## 2026-09-30T09:31:57Z golden 0.283.1 — bake in the drill VM (RUNBOOK-manual-build §4.0/§4.1)
  reverted to virgin (this also proves no qemu holds the qcow2)
  cold boot started
  ssh up: pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve)
system          debian-13-standard_13.6-1_amd64.tar.zst
system          debian-13-standard_13.6-1_arm64.tar.zst
  template (current point release, listed not assumed): debian-13-standard_13.6-1_amd64.tar.zst
  template downloaded
  script (v3.0.0) + token landed, non-empty, executable
  bake launched 2026-09-30T09:32:44Z  (GITEA_USER=admin)
  token leak check on the unit (needle proven non-empty, so the grep cannot match everything): 0
  unit state: inactive at 2026-09-30T09:38:08Z
  log copied off the machine FIRST: 326 lines
  markers: overlay2=1 mountpoints=2 upload=1 FATAL=0 excluding=0
      docker OK (overlay2; data-root /var/lib/docker)
    INFO: including mount point rootfs ('/') in backup
    INFO: including mount point mp0 ('/var/lib/felhom') in backup
    [golden]   upload OK (HTTP 201)
GOLDEN_VERSION=0.283.1
GOLDEN_SHA256=02c8b3361b10345cc7a6fc3bf4807467347aa58b7597971d00315f040f889bd0
  token-leak grep on the saved log: 0
  positive control (token appended to a throwaway copy): 1
  REGISTRY CHECK (the outcome, not the attempt): golden 0.283.1 -> http=206
  secrets shredded (3 expected absent): 3
  pct list lines after destroy: 0
  qemu processes: 0
  registry=206; guest destroyed, qemu exited, disk reverted to virgin
  PUBLISHED
## bake finished 2026-09-30T09:38:34Z
