Harness release fail

Gate: FAIL (exit 1)

New since the last forecast

20 new, 0 gone in the unclaimed set since the forecast of 2026-10-18T02:06:17.110Z (sha-83d4ccf), beside the same baseline 17.0.0. By artefact: dom +12 −0 · focus +6 −0 · persistence +2 −0. The previous forecast was judged by harness 1.44.0, this one by 1.47.0: a harness change can move differences too.

artefact	scope	what
`dom`	`reader-auth:rule-0588-lecturer-locked`	reader-auth:rule-0588-lecturer-locked: semantic DOM differs (+1 −1 lines at line 9)
`dom`	`reader-auth:rule-0588-student-hidden`	reader-auth:rule-0588-student-hidden: semantic DOM differs (+1 −1 lines at line 9)
`dom`	`reader-auth:rule-0588-student-locked-card`	reader-auth:rule-0588-student-locked-card: semantic DOM differs (+1 −1 lines at line 9)
`dom`	`live-auth:rule-0589-courses`	live-auth:rule-0589-courses: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`live-auth:rule-0589-students`	live-auth:rule-0589-students: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`time-auth:rule-0590-medians`	time-auth:rule-0590-medians: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`time-auth:rule-0590-calendar-byweek`	time-auth:rule-0590-calendar-byweek: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`time-auth:rule-0590-calendar-byday`	time-auth:rule-0590-calendar-byday: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`time-auth:rule-0591-lab-bylab`	time-auth:rule-0591-lab-bylab: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`time-auth:rule-0591-lab-bystep`	time-auth:rule-0591-lab-bystep: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`time-auth:rule-0591-learning-records`	time-auth:rule-0591-learning-records: semantic DOM differs (+1 −1 lines at line 10)
`dom`	`time-auth:rule-0591-student`	time-auth:rule-0591-student: semantic DOM differs (+1 −1 lines at line 10)
`focus`	`live-auth:rule-0589-courses`	live-auth:rule-0589-courses: keyboard order changed (12 stops on a, 12 on b)
`focus`	`time-auth:rule-0590-calendar-byweek`	time-auth:rule-0590-calendar-byweek: keyboard order changed (12 stops on a, 12 on b)
`focus`	`time-auth:rule-0590-calendar-byday`	time-auth:rule-0590-calendar-byday: keyboard order changed (12 stops on a, 12 on b)

and 5 more new: each is in the unclaimed differences below.

Causes and the PRs behind them

4 causes, 4 with a PR named, 2 declared in that PR's CHANGELOG line (claimed from it when the release is cut, nothing owed on main). Merged since the forecast of sha-c867ee8: #504, #505. 4 causes are new since then, and only these PRs can have made them. The others are matched by path: the PRs whose files touch what the cause is about, ranked by the direct ones (the app's own source for a page, a Dockerfile for an image) before the indirect (the shared packages, a manifest). A lead to ask, never a verdict.

cause	differences	PRs
new dom: semantic DOM differs (+# −# lines at line #)	40	#505 (8 files, 0 direct) declared by #505 (dom, focus)
new focus: keyboard order changed (# stops on a, # on b)	11	#505 (8 files, 0 direct) declared by #505 (dom, focus)
new persistence: RPC realtime_claim_live_publish — # row(s) on a, # on b	3	#505 (8 files, 0 direct) not declared: #505's CHANGELOG line says (dom, focus)
new persistence: RPC realtime_watch — # row(s) on a, # on b	1	#505 (8 files, 0 direct) not declared: #505's CHANGELOG line says (dom, focus)

No RCS: Gate FAIL. The Gate wins: no number talks a FAIL back on. The dimensions are shown for the 5 Whys, not for a decision.

Claims owed (2, and 2 declared)

2 of the 4 drafts are declared in a PR's CHANGELOG line (#505) and carry that line as the reason: nothing is owed on main, and the release author pastes them when the release is cut. 2 are owed. One draft claim per cause, its scope narrowed and checked against this forecast's unclaimed differences: together they cover all 55, and none takes another cause's. Paste them under claims: in release/claims.yaml and name the Rule that intends each (rule: "????" is refused until you do), or drop rule and give the CHANGELOG entry as the reason, or fix the difference and drop its draft. On a forecast this takes the glance's place; the glance stays for release candidates.

  # dom: semantic DOM differs (+# −# lines at line #): covers its 40 differences. Declared by #505 in its CHANGELOG line: ready to paste when the release is cut.
  - artefact: "dom"
    scope: "{catalogue:home,live-auth:rule-0589-courses,live-auth:rule-0589-students,live:home,reader-auth:course,reader-auth:rule-0582-course,reader-auth:rule-0582-lab-step,reader-auth:rule-0582-lab-step-2,reader-auth:rule-0582-lab-step-back,reader-auth:rule-0583-profile-menu,reader-auth:rule-0584-notebook-cell-2,reader-auth:rule-0584-quiz-results,reader-auth:rule-0584-talk-slide-2,reader-auth:rule-0585-course-dark,reader-auth:rule-0585-preferences-after-reload,reader-auth:rule-0586-turned-away,reader-auth:rule-0586-turned-away-again,reader-auth:rule-0587-llm,reader-auth:rule-0588-lecturer-locked,reader-auth:rule-0588-student-hidden,reader-auth:rule-0588-student-locked-card,reader-auth:topic,reader:course,reader:home,reader:lab-step,reader:lab-step-2,reader:search,reader:search-results,reader:topic,reference:course,reference:lab,reference:note,reference:topic,time-auth:rule-0590-calendar-byday,time-auth:rule-0590-calendar-byweek,time-auth:rule-0590-medians,time-auth:rule-0591-lab-bylab,time-auth:rule-0591-lab-bystep,time-auth:rule-0591-learning-records,time-auth:rule-0591-student}"
    reason: "CHANGELOG: Screen readers announce the Preferences button as \"Preferences\", and the search and close buttons announce their keyboard shortcuts (#505)"
  # focus: keyboard order changed (# stops on a, # on b): covers its 11 differences. Declared by #505 in its CHANGELOG line: ready to paste when the release is cut.
  - artefact: "focus"
    scope: "{catalogue:home,live-auth:rule-0589-courses,reader-auth:rule-0586-turned-away,reader-auth:rule-0586-turned-away-again,reader:home,reference:course,time-auth:rule-0590-calendar-byday,time-auth:rule-0590-calendar-byweek,time-auth:rule-0591-lab-bylab,time-auth:rule-0591-lab-bystep,time-auth:rule-0591-learning-records}"
    reason: "CHANGELOG: Screen readers announce the Preferences button as \"Preferences\", and the search and close buttons announce their keyboard shortcuts (#505)"
  # persistence: RPC realtime_claim_live_publish — # row(s) on a, # on b: covers its 3 differences. Name the Rule that intends it, or fix it.
  - artefact: "persistence"
    scope: "*/realtime_claim_live_publish"
    rule: "????"
    reason: "RPC realtime_claim_live_publish — # row(s) on a, # on b: 3 differences; likely #505"
  # persistence: RPC realtime_watch — # row(s) on a, # on b: covers its 1 difference. Name the Rule that intends it, or fix it.
  - artefact: "persistence"
    scope: "rule-0589-live/realtime_watch"
    rule: "????"
    reason: "RPC realtime_watch — # row(s) on a, # on b: 1 difference; likely #505"

6 of 8 dimensions measured (weight 85 of 100, renormalised); the rest are not measured and not counted.

dimension	weight	score	floor	where it lost points
Claim coverage	20	0		−20 unclaimed: dom /: reader:home: semantic DOM differs (+1 −1 lines at line 10) −20 unclaimed: dom /course/localhost:8080: reader:course: semantic DOM differs (+1 −1 lines at line 9) −20 unclaimed: dom /topic/localhost:8080/unit-1/topic-01: reader:topic: semantic DOM differs (+1 −1 lines at line 8) −20 unclaimed: dom /lab/localhost:8080/unit-1/topic-01/book-lab-01: reader:lab-step: semantic DOM differs (+1 −1 lines at line 8) −20 unclaimed: dom /lab/localhost:8080/unit-1/topic-01/book-lab-01/Step-01: reader:lab-step-2: semantic DOM differs (+1 −1 lines at line 8) (and 50 more like it, not counted again: report.html#differences)
Noise health	15	85		−5 mask realtime-rest-fallback-warning fired nothing in this run (a mask that never fires is a mask to delete) −5 mask transport-encoding fired nothing in this run (a mask that never fires is a mask to delete) −5 mask transport-transfer fired nothing in this run (a mask that never fires is a mask to delete)
Statistical margin	10	100		—
Rehearsals	10	100		—
Test signal	15	40	breached	−30 mutation score 72.73% on @tutors/i18n, below 80% −30 mutation score 55.11% on @tutors/ui-navigators, below 80%
Requirements traceability	10	not measured		needs the changelog, the EARS files and the claims side by side: pass --traceability <json>; changes.json already reports 9 orphan changes between the tags (a changelog entry with no diff, or a diff with no entry), a floor breach once it is measured
Change risk	15	0		−10 PR #476 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −3 PR #478 touches hotspot packages/svelte/connect/src/services/connect.svelte.ts (3 of the last 6 releases) −10 PR #478 changed Reader, Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #480 changed Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #481 changed Reader, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #483 changed Infrastructure, Reader, Live, Catalogue, Time, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #484 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #487 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −10 PR #504 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it −3 PR #505 touches 4 hotspots packages/svelte/utils/i18n/src/messages/fr.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/es.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/de.ts (3 of the last 6 releases) and 1 more −10 PR #505 changed 11 production lines in packages/svelte/ui-navigators with 2 test lines (0.18): below 0.2 −10 PR #505 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
Post-deploy history	5	not measured		needs the last release's post-deploy record: pass --post-deploy <its run dir or report.json>

Change risk per PR

Change risk 0 (100 − 106), v17.0.0..83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9: 9 of 11 PRs carry a finding.

PR	title	churn	files	hotspots	tests ÷ production	reviewed	points	where the points went
#505	fix(a11y): button names contain their visible text	47	15	4	1.76	yes	−23	−3 PR #505 touches 4 hotspots packages/svelte/utils/i18n/src/messages/fr.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/es.ts (3 of the last 6 releases), packages/svelte/utils/i18n/src/messages/de.ts (3 of the last 6 releases) and 1 more −10 PR #505 changed 11 production lines in packages/svelte/ui-navigators with 2 test lines (0.18): below 0.2 −10 PR #505 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#478	Route every Realtime channel through a budgeted port	1349	41	1	1.46	yes	−13	−3 PR #478 touches hotspot packages/svelte/connect/src/services/connect.svelte.ts (3 of the last 6 releases) −10 PR #478 changed Reader, Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#476	Give each whiteboard room a Realtime budget	377	5	0	no production lines	yes	−10	−10 PR #476 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#480	Tutors Time: read only the chosen days of a course's calendar	92	6	0	3.30	yes	−10	−10 PR #480 changed Shared Packages, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#481	Tutors Live: publish from the reader's server within a daily Realtime budget	1421	23	0	3.38	yes	−10	−10 PR #481 changed Reader, Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#483	Release 17.0.0 to main and pin production to it	424	13	0	no production lines	yes	−10	−10 PR #483 changed Infrastructure, Reader, Live, Catalogue, Time, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#484	ci(deploy): open the pin pull request when a release tag's images are published	247	5	0	no production lines	yes	−10	−10 PR #484 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#487	fix(community): show an empty catalogue without Supabase instead of logging errors	67	3	0	3.47	yes	−10	−10 PR #487 changed Reader, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
#504	fix(nightly): make the three red Nightly jobs pass for real	357	18	0	no production lines	yes	−10	−10 PR #504 changed Infrastructure, Development but no changelog entry under v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 names it
2 more	no deductions: #485, #493	576	5				0

churn: reader 139 (median 101.5), catalogue 0 (median 7.5), live 0 (median 3.5), time 0 (median 14)
hotspots: 15 file(s) changed in 3+ of the last 6 releases; touched this release: packages/svelte/connect/src/services/connect.svelte.ts, packages/svelte/utils/i18n/src/messages/fr.ts, packages/svelte/utils/i18n/src/messages/es.ts, packages/svelte/utils/i18n/src/messages/de.ts, packages/svelte/utils/i18n/src/messages/it.ts
ownership: no file with 3+ authors
orphans: 9 diff(s) with no changelog entry (pnpm release:changelog --json); entries not measured (CHANGELOG.md at 83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 has no "### v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9" entries under a product section)
tests: apps/reader 59.38, packages/jsr/realtime 2.32, packages/jsr/time 3.30, packages/svelte/community 4.02, packages/svelte/connect 650.00, packages/svelte/realtime-supabase 19.12, packages/svelte/ui-navigators 0.18 LOW, packages/svelte/utils 0.33
reviews: 11 approved, 0 not
dependencies: no major bump; 1 new direct dependency (@supabase/supabase-js)

Not measured: orphan entries (a changelog entry with no diff) (CHANGELOG.md at 83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9 has no "### v83d4ccf7f5ca2440bbc94224e40c5bfef3e410d9" entries under a product section).

Contributor lines are for trends and glances, never for reviewing people: a first contribution is a fact and costs nothing on its own. Every deduction is in changes.json.

Tutors release harness — release fail

2026-10-18T07:39:15.422Z · clock 2026-09-16T09:05:00.000Z · 5 run(s) per side · harness 1.47.0

55 unclaimed differences, 4 causes

The unclaimed differences folded by kind across apps, pages and packages: a number, a hash or a package name does not make a new cause. Read beside the verdict; it never changes it.

cause	differences	apps	pages	example
`dom` semantic DOM differs (+# −# lines at line #)	40	reader, catalogue, live, time	40 `catalogue:home`, `live-auth:rule-0589-courses`, `live-auth:rule-0589-students`, `live:home`, `reader-auth:course`, `reader-auth:rule-0582-course` and 34 more	reader:home: semantic DOM differs (+1 −1 lines at line 10)
`focus` keyboard order changed (# stops on a, # on b)	11	reader, catalogue, live, time	11 `catalogue:home`, `live-auth:rule-0589-courses`, `reader-auth:rule-0586-turned-away`, `reader-auth:rule-0586-turned-away-again`, `reader:home`, `reference:course` and 5 more	reader:home: keyboard order changed (12 stops on a, 12 on b)
`persistence` RPC realtime_claim_live_publish — # row(s) on a, # on b	3	—	—	rule-0589-live: RPC realtime_claim_live_publish — 0 row(s) on a, 4 on b
`persistence` RPC realtime_watch — # row(s) on a, # on b	1	—	—	rule-0589-live: RPC realtime_watch — 0 row(s) on a, 1 on b

Moved together on the same pages, so likely one change each:

dom, focus on 11 pages (22 differences): catalogue:home, live-auth:rule-0589-courses, reader-auth:rule-0586-turned-away, reader-auth:rule-0586-turned-away-again, reader:home, reference:course and 5 more

The behaviour behind these Rules moved: their journeys' pages or ledgers differ (traffic/journeys/features):

rule-0591-time-labs: Rule 0591 (exercises 0319): 7 differences in dom, focus
rule-0582-signed-in-lab: Rule 0582 (exercises 0011, 0250, 0252, 0260, 0303, 0330): 5 differences in dom, persistence
rule-0589-live: Rule 0589 (exercises 0330, 0335): 5 differences in dom, focus, persistence
rule-0590-time-calendar: Rule 0590 (exercises 0319): 5 differences in dom, focus
rule-0586-private-course: Rule 0586 (exercises 0011, 0267): 4 differences in dom, focus
rule-0584-quiz-notebook-talk: Rule 0584 (exercises 0047, 0049, 0050): 3 differences in dom
rule-0588-content-lock: Rule 0588 (exercises 0052, 0053, 0054): 3 differences in dom
rule-0583-presence: Rule 0583 (exercises 0046, 0064, 0280): 2 differences in dom, persistence
rule-0585-preferences: Rule 0585 (exercises 0037, 0038, 0039): 2 differences in dom
rule-0587-calendar-llm: Rule 0587 (exercises 0042, 0284): 1 difference in dom

Image artefacts

	a	b
reader	`quay.io/tutors-sdk/tutors-reader:17.0.0`	`quay.io/tutors-sdk/tutors-reader:sha-83d4ccf`
catalogue	`quay.io/tutors-sdk/tutors-catalogue:17.0.0`	`quay.io/tutors-sdk/tutors-catalogue:sha-83d4ccf`
live	`quay.io/tutors-sdk/tutors-live:17.0.0`	`quay.io/tutors-sdk/tutors-live:sha-83d4ccf`
time	`quay.io/tutors-sdk/tutors-time:17.0.0`	`quay.io/tutors-sdk/tutors-time:sha-83d4ccf`

provenance	a — pulled+verified	b — pulled+verified
reader	digest `sha256:15e3aa22476d608db97e05917b1990ade0a7871e7ec6e113da5fec741b427233` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:0627d3940eb982013b4491015586ea36e738fa1f22aebf648ad94e049a9e6d99` revision `83d4ccf7f5ca` version `sha-83d4ccf`
catalogue	digest `sha256:e9f2764654cb074d7dd4412ca163bf4c2666870444d5520361d5425bda4cec0b` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:8c61baa1c1e97df5cd6db100733809c404ca87044b0a05c40a2acbfccb996195` revision `83d4ccf7f5ca` version `sha-83d4ccf`
live	digest `sha256:52740e55cfa7e7db3b2944137caada4e876990b937f1034c0c5e79796054f8a0` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:af5231fe19ed7c74d30dc7fec5a55ea3819c7b3ff1a22c3d4e803436aef97bd2` revision `83d4ccf7f5ca` version `sha-83d4ccf`
time	digest `sha256:d0a9f4a2f4624038ecea3629d1a536567756d458410bee43b45e060d738d195d` revision `432d46864626` version `17.0.0-rc.1`	digest `sha256:4db2acd4bfa8059eb2ad18a87f68583a19dbd358cd6b6e99e1aab4913830abc8` revision `83d4ccf7f5ca` version `sha-83d4ccf`

Collected from the images, not the running apps. A cell that says NOT COLLECTED was not compared.

Load (k6, 20 req/s for 30s)

Differences (113; 55 unclaimed)

app	artefact	a	b
reader	manifest	10 layers, 309.2 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 308.9 MB, USER 1001, ports 3000/tcp (docker image inspect)
reader	sbom	134 distinct package(s) (cosign attestation (signature verified))	134 distinct package(s) (cosign attestation (signature verified))
reader	vulns	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)
catalogue	manifest	10 layers, 274.2 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 274.2 MB, USER 1001, ports 3000/tcp (docker image inspect)
catalogue	sbom	134 distinct package(s) (cosign attestation (signature verified))	134 distinct package(s) (cosign attestation (signature verified))
catalogue	vulns	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)
live	manifest	10 layers, 274.5 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 274.5 MB, USER 1001, ports 3000/tcp (docker image inspect)
live	sbom	134 distinct package(s) (cosign attestation (signature verified))	134 distinct package(s) (cosign attestation (signature verified))
live	vulns	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)
time	manifest	10 layers, 285.2 MB, USER 1001, ports 3000/tcp (docker image inspect)	10 layers, 285.2 MB, USER 1001, ports 3000/tcp (docker image inspect)
time	sbom	143 distinct package(s) (cosign attestation (signature verified))	143 distinct package(s) (cosign attestation (signature verified))
time	vulns	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)	94 advisories, db built 2026-10-17T06:27:09Z schema v6.1.10, OpenVEX openvex.json (0 statement(s)): none set aside (grype 0.119.0)

side	requests	failed	5xx	p50	p95
a	601	0	0	1.45 ms	2.41 ms
b	601	0	0	1.33 ms	3.21 ms

artefact	scope	what changed	claimed by
`dom`	`reader:home` /	reader:home: semantic DOM differs (+1 −1 lines at line 10) detail - link "My courses": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:course` /course/localhost:8080	reader:course: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:topic` /topic/localhost:8080/unit-1/topic-01	reader:topic: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:lab-step` /lab/localhost:8080/unit-1/topic-01/book-lab-01	reader:lab-step: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:lab-step-2` /lab/localhost:8080/unit-1/topic-01/book-lab-01/Step-01	reader:lab-step-2: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:search` /search/localhost:8080	reader:search: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader:search-results` /search/localhost:8080?q=reference+material	reader:search-results: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`catalogue:home` /	catalogue:home: semantic DOM differs (+1 −1 lines at line 10) detail - link "Catalogue": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`live:home` /	live:home: semantic DOM differs (+1 −1 lines at line 10) detail - link "Live": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:course` /course/localhost:8080	reader-auth:course: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:topic` /topic/localhost:8080/unit-1/topic-01	reader-auth:topic: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reference:course` /course/reference-course	reference:course: semantic DOM differs (+1 −1 lines at line 10) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reference:topic` /topic/reference-course/topic-07-reference	reference:topic: semantic DOM differs (+1 −1 lines at line 9) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reference:lab` /lab/reference-course/topic-07-reference/book-a	reference:lab: semantic DOM differs (+1 −1 lines at line 9) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reference:note` /note/reference-course/topic-07-reference/note-1	reference:note: semantic DOM differs (+1 −1 lines at line 9) detail - text: A reference course containing all supported learning objects - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Anonymous Tutors Profile" - complementary "Course navigation":	unclaimed
`dom`	`reader-auth:rule-0588-lecturer-locked` /course/localhost:8081	reader-auth:rule-0588-lecturer-locked: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:rule-0588-student-hidden` /course/localhost:8081	reader-auth:rule-0588-student-hidden: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:rule-0588-student-locked-card` /course/localhost:8081	reader-auth:rule-0588-student-locked-card: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`live-auth:rule-0589-courses` /	live-auth:rule-0589-courses: semantic DOM differs (+1 −1 lines at line 10) detail - link "Live": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`live-auth:rule-0589-students` /	live-auth:rule-0589-students: semantic DOM differs (+1 −1 lines at line 10) detail - link "Live": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`time-auth:rule-0590-medians` /harness-rules/medians	time-auth:rule-0590-medians: semantic DOM differs (+1 −1 lines at line 10) detail - link "Harness Rules Course": - /url: /harness-rules - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation "Class activity":	unclaimed
`dom`	`time-auth:rule-0590-calendar-byweek` /harness-rules/calendar/byweek	time-auth:rule-0590-calendar-byweek: semantic DOM differs (+1 −1 lines at line 10) detail - link "Harness Rules Course": - /url: /harness-rules - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation "Class activity":	unclaimed
`dom`	`time-auth:rule-0590-calendar-byday` /harness-rules/calendar/byday	time-auth:rule-0590-calendar-byday: semantic DOM differs (+1 −1 lines at line 10) detail - link "Harness Rules Course": - /url: /harness-rules - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation "Class activity":	unclaimed
`dom`	`time-auth:rule-0591-lab-bylab` /harness-rules/lab/bylab	time-auth:rule-0591-lab-bylab: semantic DOM differs (+1 −1 lines at line 10) detail - link "Harness Rules Course": - /url: /harness-rules - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation "Class activity":	unclaimed
`dom`	`time-auth:rule-0591-lab-bystep` /harness-rules/lab/bystep	time-auth:rule-0591-lab-bystep: semantic DOM differs (+1 −1 lines at line 10) detail - link "Harness Rules Course": - /url: /harness-rules - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation "Class activity":	unclaimed
`dom`	`time-auth:rule-0591-learning-records` /harness-rules/lab/learning-records	time-auth:rule-0591-learning-records: semantic DOM differs (+1 −1 lines at line 10) detail - link "Harness Rules Course": - /url: /harness-rules - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation "Class activity":	unclaimed
`dom`	`time-auth:rule-0591-student` /harness-rules/harness-quiet	time-auth:rule-0591-student: semantic DOM differs (+1 −1 lines at line 10) detail - link "Harness Rules Course": - /url: /harness-rules - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation "Class activity":	unclaimed
`dom`	`reader-auth:rule-0582-course` /course/localhost:8080	reader-auth:rule-0582-course: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:rule-0582-lab-step` /lab/localhost:8080/unit-1/topic-01/book-lab-01	reader-auth:rule-0582-lab-step: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:rule-0582-lab-step-2` /lab/localhost:8080/unit-1/topic-01/book-lab-01/Step-01	reader-auth:rule-0582-lab-step-2: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:rule-0582-lab-step-back` /lab/localhost:8080/unit-1/topic-01/book-lab-01/Setup	reader-auth:rule-0582-lab-step-back: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:rule-0583-profile-menu` /course/localhost:8080	reader-auth:rule-0583-profile-menu: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu" [expanded]: - img "Harness Student"	unclaimed
`dom`	`reader-auth:rule-0584-talk-slide-2` /talk/localhost:8081/unit-1/topic-01/talk-01	reader-auth:rule-0584-talk-slide-2: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:rule-0584-notebook-cell-2` /notebook/localhost:8081/unit-1/topic-01/notebook-01	reader-auth:rule-0584-notebook-cell-2: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:rule-0584-quiz-results` /quiz/localhost:8081/unit-1/topic-01/quiz-01	reader-auth:rule-0584-quiz-results: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:rule-0585-course-dark` /course/localhost:8081	reader-auth:rule-0585-course-dark: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:rule-0585-preferences-after-reload` /course/localhost:8081	reader-auth:rule-0585-preferences-after-reload: semantic DOM differs (+1 −1 lines at line 9) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu" [expanded]: Preferences + - button "Preferences" [expanded] - complementary "Course navigation": - navigation:	unclaimed
`dom`	`reader-auth:rule-0586-turned-away` /	reader-auth:rule-0586-turned-away: semantic DOM differs (+1 −1 lines at line 10) detail - link "My courses": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:rule-0586-turned-away-again` /	reader-auth:rule-0586-turned-away-again: semantic DOM differs (+1 −1 lines at line 10) detail - link "My courses": - /url: / - - button "Open Theme Menu": Preferences + - button "Preferences" - button "Profile menu": - img "Harness Student"	unclaimed
`dom`	`reader-auth:rule-0587-llm` /llm/localhost:8081	reader-auth:rule-0587-llm: semantic DOM differs (+1 −1 lines at line 8) detail - text: Tutors CI - button "Search this course": Search - - button "Open Theme Menu": Preferences + - button "Preferences" - complementary "Course navigation": - navigation:	unclaimed
`network`	`POST /api/live/activity` /course/localhost:8080	reader-auth:course: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`POST /api/live/activity` /topic/localhost:8080/unit-1/topic-01	reader-auth:topic: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`GET /_app/immutable/chunks/{{hash}}.js` /course/reference-course	reference:course: GET /_app/immutable/chunks/{{hash}}.js requested 43× on a, 44× on b	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: moving learning events from browser Realtime to the reader's server adds one immutable chunk on reference:course and reference:note (#478, #481)
`network`	`GET /_app/immutable/chunks/{{hash}}.js` /note/reference-course/topic-07-reference/note-1	reference:note: GET /_app/immutable/chunks/{{hash}}.js requested 39× on a, 40× on b	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: moving learning events from browser Realtime to the reader's server adds one immutable chunk on reference:course and reference:note (#478, #481)
`network`	`POST /api/live/activity` /	live-auth:rule-0589-courses: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`POST /api/live/activity` /course/localhost:8080	reader-auth:rule-0582-course: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`POST /api/live/activity` /lab/localhost:8080/unit-1/topic-01/book-lab-01	reader-auth:rule-0582-lab-step: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`POST /api/live/activity` /lab/localhost:8080/unit-1/topic-01/book-lab-01/Step-01	reader-auth:rule-0582-lab-step-2: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`POST /api/live/activity` /lab/localhost:8080/unit-1/topic-01/book-lab-01/Setup	reader-auth:rule-0582-lab-step-back: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`network`	`POST /api/live/activity` /course/localhost:8080	reader-auth:rule-0583-profile-menu: new request on b: POST /api/live/activity	Rule 0330: When a student opens a learning object, the reader shall send the learning event to the reader's server without publishing it over Realtime from the browser. — Rule 0330: the reader sends each learning event to its own server (POST /api/live/activity) instead of broadcasting it from the browser (#481)
`console`	`catalogue:home` /	catalogue:home: console message gone on b detail error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n at Object.getCatalogue ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:102918)\n at V ({{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:484)\n at Wn ({{origin}}/_app/immutable/chunks/XgCIYxIE.js:2:24206)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching courses:"}	informational
`console`	`catalogue:home` /	catalogue:home: console message gone on b detail error: {"app":"tutors-catalogue","environment":"production","error":"Cannot read properties of undefined (reading 'from')","stack":"TypeError: Cannot read properties of undefined (reading 'from')\n at Object.getStudentCount ({{origin}}/_app/immutable/chunks/2lYorbfj.js:69:103346)\n at {{origin}}/_app/immutable/nodes/2.NAkx_ofm.js:1:5193\n at Cr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:23871)\n at {{origin}}/_app/immutable/chunks/Cv2zGAZD.js:2:2704\n at mr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:21611)\n at vr ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:22749)\n at Xt ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:12091)\n at #_ ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:9277)\n at e.flush ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:10794)\n at Array.<anonymous> ({{origin}}/_app/immutable/chunks/Cv2zGAZD.js:1:11554)","timestamp":"2026-09-16T09:05:00.000Z","level":"error","message":"Error fetching course count:"}	informational
`timing`	`rule-0588-content-lock`	journey rule-0588-content-lock median 10192ms → 13784ms but not significant (p=0.403, +35%, n=5/5; smallest slowdown 5/5 runs could detect: about 49%)	informational
`focus`	`reader:home` /	reader:home: keyboard order changed (12 stops on a, 12 on b) detail a "My courses" -button "Open Theme Menu" +button "Preferences" button "Anonymous Tutors Profile"	unclaimed
`focus`	`catalogue:home` /	catalogue:home: keyboard order changed (12 stops on a, 12 on b) detail a "Catalogue" -button "Open Theme Menu" +button "Preferences" a "My courses"	unclaimed
`focus`	`reference:course` /course/reference-course	reference:course: keyboard order changed (12 stops on a, 12 on b) detail button "Search this course" -button "Open Theme Menu" +button "Preferences" button "Anonymous Tutors Profile"	unclaimed
`focus`	`live-auth:rule-0589-courses` /	live-auth:rule-0589-courses: keyboard order changed (12 stops on a, 12 on b) detail a "Live" -button "Open Theme Menu" +button "Preferences" a "My courses"	unclaimed
`focus`	`time-auth:rule-0590-calendar-byweek` /harness-rules/calendar/byweek	time-auth:rule-0590-calendar-byweek: keyboard order changed (12 stops on a, 12 on b) detail a "Harness Rules Course" -button "Open Theme Menu" +button "Preferences" a "Medians"	unclaimed
`focus`	`time-auth:rule-0590-calendar-byday` /harness-rules/calendar/byday	time-auth:rule-0590-calendar-byday: keyboard order changed (12 stops on a, 12 on b) detail a "Harness Rules Course" -button "Open Theme Menu" +button "Preferences" a "Medians"	unclaimed
`focus`	`time-auth:rule-0591-lab-bylab` /harness-rules/lab/bylab	time-auth:rule-0591-lab-bylab: keyboard order changed (12 stops on a, 12 on b) detail a "Harness Rules Course" -button "Open Theme Menu" +button "Preferences" a "Medians"	unclaimed
`focus`	`time-auth:rule-0591-lab-bystep` /harness-rules/lab/bystep	time-auth:rule-0591-lab-bystep: keyboard order changed (12 stops on a, 12 on b) detail a "Harness Rules Course" -button "Open Theme Menu" +button "Preferences" a "Medians"	unclaimed
`focus`	`time-auth:rule-0591-learning-records` /harness-rules/lab/learning-records	time-auth:rule-0591-learning-records: keyboard order changed (12 stops on a, 12 on b) detail a "Harness Rules Course" -button "Open Theme Menu" +button "Preferences" a "Medians"	unclaimed
`focus`	`reader-auth:rule-0586-turned-away` /	reader-auth:rule-0586-turned-away: keyboard order changed (12 stops on a, 12 on b) detail a "My courses" -button "Open Theme Menu" +button "Preferences" button "Profile menu"	unclaimed
`focus`	`reader-auth:rule-0586-turned-away-again` /	reader-auth:rule-0586-turned-away-again: keyboard order changed (12 stops on a, 12 on b) detail a "My courses" -button "Open Theme Menu" +button "Preferences" button "Profile menu"	unclaimed
`persistence`	`student-signs-in/realtime_claim_live_publish`	student-signs-in: RPC realtime_claim_live_publish — 0 row(s) on a, 2 on b	Rule 0331: When the reader's server receives a learning event, the reader shall publish it only to the activity feeds a live dashboard has watched in the last 90 seconds. — Rule 0331: the reader's server claims the topics to publish to, and charges the day's Live budget, through realtime_claim_live_publish (#481)
`persistence`	`rule-0589-live/realtime_claim_live_publish`	rule-0589-live: RPC realtime_claim_live_publish — 0 row(s) on a, 4 on b	unclaimed
`persistence`	`rule-0589-live/realtime_watch`	rule-0589-live: RPC realtime_watch — 0 row(s) on a, 1 on b	unclaimed
`persistence`	`rule-0582-signed-in-lab/realtime_claim_live_publish`	rule-0582-signed-in-lab: RPC realtime_claim_live_publish — 0 row(s) on a, 5 on b	unclaimed
`persistence`	`rule-0583-presence/realtime_claim_live_publish`	rule-0583-presence: RPC realtime_claim_live_publish — 0 row(s) on a, 2 on b	unclaimed
`realtime`	`reader-auth/messages`	reader-auth: Realtime messages per reader page view fell: a 0.86 / b 0 per reader page (broadcasts a 18 / b 0, socket data frames a 0 / b 0, over 21 page view(s))	informational
`runtime`	`runtime/summary`	container posture collected for catalogue, live, reader, reader-auth, time on both sides (compose) detail catalogue: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter live: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter reader: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter reader-auth: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter time: a — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter b — uid 1001:0, caps none, root fs ro, /tmp rw, no-new-privileges, seccomp filter	informational
`startup`	`startup/summary`	startup time collected on both sides (compose, 5 restart(s) per app) detail catalogue: first healthy / 561 → 500 ms, ready 2447 → 2360 ms (median, a → b, n=5/5) live: first healthy / 533 → 551 ms, ready 2436 → 2462 ms (median, a → b, n=5/5) reader: first healthy / 696 → 697 ms, ready 2476 → 2453 ms (median, a → b, n=5/5) time: first healthy / 514 → 546 ms, ready 2412 → 2437 ms (median, a → b, n=5/5)	informational
`image-hardening`	`reader/healthcheck`	reader: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`image-hardening`	`catalogue/healthcheck`	catalogue: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`image-hardening`	`live/healthcheck`	live: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`image-hardening`	`time/healthcheck`	time: declares no HEALTHCHECK (production too)	informing (reported, never gates)
`build-provenance`	`reader/slsa`	reader: carries no SLSA provenance verified under the publishing identity on 0627d3940eb9 (production too)	informing (reported, never gates)
`build-provenance`	`catalogue/slsa`	catalogue: carries no SLSA provenance verified under the publishing identity on 8c61baa1c1e9 (production too)	informing (reported, never gates)
`build-provenance`	`live/slsa`	live: carries no SLSA provenance verified under the publishing identity on af5231fe19ed (production too)	informing (reported, never gates)
`build-provenance`	`time/slsa`	time: carries no SLSA provenance verified under the publishing identity on 4db2acd4bfa8 (production too)	informing (reported, never gates)
`vuln-ceiling`	`reader/summary`	reader: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`vuln-ceiling`	`catalogue/summary`	catalogue: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`vuln-ceiling`	`live/summary`	live: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`vuln-ceiling`	`time/summary`	time: vuln-ceiling holds on b: 94 advisories scanned, 20 critical or high, none with a fix available	informational
`asset-graph`	`reader`	reader: the asset graph changed: 173 → 173 immutable requests (JS 142 → 142, CSS 31 → 31), 1.6 MB → 1.6 MB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`catalogue`	catalogue: the asset graph changed: 19 → 19 immutable requests (JS 15 → 15, CSS 4 → 4), 529 KB → 530 KB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`live`	live: the asset graph changed: 24 → 24 immutable requests (JS 19 → 19, CSS 5 → 5), 540 KB → 541 KB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`reader-auth`	reader-auth: the asset graph changed: 1060 → 1060 immutable requests (JS 902 → 902, CSS 158 → 158), 11.7 MB → 11.7 MB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`reference`	reference: the asset graph changed: 121 → 123 immutable requests (JS 99 → 101, CSS 22 → 22), 1.2 MB → 1.2 MB; 2 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`live-auth`	live-auth: the asset graph changed: 179 → 179 immutable requests (JS 149 → 149, CSS 30 → 30), 2.1 MB → 2.1 MB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`asset-graph`	`time-auth`	time-auth: the asset graph changed: 269 → 269 immutable requests (JS 235 → 235, CSS 34 → 34), 5.1 MB → 5.1 MB; 0 network and 0 headers difference(s) are this churn	informing (reported, never gates)
`replay`	`replay:note-02 GET /_app/immutable/chunks/{{hash}}.js` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: GET /_app/immutable/chunks/{{hash}}.js requested 37× on a, 38× on b	informing (reported, never gates)
`replay`	`replay:note-02 GET {{course}}/tutors.json` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: new request on b: GET {{course}}/tutors.json	informing (reported, never gates)
`replay`	`replay:note-02 GET /_app/immutable/assets/1.{{hash}}.css` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: new request on b: GET /_app/immutable/assets/1.{{hash}}.css	informing (reported, never gates)
`replay`	`replay:note-02 GET /_app/immutable/nodes/1.{{hash}}.js` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: new request on b: GET /_app/immutable/nodes/1.{{hash}}.js	informing (reported, never gates)
`replay`	`replay:note-02 GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100` /note/localhost:8080/unit-1/topic-02/note-02	replay:note-02: new request on b: GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100	informing (reported, never gates)
`replay`	`replay:lab-02-step-03 GET {{course}}/tutors.json` /lab/localhost:8080/unit-1/topic-02/book-lab-01/Step-03	replay:lab-02-step-03: GET {{course}}/tutors.json requested 2× on a, 1× on b	informing (reported, never gates)
`replay`	`replay:lab-02-step-03 GET /_app/immutable/assets/1.{{hash}}.css` /lab/localhost:8080/unit-1/topic-02/book-lab-01/Step-03	replay:lab-02-step-03: GET /_app/immutable/assets/1.{{hash}}.css requested 2× on a, 1× on b	informing (reported, never gates)
`replay`	`replay:lab-02-step-03 GET /_app/immutable/chunks/{{hash}}.js` /lab/localhost:8080/unit-1/topic-02/book-lab-01/Step-03	replay:lab-02-step-03: GET /_app/immutable/chunks/{{hash}}.js requested 39× on a, 38× on b	informing (reported, never gates)
`replay`	`replay:lab-02-step-03 GET /_app/immutable/nodes/1.{{hash}}.js` /lab/localhost:8080/unit-1/topic-02/book-lab-01/Step-03	replay:lab-02-step-03: GET /_app/immutable/nodes/1.{{hash}}.js requested 2× on a, 1× on b	informing (reported, never gates)
`replay`	`replay:lab-02-step-03 GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100` /lab/localhost:8080/unit-1/topic-02/book-lab-01/Step-03	replay:lab-02-step-03: request no longer made on b: GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100	informing (reported, never gates)
`slo`	`reader-availability`	reader-availability: 100.0% of 62 reader requests not 5xx on b (its /metrics across the journeys), objective 99.90% (harness floor; monorepo 99.50%): holds	informational
`slo`	`reader-availability/load`	reader-availability: 100.0% of 601 reader requests not 5xx on b (the k6 load leg), objective 99.90% (harness floor; monorepo 99.50%): holds	informational
`slo`	`reader-latency`	reader-latency: 100.0% of 62 reader requests under 1s on b (its /metrics across the journeys), objective 99.0% (harness floor; monorepo 95.0%): holds	informational
`slo`	`reader-latency/load`	reader-latency: 100.0% of 601 reader requests under 1s on b (the k6 load leg), objective 99.0% (harness floor; monorepo 95.0%): holds	informational
`slo`	`catalogue-availability/not-evaluated`	catalogue-availability: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`catalogue-latency/not-evaluated`	catalogue-latency: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`live-availability/not-evaluated`	live-availability: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`live-latency/not-evaluated`	live-latency: not evaluated on b: 5 request(s) from its /metrics across the journeys, fewer than 20	informational
`slo`	`time-availability/not-evaluated`	time-availability: not evaluated on b: its /metrics across the journeys carries no availability SLI for time	informational
`slo`	`time-latency/not-evaluated`	time-latency: not evaluated on b: its /metrics across the journeys carries no latency SLI for time	informational
`slo`	`reader-latency-tail`	reader-latency-tail: 100.0% of 62 reader requests under 2.5s on b (its /metrics across the journeys), objective 99.0%: holds	informational
`slo`	`reader-latency-tail/load`	reader-latency-tail: 100.0% of 601 reader requests under 2.5s on b (the k6 load leg), objective 99.0%: holds	informational

Policy: what b must be informing

Checks on the candidate alone, whatever production is: image hardening (root user, no healthcheck, a secret in the environment or the layer history), build provenance (SLSA provenance from image-build.yml) and the vulnerability ceiling (a critical or high advisory with a fix available). Informing: reported, never gates; a claim can still cover a finding. Hover a cell for what was checked.

app	image-hardening	build-provenance	vuln-ceiling
`reader`	1 finding (1 on production too)	1 finding (1 on production too)	holds
`catalogue`	1 finding (1 on production too)	1 finding (1 on production too)	holds
`live`	1 finding (1 on production too)	1 finding (1 on production too)	holds
`time`	1 finding (1 on production too)	1 finding (1 on production too)	holds

Informing (25; 25 unclaimed) reported, never gates

18 of 27 engines are blocking; informing (reported, never gates): timing (no date set to block; load/errors still blocks), image-hardening (no date set to block), build-provenance (no date set to block), vuln-ceiling (no date set to block), timing-tolerance (no date set to block), asset-graph (no date set to block), replay (no date set to block), slo (no date set to block), realtime (no date set to block). An informing engine's findings are listed here and never change the verdict, the Gate or the exit code; a claim can still cover one.

Claim hygiene

3 claim(s) cover 11 failing hunk(s): 3.67 per claim, at most 8 under one (flagged above 10).

Masks

engine	scope	what it found	level	claimed by
`image-hardening`	`reader/healthcheck`	reader: declares no HEALTHCHECK (production too)	no date set	unclaimed
`image-hardening`	`catalogue/healthcheck`	catalogue: declares no HEALTHCHECK (production too)	no date set	unclaimed
`image-hardening`	`live/healthcheck`	live: declares no HEALTHCHECK (production too)	no date set	unclaimed
`image-hardening`	`time/healthcheck`	time: declares no HEALTHCHECK (production too)	no date set	unclaimed
`build-provenance`	`reader/slsa`	reader: carries no SLSA provenance verified under the publishing identity on 0627d3940eb9 (production too)	no date set	unclaimed
`build-provenance`	`catalogue/slsa`	catalogue: carries no SLSA provenance verified under the publishing identity on 8c61baa1c1e9 (production too)	no date set	unclaimed
`build-provenance`	`live/slsa`	live: carries no SLSA provenance verified under the publishing identity on af5231fe19ed (production too)	no date set	unclaimed
`build-provenance`	`time/slsa`	time: carries no SLSA provenance verified under the publishing identity on 4db2acd4bfa8 (production too)	no date set	unclaimed
`asset-graph`	`reader`	reader: the asset graph changed: 173 → 173 immutable requests (JS 142 → 142, CSS 31 → 31), 1.6 MB → 1.6 MB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`catalogue`	catalogue: the asset graph changed: 19 → 19 immutable requests (JS 15 → 15, CSS 4 → 4), 529 KB → 530 KB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`live`	live: the asset graph changed: 24 → 24 immutable requests (JS 19 → 19, CSS 5 → 5), 540 KB → 541 KB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`reader-auth`	reader-auth: the asset graph changed: 1060 → 1060 immutable requests (JS 902 → 902, CSS 158 → 158), 11.7 MB → 11.7 MB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`reference`	reference: the asset graph changed: 121 → 123 immutable requests (JS 99 → 101, CSS 22 → 22), 1.2 MB → 1.2 MB; 2 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`live-auth`	live-auth: the asset graph changed: 179 → 179 immutable requests (JS 149 → 149, CSS 30 → 30), 2.1 MB → 2.1 MB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`asset-graph`	`time-auth`	time-auth: the asset graph changed: 269 → 269 immutable requests (JS 235 → 235, CSS 34 → 34), 5.1 MB → 5.1 MB; 0 network and 0 headers difference(s) are this churn	no date set	unclaimed
`replay`	`replay:note-02 GET /_app/immutable/chunks/{{hash}}.js`	replay:note-02: GET /_app/immutable/chunks/{{hash}}.js requested 37× on a, 38× on b	no date set	unclaimed
`replay`	`replay:note-02 GET {{course}}/tutors.json`	replay:note-02: new request on b: GET {{course}}/tutors.json	no date set	unclaimed
`replay`	`replay:note-02 GET /_app/immutable/assets/1.{{hash}}.css`	replay:note-02: new request on b: GET /_app/immutable/assets/1.{{hash}}.css	no date set	unclaimed
`replay`	`replay:note-02 GET /_app/immutable/nodes/1.{{hash}}.js`	replay:note-02: new request on b: GET /_app/immutable/nodes/1.{{hash}}.js	no date set	unclaimed
`replay`	`replay:note-02 GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100`	replay:note-02: new request on b: GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100	no date set	unclaimed
`replay`	`replay:lab-02-step-03 GET {{course}}/tutors.json`	replay:lab-02-step-03: GET {{course}}/tutors.json requested 2× on a, 1× on b	no date set	unclaimed
`replay`	`replay:lab-02-step-03 GET /_app/immutable/assets/1.{{hash}}.css`	replay:lab-02-step-03: GET /_app/immutable/assets/1.{{hash}}.css requested 2× on a, 1× on b	no date set	unclaimed
`replay`	`replay:lab-02-step-03 GET /_app/immutable/chunks/{{hash}}.js`	replay:lab-02-step-03: GET /_app/immutable/chunks/{{hash}}.js requested 39× on a, 38× on b	no date set	unclaimed
`replay`	`replay:lab-02-step-03 GET /_app/immutable/nodes/1.{{hash}}.js`	replay:lab-02-step-03: GET /_app/immutable/nodes/1.{{hash}}.js requested 2× on a, 1× on b	no date set	unclaimed
`replay`	`replay:lab-02-step-03 GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100`	replay:lab-02-step-03: request no longer made on b: GET /note/localhost:8080/unit-1/topic-02/note-02/__data.json?x-sveltekit-invalidated=100	no date set	unclaimed

Fired: response-date×272, request-id×272, etag×272, metrics-process×599, metrics-timing-histograms×12, third-party-requests×4806, persistence-stub-requests×2340, oauth-callback-state×100, media-range-status×45, chromium-compute-pressure-policy×1, hashed-assets×19134, footer-tutors-version×866, transport-length×272, transport-connection×272, transport-keepalive×272.
Silent this run: realtime-rest-fallback-warning, transport-encoding, transport-transfer — a mask that never fires is a mask to delete.