## 2026-10-01T19:54:56Z golden 0.286.1 — bake in the drill VM (RUNBOOK-manual-build §4.0/§4.1)
  reverted to virgin (this also proves no qemu holds the qcow2)
  cold boot started
  ssh up: pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve)
system          debian-13-standard_13.6-1_amd64.tar.zst
  template (current point release, listed not assumed): debian-13-standard_13.6-1_amd64.tar.zst
  template downloaded
  script (v3.0.0) + token landed, non-empty, executable
  bake launched 2026-10-01T19:55:45Z
  token leak check on the unit (needle non-empty): 0
  unit state: inactive at 2026-10-01T20:01:50Z
  log copied off the machine FIRST: 323 lines
  markers: overlay2=1 mountpoints=2 upload=1 FATAL=0 excluding=0
      docker OK (overlay2; data-root /var/lib/docker)
    INFO: including mount point rootfs ('/') in backup
    INFO: including mount point mp0 ('/var/lib/felhom') in backup
    [golden]   upload OK (HTTP 201)
    GOLDEN_VERSION=0.286.1
    GOLDEN_SHA256=1dec051d6b896e987ede1bc99f6ba45d7a292538c74d3cd8ccb844641a666a89
  token-leak grep on the saved log: 0
  positive control (token appended to a throwaway copy): 1
  REGISTRY CHECK (the outcome, not the attempt): golden 0.286.1 -> http=206
  secrets shredded (3 expected absent): 3
  pct list lines after destroy: 0
  qemu processes: 0
  disk reverted to virgin
## bake finished 2026-10-01T20:02:18Z
