max / makenotwork

pom: fix broken test command in tls.rs doc, list v5-v13 tables The tls.rs doc comment read `cargo test, --ignored dual_trust`; the comma was residue from an earlier dash sweep eating the ` -- ` separator. The architecture.md Tables section listed only the eight tables from migrations v1-v4 while migrations.rs carries 13. Adds the ten missing rows: route, dns, whois, cors, backup, scan pipeline, systemd and synckit fleet checks, plus test_details and the pending_alerts outbox. Closes GoingsOn problems 7ba4fbc2, fc06ccd4.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: Max Johnson <me@maxj.phd> · 2026-08-01 20:22 UTC

Signed with PGP, not checked

Commit: 1a534dff2bf39d52dc85d0f113f47d8c2c9c5fe8

Parent: c8ff4d2

2 files changed, +11 insertions, -1 deletion

M pom/docs/architecture.md +10

			@@ -128,6 +128,16 @@
128	128		\| `alerts` \| Alert history + cooldown tracking \| target, alert_type, from_status, to_status, sent_at \|
129	129		\| `tls_checks` \| TLS certificate probe results \| target, host, valid, days_remaining, not_before, not_after, subject, issuer \|
130	130		\| `incidents` \| Health incidents (open/closed) \| target, started_at, ended_at, duration_secs, from_status, to_status \|
	131	+	\| `route_checks` \| Per-path HTTP route probe results \| target, path, status_code, ok, response_time_ms, checked_at, error \|
	132	+	\| `dns_checks` \| DNS record expectation checks \| target, name, record_type, expected, actual, matches, checked_at, error \|
	133	+	\| `whois_checks` \| Domain registration and expiry probes \| target, domain, registrar, expiry_date, days_remaining, nameservers, checked_at, error \|
	134	+	\| `test_details` \| Per-test rows for a run in `test_runs` \| run_id, test_name, passed, duration_ms \|
	135	+	\| `cors_checks` \| CORS preflight probe results \| target, url, origin, method, passes, checked_at, error \|
	136	+	\| `backup_checks` \| Backup freshness and size probes \| target, database_name, status, last_backup_at, size_bytes, age_hours, checked_at, error \|
	137	+	\| `pending_alerts` \| Alert outbox with retry state \| alert_key, category, channel, subject, body, priority, source, attempts, next_retry_at \|
	138	+	\| `scan_pipeline_checks` \| Upload scan queue depth and stuck-job counts \| target, status, issues, queue_pending, queue_running, queue_stuck, held_total, checked_at \|
	139	+	\| `systemd_checks` \| systemd unit state on a host \| target, status, units, failed_units, issues, checked_at, error \|
	140	+	\| `synckit_fleet_checks` \| SyncKit device and version spread over a window \| target, window_days, devices, versions, checked_at, error \|
131	141
132	142		Pre-migration databases are detected by the presence of the `health_checks` table and stamped as v1 without re-running the initial migration.
133	143

M pom/src/checks/tls.rs +1 -1

			@@ -249,7 +249,7 @@
249	249
250	250		/// Live-network check that both trust stores are actually exercised and
251	251		/// report independently. Ignored by default so the suite stays offline; run
252		-	/// with `cargo test, --ignored dual_trust` when touching the probe logic.
	252	+	/// with `cargo test -- --ignored dual_trust` when touching the probe logic.
253	253		#[tokio::test]
254	254		#[ignore = "requires network access"]
255	255		async fn dual_trust_probes_agree_on_public_and_reject_bad_certs() {