Tutors release harness — release pass

2026-10-15T21:21:41.791Z · clock 2026-09-16T09:05:00.000Z · 5 run(s) per side · harness 1.39.0

• every difference is claimed
• A/A consulted: clean at 2026-10-15T21:09:11.052Z
• In-run A/A (a to a2, 1 run, dom, network, console, headers, axe, focus; 6 journey(s)): 6 difference(s); 2 of this run's 5 a/b difference(s) also seen a to a2 (noise by measurement). Reported, never gates.
  the differences a to a2

  • dom replay:talk-01: replay:talk-01: semantic DOM differs (+60 −0 lines at line 1)
  • network GET /_app/immutable/chunks/{{hash}}.js: replay:talk-01: GET /_app/immutable/chunks/{{hash}}.js requested 35× on a, 36× on a2
  • network GET {{course}}/tutors.json: replay:talk-01: new request on a2: GET {{course}}/tutors.json
  • network GET /_app/immutable/assets/1.{{hash}}.css: replay:talk-01: new request on a2: GET /_app/immutable/assets/1.{{hash}}.css
  • network GET /_app/immutable/nodes/1.{{hash}}.js: replay:talk-01: new request on a2: GET /_app/immutable/nodes/1.{{hash}}.js
  • network GET /talk/localhost:8080/unit-1/topic-01/talk-01/__data.json?x-sveltekit-invalidated=100: replay:talk-01: new request on a2: GET /talk/localhost:8080/unit-1/topic-01/talk-01/__data.json?x-sveltekit-invalidated=100

Image artefacts

Collected from the images, not the running apps. A cell that says NOT COLLECTED was not compared.

Load (k6, 20 req/s for 30s)

Differences (58; 0 unclaimed)

error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n    at Object.getCatalogue ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:102918)\n    at V ({{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:484)\n    at Wn ({{origin}}/_app/immutable/chunks/XgCIYxIE.js:2:24206)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching courses:"}

error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n    at Object.getStudentCount ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:103346)\n    at {{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:5193\n    at Cr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:23871)\n    at {{origin}}/_app/immutable/chunks/Cv2zGAZD.js:2:2704\n    at mr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:21611)\n    at vr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:22749)\n    at Xt ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:12091)\n    at #_ ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:9277)\n    at e.flush ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:10794)\n    at Array.<anonymous> ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:11554)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching course count:"}

catalogue: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
           b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
live: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
      b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
reader: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
        b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
reader-auth: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
             b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
time: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter
      b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter

catalogue: first healthy / 488 → 482 ms, ready 2376 → 2370 ms (median, a → b, n=5/5)
live: first healthy / 454 → 493 ms, ready 2311 → 2339 ms (median, a → b, n=5/5)
reader: first healthy / 598 → 612 ms, ready 2362 → 2367 ms (median, a → b, n=5/5)
time: first healthy / 471 → 453 ms, ready 2436 → 2326 ms (median, a → b, n=5/5)

Policy: what b must be informing

Checks on the candidate alone, whatever production is: image hardening (root user, no healthcheck, a secret in the environment or the layer history), build provenance (SLSA provenance from image-build.yml) and the vulnerability ceiling (a critical or high advisory with a fix available). Informing: reported, never gates; a claim can still cover a finding. Hover a cell for what was checked.

Informing (32; 32 unclaimed) reported, never gates

18 of 27 engines are blocking; informing (reported, never gates): timing (no date set to block; load/errors still blocks), image-hardening (no date set to block), build-provenance (no date set to block), vuln-ceiling (no date set to block), timing-tolerance (no date set to block), asset-graph (no date set to block), replay (no date set to block), slo (no date set to block), realtime (no date set to block). An informing engine's findings are listed here and never change the verdict, the Gate or the exit code; a claim can still cover one.

Claim hygiene

3 claim(s) cover 5 failing hunk(s): 1.67 per claim, at most 2 under one (flagged above 10).

Masks

Fired: response-date×92, request-id×92, etag×92, metrics-process×602, metrics-timing-histograms×12, third-party-requests×1518, persistence-stub-requests×140, oauth-callback-state×10, media-range-status×46, hashed-assets×5011, footer-tutors-version×340, transport-length×92, transport-connection×92, transport-keepalive×92.
Silent this run: realtime-rest-fallback-warning, chromium-compute-pressure-policy, transport-encoding, transport-transfer — a mask that never fires is a mask to delete.