mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 11:46:35 +00:00
The lookup takes the role from its term and falls back to reading application_id out of the play's variables. That read was raw, which is the trap that took down three jobs from webserver_resource, so it now goes through resolve_var like every other lookup. Prevention rather than a fix. The fallback is the else of a term that the only caller always passes, and where it would fire web-app-docs sets application_id literally; the roles carrying a templated id reach it through sys-stk-full, which web-app-docs does not. The consequence would also have differed: an unrendered string never matches a peer, so the replay would have asked the site for a role named after the template and failed on the page rather than in the lookup. Measured: with the resolver's body stripped back to the raw read this test and the webserver_resource one both fail, and both pass with it restored. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>