carlos / platform Public

plans 3b: Astra round 3 brief

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
claude agent, operated by paul@keymail.dev eb0c40ceb92f23bc5fc4a65d02e1688e68f00d45 parent 67f1d32
1 file changed, +29 −0
  • docs/superpowers/specs/CODEX-REVIEW-BRIEF-PLANS-3B-CODE-R3.md +29 −0

CI passed — run details

CI log
=== gate ===
.amadan/test-gate.sh
=== launchctx (3 s)
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
=== vet (28 s)
=== gofmt (1 s)
gofmt -l .: clean
=== rest (80 s)
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	7.679s
ok  	github.com/carlosframework/platform/cmd/moveprobe	12.981s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.730s
ok  	github.com/carlosframework/platform/internal/activator	62.820s
ok  	github.com/carlosframework/platform/internal/agentsock	0.055s
ok  	github.com/carlosframework/platform/internal/alerting	0.005s
ok  	github.com/carlosframework/platform/internal/analytics	0.053s
ok  	github.com/carlosframework/platform/internal/appconfig	4.224s
ok  	github.com/carlosframework/platform/internal/apperr	0.515s
ok  	github.com/carlosframework/platform/internal/applog	0.595s
ok  	github.com/carlosframework/platform/internal/assetcache	0.568s
ok  	github.com/carlosframework/platform/internal/awsinv	0.249s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.145s
ok  	github.com/carlosframework/platform/internal/boxid	2.456s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.022s
ok  	github.com/carlosframework/platform/internal/caps	0.020s
ok  	github.com/carlosframework/platform/internal/certwarm	0.005s
ok  	github.com/carlosframework/platform/internal/cgroup	0.761s
ok  	github.com/carlosframework/platform/internal/changelog	0.550s
ok  	github.com/carlosframework/platform/internal/claimactivation	2.299s
ok  	github.com/carlosframework/platform/internal/clamd	0.186s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	8.690s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.024s
ok  	github.com/carlosframework/platform/internal/dbquery	0.340s
ok  	github.com/carlosframework/platform/internal/dbreads	2.488s
?   	github.com/carlosframework/platform/internal/dbreads/dbreadstest	[no test files]
ok  	github.com/carlosframework/platform/internal/dbverify	0.006s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.003s
ok  	github.com/carlosframework/platform/internal/docsite	0.260s
ok  	github.com/carlosframework/platform/internal/domains	4.114s
ok  	github.com/carlosframework/platform/internal/doorkey	0.020s
ok  	github.com/carlosframework/platform/internal/economics	0.006s
ok  	github.com/carlosframework/platform/internal/edge	49.757s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.022s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.233s
ok  	github.com/carlosframework/platform/internal/gate	2.170s
ok  	github.com/carlosframework/platform/internal/genselect	0.129s
ok  	github.com/carlosframework/platform/internal/geo	0.036s
ok  	github.com/carlosframework/platform/internal/geoip	0.122s
ok  	github.com/carlosframework/platform/internal/historyreadback	0.550s
ok  	github.com/carlosframework/platform/internal/hostactors	7.186s
ok  	github.com/carlosframework/platform/internal/hostactors/awsmembership	0.072s
ok  	github.com/carlosframework/platform/internal/hostbox	4.664s
ok  	github.com/carlosframework/platform/internal/hostclaim	2.469s
ok  	github.com/carlosframework/platform/internal/hostenv	0.070s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.056s
ok  	github.com/carlosframework/platform/internal/hostexec	8.873s
ok  	github.com/carlosframework/platform/internal/hostfence	0.072s
ok  	github.com/carlosframework/platform/internal/hostfiles	11.422s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.038s
ok  	github.com/carlosframework/platform/internal/hostguard	1.463s
ok  	github.com/carlosframework/platform/internal/hostops	3.456s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.028s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.047s
ok  	github.com/carlosframework/platform/internal/hostrelocate	1.599s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.542s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.027s
ok  	github.com/carlosframework/platform/internal/infraview	0.027s
ok  	github.com/carlosframework/platform/internal/instancectl	5.340s
ok  	github.com/carlosframework/platform/internal/instanceexec	3.159s
ok  	github.com/carlosframework/platform/internal/instancefs	0.024s
ok  	github.com/carlosframework/platform/internal/instancekey	0.003s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.021s
ok  	github.com/carlosframework/platform/internal/layout	3.261s
ok  	github.com/carlosframework/platform/internal/lbhealth	0.016s
ok  	github.com/carlosframework/platform/internal/lease	10.464s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	1.065s
ok  	github.com/carlosframework/platform/internal/ledger	0.020s
ok  	github.com/carlosframework/platform/internal/mail	0.487s
ok  	github.com/carlosframework/platform/internal/maintenance	0.460s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	6.016s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.218s
ok  	github.com/carlosframework/platform/internal/metrics	0.014s
ok  	github.com/carlosframework/platform/internal/moves	30.799s
ok  	github.com/carlosframework/platform/internal/moves/archive	2.310s
ok  	github.com/carlosframework/platform/internal/objstore	0.886s
ok  	github.com/carlosframework/platform/internal/ops	0.308s
ok  	github.com/carlosframework/platform/internal/park	0.429s
ok  	github.com/carlosframework/platform/internal/plans	0.010s
ok  	github.com/carlosframework/platform/internal/privatefile	0.009s
ok  	github.com/carlosframework/platform/internal/provision	42.285s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.012s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	7.353s
ok  	github.com/carlosframework/platform/internal/relay	7.274s
ok  	github.com/carlosframework/platform/internal/release	36.204s
ok  	github.com/carlosframework/platform/internal/rollout	5.444s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.005s
ok  	github.com/carlosframework/platform/internal/rootaws	0.013s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.086s
ok  	github.com/carlosframework/platform/internal/rootstate	0.033s
ok  	github.com/carlosframework/platform/internal/runs	0.648s
ok  	github.com/carlosframework/platform/internal/s3compat	0.008s
ok  	github.com/carlosframework/platform/internal/safefile	0.005s
ok  	github.com/carlosframework/platform/internal/schedule	3.815s
ok  	github.com/carlosframework/platform/internal/seeds	0.029s
ok  	github.com/carlosframework/platform/internal/sim/engines	5.807s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	27.983s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	3.837s
ok  	github.com/carlosframework/platform/internal/status	0.092s
ok  	github.com/carlosframework/platform/internal/steering	0.026s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.058s
ok  	github.com/carlosframework/platform/internal/svcrole	0.003s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.006s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.005s
ok  	github.com/carlosframework/platform/internal/unixdial	0.011s
ok  	github.com/carlosframework/platform/internal/updatewords	0.010s
ok  	github.com/carlosframework/platform/internal/usage	0.016s
ok  	github.com/carlosframework/platform/internal/version	0.002s
ok  	github.com/carlosframework/platform/internal/vet	2.306s
=== internal_console@0 (79 s)
ok  	github.com/carlosframework/platform/internal/console	75.960s
=== internal_console@1 (57 s)
ok  	github.com/carlosframework/platform/internal/console	54.839s
=== internal_console@2 (53 s)
ok  	github.com/carlosframework/platform/internal/console	50.551s
=== internal_console@3 (58 s)
ok  	github.com/carlosframework/platform/internal/console	56.185s
=== internal_console@4 (53 s)
ok  	github.com/carlosframework/platform/internal/console	50.247s
=== internal_console@5 (56 s)
ok  	github.com/carlosframework/platform/internal/console	54.093s
=== internal_console@6 (56 s)
ok  	github.com/carlosframework/platform/internal/console	53.360s
=== internal_console@7 (61 s)
ok  	github.com/carlosframework/platform/internal/console	58.876s
=== internal_host@0 (67 s)
ok  	github.com/carlosframework/platform/internal/host	64.207s
=== internal_host@1 (34 s)
ok  	github.com/carlosframework/platform/internal/host	30.828s
=== internal_host@2 (37 s)
ok  	github.com/carlosframework/platform/internal/host	33.802s
=== internal_host@3 (37 s)
ok  	github.com/carlosframework/platform/internal/host	33.895s
=== root@0 (72 s)
ok  	github.com/carlosframework/platform	69.687s
=== root@1 (50 s)
ok  	github.com/carlosframework/platform	47.692s
=== root@2 (62 s)
ok  	github.com/carlosframework/platform	60.111s
=== root@3 (58 s)
ok  	github.com/carlosframework/platform	55.924s
=== root@4 (59 s)
ok  	github.com/carlosframework/platform	56.971s
=== cross ===
--- shard 0 of 5 ---
cross-compiling darwin/arm64
--- shard 1 of 5 ---
cross-compiling darwin/amd64
--- shard 2 of 5 ---
cross-compiling linux/arm64
linux/arm64 carlos binary: 50659490 bytes (ceiling 52000000)
--- shard 3 of 5 ---
cross-compiling windows/amd64
--- shard 4 of 5 ---
cross-compiling windows/arm64
=== minio-contract ===
minio contract: arm64, minio RELEASE.2025-09-07T16-13-09Z, mc RELEASE.2025-08-13T08-35-41Z
  minio: cached, digest verified
  mc: cached, digest verified
  minio healthy on 127.0.0.1:20999
Added `local` successfully.
Bucket created successfully `local/contract-bucket`.
Bucket created successfully `local/denied-bucket`.
Created policy `contract-only` successfully.
Added user `scopeduser` successfully.
Attached Policies: [contract-only]
To User: scopeduser
  buckets and scoped user ready
=== RUN   TestDeliveredContractMinio
=== RUN   TestDeliveredContractMinio/put
=== RUN   TestDeliveredContractMinio/get_round-trips_the_body
=== RUN   TestDeliveredContractMinio/list_shows_the_key
=== RUN   TestDeliveredContractMinio/head_and_list_agree_on_the_version
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed
=== RUN   TestDeliveredContractMinio/delete_removes_it
=== RUN   TestDeliveredContractMinio/cross-bucket_denial
--- PASS: TestDeliveredContractMinio (0.02s)
    --- PASS: TestDeliveredContractMinio/put (0.00s)
    --- PASS: TestDeliveredContractMinio/get_round-trips_the_body (0.00s)
    --- PASS: TestDeliveredContractMinio/list_shows_the_key (0.00s)
    --- PASS: TestDeliveredContractMinio/head_and_list_agree_on_the_version (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route (0.01s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed (0.00s)
    --- PASS: TestDeliveredContractMinio/delete_removes_it (0.00s)
    --- PASS: TestDeliveredContractMinio/cross-bucket_denial (0.00s)
PASS
ok  	github.com/carlosframework/platform/internal/objstore	0.023s
=== RUN   TestT4StorageProbeMinio
2026/10/25 06:57:51 moves: T4: STORE: list: operation error S3: ListObjectsV2, https response error StatusCode: 403, RequestID: 18E1B37BD0059B14, HostID: 7c420053e0fbcd7f41653fdd92ffa2802c903d05303b1aa15adc2e8bb65d183f, api error SignatureDoesNotMatch: The request signature we calculated does not match the signature you provided. Check your key and signing method.
--- PASS: TestT4StorageProbeMinio (0.01s)
PASS
ok  	github.com/carlosframework/platform/internal/host	0.022s
=== RUN   TestS3StoreMinioContract
=== RUN   TestS3StoreMinioContract/conditional_get_and_etag_listing
=== RUN   TestS3StoreMinioContract/bump_through_every_mutation_path
--- PASS: TestS3StoreMinioContract (0.02s)
    --- PASS: TestS3StoreMinioContract/conditional_get_and_etag_listing (0.01s)
    --- PASS: TestS3StoreMinioContract/bump_through_every_mutation_path (0.02s)
PASS
ok  	github.com/carlosframework/platform/internal/release	0.031s
Bucket created successfully `local/dbf-deploy`.
Bucket created successfully `local/dbf-data-ie`.
Bucket created successfully `local/dbf-data-uk`.
local/dbf-deploy versioning is enabled
Created policy `dbf-console` successfully.
Created policy `dbf-ukbox` successfully.
Added user `dbfconsole` successfully.
Added user `dbfukbox` successfully.
Attached Policies: [dbf-console]
To User: dbfconsole
Attached Policies: [dbf-ukbox]
To User: dbfukbox
=== RUN   TestDBForwardMinio
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/25 06:57:53 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/25 06:57:53 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/25 06:57:53 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/25 06:57:53 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/25 06:57:53 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/25 06:57:53 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/25 06:57:53 console: could not notify member@example.com of a CLI token issue: keymail: lookup member@example.com: keymail: GET /api/federation/lookup?addr=member%40example.com&from=console%40127.0.0.1%3A39011: could not determine target mailbox
    agent.go:135: dbreads: dbr_52a4qyvmg5so5dieouehzy56di: planned 3 files (1544 bytes) and restored to 3 in 10ms
    agent.go:135: dbreads: dbr_52a4qyvmg5so5dieouehzy56di: output 5 bytes in 1 confirmed chunks in 1ms
2026/10/25 06:57:54 console: db read dbr_52a4qyvmg5so5dieouehzy56di: relayed 1 chunks (102 bytes) in 1.004s, ended done
    agent.go:135: dbreads: dbr_qpev2pt2fumizdqhuqdsy6kybi: planned 1 files (720 bytes) and restored to 1 in 8ms
    agent.go:135: dbreads: dbr_qpev2pt2fumizdqhuqdsy6kybi: output 5 bytes in 1 confirmed chunks in 1ms
2026/10/25 06:57:55 console: db read dbr_qpev2pt2fumizdqhuqdsy6kybi: relayed 1 chunks (102 bytes) in 1.003s, ended done
    agent.go:135: dbreads: dbr_ddp52mpjuf6ruqr6cagpq2waqi: planned 3 files (1544 bytes) and held through 3 in 9ms
    agent.go:135: dbreads: dbr_ddp52mpjuf6ruqr6cagpq2waqi: output 1544 bytes in 1 confirmed chunks in 1ms
2026/10/25 06:57:56 console: db read dbr_ddp52mpjuf6ruqr6cagpq2waqi: relayed 1 chunks (1641 bytes) in 1.003s, ended done
=== RUN   TestDBForwardMinio/by_disconnect
=== NAME  TestDBForwardMinio
    agent.go:135: dbreads: dbr_l4bspy4mhfq3tqf6vj7rpzu4my: planned 3 files (1544 bytes) and restored to 3 in 9ms
2026/10/25 06:57:56 console: db read dbr_l4bspy4mhfq3tqf6vj7rpzu4my: relayed 0 chunks (0 bytes) in 12ms, ended client gone
    agent.go:135: dbreads: dbr_l4bspy4mhfq3tqf6vj7rpzu4my: output 5 bytes in 1 confirmed chunks in 7ms
=== RUN   TestDBForwardMinio/by_timeout
=== NAME  TestDBForwardMinio
    agent.go:135: dbreads: dbr_vgkxntqwnasbtf3nwcnffan47m: planned 3 files (1544 bytes) and restored to 3 in 9ms
2026/10/25 06:58:16 console: db read dbr_vgkxntqwnasbtf3nwcnffan47m: relayed 0 chunks (0 bytes) in 19.393s, ended no-result
    agent.go:135: dbreads: dbr_vgkxntqwnasbtf3nwcnffan47m: output 5 bytes in 1 confirmed chunks in 19.377s
--- PASS: TestDBForwardMinio (22.72s)
    --- PASS: TestDBForwardMinio/by_disconnect (0.12s)
    --- PASS: TestDBForwardMinio/by_timeout (19.50s)
PASS
ok  	github.com/carlosframework/platform/internal/console	22.741s
minio contract: PASS
diff --git a/docs/superpowers/specs/CODEX-REVIEW-BRIEF-PLANS-3B-CODE-R3.md b/docs/superpowers/specs/CODEX-REVIEW-BRIEF-PLANS-3B-CODE-R3.md
new file mode 100644
index 000000000..ddaf527fe
--- /dev/null
+++ b/docs/superpowers/specs/CODEX-REVIEW-BRIEF-PLANS-3B-CODE-R3.md
@@ -0,0 +1,29 @@
+# Code review brief, round 3: Plans 3b (never-sleep and schedule refusals)
+
+You are a senior Go reviewer on the carlos platform. Round 2 reviewed
+f808aa12; its findings are docs/superpowers/specs/CODEX-FINDINGS-PLANS-3B-CODE-R2.md
+(round 1's: CODEX-FINDINGS-PLANS-3B-CODE.md). The round 2 fix pass is
+commit 67f1d32d (`git show 67f1d32d`). The whole branch is
+`bcae2a72b005abe86b99edc1a51d49b6d4f6bbe1..HEAD`. Read-only: do not modify
+the working tree, index, HEAD or branches. You may run `go test` with
+GOFLAGS=-buildvcs=false, targeted with -run.
+
+Requirements are as in round 1 (CODEX-REVIEW-BRIEF-PLANS-3B-CODE.md), plus
+the two "Astra review" sections of
+docs/superpowers/plans/2026-10-23-plans-3b-never-sleep.md, whose rulings
+(fast track and retry not checked; no new copy) are the author's: judge
+them, but grade by effect.
+
+1. First, a disposition table for round 2's three findings: fixed, partly
+ fixed or not fixed, with evidence (file:line, test name).
+2. Then only NEW findings in 67f1d32d or that it exposed, graded
+ Critical / Important / Minor, each with a concrete failure scenario.
+ Look at: ListSidecarRecordsStrict (list semantics, deleted-between
+ records, cost); rollbackDaemonGuard and bothAuthorize (does the
+ CAS argument hold; error mapping through AuthorizationError on the CLI
+ and browser doors; deploy-credential rollbacks); the exact cron gap
+ (correctness of the 400-year walk, month and Vixie OR rules, cost per
+ call at a console door); census and card honesty.
+3. A verdict: accept, accept with fixes, or changes required.
+
+Do not review the wording (approved copy in plancaps_copy.go).