Pipeline 2561 failed 5 tests that pass on a dev host, two环境 classes:
1. Un-seamed success-path start/apply tests answered the HOST's broker
state: this dev machine has a live lease-broker socket at the default
XDG path, so the real probe (correctly, since #1297 F3) returned true
locally; CI has no broker, so the new start re-check refused
broker-absent. Fixed by injecting a deterministic present-broker seam
in exactly the tests whose property is ordering/targeting (reconciler
start-ordering, two apply-running tests, and the CLI command spec's
shared helper). Refusal and real-probe tests keep explicit false
seams / explicit socket paths.
2. The placeUnitFile unlink-failure spec relies on EACCES from a 0500
directory; CI steps run as root (apk add succeeds unprivileged-free)
and CAP_DAC_OVERRIDE makes unlink succeed, so the abort path cannot
be triggered there. Now it.skip under uid 0 with the reason stated;
exercised on every non-root dev host.
The remaining unseamed apply tests use the stopped-agent path (no broker
interaction) and passed CI unchanged — verified against the 2561 log,
not assumed.