commit e7d5dbb83662f7820bd94599a94b6d847611b2a0
Author: lucascouts <lucascs@protonmail.com>
Date: Sat Aug 8 19:53:43 2026 -0300

docs(sci-ml/lemonade-bin-11.5.2-r1): record the libsystemd reason and the measured CAP_SYS_RESOURCE answer

Two comment corrections. No installed file changes, so no revbump; the
md5-cache entry is regenerated in this commit because the ebuild's _md5_ moves.

1) The HYBRID PACKAGING header justified taking the ELF payload from the
"embeddable" tarball instead of the .deb entirely on Debian-13 sonames.
That is the weaker half of the reason. Measured 2026-08-08 on the 11.5.2
payload, the .deb's usr/bin/lemond carries

NEEDED libsystemd.so.0, libcap.so.2, libcpp-httplib.so.0.41, ...
imports sd_bus_open_system sd_bus_call_method sd_bus_message_read
sd_bus_message_unref sd_bus_error_free sd_bus_unref
sd_pid_get_unit

while the embeddable lemond links neither libsystemd nor libcap. DT_NEEDED
is a hard load-time requirement, so the .deb binary merges cleanly, passes
QA and then fails at exec on an OpenRC host -- the sci-biology/foldingathome
failure mode. The soname reasons are fixable by packaging cpp-httplib 0.41;
this one is not, so it now leads the block with the readelf command to
re-run before anyone touches src_install on a bump.

2) The OpenRC block asserted that CAP_SYS_RESOURCE is "deliberately NOT set
here, to keep this file identical to the sibling's" -- a packaging
preference standing in for a runtime question. Answered by execution
instead: lemond started with zero capabilities and RLIMIT_MEMLOCK
soft = hard = 8 MiB, bound its HTTP and WebSocket servers and built its
114-entry model cache, with no capability, rlimit or memlock diagnostic.
Upstream's own systemd USER unit ships with no AmbientCapabilities over the
same ExecStart. The binary does call setrlimit, so the capability is not
decorative upstream, but the only memlock diagnostics in it sit in an
NPU-readiness block and report rather than gate startup. Recorded with what
the measurement did NOT cover: the test host has no NPU, so that probe was
never reached, and the OpenRC answer there is rc_ulimit in conf.d, not a
capability in this ebuild.

Verified: pkgcheck scan -c ManifestCheck,MetadataVarCheck,DependencyCheck,
SrcUriCheck,PackageMetadataXmlCheck sci-ml/lemonade-bin reports only the
pre-existing DeprecatedDep on sys-libs/zlib:= ; the Manifest is untouched
(thin-manifests, SRC_URI unchanged); _md5_ matches md5sum of the ebuild; and a
real rebuild through the story-010 harness held 26 of 26 assertions across both
USE settings and both service scopes.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

commit 3ae867c6fa5ef0bdcd1848f233cc031bd544a3ce
Author: lucascouts <lucascs@protonmail.com>
Date: Sat Aug 8 14:42:21 2026 -0300

add(metadata/{md5-cache/mail-mta/proton-mail-bridge-3.25.0-r1, md5-cache/net-misc/ntpd-rs-1.9.0-r1, md5-cache/net-misc/rustdesk-1.4.9-r1, md5-cache/net-misc/rustdesk-bin-1.4.9-r1, md5-cache/sci-ml/lemonade-bin-11.5.2-r1}), del(app-editors/zed-1.16.0_pre20260807), del(metadata/{md5-cache/mail-mta/proton-mail-bridge-3.25.0, md5-cache/net-misc/ntpd-rs-1.9.0, md5-cache/net-misc/rustdesk-1.4.9, md5-cache/net-misc/rustdesk-bin-1.4.9, md5-cache/sci-ml/lemonade-bin-11.5.1, md5-cache/sci-ml/lemonade-bin-11.5.2}), mod({.autoupdate/packages.toml, CLAUDE.md, scripts/check-openrc-coverage.sh}), up(mail-mta/proton-mail-bridge-3.25.0 -> 3.25.0-r1, net-misc/rustdesk{,-bin}-1.4.9 -> 1.4.9-r1, sci-ml/lemonade-bin-11.5.2 -> 11.5.2-r1)

commit 2b8832261d5b57c9f6711daf3b39879c4facf3e0
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Aug 5 20:52:41 2026 -0300

add(metadata/{md5-cache/app-editors/cursor-3.14.27, md5-cache/sci-ml/lemonade-11.5.2, md5-cache/sci-ml/lemonade-bin-11.5.2, md5-cache/sci-ml/llama-cpp-0_pre10289, md5-cache/sci-ml/ollama-bin-0.32.6, md5-cache/www-client/brave-browser-1.93.132, md5-cache/x11-misc/xvfb-run-21.1.24.1}), mod(.autoupdate/packages.toml), up(app-editors/cursor-3.14.7 -> 3.14.27, sci-ml/lemonade{,-bin}-11.5.1 -> 11.5.2, www-client/brave-browser-1.93.129 -> 1.93.132, x11-misc/xvfb-run-21.1.23.1 -> 21.1.24.1)

commit ccadd89eaf4a485d1c9c785a7fe706ed14baec0b
Author: lucascouts <lucascs@protonmail.com>
Date: Thu Jul 30 10:41:15 2026 -0300

add(metadata/{md5-cache/app-editors/devin-desktop-bin-3.6.22, md5-cache/dev-util/glslang-1.4.350.1_p20260729, md5-cache/dev-util/mesa_clc-26.2.0_pre20260730, md5-cache/media-libs/mesa-26.2.0_pre20260730, md5-cache/sci-ml/lemonade-11.5.1, md5-cache/sci-ml/lemonade-bin-11.5.1}), mod(metadata/md5-cache/dev-python/pyee-13.0.1), up(app-editors/devin-desktop-bin-3.6.21 -> 3.6.22, dev-util/{glslang-1.4.350.1_p20260727 -> 1.4.350.1_p20260729, mesa_clc-26.2.0_pre20260729 -> 26.2.0_pre20260730}, media-libs/mesa-26.2.0_pre20260729 -> 26.2.0_pre20260730, sci-ml/lemonade{,-bin}-11.5.0 -> 11.5.1)

commit a8e57db34bf744fcaf43a6f7be6af7d0edad58a3
Author: lucascouts <lucascs@protonmail.com>
Date: Fri Jul 24 16:30:56 2026 -0300

add(acct-group/lemonade-0, acct-user/lemonade-0, media-libs/dav1d-1.5.4, sci-ml/lemonade{,-bin}-11.5.0), add(metadata/{md5-cache/acct-group/lemonade-0, md5-cache/acct-user/lemonade-0, md5-cache/app-editors/cursor-3.13.10, md5-cache/app-editors/vim-9.2.0846, md5-cache/app-editors/vim-core-9.2.0846, md5-cache/app-misc/claude-desktop-bin-1.24012.9, md5-cache/dev-util/claude-code-2.1.219, md5-cache/dev-util/glslang-1.4.350.1_p20260724, md5-cache/media-libs/dav1d-1.5.4, md5-cache/media-libs/vulkan-layers-1.4.352_p20260724, md5-cache/sci-ml/lemonade-11.5.0, md5-cache/sci-ml/lemonade-bin-11.5.0, md5-cache/sci-ml/llama-cpp-0_pre10107, md5-cache/www-client/brave-browser-1.92.144}), mod(.autoupdate/packages.toml), up(app-editors/{cursor-3.12.30 -> 3.13.10, vim-9.2.0843 -> 9.2.0846, vim-core-9.2.0843 -> 9.2.0846}, app-misc/claude-desktop-bin-1.24012.1 -> 1.24012.9, dev-util/{claude-code-2.1.218 -> 2.1.219, glslang-1.4.350.1_p20260723 -> 1.4.350.1_p20260724}, media-libs/vulkan-layers-1.4.352_p20260721 -> 1.4.352_p20260724, sci-ml/llama-cpp-0_pre10106 -> 0_pre10107, www-client/brave-browser-1.92.143 -> 1.92.144)