc key=qscj) ;; FAIL A8 queue-source-check reports no violations (kind=contains key=qscj) ;; 
  queue-source              [FAIL] 1 violation(s): [0.4.223] is not named in agent-logs/PROGRESS.md - the newest CHANGELOG entry has no record in the authoritative file
  go-tests                  [OK] passing (worktree)
  go-compile                [OK] 45 module file(s) compile clean (1.803s) (commit 0dce0b1)
  promote-gates             [WARN] not promotable since 2026-10-04T15:00:25Z (1d 5h ago): verdict REFUSED: verdict VERDICT-20261004T150009-promote-footer-version-and-focus-visible.md is STALE (promoted source [app/src/php, examples/workflows] changed 91070s after it | dev-sync REFUSED: dev tree differs from the repo in 2 file(s): src/php/landing.php (differs), src/php/templates.php (differs) \u2014 this promotion copies REPO -> prod, so

Overall: 1 CHECK(S) FAILED
rc=0
> build · mimo-v2.6-flash-free
Mid-run dashboard captured. Now the PROGRESS entry — appended **before** commit #1 (CLOSE PROTOCOL rule 1):
$ cd /data/repo && cat >> agent-logs/PROGRESS.md <<'EOF'

## 2026-10-05 free-builder run (constant task) — **STEP 0 owed nothing** + **queue item (q) EXECUTED: M13/M14, the THIRD class arm's turn — the `unparseable` arm's borrow and exchange mutants, plus a two-figure correction measured rather than inherited** — `tests/test_ip_drift_cron.sh --mutations` **332 → 340 passed / 0 failed, 14/14 mutants caught, 0 survived** — changelog **`[0.4.223]`**

**STEP 0 — read first, paid before anything else, and nothing was owed.** `SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0** on `/opt/startup/dev/data/messages.db` and **0** on `/opt/startup/prod/data/messages.db` (one table `messages`; the predicate is `direction=… AND read=0`); newest row in each is **ours** (dev **144** / prod **109**, `agent_to_investor`, `read=1`); `./tools/inbox-status` → **exit 0**, *"OK - nothing owed (0 unread, 0 open entries all replied)"*; `INBOX.md` → **80 entries, 80 handled, 0 open**, read at run start (`grep '^## ' | grep -vc HANDLED` → **0**). Both entries in the run's INBOX block are `~~HANDLED~~` from earlier runs (the Marco Steiner hire proposal, 2026-10-04, reply dev 143 / prod 108; the operator's production-version correction, 2026-10-05T09:05Z, reply dev 144 / prod 109), so **no row was written, no row was marked read, and `INBOX.md` was not touched** — measured, not assumed. The operator's correction is honoured in every figure below: **production is 0.4.28**, read from `tools/healthcheck`; the `[0.4.29]` token in `CHANGELOG.md` is a 2026-09-24 *changelog heading* and is never quoted as a production claim.

**The queue read.** **(q)** — *"**M13** = the `unparseable` arm quoting the public class's `ACTION` (`run 'ip-drift-check --format json' by hand and read its public_ip.` → `verify VPS IP 77.90.15.49 is still correct BEFORE touching DNS.`), pinned to `drift_unparse → does not borrow the public class's action`; **M14** = the unparseable and public arms **exchanging their action bodies** … pinned to `drift_unparse → own action present (the class-internal absences read a real log)` (both pins exist today at `tests/test_ip_drift_cron.sh:587` and `:568`). **Probe first, same as (o)** … if either survives, that is a real hole, not a formatting nit. Then re-check the pin the same way … and refresh the battery's `REGISTRY.md` figures (**324 → 332**, **10/10 → 12/12** — measured after the run, never arithmetic before it)"* — taken whole. First I re-read `git status --porcelain` (**clean** at this run's open) and `git rev-list --left-right --count origin/main...HEAD` → **0 0** (no sibling commits pending). Both pin lines were found where the queue's own text put them (`:587` = `drift_cgnat → does not borrow the public class's action`, `:568` = `drift_pub → own action present …`), and the pins this item actually asked for are at **`:602`** (`drift_unparse → does not borrow the public class's action`) and **`:596`** (`drift_unparse → own diagnosis present …`) — no, `:598` for the **action** twin; all four located by grep, none guessed. **(93)**/**(97)(a)** — fires the moment the investor **approves or rejects** `hiring/queue/*.json` (0 unread, i.e. waiting on a decision, not on silence). **(e)** hand-run only. **(k)** — `systemctl --failed --no-legend` → **empty** at this run's open (rc 0); `crontab -l` carries its two standing lines (weekly `ip-drift-cron`, 15-min `red-watch`), read, never edited. The standing `SOA:gladex.de … mname=placeholder (NEEDS-INVESTOR open)` row is the investor's item, untouched. **(g)**, **(h)**, **(i)**, **(j)**, **(l)**, **(m)**, **(n)**, **(o)**, **(p)** DONE.

**The probe, run out of tree before a line of the block existed** (`/tmp/opencode/probe33/`, `build.py` writing both needles against a copy of `tools/ip-drift-cron`, nothing under `/data/repo` written): **M13**'s one-line needle counted **exactly once** (`grep -c` → 1 — its prefix `ACTION: run 'ip-drift-check …public_ip."` is distinct from the `exit 3` default arm's `ACTION="run 'ip-drift-check …its output."`), **M14**'s whole `if/elif/else` span counted **exactly once**, both copies `bash -n` clean and **`chmod +x`'d at build time** — the (p) run's `rc=126` lesson (mode-644 copies) applied instead of rediscovered. Control **280 passed / 0 failed** under `IPDRIFT_NO_LIVE=1`, then:

```
M13 (unparseable arm quotes the public ACTION)  275 passed,  5 failed, rc 1
    FAIL - drift_unparse → does not borrow the public class's action (unexpected: verify VPS IP 77.90.15.49 is still correct BEFORE touching DNS.)
M14 (unparseable <-> public ACTION exchange)    271 passed,  9 failed, rc 1
    FAIL - drift_unparse → own action present (the class-internal absences read a real log) (missing: run 'ip-drift-check --format json' by hand and read its public_ip.)
```

The queue's *"if either mutant survives, that is a real hole"* is closed **before the dict entries existed**: **neither survives, and each lands on its own pin**. M14's nine reds also include M13's borrow shape on the other arm (`drift_pub → does not borrow the unparseable class's action`), i.e. an exchange reddens both directions while a borrow reddens one — the asymmetry `control30` predicted for the swap class.

**What landed — three files, no code.** (1) **`M13`** dict entry (one `ACTION: ` line substituted, its comment naming why `M6` does not cover this: M6 makes the arm *unreachable* — a presence pin — which is a different defect from the arm **running and quoting a foreign class**) + **`M14`** dict entry (the same contiguous `if/elif/else` span M10/M12 use, **only the unparseable and public `ACTION:` bodies swapped**, tunnel arm untouched — which is what keeps M14 from collapsing into M13, the mirror of M12's untouched unparseable arm), and their **two `run_mutation` calls** pinned exactly as the queue specified; (2) **the battery header comment** extended with the third teeth reading; (3) **`tools/REGISTRY.md`** — battery **M1–M12 → M1–M14**, **332 → 340**, **12/12 → 14/14**, M13/M14's defects, pins, probe numbers (275/5, 271/9, control 280/0) and the redirect measurement, **plus the correction below**.

**A two-figure correction, measured in both directions rather than argued.** The chain has carried *"an out-of-tree copy runs 3 fewer assertions than an in-repo one, so 283 belongs to the in-repo control only"* since `[0.4.222]` — it is **wrong**, and this run read all four cells: in-repo **without** `IPDRIFT_NO_LIVE=1` → **283 / 0** · in-repo **with** it → **280 / 0** · out-of-tree (`/tmp/opencode/probe33/fake/`, `tests/` + `tools` copied) **without** it → **283 / 0** · out-of-tree **with** it → **280 / 0**. The three assertions that move are `live run exits a documented code (0)`, `live (no drift) → no alert`, `live run wrote its log inside the sandbox`, and `run_mutation` sets that env for **every** inner run — so the env, not the tree, is the whole 3-assertion gap. The wording is corrected in `tools/REGISTRY.md` and in the CHANGELOG entry; the probe32 "280 / 0" figures themselves stand — they were the no-live control all along.

**Verification (none carried from before the change).** `bash -n` → **OK** · `bash tests/test_ip_drift_cron.sh` → **283 passed / 0 failed** (a battery change adds nothing to the plain suite) · `bash tests/test_ip_drift_cron.sh --mutations` → **340 passed / 0 failed, rc 0**, **14** `run_mutation` calls, **14/14 mutants caught, 0 survived**, all four of M13's and M14's lines `ok` (measured, not the chain's arithmetic) · `bash tests/test_registry_coverage.sh` → **464 / 0** (read *after* the `REGISTRY.md` edit) · `bash tests/test_queue_source.sh` → **278 / 0** · `bash tests/test_repo_lint.sh` → **473 / 0** · `bash tests/test_leak_figure_readers.sh` → **41 / 0** · `tools/repo-lint` → **exit 0**, `all 184 linted file(s) parse clean`, **227 changelog version heading(s) / 227 unique / 7085 citations / 0 missing** read at `HEAD`, so `[0.4.223]` moves the committed figure **227 → 228** (worktree `grep -c '^## \['` → **228 / 228 unique**, measured) · `tools/queue-source-check` → **rc 1 with exactly one violation**, *"[0.4.223] is not named in agent-logs/PROGRESS.md"* — the detector working as designed on a CHANGELOG entry whose record did not exist yet, cleared by **this paragraph**, not by editing the detector · `./tools/healthcheck` → **exit 0**, dev **HEALTHY 200 `0.4.28`**, prod **HEALTHY 200 `0.4.28`** · `./tools/budget-show` → **5.00 / 0.00 / 5.00** (month 2026-10), spend this run **0.00** · census **90** suites / **26** tools (`./tools/regression-run --list` → `result: 90 suite(s) discovered`), no suite or tool added or removed, so `- Live:` stays **90**.

**The teeth, read a third time (the queue's "re-check the pin the same way").** In a fake tree (`/tmp/opencode/probe33/fake2/`, `tests/` + `tools` copied so `REPO=` resolves there) **both** M13's and M14's pins were redirected to `no drift → nothing appended to ALERTS` — an assertion both defects leave green which still prints its own `ok - …` line (its healthy `ok` line counted **once** in a clean run, so it is a real assertion and not a duplicate) → **335 passed / 2 failed, rc 1**, both reds `M13 →/M14 → wrong verdict is NOT the intended one (expected a failure of: 'no drift → nothing appended to ALERTS')`. Total **337** under `IPDRIFT_NO_LIVE=1` against **340** without it — the same 3-assertion env gap, consistent with the correction above.

**Dashboard read MID-RUN, every red named — all are this run's own deliberate half-finished state**: `tools/system-status` → `git-tree [WARN] 3 uncommitted changes`, `queue-source [FAIL] [0.4.223] …`, `red-watch [WARN] failed=12` (A3 tree clean, A4–A8 queue-source rc/violations — every one downstream of those two), `Overall: 1 CHECK(S) FAILED`; `./tools/red-watch` → `FAIL A16/A17/A18` (its own system-status-json reads, same cause) with `rc=0`. The two WARNs that are **not** this run's: `SOA:gladex.de … mname=placeholder (NEEDS-INVESTOR open)` (the investor's standing item) and the pre-existing `promote-gates` staleness (another desk's pending promotion — `dev tree differs from the repo in 2 file(s): src/php/landing.php, src/php/templates.php`, **not touched by this run**). Re-read after commit #1 in the closing memorandum below.

**Disclosures (shared tree, swept nothing).** `git status --porcelain` at write time lists exactly this run's four paths — `tests/test_ip_drift_cron.sh`, `tools/REGISTRY.md`, `CHANGELOG.md`, this entry — and nothing of another desk's; `origin/main...HEAD` → **0 0** at open. **`tools/ip-drift-cron` is byte-identical to its committed revision** (md5 **`2816126cb8bad48aabd03be621c2a60c`**, worktree and `git show HEAD:` read and equal) and `tools/system-status` likewise: **this run changed no code, only what proves it**, and **no `app/src/php` file was touched → no reviewer gate and no promote**: dev and prod both stay **0.4.28**. All probe artefacts — `build.py`, the M13/M14 mutants, the control and two replay logs, the redirected-pin fake tree, the in/out-of-tree control readings — live under `/tmp/opencode/probe33/` — **outside the repo, never committed**. **Zero DNS writes, no mail sent, no unit restarted, no `systemctl reset-failed`**, `crontab -l` untouched; spend **0.00** of the 5.00 October allowance, free `*-free` models only (`mimo-v2.6-flash-free`), no key configured, no secret or PII in any prompt, file or commit.

**Queue — next small step (read this first):**
**(r)** **M15/M16 — the `unparseable` arm's DIAGNOSIS half, the twin of what (q) did for its ACTION.** M13/M14 now cover what the third arm *tells the operator to do*; for what it *diagnoses*, that arm still has **no** borrow or exchange mutant — M6 only makes it *unreachable* (a presence pin), M9 only moves the `private-or-cgnat` arm and M10 only exchanges public↔tunnel. Add **M15** = the `unparseable` arm quoting the public class's `DIAGNOSIS` (`egress is NOT an IP address (public_ip could not be parsed).` → `egress is a public IP but differs from DNS.`), pinned to `drift_unparse → does not borrow the public class's diagnosis` (exists at `tests/test_ip_drift_cron.sh:600`); and **M16** = the unparseable and public arms **exchanging their diagnosis bodies** over the same `if/elif/else` span M10/M12/M14 use (tunnel arm untouched — the choice that keeps M16 from collapsing into M15, as M14's tunnel arm keeps it from M13), pinned to `drift_unparse → own diagnosis present (the four absences read a real log)` (exists at `:596`). **Probe first**, exactly as (o)/(p)/(q): build both needles against a copy of `tools/ip-drift-cron` in a fresh `/tmp/opencode/probe34/`, assert each occurs exactly once, `bash -n`, **`chmod +x` the copies**, replay through the suite under `IPDRIFT_NO_LIVE=1` (control **280/0** — the env, not the tree, as corrected this run) and write the failing assertion down **before** touching the `M{}` dict; if either survives, that is a real hole, not a formatting nit. Then the teeth re-check (redirect both pins to an assertion neither reddens → expect a `335/2`-shaped pair of `wrong verdict is NOT the intended one` reds under the same env) and refresh `REGISTRY.md`'s figures **measured after the run** (340 → 348, 14/14 → 16/16 — arithmetic only after the run says it). Standing, not actioned: **(93)**/**(97)(a)** fires on the investor's approve/reject of `hiring/queue/*.json` (0 unread at this close), **(e)** hand-run only, **(k)** clear, the `SOA:gladex.de … mname=placeholder` row is the investor's NEEDS-INVESTOR item.

**CLOSE PROTOCOL**: this entry is appended **before** the commit that carries it (rule 1); a second commit carrying closing measurements re-appends this entry first (rule 2); commits are **path-limited to named paths** (never `git add -A`), and `git status --porcelain` must not list `agent-logs/PROGRESS.md` at stop (rule 3); nothing of mine is checked out or reverted.
EOF
grep -c '^## ' agent-logs/PROGRESS.md; ./tools/queue-source-check; echo "qsc rc=$?"
326
queue-source-check: OK - one queue: [0.4.223] pointer-only, 111 item line(s) frozen across 178 section(s), 198 PROGRESS bullet(s), 1 path token(s)
qsc rc=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && grep -n "drift_unparse → own action present\|drift_unparse → does not borrow the public class's action\|drift_unparse → own diagnosis present\|drift_unparse → does not borrow the public class's diagnosis" tests/test_ip_drift_cron.sh
536:assert_has "drift_unparse → own action present (the four absences read a real log)" \
596:assert_has "drift_unparse → own diagnosis present (the four absences read a real log)" \
598:assert_has "drift_unparse → own action present (the class-internal absences read a real log)" \
600:assert_lacks "drift_unparse → does not borrow the public class's diagnosis" \
602:assert_lacks "drift_unparse → does not borrow the public class's action" \
1234:# defect reddens — `drift_unparse → own action present (the class-internal
1521:    run_mutation M13 "drift_unparse → does not borrow the public class's action"
1522:    run_mutation M14 'drift_unparse → own action present (the class-internal absences read a real log)'
> build · mimo-v2.6-flash-free
← Edit repo/agent-logs/PROGRESS.md
Index: repo/agent-logs/PROGRESS.md
===================================================================
--- repo/agent-logs/PROGRESS.md
+++ repo/agent-logs/PROGRESS.md
@@ -10862,9 +10862,9 @@
 ## 2026-10-05 free-builder run (constant task) — **STEP 0 owed nothing** + **queue item (q) EXECUTED: M13/M14, the THIRD class arm's turn — the `unparseable` arm's borrow and exchange mutants, plus a two-figure correction measured rather than inherited** — `tests/test_ip_drift_cron.sh --mutations` **332 → 340 passed / 0 failed, 14/14 mutants caught, 0 survived** — changelog **`[0.4.223]`**
 
 **STEP 0 — read first, paid before anything else, and nothing was owed.** `SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0** on `/opt/startup/dev/data/messages.db` and **0** on `/opt/startup/prod/data/messages.db` (one table `messages`; the predicate is `direction=… AND read=0`); newest row in each is **ours** (dev **144** / prod **109**, `agent_to_investor`, `read=1`); `./tools/inbox-status` → **exit 0**, *"OK - nothing owed (0 unread, 0 open entries all replied)"*; `INBOX.md` → **80 entries, 80 handled, 0 open**, read at run start (`grep '^## ' | grep -vc HANDLED` → **0**). Both entries in the run's INBOX block are `~~HANDLED~~` from earlier runs (the Marco Steiner hire proposal, 2026-10-04, reply dev 143 / prod 108; the operator's production-version correction, 2026-10-05T09:05Z, reply dev 144 / prod 109), so **no row was written, no row was marked read, and `INBOX.md` was not touched** — measured, not assumed. The operator's correction is honoured in every figure below: **production is 0.4.28**, read from `tools/healthcheck`; the `[0.4.29]` token in `CHANGELOG.md` is a 2026-09-24 *changelog heading* and is never quoted as a production claim.
 
-**The queue read.** **(q)** — *"**M13** = the `unparseable` arm quoting the public class's `ACTION` (`run 'ip-drift-check --format json' by hand and read its public_ip.` → `verify VPS IP 77.90.15.49 is still correct BEFORE touching DNS.`), pinned to `drift_unparse → does not borrow the public class's action`; **M14** = the unparseable and public arms **exchanging their action bodies** … pinned to `drift_unparse → own action present (the class-internal absences read a real log)` (both pins exist today at `tests/test_ip_drift_cron.sh:587` and `:568`). **Probe first, same as (o)** … if either survives, that is a real hole, not a formatting nit. Then re-check the pin the same way … and refresh the battery's `REGISTRY.md` figures (**324 → 332**, **10/10 → 12/12** — measured after the run, never arithmetic before it)"* — taken whole. First I re-read `git status --porcelain` (**clean** at this run's open) and `git rev-list --left-right --count origin/main...HEAD` → **0 0** (no sibling commits pending). Both pin lines were found where the queue's own text put them (`:587` = `drift_cgnat → does not borrow the public class's action`, `:568` = `drift_pub → own action present …`), and the pins this item actually asked for are at **`:602`** (`drift_unparse → does not borrow the public class's action`) and **`:596`** (`drift_unparse → own diagnosis present …`) — no, `:598` for the **action** twin; all four located by grep, none guessed. **(93)**/**(97)(a)** — fires the moment the investor **approves or rejects** `hiring/queue/*.json` (0 unread, i.e. waiting on a decision, not on silence). **(e)** hand-run only. **(k)** — `systemctl --failed --no-legend` → **empty** at this run's open (rc 0); `crontab -l` carries its two standing lines (weekly `ip-drift-cron`, 15-min `red-watch`), read, never edited. The standing `SOA:gladex.de … mname=placeholder (NEEDS-INVESTOR open)` row is the investor's item, untouched. **(g)**, **(h)**, **(i)**, **(j)**, **(l)**, **(m)**, **(n)**, **(o)**, **(p)** DONE.
+**The queue read.** **(q)** — *"**M13** = the `unparseable` arm quoting the public class's `ACTION` (`run 'ip-drift-check --format json' by hand and read its public_ip.` → `verify VPS IP 77.90.15.49 is still correct BEFORE touching DNS.`), pinned to `drift_unparse → does not borrow the public class's action`; **M14** = the unparseable and public arms **exchanging their action bodies** … pinned to `drift_unparse → own action present (the class-internal absences read a real log)` (both pins exist today at `tests/test_ip_drift_cron.sh:587` and `:568`). **Probe first, same as (o)** … if either survives, that is a real hole, not a formatting nit. Then re-check the pin the same way … and refresh the battery's `REGISTRY.md` figures (**324 → 332**, **10/10 → 12/12** — measured after the run, never arithmetic before it)"* — taken whole. First I re-read `git status --porcelain` (**clean** at this run's open) and `git rev-list --left-right --count origin/main...HEAD` → **0 0** (no sibling commits pending). Both pin lines were found where the queue's own text put them (`:587` = `drift_cgnat → does not borrow the public class's action`, `:568` = `drift_pub → own action present …`), and the two pins **this** item asked for were located by grep, none guessed: **`:602`** `drift_unparse → does not borrow the public class's action` (M13) and **`:598`** `drift_unparse → own action present (the class-internal absences read a real log)` (M14). **(93)**/**(97)(a)** — fires the moment the investor **approves or rejects** `hiring/queue/*.json` (0 unread, i.e. waiting on a decision, not on silence). **(e)** hand-run only. **(k)** — `systemctl --failed --no-legend` → **empty** at this run's open (rc 0); `crontab -l` carries its two standing lines (weekly `ip-drift-cron`, 15-min `red-watch`), read, never edited. The standing `SOA:gladex.de … mname=placeholder (NEEDS-INVESTOR open)` row is the investor's item, untouched. **(g)**, **(h)**, **(i)**, **(j)**, **(l)**, **(m)**, **(n)**, **(o)**, **(p)** DONE.
 
 **The probe, run out of tree before a line of the block existed** (`/tmp/opencode/probe33/`, `build.py` writing both needles against a copy of `tools/ip-drift-cron`, nothing under `/data/repo` written): **M13**'s one-line needle counted **exactly once** (`grep -c` → 1 — its prefix `ACTION: run 'ip-drift-check …public_ip."` is distinct from the `exit 3` default arm's `ACTION="run 'ip-drift-check …its output."`), **M14**'s whole `if/elif/else` span counted **exactly once**, both copies `bash -n` clean and **`chmod +x`'d at build time** — the (p) run's `rc=126` lesson (mode-644 copies) applied instead of rediscovered. Control **280 passed / 0 failed** under `IPDRIFT_NO_LIVE=1`, then:
 
 ```

> build · mimo-v2.6-flash-free
$ cd /data/repo && git status --porcelain && git add -- tests/test_ip_drift_cron.sh tools/REGISTRY.md CHANGELOG.md agent-logs/PROGRESS.md && git commit -q -m "[0.4.223] queue item (q): M13/M14 — the third class arm's borrow and exchange mutants (mutations 332 -> 340/0, 14/14 caught; probe 275/5 and 271/9 recorded before the dict entries existed; teeth re-read a third time, 335/2 when both pins are redirected) plus the IPDRIFT_NO_LIVE 3-assertion correction measured in all four cells; PROGRESS entry appended before this commit" -- tests/test_ip_drift_cron.sh tools/REGISTRY.md CHANGELOG.md agent-logs/PROGRESS.md && git log --oneline -1 && git status --porcelain; echo "porcelain-empty-if-blank"; git push origin main 2>&1 | tail -3; git status -sb | head -1
M CHANGELOG.md
 M agent-logs/PROGRESS.md
 M tests/test_ip_drift_cron.sh
 M tools/REGISTRY.md
bc1dc3f [0.4.223] queue item (q): M13/M14 — the third class arm's borrow and exchange mutants (mutations 332 -> 340/0, 14/14 caught; probe 275/5 and 271/9 recorded before the dict entries existed; teeth re-read a third time, 335/2 when both pins are redirected) plus the IPDRIFT_NO_LIVE 3-assertion correction measured in all four cells; PROGRESS entry appended before this commit
porcelain-empty-if-blank
To git://git.gladex.de/gladex.git
   0dce0b1..bc1dc3f  main -> main
## main...origin/main
> build · mimo-v2.6-flash-free
$ cd /data/repo && md5sum tests/test_ip_drift_cron.sh; git show HEAD:tests/test_ip_drift_cron.sh | md5sum; bash -n tests/test_ip_drift_cron.sh && echo "bash -n OK"; bash tests/test_ip_drift_cron.sh 2>&1 | tail -1; bash tests/test_ip_drift_cron.sh --mutations 2>&1 | tail -1; grep -c "^    run_mutation M" tests/test_ip_drift_cron.sh; ./tools/queue-source-check; echo "qsc rc=$?"; ./tools/repo-lint 2>&1 | grep -E "changelog-version|result:"
2bc9a029fe95e5f203961244001591d6  tests/test_ip_drift_cron.sh
2bc9a029fe95e5f203961244001591d6  -
bash -n OK
=== Results: 283 passed, 0 failed ===
=== Results: 340 passed, 0 failed ===
14
queue-source-check: OK - one queue: [0.4.223] pointer-only, 111 item line(s) frozen across 178 section(s), 198 PROGRESS bullet(s), 1 path token(s)
qsc rc=0
  changelog-version: 228 changelog version heading(s), 228 unique, 7097 citation(s) checked, 0 missing, 6935 bare token(s) counted
result: all 184 linted file(s) parse clean (exit 0)
$ cd /data/repo && for t in test_registry_coverage test_queue_source test_repo_lint test_leak_figure_readers; do printf '%s: ' "$t"; timeout 600 bash tests/$t.sh 2>&1 | grep -Ei "suite: .*passed" | tail -1; done; echo "--- monitor ---"; timeout 600 bash tests/test_gladex_monitor.sh 2>&1 | tail -3; echo "--- red-watch ---"; ./tools/red-watch; echo "rw rc=$?"
test_registry_coverage: test_queue_source: queue-source-check suite: 278 passed, 0 failed
test_repo_lint: repo-lint suite: 473 passed, 0 failed
test_leak_figure_readers: leak-figure-readers suite: 41 passed, 0 failed
--- monitor ---
passed: 30
failed: 0
summary: 30 assertions, 30 passed, 0 failed
--- red-watch ---
red-watch: state=green monitor_exit=0 passed=30 failed=0 alert=none
  log=/data/agent-logs/red-watch-20261005.log
  alerts=/data/agent-logs/red-watch-ALERTS.log
rw rc=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && timeout 600 ./tools/system-status 2>&1 | grep -E "^\s+(git-tree|red-watch|queue-source|investor|failed-units|SOA|promote-gates)" ; timeout 600 ./tools/system-status 2>&1 | tail -2; echo "rc=$?"; systemctl --failed --no-legend; echo "failed-rc=$?"
investor-app-dev          [OK] active
  investor-app-prod         [OK] active
  failed-units              [OK] 0 failed unit(s)
  SOA:gladex.de             [WARN] serial=2026092602 consistent on 1.1.1.1+8.8.8.8; mname=placeholder (NEEDS-INVESTOR open)
  investor-messages         [OK] 0 unread dev=0 prod=0
  investor-duty             [OK] owed=0 unread=0 unreplied=0 open=0
  git-tree                  [OK] clean
  red-watch                 [OK] green, 2m old (updated 2026-10-05T20:35:44Z)
  queue-source              [OK] one queue: [0.4.223] pointer-only, 111 item line(s) frozen across 178 section(s), 198 PROGRESS bullet(s), 1 path token(s)
  promote-gates             [WARN] not promotable since 2026-10-04T15:00:25Z (1d 5h ago): verdict REFUSED: verdict VERDICT-20261004T150009-promote-footer-version-and-focus-visible.md is STALE (promoted source [app/src/php, examples/workflows] changed 91070s after it | dev-sync REFUSED: dev tree differs from the repo in 2 file(s): src/php/landing.php (differs), src/php/templates.php (differs) \u2014 this promotion copies REPO -> prod, so

Overall: ALL SYSTEMS HEALTHY
rc=0
failed-rc=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Mon Oct  5 22:37:49 2026] 127.0.0.1:54486 Accepted
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54486 Closing
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54492 Accepted
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54492 Closing
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54500 Accepted
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54500 Closing
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54502 Accepted
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54502 Closing
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54508 Accepted
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54508 Closing
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54520 Accepted
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54520 Closing
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54524 Accepted
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54524 Closing
[Mon Oct  5 22:37:49 2026] 127.0.0.1:54528 Accepted
[Mon Oct  5 22:37:50 2026] 127.0.0.1:54528 Closing
[Mon Oct  5 22:37:50 2026] 127.0.0.1:54542 Accepted
[Mon Oct  5 22:37:50 2026] 127.0.0.1:54542 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59234 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59234 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59246 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59246 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59252 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59252 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59266 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59266 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59272 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59272 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59282 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59282 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59296 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59296 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59306 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59306 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59320 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59320 Closing
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59322 Accepted
[Mon Oct  5 22:38:37 2026] 127.0.0.1:59322 Closing
[Mon Oct  5 22:40:42 2026] 127.0.0.1:44024 Accepted
[Mon Oct  5 22:40:42 2026] 127.0.0.1:44024 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 22:40:42 2026] 127.0.0.1:44024 Closing
[Mon Oct  5 22:40:43 2026] 127.0.0.1:44028 Accepted
[Mon Oct  5 22:40:43 2026] 127.0.0.1:44028 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 22:40:43 2026] 127.0.0.1:44028 Closing
[Mon Oct  5 22:41:19 2026] 127.0.0.1:54760 Accepted
[Mon Oct  5 22:41:19 2026] 127.0.0.1:54760 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 22:41:19 2026] 127.0.0.1:54760 Closing
[Mon Oct  5 22:41:20 2026] 127.0.0.1:54774 Accepted
[Mon Oct  5 22:41:20 2026] 127.0.0.1:54774 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 22:41:20 2026] 127.0.0.1:54774 Closing
[Mon Oct  5 22:41:33 2026] 127.0.0.1:35160 Accepted
[Mon Oct  5 22:41:33 2026] 127.0.0.1:35160 Closing
[Mon Oct  5 22:41:58 2026] 127.0.0.1:47902 Accepted
[Mon Oct  5 22:41:58 2026] 127.0.0.1:47902 Closing
[Mon Oct  5 22:42:22 2026] 127.0.0.1:51806 Accepted
[Mon Oct  5 22:42:22 2026] 127.0.0.1:51806 Closing
[Mon Oct  5 22:44:25 2026] 127.0.0.1:41370 Accepted
[Mon Oct  5 22:44:25 2026] 127.0.0.1:41370 Closing
[Mon Oct  5 22:44:25 2026] 127.0.0.1:41380 Accepted