TAP version 13
# Subtest: container admission publishes its generated name and root/runtime labels before dispatch
ok 1 - container admission publishes its generated name and root/runtime labels before dispatch
  ---
  duration_ms: 9.883733
  type: 'test'
  ...
# Subtest: container sweep sends TERM then KILL only after verifying exact id and both labels
ok 2 - container sweep sends TERM then KILL only after verifying exact id and both labels
  ---
  duration_ms: 66.167157
  type: 'test'
  ...
# Subtest: foreign labels and a replaced container id stay unknown and are never signalled
ok 3 - foreign labels and a replaced container id stay unknown and are never signalled
  ---
  duration_ms: 5.105671
  type: 'test'
  ...
# Subtest: an unverified missing container remains unknown rather than claiming a pending start ended
ok 4 - an unverified missing container remains unknown rather than claiming a pending start ended
  ---
  duration_ms: 15.538468
  type: 'test'
  ...
# Subtest: a removed --rm container is settled only by its trusted owner completion receipt
ok 5 - a removed --rm container is settled only by its trusted owner completion receipt
  ---
  duration_ms: 28.897791
  type: 'test'
  ...
# Subtest: after signalling a verified container, successful empty Docker listing proves --rm removed that id
ok 6 - after signalling a verified container, successful empty Docker listing proves --rm removed that id
  ---
  duration_ms: 24.215826
  type: 'test'
  ...
# Subtest: halt publishes before awaiting stops, resume refuses pending, and only clear permits new work
ok 7 - halt publishes before awaiting stops, resume refuses pending, and only clear permits new work
  ---
  duration_ms: 161.569582
  type: 'test'
  ...
# Subtest: a new coordinator replays a persisted halt and an unresolved start keeps clear refused
ok 8 - a new coordinator replays a persisted halt and an unresolved start keeps clear refused
  ---
  duration_ms: 1102.680874
  type: 'test'
  ...
# Subtest: a new halt generation never inherits a previous quiescent status before its sweep
ok 9 - a new halt generation never inherits a previous quiescent status before its sweep
  ---
  duration_ms: 4.450121
  type: 'test'
  ...
# Subtest: halt aborts an active local request and prevents a subsequent effect after halt/resume
ok 10 - halt aborts an active local request and prevents a subsequent effect after halt/resume
  ---
  duration_ms: 35.831508
  type: 'test'
  ...
# Subtest: processing scopes isolate roots and cancel only the registered child group
ok 11 - processing scopes isolate roots and cancel only the registered child group
  ---
  duration_ms: 59.946603
  type: 'test'
  ...
# Subtest: halted scopes never invoke their body and unscoped human work has no processing context
ok 12 - halted scopes never invoke their body and unscoped human work has no processing context
  ---
  duration_ms: 3.067699
  type: 'test'
  ...
# Subtest: host git is stopped promptly by the active scope rather than waiting for its long deadline
ok 13 - host git is stopped promptly by the active scope rather than waiting for its long deadline
  ---
  duration_ms: 151.711241
  type: 'test'
  ...
# Subtest: a child leader exiting does not erase an unverified surviving group receipt
ok 14 - a child leader exiting does not erase an unverified surviving group receipt
  ---
  duration_ms: 117.914283
  type: 'test'
  ...
# Subtest: the actual nested read-only control mount refuses unlink, replacement and parent removal
ok 15 - the actual nested read-only control mount refuses unlink, replacement and parent removal
  ---
  duration_ms: 14.941666
  type: 'test'
  ...
# Subtest: the image entrypoint refuses halted and stale generations using the shared reader
ok 16 - the image entrypoint refuses halted and stale generations using the shared reader
  ---
  duration_ms: 89.020485
  type: 'test'
  ...
# Subtest: halt terminates a tracked stand-in and leaves honest write-once stop evidence
ok 17 - halt terminates a tracked stand-in and leaves honest write-once stop evidence
  ---
  duration_ms: 95.55672
  type: 'test'
  ...
# Subtest: a TERM-resistant workload is killed after the bounded wait
ok 18 - a TERM-resistant workload is killed after the bounded wait
  ---
  duration_ms: 146.00258
  type: 'test'
  ...
# Subtest: wrong start ticks or boot identity cannot signal a live replacement
ok 19 - wrong start ticks or boot identity cannot signal a live replacement
  ---
  duration_ms: 65.844444
  type: 'test'
  ...
# Subtest: a pending start cannot be reported quiescent and a second root is never signalled
ok 20 - a pending start cannot be reported quiescent and a second root is never signalled
  ---
  duration_ms: 93.749051
  type: 'test'
  ...
# Subtest: escalation still kills the tracked group after its leader exits
ok 21 - escalation still kills the tracked group after its leader exits
  ---
  duration_ms: 192.463864
  type: 'test'
  ...
# Subtest: session TERM targets its verified runner before forcing the outer namespace
ok 22 - session TERM targets its verified runner before forcing the outer namespace
  ---
  duration_ms: 100.923976
  type: 'test'
  ...
# Subtest: new runtime and stop directories sync their containing directories
ok 23 - new runtime and stop directories sync their containing directories
  ---
  duration_ms: 42.560646
  type: 'test'
  ...
# Subtest: a vanished group leader with unverified surviving members stays unknown, never quiescent
ok 24 - a vanished group leader with unverified surviving members stays unknown, never quiescent
  ---
  duration_ms: 130.848284
  type: 'test'
  ...
# Subtest: persisted member identity anchors a group after the leader exited before the sweep
ok 25 - persisted member identity anchors a group after the leader exited before the sweep
  ---
  duration_ms: 124.574935
  type: 'test'
  ...
# Subtest: an unconfirmed secondary brake does not leave a verified workload running or claim success
ok 26 - an unconfirmed secondary brake does not leave a verified workload running or claim success
  ---
  duration_ms: 75.057063
  type: 'test'
  ...
# Subtest: halt persists across readers and resume needs the current generation
ok 27 - halt persists across readers and resume needs the current generation
  ---
  duration_ms: 9.437871
  type: 'test'
  ...
# Subtest: first initialization is explicit; missing state after control exists fails closed and halt repairs it
ok 28 - first initialization is explicit; missing state after control exists fails closed and halt repairs it
  ---
  duration_ms: 5.039685
  type: 'test'
  ...
# Subtest: refuses invalid JSON instead of enabling work
ok 29 - refuses invalid JSON instead of enabling work
  ---
  duration_ms: 1.867281
  type: 'test'
  ...
# Subtest: refuses unknown keys instead of enabling work
ok 30 - refuses unknown keys instead of enabling work
  ---
  duration_ms: 2.65956
  type: 'test'
  ...
# Subtest: refuses bad timestamp instead of enabling work
ok 31 - refuses bad timestamp instead of enabling work
  ---
  duration_ms: 2.144084
  type: 'test'
  ...
# Subtest: refuses nonboolean state instead of enabling work
ok 32 - refuses nonboolean state instead of enabling work
  ---
  duration_ms: 2.039112
  type: 'test'
  ...
# Subtest: refuses bad generation instead of enabling work
ok 33 - refuses bad generation instead of enabling work
  ---
  duration_ms: 2.085806
  type: 'test'
  ...
# Subtest: refuses loose mode instead of enabling work
ok 34 - refuses loose mode instead of enabling work
  ---
  duration_ms: 2.34307
  type: 'test'
  ...
# Subtest: refuses oversized file instead of enabling work
ok 35 - refuses oversized file instead of enabling work
  ---
  duration_ms: 2.916273
  type: 'test'
  ...
# Subtest: a symlink leaf never follows its target; human halt replaces only the leaf
ok 36 - a symlink leaf never follows its target; human halt replaces only the leaf
  ---
  duration_ms: 4.530858
  type: 'test'
  ...
# Subtest: unsafe parent and interrupted initialization never get repaired as off
ok 37 - unsafe parent and interrupted initialization never get repaired as off
  ---
  duration_ms: 0.385291
  type: 'test'
  ...
# Subtest: repeated halt is a no-op and a different root keeps running
ok 38 - repeated halt is a no-op and a different root keeps running
  ---
  duration_ms: 7.00566
  type: 'test'
  ...
# Subtest: transition rejects nonstring identity before publishing state
ok 39 - transition rejects nonstring identity before publishing state
  ---
  duration_ms: 3.121939
  type: 'test'
  ...
# Subtest: bootstrap syncs the containing root as well as the state and control directory
ok 40 - bootstrap syncs the containing root as well as the state and control directory
  ---
  duration_ms: 36.144072
  type: 'test'
  ...
# Subtest: state ownership and bounded read guards refuse before trusting a document
ok 41 - state ownership and bounded read guards refuse before trusting a document
  ---
  duration_ms: 101.892703
  type: 'test'
  ...
# Subtest: canonical root aliases address one switch and never create independent control state
ok 42 - canonical root aliases address one switch and never create independent control state
  ---
  duration_ms: 4.179236
  type: 'test'
  ...
# Subtest: unbound run stops by verified registry identity, fixed 5s grace and 2s observe policy
ok 43 - unbound run stops by verified registry identity, fixed 5s grace and 2s observe policy
  ---
  duration_ms: 38.851257
  type: 'test'
  ...
# Subtest: same run joins the identical promise and completed repeats preserve owner and send no signals
ok 44 - same run joins the identical promise and completed repeats preserve owner and send no signals
  ---
  duration_ms: 27.976805
  type: 'test'
  ...
# Subtest: identity changed before TERM or between TERM and KILL refuses the changed signal
ok 45 - identity changed before TERM or between TERM and KILL refuses the changed signal
  ---
  duration_ms: 15.642865
  type: 'test'
  ...
# Subtest: failed signal delivery observes alive, records no invented signals and never restarts escalation
ok 46 - failed signal delivery observes alive, records no invented signals and never restarts escalation
  ---
  duration_ms: 32.602087
  type: 'test'
  ...
# Subtest: a sleep past the stop deadline still observes an alive run after both signals
ok 47 - a sleep past the stop deadline still observes an alive run after both signals
  ---
  duration_ms: 31.045314
  type: 'test'
  ...
# Subtest: missing run and another business never borrow a pid or signal
ok 48 - missing run and another business never borrow a pid or signal
  ---
  duration_ms: 10.113655
  type: 'test'
  ...
# Subtest: halt joins an in-progress fire without another TERM or deadline and links its first receipt
ok 49 - halt joins an in-progress fire without another TERM or deadline and links its first receipt
  ---
  duration_ms: 30.224351
  type: 'test'
  ...
# Subtest: a separate host joins durable first ownership without duplicate signals
ok 50 - a separate host joins durable first ownership without duplicate signals
  ---
  duration_ms: 99.128156
  type: 'test'
  ...
# Subtest: corrupt and symlinked final receipts refuse as unknown rather than signalling again
ok 51 - corrupt and symlinked final receipts refuse as unknown rather than signalling again
  ---
  duration_ms: 22.649789
  type: 'test'
  ...
# Subtest: a later exit gets separate halt evidence while the original alive result stays immutable
ok 52 - a later exit gets separate halt evidence while the original alive result stays immutable
  ---
  duration_ms: 55.85559
  type: 'test'
  ...
# Subtest: root aliases join but a different root never shares the run stop
ok 53 - root aliases join but a different root never shares the run stop
  ---
  duration_ms: 45.6493
  type: 'test'
  ...
# Subtest: a changed runtime record cannot replace the original stop identity after TERM
ok 54 - a changed runtime record cannot replace the original stop identity after TERM
  ---
  duration_ms: 8.507771
  type: 'test'
  ...
# Subtest: identity is rechecked at actual signal delivery, not just at the loop observation
ok 55 - identity is rechecked at actual signal delivery, not just at the loop observation
  ---
  duration_ms: 6.500324
  type: 'test'
  ...
# Subtest: task halt keeps the true Docker exit status, writes kill-switch once and leaves snapshots unchanged
ok 56 - task halt keeps the true Docker exit status, writes kill-switch once and leaves snapshots unchanged
  ---
  duration_ms: 201.141886
  type: 'test'
  ...
# Subtest: halt refuses direct task launch before Docker or a run record; clear allows a fresh normal result
ok 57 - halt refuses direct task launch before Docker or a run record; clear allows a fresh normal result
  ---
  duration_ms: 167.652567
  type: 'test'
  ...
# Subtest: halt refuses hello.sh before Docker, credentials or release alignment
ok 58 - halt refuses hello.sh before Docker, credentials or release alignment
  ---
  duration_ms: 122.654442
  type: 'test'
  ...
# Subtest: halt refuses verify.sh before Docker, credentials or release alignment
ok 59 - halt refuses verify.sh before Docker, credentials or release alignment
  ---
  duration_ms: 122.064969
  type: 'test'
  ...
# Subtest: halt refuses agent.sh before Docker, credentials or release alignment
ok 60 - halt refuses agent.sh before Docker, credentials or release alignment
  ---
  duration_ms: 120.632718
  type: 'test'
  ...
# Subtest: a nonzero Docker client exit retains its unresolved runtime receipt (task)
ok 61 - a nonzero Docker client exit retains its unresolved runtime receipt (task)
  ---
  duration_ms: 93.3117
  type: 'test'
  ...
# Subtest: a nonzero Docker client exit retains its unresolved runtime receipt (container-cli)
ok 62 - a nonzero Docker client exit retains its unresolved runtime receipt (container-cli)
  ---
  duration_ms: 97.234461
  type: 'test'
  ...
1..62
# tests 62
# suites 0
# pass 62
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 1323.026518