===== R-118 RED (guard removed: if s.devicePresent(d.MountPath) -> if true) — 2026-10-05T18:53:22+02:00
$ go test ./internal/localapi/ -run TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity -v -count=1
=== RUN   TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity
=== RUN   TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/absent
    disks_device_presence_test.go:212: absent drive advertises total=33697107968 used=4727169024 frac=0.140 — that is the filesystem UNDER the bare mountpoint, not the drive (R-118)
=== RUN   TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/present
--- FAIL: TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity (0.00s)
    --- FAIL: TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/absent (0.00s)
    --- PASS: TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/present (0.00s)
FAIL
FAIL	gitea.dooplex.hu/admin/felhom-agent/internal/localapi	0.010s
FAIL
rc=1
===== R-118 GREEN (fix restored)
$ go test ./internal/localapi/ -run TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity -v -count=1
=== RUN   TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity
=== RUN   TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/absent
=== RUN   TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/present
--- PASS: TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity (0.00s)
    --- PASS: TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/absent (0.00s)
    --- PASS: TestDisks_UnionPath_AbsentDeviceReportsNoRootCapacity/present (0.00s)
PASS
ok  	gitea.dooplex.hu/admin/felhom-agent/internal/localapi	0.009s
rc=0

===== R-269 RED (tokenstore.go reverted to HEAD: reload-on-MISS-only Lookup) — 2026-10-05T18:53:55+02:00
$ go test ./internal/localapi/ -run TestTokenStore_RotatedOutTokenRejectedFirst -v -count=1
=== RUN   TestTokenStore_RotatedOutTokenRejectedFirst
    tokenstore_test.go:247: rotated-out token still authorizes vmid 130 on its first presentation after rotation — Mint's 'any previous token for this guest is revoked' is false across processes (R-269)
--- FAIL: TestTokenStore_RotatedOutTokenRejectedFirst (0.00s)
FAIL
FAIL	gitea.dooplex.hu/admin/felhom-agent/internal/localapi	0.008s
FAIL
rc=1
===== R-269 GREEN (fix restored)
$ go test ./internal/localapi/ -run TestTokenStore_RotatedOutTokenRejectedFirst -v -count=1
=== RUN   TestTokenStore_RotatedOutTokenRejectedFirst
--- PASS: TestTokenStore_RotatedOutTokenRejectedFirst (0.00s)
PASS
ok  	gitea.dooplex.hu/admin/felhom-agent/internal/localapi	0.010s
rc=0

===== R-317 RED (probe reverted to the pre-fix dnsmasq-base binary path usr/sbin/dnsmasq) — 2026-10-05T18:54:37+02:00
$ go test ./internal/lanresolver/ -run TestEnsureDnsmasq_BinaryWithoutUnitInstalls -v -count=1
=== RUN   TestEnsureDnsmasq_BinaryWithoutUnitInstalls
    ensure_dnsmasq_test.go:80: install was skipped on a dnsmasq-base-only host (binary present, unit absent) — the enable that follows targets a missing unit (R-317). calls: ["/usr/local/sbin/felhom-priv-apply dnsmasq /tmp/felhom-resolver-3076255408.conf felhom-resolver-base.conf" "systemctl enable --now dnsmasq" "systemctl restart dnsmasq"]
--- FAIL: TestEnsureDnsmasq_BinaryWithoutUnitInstalls (0.00s)
FAIL
FAIL	gitea.dooplex.hu/admin/felhom-agent/internal/lanresolver	0.006s
FAIL
rc=1
===== R-317 GREEN (fix restored)
$ go test ./internal/lanresolver/ -run TestEnsureDnsmasq_BinaryWithoutUnitInstalls -v -count=1
=== RUN   TestEnsureDnsmasq_BinaryWithoutUnitInstalls
--- PASS: TestEnsureDnsmasq_BinaryWithoutUnitInstalls (0.00s)
PASS
ok  	gitea.dooplex.hu/admin/felhom-agent/internal/lanresolver	0.004s
rc=0
