carlos / platform Public

harness: Run 10 summary, corrections (R10-A..C, M2..M15), end state post-move-r10; shop-large nesting outstanding

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
claude agent, operated by paul@keymail.dev 0b01a72e45fa8292f81d124deea1d65617718d04 parent f4dd0ae
4 files changed, +148 −0
  • harness/RUNLOG.md +85 −0
  • harness/evidence/run10/nesting.log +30 −0
  • harness/evidence/run10/snap-post-move-r10.log +6 −0
  • harness/scenarios/cohort1/blocks/r10-nest-watch.host.sh +27 −0

CI failed — run details

CI log
=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	302.659s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	3.059s
ok  	github.com/carlosframework/platform/cmd/moveprobe	93.272s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.716s
?   	github.com/carlosframework/platform/harness/apps/wakecheck	[no test files]
ok  	github.com/carlosframework/platform/internal/activator	251.000s
ok  	github.com/carlosframework/platform/internal/agentsock	0.032s
ok  	github.com/carlosframework/platform/internal/alerting	0.008s
ok  	github.com/carlosframework/platform/internal/analytics	0.036s
ok  	github.com/carlosframework/platform/internal/appconfig	2.522s
ok  	github.com/carlosframework/platform/internal/apperr	0.110s
ok  	github.com/carlosframework/platform/internal/applog	0.166s
ok  	github.com/carlosframework/platform/internal/awsinv	0.006s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.006s
ok  	github.com/carlosframework/platform/internal/boxid	0.724s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.009s
ok  	github.com/carlosframework/platform/internal/caps	0.014s
ok  	github.com/carlosframework/platform/internal/certwarm	0.002s
ok  	github.com/carlosframework/platform/internal/cgroup	0.712s
ok  	github.com/carlosframework/platform/internal/changelog	0.331s
ok  	github.com/carlosframework/platform/internal/claimactivation	0.842s
ok  	github.com/carlosframework/platform/internal/clamd	0.057s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	403.518s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	5.705s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.010s
ok  	github.com/carlosframework/platform/internal/dbverify	0.004s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.004s
ok  	github.com/carlosframework/platform/internal/docsite	0.007s
ok  	github.com/carlosframework/platform/internal/domains	2.454s
ok  	github.com/carlosframework/platform/internal/doorkey	0.010s
ok  	github.com/carlosframework/platform/internal/economics	0.004s
ok  	github.com/carlosframework/platform/internal/edge	44.776s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.008s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.142s
ok  	github.com/carlosframework/platform/internal/gate	1.667s
ok  	github.com/carlosframework/platform/internal/genselect	0.022s
ok  	github.com/carlosframework/platform/internal/geo	0.020s
ok  	github.com/carlosframework/platform/internal/geoip	0.032s
ok  	github.com/carlosframework/platform/internal/historyreadback	0.171s
ok  	github.com/carlosframework/platform/internal/host	179.936s
ok  	github.com/carlosframework/platform/internal/hostactors	6.033s
ok  	github.com/carlosframework/platform/internal/hostactors/awsmembership	0.005s
ok  	github.com/carlosframework/platform/internal/hostbox	2.764s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.577s
ok  	github.com/carlosframework/platform/internal/hostenv	0.005s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.005s
ok  	github.com/carlosframework/platform/internal/hostexec	4.767s
ok  	github.com/carlosframework/platform/internal/hostfence	0.035s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.360s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.013s
ok  	github.com/carlosframework/platform/internal/hostguard	1.035s
ok  	github.com/carlosframework/platform/internal/hostops	1.648s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.003s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.003s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.453s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.139s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.003s
ok  	github.com/carlosframework/platform/internal/infraview	0.003s
ok  	github.com/carlosframework/platform/internal/instancectl	5.209s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.705s
ok  	github.com/carlosframework/platform/internal/instancefs	0.006s
ok  	github.com/carlosframework/platform/internal/instancekey	0.004s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.007s
ok  	github.com/carlosframework/platform/internal/layout	1.541s
ok  	github.com/carlosframework/platform/internal/lbhealth	0.003s
ok  	github.com/carlosframework/platform/internal/lease	9.788s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.005s
ok  	github.com/carlosframework/platform/internal/ledger	0.010s
ok  	github.com/carlosframework/platform/internal/mail	0.179s
ok  	github.com/carlosframework/platform/internal/maintenance	0.084s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.502s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.074s
ok  	github.com/carlosframework/platform/internal/metrics	0.005s
ok  	github.com/carlosframework/platform/internal/moves	21.167s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.781s
ok  	github.com/carlosframework/platform/internal/objstore	0.158s
ok  	github.com/carlosframework/platform/internal/ops	0.165s
ok  	github.com/carlosframework/platform/internal/park	0.197s
ok  	github.com/carlosframework/platform/internal/privatefile	0.007s
2026/10/20 23:04:40 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/20 23:04:40 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 23:04:40 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 23:04:40 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/20 23:04:40 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 23:04:40 provision: an app's records could not be listed: they are skipped
2026/10/20 23:04:40 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:40 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 23:04:40 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 23:04:40 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 23:04:40 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 23:04:40 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 23:04:40 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/20 23:04:40 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:04:40 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 23:04:40 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:04:40 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 23:04:40 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:04:40 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:04:40 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 23:04:40 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:04:40 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 23:04:40 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 23:04:40 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:04:40 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 23:04:40 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:04:40 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:40 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:04:40 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 23:04:41 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:41 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:41 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:41 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:04:41 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:41 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:41 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 23:04:41 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 23:04:41 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/20 23:04:41 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/20 23:04:41 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:04:41 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:41 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (4.55s)
    plan14_root_reads_test.go:940: root read census: 143 discrepancies
        changed root read internal/hostfence/writer.go:OpenRootFenceStore; review class, task, sites and digest
        changed root source envelope harness
        changed root source envelope harness/apps/wakecheck
        changed root source envelope harness/boxes
        changed root source envelope harness/boxes/shims
        changed root source envelope harness/checks
        changed root source envelope harness/console
        changed root source envelope harness/infra
        changed root source envelope harness/infra-copies/747f699/dev
        changed root source envelope harness/infra-copies/a0b3f5a/dev
        changed root source envelope harness/infra-copies/a0b3f5a/scripts
        changed root source envelope harness/infra-copies/pr47
        changed root source envelope harness/operator
        changed root source envelope harness/release
        changed root source envelope harness/scenarios
        changed root source envelope harness/scenarios/cohort1
        changed root source envelope harness/scenarios/cohort1/blocks
        changed root source envelope harness/stand-ins
        changed root source envelope internal/host
        changed root source envelope internal/hostfence
        changed root source envelope internal/publicrelease
        changed root source envelope internal/s3compat
        unclassified root read harness/apps/wakecheck/main.go:main file:Exec@333,file:Exec@804,file:Open@277,file:QueryRow@870
        unclassified root read harness/boxes/boxes-up.sh:external file:external@0
        unclassified root read harness/boxes/dmi-shim.sh:external file:external@0
        unclassified root read harness/boxes/layout-probe.sh:external file:external@0
        unclassified root read harness/boxes/leo-ext4-from.sh:external file:external@0
        unclassified root read harness/boxes/leo-ext4.sh:external file:external@0
        unclassified root read harness/boxes/leo-swap.sh:external file:external@0
        unclassified root read harness/boxes/shims/systemd-zram-setup@.service:external file:external@0
        unclassified root read harness/boxes/vendor-shims.sh:external file:external@0
        unclassified root read harness/checks/check2.sh:external file:external@0
        unclassified root read harness/checks/check5.sh:external file:external@0
        unclassified root read harness/checks/check6.sh:external file:external@0
        unclassified root read harness/checks/check6b.sh:external file:external@0
        unclassified root read harness/checks/check7.sh:external file:external@0
        unclassified root read harness/checks/check8.sh:external file:external@0
        unclassified root read harness/checks/fix5.sh:external file:external@0
        unclassified root read harness/checks/run6b.sh:external file:external@0
        unclassified root read harness/checks/snap-base.sh:external file:external@0
        unclassified root read harness/checks/snap-boot.sh:external file:external@0
        unclassified root read harness/checks/ssmsmoke.sh:external file:external@0
        unclassified root read harness/console/console-ext4.sh:external file:external@0
        unclassified root read harness/console/console-setup.sh:external file:external@0
        unclassified root read harness/console/signin.sh:external file:external@0
        unclassified root read harness/console/system-update.sh:external file:external@0
        unclassified root read harness/donor-user-data.sh:external file:external@0
        unclassified root read harness/evidence.sh:external file:external@0
        unclassified root read harness/host-setup.sh:external file:external@0
        unclassified root read harness/host-user-data.sh:external file:external@0
        unclassified root read harness/hrun.sh:external file:external@0
        unclassified root read harness/infra-copies/747f699/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/bootstrap-box.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/ship-app.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/update-platform-binary.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/probe.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/remediation.sh:external file:external@0
        unclassified root read harness/infra/infra-setup.sh:external file:external@0
        unclassified root read harness/operator/operator-setup.sh:external file:external@0
        unclassified root read harness/release/release-setup.sh:external file:external@0
        unclassified root read harness/release/release-window.sh:external file:external@0
        unclassified root read harness/release/step7-operator.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/50-publish-record.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster-resume.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61-sign.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61a-install-channel.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/62-guard-arm.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-sophie.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-console-report.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-evidence-key.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-runtime.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/74-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-leo.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/acceptance.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b1.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2-c8.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2-list.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-after.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-pair.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-resume.sophie.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b5.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g4-roll.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g5.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g9-check.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/p9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/place-parent.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/pw-seed.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-a1-normal.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-console-upgrade.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-grow.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-move-precheck.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-move-setup.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-move.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-nest-watch.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-prep.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-report.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-console-e1.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-console.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-devcheck.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-move-precheck.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-move-setup.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-move.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-normal.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-rearm.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-release.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-setup.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-roll.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict2.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm2.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm3.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/reports.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/run-leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-env.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-identity.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-sums.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82-f4.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82-f5.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w84.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/box-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/signer-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/ssm.sh:external file:external@0
        unclassified root read harness/scenarios/sync.sh:external file:external@0
        unclassified root read harness/snapshot.sh:external file:external@0
        unclassified root read harness/stand-ins/certs.sh:external file:external@0
        unclassified root read internal/s3compat/harness.go:readHarnessFile file:ReadFile@189,file:Stat@55
        changed reclassified declaration internal/hostfence/writer.go:OpenRootFenceStore
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 23:04:52 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/20 23:04:52 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/20 23:04:52 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/20 23:04:52 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged acme.go.tito.io hibernate false -> true
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged acme.go.tito.io status-named false -> true
2026/10/20 23:04:52 provision: converged acme.go.tito.io status-named true -> false
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:04:52 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:04:52 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:04:52 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:04:52 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/20 23:04:52 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/20 23:04:52 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 23:04:52 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 23:04:52 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 23:04:52 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:52 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:04:52 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/20 23:04:52 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/20 23:04:52 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:04:52 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:04:52 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 23:04:52 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:52 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:04:52 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/20 23:04:52 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 23:04:52 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:04:52 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 23:04:52 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:04:52 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 23:04:52 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:04:52 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 23:04:53 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:04:53 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/20 23:04:53 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/20 23:04:53 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:04:53 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:04:53 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/20 23:04:53 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/20 23:04:53 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/20 23:04:53 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/20 23:04:53 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/20 23:04:53 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/20 23:04:53 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/20 23:04:53 provision: dry-run: would converge owned.go.tito.io seed
2026/10/20 23:04:53 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:04:53 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/20 23:04:53 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/20 23:04:53 provision: converged owned.go.tito.io channel stable -> edge
2026/10/20 23:04:53 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/20 23:04:53 provision: converged owned.go.tito.io hibernate false -> true
2026/10/20 23:04:53 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/20 23:04:53 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/20 23:04:53 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: removed retired static route site.go.tito.io (record gone)
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/20 23:04:53 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/20 23:04:53 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:53 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:53 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 23:04:53 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 23:04:53 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:04:53 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 23:04:53 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/20 23:04:53 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:04:53 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 23:04:53 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:04:53 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 23:04:53 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/20 23:04:53 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/20 23:04:53 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:04:53 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/20 23:04:53 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/20 23:04:53 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 23:04:53 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/20 23:04:53 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/20 23:04:53 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:53 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 23:04:53 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:53 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 23:04:53 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:53 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 23:04:53 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:53 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/20 23:04:54 provision: a.shop.example.com: swapped for import sd_oqub2dppxrznllta2co5gibipm (the original route is journaled)
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_oqub2dppxrznllta2co5gibipm committed: its gate is cleared and its journal row dropped
2026/10/20 23:04:54 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_6ti2ulrnqhxfipvrjvtw4hfzze rolled back to its original route
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_6ti2ulrnqhxfipvrjvtw4hfzze: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_6ti2ulrnqhxfipvrjvtw4hfzze is cleaned up and its journal row retired
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_fzeysaqtgrnvyqnb2thqp3kmky rolled back to its original route
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_fzeysaqtgrnvyqnb2thqp3kmky: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_fzeysaqtgrnvyqnb2thqp3kmky is cleaned up and its journal row retired
2026/10/20 23:04:54 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_eynkraxjvhv3iudi3xo4prn2nq
2026/10/20 23:04:54 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/20 23:04:54 provision: dry-run: would converge a.shop.example.com seed source
2026/10/20 23:04:54 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:54 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/20 23:04:54 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/20 23:04:54 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_xlaguuzrdn244lpqkkpieimksu cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_bkxbnpstx2i77nkjtkyntu6zge cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_ryt52b2tdfuv7ar5i3iqzjnkcu is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_kpmxjyiiu6lshcj2fdntfynavy is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_vuex5gajkwopbcme2w53h56lne is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 23:04:54 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/20 23:04:54 provision: b.shop.example.com: import sd_2tolm744vadke6q7yteyy25t74 left alone this pass: the import journal could not be read
2026/10/20 23:04:54 provision: c.shop.example.com: import sd_5xbql44zno2l6qq5545fgt63qq left alone this pass: the import journal could not be read
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_jbkukjm4gpbixl7p4ejk5hdcgy committed: its gate is cleared and its journal row dropped
2026/10/20 23:04:54 provision: a.shop.example.com: not converging import sd_eeqgkbbo4wnpxqyvubagmhjnm4: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 23:04:54 provision: a.shop.example.com: not converging import sd_axeur7dp5esfsgffhuiy7ve4o4: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 23:04:54 provision: a.shop.example.com: not converging import sd_4op4wbftvojwdif73hool3bhra: it is placed but not committed, and the row on this box has no import gate
2026/10/20 23:04:54 provision: a.shop.example.com: not converging import sd_62tiu5k27r5qkdkv4t7utq6une: it is placed but not committed, and the row on this box has no import gate
2026/10/20 23:04:54 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:54 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/20 23:04:54 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:54 provision: a.shop.example.com: import sd_aabyuykmbejcfkwiq6q3lmlwdi committed: its gate is cleared and its journal row dropped
2026/10/20 23:04:54 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:54 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:54 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:54 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/20 23:04:54 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_fsqbemzoblgqoulxl4k2mk7epy: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_fsqbemzoblgqoulxl4k2mk7epy rolled back (no box had swapped it)
2026/10/20 23:04:55 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/20 23:04:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:55 provision: removed instance route acme.go.tito.io (its seed sd_fgd5zmlwb6ljvyuxf3p657ysmy was aborted); the next pass rolls it back
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_fgd5zmlwb6ljvyuxf3p657ysmy: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_fgd5zmlwb6ljvyuxf3p657ysmy rolled back (no box had swapped it)
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_wlzw5ognekrym2jealucrlsqcu has a row this pass may not remove; leaving the seed aborted
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_2t47rb6coqi2p4oeqjwojape2i rolled back (no box had swapped it)
2026/10/20 23:04:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:55 provision: removed instance route acme.go.tito.io (its seed sd_i3d45bob7vfs46uc7vw36ldfuq was aborted); the next pass rolls it back
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_i3d45bob7vfs46uc7vw36ldfuq has no route on this box: its local data is removed
2026/10/20 23:04:55 provision: acme.go.tito.io: aborted seed sd_i3d45bob7vfs46uc7vw36ldfuq rolled back (no box had swapped it)
2026/10/20 23:04:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_qluxguypm66kjxbb25edowrfyq (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qluxguypm66kjxbb25edowrfyq rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qluxguypm66kjxbb25edowrfyq is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_s3rq7bmlk6cvykjvxjdjdwop2m (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_s3rq7bmlk6cvykjvxjdjdwop2m rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_s3rq7bmlk6cvykjvxjdjdwop2m is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_gbdyyzpr6vrstllviglcoxmpsq (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_gbdyyzpr6vrstllviglcoxmpsq rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_gbdyyzpr6vrstllviglcoxmpsq: the host's replica is left alone: its record no longer names this seed
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_gbdyyzpr6vrstllviglcoxmpsq is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_kxh2zpjl7tur5m7wyxfagyyd5a (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_kxh2zpjl7tur5m7wyxfagyyd5a rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_kxh2zpjl7tur5m7wyxfagyyd5a rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_kxh2zpjl7tur5m7wyxfagyyd5a is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_n76b3vqbuizaa3sw354nxeejae (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_n76b3vqbuizaa3sw354nxeejae rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_y3rnb5pqjg67re6pupzuqvychq (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_y3rnb5pqjg67re6pupzuqvychq is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_qjyrz5flidla4s4qd5flr6miya (the original route is journaled)
2026/10/20 23:04:55 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qjyrz5flidla4s4qd5flr6miya left alone this pass: its record could not be read
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_mans67peanjq5azaowgspxcqlu (the original route is journaled)
2026/10/20 23:04:55 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_mans67peanjq5azaowgspxcqlu left alone this pass: its record could not be read
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_qblpsyeotdwq2cua2gr7sqjbni (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qblpsyeotdwq2cua2gr7sqjbni: close the import gate: constraint failed: injected (1811)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qblpsyeotdwq2cua2gr7sqjbni rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qblpsyeotdwq2cua2gr7sqjbni is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_riuywqdnaa6t4dozmnkl6mbhee (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_riuywqdnaa6t4dozmnkl6mbhee: close the import gate: constraint failed: injected (1811)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_riuywqdnaa6t4dozmnkl6mbhee rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_riuywqdnaa6t4dozmnkl6mbhee is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_xq6nzw2hviek6syps7qhp23npq (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_xq6nzw2hviek6syps7qhp23npq rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_xq6nzw2hviek6syps7qhp23npq rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_xq6nzw2hviek6syps7qhp23npq is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_7k4auhvn7gnsq4ak5ftg5f4sue (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7k4auhvn7gnsq4ak5ftg5f4sue rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7k4auhvn7gnsq4ak5ftg5f4sue is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_7mfsk3v75buukzxyhkvy7zxawy (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7mfsk3v75buukzxyhkvy7zxawy: retire its instance key: injected failure at retire-key
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7mfsk3v75buukzxyhkvy7zxawy rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7mfsk3v75buukzxyhkvy7zxawy is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_776ysetq6gltc2dlujvpodm4cu (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_776ysetq6gltc2dlujvpodm4cu rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_776ysetq6gltc2dlujvpodm4cu is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_vpxptexm6qb6gep4x5djomemb4 (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_vpxptexm6qb6gep4x5djomemb4: remove its local data: injected failure at remove-local
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_vpxptexm6qb6gep4x5djomemb4 rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_vpxptexm6qb6gep4x5djomemb4 is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_eeui7jq4goptobiwtnj2dpm44q (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_eeui7jq4goptobiwtnj2dpm44q rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_eeui7jq4goptobiwtnj2dpm44q is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_alglttimmgazrsluzzrbe75kou (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_alglttimmgazrsluzzrbe75kou: remove its local data: injected failure at remove-local-done
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_alglttimmgazrsluzzrbe75kou rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_alglttimmgazrsluzzrbe75kou is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_a3re5dfj5rusl7aqcdafk3hz2i (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_a3re5dfj5rusl7aqcdafk3hz2i rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_a3re5dfj5rusl7aqcdafk3hz2i is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_5oax2nlm6vsk22fzyfierptjlm (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_5oax2nlm6vsk22fzyfierptjlm: restore the original route: constraint failed: injected (1811)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_5oax2nlm6vsk22fzyfierptjlm rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_5oax2nlm6vsk22fzyfierptjlm is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_uummfpbnds5sj46wits6llrnty (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_uummfpbnds5sj46wits6llrnty: restore the original route: constraint failed: injected (1811)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_uummfpbnds5sj46wits6llrnty rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_uummfpbnds5sj46wits6llrnty is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_ykqch77uuzln5fqva2m2rifldu (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_ykqch77uuzln5fqva2m2rifldu is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_s72i4v6mvb7bpq63kpzdxblucm (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_s72i4v6mvb7bpq63kpzdxblucm rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_s72i4v6mvb7bpq63kpzdxblucm: delete its snapshot: injected failure at delete-snapshot
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_s72i4v6mvb7bpq63kpzdxblucm is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_zlqn35cx5wmjd3f5fgrxesgeku (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_zlqn35cx5wmjd3f5fgrxesgeku rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_zlqn35cx5wmjd3f5fgrxesgeku is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_7nkezf2hczdu34fhtyymwtnb64 (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7nkezf2hczdu34fhtyymwtnb64 rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7nkezf2hczdu34fhtyymwtnb64: delete the host's replica: injected failure at delete-replica
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7nkezf2hczdu34fhtyymwtnb64 is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_p2hufxqiqkswfwrfpn3yedliuu (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_p2hufxqiqkswfwrfpn3yedliuu rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_p2hufxqiqkswfwrfpn3yedliuu is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_lpdr26ql23sbgumbvo4i2tr4fi (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_lpdr26ql23sbgumbvo4i2tr4fi rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_lpdr26ql23sbgumbvo4i2tr4fi: retire its journal row: constraint failed: injected (1811)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_lpdr26ql23sbgumbvo4i2tr4fi is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_qc4vcxfr3rqixzaom4objienbm (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qc4vcxfr3rqixzaom4objienbm rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qc4vcxfr3rqixzaom4objienbm: retire its journal row: constraint failed: injected (1811)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qc4vcxfr3rqixzaom4objienbm is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_sxhkegz5azv5juvdgjw6mzhmca (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_sxhkegz5azv5juvdgjw6mzhmca rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_sxhkegz5azv5juvdgjw6mzhmca is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: mark import sd_sxhkegz5azv5juvdgjw6mzhmca rolled back: injected failure at cas
2026/10/20 23:04:55 provision: a.shop.example.com: aborted seed sd_sxhkegz5azv5juvdgjw6mzhmca rolled back (no box had swapped it)
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_h3z4ndtv572hsrgprmq6spc2sm (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_h3z4ndtv572hsrgprmq6spc2sm rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_h3z4ndtv572hsrgprmq6spc2sm is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: aborted seed sd_h3z4ndtv572hsrgprmq6spc2sm rolled back (no box had swapped it)
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_yffl43c4pafinqo57mcsn5akm4 (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_yffl43c4pafinqo57mcsn5akm4 rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_yffl43c4pafinqo57mcsn5akm4 rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_yffl43c4pafinqo57mcsn5akm4 rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_yffl43c4pafinqo57mcsn5akm4 is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_t2mjzy5y6d6dtp2ayno3a6ht54 (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_t2mjzy5y6d6dtp2ayno3a6ht54 rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_t2mjzy5y6d6dtp2ayno3a6ht54 is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_2fmnr2d5bxpqldfri7lzpxpqym (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_2fmnr2d5bxpqldfri7lzpxpqym rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_2fmnr2d5bxpqldfri7lzpxpqym is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_qpjb6iuz4fbm7evnn3dytdcsei (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qpjb6iuz4fbm7evnn3dytdcsei rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qpjb6iuz4fbm7evnn3dytdcsei is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_o6bqjvg3i5ueyogacar72vysge (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_o6bqjvg3i5ueyogacar72vysge rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_o6bqjvg3i5ueyogacar72vysge is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_dem4uuvs5kpvpsp27xwurbvq7i (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_dem4uuvs5kpvpsp27xwurbvq7i rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_dem4uuvs5kpvpsp27xwurbvq7i is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_7e6dxdg522mxatu5lax6gvl4xu (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7e6dxdg522mxatu5lax6gvl4xu rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_7e6dxdg522mxatu5lax6gvl4xu is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_4ncvozxbo6arl5aqvvcxvhjkqa (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_4ncvozxbo6arl5aqvvcxvhjkqa rolled back to its original route
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_4ncvozxbo6arl5aqvvcxvhjkqa is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_pys6ka7szgq2h7nsk5jwd2fbfa (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_pys6ka7szgq2h7nsk5jwd2fbfa has no route on this box: its local data is removed and no route is put back
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_pys6ka7szgq2h7nsk5jwd2fbfa is cleaned up and its journal row retired
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_otc5zqpzvmshrczrys56xqfwmu (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_wmg37jiuidpwix4j5ojcp3d5cm (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: swapped for import sd_qm6k4eqtup4u75vzsfky5km2tu (the original route is journaled)
2026/10/20 23:04:55 provision: a.shop.example.com: import sd_qm6k4eqtup4u75vzsfky5km2tu cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_f5syiorhhny6p633f7noncr2ta (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_f5syiorhhny6p633f7noncr2ta is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/20 23:04:56 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/20 23:04:56 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_wmeyua3znlfwdmvvwrs2pyolqa (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_z2ix7t5l74d7iak6rasurkl7i4 (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_rt45zgf3g463m3mjiupblibvli (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_g3qkpkggspeui5se4hpqrxzigy (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_ffoohajm3xhi6ffy4nzvjzzaj4 (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ffoohajm3xhi6ffy4nzvjzzaj4 rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_e4qjoujegv3zyyrs5byw3xbnmy (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_e4qjoujegv3zyyrs5byw3xbnmy has no route on this box: its local data is removed and no route is put back
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_e4qjoujegv3zyyrs5byw3xbnmy is cleaned up and its journal row retired
2026/10/20 23:04:56 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_frrr552zrjrnkazwvexfvjgaui (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_frrr552zrjrnkazwvexfvjgaui: remove its local data: injected failure at remove-local
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_frrr552zrjrnkazwvexfvjgaui is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_dker2gqaum552evrtw3qokutx4 (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_dker2gqaum552evrtw3qokutx4: a route appeared at the host, so its local database is left and the rollback waits
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_66k6dkkpolr662x2wn2uo4xs7i (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_66k6dkkpolr662x2wn2uo4xs7i rollback deferred: no fence generation: registry busy
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_von525ujmdhug7pyj26zay45mu (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_von525ujmdhug7pyj26zay45mu rollback deferred: no fence generation: the generation source answered 0
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_p77mdvp2vu4hfbadp2c7r7knca (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_s7gsfuwqbi4uo3d7z34lzml2v4 (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_cs34gkzbq3ecgnbi56xgoymtgm (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/20 23:04:56 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_vz4gy3udxwhjqdfp4kzhwmg2i4 (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_vz4gy3udxwhjqdfp4kzhwmg2i4 rolled back to its original route
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_vz4gy3udxwhjqdfp4kzhwmg2i4 is cleaned up and its journal row retired
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_ca24r6slkg56jjhefa6xs535zm (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ca24r6slkg56jjhefa6xs535zm rolled back to its original route
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ca24r6slkg56jjhefa6xs535zm is cleaned up and its journal row retired
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_ve7m3qfxg3jgww2zapm6tkgtki (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ve7m3qfxg3jgww2zapm6tkgtki rolled back to its original route
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ve7m3qfxg3jgww2zapm6tkgtki is cleaned up and its journal row retired
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_vuhokbqfzbsxd46oar6fnrndiu (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_vuhokbqfzbsxd46oar6fnrndiu: retire its instance key: the env file is a symlink
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_vuhokbqfzbsxd46oar6fnrndiu rolled back to its original route
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_vuhokbqfzbsxd46oar6fnrndiu is cleaned up and its journal row retired
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_xy7lp7b76muvta7lsynh6zmhg4 (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_zazativysqvsrbv4pejhoteg4m (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_5zzbiyixawev7augqcer4pq3qy refused: there is no route at a.shop.example.com to replace
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_k52wiocejmwj6ofl3any6gsqym refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_tzfacyn4th3wkai5bgaqprwgwi refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_wsjvxxd5dt5driodlqtrgpjh2i refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_27cwmk23qlu2jcdk2m54dyq4iy refused: the route belongs to app other
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_7l2lxwz2lqa2sbr3623ar5raxy refused: the route is filed under another account
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_q4oaezgemch3uuwwnaislkcr3i refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_lcxnzz6bbhbko2dazzm42k5gvm refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_xpznnyrntbk3hj4his63tfx3yq refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_cranjlhnf5l2oz3v4d3ocy3dhy refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_nhktrzdzoak642unyl4xruvr7i refused: the route is not an address route this import can take over (socket)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_pjzanehq47nrwhq4ejhmmty73a refused: the route is not an address route this import can take over (no address)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ejulokylphwi3ynftem4kpdjke refused: the route is not an address route this import can take over (provisioned)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_tetog3ecddgnzsfoysvioysdzi refused: the route is not an address route this import can take over (kind static)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_l7s6j54lpztkzchqc6su3iumme refused: the route is not an address route this import can take over (backing)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_c77j3klj7jnbe5nnkuhybx446i refused: the route is not an address route this import can take over (tunnel)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_z5rkdsmcmbbjdhyqiymfwtuvi4 refused: the route is not an address route this import can take over (caps)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_azw7oj2r4ah2zy3wxjqcfhzksu refused: the route is not an address route this import can take over (platform)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_dawj23trkxci4uvrtdmuknpgda refused: the route is not an address route this import can take over (canary)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_jfygdtt3fnnlqlppd2prr3og34 refused: the route is not an address route this import can take over (kind sidecar)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_rsl4oymai2xlumo2s3wsjdrede refused: the route is not an address route this import can take over (region)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_dn46rhz4bh6bxrhgrm2vbnfloq refused: the route is not an address route this import can take over (fleet_box)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ey3urhflnby7r4v5vvgheblgy4 refused: the route is not an address route this import can take over (hibernate)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_c5tfnqikewn33umkglcecal2ga refused: the route is not an address route this import can take over (claim_owner)
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_y7xk4lbv4nislplk3kiqvk3yre refused: this box does not run instances nested
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_ccjyjufk3xkngryfgypcmivipq refused: this box does not run instances nested
2026/10/20 23:04:56 provision: a.shop.example.com: import sd_v2suivt4d3rer25gspvo47v4nu refused: claim control is on for this box
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_o46lfdco3l5fq3rat7eljejn5m (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_zvdqnpvp2ghwf2mbibtmkblshi (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/20 23:04:56 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_c6wuaqdere73c3azbzbbihxzuy: its verify hash is not a sha256
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_immk2xuvrftlhltlctseh5lm64: its verify hash is not a sha256
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_p3ylvleyj4unfaemo2gjbumxbi: its verify hash is not a sha256
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/20 23:04:56 provision: A.shop.example.com/..: not swapping for import sd_jtwbmwl3lyslnpilnyqlivlk5y: its host or seed id is malformed (seeds: not a host)
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_u4quvzkavd4ffznzqfbbx35kqy: its record does not describe a nested, hibernating instance
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_jjdservvmt5zkx4vet6d23o4de: its record does not describe a nested, hibernating instance
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_iczqjjq7ca6d6tjqdxjms2xn44: its record does not describe a nested, hibernating instance
2026/10/20 23:04:56 provision: a.shop.example.com: not swapping for import sd_fff4fvrxsvicvzkbpjlyvu7tdm: its record does not describe a nested, hibernating instance
2026/10/20 23:04:56 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_ilu7zzarfemi2svnjdqfwpgcnq (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_bgp2ep2gk2gwdqsgpo46zy555a (the original route is journaled)
2026/10/20 23:04:56 provision: a.shop.example.com: swapped for import sd_prfpafgxlfdxmk62n3pg6s6osy (the original route is journaled)
2026/10/20 23:04:57 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/20 23:04:57 provision: dry-run: would consider swapping a.shop.example.com for import sd_b74zc4t24cweugtuonp5l5giyq
2026/10/20 23:04:57 provision: a.shop.example.com: import sd_yfrloa7g3uc6ba3kdchwtw7y3m rolled back to its original route
2026/10/20 23:04:57 provision: a.shop.example.com: import sd_yfrloa7g3uc6ba3kdchwtw7y3m: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 23:04:57 provision: a.shop.example.com: import sd_yfrloa7g3uc6ba3kdchwtw7y3m is cleaned up and its journal row retired
2026/10/20 23:04:57 provision: a.shop.example.com: import sd_fg4qn6lqczorvndhtzf5iyqxhu left alone: the import journal holds seed sd_msn5qhgiyu2r3vjrge64regzlu at swapped
2026/10/20 23:04:57 provision: a.shop.example.com: not minting import sd_wgy2ded4oahm3zuqr7vdwkoiiy: it is swapped but not committed, and only its swap makes its row
2026/10/20 23:04:57 provision: a.shop.example.com: not minting import sd_2ygheqmujwepmoavtfw6vuf7za: it is placed but not committed, and only its swap makes its row
2026/10/20 23:04:57 provision: a.shop.example.com: swapped for import sd_mgzxuuguijueybqtlwr735kbia (the original route is journaled)
2026/10/20 23:04:57 provision: a.shop.example.com: not minting import sd_mgzxuuguijueybqtlwr735kbia: it is swapped but not committed, and only its swap makes its row
2026/10/20 23:04:57 provision: a.shop.example.com: not minting import sd_mgzxuuguijueybqtlwr735kbia: it is placed but not committed, and only its swap makes its row
2026/10/20 23:04:57 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:04:57 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/20 23:04:57 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/20 23:04:57 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/20 23:04:57 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/20 23:04:57 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/20 23:04:57 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 23:04:57 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/20 23:04:57 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/20 23:04:57 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 23:04:57 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:04:57 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/20 23:04:57 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/20 23:04:57 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:04:57 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/20 23:04:57 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:04:57 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:04:57 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/20 23:04:57 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 23:04:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:04:57 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/20 23:04:57 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:04:57 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 23:04:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:57 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/20 23:04:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:57 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 23:04:57 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 23:04:57 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 23:04:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:04:57 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 23:04:57 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 23:04:57 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL	github.com/carlosframework/platform/internal/provision	17.012s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.008s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	5.402s
ok  	github.com/carlosframework/platform/internal/relay	7.229s
ok  	github.com/carlosframework/platform/internal/release	23.394s
ok  	github.com/carlosframework/platform/internal/rollout	3.650s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.004s
ok  	github.com/carlosframework/platform/internal/rootaws	0.007s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.058s
ok  	github.com/carlosframework/platform/internal/rootstate	0.027s
ok  	github.com/carlosframework/platform/internal/runs	0.566s
ok  	github.com/carlosframework/platform/internal/s3compat	0.004s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.499s
ok  	github.com/carlosframework/platform/internal/seeds	0.011s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	8.355s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	3.622s
ok  	github.com/carlosframework/platform/internal/status	0.060s
ok  	github.com/carlosframework/platform/internal/steering	0.005s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.205s
ok  	github.com/carlosframework/platform/internal/svcrole	0.002s
ok  	github.com/carlosframework/platform/internal/telemetry	0.003s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.004s
ok  	github.com/carlosframework/platform/internal/unixdial	0.002s
ok  	github.com/carlosframework/platform/internal/updatewords	0.004s
ok  	github.com/carlosframework/platform/internal/usage	0.004s
ok  	github.com/carlosframework/platform/internal/version	0.001s
ok  	github.com/carlosframework/platform/internal/vet	1.554s
FAIL
make: *** [Makefile:18: test] Error 1

amadan: step gate failed: exit status 2

amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/harness/RUNLOG.md b/harness/RUNLOG.md
index b24fe894f..09e935d9d 100644
--- a/harness/RUNLOG.md
+++ b/harness/RUNLOG.md
@@ -2260,3 +2260,88 @@ replica objects under `harness-data-ie/instances/shop-large.dev.harness.test/` (
(the lifted tombstone). Root back to 4.5 GB free. **Finding R10-2 (for the plan, not a defect): a finished move
leaves the source region's whole replica history and the parked local LTX in place**: for a 3.9 GiB history that is
~8 GiB per moved instance in IE until the Cleanup recipe runs.
+
+### B5. Post-open nesting on dennis (M3): shop-small and staleapp PASS; shop-large OUTSTANDING (watch stopped for G10)
+
+Nested exactly at the 1-hour grace: **shop-small migrated 22:37:41Z, staleapp 22:47:41Z** (`carlos status --layout`:
+`nested migrated at ...: moved with it`); each nested dir now holds `launch.run.json` (the launch.\* file absent while
+flat), the files tree, db, `<host>.env`, `<host>.config.env`; `/report` after nesting contiguous (shop-small `bg` uk
+587-10493, staleapp 1182-9937), keys unchanged, `worker_writes_failed 0`. The 1 s readiness watch
+(`blocks/r10-nest-watch.host.sh`) was stopped at 23:01Z on the coordinator's word (host needed for G10) and its
+per-second log was lost with it, so the second-stop durations of these two are not measured this run (Run 9: 24 s
+for a 4 MB instance).
+**Outstanding: shop-large's nesting** (grace due 23:02:41Z; the snapshot stopped every container at 23:01:29Z, so it
+did not happen). To check later: `bash /root/harness/snapshot.sh restore post-move-r10`, then the grace restarts from
+the first wake after the restore (`layout: deferred until asleep -> shop-large... (stopped for the move in 1h0m0s ...)`
+on dennis); run `blocks/r10-nest-watch.host.sh <HH:MM about 65 min later> shop:shop-large` through hssm and read the
+`/ready` transitions (the second stop for a 636 MiB / 3.5 GiB-history instance) and `carlos status --layout`.
+
+## Run 10 summary
+
+| part | result |
+|---|---|
+| (A3) five console-upgrade root tests, real root on the host | **PASS 5/5** |
+| (A1) normal `system update` v0.28.5 -> candidate, leo/dennis/sophie's router | **PASS**, no re-arm, no box step (21:05:23-21:09:47Z) |
+| (A1) sophie's console `install-console --upgrade --from <running sha>` | **PASS** (prev = old build, healthz 200, console-report ok); second run **Already** |
+| (A2) from dev's state today: leo and sophie by re-arm, dennis normal | **PASS** |
+| (A2) console `--upgrade` FIRST from a plain-installed v0.28.4 console | **PASS, works; E1 not needed** |
+| (B) setup, first wake | **PASS**: config.env at first wake (defect 6 fixed) |
+| (B1) shop-small, doors back to back | **PASS**, ~20 s offline (console 17.6 s), no retry, no MV-O178 |
+| (B2) shop-large 636 MiB, 3.5 GiB history, 101 MiB files, legacy dir, timers | **PASS**, **296 s offline** (start 4, seal 69, flip 85, open 4, first wake 133); console says 158 s |
+| (B3) abort after flip | **PASS**, ~23 s, nothing lost |
+| (B4) 3 min pause seal -> flip | **PASS**, flip first try; tombstone never moved by the 15-s refresh |
+| (B5) nesting at grace | shop-small, staleapp PASS; shop-large outstanding |
+
+No new code defect. Run 9's defects 5, 6, 7 and 8 are fixed in e0986eab as observed. Findings: R10-1 (IE edges 404
+for up to ~20 s after the target first serves; `internal/edge/edge.go:654` drops non-ready rows, backhaul waits for
+the target's edges file), R10-2 (a finished move leaves the source's whole replica history in data-ie and the parked
+local LTX on the source: ~8 GiB per large instance), R10-3 (`last_move.offline_s` and the CLI's "It was offline for N
+seconds" end at open, `internal/provision/offline_move.go:317-319,329-331`, so they leave out the target's first wake:
+133 s of B2's 296 s). Harness notes: the console's upload limit paces four ships a minute; B2 filled the host disk
+to 98% (cleared by removing this run's own test data, recorded in B2).
+
+## Run 10 corrections
+
+### To `claim-dev-cohort1-runbook` and the README
+
+- **R10-A (replaces R9-4's BLOCKED console block).** Sophie's guarded console onto the release, after the router is
+ on it: `install-console --identity identity.<tag>.json --source /opt/carlos/versions/<CV>/console --bucket ...
+ --aws-region ... --public-key "$PUB" --upgrade --from <sha256 of /proc/<console pid>/exe> --dry-run`, the same
+ without `--dry-run`, `systemctl restart console.service`, check exe sha and healthz, `console-report --expect-revision
+ <current roster revision>`. Pass: `upgraded true`, `console.prev` = the old build; a rerun answers
+ `already_installed true`. Works from dev's state today (both slots v0.28.4) and from E1's.
+- **R10-B (G4 step 3).** The agent's cache can arrive anywhere inside the 5 m spread (Run 10 leo: ~5 min; Run 9: 49 s);
+ the 10-minute wait is right, do not stage by hand before it.
+- **R10-C.** From v0.28.5 onwards the next release is the normal `system update` on every box, armed or not, then the
+ console by R10-A (router first).
+
+### To the offline-move "Morning runbook outline"
+
+- **M2 (replace).** With v0.28.6, flip and open were accepted first time even 3 min after the seal. If a door answers
+ `the report from <box> is not current ...` (MV-O178), retry it within a minute; it is never a process.
+- **M5 and M6 (drop, keep as checks).** config.env is there at the first wake; the source no longer re-creates
+ `<host>.env` (check `ls -A /data/.instances/<host>/` is empty after finish).
+- **M10 (replace the budget).** Small instance: ~20 s offline. Large instance: ~5 min, driven by the replica HISTORY,
+ not the database: seal copies it, flip lands it, the first request on the target promotes and restores it. Budget
+ 5-6 min per flagship large instance (history up to 3.9 GiB), one at a time, plus operator gaps.
+- **M11 (new).** Make the first request through the target box straight after open. On a large instance expect 503s
+ at the 30 s wake bound for ~2 min while it restores; do not abort. Requests through the source region's edges 404
+ for up to ~20 s after the target first serves (R10-1).
+- **M12 (new).** After open, `status` says `Its report is not current` for every box: expected (no door reads them
+ from open on).
+- **M13 (new).** The CLI's "It was offline for N seconds" is request to open; add the first wake for the real figure.
+- **M14 (new).** A stale flat legacy dir `/data/<host>/` on the source needs nothing: the seal passes and the retire
+ parks it in `.offline-moves/<host>/<id>/source/<host>/`.
+- **M15 (new, R10-2).** Plan disk and bucket headroom: the target's data bucket gets the whole history, the source
+ keeps its replica and parked LTX until the Cleanup recipe; on scripts, judge doors by exit code (0 done, 3 aborted),
+ not text: successful start, open and abort print "Waiting for ..." as progress.
+
+## State at the end of Run 10 (23:04Z), host handed to G10
+
+Live = snapshot **`post-move-r10`** (23:01:29Z, all five containers and the console volume): every box harness v0.28.8
+(= e0986eab), router/stable and canary v0.28.8, sophie's console `9887a9a4...` by `--upgrade` (prev `dd24213d...`),
+claims off; shop-small, staleapp, shop-large served from dennis (first two nested, shop-large flat), rollbackapp and
+wakecheck on sophie. New snapshots: `post-candidate`, `post-move-r10`. Host disk 3.2 GB free after the snapshot (95%);
+G10 should check `df -h /` first. Host-only: `/root/harness/release/v0.28.8` and `/home/operator/release-v0.28.8` (this
+run), Run 6's moved aside as `*-run6-8a313548`; sampler logs `/root/harness/r10-*`. Host TTL 2026-10-21T12:00Z.
+DOCS-T1 scratch (`$TMPDIR/r10src` worktree, build outputs, patch, scripts) removed.
diff --git a/harness/evidence/run10/nesting.log b/harness/evidence/run10/nesting.log
new file mode 100644
index 000000000..e5c8a8177
--- /dev/null
+++ b/harness/evidence/run10/nesting.log
@@ -0,0 +1,30 @@
+[hssm] i-06a1ec144aa5226fb 1ebaac5c-7fda-478d-9804-a7b0ffbfb44d Success exit=0
+watch stopped
+23:01:18
+2026-10-20T21:57:47+00:00 dennis carlos[1359]: 2026/10/20 21:57:47 layout: deferred until asleep -> shop-small.dev.harness.test (awake (stopped for the move in 39m53s unless it sleeps first)), staleapp.dev.harness.test (awake (sto
+2026-10-20T21:58:55+00:00 dennis carlos[1359]: 2026/10/20 21:58:55 layout: deferred until asleep -> shop-small.dev.harness.test (awake (stopped for the move in 38m45s unless it sleeps first)), staleapp.dev.harness.test (awake (sto
+2026-10-20T22:00:20+00:00 dennis carlos[1359]: 2026/10/20 22:00:20 layout: deferred until asleep -> shop-small.dev.harness.test (awake (stopped for the move in 37m20s unless it sleeps first)), staleapp.dev.harness.test (awake (sto
+2026-10-20T22:00:24+00:00 dennis carlos[1359]: 2026/10/20 22:00:24 layout: deferred until asleep -> shop-small.dev.harness.test (awake (stopped for the move in 37m17s unless it sleeps first)), staleapp.dev.harness.test (awake (sto
+2026-10-20T22:02:42+00:00 dennis carlos[1359]: 2026/10/20 22:02:42 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 1h0m0s unless it sleeps first)), shop-small.dev.harness.test (awake (s
+2026-10-20T22:03:36+00:00 dennis carlos[1359]: 2026/10/20 22:03:36 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 59m6s unless it sleeps first)), shop-small.dev.harness.test (awake (st
+2026-10-20T22:07:40+00:00 dennis carlos[1359]: 2026/10/20 22:07:40 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 55m1s unless it sleeps first)), shop-small.dev.harness.test (awake (st
+2026-10-20T22:17:40+00:00 dennis carlos[1359]: 2026/10/20 22:17:40 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 45m1s unless it sleeps first)), shop-small.dev.harness.test (awake (st
+2026-10-20T22:27:40+00:00 dennis carlos[1359]: 2026/10/20 22:27:40 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 35m1s unless it sleeps first)), shop-small.dev.harness.test (awake (st
+2026-10-20T22:37:41+00:00 dennis carlos[1359]: 2026/10/20 22:37:41 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 25m1s unless it sleeps first)), staleapp.dev.harness.test (awake (stop
+2026-10-20T22:47:41+00:00 dennis carlos[1359]: 2026/10/20 22:47:41 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 15m1s unless it sleeps first))
+2026-10-20T22:57:41+00:00 dennis carlos[1359]: 2026/10/20 22:57:41 layout: deferred until asleep -> shop-large.dev.harness.test (awake (stopped for the move in 5m1s unless it sleeps first))
+BOX HOST LAYOUT REASON
+ada-letterpress (nested by default) rollbackapp.dev.harness.test nested —
+ada-letterpress (nested by default) wakecheck.dev.harness.test nested —
+noor-marquetry (nested by default) shop-large.dev.harness.test flat —
+noor-marquetry (nested by default) shop-small.dev.harness.test nested migrated at 2026-10-20T22:37:41Z: moved with it: shop-small.dev.harness.test
+noor-marquetry (nested by default) staleapp.dev.harness.test nested migrated at 2026-10-20T22:47:41Z: moved with it: staleapp.dev.harness.test
+
+WARNING: noor-marquetry runs nested instances beside flat, foreign or external ones, which share the agent's user and its view of /data. Nested isolation on this box is not in force until none of those remains.
+-- shop-small.dev.harness.test: .activator-shop-small.dev.harness.test.db-litestream launch.run.json shop-small.dev.harness.test shop-small.dev.harness.test.config.env shop-small.dev.harness.test.db shop-small.dev.harness.test.db-shm shop-small.dev.harness.test.db-wal shop-small.dev.harness.test.env
+-- staleapp.dev.harness.test: .activator-staleapp.dev.harness.test.db-litestream launch.run.json staleapp.dev.harness.test staleapp.dev.harness.test.config.env staleapp.dev.harness.test.db staleapp.dev.harness.test.db-shm staleapp.dev.harness.test.db-wal staleapp.dev.harness.test.env
+-- shop-large.dev.harness.test: /data/shop-large.dev.harness.test.db
+shop-small via dennis: region uk boot c7c62a40076f793a | bg/home n=586 1-586 bg/uk n=9907 587-10493 once/uk n=1 0-0 tick/home n=5 0-0 tick/uk n=83 0-0 worker/home n=293 1-293 worker/uk n=4965 294-5258 | ticks 88 once [('once-1', 1792532828, 1)] | pk 87a15ceb79258dcc fk c50a3417bca34ab5 | object probe/c7c62a40076f793a.txt | worker_failed 0
+staleapp via dennis: region uk boot dad9ce35a3a28f49 | bg/home n=1181 1-1181 bg/uk n=8756 1182-9937 tick/home n=9 0-0 tick/uk n=75 0-0 worker/home n=591 1-591 worker/uk n=4395 592-4986 | ticks 84 once [] | pk 00b8ffeae6df2174 fk b5327e8898a19c79 | object probe/dad9ce35a3a28f49.txt | worker_failed 0
+shop-large via dennis: region uk boot d6e42da16af84f8b | bg/home n=2886 1-2886 bg/uk n=6993 2887-9879 once/uk n=1 0-0 tick/home n=24 0-0 tick/uk n=60 0-0 worker/home n=1459 1-1459 worker/uk n=3493 1460-4952 | ticks 84 once [('once-1', 1792533507, 1)] | pk eac6dfc1cd29bf79 fk b8fc80ec801b0fdd | object probe/d6e42da16af84f8b.txt | worker_failed 6
+/dev/nvme0n1p1 59G 53G 3.9G 94% /
diff --git a/harness/evidence/run10/snap-post-move-r10.log b/harness/evidence/run10/snap-post-move-r10.log
new file mode 100644
index 000000000..282d78404
--- /dev/null
+++ b/harness/evidence/run10/snap-post-move-r10.log
@@ -0,0 +1,6 @@
+[hssm] i-06a1ec144aa5226fb c70e03e9-4961-4130-a9ff-6a12867de89d Success exit=0
+23:01:29
+leo: running failed=[] snapshots=pre-0285,e-refused-0285,post-0285,pre-move-r9,post-candidate,post-move-r10
+sophie-console volume snapshots: s7,pre-window,g4-fail-cc90d542,pre-window-seeded,g4-held-8376a468,g4-fail-8376a468,g4-parent-p-refused,rearm-released-v0.28.7,post-b5,post-8.1,g7-fail-8a313548,g7-f4-census,post-b5-465c3a08,post-8.1-465c3a08,g7-fail-465c3a08,post-b5-465c3a08-c8,post-8.1-465c3a08-c8,g7-fail-465c3a08-c8,g7-fail-465c3a08-ext4,resume-complete-ext4,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,e-refused-0285,post-0285,pre-move-r9,post-candidate,post-move-r10
+23:03:57
+/dev/nvme0n1p1 59G 54G 3.2G 95% /
diff --git a/harness/scenarios/cohort1/blocks/r10-nest-watch.host.sh b/harness/scenarios/cohort1/blocks/r10-nest-watch.host.sh
new file mode 100644
index 000000000..d82ed5202
--- /dev/null
+++ b/harness/scenarios/cohort1/blocks/r10-nest-watch.host.sh
@@ -0,0 +1,27 @@
+#!/bin/bash
+# Run 10 (B, M3): watch dennis nest each moved row at its 1-hour grace and time the second stop (on host, root).
+# r10-nest-watch.host.sh <until HH:MM UTC> <app>:<instance> [...]
+# Polls each host's /ready through dennis's edge about once a second; prints every change of answer (so a stop
+# shows as the first non-200 and the next 200), then the layout lines, `carlos status --layout` and each nested
+# directory (launch.* files included).
+set -uo pipefail
+UNTIL=$(date -u -d "$1" +%s); shift
+K=/run/harness/keys
+declare -A last since S
+for p in "$@"; do a=${p%%:*} i=${p#*:}; S[$i]=$(grep ^MOVEPROBE_SECRET= $K/$a.store.env | cut -d= -f2); last[$i]=; since[$i]=$(date +%s.%N); done
+ts() { date -u +%T.%3NZ; }
+while [ "$(date +%s)" -lt "$UNTIL" ]; do
+ for p in "$@"; do i=${p#*:}; H=$i.dev.harness.test
+ c=$(incus exec dennis -- curl -s -m 5 --cacert /root/harness-ca.pem -o /dev/null -w '%{http_code}' --resolve $H:443:127.0.0.1 https://$H/ready)
+ if [ "$c" != "${last[$i]}" ]; then
+ now=$(date +%s.%N); echo "$(ts) $i /ready $c (was ${last[$i]:-none} for $(echo "$now ${since[$i]}" | awk '{printf "%.1f", $1-$2}')s)"
+ last[$i]=$c; since[$i]=$now
+ fi
+ done
+ sleep 1
+done
+echo "== layout lines on dennis"
+incus exec dennis -- journalctl -u carlos-edge --since "-80min" --no-pager -o short-iso | grep -E "layout: (migrat|nested|moved|stopp)|instance (stopping|exited|woke)" | grep -E "$(printf '%s|' "$@" | sed 's/[a-z]*://g; s/|$//')" | cut -c1-250 | tail -40
+runuser -l operator -c 'carlos status --layout --console http://127.0.0.1:8090' 2>&1 | grep -v ALERT
+for p in "$@"; do i=${p#*:}; H=$i.dev.harness.test; echo "-- $H"; incus exec dennis -- bash -c "ls -la /data/instances/$H/ 2>&1; ls /data/$H.db /data/$H 2>&1 | head -3"; done
+for p in "$@"; do bash /home/operator/cohort1/blocks/r10-report.host.sh dennis $p; done