# Census overlay rootfs-apps-1, written by census-propose (#369). census-ruling-rootfs-apps-1, approved by the census owner before the merge; the approval card is docs/superpowers/notes/census-proposal-rootfs-apps-1.md.
# 4 body, 1 sites, 5 envelope: each changed unit re-frozen at its existing disposition with its claim appended.
@legacy	43d048ddf5ec82c84844d12ad697954bbfba250d3e371aa0dcc67037389d027d	cli.go	runShipAPI	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 9: the success lines moved into printAPIShipped, which ship_rootfs.go shares; the same result returned; no read added	file:CreateTemp@522,file:Stat@1958	01af3c42c7f108f37abc402aec11bf035a544a73b2e14796a29f97bcf4b2979f
@legacy	0761880c7ef7881e69fed3a8b6487bd4906915e57bbec855c15ce8364aeb480b	internal/console/apicli.go	Server.handleAPIShip	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-plans-3b-never-sleep;basis=after the capability block is validated, a release declaring daemon is refused (409 cap) for an app on shared boxes under a plan; an app on a fleet the account owns, or any app with plans off, ships as before. No new direct read at this site; the plan check it calls reads the account plan, the app placement and (through ownsFleet) the owner of the fleet named.;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 8: takes kind rootfs (meta via shipMeta, the body bound lowered once the kind is known through shipBody), refuses a release of the wrong kind or hibernation before any part is read (release.CheckShipKind), hands a rootfs body to shipRootfsParts and gives its ship slot back once that holds its scratch; a kind refused at publication answers as at the door; refusal sentences named as constants; the same read, no read added	file:ReadAll@12438	69a8c03c005c463b7ed0e3879181177ca156818142768a2b2c73a5926579b319
@legacy	7ec6d86d921e65ea491d2b9aaf36a996abca524daefacb107cab07939c8e5174	internal/hostops/mutation_boundary_putfrom.go	conditionalRecordStore.PutFrom	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 3: the same rootfs image key streams past the record checks beside the GeoIP blob key (a rootfs image is never a record body); the same read, no read added	file:ReadAll@397	50fef94769c4e4d4c49d72c657ff96b0d49a8fd5f03bca4cedce19f6e5fd0067
@legacy	fc4325af9d68b2b10fecde21cdcaafdb9b6e4abbd688f321e5a1c59b9b9db4ec	internal/hostops/mutation_boundary_putfrom.go	mutationBoundary.PutFrom	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 3: a create-only put of an exact release rootfs image key (release.IsRootfsArtifactKey) now streams to the raw store after the boundary decides it, bounded by release.MaxRootfsBytes (streamLimit), as a GeoIP blob already did; the same read, no read added	file:ReadAll@311	e04f3976e679699e57cb69b4ada1e3af92cdd7ed99ee7a52b0c12252b4473866
@legacy	dd8ce18985f7b511d8d0b17f1d0b63ef22691d2337b6869ff1aa69d69616242c	cli.go	runShip	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 9: takes --rootfs, --processes, --hibernate, --jit and --check and hands a rootfs ship to runShipRootfs (ship_rootfs.go) before the binary path; the --notes-file ReadFile moved into shipNoteText (its own row, the same read of the file the person named) and the direct-mode version mint into mintDirectVersion; one read site fewer, none added; Task 12: the --hibernate flag help is RFS-1-C32's new text, the same reads	file:ReadFile@7227,file:ReadFile@7451	f7b50de3151fc59358374d5650ffdea41886d4694c27775ecec2f9f999794175
cli.go	runShipAPI	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 9: the success lines moved into printAPIShipped, which ship_rootfs.go shares; the same result returned; no read added	file:CreateTemp@522,file:Stat@1958	01af3c42c7f108f37abc402aec11bf035a544a73b2e14796a29f97bcf4b2979f
internal/console/apicli.go	Server.handleAPIShip	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-plans-3b-never-sleep;basis=after the capability block is validated, a release declaring daemon is refused (409 cap) for an app on shared boxes under a plan; an app on a fleet the account owns, or any app with plans off, ships as before. No new direct read at this site; the plan check it calls reads the account plan, the app placement and (through ownsFleet) the owner of the fleet named.;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 8: takes kind rootfs (meta via shipMeta, the body bound lowered once the kind is known through shipBody), refuses a release of the wrong kind or hibernation before any part is read (release.CheckShipKind), hands a rootfs body to shipRootfsParts and gives its ship slot back once that holds its scratch; a kind refused at publication answers as at the door; refusal sentences named as constants; the same read, no read added	file:ReadAll@12438	69a8c03c005c463b7ed0e3879181177ca156818142768a2b2c73a5926579b319
internal/hostops/mutation_boundary_putfrom.go	conditionalRecordStore.PutFrom	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 3: the same rootfs image key streams past the record checks beside the GeoIP blob key (a rootfs image is never a record body); the same read, no read added	file:ReadAll@397	50fef94769c4e4d4c49d72c657ff96b0d49a8fd5f03bca4cedce19f6e5fd0067
internal/hostops/mutation_boundary_putfrom.go	mutationBoundary.PutFrom	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 3: a create-only put of an exact release rootfs image key (release.IsRootfsArtifactKey) now streams to the raw store after the boundary decides it, bounded by release.MaxRootfsBytes (streamLimit), as a GeoIP blob already did; the same read, no read added	file:ReadAll@311	e04f3976e679699e57cb69b4ada1e3af92cdd7ed99ee7a52b0c12252b4473866
cli.go	runShip	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-rootfs-apps-1;basis=rootfs Plan 1 Task 9: takes --rootfs, --processes, --hibernate, --jit and --check and hands a rootfs ship to runShipRootfs (ship_rootfs.go) before the binary path; the --notes-file ReadFile moved into shipNoteText (its own row, the same read of the file the person named) and the direct-mode version mint into mintDirectVersion; one read site fewer, none added; Task 12: the --hibernate flag help is RFS-1-C32's new text, the same reads	file:ReadFile@7227,file:ReadFile@7451	f7b50de3151fc59358374d5650ffdea41886d4694c27775ecec2f9f999794175
@coverage	.	3e8e7626b6ea3b3332310fcd5539131d47629f78332885eda6bf4cc6a0e3a35c
@coverage	internal/console	d1fdc15045e4a206bfe8e3d9d4443f9b124b010f97d6b2b050c78ed387a85618
@coverage	internal/hostops	075130a7118bd616dda1b37cf4769837a60af677e645ba0b2fe7d2b995940efb
@coverage	internal/release	8f5297842fb07c227f127d751fb2bf87379a2758bf6b5622d140eae351e409cf
@coverage	internal/rootfsimage	376e791090f190f9ff9e6de2cad162f38fef5f040a947fb6bb889279d1eefa8e