Bakes the catalog-only Crabbox variant image from the same pinned Telegram
Desktop the local Docker image uses, then proves selection: an --image-sdk
lease gets the new AMI and a plain desktop lease keeps the generic default.
--prep-only validates the recipe on one lease without creating an image or
needing coordinator admin, which is how the AMI contract is testable by anyone.
Three defects only a real AWS lease could show:
- the version marker lived in Crabbox's state dir, which the lease user cannot
traverse on AWS desktop images, so the recorder preflight could not read it
- liveness matched the process name, missing the setsid fork-to-exec window on
a cold 234MB binary
- remote payloads ran through a login shell, whose ~/.bash_logout clear_console
failure replaced the script's exit status
Ayaan Zaidi
286f158349
