Record Debian package lifecycle test

docs/release-testing-0.7.md

@@ -57,7 +57,7 @@ only in the pass evidence directory, which must not be committed.
 | BLD-14 | Gentoo live ebuild builds, tests, installs, and passes package QA | [PASS](test-evidence/0.7-r1.md#bld-14) |  |  |
 | BLD-15 | Debian package builds and installs on the target Debian release | [PASS](test-evidence/0.7-r1.md#bld-15) |  |  |
 | BLD-16 | `/usr`, `/usr/local`, lib/lib64, sysconf, state, and runtime paths follow FHS | [PASS](test-evidence/0.7-r1.md#bld-16) |  |  |
-| BLD-17 | Install, upgrade, reinstall, and uninstall preserve/remove documented state |  |  |  |
+| BLD-17 | Install, upgrade, reinstall, and uninstall preserve/remove documented state | [PASS](test-evidence/0.7-r1.md#bld-17) |  |  |
 | BLD-18 | Installed shared libraries have complete dependencies and valid SONAMEs |  |  |  |
 | BLD-19 | Man pages, translations, Web assets, docs, units, and examples are installed |  |  |  |
 

docs/test-evidence/0.7-r1.md

@@ -614,3 +614,41 @@ ring logs in persistent state.
 
 Runtime configuration: isolated staging roots and a dry-run tmpfiles root;
 the live Bongo installation and service were not modified.
+
+## BLD-17
+
+Result: **PASS**
+
+The Debian Trixie workflow now runs a destructive package lifecycle test only
+inside its disposable build container. It installs the freshly built Bongo
+package, creates distinct configuration, private-key, user-mail, system-Store,
+and queued-message markers, and verifies all five after a same-version
+reinstall. The test then repacks the identical payload with the unpublished
+test-only version `0.7.0-1+lifecycle1` and installs it through APT so that
+dpkg's real upgrade maintainer-script path is exercised.
+
+Normal removal deleted the program payload while retaining Debian conffiles
+and every site-created marker. Purge then deleted the package-owned Fail2ban
+filter and disabled jail template, removed Bongo from the package database,
+and still preserved `/etc/bongo` and `/var/lib/bongo`. This matches the now
+documented safe-removal policy; `/run/bongo` remains explicitly volatile and
+is not treated as recoverable state.
+
+The package test also found and removed a redundant hand-written
+`systemd-tmpfiles` invocation from `postinst`. Debhelper's generated sequence
+already performs the operation once and correctly handles `DPKG_ROOT`.
+
+- Source: commit `00b7cc3f3a945d744dafd0165e47dc9a67e72c01`.
+- Gitea Actions: Debian Trixie workflow run `2543`, success in 21m05s.
+- Build environment: Debian Trixie amd64, GCC 14.2.0, CMake 3.31.6.
+- Build date: 2026-07-21 10:48:28 UTC.
+- Release archive:
+  `bongo-0.7.0-dev00b7cc3-debian-trixie.zip`, SHA-256
+  `087011d70582c672d72d6a30c3d98276bc35764e4195e1734c423e308ebcb31d`.
+- Package configuration: Bongo `0.7.0-1`, Mailutils
+  `1:3.19-1+bongo1`, libspf2 `1.2.10-8.3+bongo1`, and libsrs2
+  `1.0.18-4+bongo1`, as recorded by the bundle manifest and source
+  `buildinfo`.
+
+Runtime configuration: disposable marker files in the isolated Gitea job;
+the live Bongo installation and service were not modified.