From d52cf8fc8bc4a3b81506993d2d6ee0a0189e9a07 Mon Sep 17 00:00:00 2001 From: Krzysztof kuhy Rudnicki Date: Fri, 2 Oct 2026 18:05:00 +0200 Subject: [PATCH] Prettier-format the DNS fix evidence and contract Co-Authored-By: Claude Opus 5 (1M context) --- ...t-race-and-startup-monitor-2026-10-02.json | 5 +++- ...t-race-and-startup-monitor-2026-10-02.json | 24 +++++++++++++++---- 2 files changed, 24 insertions(+), 5 deletions(-) diff --git a/docs/superpowers/contracts/dns-boot-race-and-startup-monitor-2026-10-02.json b/docs/superpowers/contracts/dns-boot-race-and-startup-monitor-2026-10-02.json index 3ff027a5..785f0781 100644 --- a/docs/superpowers/contracts/dns-boot-race-and-startup-monitor-2026-10-02.json +++ b/docs/superpowers/contracts/dns-boot-race-and-startup-monitor-2026-10-02.json @@ -7,6 +7,9 @@ "No startup_monitor references remain; the services suites pass at the coverage ratchet", "Host: stunnel-dot active and serving TLS on 10.8.0.1:853" ], - "out_of_scope": ["Firewall rules", "Applying compulsive-block wrappers or LeechBlock (guard warnings left for the owner)"], + "out_of_scope": [ + "Firewall rules", + "Applying compulsive-block wrappers or LeechBlock (guard warnings left for the owner)" + ], "verifier": "pre-commit (shell-coverage-ratchet in the namespace jail), vmbox behaviour check, setup_dot_resolver.sh --check on the host" } diff --git a/docs/superpowers/evidence/dns-boot-race-and-startup-monitor-2026-10-02.json b/docs/superpowers/evidence/dns-boot-race-and-startup-monitor-2026-10-02.json index 9f349657..3ae9cf85 100644 --- a/docs/superpowers/evidence/dns-boot-race-and-startup-monitor-2026-10-02.json +++ b/docs/superpowers/evidence/dns-boot-race-and-startup-monitor-2026-10-02.json @@ -12,10 +12,26 @@ "check_and_enable_services: remove check_startup_monitor (pc_startup was removed in 765fa925) and default HOSTS_BLOCKER/DW/WORKOUT_LOCKER repos to ~/src/" ], "verification": [ - {"command": "pre-commit run --files (shell-coverage-ratchet runs the suites in the jail)", "result": "pass", "evidence": "all hooks passed, ratchet 100%"}, - {"command": "vmbox: dnsmasq with interface=, bind-interfaces vs bind-dynamic; Requires= vs Wants= on a failing dependency", "result": "pass", "evidence": "bind-interfaces: DIED 'unknown interface lanx0'; bind-dynamic: survived, bound 10.199.0.1:5353 after the interface appeared; Requires=: inactive; Wants=: active"}, - {"command": "host: setup_dot_resolver.sh + dns_units functions + validate_and_enable", "result": "pass", "evidence": "dnsmasq --test OK; stunnel-dot active on 10.8.0.1:853, TLSv1.3 Verification OK; DNS answers on 127.0.0.1 and 192.168.1.43; no network-online in dnsmasq After="}, - {"command": "sudo check_and_enable_services.sh --status (host) and vmbox diff against HEAD", "result": "pass", "evidence": "full run, no 'not found'; only diff vs HEAD is the removed PC Startup Monitor section"} + { + "command": "pre-commit run --files (shell-coverage-ratchet runs the suites in the jail)", + "result": "pass", + "evidence": "all hooks passed, ratchet 100%" + }, + { + "command": "vmbox: dnsmasq with interface=, bind-interfaces vs bind-dynamic; Requires= vs Wants= on a failing dependency", + "result": "pass", + "evidence": "bind-interfaces: DIED 'unknown interface lanx0'; bind-dynamic: survived, bound 10.199.0.1:5353 after the interface appeared; Requires=: inactive; Wants=: active" + }, + { + "command": "host: setup_dot_resolver.sh + dns_units functions + validate_and_enable", + "result": "pass", + "evidence": "dnsmasq --test OK; stunnel-dot active on 10.8.0.1:853, TLSv1.3 Verification OK; DNS answers on 127.0.0.1 and 192.168.1.43; no network-online in dnsmasq After=" + }, + { + "command": "sudo check_and_enable_services.sh --status (host) and vmbox diff against HEAD", + "result": "pass", + "evidence": "full run, no 'not found'; only diff vs HEAD is the removed PC Startup Monitor section" + } ], "risks": [ "bind-dynamic also listens on addresses that appear later on enp6s0 (intended)",