# Census overlay claim-harness-census (platform-d8 deployment harness, 8.2 stops on 2026-10-20): the migration census keeps both pointer-digest ratchets (#253 marks; root's under <opt>/pointer-digests, the edge's under <data>/pointer-digests) as shared trees of box state, and install-control's .claims-activation.lock as a shared regular file in the unit directory root, so 8.2 no longer refuses on state it leaves itself or on anti-rollback marks no installation owns. activationLock names its lock through activationLockName (new constant, same value). No new read, no class change: the two rows below are re-pinned at their classes.
internal/host/activation_install_linux.go activationLock authority G,J4 rev3=census-ruling-claim-harness-census;identity=explicit operator CLI uid 0;basis=opens protected activation lock at checked directory, requires root-owned mode 0600 and takes exclusive nonblocking flock; the lock name is now the activationLockName constant, unchanged file:Fstat@217 2172dc398960891e0101bb719b2ebaa5b02d44e7e204a833897f5ad2e38db01d
4
internal/host/claimcensus.go claimUnitCensus authority C,G,J4 rev3=census-ruling-claim-harness-census;identity=root installation admission controller uid 0;basis=classifies the three exact guard-arm platform drop-in files and the exact activation lock name in the unit directory root as shared regular files alongside shipped units; a lock in a drop-in directory, unknown drop-ins, per-host artifacts and symlinks remain refused file:ReadFile@1029 b14864933fa08617d3eb38ada45335e27e3ecdac7476e7a538dd32d67ff60659
amadan