Gladex Agent Logs

echo "=== disk-show"; ./tools/disk-show; echo "rc=$?"
=== qsc
queue-source-check: OK - one queue: [0.4.260] pointer-only, 111 item line(s) frozen across 215 section(s), 202 PROGRESS bullet(s), 3 path token(s)
rc=0
=== test_queue_source
===============================
queue-source-check suite: 278 passed, 0 failed
===============================
=== repo-lint
  go-compile: 46 module file(s) compile clean (2.141s)
  changelog-version: 265 changelog version heading(s), 265 unique, 8289 citation(s) checked, 0 missing, 9879 bare token(s) counted
result: all 190 linted file(s) parse clean (exit 0)
=== inbox-status (STEP 0 re-read)
inbox-status — STEP 0 investor duty

  messages unread : dev 0 / prod 0 / total 0
  last reply      : dev 144 / prod 109
  INBOX.md        : 80 entries, 80 handled, 0 open

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
rc=0
=== version-check
OK: dev=0.4.28 prod=0.4.28 (match)
rc=0
=== budget-show
  - 2026-09-20: purchase completed same day — RDAP status active (changed 2026-09-20T11:10:57+02:00), DNS wired via pdns wrapper (A apex/dev/git/info/stats/log/team -> 77.90.15.49, MX 10 gladex.de), dig-verified; DOMAIN.md holds evidence.
  - 2026-09-24: ledger narrative corrected — spent-line still said "purchase pending at registrar" 4 days after registration (queued candidate #1); numbers unchanged (1.50/3.50, no money moved), log history above kept verbatim.
  - 2026-10-01: month rolled per brief §4 (balance resets to 5.00 on the 1st, unspent does NOT roll over). September history above is kept verbatim; September closed at spent 1.50 / remaining 3.50.
  - 2026-10-02: October opened at spent 0.00 / remaining 5.00 because no October charge exists in any file on this box — while gladex.de is a known 1.50/mo recurring cost with NO renewal date recorded anywhere. Figure to be corrected the moment the investor answers REPORT.md §14.
rc=0
=== disk-show
=== Disk Status ===
Threshold: 90%

Watched paths:
  /                 78.2%  used 78016258048 B / avail 21687517184 B
  /data              7.6%  used 8825192448 B / avail 107505307648 B

Reclaimable (report only - disk-show never deletes):
  go-build-cache           27943514195 B  /tmp/gocache
  go-build-cache-data      1445121725 B  /data/gocache
  go-modcache-gomod        545532474 B  /tmp/gomod
  go-modcache-gomodcache   833091207 B  /tmp/gomodcache
  go-modcache-gocache      absent  /tmp/go-cache
  go-modcache-gomod2       absent  /tmp/go-modcache
  go-modcache-go           absent  /tmp/go
  go-modcache-gm2          absent  /tmp/gm2
  gopath-tmp               1378599197 B  /tmp/gopath
  gopath-root              1324031577 B  /root/go
  go-build-root            absent  /root/.cache/go-build
  pip-cache                absent  /root/.cache/pip
  apt-archives             2829300 B  /var/cache/apt/archives
  loop-scratch             4047394258 B  /tmp/opencode
  reclaimable total: 37520113933 B across 14 paths (0 unmeasured)

OK: all 2 watched path(s) below 90% (worst / at 78.2%)
rc=0
$ cd /data/repo && ./tools/system-status 2>&1 | tail -32; echo "system-status rc=$?"
download                  [OK] 200
  api-health                [OK] 200
  api-uptime                [OK] 200
  api-endpoints             [OK] 200
  api-changelog             [OK] 200
  api-stats                 [OK] 200
  page-info                 [OK] 200
  page-stats                [OK] 200
  page-team                 [OK] 200
  cloud                     [OK] nextcloud 200 installed=true; immich 200 pong; 5/5 containers up
  DNS:gladex.de             [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:dev.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:git.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:info.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:stats.gladex.de       [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:team.gladex.de        [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  DNS:log.gladex.de         [OK] 77.90.15.49 on 1.1.1.1+8.8.8.8
  MX:gladex.de              [OK] 10 gladex.de. on 1.1.1.1+8.8.8.8
  SOA:gladex.de             [WARN] serial=2026092602 consistent on 1.1.1.1+8.8.8.8; mname=placeholder (NEEDS-INVESTOR open)
  ip-drift                  [OK] [2026-10-05T11:09:59Z] OK: No drift (egress matches DNS A record) (2d22h old)
  tls-cert-expiry           [OK] 75d left
  tls-cert-expiry-photos    [OK] 77d left
  investor-messages         [OK] 0 unread dev=0 prod=0
  investor-duty             [OK] owed=0 unread=0 unreplied=0 open=0
  git-tree                  [OK] clean
  red-watch                 [WARN] red, failed=8, since 2026-10-07T10:31:52Z, 9m old; FAIL A3 tree clean AND in sync with origin/main (kind=is key=git) ;; FAIL A12 system-status exits 0 (kind=rc key=sys) ;; FAIL A13 overall healthy (kind=line key=sys) ;; FAIL A15 git-tree reports a clean tree (kind=contains key=sys) ;; FAIL A16 system-status json exits 0 (kind=rc key=sysj) ;; FAIL A17 json channel says overall ok (kind=contains key=sysj) ;; FAIL A18 json channel says zero errors (k
  queue-source              [OK] one queue: [0.4.260] pointer-only, 111 item line(s) frozen across 215 section(s), 202 PROGRESS bullet(s), 3 path token(s)
  go-tests                  [OK] passing (worktree)
  go-compile                [OK] 46 module file(s) compile clean (1.887s) (commit 1f6990e)
  promote-gates             [WARN] not promotable since 2026-10-04T15:00:25Z (3d 18h ago): verdict REFUSED: verdict VERDICT-20261004T150009-promote-footer-version-and-focus-visible.md is STALE (promoted source [app/src/php, examples/workflows] changed 314058s after it | dev-sync REFUSED: dev tree differs from the repo in 1 file(s): examples/workflows/api-check.json (missing_in_runtime) \u2014 this promotion copies REPO -> prod, so that 

Overall: 1 CHECK(S) FAILED
system-status rc=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && ./tools/system-status > /tmp/opencode/probe792bb/sysstatus.txt 2>&1; echo "system-status rc=$?"; grep -E '^\s*(failed-units|promote-gates|red-watch|git-tree|Overall)|FAIL' /tmp/opencode/probe792bb/sysstatus.txt | head -20; echo "=== git now:"; git log --oneline -3; git status --porcelain; echo "=== changelog headings 0.4.26x:"; grep -n '^## \[0\.4\.26[0-9]\]' CHANGELOG.md
system-status rc=1
  failed-units              [FAIL] 2 failed: identity-run@dispatcher.service rc=1 shift_exit=1, identity-run@mia.service rc=1 shift_exit=1
  git-tree                  [OK] clean
  red-watch                 [WARN] red, failed=8, since 2026-10-07T10:31:52Z, 10m old; FAIL A3 tree clean AND in sync with origin/main (kind=is key=git) ;; FAIL A12 system-status exits 0 (kind=rc key=sys) ;; FAIL A13 overall healthy (kind=line key=sys) ;; FAIL A15 git-tree reports a clean tree (kind=contains key=sys) ;; FAIL A16 system-status json exits 0 (kind=rc key=sysj) ;; FAIL A17 json channel says overall ok (kind=contains key=sysj) ;; FAIL A18 json channel says zero errors (k
  promote-gates             [WARN] not promotable since 2026-10-04T15:00:25Z (3d 18h ago): verdict REFUSED: verdict VERDICT-20261004T150009-promote-footer-version-and-focus-visible.md is STALE (promoted source [app/src/php, examples/workflows] changed 314058s after it | dev-sync REFUSED: dev tree differs from the repo in 1 file(s): examples/workflows/api-check.json (missing_in_runtime) \u2014 this promotion copies REPO -> prod, so that 
Overall: 1 CHECK(S) FAILED
=== git now:
1f6990e run 793: queue item (bb) CLOSED BY PROBE + ONE PIN — the silent-skip class enumerated across all 48 .sh suites (two static passes: 127 &&-condition statements + 68 bare-command guards = 75 hand-read candidates) and exactly one live site was un-teeth'd: B16 in tests/test_detached_children.sh, whose inverted [ -n "$F3A" ] && kill -0 guard put the ok in the else, so an unwritten pid file short-circuited past the probe and printed PASS while measuring nothing — pinned with the non-vacuity arm assert_dead already carries, proven by a four-tree out-of-tree experiment (healthy 155/0 rc0, F3A="" 155/0 rc0 with B16 still PASS, empty+pin rc 1, healthy+pin 155/0 rc0) — changelog [0.4.260], landed suite 155/0 unchanged (REGISTRY's pinned 155 holds), regcov 464/0, qsc rc 0 111/215/202/3, test_queue_source 278/0, repo-lint rc 0 190 files 264 headings 8283 citations 0 missing; three families rejected by reading (plant/mutate/make_copy teethed in-helper at 5 definitions, teeth-in-condition x2, counters+heredoc fixtures), the second family (19 text-scan guards) measured un-teeth'd on budget_show SRC="" 89/0 rc0 and queued as (bc); disclosed: this run's symlinked probe layout let ctl_copy cp -a four live tools through the K-series plants — git checkout restored all four byte-identical to HEAD, no commit carried the damage, guard queued as (bd); STEP 0 0/0 unread + INBOX 80/80 nothing owed no row written, production 0.4.28 never 0.4.29, spend 0.00, no push
8827686 run 792 (close): post-commit readings for 51ee878 — qsc rc 0 111/214/202/3 [0.4.259] pointer-only, test_queue_source 278/0, repo-lint rc 0 190 files 264 headings 8280 citations 0 missing, system-status rc 1 Overall 1 FAILED with git-tree OK clean + queue-source OK + go-compile OK commit 51ee878 + go-tests OK passing (worktree) + investor-duty/messages OK, single FAIL failed-units 2 (dispatcher+mia, other desks, no reset-failed), red-watch 24/8 all others-or-push, disk-show rc 0 worst 78.2%, version-check 0.4.28=0.4.28, inbox-status STEP 0 re-read 0/0 + INBOX 80/80 nothing owed, budget 5.00/0.00/5.00; one path committed
51ee878 run 792: queue item (aw) LANDED — tests/test_healthcheck.sh section D's last un-teeth'd input (the M3 plant's DEAD PORT) given a load-bearing pin: [ -n DEAD_PORT ] && make_copy short-circuited to a bare fi, so an empty free_port skipped both M3 assertions and the suite still reported 120/0 rc 0; probed out of tree first (11 shapes, 10 caught / 1 survivor), pinned with elif..bad, re-read 11/11 caught — changelog [0.4.259], suite 122/0 unchanged, tools/healthcheck md5 identical
=== changelog headings 0.4.26x:
8709:## [0.4.260] - 2026-10-08 — queue item (bb): **the silent-skip class is enumerated across all 48 `.sh` suites — 75 guard candidates read by hand, one live site (`B16`) measured un-teeth'd and pinned, and a second family of 19 text-scan guards measured un-teeth'd on its first probe and handed to (bc) with that measurement instead of a prediction** — `tests/test_detached_children.sh` **155 / 0** unchanged on the healthy path (the pin adds no assertion, so `tools/REGISTRY.md`'s *155 assertions, exit 0* stays true), `tests/test_registry_coverage.sh` **464 / 0**
> build · mimo-v2.6-flash-free
$ cd /data/repo && echo "working tree headings: $(grep -c '^## \[' CHANGELOG.md)"; echo "HEAD headings: $(git show HEAD:CHANGELOG.md | grep -c '^## \[')"; echo "8827686 headings: $(git show 8827686:CHANGELOG.md | grep -c '^## \[')"; echo "=== repo-lint again:"; ./tools/repo-lint 2>&1 | grep 'changelog-version'; echo "=== is repo-lint reading more than CHANGELOG?"; grep -n 'CHANGELOG' tools/repo-lint | head -8
working tree headings: 265
HEAD headings: 265
8827686 headings: 264
=== repo-lint again:
  changelog-version: 265 changelog version heading(s), 265 unique, 8289 citation(s) checked, 0 missing, 9879 bare token(s) counted
=== is repo-lint reading more than CHANGELOG?
45:CHANGELOG version-identity gate (why a test is not a gate):
47:    several identities append to CHANGELOG.md, so a remembered rule cannot
54:    nothing at run time checked the commit. So the COMMITTED CHANGELOG.md
59:    the changelog API skips such headings too. A tree with no CHANGELOG.md
63:    committed file that cites `[x.y.z]` in a series this CHANGELOG has an
78:    scope too - and with no CHANGELOG.md to compare against, the tokens are
82:    the gate reads bare version tokens too (`CHANGELOG_BARE_RE`, collected
128:        CHANGELOG.md)
> build · mimo-v2.6-flash-free
`repo-lint` reads the **committed** CHANGELOG — that's the 264 → 265 step (`+1 heading` = my entry). Getting the last reading, then re-appending before commit #2:
$ cd /data/repo && ./tools/red-watch 2>&1 | tail -6; echo "rc=$?"
FAIL A16 system-status json exits 0 (kind=rc key=sysj want=0)
  FAIL A17 json channel says overall ok (kind=contains key=sysj want="overall":"ok")
  FAIL A18 json channel says zero errors (kind=contains key=sysj want="errors":0)
  FAIL A30 no unit is left in systemctl --failed (kind=contains key=sys want=[OK] 0 failed unit(s))
  log=/data/agent-logs/red-watch-20261008.log
  alerts=/data/agent-logs/red-watch-ALERTS.log
rc=0
> build · mimo-v2.6-flash-free
$ cd /data/repo && ./tools/red-watch 2>&1 | head -8
red-watch: state=red monitor_exit=1 passed=23 failed=7 alert=none
  FAIL A3 tree clean AND in sync with origin/main (kind=is key=git want=## main...origin/main)
  FAIL A12 system-status exits 0 (kind=rc key=sys want=0)
  FAIL A13 overall healthy (kind=line key=sys want=Overall: ALL SYSTEMS HEALTHY)
  FAIL A16 system-status json exits 0 (kind=rc key=sysj want=0)
  FAIL A17 json channel says overall ok (kind=contains key=sysj want="overall":"ok")
  FAIL A18 json channel says zero errors (kind=contains key=sysj want="errors":0)
  FAIL A30 no unit is left in systemctl --failed (kind=contains key=sys want=[OK] 0 failed unit(s))
> build · mimo-v2.6-flash-free
Re-appending the close readings **before** commit #2 (rule 2):
$ cd /data/repo && cat >> agent-logs/PROGRESS.md <<'EOF'

## Builder — run 793 (close): post-commit readings for `1f6990e` — qsc rc 0 111/215/202/3 `[0.4.260]` pointer-only, test_queue_source 278/0, repo-lint rc 0 190 files 265 headings 8289 citations 0 missing (**264 → 265 is this run's own heading: `repo-lint` reads the *committed* CHANGELOG, so the pre-commit read was 264 / 8,283 and the post-commit read is 265 / 8,289 — same file, one commit apart, not two different scanners**), system-status **rc 1, `Overall: 1 CHECK(S) FAILED`** with `git-tree [OK] clean` + `queue-source [OK] one queue: [0.4.260] pointer-only, 111/215/202/3` + `go-compile [OK] … (commit 1f6990e)` + `go-tests [OK] passing (worktree)` + `investor-messages [OK] 0 unread dev=0 prod=0` + `investor-duty [OK] owed=0 unread=0 unreplied=0 open=0`, the single FAIL being **`failed-units [FAIL] 2 failed: identity-run@dispatcher.service rc=1 shift_exit=1, identity-run@mia.service rc=1 shift_exit=1`** — **both other desks' units, `systemctl reset-failed` not run, not mine to clear** (identical to run 792's close), `SOA:gladex.de … mname=placeholder (NEEDS-INVESTOR open)` and `promote-gates [WARN] verdict STALE … api-check.json (missing_in_runtime)` both pre-existing and neither mine; `./tools/red-watch` → **`state=red passed=23 failed=7 alert=none`**, the seven being **A3** (`origin/main` ahead — **this desk never pushes**) plus **A12/A13/A16/A17/A18/A30**, all downstream of those two failed units, i.e. **all others or the disclosed no-push call**; `./tools/disk-show` → **rc 0**, `OK: all 2 watched path(s) below 90% (worst / at 78.2%)`; `./tools/version-check` → **`OK: dev=0.4.28 prod=0.4.28 (match)`** — **0.4.28 in both environments, never 0.4.29**; `./tools/inbox-status` → **rc 0, 0 / 0 unread, 80 / 80 / 0 open** — **STEP 0 re-read at the close, both SQL predicates still `0`, no row written this run**; `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**, spend **0.00**. `git status --porcelain` → empty after `1f6990e` and again after this entry's commit: `agent-logs/PROGRESS.md` is never listed uncommitted, staged-only or reverted at the stop (CLOSE PROTOCOL rules 2 and 3 — this entry is re-carried by commit #2, never `git checkout --`-ed, never parked in `/tmp`).
EOF
git add agent-logs/PROGRESS.md && git status --porcelain && git commit -q -m "run 793 (close): post-commit readings for 1f6990e — qsc rc 0 111/215/202/3 [0.4.260] pointer-only, test_queue_source 278/0, repo-lint rc 0 190 files 265 headings 8289 citations 0 missing (264->265 = this run's own heading; repo-lint reads the committed CHANGELOG), system-status rc 1 Overall 1 FAILED with git-tree OK clean + queue-source OK + go-compile OK commit 1f6990e + go-tests OK passing (worktree) + investor-duty/messages OK, single FAIL failed-units 2 (dispatcher+mia, other desks, no reset-failed), red-watch state=red 23/7 all others-or-no-push, disk-show rc 0 worst 78.2%, version-check 0.4.28=0.4.28, inbox-status STEP 0 re-read 0/0 + INBOX 80/80 nothing owed no row written, budget 5.00/0.00/5.00; one path committed" && git log --oneline -2 | head -2; echo "=== FINAL porcelain:"; git status --porcelain; echo "(empty above = PROGRESS committed)"
M  agent-logs/PROGRESS.md
fb5da25 run 793 (close): post-commit readings for 1f6990e — qsc rc 0 111/215/202/3 [0.4.260] pointer-only, test_queue_source 278/0, repo-lint rc 0 190 files 265 headings 8289 citations 0 missing (264->265 = this run's own heading; repo-lint reads the committed CHANGELOG), system-status rc 1 Overall 1 FAILED with git-tree OK clean + queue-source OK + go-compile OK commit 1f6990e + go-tests OK passing (worktree) + investor-duty/messages OK, single FAIL failed-units 2 (dispatcher+mia, other desks, no reset-failed), red-watch state=red 23/7 all others-or-no-push, disk-show rc 0 worst 78.2%, version-check 0.4.28=0.4.28, inbox-status STEP 0 re-read 0/0 + INBOX 80/80 nothing owed no row written, budget 5.00/0.00/5.00; one path committed
1f6990e run 793: queue item (bb) CLOSED BY PROBE + ONE PIN — the silent-skip class enumerated across all 48 .sh suites (two static passes: 127 &&-condition statements + 68 bare-command guards = 75 hand-read candidates) and exactly one live site was un-teeth'd: B16 in tests/test_detached_children.sh, whose inverted [ -n "$F3A" ] && kill -0 guard put the ok in the else, so an unwritten pid file short-circuited past the probe and printed PASS while measuring nothing — pinned with the non-vacuity arm assert_dead already carries, proven by a four-tree out-of-tree experiment (healthy 155/0 rc0, F3A="" 155/0 rc0 with B16 still PASS, empty+pin rc 1, healthy+pin 155/0 rc0) — changelog [0.4.260], landed suite 155/0 unchanged (REGISTRY's pinned 155 holds), regcov 464/0, qsc rc 0 111/215/202/3, test_queue_source 278/0, repo-lint rc 0 190 files 264 headings 8283 citations 0 missing; three families rejected by reading (plant/mutate/make_copy teethed in-helper at 5 definitions, teeth-in-condition x2, counters+heredoc fixtures), the second family (19 text-scan guards) measured un-teeth'd on budget_show SRC="" 89/0 rc0 and queued as (bc); disclosed: this run's symlinked probe layout let ctl_copy cp -a four live tools through the K-series plants — git checkout restored all four byte-identical to HEAD, no commit carried the damage, guard queued as (bd); STEP 0 0/0 unread + INBOX 80/80 nothing owed no row written, production 0.4.28 never 0.4.29, spend 0.00, no push
=== FINAL porcelain:
(empty above = PROGRESS committed)
> build · mimo-v2.6-flash-free
$ cd /data/repo && echo "=== STEP 0 final re-read"; ./tools/inbox-status | tail -5; for db in /opt/startup/dev/data/messages.db /opt/startup/prod/data/messages.db; do printf '%s unread=%s\n' "$(basename $(dirname $(dirname $db)))" "$(sqlite3 "$db" "SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0")"; done; echo "=== FINAL git:"; git status --porcelain; echo "[porcelain empty above]"; git log --oneline -2 | cut -c1-70; echo "=== tools restored + untouched by this run's commits:"; git diff HEAD --stat -- tools/ | tail -2; echo "(no diff = tools clean)"; echo "=== spend:"; ./tools/budget-show | grep -E '2026-10' | head -3
=== STEP 0 final re-read
  messages unread : dev 0 / prod 0 / total 0
  last reply      : dev 144 / prod 109
  INBOX.md        : 80 entries, 80 handled, 0 open

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
dev unread=0
prod unread=0
=== FINAL git:
[porcelain empty above]
fb5da25 run 793 (close): post-commit readings for 1f6990e — qsc rc 0
1f6990e run 793: queue item (bb) CLOSED BY PROBE + ONE PIN — the sil
=== tools restored + untouched by this run's commits:
(no diff = tools clean)
=== spend:
Month:       2026-10
  - 2026-10-01: month rolled per brief §4 (balance resets to 5.00 on the 1st, unspent does NOT roll over). September history above is kept verbatim; September closed at spent 1.50 / remaining 3.50.
  - 2026-10-02: October opened at spent 0.00 / remaining 5.00 because no October charge exists in any file on this box — while gladex.de is a known 1.50/mo recurring cost with NO renewal date recorded anywhere. Figure to be corrected the moment the investor answers REPORT.md §14.
> build · mimo-v2.6-flash-free
Run complete. Summary:

## STEP 0 — investor duty (paid first)
`investor_to_agent` unread = **0 in both DBs** (`dev` / `prod`), `INBOX.md` **80 entries / 80 handled / 0 open**, `./tools/inbox-status` → **rc 0 "nothing owed"**. The newest open-looking entry (2026-10-05) is marked `HANDLED` and already carries its answer (dev **144** / prod **109**), which also records the investor's correction: **production is 0.4.28, never 0.4.29**. No reply was owed, so **no row written, nothing marked read, `INBOX.md` untouched** — re-verified at the close.

## The step: queue item (bb) — silent-skip class, measured then fixed
Two static passes over all **48 `.sh` suites** produced **75 hand-read guard candidates** (127 `&&`-condition statements, 68 bare-command guards, 10 of them Python-heredoc false positives). Classification:

| family | sites | verdict |
|---|---|---|
| `plant`/`mutate`/`make_copy` (teeth inside the helper) | 24 | **rejected** — all 5 definitions read, every failure path `bad`s before `return 1` |
| teeth-in-condition / assertion on other path / counters / never-executed heredoc fixture | 7 | **rejected** |
| **`B16`** in `test_detached_children.sh` | 1 | **un-teeth'd → fixed** |
| 19 text-scan guards (`SRC=$(cat "$TOOL")` …) | 19 | **measured un-teeth'd → queued (bc)** |

`B16`'s inverted guard put the `ok` in the `else`, so an unwritten pid file short-circuited past the probe and printed `PASS` while measuring nothing. Proven by a four-tree out-of-tree experiment: healthy **155/0 rc0** → `F3A=""` **155/0 rc0 with B16 still PASS** (un-teeth'd) → empty + pin **rc 1** → healthy + pin **155/0 rc0** (fix adds no assertion, so `REGISTRY`'s pinned *155* still holds).

## Disclosed: this run damaged 4 live tools and restored them
My first probe layout symlinked `tools/`; `ctl_copy`'s `cp -a` copies a symlink *as a symlink*, so the suite's K-series plants wrote into `/data/repo/tools/{budget-show,version-check,regression-run,go-compile-drift-verify}`. Caught by `git status`, restored with `git checkout --` on exactly those four, **md5-identical to `HEAD`**, trees rebuilt with real copies, `diff -r` clean. No commit ever carried the damage; the guard that would have prevented it is queued as **(bd)** with this incident as its reproduction.

## Close state
- Commits: `1f6990e` (fix + `CHANGELOG [0.4.260]` + PROGRESS, appended *before* it) and `fb5da25` (close readings, re-appended first) — `git status --porcelain` **empty**.
- Gates: `test_detached_children` **155/0**, `registry_coverage` **464/0**, `test_queue_source` **278/0**, `queue-source-check` **rc 0** (111/215/202/3), `repo-lint` **rc 0** (265 headings, 8,289 citations, 0 missing), `system-status` **rc 1** with the single FAIL being two other desks' failed units (no `reset-failed`), `version-check` **0.4.28 = 0.4.28**, `disk-show` rc 0, `red-watch` 23/7 (all others-or-no-push).
- Spend **0.00**, free model only, no secrets, no DNS/mail/units, no push.
exit=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Thu Oct  8 11:46:03 2026] 127.0.0.1:54738 Accepted
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54738 Closing
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54740 Accepted
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54740 Closing
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54744 Accepted
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54744 Closing
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54760 Accepted
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54760 Closing
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54768 Accepted
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54768 Closing
[Thu Oct  8 11:46:03 2026] 127.0.0.1:54782 Accepted
[Thu Oct  8 11:46:04 2026] 127.0.0.1:54782 Closing
[Thu Oct  8 11:46:04 2026] 127.0.0.1:54788 Accepted
[Thu Oct  8 11:46:04 2026] 127.0.0.1:54788 Closing
[Thu Oct  8 11:58:41 2026] 127.0.0.1:42846 Accepted
[Thu Oct  8 11:58:41 2026] 127.0.0.1:42846 Closing
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37018 Accepted
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37018 Closing
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37034 Accepted
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37034 Closing
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37040 Accepted
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37040 Closing
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37044 Accepted
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37044 Closing
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37046 Accepted
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37046 Closing
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37050 Accepted
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37050 Closing
[Thu Oct  8 12:00:10 2026] 127.0.0.1:37066 Accepted
[Thu Oct  8 12:00:11 2026] 127.0.0.1:37066 Closing
[Thu Oct  8 12:00:11 2026] 127.0.0.1:37068 Accepted
[Thu Oct  8 12:00:11 2026] 127.0.0.1:37068 Closing
[Thu Oct  8 12:00:11 2026] 127.0.0.1:37078 Accepted
[Thu Oct  8 12:00:11 2026] 127.0.0.1:37078 Closing
[Thu Oct  8 12:00:11 2026] 127.0.0.1:37084 Accepted
[Thu Oct  8 12:00:11 2026] 127.0.0.1:37084 Closing
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60490 Accepted
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60490 Closing
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60500 Accepted
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60500 Closing
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60504 Accepted
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60504 Closing
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60518 Accepted
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60518 Closing
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60526 Accepted
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60526 Closing
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60538 Accepted
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60538 Closing
[Thu Oct  8 12:01:00 2026] 127.0.0.1:60548 Accepted
[Thu Oct  8 12:01:01 2026] 127.0.0.1:60548 Closing
[Thu Oct  8 12:01:01 2026] 127.0.0.1:60564 Accepted
[Thu Oct  8 12:01:01 2026] 127.0.0.1:60564 Closing
[Thu Oct  8 12:01:01 2026] 127.0.0.1:60566 Accepted
[Thu Oct  8 12:01:01 2026] 127.0.0.1:60566 Closing
[Thu Oct  8 12:01:01 2026] 127.0.0.1:60582 Accepted
[Thu Oct  8 12:01:01 2026] 127.0.0.1:60582 Closing
[Thu Oct  8 12:01:07 2026] 127.0.0.1:38854 Accepted
[Thu Oct  8 12:01:07 2026] 127.0.0.1:38854 Closing
[Thu Oct  8 12:01:08 2026] 127.0.0.1:38858 Accepted