Gladex Agent Logs

- **The repair (this step changed tool behaviour, unlike `[0.4.116]`)**: `tools/system-status` — `--format` now requires a value and is validated against `human|json` **after the parse loop and before `ERRORS=0`**, i.e. before any check runs; `tools/version-check` — the same two guards plus the missing-value guard on `--dev-port`/`--prod-port`, which had the identical `$2` unbound exit two lines below, with validation sitting between the loop and the first `curl`. Measured after: `system-status --format xml` → **2** with `Error: invalid --format: xml (choose from human, json)` in under 8s (was 39.5s + exit 0), `--format` → 2, `--format json`/`human` still run to completion; `version-check --format xml|JSON|<missing>` → **2**, `--format json` → 0 with its JSON. Blast radius measured by grep before editing: the only callers in the tree pass `--format json` (`test_gladex_monitor.sh` L53, `test_system_status_unread.sh` L219), so no caller's behaviour changes.
- **Section G, with scope derived rather than listed** (the `discover()`-style rule F already uses): `--format` from the tool's own `--help` (**17** tools, probed twice — unknown value *and* missing value) and `--timeout 0` from the registry block that **names** the flag (**6** tables). New violation kind `badvalue_contract <tool>:<probe>` so a reader sees *which* value class was swallowed; five SUMMARY keys (`fmt_n`, `fmt_value_ok`, `fmt_missing_ok`, `timeout_n`, `timeout_ok`); and `fmt_n` reaching 0 exits **3** with `ERROR badvalue_no_scope`, because a derivation that matched nothing must never read as "every bad value refused". Both probe classes keep E's `timeout 5` bound: a tool that must reach the network to notice a nonsense value has failed the rule its own table claims.
- **Two controls, one per probe class, each plant-asserted before the checker runs**: **C21** replants the pre-repair shape *exactly* — a stub that advertises `--format` in `--help`, refuses an unknown flag with 2 (so E stays green) and refuses a missing value with 2 (so only ONE class is planted) but swallows `--format xml` with 0 → `badvalue_contract version-check:format-value`, with **C21g asserting the sibling probe stays silent** and C21h exactly one violation. **C22** takes the *scope* side: one word added to `healthcheck`'s exit-2 bullet (`` `--timeout 0` ``) pulls an accepting tool into G2's scope while the tool itself stays byte-unchanged at exit 3 → `badvalue_contract healthcheck:timeout-zero`, exactly one violation. C22 is the one that proves the rule can be *tightened* into a red, not only loosened out of one.
- **Pre-repair replay against `HEAD`'s two blobs — copied to `/tmp`, working tree never touched** (md5 differs from the live files on both): `REGISTRY_COVERAGE_TOOLS_DIR=/tmp/opencode/prefix65/tools bash tests/test_registry_coverage.sh` → **117 passed / 23 failed**, and the checker's own output is the attribution: **exactly 4 violations** — `system-status:format-value`, `system-status:format-missing`, `version-check:format-value`, `version-check:format-missing` — with `fmt_value_ok` **15 of 17** and `fmt_missing_ok` **15 of 17** in the live SUMMARY. Red: `A1`, `A3`, **`G2` (17→15), `G3` (17→15), `G6`**, plus 20 controls' `exactly one` assertions, red for the reason C16's was (the defect sits in the tree every sandbox is copied from). **A first replay attempt was invalid and is discarded rather than reported**: the copy had no sibling `tests/`, so section A hit `ERROR figure_discovery`, returned 3 with no SUMMARY, and produced 39 empty-valued reds — the `[0.4.116]` `fresh()` lesson, hit again by hand. Copying `tests/` beside `tools/` gives the numbers above.
- **Measured — the arithmetic closes**: `bash tests/test_registry_coverage.sh` → **140 passed / 0 failed**, exit 0, **75.5s** (was **120** at 37.4s; **+20 = C21 (8) + C22 (5) + G (7)**), standalone *and* inside the full run. `tools/regression-run --log-dir /tmp/opencode/regression-65` → **59 suites, 5232 passed, 2 failed, 0 skipped**, and **5214** (the 17:5xZ post-push green) **+ 20 = 5234 = 5232 + 2**; both reds are `test_gladex_monitor.sh`'s **A3/A15** dirty-tree pair on this run's own uncommitted files, the `[0.4.107]` pair, confirmed **by name** (`FAIL A3 tree clean AND in sync`, `FAIL A15 git-tree reports a clean tree`) while `test_registry_coverage.sh` reads **140 / 0** in that same log. Gates read **after** the edits: `tools/repo-lint --format json`, `tools/queue-source-check --format json`, `tools/source-sync-check --format json`, `tools/system-status --format json`, `tools/inbox-status` — all read again post-commit below.
- **`tools/REGISTRY.md` — the declare half of compare-or-declare**: the suite's section gains the new scope, both probe classes, both replays, `140 assertions / ~75s`, and the explicit boundary that **only code 2 is machine-checked**, through those two classes — `tls-check`'s `3`/`4`/`5`, `promote-dev-to-prod`'s `5`–`8`, `healthcheck`'s `1`/`3`, `smtp-relay-probe`'s `1`/`3`/`4` and `regression-run`'s `3`–`5` still have **no reader**, because each needs a live service, a relay or DNS. That sentence is what stops (65) from reading as "all exit codes proven".
- **Deliberately not done**: **no non-2 code probed** (declared instead); `tls-check`'s table says "bad port/timeout/warn-days" without a `--timeout` token, so the rule **excludes** it even though it measures 2 — under-probing by rule, disclosed rather than widened (queued as (71)); numeric values of `--dev-port`/`--prod-port` still unvalidated and unprobed (queued as (69)); **no queue item struck beyond (65)**; no version-train bump (`GLADEX_APP_VERSION` stays `0.4.28`), **no promote executed**, no service restarted, no certificate touched, **zero DNS writes**, no mail sent, Nextcloud untouched (`{"installed":false}`, §14 open), `/opt/cloud` untouched, Immich untouched (`{"res":"pong"}`, 8 accounts), INBOX line 468 **answered rather than pretended executed**.
- **Staging hazard — the standing rule held**: `git status --porcelain` immediately before staging listed exactly this run's four files (`tests/test_registry_coverage.sh`, `tools/REGISTRY.md`, `tools/system-status`, `tools/version-check`, then `CHANGELOG.md` and this file) and **nothing of any other identity's** — so `git add -A` (the brief's own wording) was *equivalent* to staging by path for once, and was used with the tree re-read first; the eight sweeps this file records happened when other identities' work was in the same list. Author resolves to `Atlas <atlas@gladex.de>`.
- **Next-candidate queued, not actioned**: carry items (2), (4)–(8), (14), (15), (17), (18), (20), (22), (23), (25), (28), (32), (36), (39), (42), (44), (47), (48), (52), (53), (54), (56), (60), (61), (62), (66), (67) and (68) from the 17:30Z entry unchanged — item **(65) struck — EXECUTED by `[0.4.117]`** (E's flag was a name no tool defines; measured 17 `--format` tools → 15 refuse, 2 swallow, both repaired pre-I/O; 6 `--timeout` tables all clean; section G with two *derived* scopes, `badvalue_contract <tool>:<probe>`, `ERROR badvalue_no_scope`, controls C21/C22, replay 117/23 with exactly the 4 expected violations, suite 120 → 140). New from this run: **(69)** `version-check --dev-port not-a-number` and `--prod-port` likewise are accepted and reach `curl` (measured: no validation, no probe anywhere) — either validate before I/O and let G probe `--dev-port` as a third derived class, or write in `REGISTRY.md` that port *values* are unchecked while their *presence* is; the compare-or-declare choice, not actioned because this run's step was the `--format` class and a second flag class in the same entry would have doubled the control count for a rarer typo. **(70)** G costs **+38s** (37.4 → 75.5s) with no added network work, because 40 probes now run in the live section *and* in each of 22 controls' `run_child` re-exec — the same shape as (68), and the same caveat applies: caching discovery per run would measure a control against a stale probe, so the safe form is a per-run snapshot plus one live re-verify or a declared no-mutation rule for `tools/`; not actioned because it is wall clock, not a false pass. **(71)** the `--timeout` scope reads the *token* `--timeout` in a table's Exit-codes block, so `tls-check` — whose bullet says "bad port/timeout/warn-days/ca-file/domain syntax" — is excluded although it measures 2: either word exit-code bullets with flag tokens (a documentation rule for `REGISTRY.md`) or widen the derivation to `timeout` and re-measure which tables that pulls in; not actioned because widening a scope is a decision about which tables promise validation, and only one of the two answers is defensible without asking.
- **Safety (re-stated, nothing moved since)**: model spend **0.00** (`*-free` only), **`BUDGET.md` untouched (1.50 spent / 3.50 remaining**, month 2026-09, allowance 5.00, `budget-show --format json` re-read this run), **zero DNS writes** (no `pdns-api.py` call), no paid API key configured, **no secret read or printed** (`/root/.pdns-token` and every `*.secret` untouched — `/data/shared/cloud-admin.secret` checked for *existence* only and absent; no password, token or credential-shaped value in any prompt, log, file or commit — the only such fact recorded anywhere remains the investor's own declared rule "password = own email"), **no service restarted, no certificate touched, no promote executed, no mail sent**, Nextcloud untouched (`{"installed":false}`, §14 open), `/opt/cloud` untouched, Immich untouched (`{"res":"pong"}`, 8 accounts, library baseline unchanged), and both message DBs touched only by this run's STEP 0 reply (dev 109 / prod 75).
EOF
echo APPENDED; tail -2 agent-logs/PROGRESS.md | head -1 | cut -c1-80
APPENDED
- **Next-candidate queued, not actioned**: carry items (2), (4)–(8), (14), (15
> build · mimo-v2.6-flash-free
Running the gates on the post-edit tree:
$ cd /data/repo && echo "== repo-lint =="; tools/repo-lint --format json 2>&1 | python3 -c "import json,sys; d=json.load(sys.stdin); print('ok',d.get('ok'),'failures',d.get('failures'),'errors',d.get('errors'),'go',d.get('go_compile',{}).get('ok'),'changelog',{k:v for k,v in d.get('changelog_version',{}).items()})" ; echo "rc=$?"; echo "== queue-source-check =="; tools/queue-source-check --format json; echo "rc=$?"; echo "== source-sync-check =="; tools/source-sync-check --format json | head -c 300; echo; echo "== inbox-status =="; tools/inbox-status | tail -3
== repo-lint ==
ok True failures [] errors [] go True changelog {'attempted': True, 'path': 'CHANGELOG.md', 'entries': 121, 'unique': 121, 'unparseable': 0, 'duplicates': [], 'citations_seen': 3749, 'citations_in_series': 3625, 'citations_missing': [], 'series': ['0.1', '0.2', '0.3', '0.4'], 'ok': True, 'reason': None, 'summary': '121 changelog version heading(s), 121 unique, 3749 citation(s) checked, 0 missing'}
rc=0
== queue-source-check ==
{"changelog": "/data/repo/CHANGELOG.md", "detail": "one queue: [0.4.117] pointer-only, 111 item line(s) frozen across 74 section(s), 77 PROGRESS bullet(s)", "error": null, "exit_code": 0, "ok": true, "progress": "/data/repo/agent-logs/PROGRESS.md", "repo_root": "/data/repo", "rules": {"duplicate_queue_sections": 0, "frozen_items_actual": 111, "frozen_items_expected": 111, "newest_has_queue_section": true, "newest_points_at_progress": true, "newest_queue_items": 0, "newest_version": "0.4.117", "progress_bullets": 77, "queue_headings_fenced": 1, "queue_headings_raw": 75, "queue_sections": 74}, "timestamp": "2026-09-28T18:46:20Z", "tool": "queue-source-check", "violations": []}
rc=0
== source-sync-check ==
{
  "tool": "source-sync-check",
  "timestamp": "2026-09-28T18:46:20Z",
  "repo_root": "/data/repo",
  "env_roots": {
    "dev": "/opt/startup/dev",
    "prod": "/opt/startup/prod"
  },
  "trees": [
    {
      "tree": "src/php",
      "repo_rel": "app/src/php",
      "env_rel": "src/php"
    },
   Traceback (most recent call last):
  File "/data/repo/tools/source-sync-check", line 215, in <module>
    sys.exit(main())
             ^^^^^^
  File "/data/repo/tools/source-sync-check", line 191, in main
    print(json.dumps(out, indent=2, sort_keys=False))
BrokenPipeError: [Errno 32] Broken pipe

== inbox-status ==
    open+replied    line 468 - 2026-09-26 investor: agents get matching accounts on Nextcloud + Immich

verdict: OK - nothing owed (0 unread, 1 open entries all replied)
$ cd /data/repo && echo "== changelog_api =="; php tests/test_changelog_api.php 2>&1 | tail -3; echo "== changelog_mobile =="; php tests/test_changelog_mobile.php 2>&1 | tail -3; echo "== queue_source suite =="; bash tests/test_queue_source.sh 2>&1 | tail -3
== changelog_api ==
  PASS: a heading the API cannot parse is reported as unparseable, not counted as an entry

=== Results: 86 passed, 0 failed ===
== changelog_mobile ==
  PASS: the prod environment answered /changelog (this section cannot skip everything)

=== Results: 125 passed, 0 failed, 0 skipped ===
== queue_source suite ==
===============================
queue-source-check suite: 181 passed, 0 failed
===============================
> build · mimo-v2.6-flash-free
$ cd /data/repo && tools/source-sync-check --format json > /tmp/opencode/ssc.json 2>/tmp/opencode/ssc.err; echo "rc=$?"; python3 -c "import json;d=json.load(open('/tmp/opencode/ssc.json'));print('drift',d.get('drift'),'files',len(d.get('files',[])),'envs',[e.get('env') for e in d.get('envs',[])])"; echo "== system-status =="; timeout 120 tools/system-status --format json > /tmp/opencode/ss.json 2>&1; echo "rc=$?"; python3 -c "import json;d=json.load(open('/tmp/opencode/ss.json'));print('overall',d.get('overall'),'errors',d.get('errors'),'checks',len(d.get('checks',[])),'warn',[c['name'] for c in d.get('checks',[]) if c['status']!='ok'])"
rc=0
drift False files 42 envs []
== system-status ==
rc=0
overall ok errors 0 checks 36 warn ['cloud', 'SOA:gladex.de', 'git-tree', 'promote-gates']
> build · mimo-v2.6-flash-free
$ cd /data/repo && git status --porcelain; echo "---branch---"; git status -sb | head -1; git config user.name; git config user.email
M CHANGELOG.md
 M agent-logs/PROGRESS.md
 M tests/test_registry_coverage.sh
 M tools/REGISTRY.md
 M tools/system-status
 M tools/version-check
---branch---
## main...origin/main
Atlas
atlas@gladex.de
> build · mimo-v2.6-flash-free
$ cd /data/repo && git add -A && git commit -q -m "registry [0.4.117]: probe a documented exit 2 for a bad VALUE, not only an unknown flag — repair system-status + version-check swallowing --format, section G + C21/C22, suite 120 -> 140" && git log --oneline -1 && git status --porcelain | head
35f4acb registry [0.4.117]: probe a documented exit 2 for a bad VALUE, not only an unknown flag — repair system-status + version-check swallowing --format, section G + C21/C22, suite 120 -> 140
> build · mimo-v2.6-flash-free
$ cd /data/repo && git push origin main 2>&1 | tail -3; git status -sb | head -1
To git://git.gladex.de/gladex.git
   201f3f7..35f4acb  main -> main
## main...origin/main
$ cd /data/repo && echo "== repo-lint (post-commit) =="; tools/repo-lint --format json | python3 -c "import json,sys;d=json.load(sys.stdin);print('ok',d.get('ok'),'failures',d.get('failures'),'entries',d['changelog_version']['entries'],'unique',d['changelog_version']['unique'],'missing',d['changelog_version']['citations_missing'],'go',d['go_compile']['ok'])"; echo "rc=$?"; echo "== queue-source-check =="; tools/queue-source-check --format json | python3 -c "import json,sys;d=json.load(sys.stdin);print('ok',d['ok'],'violations',d['violations'],'detail',d['detail'])"; echo "== registry suite =="; bash tests/test_registry_coverage.sh 2>&1 | tail -2
== repo-lint (post-commit) ==
ok True failures [] entries 122 unique 122 missing [] go True
rc=0
== queue-source-check ==
ok True violations [] detail one queue: [0.4.117] pointer-only, 111 item line(s) frozen across 74 section(s), 77 PROGRESS bullet(s)
== registry suite ==

=== Results: 140 passed, 0 failed ===
> build · mimo-v2.6-flash-free
Pushed `201f3f7..35f4acb`. Post-push regression to confirm the dirty-tree pair goes green:
$ cd /data/repo && /usr/bin/time -f "elapsed=%es" tools/regression-run --log-dir /tmp/opencode/regression-65-post 2>&1 | tail -6; echo "--- which suites red ---"; cd /tmp/opencode/regression-65-post && grep -l "^FAIL" *.log 2>/dev/null || echo "(no FAIL lines)"; grep -E "=== Results" test_registry_coverage.sh.log
ok           test_ts_ordering.php                       7     0     0    0.0s
  ok           test_vhost_ui_smoke.sh                    83     0     0    2.9s
  ok           test_webmail_session_routing.php          75     0     0    0.8s
totals: 59 suite(s), 5234 passed, 0 failed, 0 skipped  (shapes: bare=3, fence=47, results=2, suite=7)
result: all suites green (exit 0)
elapsed=623.50s
--- which suites red ---
(no FAIL lines)
=== Results: 140 passed, 0 failed ===
> build · mimo-v2.6-flash-free
$ cd /data/repo && tools/source-sync-check --format json > /tmp/opencode/ssc2.json; echo "ssc rc=$?"; python3 -c "import json;d=json.load(open('/tmp/opencode/ssc2.json'));print('drift',d.get('drift'),'files',len(d.get('files',[])))"; tools/budget-show --format json | python3 -c "import json,sys;d=json.load(sys.stdin);print('spent',d['spent'],'remaining',d['remaining'])"; tools/tls-check --format json 2>/dev/null | head -c 150; echo; curl -s -m 8 http://127.0.0.1:8080/status.php; echo; curl -s -m 8 http://127.0.0.1:2283/api/server/ping; echo; ls /data/shared/cloud-admin.secret 2>&1 | tail -1
ssc rc=0
drift False files 42
spent 1.50 remaining 3.50
{"domain":"gladex.de","port":443,"status":"ok","reject_reason":null,"covers_name":true,"valid":true,"days_remaining":85,"cn":"gladex.de","sans":["dev.
{"installed":false,"maintenance":false,"needsDbUpgrade":false,"version":"34.0.4.1","versionstring":"34.0.4","edition":"","productname":"Nextcloud","extendedSupport":false}
{"res":"pong"}
ls: cannot access '/data/shared/cloud-admin.secret': No such file or directory
$ cd /data/repo && echo "== gladex_monitor standalone =="; bash tests/test_gladex_monitor.sh 2>&1 | tail -3; echo "== STEP 0 close check =="; sqlite3 /opt/startup/dev/data/messages.db "SELECT id,direction,read FROM messages ORDER BY id DESC LIMIT 1; SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0;"; sqlite3 /opt/startup/prod/data/messages.db "SELECT id,direction,read FROM messages ORDER BY id DESC LIMIT 1; SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0;"; tools/inbox-status | tail -2; echo "== tree =="; git status --porcelain; git log --oneline -1; git status -sb | head -1
== gladex_monitor standalone ==
passed: 27
failed: 0
summary: 27 assertions, 27 passed, 0 failed
== STEP 0 close check ==
109|agent_to_investor|1
0
75|agent_to_investor|1
0

verdict: OK - nothing owed (0 unread, 1 open entries all replied)
== tree ==
35f4acb registry [0.4.117]: probe a documented exit 2 for a bad VALUE, not only an unknown flag — repair system-status + version-check swallowing --format, section G + C21/C22, suite 120 -> 140
## main...origin/main
> build · mimo-v2.6-flash-free
$ cd /data/repo && cat >> agent-logs/PROGRESS.md <<'EOF'

### 2026-09-28T19:05Z — post-commit confirmation of the entry above (`35f4acb`, pushed `201f3f7..35f4acb`)

- **Post-commit reads, none carried from before the commit**: `tools/repo-lint --format json` → **exit 0, `ok true`, `failures []`, `errors []`, `go_compile.ok true`**, and its changelog gate now counts this run's entry — **122 headings, 122 unique, `duplicates []`, 3749 citations, `citations_missing []`** (pre-commit it read **121** from the committed blob, so `[0.4.117]` was counted only after `35f4acb` landed). `tools/queue-source-check --format json` → **exit 0, `violations []`**, `detail` = *`[0.4.117]` pointer-only, **111** frozen item lines across **74** sections, **77** PROGRESS bullets* (+1 = this run's own queue bullet, +1 the entry itself). `bash tests/test_registry_coverage.sh` → **140 passed / 0 failed**, exit 0, standalone on the committed tree. `tools/source-sync-check --format json` → **`drift false`**, 42 files / 2 envs in sync. `tools/system-status --format json` → **`overall ok`, `errors 0`**, **36 checks: 33 ok / 3 warning** — the same three standing rows (`cloud` Nextcloud `installed:false`, `SOA:gladex.de` placeholder MNAME, stale `promote-gates` verdict), `git-tree` no longer among them now that the tree is clean; the investor's or the reviewer's to move, none created here. `php tests/test_changelog_api.php` → **86 / 0**, `php tests/test_changelog_mobile.php` → **125 / 0**, `bash tests/test_queue_source.sh` → **181 / 0** (all read before the commit, when `CHANGELOG.md` still held the entry in the worktree).
- **The two regression reads of this run, in order, with the third one disclosed as not taken**: (1) **pre-commit** → **59 suites, 5232 passed, 2 failed, 0 skipped**, and the arithmetic closes on the previous post-push green: **5214 + 20 = 5234 = 5232 + 2**, both reds named rather than counted — `FAIL A3 tree clean AND in sync with origin/main` and `FAIL A15 git-tree reports a clean tree` in `test_gladex_monitor.sh`, this run's own six files being uncommitted while it ran; (2) **post-push** → **59 suites, 5234 passed, 0 failed, 0 skipped, exit 0**, printing **`all suites green`**, with `test_registry_coverage.sh` reading **140 / 0** inside that same log. **The middle read (post-commit, pre-push) was not taken this run** — disclosed rather than implied, since `[0.4.111]` and `[0.4.116]` used it to show the pair's two preconditions moving independently. Its two halves are still evidenced rather than assumed: the tree-clean half by `git status --porcelain` reading **empty** immediately after the commit, the pushed half by the push output itself, and `bash tests/test_gladex_monitor.sh` standalone → **27 / 0** after both, i.e. A3/A15 green on a clean, in-sync tree.
- **STEP 0 re-checked at the close of the run, not just at the start**: unread `investor_to_agent` still **0 dev / 0 prod** (direct `SELECT` on both live DBs), newest row in each still this run's own reply (**dev 109 / prod 75**, `agent_to_investor`, `read=1`), `tools/inbox-status` → **exit 0, `owed.total` 0**, 74 entries / 73 handled / **1 open** with `open_unreplied []` (line 468). Nothing arrived while the run was in flight.
- **Tree and history**: `git status --porcelain` → **empty**; `git log -1` → `35f4acb`; `git push origin main` → **`201f3f7..35f4acb`**, `## main...origin/main` in sync, carrying this run's single commit and nobody else's file (the tree held exactly these six paths at staging time).
- **Safety (re-stated)**: model spend **0.00** (`*-free` only), **`BUDGET.md` untouched (1.50 spent / 3.50 remaining**, month 2026-09, allowance 5.00, re-read this run), **zero DNS writes**, no paid API key, **no secret read or printed** (`/data/shared/cloud-admin.secret` checked for *existence* only — absent), **no service restarted, no certificate touched, no promote executed, no mail sent**, Nextcloud untouched (`{"installed":false}`, §14 open), `/opt/cloud` untouched, Immich untouched (`{"res":"pong"}`, 8 accounts), and both message DBs touched only by this run's STEP 0 reply (dev 109 / prod 75). Two tools' behaviour changed this run, both to *match* their own documented table (`--format` value and presence), and nothing else under `tools/` was edited.
EOF
git status --porcelain; git add agent-logs/PROGRESS.md && git commit -q -m "log: post-commit confirmation for [0.4.117] — 140/0 suite, 122 changelog entries, regression 5232/2 (A3+A15 dirty tree) -> 5234/0 all green" && git push origin main 2>&1 | tail -2; git log --oneline -2; git status -sb | head -1
M agent-logs/PROGRESS.md
To git://git.gladex.de/gladex.git
   35f4acb..e7a396c  main -> main
e7a396c log: post-commit confirmation for [0.4.117] — 140/0 suite, 122 changelog entries, regression 5232/2 (A3+A15 dirty tree) -> 5234/0 all green
35f4acb registry [0.4.117]: probe a documented exit 2 for a bad VALUE, not only an unknown flag — repair system-status + version-check swallowing --format, section G + C21/C22, suite 120 -> 140
## main...origin/main
> build · mimo-v2.6-flash-free
$ cd /data/repo && echo "== FINAL STEP 0 =="; for db in /opt/startup/dev/data/messages.db /opt/startup/prod/data/messages.db; do printf "%s unread=" "$db"; sqlite3 "$db" "SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0;"; sqlite3 "$db" "SELECT id||' '||direction||' read='||read FROM messages ORDER BY id DESC LIMIT 1;"; done; tools/inbox-status | tail -2; echo "== tree =="; git status --porcelain; echo "(clean if empty)"; git log --oneline -1; git status -sb|head -1; echo "== spend =="; grep -E "^(allowance|spent|remaining)" BUDGET.md
== FINAL STEP 0 ==
/opt/startup/dev/data/messages.db unread=0
109 agent_to_investor read=1
/opt/startup/prod/data/messages.db unread=0
75 agent_to_investor read=1

verdict: OK - nothing owed (0 unread, 1 open entries all replied)
== tree ==
(clean if empty)
e7a396c log: post-commit confirmation for [0.4.117] — 140/0 suite, 122 changelog entries, regression 5232/2 (A3+A15 dirty tree) -> 5234/0 all green
## main...origin/main
== spend ==
allowance: 5.00
spent: 1.50 (gladex.de — registered + DNS live since 2026-09-20, 1.50/mo)
remaining: 3.50
> build · mimo-v2.6-flash-free
Run complete — all green.

## STEP 0 (first, before anything else)
Measured `SELECT count(*) ... AND read=0` on both live DBs: **0 unread in dev, 0 in prod**, so nothing was waiting. Since no new message was owed, the run reply **re-answers the one open INBOX entry** (line 468, *"agents get matching accounts on Nextcloud + Immich"*) — inserted parameterised, script deleted after → **dev 109 / prod 75**, `read=1`, re-verified `0 / 0` after the insert. `tools/inbox-status` → **exit 0, owed.total 0**.

- **Immich half: delivered** (8 accounts, every login probed).
- **Nextcloud half: still blocked** on REPORT.md §14 — re-measured this run: `status.php` → `{"installed":false}` (34.0.4), `/data/shared/cloud-admin.secret` absent. The reply restates the one line that closes it: *does your `password = own email` scheme extend to Nextcloud?* — a yes/no needs no secret to travel.

## This run's one step: queue item (65) — **executed, and it caught two real defects**
E only ever probed a flag **no tool defines**. Measured instead of assumed across the 17 tools whose `--help` advertises `--format`: **15 refuse `--format xml` with exit 2, 2 do not.**

| probe | before | after |
|---|---|---|
| `system-status --format xml` | ran all 36 checks **39.5s → exit 0, human output** | **2**, `invalid --format: xml`, <8s |
| `version-check --format xml` | **0**, `OK: dev=… prod=… (match)` | **2** |
| `--format` (no value, flag last) | **1** — `$2: unbound variable` / failed `shift 2` | **2** |

Both parsers now validate **before any I/O** (callers measured first: only `--format json` is used anywhere). Guard added — section **G** with *derived* scope (`--format` from each tool's own `--help`; `--timeout 0` from the registry block that **names** the flag — all 6 already clean), violation kind `badvalue_contract <tool>:<probe>`, `fmt_n=0` → `ERROR`, never a pass; controls **C21** (replants the exact pre-repair shape) and **C22** (one word of table text pulls an accepting tool into scope).

**Pre-repair replay** against `HEAD`'s blobs (copied, tree untouched): **117/23**, with **exactly the 4 expected violations** and `fmt_*_ok 15 of 17`. Granularity **declared** in `REGISTRY.md`: only code 2 is machine-checked; the non-2 codes need a live service/relay/DNS.

## Verified
- `test_registry_coverage.sh` → **140 / 0** (was 120); full run: pre-commit **5232/2** (A3+A15 dirty-tree pair, named), post-push **59 suites, 5234 passed, 0 failed — "all suites green"** = 5214 + 20.
- Gates after edits: repo-lint **ok, 122/122 entries, citations []**; queue-source-check **violations []**; source-sync **drift false**; system-status **overall ok, errors 0** (3 standing WARNs); changelog suites 86/0 + 125/0; queue suite 181/0.
- Commits `35f4acb` + `e7a396c`, pushed, tree clean, in sync.

**Safety**: spend **0.00** (free models only), `BUDGET.md` untouched (1.50/3.50), zero DNS writes, no paid key, no secret read or printed, no restart/promote/mail, Nextcloud and Immich untouched.
exit=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Mon Sep 28 23:34:03 2026] 127.0.0.1:52526 Accepted
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52526 Closing
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52532 Accepted
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52532 Closing
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52536 Accepted
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52536 Closing
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52550 Accepted
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52550 Closing
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52554 Accepted
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52554 Closing
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52568 Accepted
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52568 Closing
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52572 Accepted
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52572 Closing
[Mon Sep 28 23:34:03 2026] 127.0.0.1:52588 Accepted
[Mon Sep 28 23:34:04 2026] 127.0.0.1:52588 Closing
[Mon Sep 28 23:34:04 2026] 127.0.0.1:52590 Accepted
[Mon Sep 28 23:34:04 2026] 127.0.0.1:52590 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42608 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42608 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42622 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42622 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42628 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42628 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42632 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42632 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42636 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42636 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42638 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42638 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42644 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42644 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42648 Accepted
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42648 Closing
[Mon Sep 28 23:34:43 2026] 127.0.0.1:42650 Accepted
[Mon Sep 28 23:34:44 2026] 127.0.0.1:42650 Closing
[Mon Sep 28 23:34:44 2026] 127.0.0.1:42654 Accepted
[Mon Sep 28 23:34:44 2026] 127.0.0.1:42654 Closing
[Mon Sep 28 23:55:50 2026] 127.0.0.1:36376 Accepted
[Mon Sep 28 23:55:50 2026] 127.0.0.1:36376 Closing
[Mon Sep 28 23:55:50 2026] 127.0.0.1:36386 Accepted
[Mon Sep 28 23:55:50 2026] 127.0.0.1:36386 Closing
[Tue Sep 29 00:01:50 2026] 127.0.0.1:45294 Accepted
[Tue Sep 29 00:01:50 2026] 127.0.0.1:45294 Closed without sending a request; it was probably just an unused speculative preconnection
[Tue Sep 29 00:01:50 2026] 127.0.0.1:45294 Closing
[Tue Sep 29 00:01:52 2026] 127.0.0.1:45302 Accepted
[Tue Sep 29 00:01:52 2026] 127.0.0.1:45302 Closed without sending a request; it was probably just an unused speculative preconnection
[Tue Sep 29 00:01:52 2026] 127.0.0.1:45302 Closing
[Tue Sep 29 00:05:20 2026] 127.0.0.1:47170 Accepted
[Tue Sep 29 00:05:20 2026] 127.0.0.1:47170 Closed without sending a request; it was probably just an unused speculative preconnection
[Tue Sep 29 00:05:20 2026] 127.0.0.1:47170 Closing
[Tue Sep 29 00:05:21 2026] 127.0.0.1:47180 Accepted
[Tue Sep 29 00:05:21 2026] 127.0.0.1:47180 Closed without sending a request; it was probably just an unused speculative preconnection
[Tue Sep 29 00:05:21 2026] 127.0.0.1:47180 Closing
[Tue Sep 29 00:07:23 2026] 127.0.0.1:53608 Accepted
[Tue Sep 29 00:07:23 2026] 127.0.0.1:53608 Closing
[Tue Sep 29 00:07:38 2026] 127.0.0.1:52846 Accepted
[Tue Sep 29 00:07:38 2026] 127.0.0.1:52846 Closing
[Tue Sep 29 00:08:21 2026] 127.0.0.1:35850 Accepted