More test fixes

docs/CHANGELOG.md

@@ -2,6 +2,29 @@
 
 ---
 
+## V28 2026-03-20 07:26:46
+
+**Fix package repos missing from ISO and harden squashfs test checks**
+
+### Changes:
+- Fixed `src/iso/build-iso-arch.sh`: package repos copied into ISO now get `chmod -R a+rX`
+  to fix restrictive 700 permissions inherited from the build user. Without this, the
+  repos directories existed in the squashfs but were inaccessible to non-root users.
+  - Also refactored the 4 individual `cp -a` commands into a loop with existence check.
+- Fixed `tests/run-tests.sh`: all squashfs file/directory checks now use `sudo test`
+  and `sudo grep` instead of bare `[ -f ... ]` / `[ -d ... ]`. Squashfs mounts preserve
+  original file permissions, so tests running as a non-root user could fail to traverse
+  directories with restrictive permissions even when the files exist.
+
+### Plan deviation/changes:
+- None
+
+### What is missing/needs polish:
+- `qemu.kernel_boots` and `qemu.reaches_userspace` still expected failures — no real
+  kernel built yet (Phase 4 deliverable). ISO uses placeholder BOOTX64.EFI.
+
+---
+
 ## V27 2026-03-20 07:00:00
 
 **Add ISO build, boot chain verification, and fix installer bugs**