Harness release fail

Gate: PASS (exit 0)

New since the last forecast

0 new, 0 gone in the unclaimed set since the forecast of 2026-10-17T09:47:54.314Z (sha-83d4ccf), beside the same baseline 17.0.0. The previous forecast was judged by harness 1.41.1, this one by 1.42.0: a harness change can move differences too.

Causes and the PRs behind them

2 causes, 2 with a PR named, 2 declared in that PR's CHANGELOG line (claimed from it when the release is cut, nothing owed on main). Merged since the forecast of sha-c867ee8: #504, #505. 2 causes are new since then, and only these PRs can have made them. The others are matched by path: the PRs whose files touch what the cause is about, ranked by the direct ones (the app's own source for a page, a Dockerfile for an image) before the indirect (the shared packages, a manifest). A lead to ask, never a verdict.

cause	differences	PRs
new dom: semantic DOM differs (+# −# lines at line #)	15	#505 (8 files, 0 direct) declared by #505 (dom, focus)
new focus: keyboard order changed (# stops on a, # on b)	3	#505 (8 files, 0 direct) declared by #505 (dom, focus)

PASS, explained: all 18 differences no claim covers yet are declared in the CHANGELOG line of the PR that made them (#505: 18). Nothing is owed on main; the release author pastes the claims from those lines when the release is cut.

Claims owed (0, and 2 declared)

2 of the 2 drafts are declared in a PR's CHANGELOG line (#505) and carry that line as the reason: nothing is owed on main, and the release author pastes them when the release is cut. One draft claim per cause, its scope narrowed and checked against this forecast's unclaimed differences: together they cover all 18, and none takes another cause's. Paste them under claims: in release/claims.yaml and name the Rule that intends each (rule: "????" is refused until you do), or drop rule and give the CHANGELOG entry as the reason, or fix the difference and drop its draft. On a forecast this takes the glance's place; the glance stays for release candidates.

  # dom: semantic DOM differs (+# −# lines at line #): covers its 15 differences. Declared by #505 in its CHANGELOG line: ready to paste when the release is cut.
  - artefact: "dom"
    scope: "{catalogue:home,live:home,reader-auth:course,reader-auth:topic,reader:course,reader:home,reader:lab-step,reader:lab-step-2,reader:search,reader:search-results,reader:topic,reference:course,reference:lab,reference:note,reference:topic}"
    reason: "CHANGELOG: Screen readers announce the Preferences button as \"Preferences\", and the search and close buttons announce their keyboard shortcuts (#505)"
  # focus: keyboard order changed (# stops on a, # on b): covers its 3 differences. Declared by #505 in its CHANGELOG line: ready to paste when the release is cut.
  - artefact: "focus"
    scope: "{catalogue:home,reader:home,reference:course}"
    reason: "CHANGELOG: Screen readers announce the Preferences button as \"Preferences\", and the search and close buttons announce their keyboard shortcuts (#505)"

6 of 8 dimensions measured (weight 85 of 100, renormalised); the rest are not measured and not counted.

dimension	weight	score	floor	where it lost points
Claim coverage	20	0		−20 unclaimed: dom /: reader:home: semantic DOM differs (+1 −1 lines at line 10) −20 unclaimed: dom /course/localhost:8080: reader:course: semantic DOM differs (+1 −1 lines at line 9) −20 unclaimed: dom /topic/localhost:8080/unit-1/topic-01: reader:topic: semantic DOM differs (+1 −1 lines at line 8) −20 unclaimed: dom /lab/localhost:8080/unit-1/topic-01/book-lab-01: reader:lab-step: semantic DOM differs (+1 −1 lines at line 8) −20 unclaimed: dom /lab/localhost:8080/unit-1/topic-01/book-lab-01/Step-01: reader:lab-step-2: semantic DOM differs (+1 −1 lines at line 8) (and 13 more like it, not counted again: report.html#differences)
Noise health	15	80		−5 mask realtime-rest-fallback-warning fired nothing in this run (a mask that never fires is a mask to delete) −5 mask chromium-compute-pressure-policy fired nothing in this run (a mask that never fires is a mask to delete) −5 mask transport-encoding fired nothing in this run (a mask that never fires is a mask to delete) −5 mask transport-transfer fired nothing in this run (a mask that never fires is a mask to delete)
Statistical margin	10	100		—
Rehearsals	10	100		—
Test signal	15	40	breached	−30 mutation score 72.73% on @tutors/i18n, below 80% −30 mutation score 55.11% on @tutors/ui-navigators, below 80%
Requirements traceability	10	not measured		needs the changelog, the EARS files and the claims side by side: pass --traceability <json>; changes.json already reports 9 orphan changes between the tags (a changelog entry with no diff, or a diff with no entry), a floor breach once it is measured
Change risk	15	0		−10 PR #476 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −3 PR #478 touches hotspot packages/svelte/connect/src/services/connect.svelte.ts (3 of the last 6 releases) −10 PR #478 changed Reader, Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #480 changed Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #481 changed Reader, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #483 changed Infrastructure, Reader, Live, Catalogue, Time, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #484 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #487 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #504 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −3 PR #505 touches 4 hotspots packages/svelte/utils/i18n/src/messages/fr.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/es.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/de.ts (3 of the last 6 releases) and 1 more −10 PR #505 changed 11 production lines in packages/svelte/ui-navigators with 2 test lines (0.18): below 0.2 −10 PR #505 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
Post-deploy history	5	not measured		needs the last release's post-deploy record: pass --post-deploy <its run dir or report.json>

Change risk per PR

Change risk 0 (100 − 106), v17.0.0..83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9: 9 of 11 PRs carry a finding.

PR	title	churn	files	hotspots	tests ÷ production	reviewed	points	where the points went
#505	fix(a11y): button names contain their visible text	47	15	4	1.76	yes	−23	−3 PR #505 touches 4 hotspots packages/svelte/utils/i18n/src/messages/fr.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/es.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/de.ts (3 of the last 6 releases) and 1 more −10 PR #505 changed 11 production lines in packages/svelte/ui-navigators with 2 test lines (0.18): below 0.2 −10 PR #505 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#478	Route every Realtime channel through a budgeted port	1349	41	1	1.46	yes	−13	−3 PR #478 touches hotspot packages/svelte/connect/src/services/connect.svelte.ts (3 of the last 6 releases) −10 PR #478 changed Reader, Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#476	Give each whiteboard room a Realtime budget	377	5	0	no production lines	yes	−10	−10 PR #476 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#480	Tutors Time: read only the chosen days of a course's calendar	92	6	0	3.30	yes	−10	−10 PR #480 changed Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#481	Tutors Live: publish from the reader's server within a daily Realtime budget	1421	23	0	3.38	yes	−10	−10 PR #481 changed Reader, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#483	Release 17.0.0 to main and pin production to it	424	13	0	no production lines	yes	−10	−10 PR #483 changed Infrastructure, Reader, Live, Catalogue, Time, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#484	ci(deploy): open the pin pull request when a release tag's images are published	247	5	0	no production lines	yes	−10	−10 PR #484 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#487	fix(community): show an empty catalogue without Supabase instead of logging errors	67	3	0	3.47	yes	−10	−10 PR #487 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#504	fix(nightly): make the three red Nightly jobs pass for real	357	18	0	no production lines	yes	−10	−10 PR #504 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
2 more	no deductions: #485, #493	576	5				0

churn: reader 139 (median 101.5), catalogue 0 (median 7.5), live 0 (median 3.5), time 0 (median 14)
hotspots: 15 file(s) changed in 3+ of the last 6 releases; touched this release: packages/svelte/connect/src/services/connect.svelte.ts, packages/svelte/utils/i18n/src/messages/fr.ts, packages/svelte/utils/i18n/src/messages/es.ts, packages/svelte/utils/i18n/src/messages/de.ts, packages/svelte/utils/i18n/src/messages/it.ts
ownership: no file with 3+ authors
orphans: 9 diff(s) with no changelog entry (pnpm release:changelog --json); entries not measured (CHANGELOG.md at 83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 has no "### v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9" entries under a product section)
tests: apps/reader 59.38, packages/jsr/realtime 2.32, packages/jsr/time 3.30, packages/svelte/community 4.02, packages/svelte/connect 650.00, packages/svelte/realtime-supabase 19.12, packages/svelte/ui-navigators 0.18 LOW, packages/svelte/utils 0.33
reviews: 11 approved, 0 not
dependencies: no major bump; 1 new direct dependency (@supabase/supabase-js)

Not measured: orphan entries (a changelog entry with no diff) (CHANGELOG.md at 83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 has no "### v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9" entries under a product section).

Contributor lines are for trends and glances, never for reviewing people: a first contribution is a fact and costs nothing on its own. Every deduction is in changes.json.

Tutors release harness — release fail

2026-10-17T10:09:15.863Z · clock 2026-09-16T09:05:00.000Z · 5 run(s) per side · harness 1.42.0

18 unclaimed differences, 2 causes

The unclaimed differences folded by kind across apps, pages and packages: a number, a hash or a package name does not make a new cause. Read beside the verdict; it never changes it.

cause	differences	apps	pages	example
`dom` semantic DOM differs (+# −# lines at line #)	15	reader, catalogue, live	15 `catalogue:home`, `live:home`, `reader-auth:course`, `reader-auth:topic`, `reader:course`, `reader:home` and 9 more	reader:home: semantic DOM differs (+1 −1 lines at line 10)
`focus` keyboard order changed (# stops on a, # on b)	3	reader, catalogue	3 `catalogue:home`, `reader:home`, `reference:course`	reader:home: keyboard order changed (12 stops on a, 12 on b)

Moved together on the same pages, so likely one change each:

dom, focus on 3 pages (6 differences): catalogue:home, reader:home, reference:course

Image artefacts

	a	b
reader	`quay.io/tutors-sdk/tutors-reader:17.0.0`	`quay.io/tutors-sdk/tutors-reader:sha-83d4ccf`
catalogue	`quay.io/tutors-sdk/tutors-catalogue:17.0.0`	`quay.io/tutors-sdk/tutors-catalogue:sha-83d4ccf`
live	`quay.io/tutors-sdk/tutors-live:17.0.0`	`quay.io/tutors-sdk/tutors-live:sha-83d4ccf`
time	`quay.io/tutors-sdk/tutors-time:17.0.0`	`quay.io/tutors-sdk/tutors-time:sha-83d4ccf`

provenance	a — pulled+verified	b — pulled+verified
reader	digest `sha256:15e3aa22476d608db97e05917b1990ade0a7871e7ec6e113da5fec741b427233` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:0627d3940eb982013b4491015586ea36e738fa1f22aebf648ad94e049a9e6d99` revision `83d4ccf7f5ca` version `sha-83d4ccf`
catalogue	digest `sha256:e9f2764654cb074d7dd4412ca163bf4c2666870444d5520361d5425bda4cec0b` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:8c61baa1c1e97df5cd6db100733809c404ca87044b0a05c40a2acbfccb996195` revision `83d4ccf7f5ca` version `sha-83d4ccf`
live	digest `sha256:52740e55cfa7e7db3b2944137caada4e876990b937f1034c0c5e79796054f8a0` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:af5231fe19ed7c74d30dc7fec5a55ea3819c7b3ff1a22c3d4e803436aef97bd2` revision `83d4ccf7f5ca` version `sha-83d4ccf`
time	digest `sha256:d0a9f4a2f4624038ecea3629d1a536567756d458410bee43b45e060d738d195d` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:4db2acd4bfa8059eb2ad18a87f68583a19dbd358cd6b6e99e1aab4913830abc8` revision `83d4ccf7f5ca` version `sha-83d4ccf`

Collected from the images, not the running apps. A cell that says NOT COLLECTED was not compared.

Load (k6, 20 req/s for 30s)

Differences (76; 18 unclaimed)

app	artefact	a	b
reader	manifest	10 layers, 309.2 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 308.9 MB, USER 1001, ports 3000/tcp (docker image inspect)
reader	sbom	134 distinct package(s) (cosign attestation (signature verified))	134 distinct package(s) (cosign attestation (signature verified))
reader	vulns	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)
catalogue	manifest	10 layers, 274.2 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 274.2 MB, USER 1001, ports 3000/tcp (docker image inspect)
catalogue	sbom	134 distinct package(s) (cosign attestation (signature verified))	134 distinct package(s) (cosign attestation (signature verified))
catalogue	vulns	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)
live	manifest	10 layers, 274.5 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 274.5 MB, USER 1001, ports 3000/tcp (docker image inspect)
live	sbom	134 distinct package(s) (cosign attestation (signature verified))	134 distinct package(s) (cosign attestation (signature verified))
live	vulns	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)
time	manifest	10 layers, 285.2 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 285.2 MB, USER 1001, ports 3000/tcp (docker image inspect)
time	sbom	143 distinct package(s) (cosign attestation (signature verified))	143 distinct package(s) (cosign attestation (signature verified))
time	vulns	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-16T06:29:51Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)

side	requests	failed	5xx	p50	p95
a	601	0	0	1.32 ms	2.41 ms
b	601	0	0	1.36 ms	2.3 ms

artefact	scope	what changed	claimed by
`dom`	`reader:home` /	reader:home: semantic DOM differs (+1 −1 lines at line 10) detail - link "My courses": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:course` /course/localhost:8080	reader:course: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:topic` /topic/localhost:8080/unit-1/topic-01	reader:topic: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:lab-step` /lab/localhost:8080/unit-1/topic-01/book-lab-01	reader:lab-step: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:lab-step-2` /lab/localhost:8080/unit-1/topic-01/book-lab-01/Step-01	reader:lab-step-2: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:search` /search/localhost:8080	reader:search: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:search-results` /search/localhost:8080?q=reference+material	reader:search-results: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`catalogue:home` /	catalogue:home: semantic DOM differs (+1 −1 lines at line 10) detail - link "Catalogue": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`live:home` /	live:home: semantic DOM differs (+1 −1 lines at line 10) detail - link "Live": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:course` /course/localhost:8080	reader-auth:course: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:topic` /topic/localhost:8080/unit-1/topic-01	reader-auth:topic: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reference:course` /course/reference-course	reference:course: semantic DOM differs (+1 −1 lines at line 10) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reference:topic` /topic/reference-course/topic-07-reference	reference:topic: semantic DOM differs (+1 −1 lines at line 9) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reference:lab` /lab/reference-course/topic-07-reference/book-a	reference:lab: semantic DOM differs (+1 −1 lines at line 9) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reference:note` /note/reference-course/topic-07-reference/note-1	reference:note: semantic DOM differs (+1 −1 lines at line 9) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`network`	`POST /api/live/activity` /course/localhost:8080	reader-auth:course: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`POST /api/live/activity` /topic/localhost:8080/unit-1/topic-01	reader-auth:topic: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`GET /_app/immutable/chunks/{{hash}}.js` /course/reference-course	reference:course: GET /_app/immutable/chunks/{{hash}}.js requested 43× on a, 44× on b	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: moving learning events from browser Realtime to the reader's server adds one immutable chunk on reference:course and reference:note (#478, #481)
`network`	`GET /_app/immutable/chunks/{{hash}}.js` /note/reference-course/topic-07-reference/note-1	reference:note: GET /_app/immutable/chunks/{{hash}}.js requested 39× on a, 40× on b	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: moving learning events from browser Realtime to the reader's server adds one immutable chunk on reference:course and reference:note (#478, #481)
`console`	`catalogue:home` /	catalogue:home: console message gone on b detail error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n at Object.getCatalogue ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:102918)\n at V ({{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:484)\n at Wn ({{origin}}/_app/immutable/chunks/XgCIYxIE.js:2:24206)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching courses:"}	informational
`console`	`catalogue:home` /	catalogue:home: console message gone on b detail error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n at Object.getStudentCount ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:103346)\n at {{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:5193\n at Cr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:23871)\n at {{origin}}/_app/immutable/chunks/Cv2zGAZD.js:2:2704\n at mr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:21611)\n at vr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:22749)\n at Xt ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:12091)\n at #_ ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:9277)\n at e.flush ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:10794)\n at Array.<anonymous> ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:11554)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching course count:"}	informational
`focus`	`reader:home` /	reader:home: keyboard order changed (12 stops on a, 12 on b) detail a "My courses" -button "Open Theme Menu" +button "Preferences" button "Anonymous Tutors Profile"	unclaimed
`focus`	`catalogue:home` /	catalogue:home: keyboard order changed (12 stops on a, 12 on b) detail a "Catalogue" -button "Open Theme Menu" +button "Preferences" a "My courses"	unclaimed
`focus`	`reference:course` /course/reference-course	reference:course: keyboard order changed (12 stops on a, 12 on b) detail button "Search this course" -button "Open Theme Menu" +button "Preferences" button "Anonymous Tutors Profile"	unclaimed
`persistence`	`student-signs-in/realtime_claim_live_publish`	student-signs-in: RPC realtime_claim_live_publish — 0 row(s) on a, 2 on b	Rule 0331: When the reader's server receives a learning event, the reader shall publish it only to the activity feeds a live dashboard has watched in the last 90 seconds. — Rule 0331: the reader's server claims the topics to publish to, and charges the day's Live budget, through realtime_claim_live_publish (#481)
`realtime`	`reader-auth/messages`	reader-auth: Realtime messages per reader page view fell: a 1.33 / b 0 per reader page (broadcasts a 4 / b 0, socket data frames a 0 / b 0, over 3 page view(s))	informational
`runtime`	`runtime/summary`	container posture collected for catalogue, live, reader, reader-auth, time on both sides (compose) detail catalogue: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter live: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter reader: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter reader-auth: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter time: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter	informational
`startup`	`startup/summary`	startup time collected on both sides (compose, 5 restart(s) per app) detail catalogue: first healthy / 499 → 477 ms, ready 2353 → 2398 ms (median, a → b, n=5/5) live: first healthy / 485 → 471 ms, ready 2437 → 2354 ms (median, a → b, n=5/5) reader: first healthy / 624 → 608 ms, ready 2359 → 2334 ms (median, a → b, n=5/5) time: first healthy / 482 → 538 ms, ready 2370 → 2456 ms (median, a → b, n=5/5)	informational
`image-hardening`	`reader/healthcheck`	reader: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`image-hardening`	`catalogue/healthcheck`	catalogue: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`image-hardening`	`live/healthcheck`	live: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`image-hardening`	`time/healthcheck`	time: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`build-provenance`	`reader/slsa`	reader: carries no SLSA provenance verified under the publishing identity on 0627d3940eb9 (production too)	informing (reported, never gates)
`build-provenance`	`catalogue/slsa`	catalogue: carries no SLSA provenance verified under the publishing identity on 8c61baa1c1e9 (production too)	informing (reported, never gates)
`build-provenance`	`live/slsa`	live: carries no SLSA provenance verified under the publishing identity on af5231fe19ed (production too)	informing (reported, never gates)
`build-provenance`	`time/slsa`	time: carries no SLSA provenance verified under the publishing identity on 4db2acd4bfa8 (production too)	informing (reported, never gates)
`vuln-ceiling`	`reader/summary`	reader: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`vuln-ceiling`	`catalogue/summary`	catalogue: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`vuln-ceiling`	`live/summary`	live: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`vuln-ceiling`	`time/summary`	time: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`asset-graph`	`reader`	reader: the asset graph changed: 173 → 173 immutable requests (JS 142 → 142, CSS 31 → 31), 1.6 MB → 1.6 MB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`catalogue`	catalogue: the asset graph changed: 19 → 19 immutable requests (JS 15 → 15, CSS 4 → 4), 529 KB → 530 KB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`live`	live: the asset graph changed: 24 → 24 immutable requests (JS 19 → 19, CSS 5 → 5), 540 KB → 541 KB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`reader-auth`	reader-auth: the asset graph changed: 96 → 96 immutable requests (JS 83 → 83, CSS 13 → 13), 1.0 MB → 1.0 MB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`reference`	reference: the asset graph changed: 121 → 123 immutable requests (JS 99 → 101, CSS 22 → 22), 1.2 MB → 1.2 MB; 2 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`replay`	`replay:topic-02 GET /_app/immutable/assets/1.{{hash}}.css` /topic/localhost:8080/unit-1/topic-02	replay:topic-02: new request on b: GET /_app/immutable/assets/1.{{hash}}.css	informing (reported, never gates)
`replay`	`replay:topic-02 GET /_app/immutable/nodes/1.{{hash}}.js` /topic/localhost:8080/unit-1/topic-02	replay:topic-02: new request on b: GET /_app/immutable/nodes/1.{{hash}}.js	informing (reported, never gates)
`replay`	`replay:talk-01 GET /_app/immutable/assets/1.{{hash}}.css` /talk/localhost:8080/unit-1/topic-01/talk-01	replay:talk-01: GET /_app/immutable/assets/1.{{hash}}.css requested 2× on a, 1× on b	informing (reported, never gates)
`replay`	`replay:talk-01 GET /_app/immutable/nodes/1.{{hash}}.js` /talk/localhost:8080/unit-1/topic-01/talk-01	replay:talk-01: GET /_app/immutable/nodes/1.{{hash}}.js requested 2× on a, 1× on b	informing (reported, never gates)
`replay`	`replay:note-01 GET {{course}}/tutors.json` /note/localhost:8080/unit-1/topic-01/note-01	replay:note-01: request no longer made on b: GET {{course}}/tutors.json	informing (reported, never gates)
`replay`	`replay:note-01 GET /_app/immutable/assets/1.{{hash}}.css` /note/localhost:8080/unit-1/topic-01/note-01	replay:note-01: request no longer made on b: GET /_app/immutable/assets/1.{{hash}}.css	informing (reported, never gates)
`replay`	`replay:note-01 GET /_app/immutable/chunks/{{hash}}.js` /note/localhost:8080/unit-1/topic-01/note-01	replay:note-01: GET /_app/immutable/chunks/{{hash}}.js requested 38× on a, 37× on b	informing (reported, never gates)
`replay`	`replay:note-01 GET /_app/immutable/nodes/1.{{hash}}.js` /note/localhost:8080/unit-1/topic-01/note-01	replay:note-01: request no longer made on b: GET /_app/immutable/nodes/1.{{hash}}.js	informing (reported, never gates)
`replay`	`replay:note-01 GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100` /note/localhost:8080/unit-1/topic-01/note-01	replay:note-01: request no longer made on b: GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100	informing (reported, never gates)
`replay`	`replay:note-02 GET {{course}}/tutors.json` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: GET {{course}}/tutors.json requested 1× on a, 2× on b	informing (reported, never gates)
`replay`	`replay:note-02 GET /_app/immutable/assets/1.{{hash}}.css` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: GET /_app/immutable/assets/1.{{hash}}.css requested 1× on a, 2× on b	informing (reported, never gates)
`replay`	`replay:note-02 GET /_app/immutable/chunks/{{hash}}.js` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: GET /_app/immutable/chunks/{{hash}}.js requested 38× on a, 39× on b	informing (reported, never gates)
`replay`	`replay:note-02 GET /_app/immutable/nodes/1.{{hash}}.js` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: GET /_app/immutable/nodes/1.{{hash}}.js requested 1× on a, 2× on b	informing (reported, never gates)
`replay`	`replay:note-02 GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: new request on b: GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100	informing (reported, never gates)
`replay`	`replay:missing-topic GET /_app/immutable/chunks/{{hash}}.js` /topic/localhost:8080/unit-1/no-such-topic	replay:missing-topic: GET /_app/immutable/chunks/{{hash}}.js requested 41× on a, 42× on b	informing (reported, never gates)
`replay`	`replay:missing-topic GET {{course}}/tutors.json` /topic/localhost:8080/unit-1/no-such-topic	replay:missing-topic: new request on b: GET {{course}}/tutors.json	informing (reported, never gates)
`replay`	`replay:missing-topic GET /_app/immutable/assets/1.{{hash}}.css` /topic/localhost:8080/unit-1/no-such-topic	replay:missing-topic: new request on b: GET /_app/immutable/assets/1.{{hash}}.css	informing (reported, never gates)
`replay`	`replay:missing-topic GET /_app/immutable/nodes/1.{{hash}}.js` /topic/localhost:8080/unit-1/no-such-topic	replay:missing-topic: new request on b: GET /_app/immutable/nodes/1.{{hash}}.js	informing (reported, never gates)
`replay`	`replay:missing-topic GET /topic/localhost:8080/unit-1/no-such-topic/__data.json?x-sveltekit-invalidated=100` /topic/localhost:8080/unit-1/no-such-topic	replay:missing-topic: new request on b: GET /topic/localhost:8080/unit-1/no-such-topic/__data.json?x-sveltekit-invalidated=100	informing (reported, never gates)
`slo`	`reader-availability`	reader-availability: 100.0% of 62 reader requests not 5xx on b (its /metrics across the journeys), objective 99.90% (harness floor; monorepo 99.50%): holds	informational
`slo`	`reader-availability/load`	reader-availability: 100.0% of 601 reader requests not 5xx on b (the k6 load leg), objective 99.90% (harness floor; monorepo 99.50%): holds	informational
`slo`	`reader-latency`	reader-latency: 100.0% of 62 reader requests under 1s on b (its /metrics across the journeys), objective 99.0% (harness floor; monorepo 95.0%): holds	informational
`slo`	`reader-latency/load`	reader-latency: 100.0% of 601 reader requests under 1s on b (the k6 load leg), objective 99.0% (harness floor; monorepo 95.0%): holds	informational
`slo`	`catalogue-availability/not-evaluated`	catalogue-availability: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`catalogue-latency/not-evaluated`	catalogue-latency: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`live-availability/not-evaluated`	live-availability: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`live-latency/not-evaluated`	live-latency: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`time-availability/not-evaluated`	time-availability: not evaluated on b: its /metrics across the journeys carries no availability SLI for time	informational
`slo`	`time-latency/not-evaluated`	time-latency: not evaluated on b: its /metrics across the journeys carries no latency SLI for time	informational
`slo`	`reader-latency-tail`	reader-latency-tail: 100.0% of 62 reader requests under 2.5s on b (its /metrics across the journeys), objective 99.0%: holds	informational
`slo`	`reader-latency-tail/load`	reader-latency-tail: 100.0% of 601 reader requests under 2.5s on b (the k6 load leg), objective 99.0%: holds	informational

Policy: what b must be informing

Checks on the candidate alone, whatever production is: image hardening (root user, no healthcheck, a secret in the environment or the layer history), build provenance (SLSA provenance from image-build.yml) and the vulnerability ceiling (a critical or high advisory with a fix available). Informing: reported, never gates; a claim can still cover a finding. Hover a cell for what was checked.

app	image-hardening	build-provenance	vuln-ceiling
`reader`	1 finding (1 on production too)	1 finding (1 on production too)	holds
`catalogue`	1 finding (1 on production too)	1 finding (1 on production too)	holds
`live`	1 finding (1 on production too)	1 finding (1 on production too)	holds
`time`	1 finding (1 on production too)	1 finding (1 on production too)	holds

Informing (32; 32 unclaimed) reported, never gates

18 of 27 engines are blocking; informing (reported, never gates): timing (no date set to block; load/errors still blocks), image-hardening (no date set to block), build-provenance (no date set to block), vuln-ceiling (no date set to block), timing-tolerance (no date set to block), asset-graph (no date set to block), replay (no date set to block), slo (no date set to block), realtime (no date set to block). An informing engine's findings are listed here and never change the verdict, the Gate or the exit code; a claim can still cover one.

Claim hygiene

3 claim(s) cover 5 failing hunk(s): 1.67 per claim, at most 2 under one (flagged above 10).

Masks

engine	scope	what it found	level	claimed by
`image-hardening`	`reader/healthcheck`	reader: declares no HEALTHCHECK (production too)	no date set	unclaimed
`image-hardening`	`catalogue/healthcheck`	catalogue: declares no HEALTHCHECK (production too)	no date set	unclaimed
`image-hardening`	`live/healthcheck`	live: declares no HEALTHCHECK (production too)	no date set	unclaimed
`image-hardening`	`time/healthcheck`	time: declares no HEALTHCHECK (production too)	no date set	unclaimed
`build-provenance`	`reader/slsa`	reader: carries no SLSA provenance verified under the publishing identity on 0627d3940eb9 (production too)	no date set	unclaimed
`build-provenance`	`catalogue/slsa`	catalogue: carries no SLSA provenance verified under the publishing identity on 8c61baa1c1e9 (production too)	no date set	unclaimed
`build-provenance`	`live/slsa`	live: carries no SLSA provenance verified under the publishing identity on af5231fe19ed (production too)	no date set	unclaimed
`build-provenance`	`time/slsa`	time: carries no SLSA provenance verified under the publishing identity on 4db2acd4bfa8 (production too)	no date set	unclaimed
`asset-graph`	`reader`	reader: the asset graph changed: 173 → 173 immutable requests (JS 142 → 142, CSS 31 → 31), 1.6 MB → 1.6 MB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`catalogue`	catalogue: the asset graph changed: 19 → 19 immutable requests (JS 15 → 15, CSS 4 → 4), 529 KB → 530 KB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`live`	live: the asset graph changed: 24 → 24 immutable requests (JS 19 → 19, CSS 5 → 5), 540 KB → 541 KB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`reader-auth`	reader-auth: the asset graph changed: 96 → 96 immutable requests (JS 83 → 83, CSS 13 → 13), 1.0 MB → 1.0 MB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`reference`	reference: the asset graph changed: 121 → 123 immutable requests (JS 99 → 101, CSS 22 → 22), 1.2 MB → 1.2 MB; 2 network and 0 headers difference(s) are this churn	no date set	unclaimed
`replay`	`replay:topic-02 GET /_app/immutable/assets/1.{{hash}}.css`	replay:topic-02: new request on b: GET /_app/immutable/assets/1.{{hash}}.css	no date set	unclaimed
`replay`	`replay:topic-02 GET /_app/immutable/nodes/1.{{hash}}.js`	replay:topic-02: new request on b: GET /_app/immutable/nodes/1.{{hash}}.js	no date set	unclaimed
`replay`	`replay:talk-01 GET /_app/immutable/assets/1.{{hash}}.css`	replay:talk-01: GET /_app/immutable/assets/1.{{hash}}.css requested 2× on a, 1× on b	no date set	unclaimed
`replay`	`replay:talk-01 GET /_app/immutable/nodes/1.{{hash}}.js`	replay:talk-01: GET /_app/immutable/nodes/1.{{hash}}.js requested 2× on a, 1× on b	no date set	unclaimed
`replay`	`replay:note-01 GET {{course}}/tutors.json`	replay:note-01: request no longer made on b: GET {{course}}/tutors.json	no date set	unclaimed
`replay`	`replay:note-01 GET /_app/immutable/assets/1.{{hash}}.css`	replay:note-01: request no longer made on b: GET /_app/immutable/assets/1.{{hash}}.css	no date set	unclaimed
`replay`	`replay:note-01 GET /_app/immutable/chunks/{{hash}}.js`	replay:note-01: GET /_app/immutable/chunks/{{hash}}.js requested 38× on a, 37× on b	no date set	unclaimed
`replay`	`replay:note-01 GET /_app/immutable/nodes/1.{{hash}}.js`	replay:note-01: request no longer made on b: GET /_app/immutable/nodes/1.{{hash}}.js	no date set	unclaimed
`replay`	`replay:note-01 GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100`	replay:note-01: request no longer made on b: GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100	no date set	unclaimed
`replay`	`replay:note-02 GET {{course}}/tutors.json`	replay:note-02: GET {{course}}/tutors.json requested 1× on a, 2× on b	no date set	unclaimed
`replay`	`replay:note-02 GET /_app/immutable/assets/1.{{hash}}.css`	replay:note-02: GET /_app/immutable/assets/1.{{hash}}.css requested 1× on a, 2× on b	no date set	unclaimed
`replay`	`replay:note-02 GET /_app/immutable/chunks/{{hash}}.js`	replay:note-02: GET /_app/immutable/chunks/{{hash}}.js requested 38× on a, 39× on b	no date set	unclaimed
`replay`	`replay:note-02 GET /_app/immutable/nodes/1.{{hash}}.js`	replay:note-02: GET /_app/immutable/nodes/1.{{hash}}.js requested 1× on a, 2× on b	no date set	unclaimed
`replay`	`replay:note-02 GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100`	replay:note-02: new request on b: GET /note/localhost:8080/unit-1/topic-01/note-01/__data.json?x-sveltekit-invalidated=100	no date set	unclaimed
`replay`	`replay:missing-topic GET /_app/immutable/chunks/{{hash}}.js`	replay:missing-topic: GET /_app/immutable/chunks/{{hash}}.js requested 41× on a, 42× on b	no date set	unclaimed
`replay`	`replay:missing-topic GET {{course}}/tutors.json`	replay:missing-topic: new request on b: GET {{course}}/tutors.json	no date set	unclaimed
`replay`	`replay:missing-topic GET /_app/immutable/assets/1.{{hash}}.css`	replay:missing-topic: new request on b: GET /_app/immutable/assets/1.{{hash}}.css	no date set	unclaimed
`replay`	`replay:missing-topic GET /_app/immutable/nodes/1.{{hash}}.js`	replay:missing-topic: new request on b: GET /_app/immutable/nodes/1.{{hash}}.js	no date set	unclaimed
`replay`	`replay:missing-topic GET /topic/localhost:8080/unit-1/no-such-topic/__data.json?x-sveltekit-invalidated=100`	replay:missing-topic: new request on b: GET /topic/localhost:8080/unit-1/no-such-topic/__data.json?x-sveltekit-invalidated=100	no date set	unclaimed

Fired: response-date×92, request-id×92, etag×92, metrics-process×599, metrics-timing-histograms×12, third-party-requests×1502, persistence-stub-requests×140, oauth-callback-state×10, media-range-status×40, hashed-assets×5011, footer-tutors-version×336, transport-length×92, transport-connection×92, transport-keepalive×92.
Silent this run: realtime-rest-fallback-warning, chromium-compute-pressure-policy, transport-encoding, transport-transfer — a mask that never fires is a mask to delete.