Prettier-format the DNS fix evidence and contract
Some checks are pending
dependency freshness / dependencies on newest stable (push) Waiting to run
md-naming / markdown naming convention (push) Waiting to run
Pre-commit checks / pre-commit (${{ matrix.group }}) (mypy, mypy) (push) Waiting to run
Pre-commit checks / pre-commit (${{ matrix.group }}) (pylint, pylint) (push) Waiting to run
Pre-commit checks / pre-commit (${{ matrix.group }}) (rest, ) (push) Waiting to run
Pre-commit checks / pre-commit (${{ matrix.group }}) (shellcheck, shellcheck) (push) Waiting to run
Shell tests / shell-tests (push) Waiting to run
Shell tests / lib-tests (push) Waiting to run
Shell tests / arch-tests (push) Waiting to run

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Krzysztof Rudnicki 2026-10-02 18:05:00 +02:00
parent deaf3ba80a
commit d52cf8fc8b
2 changed files with 24 additions and 5 deletions

View File

@ -7,6 +7,9 @@
"No startup_monitor references remain; the services suites pass at the coverage ratchet",
"Host: stunnel-dot active and serving TLS on 10.8.0.1:853"
],
"out_of_scope": ["Firewall rules", "Applying compulsive-block wrappers or LeechBlock (guard warnings left for the owner)"],
"out_of_scope": [
"Firewall rules",
"Applying compulsive-block wrappers or LeechBlock (guard warnings left for the owner)"
],
"verifier": "pre-commit (shell-coverage-ratchet in the namespace jail), vmbox behaviour check, setup_dot_resolver.sh --check on the host"
}

View File

@ -12,10 +12,26 @@
"check_and_enable_services: remove check_startup_monitor (pc_startup was removed in 765fa925) and default HOSTS_BLOCKER/DW/WORKOUT_LOCKER repos to ~/src/<repo>"
],
"verification": [
{"command": "pre-commit run --files <the 11 files> (shell-coverage-ratchet runs the suites in the jail)", "result": "pass", "evidence": "all hooks passed, ratchet 100%"},
{"command": "vmbox: dnsmasq with interface=<absent>, bind-interfaces vs bind-dynamic; Requires= vs Wants= on a failing dependency", "result": "pass", "evidence": "bind-interfaces: DIED 'unknown interface lanx0'; bind-dynamic: survived, bound 10.199.0.1:5353 after the interface appeared; Requires=: inactive; Wants=: active"},
{"command": "host: setup_dot_resolver.sh + dns_units functions + validate_and_enable", "result": "pass", "evidence": "dnsmasq --test OK; stunnel-dot active on 10.8.0.1:853, TLSv1.3 Verification OK; DNS answers on 127.0.0.1 and 192.168.1.43; no network-online in dnsmasq After="},
{"command": "sudo check_and_enable_services.sh --status (host) and vmbox diff against HEAD", "result": "pass", "evidence": "full run, no 'not found'; only diff vs HEAD is the removed PC Startup Monitor section"}
{
"command": "pre-commit run --files <the 11 files> (shell-coverage-ratchet runs the suites in the jail)",
"result": "pass",
"evidence": "all hooks passed, ratchet 100%"
},
{
"command": "vmbox: dnsmasq with interface=<absent>, bind-interfaces vs bind-dynamic; Requires= vs Wants= on a failing dependency",
"result": "pass",
"evidence": "bind-interfaces: DIED 'unknown interface lanx0'; bind-dynamic: survived, bound 10.199.0.1:5353 after the interface appeared; Requires=: inactive; Wants=: active"
},
{
"command": "host: setup_dot_resolver.sh + dns_units functions + validate_and_enable",
"result": "pass",
"evidence": "dnsmasq --test OK; stunnel-dot active on 10.8.0.1:853, TLSv1.3 Verification OK; DNS answers on 127.0.0.1 and 192.168.1.43; no network-online in dnsmasq After="
},
{
"command": "sudo check_and_enable_services.sh --status (host) and vmbox diff against HEAD",
"result": "pass",
"evidence": "full run, no 'not found'; only diff vs HEAD is the removed PC Startup Monitor section"
}
],
"risks": [
"bind-dynamic also listens on addresses that appear later on enp6s0 (intended)",