Stage-5 grounding audit: lens 4 (gate integrity) + privileged creds re-run
LENS 4 broke seven gates with CONSTRUCTED, MEASURED fixtures. Independently
re-verified by this session before landing:
- repo-lint reports "PASS (0 fail, 0 warn)" over ZERO files when given a
  one-character typo of either its documented flag or the repo path. This is
  the gate whose 0-fail every GA-R6 stage-close commit cites; the verdict is
  not evidence the repo was read. Reproduced here exactly.
- provider-bundle-check PASSES on decorative HA: `grep -rn cluster_count
  scripts/ tests/` returns NOTHING, while the overlay carries 20 such lines.
  A 3->1 rewrite of every cluster_count yields a byte-identical PASS.
- preflight's aggregator ignores every sub-gate exit code that is not 1 or 2,
  so a gate that crashes (127) leaves "PREFLIGHT: PASS -- clear to deploy".
- P3 verified ZERO of 33 charm-channel pins TODAY because juju is not on the
  host's PATH, and a missing BINARY is folded into the same WARN as an
  unreachable charmhub. This CORRECTS this session's own earlier capture,
  which waved the 33-warn line through as "expected" -- the count was
  expected, the cause was not.
- G17's named check cannot fail: curl -sI exits 0 on 404/500 and the dc0 URL
  is an autoindex root that answers 200 with nothing behind it.
Lens 4 also returned an 11-item COULD-NOT-BREAK list; notably the 2026-07-27
dc-mirror last-sync fix HOLDS under all five status arms, and creds-matrix's
tier-2 probe states could not be made to turn "could not look" into green.

CREDS: privileged sweep re-run (operator-authorized). Exit 1, still exactly
the same 7 findings -- no drift in a day. All three root-owned locations read
via sudo -n escalation, metadata only; ZERO E3 findings. Recorded as a
RE-CONFIRMATION of the 2026-07-26 privileged run, not a newly-closed item.

Six of seven lenses are now in docs/audit/stage5-committee-raw-20260727.md.
Lens 5 (ordered preconditions) is still running after an API-error relaunch.

Revert: git revert this commit; all files are audit artifacts plus additive
CURRENT-STATE paragraphs.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HvCyrwvYTTcDYnRErfMsNf
1 parent 6d511e8 commit fb8f6bcfcc97600c67c5c5c782b1879d377d1329
@JANeumatrix JANeumatrix authored 1 hour ago
Showing 4 changed files
View
docs/CURRENT-STATE.md
View
docs/audit/stage5-committee-raw-20260727.md
View
docs/audit/stage5-creds-privileged-20260727.txt 0 → 100644
View
docs/audit/stage5-live-measurement-20260727.txt