## 2026-09-29T17:57:22Z golden 0.282.0 — bake in the drill VM (RUNBOOK-manual-build §4.0/§4.1)
  reverted to virgin (this also proves no qemu holds the qcow2)
  cold boot started
  ssh up: pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve)
system          debian-13-standard_13.6-1_amd64.tar.zst
system          debian-13-standard_13.6-1_arm64.tar.zst
  template (current point release, listed not assumed): debian-13-standard_13.6-1_amd64.tar.zst
  template downloaded
  script (v3.0.0) + token landed, non-empty, executable
  bake launched 2026-09-29T17:58:13Z  (GITEA_USER=admin)
  token leak check on the unit (needle proven non-empty, so the grep cannot match everything): 0
  unit state: inactive at 2026-09-29T18:03:57Z
  log copied off the machine FIRST: 324 lines
  markers: overlay2=1 mountpoints=2 upload=1 FATAL=0 excluding=0
      docker OK (overlay2; data-root /var/lib/docker)
    INFO: including mount point rootfs ('/') in backup
    INFO: including mount point mp0 ('/var/lib/felhom') in backup
    [golden]   upload OK (HTTP 201)
GOLDEN_VERSION=0.282.0
GOLDEN_SHA256=a3436b5fcd4870a73eba893e7d48223969a5ea2014dbf4472140b9d61f776347
  token-leak grep on the saved log: 0
  positive control (token appended to a throwaway copy): 1
  REGISTRY CHECK (the outcome, not the attempt): golden 0.282.0 -> http=206
  secrets shredded (3 expected absent): 3
  pct list lines after destroy: 0
  qemu processes: 0
  registry=206; guest destroyed, qemu exited, disk reverted to virgin
  PUBLISHED
## bake finished 2026-09-29T18:04:24Z
