amadan
enginesim: spec edits for the final review and the new 3000-seed sweep (#335 plan 1)
§2.1 ruling R5 (grant records stale ten minutes after signing; re-signed every two minutes and on every change). §5.1: NULL counts as fenced only once the edge has loaded it, never for a new row; the launch gate and --public share a per-group lock. §5.2/§5.3: the freshness bound replaces the replay residuals; worst-case revoke delay about ten minutes plus one poll. §8: the sweep on a337fb28: 36 CAUGHT, 4 EXPECTED-MISS, none MISSED, ERROR or STALE; unmutated 0 of 3000.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 file changed,
+104
−72
docs/superpowers/specs/2026-10-21-fleet-internal-engines-design.md+104 −72
CI failed — run details
CI log
=== gate ===
.amadan/test-gate.sh
=== launchctx (0 s)
ok amadan.net/carlos/platform.git/launchctx 0.013s
? amadan.net/carlos/platform.git/launchctx/controlname [no test files]
? amadan.net/carlos/platform.git/launchctx/wireid [no test files]
=== vet (1 s)
=== gofmt (1 s)
gofmt -l .: clean
=== rest (124 s)
? github.com/carlosframework/platform/cmd/changelog [no test files]
ok github.com/carlosframework/platform/cmd/console 3.723s
ok github.com/carlosframework/platform/cmd/moveprobe 11.975s
ok github.com/carlosframework/platform/cmd/zddprobe 0.671s
ok github.com/carlosframework/platform/internal/activator 62.386s
ok github.com/carlosframework/platform/internal/agentsock 0.025s
ok github.com/carlosframework/platform/internal/alerting 0.007s
ok github.com/carlosframework/platform/internal/analytics 0.027s
ok github.com/carlosframework/platform/internal/appconfig 2.994s
ok github.com/carlosframework/platform/internal/apperr 0.178s
ok github.com/carlosframework/platform/internal/applog 0.222s
ok github.com/carlosframework/platform/internal/awsinv 0.003s
ok github.com/carlosframework/platform/internal/boxchoice 0.005s
ok github.com/carlosframework/platform/internal/boxid 0.988s
? github.com/carlosframework/platform/internal/boxid/boxidtest [no test files]
? github.com/carlosframework/platform/internal/boxid/internal/signtest [no test files]
ok github.com/carlosframework/platform/internal/boxvolumes 0.010s
ok github.com/carlosframework/platform/internal/caps 0.018s
ok github.com/carlosframework/platform/internal/certwarm 0.002s
ok github.com/carlosframework/platform/internal/cgroup 0.763s
ok github.com/carlosframework/platform/internal/changelog 0.660s
ok github.com/carlosframework/platform/internal/claimactivation 1.272s
ok github.com/carlosframework/platform/internal/clamd 0.064s
? github.com/carlosframework/platform/internal/cliflag [no test files]
? github.com/carlosframework/platform/internal/controlname [no test files]
? github.com/carlosframework/platform/internal/controlsock [no test files]
ok github.com/carlosframework/platform/internal/dbdoor 6.010s
ok github.com/carlosframework/platform/internal/dbdoor/dbdoortest 0.016s
ok github.com/carlosframework/platform/internal/dbverify 0.004s
ok github.com/carlosframework/platform/internal/dnsrec 0.003s
ok github.com/carlosframework/platform/internal/docsite 0.013s
ok github.com/carlosframework/platform/internal/domains 2.974s
ok github.com/carlosframework/platform/internal/doorkey 0.009s
ok github.com/carlosframework/platform/internal/economics 0.004s
ok github.com/carlosframework/platform/internal/edge 45.224s
? github.com/carlosframework/platform/internal/edgeproof [no test files]
ok github.com/carlosframework/platform/internal/edgesfile 0.021s
ok github.com/carlosframework/platform/internal/fleetapi 0.241s
ok github.com/carlosframework/platform/internal/gate 1.920s
ok github.com/carlosframework/platform/internal/genselect 0.034s
ok github.com/carlosframework/platform/internal/geo 0.017s
ok github.com/carlosframework/platform/internal/geoip 0.040s
ok github.com/carlosframework/platform/internal/historyreadback 0.270s
ok github.com/carlosframework/platform/internal/host 120.835s
ok github.com/carlosframework/platform/internal/hostactors 6.011s
ok github.com/carlosframework/platform/internal/hostactors/awsmembership 0.006s
ok github.com/carlosframework/platform/internal/hostbox 3.023s
ok github.com/carlosframework/platform/internal/hostclaim 0.858s
ok github.com/carlosframework/platform/internal/hostenv 0.006s
ok github.com/carlosframework/platform/internal/hostevidence 0.012s
ok github.com/carlosframework/platform/internal/hostexec 5.586s
ok github.com/carlosframework/platform/internal/hostfence 0.052s
ok github.com/carlosframework/platform/internal/hostfiles 10.230s
ok github.com/carlosframework/platform/internal/hostfloor 0.034s
ok github.com/carlosframework/platform/internal/hostguard 1.024s
ok github.com/carlosframework/platform/internal/hostops 2.165s
? github.com/carlosframework/platform/internal/hostops/fencerelease [no test files]
ok github.com/carlosframework/platform/internal/hostops/internal/fencerelease 0.006s
ok github.com/carlosframework/platform/internal/hostquarantine 0.003s
ok github.com/carlosframework/platform/internal/hostrelocate 0.636s
ok github.com/carlosframework/platform/internal/hostresolve 0.289s
ok github.com/carlosframework/platform/internal/hostwrite 0.005s
ok github.com/carlosframework/platform/internal/infraview 0.005s
ok github.com/carlosframework/platform/internal/instancectl 5.249s
ok github.com/carlosframework/platform/internal/instanceexec 2.831s
ok github.com/carlosframework/platform/internal/instancefs 0.006s
ok github.com/carlosframework/platform/internal/instancekey 0.005s
ok github.com/carlosframework/platform/internal/instanceupdates 0.007s
ok github.com/carlosframework/platform/internal/layout 1.813s
ok github.com/carlosframework/platform/internal/lbhealth 0.004s
ok github.com/carlosframework/platform/internal/lease 10.189s
ok github.com/carlosframework/platform/internal/lease/leasetest 0.516s
ok github.com/carlosframework/platform/internal/ledger 0.027s
ok github.com/carlosframework/platform/internal/mail 0.196s
ok github.com/carlosframework/platform/internal/maintenance 0.116s
ok github.com/carlosframework/platform/internal/maintenanceexec 5.592s
ok github.com/carlosframework/platform/internal/maintenanceguard 0.077s
ok github.com/carlosframework/platform/internal/metrics 0.012s
ok github.com/carlosframework/platform/internal/moves 21.592s
ok github.com/carlosframework/platform/internal/moves/archive 1.175s
ok github.com/carlosframework/platform/internal/objstore 0.277s
ok github.com/carlosframework/platform/internal/ops 0.173s
ok github.com/carlosframework/platform/internal/park 0.277s
ok github.com/carlosframework/platform/internal/plans 0.005s
ok github.com/carlosframework/platform/internal/privatefile 0.006s
2026/10/21 21:02:56 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/21 21:02:56 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/21 21:02:56 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/21 21:02:56 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/21 21:02:56 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/21 21:02:56 provision: an app's records could not be listed: they are skipped
2026/10/21 21:02:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:02:56 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/21 21:02:56 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/21 21:02:56 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/21 21:02:56 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/21 21:02:56 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/21 21:02:56 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/21 21:02:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 21:02:56 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/21 21:02:56 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 21:02:56 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/21 21:02:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 21:02:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 21:02:56 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/21 21:02:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 21:02:56 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/21 21:02:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:56 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/21 21:02:56 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/21 21:02:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 21:02:56 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/21 21:02:56 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 21:02:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 21:02:57 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/21 21:02:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:02:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:02:57 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:02:57 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 21:02:57 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:02:57 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:02:57 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/21 21:02:57 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/21 21:02:57 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/21 21:02:57 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/21 21:02:57 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 21:02:57 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:57 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged acme.go.tito.io channel stable -> edge
2026/10/21 21:02:59 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/21 21:02:59 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/21 21:02:59 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/21 21:02:59 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged acme.go.tito.io hibernate false -> true
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged acme.go.tito.io status-named false -> true
2026/10/21 21:02:59 provision: converged acme.go.tito.io status-named true -> false
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 21:02:59 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 21:02:59 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 21:02:59 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 21:02:59 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/21 21:02:59 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/21 21:02:59 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/21 21:02:59 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/21 21:02:59 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/21 21:02:59 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:02:59 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 21:02:59 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/21 21:02:59 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/21 21:02:59 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 21:02:59 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/21 21:02:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 21:02:59 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/21 21:02:59 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/21 21:02:59 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 21:02:59 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/21 21:02:59 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 21:02:59 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/21 21:02:59 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 21:02:59 provision: converged acme.go.tito.io channel stable -> edge
2026/10/21 21:02:59 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 21:02:59 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/21 21:02:59 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/21 21:02:59 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/21 21:02:59 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 21:02:59 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 21:02:59 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/21 21:02:59 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/21 21:02:59 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/21 21:02:59 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/21 21:02:59 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/21 21:02:59 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/21 21:02:59 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/21 21:02:59 provision: dry-run: would converge owned.go.tito.io seed
2026/10/21 21:02:59 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 21:02:59 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/21 21:02:59 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/21 21:02:59 provision: converged owned.go.tito.io channel stable -> edge
2026/10/21 21:02:59 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/21 21:02:59 provision: converged owned.go.tito.io hibernate false -> true
2026/10/21 21:02:59 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/21 21:02:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/21 21:02:59 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/21 21:02:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/21 21:02:59 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: removed retired static route site.go.tito.io (record gone)
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/21 21:03:00 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/21 21:03:00 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:00 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/21 21:03:00 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/21 21:03:00 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 21:03:00 provision: converged acme.go.tito.io channel stable -> edge
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/21 21:03:00 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/21 21:03:00 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 21:03:00 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/21 21:03:00 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 21:03:00 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/21 21:03:00 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/21 21:03:00 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/21 21:03:00 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 21:03:00 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/21 21:03:00 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/21 21:03:00 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/21 21:03:00 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/21 21:03:00 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/21 21:03:00 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:03:00 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/21 21:03:00 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:03:00 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/21 21:03:00 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:03:00 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/21 21:03:00 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:03:00 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/21 21:03:01 provision: a.shop.example.com: swapped for import sd_ra6zai5yipku2a5lwfwnaf72ue (the original route is journaled)
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_ra6zai5yipku2a5lwfwnaf72ue committed: its gate is cleared and its journal row dropped
2026/10/21 21:03:01 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_ei2jft4peun6t4exrkykc35dne rolled back to its original route
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_ei2jft4peun6t4exrkykc35dne: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_ei2jft4peun6t4exrkykc35dne is cleaned up and its journal row retired
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_zfc7go7tn2xzko34gzcmuok4je rolled back to its original route
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_zfc7go7tn2xzko34gzcmuok4je: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_zfc7go7tn2xzko34gzcmuok4je is cleaned up and its journal row retired
2026/10/21 21:03:01 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_nktgzajedfhkmttzwnptfqmdq4
2026/10/21 21:03:01 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/21 21:03:01 provision: dry-run: would converge a.shop.example.com seed source
2026/10/21 21:03:01 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:01 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/21 21:03:01 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/21 21:03:01 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_lyh57ngash6ypqt37v2huc4nqy cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_yxju6ilfnydwvia7ntvbdwtgsu cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_zluhbrvxcien4ceumiio4tbyki is journaled, but this box cannot act on imports; its row is left alone
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_afelw3x4ly4sku7zbdzictuvum is journaled, but this box cannot act on imports; its row is left alone
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_b4lwisnrwkbm2nfm5mqz6v6sha is journaled, but this box cannot act on imports; its row is left alone
2026/10/21 21:03:01 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/21 21:03:01 provision: c.shop.example.com: import sd_ihjapuof2ty3ywoihmeh36c4mu left alone this pass: the import journal could not be read
2026/10/21 21:03:01 provision: b.shop.example.com: import sd_ut5p3dmezy4zfxvez724o4nygy left alone this pass: the import journal could not be read
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_k7jn4gisroohgaobaw5x5dmd5e committed: its gate is cleared and its journal row dropped
2026/10/21 21:03:01 provision: a.shop.example.com: not converging import sd_lsrkvzcza6vruaapmonjtbcamm: it is swapped but not committed, and the row on this box has no import gate
2026/10/21 21:03:01 provision: a.shop.example.com: not converging import sd_6vdajkmx7jrzzf6hgxpdubka74: it is swapped but not committed, and the row on this box has no import gate
2026/10/21 21:03:01 provision: a.shop.example.com: not converging import sd_bygzj4wvab24pvxbijdqmpjkaq: it is placed but not committed, and the row on this box has no import gate
2026/10/21 21:03:01 provision: a.shop.example.com: not converging import sd_mh6utpgt5ivgr5hk7frdik27ae: it is placed but not committed, and the row on this box has no import gate
2026/10/21 21:03:01 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:01 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/21 21:03:01 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:01 provision: a.shop.example.com: import sd_5mnnu6ldbi7vuiktuyhdontjae committed: its gate is cleared and its journal row dropped
2026/10/21 21:03:01 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:01 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:01 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/21 21:03:01 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_bdrez3xzo43nfltmvoyxuiqdt4: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_bdrez3xzo43nfltmvoyxuiqdt4 rolled back (no box had swapped it)
2026/10/21 21:03:01 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/21 21:03:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:01 provision: removed instance route acme.go.tito.io (its seed sd_k6yfojyfqb2qfbwsaod7y5ohma was aborted); the next pass rolls it back
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_k6yfojyfqb2qfbwsaod7y5ohma: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_k6yfojyfqb2qfbwsaod7y5ohma rolled back (no box had swapped it)
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_ow3ckau5exiqclld6od4pqu4fm has a row this pass may not remove; leaving the seed aborted
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_dmfq72kwg54ks276mowckkvqji rolled back (no box had swapped it)
2026/10/21 21:03:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:01 provision: removed instance route acme.go.tito.io (its seed sd_32bumtjy43nrhexbwpctyw7ere was aborted); the next pass rolls it back
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_32bumtjy43nrhexbwpctyw7ere has no route on this box: its local data is removed
2026/10/21 21:03:01 provision: acme.go.tito.io: aborted seed sd_32bumtjy43nrhexbwpctyw7ere rolled back (no box had swapped it)
2026/10/21 21:03:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_ck6fcel54djrstopnucfp6bcua (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ck6fcel54djrstopnucfp6bcua rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ck6fcel54djrstopnucfp6bcua is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_ocz4x7alqr67qu2nxm76juvv4q (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ocz4x7alqr67qu2nxm76juvv4q rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ocz4x7alqr67qu2nxm76juvv4q is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_vggsva6rxyr4sbvur225nmsnu4 (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vggsva6rxyr4sbvur225nmsnu4 rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vggsva6rxyr4sbvur225nmsnu4: the host's replica is left alone: its record no longer names this seed
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vggsva6rxyr4sbvur225nmsnu4 is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_jca7fl3f3dc7wsnuntgpf2w4wm (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jca7fl3f3dc7wsnuntgpf2w4wm rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jca7fl3f3dc7wsnuntgpf2w4wm rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jca7fl3f3dc7wsnuntgpf2w4wm is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_vgisyk4m2h242bc3nq725id4yi (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vgisyk4m2h242bc3nq725id4yi rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_cjldirm3tz2brnvsys5vgovcj4 (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_cjldirm3tz2brnvsys5vgovcj4 is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_g5idq5o44un7vrayd7ki2bwjje (the original route is journaled)
2026/10/21 21:03:02 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_g5idq5o44un7vrayd7ki2bwjje left alone this pass: its record could not be read
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_kftyfcxthpbtdfq4zeczlpgkwy (the original route is journaled)
2026/10/21 21:03:02 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_kftyfcxthpbtdfq4zeczlpgkwy left alone this pass: its record could not be read
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_jdfngpqqqxzchikxunnfjwnrrq (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jdfngpqqqxzchikxunnfjwnrrq: close the import gate: constraint failed: injected (1811)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jdfngpqqqxzchikxunnfjwnrrq rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jdfngpqqqxzchikxunnfjwnrrq is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_ziti2googci2vi3h7uwxpyrjnu (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ziti2googci2vi3h7uwxpyrjnu: close the import gate: constraint failed: injected (1811)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ziti2googci2vi3h7uwxpyrjnu rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ziti2googci2vi3h7uwxpyrjnu is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_wiuabfatbqkluwox6zzsyqdfcy (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_wiuabfatbqkluwox6zzsyqdfcy rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_wiuabfatbqkluwox6zzsyqdfcy rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_wiuabfatbqkluwox6zzsyqdfcy is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_yvcvdxunqrjjkah7v2obxv7qmm (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_yvcvdxunqrjjkah7v2obxv7qmm rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_yvcvdxunqrjjkah7v2obxv7qmm is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_ejdt2zhimnj7n3b2ffn3pfmsby (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ejdt2zhimnj7n3b2ffn3pfmsby: retire its instance key: injected failure at retire-key
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ejdt2zhimnj7n3b2ffn3pfmsby rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ejdt2zhimnj7n3b2ffn3pfmsby is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_qqqxmd4vzbis2sdarmlaokovni (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_qqqxmd4vzbis2sdarmlaokovni rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_qqqxmd4vzbis2sdarmlaokovni is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_j6yfv5nip536g4ivrhdh5wxwtu (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_j6yfv5nip536g4ivrhdh5wxwtu: remove its local data: injected failure at remove-local
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_j6yfv5nip536g4ivrhdh5wxwtu rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_j6yfv5nip536g4ivrhdh5wxwtu is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_hmraj2o6bc3ymzuyivkdxtbf7q (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_hmraj2o6bc3ymzuyivkdxtbf7q rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_hmraj2o6bc3ymzuyivkdxtbf7q is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_wx6g5if37n3a4ozx7t22jrtekq (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_wx6g5if37n3a4ozx7t22jrtekq: remove its local data: injected failure at remove-local-done
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_wx6g5if37n3a4ozx7t22jrtekq rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_wx6g5if37n3a4ozx7t22jrtekq is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_zygebiisubbsi44tuxoz55j55m (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_zygebiisubbsi44tuxoz55j55m rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_zygebiisubbsi44tuxoz55j55m is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_6twgczbtzm6jwqhdwjt2dkfmzu (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_6twgczbtzm6jwqhdwjt2dkfmzu: restore the original route: constraint failed: injected (1811)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_6twgczbtzm6jwqhdwjt2dkfmzu rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_6twgczbtzm6jwqhdwjt2dkfmzu is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_y2vdi3gi6pvhfusjjtpryflere (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_y2vdi3gi6pvhfusjjtpryflere: restore the original route: constraint failed: injected (1811)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_y2vdi3gi6pvhfusjjtpryflere rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_y2vdi3gi6pvhfusjjtpryflere is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_l53hzz7ncu4teqqd4gnoph3hni (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_l53hzz7ncu4teqqd4gnoph3hni is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_ttwxlvcbajq5yqoinghi27poda (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ttwxlvcbajq5yqoinghi27poda rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ttwxlvcbajq5yqoinghi27poda: delete its snapshot: injected failure at delete-snapshot
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_ttwxlvcbajq5yqoinghi27poda is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_zignkuov7qmr5ns5ihcoc4obry (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_zignkuov7qmr5ns5ihcoc4obry rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_zignkuov7qmr5ns5ihcoc4obry is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_v4uz3dllbmrehioz43gz7vidlq (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_v4uz3dllbmrehioz43gz7vidlq rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_v4uz3dllbmrehioz43gz7vidlq: delete the host's replica: injected failure at delete-replica
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_v4uz3dllbmrehioz43gz7vidlq is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_fflc44qcxdjdjjwyxzh5bht6nu (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_fflc44qcxdjdjjwyxzh5bht6nu rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_fflc44qcxdjdjjwyxzh5bht6nu is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_fvfeps345ycbo54bmytbvofsd4 (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_fvfeps345ycbo54bmytbvofsd4 rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_fvfeps345ycbo54bmytbvofsd4: retire its journal row: constraint failed: injected (1811)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_fvfeps345ycbo54bmytbvofsd4 is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_azpcwnerzukja23z2yt7gr64dq (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_azpcwnerzukja23z2yt7gr64dq rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_azpcwnerzukja23z2yt7gr64dq: retire its journal row: constraint failed: injected (1811)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_azpcwnerzukja23z2yt7gr64dq is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_jvaf5z3qc72mxi7czjeuclwty4 (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jvaf5z3qc72mxi7czjeuclwty4 rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_jvaf5z3qc72mxi7czjeuclwty4 is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: mark import sd_jvaf5z3qc72mxi7czjeuclwty4 rolled back: injected failure at cas
2026/10/21 21:03:02 provision: a.shop.example.com: aborted seed sd_jvaf5z3qc72mxi7czjeuclwty4 rolled back (no box had swapped it)
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_uyg3hqzeifjviwowcvjnpxmtau (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_uyg3hqzeifjviwowcvjnpxmtau rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_uyg3hqzeifjviwowcvjnpxmtau is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: aborted seed sd_uyg3hqzeifjviwowcvjnpxmtau rolled back (no box had swapped it)
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_vk5n7omryx3uynx4wmhh53ahwy (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vk5n7omryx3uynx4wmhh53ahwy rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vk5n7omryx3uynx4wmhh53ahwy rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vk5n7omryx3uynx4wmhh53ahwy rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vk5n7omryx3uynx4wmhh53ahwy is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_l2ihupyak36odqy7ifypogzj5q (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_l2ihupyak36odqy7ifypogzj5q rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_l2ihupyak36odqy7ifypogzj5q is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_brgxl73ehn6z6jlpnizax5rx5i (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_brgxl73ehn6z6jlpnizax5rx5i rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_brgxl73ehn6z6jlpnizax5rx5i is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_fmheih6rkc3qpc6waslwjlpjfq (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_fmheih6rkc3qpc6waslwjlpjfq rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_fmheih6rkc3qpc6waslwjlpjfq is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_a6lgf7gp2b2oubbao5ibbtzhya (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_a6lgf7gp2b2oubbao5ibbtzhya rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_a6lgf7gp2b2oubbao5ibbtzhya is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_petzmkuomoidynkthpu6zaf7fu (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_petzmkuomoidynkthpu6zaf7fu rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_petzmkuomoidynkthpu6zaf7fu is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_tsaeoy76cg5mger6phbsz4x2u4 (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_tsaeoy76cg5mger6phbsz4x2u4 rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_tsaeoy76cg5mger6phbsz4x2u4 is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_g32f7wytqisa5dqsq27xlh73ta (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_g32f7wytqisa5dqsq27xlh73ta rolled back to its original route
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_g32f7wytqisa5dqsq27xlh73ta is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_vrnrdauv5iwrhfx2gh5sje7cn4 (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vrnrdauv5iwrhfx2gh5sje7cn4 has no route on this box: its local data is removed and no route is put back
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_vrnrdauv5iwrhfx2gh5sje7cn4 is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_tshlas4ru4r5dhx7wfq2kadk24 (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_cqvguxaajkzzwlssw2fq3zf5ma (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_sgogvw5wywveqf7czqf23l6mgq (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_sgogvw5wywveqf7czqf23l6mgq cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_lb4dzm5mqoziyhkuhhiq2a4t4e (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: import sd_lb4dzm5mqoziyhkuhhiq2a4t4e is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/21 21:03:02 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/21 21:03:02 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_f5pimi6lupx7wbf46bcqstpkia (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_hmz7ngxpw5xt6yqak6wffvg5ze (the original route is journaled)
2026/10/21 21:03:02 provision: a.shop.example.com: swapped for import sd_itshz6dpf7qf2cmvq2z777ml7m (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_lq753hmte3i3lgfl54esbbh554 (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_nskszrg2ri7nvpsfla5ybcrm7q (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_nskszrg2ri7nvpsfla5ybcrm7q rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_5daplwpkwoxpkbihdqmzuamcfi (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_5daplwpkwoxpkbihdqmzuamcfi has no route on this box: its local data is removed and no route is put back
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_5daplwpkwoxpkbihdqmzuamcfi is cleaned up and its journal row retired
2026/10/21 21:03:03 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_znnywquu24sfsg7bytrqanr7m4 (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_znnywquu24sfsg7bytrqanr7m4: remove its local data: injected failure at remove-local
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_znnywquu24sfsg7bytrqanr7m4 is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_xn6oyyl75nalpded3zctdbwdgi (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_xn6oyyl75nalpded3zctdbwdgi: a route appeared at the host, so its local database is left and the rollback waits
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_yxvbsugc64wncpyyahlgcrf6g4 (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_yxvbsugc64wncpyyahlgcrf6g4 rollback deferred: no fence generation: the generation source answered 0
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_wi7mm32ozr4db35kgv3xdl722i (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_wi7mm32ozr4db35kgv3xdl722i rollback deferred: no fence generation: registry busy
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_m2psrrzxpmcqsxsxnfm6qzhqha (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_xdw2lwrpgxp2hgycz2bixcr5ge (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_eqgrqm6n5p5rwcqbp6h2ouzfne (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/21 21:03:03 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_zckvgyvlcnfxtmwhvhu6aalpwy (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_zckvgyvlcnfxtmwhvhu6aalpwy rolled back to its original route
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_zckvgyvlcnfxtmwhvhu6aalpwy is cleaned up and its journal row retired
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_zlfo34ahsi5hpx5jsx4u7fifza (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_zlfo34ahsi5hpx5jsx4u7fifza rolled back to its original route
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_zlfo34ahsi5hpx5jsx4u7fifza is cleaned up and its journal row retired
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_jeaegmqakcsh3zoc7rbf23cekm (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_jeaegmqakcsh3zoc7rbf23cekm rolled back to its original route
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_jeaegmqakcsh3zoc7rbf23cekm is cleaned up and its journal row retired
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_3ty5f5owb53jifq45hjgerxpie (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_3ty5f5owb53jifq45hjgerxpie: retire its instance key: the env file is a symlink
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_3ty5f5owb53jifq45hjgerxpie rolled back to its original route
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_3ty5f5owb53jifq45hjgerxpie is cleaned up and its journal row retired
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_5qyq7keake5vy665mvaenioy24 (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_haufkuba4k6rcpegjtvxad7ony (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_oskzpzylnitvehwfm4x264xffy refused: there is no route at a.shop.example.com to replace
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_7sen4st4pocjpd2ifdwdacjoxy refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_5suo6kvux7qncfk6dch65dn6xu refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_7yu7hwu7q4cu3vhes7urm4fktu refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_fyf4kgc7dommxxwxixrz6osav4 refused: the route belongs to app other
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_xah4itqvju3h6ihrhg3lynz5um refused: the route is filed under another account
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_sk2bdetibefpjw2qedtdpkbhwa refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_7k6xhoi2rqktegjnz3efhvuj3e refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_kpmdvupskmrofr535p72ihi7ei refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_acanctkybg4vxy4srokftpdj6u refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_d25s7tkcmvjigobldm7j6gvdqa refused: the route is not an address route this import can take over (socket)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_jnnjie6hwnkmxmzwk5c4y57r3e refused: the route is not an address route this import can take over (no address)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_ya3vglzoxqhgukntjmalcnbppm refused: the route is not an address route this import can take over (provisioned)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_lzg5ggreugwdlhpywnk5panvoa refused: the route is not an address route this import can take over (kind static)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_3sdbzur25zgwoizoy6axfxqv6e refused: the route is not an address route this import can take over (backing)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_fw45cg7vdeldkb7weafafxan5q refused: the route is not an address route this import can take over (tunnel)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_whefht4bicqzxqpts6tkpouqt4 refused: the route is not an address route this import can take over (caps)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_uoyf3znhxcqs2bpnsf5im53y3y refused: the route is not an address route this import can take over (platform)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_47cgpysit66wayluxfpeqfjec4 refused: the route is not an address route this import can take over (canary)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_v34g4mhxtz7hgwg27ejz27ruz4 refused: the route is not an address route this import can take over (kind sidecar)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_6yo4hcau7satowosxzorz6wqgu refused: the route is not an address route this import can take over (region)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_fk7r24xe6f4cewmmddykwspfju refused: the route is not an address route this import can take over (fleet_box)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_5pa5ued7oj4j5pmip2mggtsewm refused: the route is not an address route this import can take over (hibernate)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_4tldijab2tiv7w4zchtd53bhee refused: the route is not an address route this import can take over (claim_owner)
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_ftqu5n6blskvvv5wpplegmsaam refused: this box does not run instances nested
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_oq4nbt4kjvyfis3ngp3pcui6um refused: this box does not run instances nested
2026/10/21 21:03:03 provision: a.shop.example.com: import sd_sfnjfcpcazpu5ycyfzvkdnj6gu refused: claim control is on for this box
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_anj7syq7r2nqrxjyn24dh5qu6a (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_kn4lz64jpvwqiwxjslwds4zftq (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/21 21:03:03 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_uouvioozsj7chjnm6zzhw6w7xq: its verify hash is not a sha256
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_qqob6xzizyu3x2b3t7ywdl3try: its verify hash is not a sha256
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_bncaslr4xoz26nudfgazvakcve: its verify hash is not a sha256
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/21 21:03:03 provision: A.shop.example.com/..: not swapping for import sd_mi4c2kyry5unju3rwzfrj2l4y4: its host or seed id is malformed (seeds: not a host)
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_xyjmamtbroqcf5qluvykpznzwu: its record does not describe a nested, hibernating instance
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_7jgjn4l6etdc42j4zx2hmuqsri: its record does not describe a nested, hibernating instance
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_hgrbxefurntsrpwblkegnsfbpq: its record does not describe a nested, hibernating instance
2026/10/21 21:03:03 provision: a.shop.example.com: not swapping for import sd_reyl7hgljn4xkq6tctcvagq6xm: its record does not describe a nested, hibernating instance
2026/10/21 21:03:03 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_qc7afswtrt2sxgs4f4jqgtjkba (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_umvlgfwxri7ilrxsnhxny3o574 (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: swapped for import sd_57plvnb3miltk277x6ivq6npfy (the original route is journaled)
2026/10/21 21:03:03 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/21 21:03:04 provision: dry-run: would consider swapping a.shop.example.com for import sd_m5wievru4yqd2c25typdi2qomi
2026/10/21 21:03:04 provision: a.shop.example.com: import sd_llj2w23v6tqkk3tt2rf7gjbrry rolled back to its original route
2026/10/21 21:03:04 provision: a.shop.example.com: import sd_llj2w23v6tqkk3tt2rf7gjbrry: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/21 21:03:04 provision: a.shop.example.com: import sd_llj2w23v6tqkk3tt2rf7gjbrry is cleaned up and its journal row retired
2026/10/21 21:03:04 provision: a.shop.example.com: import sd_kl6dbb7lo4wqhcurpqlbpxfrvm left alone: the import journal holds seed sd_b676khitd7q3y6nh4vg3raayju at swapped
2026/10/21 21:03:04 provision: a.shop.example.com: not minting import sd_sbkocxceaqzai5qviqnqutaq4u: it is swapped but not committed, and only its swap makes its row
2026/10/21 21:03:04 provision: a.shop.example.com: not minting import sd_5i5dp3v3g6hokwwaatgisw7aom: it is placed but not committed, and only its swap makes its row
2026/10/21 21:03:04 provision: a.shop.example.com: swapped for import sd_4ukuhs3fqc2h5tfod672mff22i (the original route is journaled)
2026/10/21 21:03:04 provision: a.shop.example.com: not minting import sd_4ukuhs3fqc2h5tfod672mff22i: it is swapped but not committed, and only its swap makes its row
2026/10/21 21:03:04 provision: a.shop.example.com: not minting import sd_4ukuhs3fqc2h5tfod672mff22i: it is placed but not committed, and only its swap makes its row
2026/10/21 21:03:04 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 21:03:04 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/21 21:03:04 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/21 21:03:04 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/21 21:03:04 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/21 21:03:04 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/21 21:03:04 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/21 21:03:04 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/21 21:03:04 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/21 21:03:04 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/21 21:03:04 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/21 21:03:04 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/21 21:03:04 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/21 21:03:04 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 21:03:04 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/21 21:03:04 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 21:03:04 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 21:03:04 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/21 21:03:04 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/21 21:03:04 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 21:03:04 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/21 21:03:04 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/21 21:03:04 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/21 21:03:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:04 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/21 21:03:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:04 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/21 21:03:04 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/21 21:03:04 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/21 21:03:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 21:03:04 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/21 21:03:04 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/21 21:03:04 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (5.32s)
plan14_root_reads_test.go:1107: root read census: 2 discrepancies
changed root source envelope internal/sim/engines
unclassified root read internal/sim/engines/mutate.sh:external file:external@0
FAIL
FAIL github.com/carlosframework/platform/internal/provision 13.447s
ok github.com/carlosframework/platform/internal/publicrelease 0.007s
? github.com/carlosframework/platform/internal/regionname [no test files]
ok github.com/carlosframework/platform/internal/registry 5.596s
ok github.com/carlosframework/platform/internal/relay 7.199s
ok github.com/carlosframework/platform/internal/release 24.413s
ok github.com/carlosframework/platform/internal/rollout 3.800s
ok github.com/carlosframework/platform/internal/rolloutwords 0.005s
ok github.com/carlosframework/platform/internal/rootaws 0.008s
ok github.com/carlosframework/platform/internal/rootparticipation 0.064s
ok github.com/carlosframework/platform/internal/rootstate 0.029s
ok github.com/carlosframework/platform/internal/runs 0.551s
ok github.com/carlosframework/platform/internal/s3compat 0.005s
ok github.com/carlosframework/platform/internal/safefile 0.004s
ok github.com/carlosframework/platform/internal/schedule 2.716s
ok github.com/carlosframework/platform/internal/seeds 0.014s
ok github.com/carlosframework/platform/internal/sim/engines 2.850s
ok github.com/carlosframework/platform/internal/sim/hostlife 10.926s
ok github.com/carlosframework/platform/internal/sim/litestreamfacts 4.133s
ok github.com/carlosframework/platform/internal/status 0.093s
ok github.com/carlosframework/platform/internal/steering 0.019s
ok github.com/carlosframework/platform/internal/stopevidence 0.188s
ok github.com/carlosframework/platform/internal/svcrole 0.002s
ok github.com/carlosframework/platform/internal/telemetry 0.004s
ok github.com/carlosframework/platform/internal/termfence 0.004s
ok github.com/carlosframework/platform/internal/tunnelclient 0.004s
ok github.com/carlosframework/platform/internal/unixdial 0.003s
ok github.com/carlosframework/platform/internal/updatewords 0.005s
ok github.com/carlosframework/platform/internal/usage 0.006s
ok github.com/carlosframework/platform/internal/version 0.002s
ok github.com/carlosframework/platform/internal/vet 1.634s
FAIL
=== internal_console@0 (209 s)
ok github.com/carlosframework/platform/internal/console 206.714s
=== internal_console@1 (34 s)
ok github.com/carlosframework/platform/internal/console 32.129s
=== internal_console@2 (34 s)
ok github.com/carlosframework/platform/internal/console 32.386s
=== internal_console@3 (36 s)
ok github.com/carlosframework/platform/internal/console 34.136s
=== internal_console@4 (36 s)
ok github.com/carlosframework/platform/internal/console 34.136s
=== internal_console@5 (37 s)
ok github.com/carlosframework/platform/internal/console 34.987s
=== internal_console@6 (38 s)
ok github.com/carlosframework/platform/internal/console 35.970s
=== internal_console@7 (39 s)
ok github.com/carlosframework/platform/internal/console 36.464s
=== root@0 (33 s)
ok github.com/carlosframework/platform 30.416s
=== root@1 (44 s)
ok github.com/carlosframework/platform 42.257s
=== root@2 (41 s)
ok github.com/carlosframework/platform 39.088s
FAILED: rest
make: *** [Makefile:19: test] Error 1
amadan: step gate failed: exit status 2
amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/docs/superpowers/specs/2026-10-21-fleet-internal-engines-design.md b/docs/superpowers/specs/2026-10-21-fleet-internal-engines-design.md| index cc2821c62..86ae8f17c 100644 |
| --- a/docs/superpowers/specs/2026-10-21-fleet-internal-engines-design.md |
| +++ b/docs/superpowers/specs/2026-10-21-fleet-internal-engines-design.md |
| @@ -178,6 +178,11 @@ address opened in its fence. |
| - **R4. Review end:** one Astra round on rev 13, small fixes, then Paul's |
| read. The plan's first task is a simulation of I1 and §5.9 across every |
| launch and ingress path. |
| +- **R5. Grant records go stale ten minutes after signing (Paul, |
| + 2026-10-21).** An edge treats an `engines.json` record whose `signed_at` |
| + is more than 10 minutes old as stale, so its grant table is empty; the |
| + console re-signs every 2 minutes and on every change (§5.2, §5.3) (sim, |
| + plan 1, final review). |
| ## 3. What exists today, and what this builds on |
| @@ -291,8 +296,12 @@ What protects the public is the edge's serving map, not the registry row |
| (codex R10-1): a `1` written while the edge's `Reload` fails |
| (`edge.go:925`, `:993`) refuses nobody. So the registry mark is the |
| intent, and the fence is the fact I1 is about. A group closed as |
| -unclassified (`NULL`) counts as fenced, because the edge refuses `NULL` |
| -before any listener opens (sim, plan 1). |
| +unclassified (`NULL`) counts as fenced only once the edge has loaded that |
| +`NULL`: the change that closed it is recorded for the group, and the reload |
| +that reached it drained every older public request on the box (the |
| +upgrade's restart does both). A newly created or unseen row never counts as |
| +fenced, so a first declaring launch writes `1` and waits for the fence like |
| +any other (sim, plan 1, final review). |
| Rounds 2 to 9 each found one more path by which a declaring build could |
| run under a public mark: adoption's order, requests admitted early, a |
| @@ -314,7 +323,10 @@ the same way; if the fence does not arrive within the bound, the launch is |
| refused, the wake fails, and the request gets the activator's ordinary |
| wake-failure answer. A launch whose build manifest it cannot read is |
| treated as declaring. Adoption's |
| -set-before is the same gate, reached earlier. |
| +set-before is the same gate, reached earlier. The gate holds a per-group |
| +lock from its check through process creation, and `--public` holds the same |
| +lock for its whole run, so no launch can pass the gate between `--public`'s |
| +empty check and its write of `0` (sim, plan 1, final review). |
| `--public` (below) is the only writer of `0`, and it checks I1 directly: |
| the group is stopped and its cgroups empty. Any later declaring launch |
| @@ -385,8 +397,10 @@ and the edge serves an in-memory map refreshed on a 2 s registry poll |
| carlos route --host <host> --public |
| - On the box, holding the adoption lock (so the live version cannot move |
| - under it), it: |
| + On the box, holding the group's lock for its whole run (the adoption |
| + lock, so the live version cannot move under it, and the launch gate's, |
| + so nothing starts between step 3 and step 4; sim, plan 1, final review), |
| + it: |
| 1. refuses unless the live release's manifest is readable and does not |
| declare `doc_engine`, and no row of the group holds the grant; |
| 2. stops the whole group (every unit and generation of the owner, through |
| @@ -489,7 +503,9 @@ ops account or an address on `CARLOS_SYSTEM_OPERATORS`, |
| The console's database is the authority. It publishes the whole set as one |
| record, `control/engines.json`, signed with the root release key under its |
| own domain (`carlos engines v1\n`), with a strictly increasing revision and |
| -`expires_at` 72 hours out, re-signed well inside that, as door keys are. It |
| +`expires_at` 72 hours out. It re-signs every 2 minutes and on every change, |
| +and an edge treats a record whose `signed_at` is more than 10 minutes old as |
| +stale (ruling R5; sim, plan 1, final review). It |
| publishes an empty set (revision 1) the first time the feature is on, so a |
| box can tell "no engines" from "not read yet". |
| @@ -513,23 +529,23 @@ the door-key mirror does, and adds a **durable revision floor**: |
| read (sim, plan 1). |
| - A record whose revision is below the floor is refused, at runtime and |
| after a restart. An equal revision must be byte-identical. |
| -- Stale (no good read for ten minutes), expired, or never read: the grant |
| - table is **empty**, so every engine call is refused. A persisted record |
| - that has since expired counts as expired. |
| +- Stale (no good read for ten minutes, or a record signed more than ten |
| + minutes ago), expired, or never read: the grant table is **empty**, so |
| + every engine call is refused. A persisted record that has since expired |
| + or gone stale counts as expired. The mirror refuses a stale record like |
| + an expired one (ruling R5; sim, plan 1, final review). |
| - If the floor cannot be persisted, the edge keeps refusing engine calls |
| until it can, and logs it once per minute. |
| -- **Residual, stated:** a box with no persisted floor (new or rebuilt) will |
| - admit any validly signed, unexpired record. A bucket writer who replays a |
| - record revoked less than 72 hours ago can restore that grant on such a |
| - box until a newer record is read. The engine box's own floor still refuses |
| - it unless the engine box is itself new. The same residual the door-key |
| - plan accepted. |
| -- **Residual, stated (sim, plan 1):** a bucket writer who replaces the |
| - newest record with the previous signed one before any edge has read a |
| - revoke keeps the revoked grant alive until that record expires (up to 72 |
| - hours), the same exposure the door-key design accepts (open for Paul's |
| - ruling: a `signed_at` freshness bound would close it, at the cost of |
| - engine calls failing when the console is down for that bound). |
| +- **The freshness bound (ruling R5; sim, plan 1, final review).** A bucket |
| + writer can replay an older signed record: before any edge has read a |
| + revoke, or to a box with no persisted floor (new or rebuilt). Every |
| + record that grants a revoked key was signed before the revoke, and goes |
| + stale ten minutes after its signing, so a replay keeps a revoked grant at |
| + most until the replayed record's `signed_at` plus ten minutes. The |
| + worst-case revoke delay is therefore about ten minutes plus one poll, |
| + replay or not; a box that has read the revoke refuses the replay at once |
| + (its floor). The cost: engine calls fail once the console has been down |
| + for ten minutes. |
| ### 5.4 The call path |
| @@ -963,74 +979,90 @@ process, real unix sockets and a real cgroup check where the kernel allows |
| ### Simulation (#335 plan 1) |
| -`internal/sim/engines` is a test-only model of this spec: 37 named rules, |
| +`internal/sim/engines` is a test-only model of this spec: 40 named rules, |
| each with a mutation that turns it off, checked against the invariants |
| INV-P (no public request is delivered to a declaring build), INV-I1, |
| INV-AV (at the end, every row of a `0` group answers a public request), |
| -INV-G (an engine call reaches only the engine's exact route, and none is |
| -granted past the freshness bound after a revoke), INV-ID (the caller the |
| -engine box records is the app whose code made the call) and INV-ARM (no |
| -unisolated tenant process on a box while an engine socket is open there). |
| +INV-G (an engine call reaches only the engine's exact route; no box admits |
| +one on a table that was never read, has expired, has had no good read for |
| +ten minutes or holds a record signed ten minutes ago; none is granted more |
| +than ten minutes plus one poll after a revoke, replay or not, nor by a box |
| +that has read the revoke), INV-ID (the caller the engine box records is the |
| +app whose code made the call) and INV-ARM (no unisolated tenant process on |
| +a box while an engine socket is open there). |
| `internal/sim/engines/mutate.sh 3000` runs each |
| mutation through a 3000-seed random walk and through the rule's |
| hand-scheduled witnesses; `expected-outcomes.txt` lists the rules caught |
| only in combination. |
| -First sweep, 2026-10-21, on the tree committed as "enginesim: mutation |
| -harness and the first 3000-seed sweep" (parent 4648305e). The unmutated |
| -sweep: 0 of 3000 seeds violated, 0 residuals. Result: 34 rules CAUGHT, 3 |
| -EXPECTED-MISS, none MISSED, ERROR or STALE. |
| +Sweep after the final review, 2026-10-21, on the tree committed as |
| +"enginesim: clean baseline env, immediate listener checks, |
| +completed-transition coverage" (a337fb28). It adds three rules |
| +(`new-group-fenced`, `clear-launch-lock`, `grant-freshness-bound`), the |
| +freshness bound of ruling R5 (the walk now replays any older record at any |
| +time) and the oracle changes of the final review, so its counts are not |
| +comparable with the first sweep's (parent 4648305e). The unmutated sweep: |
| +0 of 3000 seeds violated, 0 residuals. Result: 36 rules CAUGHT, 4 |
| +EXPECTED-MISS, none MISSED, ERROR or STALE (sim, plan 1, final review). |
| | Rule | Verdict | Sweep catches (of 3000) | First seed | Witness | |
| |---|---|---|---|---| |
| -| `set-before-repoint` | CAUGHT | 1382 | 2 | violated | |
| -| `fence-needs-reload` | CAUGHT | 442 | 18 | violated | |
| -| `fence-drains-admitted` | CAUGHT | 241 | 5 | violated | |
| -| `fence-box-wide` | CAUGHT | 12 | 14 | violated | |
| +| `set-before-repoint` | CAUGHT | 2448 | 2 | violated | |
| +| `fence-needs-reload` | CAUGHT | 412 | 6 | violated | |
| +| `fence-drains-admitted` | CAUGHT | 217 | 31 | violated | |
| +| `fence-box-wide` | CAUGHT | 13 | 481 | violated | |
| | `gate-adopt` | EXPECTED-MISS | 0 | - | held | |
| -| `gate-swap` | CAUGHT | 1575 | 2 | violated | |
| -| `gate-fallback` | CAUGHT | 250 | 17 | violated | |
| -| `gate-recovery` | CAUGHT | 269 | 8 | violated | |
| -| `gate-seed` | CAUGHT | 1086 | 5 | violated | |
| -| `gate-cmd` | CAUGHT | 1073 | 8 | violated | |
| -| `gate-waits-when-written` | CAUGHT | 307 | 24 | violated | |
| -| `unreadable-declares` | CAUGHT | 1486 | 5 | violated | |
| -| `live-link-only-adoption` | CAUGHT | 512 | 5 | violated | |
| -| `mark-on-final-upstream` | CAUGHT | 2835 | 1 | violated | |
| -| `classify-null-refused` | CAUGHT | 455 | 13 | violated | |
| -| `classify-staged` | CAUGHT | 70 | 98 | violated | |
| -| `minted-follow-owner` | CAUGHT | 782 | 5 | violated | |
| -| `grant-marks-group` | CAUGHT | 443 | 271 | violated | |
| -| `static-minted-public` | CAUGHT | 2979 | 1 | violated | |
| -| `owner-nonempty-unique` | CAUGHT | 32 | 2496 | held | |
| -| `public-checks-live` | CAUGHT | 742 | 6 | violated | |
| +| `gate-swap` | CAUGHT | 2294 | 2 | violated | |
| +| `gate-fallback` | CAUGHT | 265 | 18 | violated | |
| +| `gate-recovery` | CAUGHT | 262 | 5 | violated | |
| +| `gate-seed` | CAUGHT | 1711 | 2 | violated | |
| +| `gate-cmd` | CAUGHT | 1734 | 2 | violated | |
| +| `gate-waits-when-written` | CAUGHT | 287 | 6 | violated | |
| +| `unreadable-declares` | CAUGHT | 2012 | 3 | violated | |
| +| `live-link-only-adoption` | CAUGHT | 857 | 2 | violated | |
| +| `mark-on-final-upstream` | CAUGHT | 2832 | 1 | violated | |
| +| `classify-null-refused` | CAUGHT | 476 | 13 | violated | |
| +| `classify-staged` | CAUGHT | 66 | 8 | violated | |
| +| `minted-follow-owner` | CAUGHT | 802 | 1 | violated | |
| +| `grant-marks-group` | CAUGHT | 484 | 549 | violated | |
| +| `static-minted-public` | CAUGHT | 2981 | 1 | violated | |
| +| `owner-nonempty-unique` | CAUGHT | 42 | 2359 | held | |
| +| `public-checks-live` | CAUGHT | 851 | 2 | violated | |
| | `public-stops-group` | EXPECTED-MISS | 0 | - | held | |
| -| `public-holds-lock` | CAUGHT | 55 | 85 | violated | |
| -| `public-confirms-empty` | CAUGHT | 152 | 24 | violated | |
| -| `ports-excluded` | CAUGHT | 2012 | 1 | violated | |
| +| `public-holds-lock` | CAUGHT | 62 | 37 | violated | |
| +| `public-confirms-empty` | CAUGHT | 49 | 8 | violated | |
| +| `ports-excluded` | CAUGHT | 1995 | 1 | violated | |
| | `dedicated-launch-check` | EXPECTED-MISS | 0 | - | held | |
| -| `dedicated-edge-refusal` | CAUGHT | 1156 | 4 | violated | |
| -| `ingress-precondition` | CAUGHT | 1276 | 1 | violated | |
| -| `cgroup-identity` | CAUGHT | 319 | 4 | violated | |
| -| `door-uid` | CAUGHT | 169 | 4 | violated | |
| -| `hop-caller-signed` | CAUGHT | 282 | 4 | violated | |
| -| `engine-box-recheck` | CAUGHT | 79 | 29 | violated | |
| -| `exact-route-engine` | CAUGHT | 442 | 3 | violated | |
| -| `floor-persisted` | CAUGHT | 88 | 27 | violated | |
| -| `stale-clears-grants` | CAUGHT | 112 | 4 | violated | |
| -| `armed-refuses-unisolated` | CAUGHT | 2722 | 2 | violated | |
| -| `arm-checks-box` | CAUGHT | 2315 | 1 | violated | |
| - |
| -The three EXPECTED-MISS rules are each caught in combination, by their |
| -witness and by the sweep (200 seeds: 119, 21 and 128 catches): |
| +| `dedicated-edge-refusal` | CAUGHT | 1138 | 2 | violated | |
| +| `ingress-precondition` | CAUGHT | 1248 | 4 | violated | |
| +| `cgroup-identity` | CAUGHT | 171 | 32 | violated | |
| +| `door-uid` | CAUGHT | 85 | 43 | violated | |
| +| `hop-caller-signed` | CAUGHT | 137 | 41 | violated | |
| +| `engine-box-recheck` | CAUGHT | 44 | 79 | violated | |
| +| `exact-route-engine` | CAUGHT | 206 | 13 | violated | |
| +| `floor-persisted` | CAUGHT | 4 | 13 | violated | |
| +| `stale-clears-grants` | EXPECTED-MISS | 0 | - | held | |
| +| `armed-refuses-unisolated` | CAUGHT | 2738 | 2 | violated | |
| +| `arm-checks-box` | CAUGHT | 2321 | 1 | violated | |
| +| `new-group-fenced` | CAUGHT | 0 | - | violated | |
| +| `clear-launch-lock` | CAUGHT | 65 | 42 | violated | |
| +| `grant-freshness-bound` | CAUGHT | 455 | 2 | violated | |
| + |
| +The four EXPECTED-MISS rules are each caught in combination, by their |
| +witness and by the sweep (200 seeds: 187, 12, 125 and 59 catches): |
| `gate-adopt` with `set-before-repoint` (adoption's set-before is the same |
| gate, reached earlier), `public-stops-group` with `public-confirms-empty` |
| -(step 3 refuses while the declaring generation still runs), and |
| +(step 3 refuses while the declaring generation still runs), |
| `dedicated-launch-check` with `dedicated-edge-refusal` (the edge refuses |
| -the proxying row once the group is internal). `owner-nonempty-unique`'s |
| -witness needs `dedicated-edge-refusal` gone too, so it holds alone; the |
| -sweep catches the rule alone through INV-I1 (a misgrouped `0` row makes the |
| -owner's group read public). |
| +the proxying row once the group is internal), and `stale-clears-grants` |
| +with `grant-freshness-bound` (a table's record was signed no later than |
| +its last good read, so the `signed_at` bound empties a stale table first). |
| +`owner-nonempty-unique`'s witness needs `dedicated-edge-refusal` gone too, |
| +so it holds alone; the sweep catches the rule alone through INV-I1 (a |
| +misgrouped `0` row makes the owner's group read public). |
| +`new-group-fenced` is caught by its witness only: the walk's dedicated |
| +launch check refuses every declaring launch in a new group beside the |
| +starting routes, so only a box that homes nothing reaches it. |
| ## 9. Docs |