tegwick 444f2b3fc3 Pin approval-clients rollout tests to their pre-rollout fixture ... deployment.yaml advanced past the one-shot rollout (P05/P06), so the helper correctly refused it with prior_image_drift and existing_candidate_env. The fixture now reconstructs the pre-rollout state, and a new test asserts the helper refuses the current declaration. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 299762@bnt-lap001 Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e		2026-09-23 19:56:55 +02:00
..
bootstrap	NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof	2026-07-02 22:08:33 +02:00
k8s	Pin approval-clients rollout tests to their pre-rollout fixture	2026-09-23 19:56:55 +02:00
WORKPLAN.md	docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)	2026-03-20 17:16:35 +00:00