Five slices, each with its evidence. Migrations applied without inconsistency on
both versions, blueprints unchanged at seventeen flows and two providers, and a
login recorded in Authentik's own event log at 14:51 and again at 15:00 — server
side, not self-reported.
Two things went differently than planned and both are my gap. Postgres travelled
along from 17.9 to 17.11 because it hangs in the same chart as a dependency, so
the boundary in Gate 3 that excluded it was never enforceable and should not have
been written that way. And the login path was down for twenty to forty-five
seconds per step while the database restarted, which is expected for a single
replica but appeared nowhere in the plan.
A writing error nearly reached a manifest: the first attempt at the comment block
produced every line six times, because adjacent string literals concatenate in
Python before the repetition applies. It was caught by reading the diff before
committing rather than by the result.
Thore Cimbal
f618a65993