Gladex Agent Logs

 ---
 
 ## 11. Demo Instructions
 

> build · mimo-v2.6-flash-free
$ cd /data/repo && grep -n "10.2.3.1" STRUCTURE.md | head -5; echo "=== rc=$?"; grep -rn "10.2.3.1" REPORT.md | head -5
460:| Known limitation (open security decision, escalated to investor 2026-09-23 — prod chat msg 22 / dev msg 57) | **Apache `:443` ProxyPass defeats LAN-only gating on the VPS path.** `gladex-ssl.conf` does `ProxyPreserveHost On` + `ProxyPass / http://127.0.0.1:8001/`, so every internet request reaches the app as `REMOTE_ADDR=127.0.0.1` → gate ALLOW: `/investor`, `/mailbox` (read + send), `/api/messages`, `/budget`, `/trust`, `/changelog`, `/docs` are world-reachable. Proven 2026-09-23: public 200s (incl. all 21 chat messages), public `POST /mailbox/send` → 303 + real delivery to a local Maildir, 439 `.env` + 61 wp-login/phpmyadmin/xmlrpc/.git/cgi-bin + 60 scanner-UA probes logged, 244 `GET /investor` answered 200. Gate logic itself is correct (44 middleware tests green; direct non-proxied access from `77.90.15.49` is DENIED — `denials.log`). NOT closed from inside: the operator's active session (Mac/iPhone via tunnel peer `10.2.3.1`) uses exactly this path — blocking it would lock the investor out mid-session. Awaiting investor choice: **(A)** VPS injects X-Forwarded-For/PROXY-protocol + Apache `mod_remoteip` trusting the tunnel peer (module present, not enabled), **(B)** Apache basic auth on investor paths (`authn_file`/`authn_core`/`ssl` loaded; credential outside git, never in prompts/logs), **(C)** VPS-side `:443` ACL. No config change or spend made pending that decision. |
=== rc=0
159:> line ever carries a real client IP (`10.2.3.1`/`10.2.3.8` only — the L4 mask recorded in
$ cd /data/repo && bash tests/test_report_demo.sh 2>&1 | tail -5; echo "rc=$?"
ok   - H6 the replay did not recurse (its own section H skipped itself)

===============================
report-demo suite: 74 passed, 0 failed
===============================
rc=0
> build · mimo-v2.6-flash-free
✗ Edit repo/REPORT.md failed
Error: Could not find oldString in /data/repo/REPORT.md. It must match exactly, including whitespace and indentation.
> build · mimo-v2.6-flash-free
$ cd /data/repo && sed -n '136,170p' REPORT.md
## 10. Kill Criteria (When to Pivot/Stop)

1. **Context transfer fails**: Cannot demonstrate context transfer between 2+ AI tools in <1 minute
2. **MCP incompatibility**: MCP server fails to connect with any standard MCP client (Claude Desktop, Continue)
3. **VS Code broken**: Extension cannot sync editor context to gladex server
4. **Cost overrun**: Total infrastructure cost exceeds 2.00€/mo without revenue path
5. **Onboarding friction**: No beta tester can complete the getting-started guide without help
6. **No adoption**: Zero external downloads after 30 days of public availability

> **MEASURED 2026-10-12 (run 909)** — §10 had never been evaluated; criteria **#4** and
> **#6** were read off the box today, read-only.
> **#4 Cost overrun: NOT triggered** — `budget-show` → 2026-10 **5.00 / 0.00 / 5.00**,
> ceiling 2.00€ untouched, no money moved.
> **#6 No adoption: not evaluable as written on 2026-10-20**, and that is a finding, not a
> shrug. Day 30 of public availability (2026-09-20 → **2026-10-20**) cannot be reconstructed:
> Apache rotates its vhost logs after **14 days** (`/etc/logrotate.d/apache2`, so both
> `gladex-ssl-access.log` and `other_vhosts_access.log` start at **2026-09-28**), the app's
> own request logs contain **0** lines naming `download/gladex`, and `app.php:482` serves the
> binary with `readfile()` and **counts nothing**. What *does* survive (2026-09-29 →
> 2026-10-12) reads: **24** hits — **12 bot**, **6 self-curl**, **6 browser-like** — of which
> **12 completed the 13,586,724-byte transfer: 9 crawlers and 3 probes from this box, zero
> browser-like clients**; all six browser-like requests stopped short (0.1–12.9 MB), and no
> line ever carries a real client IP (`10.2.3.1`/`10.2.3.8` only — the L4 mask recorded in
> `STRUCTURE.md`). So the defensible statement today is *"no confirmed external human
> download in the 14 days that survive"*, which is **not** §10 #6's 30-day claim. One trap
> for whoever reads the log next: the `:443` byte field is **not** the body size (same
> request: delivered 13,586,724, logged 13,646,143; `/healthz` delivered 102, logged 4,377;
> the port-80 control logs body+headers exactly), so "complete" here means ≥13.6 MB — a
> threshold that separates cleanly (largest truncated 12,930,336, smallest complete
> 13,642,116). Full evidence, controls and class rules:
> `agent-logs/kill-criteria-baseline-2026-10-12.md`.
> **#1, #2, #3, #5 untouched**: they need a demo, an IDE or a tester — no log answers them;
> #2 was last measured 2026-10-10 (MCP `initialize` → `serverInfo gladex-mcp`).
> Unnumbered follow-up recorded in that artifact: an append-only download counter is the
> build · mimo-v2.6-flash-free
← Edit repo/REPORT.md
Index: repo/REPORT.md
===================================================================
--- repo/REPORT.md
+++ repo/REPORT.md
@@ -156,9 +156,9 @@
 > 2026-10-12) reads: **24** hits — **12 bot**, **6 self-curl**, **6 browser-like** — of which
 > **12 completed the 13,586,724-byte transfer: 9 crawlers and 3 probes from this box, zero
 > browser-like clients**; all six browser-like requests stopped short (0.1–12.9 MB), and no
 > line ever carries a real client IP (`10.2.3.1`/`10.2.3.8` only — the L4 mask recorded in
-> `STRUCTURE.md`). So the defensible statement today is *"no confirmed external human
+> `agent-logs/PROGRESS.md`). So the defensible statement today is *"no confirmed external human
 > download in the 14 days that survive"*, which is **not** §10 #6's 30-day claim. One trap
 > for whoever reads the log next: the `:443` byte field is **not** the body size (same
 > request: delivered 13,586,724, logged 13,646,143; `/healthz` delivered 102, logged 4,377;
 > the port-80 control logs body+headers exactly), so "complete" here means ≥13.6 MB — a

> build · mimo-v2.6-flash-free
$ cd /data/repo && ./tools/version-check; ./tools/budget-show | head -6; ./tools/healthcheck 2>&1 | tail -5; echo "=== git:"; git status --porcelain; git status -sb | head -1; git rev-list --count origin/main..main
OK: dev=0.4.28 prod=0.4.28 (match)
=== Budget Status ===
Month:       2026-10
Allowance:   5.00 €
Spent:       0.00 € (no October charge in any file — MEASURED 2026-10-12: no public registry source can date a renewal (DENIC RDAP publishes only a "last changed" event, and does so for every .de domain; DENIC whois has no expiry field; the IANA RDAP bootstrap has no "de" entry), so the one open unknown is your billing cadence: monthly 1.50 as brief §4 states, or annual at the 2027-09-20 registration anniversary? Still NEEDS-INVESTOR, REPORT.md §14)
Remaining:   5.00 €

  HTTP: 200
  Response: {"status":"ok","service":"gladex-investor-app","env":"dev","timestamp":1791787682,"version":"0.4.28"}
prod: HEALTHY
  HTTP: 200
  Response: {"status":"ok","service":"gladex-investor-app","env":"prod","timestamp":1791787682,"version":"0.4.28"}
=== git:
 M REPORT.md
?? agent-logs/kill-criteria-baseline-2026-10-12.md
## main...origin/main [ahead 4]
4
$ cd /data/repo && bash tests/test_report_demo.sh 2>&1 | tail -3; echo "---"; ./tools/queue-source-check; echo "qsc rc=$?"; ./tools/inbox-status; echo "inbox rc=$?"
===============================
report-demo suite: 74 passed, 0 failed
===============================
---
queue-source-check: OK - one queue: [0.4.311] pointer-only, 111 item line(s) frozen across 266 section(s), 203 PROGRESS bullet(s), 2 path token(s)
qsc rc=0
inbox-status — STEP 0 investor duty

  messages unread : dev 0 / prod 0 / total 0
  last reply      : dev 145 / prod 110
  INBOX.md        : 80 entries, 80 handled, 0 open

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
inbox rc=0
> build · mimo-v2.6-flash-free
Now the PROGRESS entry — appended **before** the commit that carries it (CLOSE PROTOCOL rule 1):
$ cd /data/repo && cat >> agent-logs/PROGRESS.md <<'ENTRY'

## Builder — run 909 — §10 kill criteria evaluated for the first time (read-only, log-based): **#4 NOT triggered (0.00 of 2.00), #6 not evaluable as written** — Apache keeps 14 days, the app counts nothing, so 2026-10-20's "30 days" answer cannot be reconstructed; the surviving window (24 hits, 12 complete) holds **zero complete browser-like downloads** — 9 crawlers + 3 self-probes

- **STEP 0 paid first, owed nothing — no row written.** Schema re-checked, then `SELECT COUNT(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod** (both `/opt/startup/{dev,prod}/data/messages.db`); `./tools/inbox-status` → **rc 0**, `OK - nothing owed (0 unread, 0 open entries all replied)`, last reply **dev 145 / prod 110**, `INBOX.md` **80 / 80 / 0 open**, `grep '^## ' INBOX.md | grep -cv HANDLED` → **0**. **No `agent_to_investor` row inserted in either database, nothing marked read, `INBOX.md` untouched** — an empty inbox is answered by the measurement, not by a status row. **Production is 0.4.28** — `./tools/version-check` → `OK: dev=0.4.28 prod=0.4.28 (match)`, **0.4.29 never quoted**; `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**; `./tools/healthcheck` → **dev + prod HEALTHY, HTTP 200, version 0.4.28** each; spend **0.00**, free `*-free` model only (`opencode/mimo-v2.6-flash-free`), no key configured, **no secret or PII in any prompt, file or commit**.

- **The queue read, and why this item.** Run 908 handed **(a)**: *the first run starting **after 09:15 CEST** owns `systemctl --failed` once* (the seven identity timers fire 08:06–08:56). This run started **08:25 CEST**, i.e. before the window, so that order belongs to a later run. Disclosed rather than smoothed over: `systemctl --failed` was **not** read directly, but `./tools/system-status` at 08:30 carries its row — **`failed-units [FAIL]` = `identity-run@{dispatcher,sofia}.service`** (mia already recovered), and that read is **pre-retry** (dispatcher 08:50 / sofia 08:56 had not fired), therefore superseded by the fresh 08:xx markers and **acted on by nobody here**. Everything else standing is investor-gated (**(2'')**, **(93)**/**(97)(a)** 2 proposals in the investor's seat, **LAN A/B/C**, **(av)(d)**, **(i)**, **SOA**, **§14**, **Pip**, **(113)** operator) or owned elsewhere (**A12/A30** named cause, no `reset-failed`/restart/edit from here; **A28** clear while this commit is docs; the run-907 **NUL-blob watch** is conditional on a measured harm and was not re-probed). So this run took the queue's standing alternative and picked the one line nobody has ever evaluated: **`REPORT.md` §10's six kill criteria**, the clause with a date on it — **#6's day 30 is 2026-10-20** — and the free half of #4. `grep -i "kill criteri" agent-logs/PROGRESS.md` returned only the two lines of the run that *wrote* §10, and **no suite pins §10 at all** (`grep -rli "kill criteri" tests/` → empty), so this is measurement, not a re-measurement.

- **Retention first, because it decides the question.** Vhost config read, not guessed: `sites-available/gladex.conf` (`*:80`) has **no** `CustomLog` of its own → `other_vhosts_access.log` (`vhost_combined`/`%O`); `gladex-ssl.conf:21` sends `*:443` → `gladex-ssl-access.log` (`combined`/`%b`); `gladex-git.conf` has its own pair. `/etc/logrotate.d/apache2` → **`rotate 14`**, and both families verify it: first surviving line **2026-09-28 00:01:24**, newest **2026-10-12 08:44** across live + `.1` + all 14 `.gz` rotations. The two other possible sources were checked so the claim does not rest on one: the legacy `gladex-access.log.1` covers only **2026-09-21 20:43:30 → 21:54:26**, and the app's request logs (`dev-8000.log`, 31,805,158 B / `prod-8001.log`) hold **0** lines naming `download/gladex`. **So the 2026-09-20→09-27 days are gone today, and by 2026-10-20 ten days of the 30-day window will be unrecoverable from any file on this box.**

- **The count, and the correction made to it mid-run.** Every non-cloud file in `/var/log/apache2` (live, `.1`, `.14`-descending `.gz`) was counted **per file before concatenation**: **24 hits across 13 files**, 21 × `200` on :443 + 3 × `301` on :80, spanning **11** dates, **2026-09-29 23:12:34 → 2026-10-12 06:44:36**, busiest 2026-10-10 (9). The first collection pass found only **21** — it globbed `*.gz` and silently skipped the uncompressed `.1` files; it was redone with the per-file counter, and the artifact records both numbers so the undercount cannot be inherited. Classes (rule stated in the artifact; 24/24 parsed, 0 unparsed): **bot 12, self-curl 6, browser-like 6**. Outcome split by a ≥13,600,000 B threshold: **12 complete = 9 crawlers + 3 self-probes + 0 browser-like**; **9 truncated = 6 browser-like (0.1–12.9 MB of 13,586,724), 2 bot, 1 self-curl**; the gap is wide (largest truncated **12,930,336**, smallest complete **13,642,116**), so the split does not hinge on the threshold. **Peers are `10.2.3.1` ×19 and `10.2.3.8` ×5 — no real client IP on any line**, i.e. the L4 mask already recorded at `PROGRESS.md:1857`, which is why "external" cannot be argued from an address either way.

- **The byte-field trap, measured with three controls instead of assumed.** A controlled `GET /download/gladex` through `:443` delivered exactly **13,586,724** B (`size_download`; `md5 50c2b4b611d086bdae268578c876cc0d` identical to `/opt/startup/prod/bin/gladex`; re-read with `--ignore-content-length` → still 13,586,724, so no client-side early stop; the backend's raw socket output is **13,587,016** B = 292 header + body, i.e. **no bytes after the body**) while the **same request logged 13,646,143** (+59,419, +0.44%); `/healthz` delivered **102** and logged **4,377**; `/` delivered **3,922** and logged **8,228**; the no-TLS control behaves exactly as its format promises — port-80 `301` with a **316**-byte body logs **530** = body + headers. Conclusion on file: **the `:443` byte field tracks wire/TLS-level bytes, not the HTTP body**, so it must never be quoted as "bytes of the binary"; the mechanism is left unresolved and stated as such, because the threshold's 711,780-byte gap makes the classification independent of it.

- **#4 measured, not triggered; #1/#2/#3/#5 out of scope by construction.** `budget-show` → **allowance 5.00 / spent 0.00 / remaining 5.00** against the criterion's 2.00€/mo ceiling → **not triggered**. #1/#3/#5 need a live demo, an IDE and a beta tester — no log answers them; **#2** was last measured **2026-10-10** (`gladex mcp --port 50052` → `initialize` → `serverInfo {"name":"gladex-mcp"}`) and was **not** re-probed this run — starting a server for a two-day-old green is not this step's value.

- **Deliverables: one artifact, one blockquote, no code.** `agent-logs/kill-criteria-baseline-2026-10-12.md` (full evidence, controls, class rules, safety lines) and a dated `> **MEASURED 2026-10-12 (run 909)**` blockquote appended inside `REPORT.md` §10, which had carried six criteria with **zero** evaluations — both stating the honest form of #6: *"no confirmed external human download in the 14 days that survive"*, which is **not** §10's 30-day claim. `app.php:482`'s `readfile()` counts nothing, `stats.php` has **0** occurrences of `download`, `/api/stats` is system stats only — **the one place that could count every download counts none**, which is the unnumbered follow-up recorded in the artifact: an append-only counter is the only thing making #6 evaluable later than 2026-10-20, and it is **code**, so its own run, its own test, its own CHANGELOG heading and its own reviewer gate — **no new queue item invented, no numbered item closed**, and deliberately not driven by a log-reading run while another desk has `tests/` mid-edit.

- **Verification, not assertion.** `bash tests/test_report_demo.sh` → **74 passed / 0 failed** (run after each REPORT edit); `./tools/queue-source-check` → **rc 0**, `one queue: [0.4.311] pointer-only, 111 item line(s) frozen across 266 section(s), 203 PROGRESS bullet(s), 2 path token(s)` — **R8 satisfied by this entry naming `[0.4.311]` below, R1 untouched (no `### Queue` line, no CHANGELOG edit)**; `./tools/inbox-status` → rc 0; `./tools/version-check` → `0.4.28` match; `./tools/budget-show` → 5.00/0.00/5.00; `./tools/healthcheck` → dev + prod HEALTHY. `grep -nE "[0-9]+\.[0-9]+\.[0-9]+"` over the new artifact returns only the IP `10.2.3.1`, whose token boundaries exclude it from the citation gate — **no version token was added anywhere**, so `repo-lint`'s changelog-citation gate has nothing new to check and newest stays **`[0.4.311]`**.

- **Pre-commit readings (08:52 CEST).** `git status --porcelain` → **` M REPORT.md`** + **`?? agent-logs/kill-criteria-baseline-2026-10-12.md`** only (the sibling desk's `tests/test_build_sh.sh` edit landed as `0c599b6` before this reading, so the worktree held no foreign file at stage time); `git status -sb` → `## main...origin/main [ahead 4]`, `git rev-list --count origin/main..main` → **4**; `./tools/system-status` (08:30) → `git-tree [WARN] 1 uncommitted changes` (this run's REPORT edit, taken after), `investor-duty [OK] owed=0 unread=0 unreplied=0 open=0`, `queue-source [OK] [0.4.311]`, **`Overall: 1 CHECK(S) FAILED` = `failed-units` only** (pre-retry, superseded).

- **Scope and safety, one line each:** git sees **three paths** — `REPORT.md`, `agent-logs/kill-criteria-baseline-2026-10-12.md`, `agent-logs/PROGRESS.md` — staged **explicitly by path** after `git status --porcelain` was read, **never `git add -A`** (this worktree is shared with sibling desks). **No `tools/`, no `tests/`, no `app/` file edited → no reviewer gate, no CHANGELOG heading, monitor A28 stays clear, nothing to promote**; dev and prod untouched (**0.4.28**). Every HTTP call was a **GET or HEAD against our own services** (four probes plus the two reads), no `POST`, no write endpoint touched, nothing marked read, **no live messages DB write**; `/var/log/apache2` was **read only** — the only lines this run added there are its own four GETs; scratch scripts and bodies stay in `/tmp/opencode/` **uncommitted**, per the demo-audit precedent. **No `systemctl`, no `systemctl reset-failed`, no unit or timer change, no `rm`/`rename`/`chmod`, no DNS write, no mail sent, no paid API, no API key configured**, spend **0.00**, free `*-free` models only.

- **Queue — next small step (read this first):** **no numbered item invented and none closed** — this run evaluated §10 for the first time and fixed nothing that was broken. Next, in order: **(a)** the first run starting **after 09:15 CEST** owns `systemctl --failed` **once** → **empty** = the standing order executes (full `./tools/regression-run`, report the **first all-green totals**, naming A12/A30 as cleared by the green fires), **still failed** = read the **fresh 08:50/08:56 markers** and update the class census (never re-diagnose yesterday's — this run's 08:30 system-status row is pre-retry and superseded by them); **(b)** **STEP 0 first every run** (today: **0 unread dev / 0 prod**); **(2'')** the day the `GETTING_STARTED.md` keep/fold/retire answer arrives; **(93)**/**(97)(a)** first if the investor answers `hiring/queue/*.json` (**2 proposed**: `marco-steiner`, `ruben-stoll` — approving or withdrawing is never this desk's move); **§14 renewal** — **do NOT re-probe DENIC/whois/IANA** (run 908 settled them), wait for the cadence answer; **the LAN-only A/B/C** (`STRUCTURE.md:460`) — quote run 906's 2026-10-12 figures (**110 messages / 189,209 bytes**), no fix without the investor's letter; **A12/A30** keep their named cause with **no `reset-failed`, no restart, no `identity-run.sh` edit**; **NUL-blob watch** (run 907) re-opens **only on a measured harm**; **A28** stays clear (this commit is `REPORT.md` prose + one new artifact + PROGRESS); **(av)(d)** after the `REPORT.md` §14 sign-off (**still no `rm` without it**), **(i)** blocked by the live writers until the prune lands; **SOA MNAME**, **§14's remaining cadence question** and **Pip's mail-policy research** stay NEEDS-INVESTOR; **(113)**'s two `cp`s stay operator-blocked on the host; the **`[0.4.258]`** citation watch stays discharged — and **this run did not edit `tools/REGISTRY.md`**, so it was not re-triggered; **Pip's nine gaps**, **(ax)**, **(e)**, the drift-verify line, **(aw)** and the `promote-gates` verdict watch stay closed/landed exactly as previously recorded. **New from this run, unnumbered and deliberately not queued as an item: the app-side download counter** (see the artifact's Follow-up) — pick it up as its own run with test + heading + reviewer gate, and on **2026-10-20** re-read §10 #6 against *this* run's numbers instead of re-collecting logs; if a later run wants the raw hits, `/tmp/opencode/dl-hits-20261012.txt` survives only until the next `/tmp` cleanup, so **re-count from the logs, not from that file**.

- **Close-state:** this entry is appended **before** the commit that carries it (CLOSE PROTOCOL rule 1) and is never `git checkout --`-ed, staged-only or parked in `/tmp` (rules 2–3); the stop-state check is `git status --porcelain` **not listing `agent-logs/PROGRESS.md`** after the commit. A second commit this run (post-push close readings) re-appends before commit #2.
ENTRY
echo "appended, lines now: $(wc -l < agent-logs/PROGRESS.md)"; grep -c "0.4.311" agent-logs/PROGRESS.md
appended, lines now: 18275
22
> build · mimo-v2.6-flash-free
$ cd /data/repo && git status --porcelain
M REPORT.md
 M agent-logs/PROGRESS.md
?? agent-logs/kill-criteria-baseline-2026-10-12.md
> build · mimo-v2.6-flash-free
$ cd /data/repo && git add -- REPORT.md agent-logs/PROGRESS.md agent-logs/kill-criteria-baseline-2026-10-12.md && git commit -q -m "run 909: REPORT §10 kill criteria evaluated for the first time (read-only) — #4 not triggered (0.00/2.00), #6 not evaluable on 2026-10-20 (rotate 14 erases 09-20..09-27, app.php:482 counts nothing, :443 byte field is wire not body), surviving window 24 hits / 12 complete = 9 crawlers + 3 self-probes + 0 browser-like" && git status --porcelain; echo "porcelain rc=$?"; git log --oneline -2; git status -sb | head -1
porcelain rc=0
febd905 run 909: REPORT §10 kill criteria evaluated for the first time (read-only) — #4 not triggered (0.00/2.00), #6 not evaluable on 2026-10-20 (rotate 14 erases 09-20..09-27, app.php:482 counts nothing, :443 byte field is wire not body), surviving window 24 hits / 12 complete = 9 crawlers + 3 self-probes + 0 browser-like
343cb3d identity leon shift 2026-10-12T06:34Z model=opencode/nemotron-3-ultra-free
## main...origin/main [ahead 5]
> build · mimo-v2.6-flash-free
> build · mimo-v2.6-flash-free
$ cd /data/repo && ./tools/queue-source-check; echo "qsc rc=$?"; ./tools/version-check
queue-source-check: OK - one queue: [0.4.311] pointer-only, 111 item line(s) frozen across 266 section(s), 203 PROGRESS bullet(s), 2 path token(s)
qsc rc=0
OK: dev=0.4.28 prod=0.4.28 (match)
$ cd /data/repo && ./tools/repo-lint 2>&1 | tail -6; echo "repo-lint rc=$?"
linted:   bash=63  go=45  json=12  php=58  python=21
  skipped:  binary=2  empty=6  no_shebang=4  unsupported_ext=187
  go-compile: 47 module file(s) compile clean (1.862s)
  changelog-version: 316 changelog version heading(s), 316 unique, 9734 citation(s) checked, 0 missing, 12545 bare token(s) counted
  elf-allowlist: 2 tracked ELF file(s), all shipped
result: all 199 linted file(s) parse clean (exit 0)
repo-lint rc=0
> build · mimo-v2.6-flash-free
$ for db in /opt/startup/dev/data/messages.db /opt/startup/prod/data/messages.db; do printf '%s unread=' "$db"; sqlite3 "file:$db?mode=ro" "SELECT count(*) FROM messages WHERE direction='investor_to_agent' AND read=0;"; done; cd /data/repo && ./tools/inbox-status | tail -2
/opt/startup/dev/data/messages.db unread=0
/opt/startup/prod/data/messages.db unread=0

verdict: OK - nothing owed (0 unread, 0 open entries all replied)
$ cd /data/repo && git push origin main 2>&1 | tail -3; echo "push rc=$?"; git status -sb | head -1; git rev-list --count origin/main..main; git status --porcelain; echo "porcelain-empty=$?"
To git://git.gladex.de/gladex.git
   ce2881d..febd905  main -> main
push rc=0
## main...origin/main
0
?? mailboxes/pip-inbox/2026-10-12-dispatcher-mail-policy-research.md
?? mailboxes/vera-inbox/2026-10-12-dispatcher-pii-recurrence-guard.md
porcelain-empty=0
> build · mimo-v2.6-flash-free
Run 909 is closed and pushed. Summary of this run:

**STEP 0 (answered first, as always)** — `SELECT … direction='investor_to_agent' AND read=0` → **0 unread in dev, 0 in prod**; `./tools/inbox-status` rc 0, `INBOX.md` 80/80 handled, 0 open. An empty inbox is answered by the measurement, so **no `agent_to_investor` row was written** and nothing was marked read (re-verified at close on read-only handles).

**Queue line taken** — Run 908 handed the post-09:15 `systemctl --failed` check to a later run; this one started 08:25 CEST, so it took the queue's standing alternative: the one line nobody has ever evaluated, **`REPORT.md` §10's six kill criteria** (day 30 of criterion #6 falls on 2026-10-20).

**What was measured (read-only)**
- **#4 Cost overrun — NOT triggered**: `budget-show` → 2026-10 **5.00 / 0.00 / 5.00** vs the 2.00 € ceiling.
- **#6 No adoption — not evaluable as written**: Apache rotates vhost logs after **14 days** (both families start 2026-09-28), the app's request logs hold **0** lines naming `download/gladex`, and `app.php:482` serves the binary with `readfile()` and **counts nothing** — so the 30-day window cannot be reconstructed on 2026-10-20.
- Surviving window (2026-09-29 → 10-12): **24 hits — 12 bot, 6 self-curl, 6 browser-like**; **12 complete transfers = 9 crawlers + 3 self-probes + 0 browser-like**; every browser-like request stopped short (0.1–12.9 MB of 13,586,724).
- Trap caught with controls: the **`:443` byte field is wire/TLS bytes, not the body** (same request delivered 13,586,724, logged 13,646,143; `/healthz` 102 vs 4,377; the port-80 control logs body+headers exactly) — recorded so nobody later reads it as "bytes of the binary".
- Collection bug fixed mid-run: the first pass under-counted (21 vs 24) by globbing only `*.gz`; redone with a per-file counter.

**Deliverables** — `agent-logs/kill-criteria-baseline-2026-10-12.md` (evidence, controls, class rules) + a dated blockquote in `REPORT.md` §10. Docs only: **no `tools/`, `tests/` or `app/` file touched → no CHANGELOG heading, A28 clear, nothing to promote**; the app-side download counter is recorded as an *unnumbered* follow-up (code → its own run + reviewer gate), not a new queue item.

**Close protocol** — entry appended **before** the commit, three paths staged **by explicit pathspec** (never `git add -A`; a sibling desk was mid-work), commit `febd905` pushed (`ce2881d..febd905`), `git status --porcelain` no longer lists `agent-logs/PROGRESS.md`. Backstops after the commit: `repo-lint` rc 0 (199 files, 316/316, 9,734 citations, 0 missing), `queue-source-check` rc 0 (R8 `[0.4.311]` named, 111 items frozen), `version-check` **0.4.28 match** (0.4.29 never quoted), dev+prod **HEALTHY**, spend **0.00**, free `*-free` model only, no DNS/mail/`systemctl`/DB writes anywhere.
exit=0

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Mon Oct 12 09:22:31 2026] 127.0.0.1:44850 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44850 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44862 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44862 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44868 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44868 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44882 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44882 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44886 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44886 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44892 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44892 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44902 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44908 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44902 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44908 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44916 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44916 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44920 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44920 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44930 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44930 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44946 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44946 Closing
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44958 Accepted
[Mon Oct 12 09:22:31 2026] 127.0.0.1:44958 Closing
[Mon Oct 12 09:22:32 2026] 127.0.0.1:44962 Accepted
[Mon Oct 12 09:22:32 2026] 127.0.0.1:44962 Closing
[Mon Oct 12 09:22:32 2026] 127.0.0.1:44968 Accepted
[Mon Oct 12 09:22:32 2026] 127.0.0.1:44968 Closing
[Mon Oct 12 09:22:32 2026] 127.0.0.1:44980 Accepted
[Mon Oct 12 09:22:32 2026] 127.0.0.1:44980 Closing
[Mon Oct 12 09:22:33 2026] 127.0.0.1:44986 Accepted
[Mon Oct 12 09:22:33 2026] 127.0.0.1:44986 Closing
[Mon Oct 12 09:22:34 2026] 127.0.0.1:44996 Accepted
[Mon Oct 12 09:22:34 2026] 127.0.0.1:44996 Closing
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56520 Accepted
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56520 Closing
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56522 Accepted
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56522 Closing
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56532 Accepted
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56532 Closing
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56548 Accepted
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56548 Closing
[Mon Oct 12 09:22:35 2026] 127.0.0.1:56560 Accepted
[Mon Oct 12 09:22:36 2026] 127.0.0.1:56560 Closing
[Mon Oct 12 09:22:36 2026] 127.0.0.1:56572 Accepted
[Mon Oct 12 09:22:36 2026] 127.0.0.1:56572 Closing
[Mon Oct 12 09:22:36 2026] 127.0.0.1:56574 Accepted
[Mon Oct 12 09:22:36 2026] 127.0.0.1:56574 Closing
[Mon Oct 12 09:22:37 2026] 127.0.0.1:56588 Accepted
[Mon Oct 12 09:22:37 2026] 127.0.0.1:56588 Closing
[Mon Oct 12 09:22:37 2026] 127.0.0.1:56602 Accepted
[Mon Oct 12 09:22:37 2026] 127.0.0.1:56602 Closing
[Mon Oct 12 09:22:38 2026] 127.0.0.1:56618 Accepted
[Mon Oct 12 09:22:38 2026] 127.0.0.1:56618 Closing
[Mon Oct 12 09:22:58 2026] 127.0.0.1:57256 Accepted
[Mon Oct 12 09:22:58 2026] 127.0.0.1:57256 Closing
[Mon Oct 12 09:22:59 2026] 127.0.0.1:57266 Accepted