self-testing the prober (both directions)…
  prober flags the R-156 signature and clears a correct template — trustworthy
bentopdf             UNDETERMINED  nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
claper               CLEAN         claper: this container's mounts are all empty while it created entries in ['/app/priv', '/app/priv/static'] — benign when a sibling container holds th
docmost              CLEAN         docmost: this container's mounts are all empty while it created entries in ['/app/apps/client/dist'] — benign when a sibling container holds the state
glance               UNDETERMINED  glance: not running (status=restarting exit=1 restarts=None)
gramps-web           BROKEN        gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite']); NOTHING this app wrote landed in ANY folder the templ
immich               CLEAN         immich-machine-learning: this container's mounts are all empty while it created entries in ['/', '/root', '/root/.config'] — benign when a sibling con
papra                BROKEN        papra: mount /app/data is NOT writable by the app's own uid=999 gid=999; papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g
plant-it             UNDETERMINED  no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling 
 Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/pla
privatebin           UNDETERMINED  nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
recipe-importer      UNDETERMINED  NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/'].
sparkyfitness        CLEAN         sparkyfitness-server: this container's mounts are all empty while it created entries in ['/app/SparkyFitnessServer'] — benign when a sibling container
uptime-kuma          UNDETERMINED  nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
wanderer             UNDETERMINED  wanderer: unhealthy; wanderer: this container's mounts are all empty while it created entries in ['/root'] — benign when a sibling container holds the
wishlist             BROKEN        wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans
zipline              CLEAN         zipline: this container's mounts are all empty while it created entries in ['/zipline'] — benign when a sibling container holds the state, worth a loo

BROKEN — the app's data does NOT land where the template preserves it:
  gramps-web
      gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite'])
      NOTHING this app wrote landed in ANY folder the template preserves: all 2 mount(s) across 1 container(s) are empty, yet entries were created in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache', '/root']. Needs adjudication.
      gramps-web: this container's mounts are all empty while it created entries in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache'] — benign when a sibling container holds the state, worth a look when none does
      gramps-web: declared volume /app/data is EMPTY
      gramps-web: declared volume /app/media is EMPTY
  papra
      papra: mount /app/data is NOT writable by the app's own uid=999 gid=999
      papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g. ['db.sqlite'])
      NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/app']. Needs adjudication.
      papra: this container's mounts are all empty while it created entries in ['/app'] — benign when a sibling container holds the state, worth a look when none does
      papra: declared volume /app/data is EMPTY
  wishlist
      wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans it
      wishlist: declared volume /data is EMPTY

UNDETERMINED — NOT a pass. The question was not answered for these:
  bentopdf: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN
  glance: glance: not running (status=restarting exit=1 restarts=None)
  plant-it: no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling 
 Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/plant-it, repository does not exist or may require 'd
  privatebin: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN; privatebin: declared volum
  recipe-importer: NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/']. Needs adjudication.; recipe-importer: this contai
  uptime-kuma: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN; uptime-kuma: declared volu
  wanderer: wanderer: unhealthy; wanderer: this container's mounts are all empty while it created entries in ['/root'] — benign when a sibling container holds the state, worth a look when none does; wanderer: dec

5 clean · 3 broken · 7 undetermined (of 15 in scope)
volume-persistence gate REFUSED