Freeze HA scoring and document reported production failover

tests/verify_promotion_state_cli.py

@@ -0,0 +1,40 @@
+#!/usr/bin/env python3
+"""Explicit disposable-container-only test of the root helper CLI and /run state."""
+import json
+import os
+from pathlib import Path
+import subprocess
+import sys
+import uuid
+
+from test_disconnected_state import CONNECTED, DISCONNECTED
+
+assert os.geteuid() == 0 and os.environ.get('MC_DISPOSABLE_STATE_TEST') == '1', (
+    'Run only in a disposable container with MC_DISPOSABLE_STATE_TEST=1')
+helper = (Path(sys.argv[1]) if len(sys.argv) > 1 else
+          Path(__file__).resolve().parents[1] / 'refactored/managed-container.d/promotion_state.py')
+resource = 'mc-disposable-' + uuid.uuid4().hex
+args = ['python3', str(helper), resource, 'test-owner', 'test.service', 'test-container', '300']
+
+def run(obs, expected):
+    result = subprocess.run(args, input=json.dumps(obs), text=True, capture_output=True, timeout=3)
+    assert result.returncode == 0 and result.stdout.strip() == expected, result
+
+run(DISCONNECTED, '-INFINITY')
+run(CONNECTED, '100')
+files = list(Path('/run/managed-container/promotion').glob('*.json'))
+record_path = next(p for p in files if json.loads(p.read_text())['context'][0] == resource)
+record = json.loads(record_path.read_text())
+assert record['replay'] == CONNECTED['replay'] and record['flush'] == CONNECTED['flush']
+for path, mode in [(record_path, 0o600), (record_path.parent, 0o700), (record_path.parent.parent, 0o700)]:
+    info = path.stat()
+    assert (info.st_uid, info.st_gid, info.st_mode & 0o777) == (0, 0, mode), path
+run(DISCONNECTED, '50')
+assert json.loads(record_path.read_text()) == record  # Disconnection never renews evidence.
+record_path.write_text('{malformed')
+run(DISCONNECTED, '-INFINITY')
+assert not record_path.exists()
+run(CONNECTED, '100')
+run(dict(DISCONNECTED, identity=['999', '/new', '1789201000.123456']), '-INFINITY')
+assert not record_path.exists()
+print('PASS root CLI: fixed /run location, ownership/modes, persistence, disconnect, malformed and replaced data')