Validation 2026-10-24 (v1.0.1)
Unit tests: 11/11 passed (Python 3.11, Debian 12 container).
End-to-end on Debian 12 + PHP 8.2.35 (cli + fpm), throwaway container:
- audit: php8.2 + php-fpm8.2 found; package list now installed-only
- verify: reads effective values via `-i`; exit 1 before hardening, 0 after, 1 again when conf.d override present
- plan/apply: conf.d override detected and reported (configuration_written_but_overridden)
- rollback, stale-plan rejection, symlink rejection, baseline/check/watch: unchanged behaviour, passed
- phpguard-pack.py --container php:8.3-cli: 8.3.36 detected, no container Env collected
- systemd unit: systemd-analyze verify OK; with ProtectHome=read-only a web root under /home is checked (rc 0/1) and remains non-writable
Not yet validated: Windows host with PHP installed, RHEL/rpm hosts, FPM pool php_admin_value / .user.ini.
Treat as pilot package; test on staging before configuration changes.
