Preserve exact candidate f0bc8f11eb and its reviewed 8a4f31b5 ancestor. Reconcile the independently repaired documentation-link guard by retaining main implementation and all controls, adding candidate controls and its exact URL boundary matching. Administrative guide and mirror bytes remain exactly as qualified; no runtime frontend source changes.
Change-source: pulse-maintainer
The complete documentation suite rejected the PR template current-policy anchor as a shipped runtime link. Permit only that exact file and anchor, while retaining rejection of runtime links, other templates and changed paths, queries or anchors. Preserve the reviewed RBAC safety candidate and finish its existing qualification on this additive source.
Contract-Neutral: Repository documentation-link classification and regression tests only; no shipped runtime, administrative recipe, authentication, RBAC, API or frontend behaviour changes.
Change-source: pulse-maintainer
Complete composed smoke validation reported 8.352 seconds against the unchanged eight-second synthetic aggregation limit. MagicMock retains 120,000 call records inside that timed region. Use a constant-space counting closure with the real parser, preserving the dataset, parse-count invariant, correctness assertions and time budget. Production telemetry code is unchanged.
Contract-Neutral: Test instrumentation only; no telemetry schema, aggregation, privacy boundary, runtime behaviour or time-limit changes.
Change-source: pulse-maintainer
The complete current smoke suite rejected the contributor template's deliberate current-process link and buffered browser log controls. Limit the link exception to the exact template and fragment, keep runtime links pinned, and check the complete display-only helper chain with adverse controls. No frontend, backend or safety guidance is changed.
Contract-Neutral: Test-only reconciliation of existing contribution and log-display controls; all product, installer and shipped documentation bytes and subsystem contracts are unchanged.
Change-source: pulse-maintainer
Reuse the existing private-response API helper for all role and user operations, preserving exact methods, bodies, privileges and targets. Document independent decisions and uncertain mutation readback; exercise copied commands against synthetic private success, denial, redirect and incomplete responses without exposing credentials or retrying.
Contract-Neutral: Documentation, mirrored guides and copied-recipe regression tests only; no runtime authentication, RBAC, API or frontend behaviour changes.
Change-source: pulse-maintainer
The current runner hides find and sort failures in process substitution. A partial passing list can omit a failing check and return success. Admit the complete pipeline first, preserve explicit subsets and full failure collection, and exercise the actual runner against both producer failures.
Contract-Neutral: Script test harness and connected regression controls only; no product runtime, installer, workflow selection, deadline or subsystem contract changes.
Change-source: pulse-maintainer
Preserve the exact reviewed Delivery commit and retained Linux proof. Product installers and safety contracts remain unchanged; actual containing Windows/macOS CI and protected publication remain outstanding.
Change-source: pulse-maintainer
The security guide implied all credentials and outputs were safe despite the local key, external password sources and private diagnostic records. Explain the active data path, matching-key recovery and review-before-sharing boundaries; keep existing administration recipes unchanged.
Contract-Neutral: Documentation and document regression checks only; no storage, encryption, authentication, logging or runtime contract delta.
Change-source: pulse-maintainer
Load the real service-status enum in the mocked Windows SCM controls and check lifecycle statements independently of checkout line endings. Keep Linux-only server installer fixtures on supported Bash and GNU metadata tools within their macOS test step, after native agent runtime testing. Partition the discovered installer inventory so the expanded reset matrix retains its own existing package deadline; preserve every check, failure exit and per-fixture deadline.
Change-source: pulse-maintainer
Contract-Neutral: Native CI fixture environment and inventory repair only; product installers, native lifecycle, safety contracts and fixture deadlines are unchanged.
The current protected proposal's Docs run raises ESRCH when a synthetic reader disappears after /proc is opened. Treat that disappearance like ENOENT while retaining failure for surviving readers, permission/I/O errors and malformed observations. Deterministic controls exercise the actual deadline readback alongside the unchanged real whole-group deadline tests.
Contract-Neutral: Synthetic deadline-reader readback and regression controls only; copied recipes, runtime, deadlines and cleanup requirements are unchanged.
Change-source: pulse-maintainer
Replace the obsolete new-PR submission recipe with optional tested-patch evidence in the existing report. Preserve replies, credit and disposition for previously requested contributions, and keep linked history and testing separate from public safety and release availability.
Contract-Neutral: Documentation and guidance regressions only; reflects the existing contribution policy without runtime, workflow or permission changes.
Change-source: pulse-maintainer
Preserve exact candidate 75de65b338 and its retained 86-suite offline proof. Resolve the overlap with d64b3c5d85 using the candidate parser unchanged; both final test files exactly match the reviewed candidate. No runtime or frontend source changes.
Change-source: pulse-maintainer
The complete current-source smoke suite exposed two stale fixtures: release objects omitted the required draft flag, and the proxy safety check assumed an emoji presentation selector absent from the shipped heading. Supply complete positive metadata while retaining draft/chart/preview and missing-maturity refusals; locate exactly one named Markdown section and discriminate missing or duplicate boundaries. Preserve all runtime, authentication, update and workflow gates.
Contract-Neutral: Test fixtures and section extraction only; product runtime, subsystem contracts, authentication boundaries and release-metadata admission are unchanged.
Change-source: pulse-maintainer
Combined exact-source documentation validation passed 344 checks but this assertion errored before inspecting the accepted header-trust section: its delimiter retained a removed Unicode variation selector. Match the current heading while preserving every role, authenticator, replacement and reachability assertion. Documentation and runtime source are unchanged.
Change-source: pulse-maintainer
Explain existing current, prior and unavailable disk labels, source precedence and a passive unfiltered inventory review without widening access or bypassing guest-read pauses. Reconcile Primary IP help with the integrated interface-associated collector while preserving unknown associations and virtual-only addresses.
Contract-Neutral: Documentation and source-bound help regressions only; collection, access, UI and safety contracts are unchanged.
Change-source: pulse-maintainer
Replace the obsolete Storage scope warning while preserving saved-rule, current-reading, SMART and passive private-reporting boundaries. Record the fresh inspected desktop and phone browser result for actual composed runtime bytes, including the page-model merge with current main.
Contract-Neutral: Documentation, document controls and fresh browser evidence only; no further subsystem contract or runtime delta.
Change-source: pulse-maintainer
Preserve the exact reviewed documentation candidate and its source checks. Explain saved alert policy separately from current display limits and native SMART risk.
Change-source: pulse-maintainer
Preserve the returned dependency setup repair and its original parents while qualifying it with current assigned main. This changes only disposable hosted browser acquisition; repositories, authentication, product/runtime bytes and test verdicts stay unchanged. Earlier pre-execution capacity failures remain unexecuted, not passing proof.
Change-source: pulse-maintainer
Retain exact Delivery 22e9408574 history, effective-mask safeguards, fixture collection repairs and own-parent final-content browser receipts. Installer and frontend VM evidence reviewed; no installed or published acceptance claimed.
Change-source: pulse-maintainer
Distinguish current and last-known heat, saved alert tiers, Off and native SMART risk. Name the Storage display scope limit and keep mismatch reporting passive and private.
Change-source: pulse-maintainer
Contract-Neutral: Documents existing disk policy and a current display limitation; no alert, collection or subsystem contract delta.
The complete installer package correctly stopped its old re-entry fixture at unavailable mask evidence. Admit exact unmasked fixture units and record the sole daemon-reload operation instead of depending on a real host manager. Exercise the actual CLI re-entry with both effective runtime masks as well; retain refusal and all assets unchanged.
Contract-Neutral: Confined test admission and CLI coverage only; no installer runtime or subsystem contract change.
Change-source: pulse-maintainer
Keep operators and triage from treating intentional response privacy as missing evidence. Explain HTTP verdicts, uncertain receipt after read failures, bounded Test response counts and the safe use of existing receiver records without Debug capture or a duplicate send. Preserve historical-log and export privacy limits in both shipped guides and intake guidance.
Change-source: pulse-maintainer
Contract-Neutral: Clarifies existing diagnostic confidentiality and receipt limits; no delivery, access or subsystem contract change.
Reconcile the returned timer-discovery repair: both exact units must have a successful bounded unmasked inventory before shared asset staging. Keep configured, runtime and off-destination persistent masks and all assets unchanged across every installer consumer, explicit setup and sandbox repair. Unknown or failed inventory stops replacement; enabled and disabled refresh remains consent-preserving.
Change-source: pulse-maintainer
Review the VM monitoring intent before suggesting effective read-permission checks. Preserve deliberately restricted tokens, separate a denied reading from guest health, and defer access changes and live checks during backup or guest incidents. Carry the same advice through shipped filesystem help and check current, retained and refreshed production views.
Contract-Neutral: Error-copy and mirrored-help clarification with regression and browser evidence only; collection, API, authorisation, identity, freshness and subsystem contracts are unchanged.
Change-source: pulse-maintainer
Match complete systemctl inventory rows by exact unit field with bounded reads, so updates and reinstalls reach the existing helper refresh. Preserve deliberate timer and updater masks instead of replacing their symlinks. Exercise all five installer consumers, unchanged settings and enablement, failure/timeout controls and actual fixture-root systemctl inventory.
Change-source: pulse-maintainer
Separate selected guest addresses from default-route and reachability evidence. Point API-only LXC users to existing interface/address context, without asking them to alter bridges, install agents or expose network identities.
Contract-Neutral: Documentation and static assertions only; no guest collection, identity, routing, API or frontend runtime contract changes.
Change-source: pulse-maintainer
The departmental-token report in Pulse #2756 distinguishes intended access denials from missing monitoring rights. Explain the existing per-connection selection limit, why display and alert filters do not stop reads, and why those denials do not justify broader grants or unhealthy-node conclusions. Preserve the same boundary in shipped help and a focused documentation assertion.
Contract-Neutral: Documentation-only clarification and its regression assertion; no runtime, API or subsystem contract delta.
Change-source: pulse-maintainer
Keep archive and sidecar downloads in owner-only staging, clean only owned leaves after handled failures and bootstrap exit, and preserve caller-provided inputs. Require the piped LXC installer signature before copying or execution instead of trusting PID-named files in shared tmp.
Exercise the actual download, prefetch and complete container bootstrap through confined offline doubles and real fixture SSH signatures. Preserve version, archive re-verification, staging-before-stop, service recovery, timer consent and removal boundaries; native acceptance remains separate.
Change-source: pulse-maintainer
Accept reviewed Delivery b155982e30 with retained confined menu, selector, signed-update and removal controls. Preserve current documentation frontier and exact candidate ancestry; no frontend source or infrastructure change.
Change-source: pulse-maintainer
Use the reviewed server-only selector in the existing-installation menu and bind automatic selection to available channel rows. A current selected release is a no-op; unavailable metadata or an automatic downgrade stops before mutations. Preview selection retains its channel, numeric beta/RC revisions compare correctly, and deliberate reinstall pins the actual current version.
Execute the actual menu through confined offline transport and stopped mutation boundaries. Preserve explicit version, interactive removal, signature and all-unit quiescence contracts; reconcile the inherited comment-only preview assertion with the real selector consumer.
Change-source: pulse-maintainer
System Logs pauses and clears only its browser display, while Support Bundle exports server logs and configuration. Explain those existing limits, warn about Debug's private guest details, and qualify warn-level suppression without changing runtime or recommending new probes. Keep the three shipped guides in sync and exercise their safety boundaries in the existing docs check.
Contract-Neutral: Documentation and focused guidance checks only; existing log controls, exports, monitoring, API and backup policy are unchanged.
Change-source: pulse-maintainer
Accept exact reviewed Delivery commit 56fec40f2d with retained offline selector, signed-recipe and resilience controls. No third-party helper repair or installed update is claimed.
Change-source: pulse-maintainer
Use one complete-metadata selector for installer URLs and server archives. Exclude chart and draft releases, reject unusable metadata and transport bodies, and preserve explicit pins, signed assets and downgrade refusal. Exercise the actual selectors with bounded offline controls and retain native installation as separate acceptance.
Change-source: pulse-maintainer
Contract-Neutral: Restore server-only discovery within existing stable/preview channels; installer authority, signatures, architecture admission, downgrade refusal and state contracts are unchanged.
Use the ownership-checked existing-installation procedure for LXC and systemd update help instead of unconditional /bin/update commands. Explain chart selection without asserting a latest-pointer cause, and preserve exact signed downloads, private editions and existing state.
Contract-Neutral: Documentation-only update guidance and regression checks; no installer, updater, API or frontend runtime behaviour changes.
Change-source: pulse-maintainer
Preserve the reviewed setup repair and its original parent while composing the advanced assigned main additively. Exact isolated acquisition, E2E and workflow-trust qualification still remains required; no runtime or frontend bytes change. No prior interrupted or unexecuted proof is reclassified.
Change-source: pulse-maintainer
The managed proof pack behind `npm run dev:verify` still named
tests/17-recovery-layout.spec.ts, which 1c38d79937 replaced with
tests/17-proxmox-backups-layout.spec.ts in July. The registered proof for
scripts/hot-dev-bg.sh pinned the stale path, so nothing flagged it.
The stale path did not fail the pack. Playwright treats each spec path as
a filter, so `test --list` with main's arguments reports 10 tests in 2
files and exits 0: the Proxmox backups layout guard had silently dropped
out of dev:verify.
The replacement spec reads the mock-mode estate, while dev:verify attaches
to the managed runtime in whatever mode it was left in. Under the managed
runtime it now skips with a `npm run mock:on` hint when mock mode is off,
instead of flipping modes in place: Monitor.SetMockMode clears the
runtime's active alerts and in-memory history on every switch. The Core
E2E harness runs mock mode and is unaffected.
test-hot-dev-bg.sh now pins the new spec and checks that every spec the
default verify command names exists under tests/integration; against
main's hot-dev-bg.sh that check fails on the retired path. The integration
README and its pin, the deployment-installability contract clause, and two
unused RECOVERY_PRODUCT_SURFACE_EXACT_FILES lists naming deleted files are
brought in line.
The retained PR2697 shard waited on apt indexes for the whole one-hour job without starting a test. Bound HTTP/HTTPS acquisition and retries, reject incomplete indexes, and cap only the browser setup phase at ten minutes in all three hosted journeys. Preserve the existing repositories, authentication, browser selections and test/verdict gates.
Contract-Neutral: Hosted CI dependency acquisition only; no product runtime, installer, release contract or browser-source change.
Change-source: pulse-maintainer
Distinguish global cancellation from quiet-hours holds, queued policy skips from provider receipt, and settings changes from recall or credential revocation. Add connected sender and persistent-queue controls, and run the existing notification guidance suites in docs-only CI.
Contract-Neutral: Documentation, mirrors, tests and documentation-only CI describe existing notification behaviour; no runtime, API, permission, schema, dependency or user-visible feature contract changes.
Change-source: pulse-maintainer
Describe the integrated collector gates, explicit opt-out readback, legacy mail defaults and next-poll limits without treating dataset switches as a connection pause. Retain the verified v6.5.0 warning and incomplete-reading/alert safeguards in the existing guide and shipped mirror.
Contract-Neutral: Documentation and source-bound guidance tests only; no runtime, API, schema, permission or navigation change.
Change-source: pulse-maintainer
Preserve the exact reviewed candidate. Combine PBS and audit safety selections without dropping prior agent-profile coverage, matching both trigger lists, command and adapter. Pro remains unchanged; source help is not installed delivery acceptance.
Change-source: pulse-maintainer
pulse-triage[bot]