[sindredg]

Change

The template's three steps move to the dispatch image the pipeline pushed from main at b9de301, the first push after #222 merged. That image's dispatch step reads a NetBox job's accounts from the checks' verdicts and names them in the job line (ADR 0051).

With it, the live run that shows the fix: the run set Accounts in the job line, a lessons row, its bar on the milestone 5 chart, the worklog section, and the validation README's last run.

Closes #221.

The milestone 5 outcomes chart changed (docs/diagrams/test-outcomes-5.html and its SVG): a new bar, and a category "Failed before the job ran" for the job with no collection. Waiting for a look before the merge.

Validation

On the live system, 2026-10-28 15:00 to 15:40 UTC, from this branch at a4f3b32. Output kept outside the repository.

Step	Expected, written before the run	Result
Job program on the worker	The same SHA-256 as the checkout	Same, 4e9cd3cb; the socket active
Dispatch image and template	One ok line per image in one egress window; the template configured	ok for the new digest, 0 denied; dispatch, compare, and revoke on 651992dd
nb-10281500-a1, collected, then run	Succeeded, a match, verdicts keyed by both accounts	Succeeded in 703 s, match on both accounts, one structured output call, accepted
nb-10281500-nocollect, no collection	Failed at the dispatch step before the job, no registration, no job on the worker	Failed 21 s after submission with failed: no checks' verdicts for this job; no audit line; no worker line
nb-10281500-a3, collected, then run	As the first	Succeeded in 823 s, match, one accepted call
Pods' images	Each main= on the new digest	All eight on 651992dd
syn-10281500	Succeeded, no structured output tool offered	Succeeded in 96 s; offered load_skill and tools__get_evidence only
Every check from a4f3b32	0 failed; G.8 and W.9 pass	425 of 426; G.8 and W.9 pass; U.7 fails on a mesh agent release upstream, 1.104.4 against the pin 1.104.2 (#225)
Pages	render.py --check exit 0; links	Exit 0; 2264 links, 0 broken

Not verified: Goose refusing an output that leaves an account out, since both calls were accepted first; a case with more than two accounts. The first prompt grew to 3,796 tokens from 3,475, read in 309 seconds.

Risks and follow-up

• U.7 stays failed until the mesh agent pin moves (U.7 fails: the mesh VPN agent pin is 1.104.2 and upstream released 1.104.4 #225).
• A scored run with the new schema (ADR 0042) is not in this change.