Keep release tests aligned with helper trust floor and single-admin guide

source/tests/test_agent_guide.py

@@ -69,7 +69,8 @@ class GuideTests(unittest.TestCase):
             self.assertNotIn(marker,text)
     def test_human_agent_and_transcript_boundary_are_explicit(self):
         text=guide.render_text('all')
-        self.assertIn('human operators and authorized agents',text)
+        self.assertIn('one human administrator',text)
+        self.assertIn('authorized agents',text)
         self.assertIn('terminal transcript',text)
         self.assertIn('not an authentic full-screen image',text)
         self.assertIn('normal operating-system authentication',text)

source/tests/test_package_maintainer.py

@@ -9,7 +9,7 @@ import tempfile
 import unittest
 
 sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "packaging"))
-from build_expanded import maintainer_prerm
+from build_expanded import maintainer_prerm, PRIVILEGED_HELPER_FLOOR
 from build_profiles import CANDIDATE_VERSION
 
 
@@ -30,7 +30,7 @@ class MaintainerScriptTests(unittest.TestCase):
         self.screen = self.root / "screen-access.json"
 
     def run_script(self, args, *, fail=0, screen=False):
-        script = maintainer_prerm(CANDIDATE_VERSION)
+        script = maintainer_prerm(PRIVILEGED_HELPER_FLOOR)
         # Only side-effecting commands and config probes are redirected. The
         # real dpkg comparisons are read-only and verify Debian version ordering.
         script = script.replace("/usr/bin/python3", shlex.quote(str(self.stub)))