Verified read-only on the live server: database and console listen on loopback only; login/world are loopback until
the owner enables sharing. Elevation and router changes only happen on explicit action.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified: clean base built from the repack (0 accounts, 0 characters, 647 migrations), packaged, signed, installed
next to a running server, started with the CI-built worldserver to 'ready', first account created over RA.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified in the native UI with a stub client: realmlist pointed and backed up, addon installed without touching
other addons, START & PLAY starts the server, waits for ready, then launches the client.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified: fixture received 'botcmd spawnleveled 12' over RA from the UI and the counts moved;
population query also read-only verified against the live server (33 companions online).
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified in the native window on the fixture: modified file kept by choice, new file added,
server restarted healthy, version bumped.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified on the fixture: signed update applied with a recovery point, template merge,
a real SQL migration, restart and readiness; failure/rollback paths covered by tests.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified on the fixture: 608 real core/module SQL scripts applied through the runner,
world reaches 'ready', account created over RA with administrator rights.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified: fixture packaged 2.2 GB -> 327 MB, installed in 18 s with rotated DB
credentials via the native UI; hostile archives, bad signatures and interrupted
downloads are rejected/resumed in tests.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified: 28 real config files round-trip byte-identical; native UI edit changes
exactly one line in template and generated conf; snapshot restore is byte-exact.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified in the native window against a disposable fixture: import writes only
<folder>.manager + registry; start surfaces a human 'database update required'
message; stop returns to Offline. Live install untouched throughout.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Verified on a disposable fixture: start reports world_db_incompatible for a
pristine DB with a newer binary; stop is graceful; live install untouched.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>