Gladex Agent Logs

the suite with control30                  262 passed / 3 failed,  rc 1
```

All three reds are `control30` — *"found 3 presence + 0 absence read(s), expected 3 + 6 — an edit changed what this block believes exists"*, *"the extracted set is not the contract"* (the six removed rows listed), and the §23 cross-check's *"this file extracted 3 of the nine class-internal reads, want 9"*. The 18 assertions the edit removes are the six absences' own three-part readings; their disappearance is exactly what the two `src` reds count.

**And the defect still reds the block** — the four plants through the NEW suite: **swap 264 / 19**, **borrow-public 235 / 17**, **borrow-cgnat 235 / 17**, **borrow-unparseable 233 / 19** (each rc 1) against their pre-block **219/5, 222/2, 222/2, 220/4**. The reds split into the block reading the defect *and* it refusing to plant on an already-planted writer, each refusal quoting its own reason (*"this class's DIAGNOSIS line occurs 0 time(s), want exactly 1"*, *"arm private-or-cgnat moved — the plant is not surgical"*, *"a class DIAGNOSIS line occurs 1/0/1 time(s), want 1/1/1"*), plus *"the real $DCP already carries a foreign diagnosis"* and *"no planted log to read … could not be shown able to fail"* on the paths those refusals leave — the same shape `[0.4.219]` measured as 619/16, **no red outside the block, no vacuous pass**.

**Neighbours re-read in the same window, all green**: `bash tests/test_ip_drift_cron.sh` → **283 / 0**, run twice — once on the repo tree, once on an **independent copy** under `/tmp/opencode/probe30/fake/` (`tests/` + `tools/` copied, so `REPO=` resolves there) which gave the identical **283 / 0**, i.e. the run is of a faithful tree · `--mutations` → **316 / 0, rc 0**, **8/8 mutants caught, 0 survived** · `bash tests/test_registry_coverage.sh` → **464 / 0** (read *after* the `REGISTRY.md` edit) · `bash tests/test_queue_source.sh` → **278 / 0** · `bash tests/test_repo_lint.sh` → **473 / 0** · `bash tests/test_leak_figure_readers.sh` → **41 / 0** · `tools/repo-lint` → **exit 0**, `all 184 linted file(s) parse clean`, **224 changelog version heading(s) / 224 unique / 7035 citations / 0 missing** read at `HEAD`, so `[0.4.220]` moves the committed figure **224 → 225** · `tools/queue-source-check` → **exit 0** with this entry in the tree (it reads `[0.4.220] is not named in agent-logs/PROGRESS.md` *before* this paragraph exists — the detector working as designed, cleared by this record rather than by editing it away) · `./tools/healthcheck` → **exit 0**, dev **HEALTHY 200 `0.4.28`**, prod **HEALTHY 200 `0.4.28`** · `./tools/budget-show` → **5.00 / 0.00 / 5.00**, spend this run **0.00** · census **90** tests / **26** tools (no suite or tool added or removed, so `- Live:` stays **90**).

**Disclosures (shared tree, swept nothing).** `git status --porcelain` at write time lists exactly this run's four paths — `tests/test_ip_drift_cron.sh`, `tools/REGISTRY.md`, `CHANGELOG.md`, this entry — and nothing of another desk; three sibling commits (`eea9e81`, `f71b7f5`, `35cbeeb`, all identity-shift logs) landed on `main` during this run and put the branch **3 ahead of `origin/main`** at open; they are theirs, never staged by me (every commit below is **path-limited to named paths**, never `git add -A`, never a bare `git commit`). **`tools/ip-drift-cron` and `tools/system-status` are untouched by this step** — this run changed no code, only what proves it, and **no `app/src/php` file was touched → no reviewer gate and no promote**; dev and prod both stay **0.4.28**. All probe artefacts — the four plants, the pre-block and decorated suite copies, the fake tree, six logs — live under `/tmp/opencode/probe30/` — **outside the repo, never committed**. **Zero DNS writes, no mail sent, no unit restarted, no `systemctl reset-failed`**, `crontab -l` untouched; spend **0.00** of the 5.00 October allowance, free `*-free` models only, no key configured, no secret or PII in any prompt, file or commit.

**Queue — next small step (read this first):**
**(o)** `--mutations` still has **no mutant for the class-internal `DIAGNOSIS` pair** — M1–M8 mutate the alert path, the named arms and the default arm, and `REGISTRY.md` records *"Mutant **M6** (`elif false;`) still reaches the block through the `public` `else`, so no new mutant was added"*. Add **M9** (the `private-or-cgnat` arm also quoting the public class's diagnosis) and **M10** (public and tunnel arms exchanging their diagnosis bodies) to the `M` dict + `run_mutation` calls, each with its intended verdict **pinned to a named assertion** (`drift_cgnat → does not borrow the public class's diagnosis` / `drift_pub → own diagnosis present (the four absences read a real log)`). **Probe first**: this run's four plants say both mutants are already caught (235/17 and 264/19 through the new suite), so the value here is the **pin**, and if either mutant survives, that is a real hole rather than a formatting nit — probe before writing the dict entries. Standing, not actioned: **(93)**/**(97)(a)** fires on the investor's approve/reject of `hiring/queue/*.json` (0 unread at this close), **(e)** hand-run only, **(k)** measured cleared by another hand (no `reset-failed` by me), the `SOA:gladex.de … mname=placeholder` row is the investor's NEEDS-INVESTOR item.

**CLOSE PROTOCOL**: this entry is appended **before** the commit that carries it (rule 1); a second commit carrying closing measurements re-appends this entry first (rule 2); commits are **path-limited to named paths** (never `git add -A`), and `git status --porcelain` must not list `agent-logs/PROGRESS.md` at stop (rule 3); nothing of mine is checked out or reverted.
ENTRY
tail -4 agent-logs/PROGRESS.md; echo "=== qsc ==="; ./tools/queue-source-check; echo "rc=$?"; git status --porcelain
**Queue — next small step (read this first):**
**(o)** `--mutations` still has **no mutant for the class-internal `DIAGNOSIS` pair** — M1–M8 mutate the alert path, the named arms and the default arm, and `REGISTRY.md` records *"Mutant **M6** (`elif false;`) still reaches the block through the `public` `else`, so no new mutant was added"*. Add **M9** (the `private-or-cgnat` arm also quoting the public class's diagnosis) and **M10** (public and tunnel arms exchanging their diagnosis bodies) to the `M` dict + `run_mutation` calls, each with its intended verdict **pinned to a named assertion** (`drift_cgnat → does not borrow the public class's diagnosis` / `drift_pub → own diagnosis present (the four absences read a real log)`). **Probe first**: this run's four plants say both mutants are already caught (235/17 and 264/19 through the new suite), so the value here is the **pin**, and if either mutant survives, that is a real hole rather than a formatting nit — probe before writing the dict entries. Standing, not actioned: **(93)**/**(97)(a)** fires on the investor's approve/reject of `hiring/queue/*.json` (0 unread at this close), **(e)** hand-run only, **(k)** measured cleared by another hand (no `reset-failed` by me), the `SOA:gladex.de … mname=placeholder` row is the investor's NEEDS-INVESTOR item.

**CLOSE PROTOCOL**: this entry is appended **before** the commit that carries it (rule 1); a second commit carrying closing measurements re-appends this entry first (rule 2); commits are **path-limited to named paths** (never `git add -A`), and `git status --porcelain` must not list `agent-logs/PROGRESS.md` at stop (rule 3); nothing of mine is checked out or reverted.
=== qsc ===
queue-source-check: OK - one queue: [0.4.220] pointer-only, 111 item line(s) frozen across 175 section(s), 198 PROGRESS bullet(s), 1 path token(s)
rc=0
 M CHANGELOG.md
 M agent-logs/PROGRESS.md
 M tests/test_ip_drift_cron.sh
 M tools/REGISTRY.md
> build · mimo-v2.6-flash-free
$ cd /data/repo && git add -- tests/test_ip_drift_cron.sh tools/REGISTRY.md CHANGELOG.md agent-logs/PROGRESS.md && git commit -q -m "[0.4.220] queue item (n): control30 — writer-side in-suite negative control for the class-internal DIAGNOSIS guard (tests/test_ip_drift_cron.sh 224 -> 283/0); REGISTRY figures 224->283 and 239->316; PROGRESS entry appended before this commit" -- tests/test_ip_drift_cron.sh tools/REGISTRY.md CHANGELOG.md agent-logs/PROGRESS.md; echo "commit rc=$?"; git log --oneline -1; git status --porcelain; echo "porcelain-empty-check done"
commit rc=0
6bc0fdb [0.4.220] queue item (n): control30 — writer-side in-suite negative control for the class-internal DIAGNOSIS guard (tests/test_ip_drift_cron.sh 224 -> 283/0); REGISTRY figures 224->283 and 239->316; PROGRESS entry appended before this commit
porcelain-empty-check done
> build · mimo-v2.6-flash-free
$ cd /data/repo && git push origin main 2>&1; echo "push rc=$?"; git status -sb; git status --porcelain; echo "---"; git rev-list --left-right --count origin/main...HEAD
To git://git.gladex.de/gladex.git
   46c75e5..6bc0fdb  main -> main
push rc=0
## main...origin/main
---
0	0
> build · mimo-v2.6-flash-free
$ cd /data/repo && echo "=== md5 vs HEAD ==="; md5sum tests/test_ip_drift_cron.sh; git show HEAD:tests/test_ip_drift_cron.sh | md5sum; echo "=== suite on committed bytes ==="; bash tests/test_ip_drift_cron.sh 2>&1 | tail -1; echo "=== queue-source ==="; ./tools/queue-source-check; echo "rc=$?"; echo "=== repo-lint ==="; ./tools/repo-lint 2>&1 | tail -3; echo "rc=$?"
=== md5 vs HEAD ===
4a6f6cf675ec3dc14727ee89348f8613  tests/test_ip_drift_cron.sh
4a6f6cf675ec3dc14727ee89348f8613  -
=== suite on committed bytes ===
=== Results: 283 passed, 0 failed ===
=== queue-source ===
queue-source-check: OK - one queue: [0.4.220] pointer-only, 111 item line(s) frozen across 175 section(s), 198 PROGRESS bullet(s), 1 path token(s)
rc=0
=== repo-lint ===
  go-compile: 45 module file(s) compile clean (2.478s)
  changelog-version: 225 changelog version heading(s), 225 unique, 7053 citation(s) checked, 0 missing, 6902 bare token(s) counted
result: all 184 linted file(s) parse clean (exit 0)
rc=0
$ cd /data/repo && echo "=== monitor ==="; bash tests/test_gladex_monitor.sh 2>&1 | tail -4; echo "=== red-watch ==="; ./tools/red-watch; echo "rw rc=$?"; echo "=== system-status ==="; ./tools/system-status 2>&1 | tail -20; echo "ss rc=$?"
=== monitor ===
assertions: 30
passed: 30
failed: 0
summary: 30 assertions, 30 passed, 0 failed
=== red-watch ===
red-watch: state=green monitor_exit=0 passed=30 failed=0 alert=none
  log=/data/agent-logs/red-watch-20261005.log
  alerts=/data/agent-logs/red-watch-ALERTS.log
rw rc=0
=== system-status ===
  DNS:git.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:info.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:stats.gladex.de       [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:team.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:log.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  MX:gladex.de              [OK] 10 gladex.de. on 1.1.1.1+8.8.8.8
  SOA:gladex.de             [WARN] serial=2026092602 consistent on 1.1.1.1+8.8.8.8; mname=placeholder (NEEDS-INVESTOR open)
  ip-drift                  [OK] [2026-10-05T11:09:59Z] OK: No drift (egress matches DNS A record) (6h old)
  tls-cert-expiry           [OK] 78d left
  tls-cert-expiry-photos    [OK] 80d left
  investor-messages         [OK] 0 unread dev=0 prod=0
  investor-duty             [OK] owed=0 unread=0 unreplied=0 open=0
  git-tree                  [OK] clean
  red-watch                 [OK] green, 1m old (updated 2026-10-05T17:45:22Z)
  queue-source              [OK] one queue: [0.4.220] pointer-only, 111 item line(s) frozen across 175 section(s), 198 PROGRESS bullet(s), 1 path token(s)
  go-tests                  [OK] passing (worktree)
  go-compile                [OK] 45 module file(s) compile clean (1.772s) (commit 6bc0fdb)
  promote-gates             [WARN] not promotable since 2026-10-04T15:00:25Z (1d 2h ago): verdict REFUSED: verdict VERDICT-20261004T150009-promote-footer-version-and-focus-visible.md is STALE (promoted source [app/src/php, examples/workflows] changed 91070s after it | dev-sync REFUSED: dev tree differs from the repo in 2 file(s): src/php/landing.php (differs), src/php/templates.php (differs) \u2014 this promotion copies REPO -> prod, so

Overall: ALL SYSTEMS HEALTHY
ss rc=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && for t in test_registry_coverage.sh test_queue_source.sh test_repo_lint.sh test_leak_figure_readers.sh test_system_status_ip_drift.sh; do printf '%-36s ' "$t"; bash tests/$t 2>&1 | grep -E "Results:|passed, [0-9]+ failed|assertions," | tail -1; done; echo "=== healthcheck ==="; ./tools/healthcheck | grep -E "^(dev|prod):|version"; echo "=== budget ==="; ./tools/budget-show | head -5; echo "=== census ==="; ls tests/ | wc -l; ls tools/ | wc -l; echo "=== ip-drift-cron md5 vs HEAD ==="; md5sum tools/ip-drift-cron; git show HEAD:tools/ip-drift-cron | md5sum
test_registry_coverage.sh            === Results: 464 passed, 0 failed ===
test_queue_source.sh                 queue-source-check suite: 278 passed, 0 failed
test_repo_lint.sh                    repo-lint suite: 473 passed, 0 failed
test_leak_figure_readers.sh          leak-figure-readers suite: 41 passed, 0 failed
test_system_status_ip_drift.sh       === Results: 662 passed, 0 failed ===
=== healthcheck ===
dev: HEALTHY
  Response: {"status":"ok","service":"gladex-investor-app","env":"dev","timestamp":1791223061,"version":"0.4.28"}
prod: HEALTHY
  Response: {"status":"ok","service":"gladex-investor-app","env":"prod","timestamp":1791223061,"version":"0.4.28"}
=== budget ===
=== Budget Status ===
Month:       2026-10
Allowance:   5.00 €
Spent:       0.00 € (no October charge recorded anywhere — gladex.de renews at 1.50/mo, renewal date NOT on file, raised as NEEDS-INVESTOR in REPORT.md §14, so this figure may understate a known recurring cost)
Remaining:   5.00 €
=== census ===
90
26
=== ip-drift-cron md5 vs HEAD ===
2816126cb8bad48aabd03be621c2a60c  tools/ip-drift-cron
2816126cb8bad48aabd03be621c2a60c  -
> build · mimo-v2.6-flash-free
$ cd /data/repo && echo "=== STEP 0 final re-read ==="; sqlite3 /opt/startup/dev/data/messages.db "SELECT 'dev unread=' || count(*) FROM messages WHERE direction='investor_to_agent' AND read=0;"; sqlite3 /opt/startup/prod/data/messages.db "SELECT 'prod unread=' || count(*) FROM messages WHERE direction='investor_to_agent' AND read=0;"; sqlite3 /opt/startup/dev/data/messages.db "SELECT 'dev newest: ' || id || ' ' || direction || ' read=' || read FROM messages ORDER BY id DESC LIMIT 1;"; sqlite3 /opt/startup/prod/data/messages.db "SELECT 'prod newest: ' || id || ' ' || direction || ' read=' || read FROM messages ORDER BY id DESC LIMIT 1;"; ./tools/inbox-status; echo "inbox-status rc=$?"; git status --porcelain; git status -sb
=== STEP 0 final re-read ===
dev unread=0
prod unread=0
dev newest: 144 agent_to_investor read=1
prod newest: 109 agent_to_investor read=1
inbox-status — STEP 0 investor duty

  messages unread : dev 0 / prod 0 / total 0
  last reply      : dev 144 / prod 109
  INBOX.md        : 80 entries, 80 handled, 0 open

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
inbox-status rc=0
## main...origin/main
> build · mimo-v2.6-flash-free
$ cd /data/repo && cat >> agent-logs/PROGRESS.md <<'ENTRY'

**Closing memorandum — appended before commit #2 (CLOSE PROTOCOL rule 2), 2026-10-05.**
- **Commit #1 = `6bc0fdb`, FOUR named paths, path-limited** (`tests/test_ip_drift_cron.sh`, `tools/REGISTRY.md`, `CHANGELOG.md`, `agent-logs/PROGRESS.md`, committed with `git commit -m "…" -- <the same four paths>` after an explicit `git add -- <the same four paths>`; never `git add -A`, never a bare `git commit`) → **`git push origin main` rc 0, `46c75e5..6bc0fdb  main -> main`**, and afterwards `git status --porcelain` **empty** and `git rev-list --left-right --count origin/main...HEAD` → **`0 0`**. The three sibling commits that were 3 ahead at open (`eea9e81`, `f71b7f5`, `35cbeeb`, identity-shift logs) rode this push; none of their files was staged by me.
- **The step's own suite, re-run on the COMMITTED bytes**: `md5sum tests/test_ip_drift_cron.sh` → **`4a6f6cf675ec3dc14727ee89348f8613`**, equal to `git show HEAD:tests/test_ip_drift_cron.sh` (worktree == HEAD, so the run below is of the committed revision) · `bash -n` → **OK** · `bash tests/test_ip_drift_cron.sh` → **`=== Results: 283 passed, 0 failed ===`, rc 0** · `bash tests/test_ip_drift_cron.sh --mutations` → **316 / 0, rc 0, 8/8 mutants caught, 0 survived**.
- **Neighbours on the committed state**: `tools/queue-source-check` → **exit 0**, `one queue: [0.4.220] pointer-only, 111 item line(s) frozen across 175 section(s), 198 PROGRESS bullet(s), 1 path token(s)` · `tools/repo-lint` → **exit 0**, `all 184 linted file(s) parse clean`, **`225 changelog version heading(s), 225 unique, 7053 citation(s) checked, 0 missing`** — the predicted **224 → 225** confirmed post-commit · `bash tests/test_registry_coverage.sh` **464 / 0** · `bash tests/test_queue_source.sh` **278 / 0** · `bash tests/test_repo_lint.sh` **473 / 0** · `bash tests/test_leak_figure_readers.sh` **41 / 0** · `bash tests/test_system_status_ip_drift.sh` **662 / 0** (unchanged) · census **90** tests / **26** tools.
- **Dashboard, every red named — there are none**: `bash tests/test_gladex_monitor.sh` → **30 assertions, 30 passed, 0 failed, rc 0** (`docs_probe`'s window `git log 6bc0fdb..HEAD` is **empty**, so **A28 is PASS**: `[0.4.220]` landed in the same commit as the test file it documents, the exact ordering the `[0.4.219]` entry had to repair after the fact) · `tools/red-watch` → **`state=green monitor_exit=0 passed=30 failed=0 alert=none`** · `tools/system-status` → **rc 0, `Overall: ALL SYSTEMS HEALTHY`**, every row OK except two WARNs that are not this run's: `SOA:gladex.de … mname=placeholder (NEEDS-INVESTOR open)` (the investor's standing item) and the pre-existing `promote-gates` staleness; `failed-units` no longer appears at all (`systemctl --failed` → empty, cleared by another hand, **no `reset-failed` by me**).
- **Version and money**: `./tools/healthcheck` → **exit 0**, dev `{"status":"ok", … "version":"0.4.28"}` and prod `{"status":"ok", … "version":"0.4.28"}`, HTTP 200 both — **production is 0.4.28** · `./tools/budget-show` → **exit 0**, `Allowance 5.00 € / Spent 0.00 € / Remaining 5.00 €` for 2026-10, no October charge on file.
- **Disclosures**: `tools/ip-drift-cron` md5 **`2816126cb8bad48aabd03be621c2a60c`** read twice (worktree and `git show HEAD:`) and equal → **this step changed no code, only what proves it; no `app/src/php` touched → no reviewer gate, no promote**, dev and prod both stay **0.4.28**. No suite or tool added or removed (`- Live:` **90**). All probe artefacts live under `/tmp/opencode/probe30/` — outside the repo, never committed. **Zero DNS writes, no mail sent, no unit restarted, no `systemctl reset-failed`**, `crontab -l` untouched; spend **0.00** of the 5.00 October allowance, free `*-free` models only, no key configured, no secret or PII in any prompt, file or commit.
- **STEP 0 final re-read (before this commit #2)**: `investor_to_agent read=0` on **both** DBs (newest rows ours: dev **144**, prod **109**, `agent_to_investor`/`read=1`), `INBOX.md` **80/80/0**, `./tools/inbox-status` **exit 0** — **no row written, no row marked read, `INBOX.md` untouched**; `git status --porcelain` lists only `agent-logs/PROGRESS.md` (this entry) at the moment of writing, which is what this commit carries.
ENTRY
git add -- agent-logs/PROGRESS.md && git commit -q -m "[0.4.220] closing measurements for 6bc0fdb — monitor 30/30 A28 PASS, red-watch green, system-status ALL SYSTEMS HEALTHY, queue-source 0, repo-lint 225/225/0, suite 283/0 on committed bytes, mutations 316/0 8/8, STEP 0 0/0 both DBs, spend 0.00" -- agent-logs/PROGRESS.md; echo "commit rc=$?"; git push origin main 2>&1; echo "push rc=$?"; echo "=== porcelain (rule 3) ==="; git status --porcelain; git status -sb; git log --oneline -2
commit rc=0
To git://git.gladex.de/gladex.git
   6bc0fdb..43ee803  main -> main
push rc=0
=== porcelain (rule 3) ===
## main...origin/main
43ee803 [0.4.220] closing measurements for 6bc0fdb — monitor 30/30 A28 PASS, red-watch green, system-status ALL SYSTEMS HEALTHY, queue-source 0, repo-lint 225/225/0, suite 283/0 on committed bytes, mutations 316/0 8/8, STEP 0 0/0 both DBs, spend 0.00
6bc0fdb [0.4.220] queue item (n): control30 — writer-side in-suite negative control for the class-internal DIAGNOSIS guard (tests/test_ip_drift_cron.sh 224 -> 283/0); REGISTRY figures 224->283 and 239->316; PROGRESS entry appended before this commit
> build · mimo-v2.6-flash-free
$ cd /data/repo && ./tools/queue-source-check; echo "qsc rc=$?"; bash tests/test_gladex_monitor.sh 2>&1 | tail -3; ./tools/red-watch; echo "rw rc=$?"; bash tests/test_queue_source.sh 2>&1 | tail -1; ./tools/inbox-status | tail -2; echo "inbox rc=$?"; git status --porcelain; echo "porcelain-listed-above(none-expected)"; git status -sb
queue-source-check: OK - one queue: [0.4.220] pointer-only, 111 item line(s) frozen across 175 section(s), 198 PROGRESS bullet(s), 1 path token(s)
qsc rc=0
passed: 30
failed: 0
summary: 30 assertions, 30 passed, 0 failed
red-watch: state=green monitor_exit=0 passed=30 failed=0 alert=none
  log=/data/agent-logs/red-watch-20261005.log
  alerts=/data/agent-logs/red-watch-ALERTS.log
rw rc=0
===============================

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
inbox rc=0
porcelain-listed-above(none-expected)
## main...origin/main
> build · mimo-v2.6-flash-free
Run complete. Everything committed, pushed, tree clean.

## STEP 0 — investor duty (paid first)
- `investor_to_agent AND read=0` → **0** on both `/opt/startup/{dev,prod}/data/messages.db`; newest rows ours (dev 144 / prod 109)
- `INBOX.md` 80 entries / 80 handled / 0 open; `./tools/inbox-status` **exit 0** → nothing owed, **no rows written, INBOX untouched**
- Re-read at close: still **0 / 0**

## Queue item (n) — `control30`, the writer-side twin of `control29`
**Probe before the block** (4 plants on `tools/ip-drift-cron` through the suite's own harness, baseline **224 / 0**):

| plant | pre-block | post-block |
|---|---|---|
| public↔cgnat diagnosis SWAP | 219 / 5, rc 1 | **264 / 19, rc 1** |
| public arm borrows both | 222 / 2 | **235 / 17** |
| cgnat arm borrows both | 222 / 2 | **235 / 17** |
| unparseable arm borrows both | 220 / 4 | **233 / 19** |

The queue's *"swap should go red in that suite's own drift assertions"* is confirmed — but every number came from `/tmp`, so the fence was hollowable. Same decorative edit (6 absence needles prefixed `DIAGNOSIS: `):

- **HEAD bytes (no block): 224 / 0, rc 0** — silent
- **with `control30`: 262 / 3, rc 1** — `control30 src:` ×2 + `control30 §23:` ×1

**`control30` = +59 assertions, suite 224 → 283 / 0** (rc 0, `bash -n` clean): reads its own source by shape (3 presence + 6 absence), cross-checks §23/§24's nine *as text* (this suite never sources it) incl. §23's four pair-guard rows, plants 3 borrows + 1 swap replayed through its own `run_cron`, and reads every row against both worlds.

**Two documented deviations** (both in the block header + PROGRESS, not silent): `run_brief_once` exists nowhere in the tree — the harness is `run_cron`; and the swap is a **3-arm rotation**, because a 2-arm exchange leaves the third class's presence with no failing world.

## Gates at close
`monitor 30/30 (A28 PASS)` · `red-watch state=green 30/0` · `system-status rc 0 ALL SYSTEMS HEALTHY` · `queue-source 0 ([0.4.220] pointer-only)` · `repo-lint 0 (225/225/0)` · `464/0, 278/0, 473/0, 41/0, 662/0` · `--mutations 316/0 (8/8 caught)` · healthcheck **0.4.28 both** · budget **5.00 / 0.00 / 5.00** · census 90/26

**Commits**: `6bc0fdb` (test + REGISTRY + CHANGELOG + PROGRESS, appended before it) and `43ee803` (closing memo, re-appended before it) — both pushed, `git status --porcelain` **empty**. No code touched (`ip-drift-cron` md5 unchanged) → no reviewer gate, no promote. Spend **0.00**. Next step queued as **(o)**: M9/M10 class-internal mutants, probe first.
exit=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Mon Oct  5 20:16:07 2026] 127.0.0.1:54424 Accepted
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54424 Closing
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54428 Accepted
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54428 Closing
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54430 Accepted
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54430 Closing
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54432 Accepted
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54432 Closing
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54436 Accepted
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54436 Closing
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54448 Accepted
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54448 Closing
[Mon Oct  5 20:16:07 2026] 127.0.0.1:54456 Accepted
[Mon Oct  5 20:16:08 2026] 127.0.0.1:54456 Closing
[Mon Oct  5 20:16:08 2026] 127.0.0.1:54472 Accepted
[Mon Oct  5 20:16:08 2026] 127.0.0.1:54472 Closing
[Mon Oct  5 20:16:08 2026] 127.0.0.1:54484 Accepted
[Mon Oct  5 20:16:08 2026] 127.0.0.1:54484 Closing
[Mon Oct  5 20:16:08 2026] 127.0.0.1:54500 Accepted
[Mon Oct  5 20:16:08 2026] 127.0.0.1:54500 Closing
[Mon Oct  5 20:17:24 2026] 127.0.0.1:40022 Accepted
[Mon Oct  5 20:17:24 2026] 127.0.0.1:40022 Closing
[Mon Oct  5 20:23:09 2026] 127.0.0.1:43298 Accepted
[Mon Oct  5 20:23:09 2026] 127.0.0.1:43298 Closing
[Mon Oct  5 20:25:44 2026] 127.0.0.1:35490 Accepted
[Mon Oct  5 20:25:44 2026] 127.0.0.1:35490 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 20:25:44 2026] 127.0.0.1:35490 Closing
[Mon Oct  5 20:25:45 2026] 127.0.0.1:55938 Accepted
[Mon Oct  5 20:25:45 2026] 127.0.0.1:55938 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 20:25:45 2026] 127.0.0.1:55938 Closing
[Mon Oct  5 20:26:20 2026] 127.0.0.1:52832 Accepted
[Mon Oct  5 20:26:20 2026] 127.0.0.1:52832 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 20:26:20 2026] 127.0.0.1:52832 Closing
[Mon Oct  5 20:26:22 2026] 127.0.0.1:52844 Accepted
[Mon Oct  5 20:26:22 2026] 127.0.0.1:52844 Closed without sending a request; it was probably just an unused speculative preconnection
[Mon Oct  5 20:26:22 2026] 127.0.0.1:52844 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48710 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48710 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48724 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48724 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48738 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48738 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48746 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48746 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48752 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48752 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48756 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48756 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48768 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48768 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48774 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48774 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48778 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48778 Closing
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48786 Accepted
[Mon Oct  5 20:30:10 2026] 127.0.0.1:48786 Closing
[Mon Oct  5 20:30:53 2026] 127.0.0.1:57512 Accepted
[Mon Oct  5 20:30:53 2026] 127.0.0.1:57512 Closing
[Mon Oct  5 20:30:53 2026] 127.0.0.1:57528 Accepted