night 2026-09-24: record the test-password slip; runner state out of the evidence tree

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-24 14:55:35 +02:00
parent f2234c0fdd
commit e924a17632
3 changed files with 8 additions and 1 deletions
@@ -13,6 +13,8 @@ Full record: `documentation/audits/DRILL-night-2026-09-24.md`; step log `documen
 - **Interventions: 1** — an agent restart on demo-hp so its own Recover removed a leaked restore-test guest that had
  filled the pool. The session's permission check refused a direct `pct destroy` and a later read of vzdump task
  logs; both said so in the findings doc.
+- **Slip:** `4502af6` committed three drill test-account passwords (apps since removed, accounts gone);
+  deleted + ignored in `f2234c0`, history not rewritten.
 - `unproven.py --summary`: unchanged — 35 of 55 not walked.
 - Teardown, three layers: machine (9202 back to live catalog + saved config, tonight's apps removed through the
  product, kept drive folders removed by name, backup window 02:30), host (demo-hp `pct list` 9201 + 9202, no