R-528 red-proof red-go-runlayer: the copy of oom_check removed from internal/osupdate/leg.go
mutation: `rep.OOMCheck = rawOrNil(wr.OOMCheck)` -> `_ = rawOrNil`
$ go test ./internal/osupdate/ -run ^TestDocker_OOMCheckReachesTheHubUnchanged$ -count=1
rc=1
2026/10/06 19:13:37 INFO osupdate: START run=20261004T040000Z layer=guest vmid=9201 ring=0 trigger=night enabled=true release=ring0-20261004T040000Z
2026/10/06 19:13:37 INFO osupdate: wrapper line="os-apply: DONE rc=0"
2026/10/06 19:13:37 INFO osupdate: DONE run=20261004T040000Z layer=guest vmid=9201 ring=0 trigger=night outcome=nothing healthy=true reason="" upgraded=0 pending=0 not_covered=0 restart_needed=0 reboot_needed=false wrapper_seconds=0
2026/10/06 19:13:37 INFO osupdate: START run=20261004T040000Z layer=host vmid=9201 ring=0 trigger=night enabled=true release=ring0-20261004T040000Z
2026/10/06 19:13:37 INFO osupdate: wrapper line="os-apply: DONE rc=0"
2026/10/06 19:13:37 INFO osupdate: DONE run=20261004T040000Z layer=host vmid=9201 ring=0 trigger=night outcome=nothing healthy=true reason="" upgraded=0 pending=0 not_covered=0 restart_needed=0 reboot_needed=false wrapper_seconds=0
2026/10/06 19:13:37 INFO osupdate: wrapper line="os-apply: DONE rc=0"
2026/10/06 19:13:37 INFO osupdate: live-restore vmid=9201 result=null
2026/10/06 19:13:37 INFO osupdate: START run=20261004T040000Z layer=docker vmid=9201 ring=0 trigger=night enabled=true release=ring0-20261004T040000Z
2026/10/06 19:13:37 INFO osupdate: wrapper line="os-apply: DONE rc=0"
2026/10/06 19:13:37 INFO osupdate: DONE run=20261004T040000Z layer=docker vmid=9201 ring=0 trigger=night outcome=applied healthy=true reason="" upgraded=1 pending=0 not_covered=0 restart_needed=0 reboot_needed=false wrapper_seconds=0
--- FAIL: TestDocker_OOMCheckReachesTheHubUnchanged (0.00s)
    leg_test.go:540: no oom_check in the docker report: {"run_id":"20261004T040000Z","layer":"docker","trigger":"night","mode":"apply","ring":0,"release_id":"ring0-20261004T040000Z","outcome":"applied","healthy":true,"vmid":9201,"upgraded":[{"name":"docker-ce","version":"5:29.8.2-1~debian.13~trixie","origin":""}],"docker_engine":"29.8.2","authority":"ring0"}
FAIL
FAIL	gitea.dooplex.hu/admin/felhom-agent/internal/osupdate	0.010s
FAIL

=== control: restored source ===
$ go test ./internal/osupdate/ -run ^TestDocker_OOMCheckReachesTheHubUnchanged$ -count=1
rc=0
ok  	gitea.dooplex.hu/admin/felhom-agent/internal/osupdate	0.009s
VERDICT: RED as expected, GREEN restored