CHAOS NIGHT round 3: interim reading, and a mislabel caught before it stood

Five minutes into the 96%-full disk: the apps keep serving (26 containers), the
pool is untouched at 39.69%, the filesystem is writable, and nothing has been
raised - the newest event is still controller_started from 21:28.

I nearly filed this as the "end of window" check. The fill began 21:29:49Z, so
the ten-minute hold runs to ~21:39:49Z and this reading was taken at 21:34:23Z,
halfway through. It is recorded as INTERIM and the end-of-window check stays
owed, because an alarm arriving late is a different finding from one that never
arrives - and a mid-window reading standing in for the final one would have
quietly turned "not yet" into "never".

What it already establishes: twelve apps keep running and serving with the
system disk at 96% full, and after five minutes nobody has been told anything.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/audits/evidence-chaos-night-2026-09-17/round-3.txt

@@ -54,3 +54,18 @@ monitor — but it is the honest answer to „would the household be told?" for
 
 Re-checked at the END of the ten-minute window before this is called final (below), because an alarm
 arriving late is a different finding from an alarm never arriving.
+
+## INTERIM reading at 21:34:23Z — five minutes into the full disk (NOT the end-of-window check)
+I nearly mislabelled this one. The fill began at **21:29:49Z**, so the ten-minute hold runs to
+**~21:39:49Z**; at 21:34:23Z the window was only half over. Recorded as interim, and the
+end-of-window check remains owed rather than quietly satisfied by this reading.
+
+    guest /        32G, **29G used, 1.5G free, 96%**   — still full, fill file still present (28G)
+    thin pool      **39.69%**                          — unchanged, as expected for fallocate
+    writable?      **WRITE OK**
+    containers     **26 running**
+    alarms         newest event still `controller_started` 21:28 — **nothing new fired**
+
+**What that already establishes, independent of how the window ends:** the household's twelve apps
+keep running and serving with the system disk at 96 % full, and after five minutes nobody has been
+told anything. The apps do not fall over; the silence is the finding.