OK    valid RELEASE resolves (exit 0)
OK    invalid RELEASE exits 1 (exit 1)
OK    missing RELEASE exits 1 (exit 1)
OK    valid RELEASE leaves image tag consistent with version
OK    status safe on empty state (exit 0)
OK    status created no pointer
OK    fault-injected activation refuses (exit 1)
OK    refused activation wrote no pointer
OK    refusal logged exactly once with valid fields
OK    healthy activation succeeds (exit 0)
OK    pointer written with valid fields
OK    repeat activation succeeds (log grows) (exit 0)
OK    log is append-only across activations
OK    rollback without previous refuses (exit 1)

selftest: 14 passed, 0 failed