# timing: journey student-signs-in slower on b: covers its 1 difference. Name the Rule that intends it, or fix it.
  - artefact: "timing"
    scope: "student-signs-in"
    rule: "????"
    reason: "journey student-signs-in slower on b: 1 difference (1 name); likely #483, #478, #481"

Tutors release harness — release fail

2026-10-15T19:51:41.408Z · clock 2026-09-16T09:05:00.000Z · 5 run(s) per side · harness 1.37.4

• 1 unclaimed diff(s)
• A/A consulted: clean at 2026-10-15T19:39:16.959Z
• In-run A/A (a to a2, 1 run, dom, network, console, headers, axe, focus; 6 journey(s)): 6 difference(s); 2 of this run's 6 a/b difference(s) also seen a to a2 (noise by measurement). Reported, never gates.
  the differences a to a2

  • dom replay:topic-02: replay:topic-02: semantic DOM differs (+0 −75 lines at line 1)
  • network GET {{course}}/tutors.json: replay:topic-02: request no longer made on a2: GET {{course}}/tutors.json
  • network GET /_app/immutable/assets/1.{{hash}}.css: replay:topic-02: request no longer made on a2: GET /_app/immutable/assets/1.{{hash}}.css
  • network GET /_app/immutable/chunks/{{hash}}.js: replay:topic-02: GET /_app/immutable/chunks/{{hash}}.js requested 42× on a, 41× on a2
  • network GET /_app/immutable/nodes/1.{{hash}}.js: replay:topic-02: request no longer made on a2: GET /_app/immutable/nodes/1.{{hash}}.js
  • network GET /topic/localhost:8080/unit-1/topic-02/__data.json?x-sveltekit-invalidated=100: replay:topic-02: request no longer made on a2: GET /topic/localhost:8080/unit-1/topic-02/__data.json?x-sveltekit-invalidated=100

Image artefacts

Collected from the images, not the running apps. A cell that says NOT COLLECTED was not compared.

Load (k6, 20 req/s for 30s)

Differences (42; 1 unclaimed)

error: Failed to load resource: net::ERR_NETWORK_CHANGED: https://www.setu.ie/img/logos/setu-logo.svg

error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n    at Object.getCatalogue ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:102918)\n    at V ({{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:484)\n    at Wn ({{origin}}/_app/immutable/chunks/XgCIYxIE.js:2:24206)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching courses:"}

error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n    at Object.getStudentCount ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:103346)\n    at {{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:5193\n    at Cr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:23871)\n    at {{origin}}/_app/immutable/chunks/Cv2zGAZD.js:2:2704\n    at mr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:21611)\n    at vr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:22749)\n    at Xt ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:12091)\n    at #_ ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:9277)\n    at e.flush ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:10794)\n    at Array.<anonymous> ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:11554)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching course count:"}

catalogue: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
           b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
live: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
      b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
reader: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
        b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
reader-auth: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
             b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
time: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
      b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter

catalogue: first healthy / 403 → 411 ms, ready 2324 → 2337 ms (median, a → b, n=5/5)
live: first healthy / 414 → 403 ms, ready 2309 → 2322 ms (median, a → b, n=5/5)
reader: first healthy / 590 → 547 ms, ready 2356 → 2276 ms (median, a → b, n=5/5)
time: first healthy / 411 → 479 ms, ready 2334 → 2308 ms (median, a → b, n=5/5)

Policy: what b must be informing

Checks on the candidate alone, whatever production is: image hardening (root user, no healthcheck, a secret in the environment or the layer history), build provenance (SLSA provenance from image-build.yml) and the vulnerability ceiling (a critical or high advisory with a fix available). Informing: reported, never gates; a claim can still cover a finding. Hover a cell for what was checked.

Informing (14; 14 unclaimed) reported, never gates

19 of 27 engines are blocking; informing (reported, never gates): image-hardening (no date set to block), build-provenance (no date set to block), vuln-ceiling (no date set to block), timing-tolerance (no date set to block), asset-graph (no date set to block), replay (no date set to block), slo (no date set to block), realtime (no date set to block). An informing engine's findings are listed here and never change the verdict, the Gate or the exit code; a claim can still cover one.

Claim hygiene

3 claim(s) cover 5 failing hunk(s): 1.67 per claim, at most 2 under one (flagged above 10).

Masks

Fired: response-date×92, request-id×92, etag×92, metrics-process×599, metrics-timing-histograms×12, third-party-requests×1539, persistence-stub-requests×140, oauth-callback-state×10, media-range-status×42, chromium-compute-pressure-policy×1, hashed-assets×5014, footer-tutors-version×344, transport-length×92, transport-connection×92, transport-keepalive×92.
Silent this run: realtime-rest-fallback-warning, transport-encoding, transport-transfer — a mask that never fires is a mask to delete.