cases2

1. 2026-09-06 Looking up a DNS name before creating it is harmless: the lookup went through a home router, which then remembered that the name did not exist

   now fails loudly Absence is probed only against the authoritative nameserver; the user's own resolver is queried last, and only to read what it already believes.

   RuntimeChangeSynthetic Monitoring

2. 2026-09-06 Validating a web server's config only reads it: run as root, the validator created a log file the server could not open

   now fails loudly Config validation runs as the service user, and a smoke request against the new host is what declares the deploy done — not the validator's exit code.

   ChangeRuntimePre-Promotion Invariant GatesSmoke Tests