The test pinned daemon.json to live-restore alone, so every controller check failed once the docker module gained log rotation as a preference (mesh-catalog #205, #217). It still refuses dns (ADR 0196) and any key the module does not declare, and checks the log defaults where the module declares them (novox/hq issue 498).