amadan
review: Astra whole-branch brief (#155)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 file changed,
+84
−0
docs/superpowers/specs/CODEX-REVIEW-BRIEF-INSTANCE-BOUND-TOKENS-FINAL.md+84 −0
CI failed — run details
CI log
=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok amadan.net/carlos/platform.git/launchctx 0.011s
? amadan.net/carlos/platform.git/launchctx/controlname [no test files]
? amadan.net/carlos/platform.git/launchctx/wireid [no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok github.com/carlosframework/platform 288.449s
? github.com/carlosframework/platform/cmd/changelog [no test files]
ok github.com/carlosframework/platform/cmd/console 2.558s
ok github.com/carlosframework/platform/cmd/moveprobe 93.205s
ok github.com/carlosframework/platform/cmd/zddprobe 0.705s
ok github.com/carlosframework/platform/internal/activator 249.498s
ok github.com/carlosframework/platform/internal/agentsock 0.016s
ok github.com/carlosframework/platform/internal/alerting 0.004s
ok github.com/carlosframework/platform/internal/analytics 0.019s
ok github.com/carlosframework/platform/internal/appconfig 2.504s
ok github.com/carlosframework/platform/internal/apperr 0.070s
ok github.com/carlosframework/platform/internal/applog 0.120s
ok github.com/carlosframework/platform/internal/awsinv 0.004s
ok github.com/carlosframework/platform/internal/boxchoice 0.004s
ok github.com/carlosframework/platform/internal/boxid 0.825s
? github.com/carlosframework/platform/internal/boxid/boxidtest [no test files]
? github.com/carlosframework/platform/internal/boxid/internal/signtest [no test files]
ok github.com/carlosframework/platform/internal/boxvolumes 0.008s
ok github.com/carlosframework/platform/internal/caps 0.012s
ok github.com/carlosframework/platform/internal/certwarm 0.002s
ok github.com/carlosframework/platform/internal/cgroup 0.693s
ok github.com/carlosframework/platform/internal/changelog 0.303s
ok github.com/carlosframework/platform/internal/clamd 0.054s
? github.com/carlosframework/platform/internal/cliflag [no test files]
ok github.com/carlosframework/platform/internal/console 393.493s
? github.com/carlosframework/platform/internal/controlname [no test files]
? github.com/carlosframework/platform/internal/controlsock [no test files]
ok github.com/carlosframework/platform/internal/dbdoor 5.789s
ok github.com/carlosframework/platform/internal/dbdoor/dbdoortest 0.008s
ok github.com/carlosframework/platform/internal/dbverify 0.004s
ok github.com/carlosframework/platform/internal/dnsrec 0.002s
ok github.com/carlosframework/platform/internal/docsite 0.004s
ok github.com/carlosframework/platform/internal/domains 2.358s
ok github.com/carlosframework/platform/internal/doorkey 0.006s
ok github.com/carlosframework/platform/internal/economics 0.003s
ok github.com/carlosframework/platform/internal/edge 26.741s
? github.com/carlosframework/platform/internal/edgeproof [no test files]
ok github.com/carlosframework/platform/internal/edgesfile 0.008s
ok github.com/carlosframework/platform/internal/fleetapi 0.132s
ok github.com/carlosframework/platform/internal/gate 1.656s
ok github.com/carlosframework/platform/internal/genselect 0.014s
ok github.com/carlosframework/platform/internal/geo 0.015s
ok github.com/carlosframework/platform/internal/geoip 0.035s
ok github.com/carlosframework/platform/internal/host 161.529s
ok github.com/carlosframework/platform/internal/hostactors 0.358s
ok github.com/carlosframework/platform/internal/hostbox 2.464s
ok github.com/carlosframework/platform/internal/hostclaim 0.490s
ok github.com/carlosframework/platform/internal/hostevidence 0.007s
ok github.com/carlosframework/platform/internal/hostexec 4.785s
ok github.com/carlosframework/platform/internal/hostfence 0.030s
ok github.com/carlosframework/platform/internal/hostfiles 10.518s
ok github.com/carlosframework/platform/internal/hostfloor 0.014s
ok github.com/carlosframework/platform/internal/hostguard 1.010s
ok github.com/carlosframework/platform/internal/hostops 1.559s
? github.com/carlosframework/platform/internal/hostops/fencerelease [no test files]
ok github.com/carlosframework/platform/internal/hostops/internal/fencerelease 0.002s
ok github.com/carlosframework/platform/internal/hostquarantine 0.003s
ok github.com/carlosframework/platform/internal/hostrelocate 0.446s
ok github.com/carlosframework/platform/internal/hostresolve 0.139s
ok github.com/carlosframework/platform/internal/hostwrite 0.002s
ok github.com/carlosframework/platform/internal/infraview 0.002s
ok github.com/carlosframework/platform/internal/instancectl 4.169s
ok github.com/carlosframework/platform/internal/instanceexec 2.714s
ok github.com/carlosframework/platform/internal/instancefs 0.022s
ok github.com/carlosframework/platform/internal/instancekey 0.014s
ok github.com/carlosframework/platform/internal/instanceupdates 0.019s
ok github.com/carlosframework/platform/internal/layout 1.517s
ok github.com/carlosframework/platform/internal/lease 9.810s
ok github.com/carlosframework/platform/internal/lease/leasetest 0.028s
ok github.com/carlosframework/platform/internal/ledger 0.013s
ok github.com/carlosframework/platform/internal/mail 0.171s
ok github.com/carlosframework/platform/internal/maintenance 0.087s
ok github.com/carlosframework/platform/internal/maintenanceexec 5.480s
ok github.com/carlosframework/platform/internal/maintenanceguard 0.066s
ok github.com/carlosframework/platform/internal/metrics 0.007s
ok github.com/carlosframework/platform/internal/moves 20.980s
ok github.com/carlosframework/platform/internal/moves/archive 0.756s
ok github.com/carlosframework/platform/internal/objstore 0.185s
ok github.com/carlosframework/platform/internal/ops 0.173s
ok github.com/carlosframework/platform/internal/park 0.199s
ok github.com/carlosframework/platform/internal/privatefile 0.003s
2026/10/16 04:29:47 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/16 04:29:47 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/16 04:29:47 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/16 04:29:47 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/16 04:29:47 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/16 04:29:47 provision: an app's records could not be listed: they are skipped
2026/10/16 04:29:47 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:29:47 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/16 04:29:47 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/16 04:29:47 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/16 04:29:47 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/16 04:29:47 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/16 04:29:47 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/16 04:29:47 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/16 04:29:47 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/16 04:29:47 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/16 04:29:47 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/16 04:29:47 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/16 04:29:47 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/16 04:29:47 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/16 04:29:47 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/16 04:29:47 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/16 04:29:47 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/16 04:29:47 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/16 04:29:47 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/16 04:29:47 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/16 04:29:47 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:47 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:47 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/16 04:29:47 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:47 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:47 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:47 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/16 04:29:48 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/16 04:29:48 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/16 04:29:48 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/16 04:29:48 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/16 04:29:48 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:48 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (9.11s)
plan14_root_reads_test.go:773: root read census: 29 discrepancies
changed root read cli.go:runInstances; review class, task, sites and digest
changed root read internal/console/authstore.go:Store.CLITokens; review class, task, sites and digest
changed root read internal/console/authstore.go:Store.migrateCLIAuth; review class, task, sites and digest
changed root read internal/console/claim_app_identity.go:Store.PurgeClaimAppRow; review class, task, sites and digest
changed root read internal/console/store.go:Store.MoveApp; review class, task, sites and digest
changed root read internal/console/store.go:Store.PurgeAppRow; review class, task, sites and digest
changed root read internal/console/store.go:Store.renameAppIn; review class, task, sites and digest
changed root read internal/console/svcprincipal.go:Store.CLIPrincipal; review class, task, sites and digest
changed root read internal/console/svcprincipal.go:Store.ServicePrincipals; review class, task, sites and digest
changed root read internal/console/templates/account_settings.html:external; review class, task, sites and digest
changed root read internal/console/templates/settings.html:external; review class, task, sites and digest
changed root source envelope .
changed root source envelope internal/console
changed root source envelope internal/console/templates
changed root source envelope internal/instanceupdates
changed root source envelope internal/svcrole
unclassified root read internal/console/instancetoken.go:Store.claimRawNewInstanceToken file:Exec@223
unclassified root read internal/console/instancetoken.go:Store.claimRawRevokeInstanceTokens file:Exec@114
changed legacy declaration cli.go:runInstances
changed legacy declaration internal/console/authstore.go:Store.CLITokens
changed legacy declaration internal/console/authstore.go:Store.migrateCLIAuth
changed legacy declaration internal/console/claim_app_identity.go:Store.PurgeClaimAppRow
changed legacy declaration internal/console/store.go:Store.MoveApp
changed legacy declaration internal/console/store.go:Store.PurgeAppRow
changed legacy declaration internal/console/store.go:Store.renameAppIn
changed legacy declaration internal/console/svcprincipal.go:Store.CLIPrincipal
changed legacy declaration internal/console/svcprincipal.go:Store.ServicePrincipals
changed legacy declaration internal/console/templates/account_settings.html:external
changed legacy declaration internal/console/templates/settings.html:external
--- FAIL: TestPlan9B8RecordWriteCensus (0.52s)
plan9_b8_census_test.go:371: record-write census rejected 7 site(s); update the explicit inventory only after reviewing the source:
changed site cli.go:runInstances: source differs from the reviewed digest
changed site internal/console/apiinstances.go:Server.handleAPIInstanceUpdate: source differs from the reviewed digest
changed site internal/console/authcli.go:Server.registerCLIRoutes: source differs from the reviewed digest
changed site internal/console/browserupdates.go:Server.updatesFormGate: source differs from the reviewed digest
changed site internal/console/updatescore.go:Server.applyUpdates: source differs from the reviewed digest
changed site internal/console/updatescore.go:Server.requestInstall: source differs from the reviewed digest
unlisted site apimode.go:apiSession.instanceToken [lit:instances]: review it, classify it, and update its explicit inventory entry
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged acme.go.tito.io channel stable -> edge
2026/10/16 04:29:58 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/16 04:29:58 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/16 04:29:58 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/16 04:29:58 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged acme.go.tito.io hibernate false -> true
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged acme.go.tito.io status-named false -> true
2026/10/16 04:29:58 provision: converged acme.go.tito.io status-named true -> false
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/16 04:29:58 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/16 04:29:58 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/16 04:29:58 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/16 04:29:58 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/16 04:29:58 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/16 04:29:58 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/16 04:29:58 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/16 04:29:58 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/16 04:29:58 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/16 04:29:58 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:58 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/16 04:29:58 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/16 04:29:58 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/16 04:29:58 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/16 04:29:58 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/16 04:29:58 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/16 04:29:58 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/16 04:29:58 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/16 04:29:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/16 04:29:58 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/16 04:29:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/16 04:29:58 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/16 04:29:58 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/16 04:29:58 provision: converged acme.go.tito.io channel stable -> edge
2026/10/16 04:29:58 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/16 04:29:58 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/16 04:29:58 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/16 04:29:58 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/16 04:29:58 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/16 04:29:58 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/16 04:29:58 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/16 04:29:58 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/16 04:29:58 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/16 04:29:58 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/16 04:29:58 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/16 04:29:58 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/16 04:29:58 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/16 04:29:58 provision: dry-run: would converge owned.go.tito.io seed
2026/10/16 04:29:58 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/16 04:29:58 provision: converged owned.go.tito.io channel stable -> edge
2026/10/16 04:29:58 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/16 04:29:58 provision: converged owned.go.tito.io hibernate false -> true
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:58 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/16 04:29:58 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/16 04:29:58 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/16 04:29:58 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/16 04:29:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/16 04:29:59 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/16 04:29:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: removed retired static route site.go.tito.io (record gone)
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/16 04:29:59 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/16 04:29:59 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:29:59 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/16 04:29:59 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/16 04:29:59 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/16 04:29:59 provision: converged acme.go.tito.io channel stable -> edge
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/16 04:29:59 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/16 04:29:59 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/16 04:29:59 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/16 04:29:59 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/16 04:29:59 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/16 04:29:59 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/16 04:29:59 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/16 04:29:59 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/16 04:29:59 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/16 04:29:59 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/16 04:29:59 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/16 04:29:59 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/16 04:29:59 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/16 04:29:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:59 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/16 04:29:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:59 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/16 04:29:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:59 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/16 04:29:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:29:59 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/16 04:29:59 provision: a.shop.example.com: swapped for import sd_3p6x57suwy5ln3yairzctow3yy (the original route is journaled)
2026/10/16 04:29:59 provision: a.shop.example.com: import sd_3p6x57suwy5ln3yairzctow3yy committed: its gate is cleared and its journal row dropped
2026/10/16 04:29:59 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/16 04:29:59 provision: a.shop.example.com: import sd_2xzy3bi7xmaszyuqrfg4nrf7mi rolled back to its original route
2026/10/16 04:29:59 provision: a.shop.example.com: import sd_2xzy3bi7xmaszyuqrfg4nrf7mi: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/16 04:29:59 provision: a.shop.example.com: import sd_2xzy3bi7xmaszyuqrfg4nrf7mi is cleaned up and its journal row retired
2026/10/16 04:29:59 provision: a.shop.example.com: import sd_hj2i7b4sgvlvlvrwnus3xol444 rolled back to its original route
2026/10/16 04:29:59 provision: a.shop.example.com: import sd_hj2i7b4sgvlvlvrwnus3xol444: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/16 04:29:59 provision: a.shop.example.com: import sd_hj2i7b4sgvlvlvrwnus3xol444 is cleaned up and its journal row retired
2026/10/16 04:29:59 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_modcie7ggljy3zxw5qo2s6jcvu
2026/10/16 04:29:59 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/16 04:29:59 provision: dry-run: would converge a.shop.example.com seed source
2026/10/16 04:29:59 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/16 04:30:00 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/16 04:30:00 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/16 04:30:00 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_z7nhahhnqmzkmaoguvzl7lzv7i cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_vaehimgik676tublibwt53hx6m cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_7txnj6xyj5wg6vuwhwaazqxcky is journaled, but this box cannot act on imports; its row is left alone
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_pvvbyljcsenpfm3v5u7bw4nh74 is journaled, but this box cannot act on imports; its row is left alone
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_6voawmngsejhxtg4te33pavxg4 is journaled, but this box cannot act on imports; its row is left alone
2026/10/16 04:30:00 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/16 04:30:00 provision: b.shop.example.com: import sd_6oh232gxxjgpbta4y26o4ticga left alone this pass: the import journal could not be read
2026/10/16 04:30:00 provision: c.shop.example.com: import sd_gcdpitx4724k3k6gezk6onz7ju left alone this pass: the import journal could not be read
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_jkstwwtklnha5aocogzlpgtcda committed: its gate is cleared and its journal row dropped
2026/10/16 04:30:00 provision: a.shop.example.com: not converging import sd_a4j42jhakpusxnnco42merh7j4: it is swapped but not committed, and the row on this box has no import gate
2026/10/16 04:30:00 provision: a.shop.example.com: not converging import sd_uxbkyq5qjygt6pkkoibotex2si: it is swapped but not committed, and the row on this box has no import gate
2026/10/16 04:30:00 provision: a.shop.example.com: not converging import sd_2cev2xb3wj3uo4urygurlm5m54: it is placed but not committed, and the row on this box has no import gate
2026/10/16 04:30:00 provision: a.shop.example.com: not converging import sd_luwk662ycyre22xb5tij5tldgu: it is placed but not committed, and the row on this box has no import gate
2026/10/16 04:30:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/16 04:30:00 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/16 04:30:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_oa6uufshv65ck25cplypzthym4 committed: its gate is cleared and its journal row dropped
2026/10/16 04:30:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/16 04:30:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:00 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/16 04:30:00 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/16 04:30:00 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_5boqtofk7mlrmwmdazythbapim: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_5boqtofk7mlrmwmdazythbapim rolled back (no box had swapped it)
2026/10/16 04:30:00 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/16 04:30:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:00 provision: removed instance route acme.go.tito.io (its seed sd_7dk7amocz2py2pnyluo3bgkoaa was aborted); the next pass rolls it back
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_7dk7amocz2py2pnyluo3bgkoaa: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_7dk7amocz2py2pnyluo3bgkoaa rolled back (no box had swapped it)
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_amjammmp47gnjnyqpf44qgbthu has a row this pass may not remove; leaving the seed aborted
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_eyov2vo3qg3g62qg5at2bfli6m rolled back (no box had swapped it)
2026/10/16 04:30:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:00 provision: removed instance route acme.go.tito.io (its seed sd_tkzeil7ey7wjkglffw6xqk2s6y was aborted); the next pass rolls it back
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_tkzeil7ey7wjkglffw6xqk2s6y has no route on this box: its local data is removed
2026/10/16 04:30:00 provision: acme.go.tito.io: aborted seed sd_tkzeil7ey7wjkglffw6xqk2s6y rolled back (no box had swapped it)
2026/10/16 04:30:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_yxiy3bj2r7ecyoiahaws4topwq (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_yxiy3bj2r7ecyoiahaws4topwq rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_yxiy3bj2r7ecyoiahaws4topwq is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_baoawlfo7sz5x2tg2tecqmkzwu (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_baoawlfo7sz5x2tg2tecqmkzwu rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_baoawlfo7sz5x2tg2tecqmkzwu is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_q3mz3v4xoewjge2xx2bg377pze (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_q3mz3v4xoewjge2xx2bg377pze rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_q3mz3v4xoewjge2xx2bg377pze: the host's replica is left alone: its record no longer names this seed
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_q3mz3v4xoewjge2xx2bg377pze is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_fdbahgq6dnitwrcozise3su2cq (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_fdbahgq6dnitwrcozise3su2cq rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_fdbahgq6dnitwrcozise3su2cq rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_fdbahgq6dnitwrcozise3su2cq is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_mozo6gx3enykvs6jorevpjrftq (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_mozo6gx3enykvs6jorevpjrftq rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_wq45iqi4sjyfzeind45icer7vm (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_wq45iqi4sjyfzeind45icer7vm is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_66i7zfai365sqxhmrswz3mvjya (the original route is journaled)
2026/10/16 04:30:00 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_66i7zfai365sqxhmrswz3mvjya left alone this pass: its record could not be read
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_v35bm2eo5ulavia53h2nbyahfi (the original route is journaled)
2026/10/16 04:30:00 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_v35bm2eo5ulavia53h2nbyahfi left alone this pass: its record could not be read
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_2l3zt72676jeg3q4l6j3yhrd5m (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_2l3zt72676jeg3q4l6j3yhrd5m: close the import gate: constraint failed: injected (1811)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_2l3zt72676jeg3q4l6j3yhrd5m rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_2l3zt72676jeg3q4l6j3yhrd5m is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_iunfmjbnyyglg5biy7g66jidnq (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_iunfmjbnyyglg5biy7g66jidnq: close the import gate: constraint failed: injected (1811)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_iunfmjbnyyglg5biy7g66jidnq rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_iunfmjbnyyglg5biy7g66jidnq is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_fnpsdpm6rifadq2hvwzk64gnne (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_fnpsdpm6rifadq2hvwzk64gnne rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_fnpsdpm6rifadq2hvwzk64gnne rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_fnpsdpm6rifadq2hvwzk64gnne is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_uwlkur2yefq3yfggvv5n6jm26y (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_uwlkur2yefq3yfggvv5n6jm26y rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_uwlkur2yefq3yfggvv5n6jm26y is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_kdfgo4ozqcxscufz3rzzl6r65a (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_kdfgo4ozqcxscufz3rzzl6r65a: retire its instance key: injected failure at retire-key
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_kdfgo4ozqcxscufz3rzzl6r65a rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_kdfgo4ozqcxscufz3rzzl6r65a is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_ujms3tp3mxmyydswqahgnwjzeq (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_ujms3tp3mxmyydswqahgnwjzeq rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_ujms3tp3mxmyydswqahgnwjzeq is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_2zytvcqu6mvk3xwuh2ac2k6rsy (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_2zytvcqu6mvk3xwuh2ac2k6rsy: remove its local data: injected failure at remove-local
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_2zytvcqu6mvk3xwuh2ac2k6rsy rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_2zytvcqu6mvk3xwuh2ac2k6rsy is cleaned up and its journal row retired
2026/10/16 04:30:00 provision: a.shop.example.com: swapped for import sd_oyqdom2kbxp6imm3qct3v3ckkq (the original route is journaled)
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_oyqdom2kbxp6imm3qct3v3ckkq rolled back to its original route
2026/10/16 04:30:00 provision: a.shop.example.com: import sd_oyqdom2kbxp6imm3qct3v3ckkq is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_ueiqnk4rd6qjbg6vmwmm5piv5q (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ueiqnk4rd6qjbg6vmwmm5piv5q: remove its local data: injected failure at remove-local-done
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ueiqnk4rd6qjbg6vmwmm5piv5q rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ueiqnk4rd6qjbg6vmwmm5piv5q is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_l4zzdrwgz7neiimb6gqakkwukm (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_l4zzdrwgz7neiimb6gqakkwukm rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_l4zzdrwgz7neiimb6gqakkwukm is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_ybj5b5h7hifkhfnm6p3utgxyqi (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ybj5b5h7hifkhfnm6p3utgxyqi: restore the original route: constraint failed: injected (1811)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ybj5b5h7hifkhfnm6p3utgxyqi rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ybj5b5h7hifkhfnm6p3utgxyqi is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_rgsevinnei2vmomyc4727lhuwa (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rgsevinnei2vmomyc4727lhuwa: restore the original route: constraint failed: injected (1811)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rgsevinnei2vmomyc4727lhuwa rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rgsevinnei2vmomyc4727lhuwa is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_i7utzmkgpvs4ecr3clldibauoa (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_i7utzmkgpvs4ecr3clldibauoa is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_f4i4qeehi2fheg6lxdfepnwtqa (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_f4i4qeehi2fheg6lxdfepnwtqa rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_f4i4qeehi2fheg6lxdfepnwtqa: delete its snapshot: injected failure at delete-snapshot
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_f4i4qeehi2fheg6lxdfepnwtqa is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_s2cwwc3ckhrbe36ewwt246akba (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_s2cwwc3ckhrbe36ewwt246akba rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_s2cwwc3ckhrbe36ewwt246akba is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_ki2xzazzafqveviqyhw6mgj7ky (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ki2xzazzafqveviqyhw6mgj7ky rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ki2xzazzafqveviqyhw6mgj7ky: delete the host's replica: injected failure at delete-replica
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ki2xzazzafqveviqyhw6mgj7ky is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_rgjbf67x76p3orryfs7scmld5e (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rgjbf67x76p3orryfs7scmld5e rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rgjbf67x76p3orryfs7scmld5e is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_tw6nss6c4mn5kzgpm3as6s2cha (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_tw6nss6c4mn5kzgpm3as6s2cha rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_tw6nss6c4mn5kzgpm3as6s2cha: retire its journal row: constraint failed: injected (1811)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_tw6nss6c4mn5kzgpm3as6s2cha is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_i3ruqynxuaow6a5tf6hjla6dn4 (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_i3ruqynxuaow6a5tf6hjla6dn4 rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_i3ruqynxuaow6a5tf6hjla6dn4: retire its journal row: constraint failed: injected (1811)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_i3ruqynxuaow6a5tf6hjla6dn4 is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_wmasgyupqcx3iqjfmvkqtldtiu (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_wmasgyupqcx3iqjfmvkqtldtiu rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_wmasgyupqcx3iqjfmvkqtldtiu is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: mark import sd_wmasgyupqcx3iqjfmvkqtldtiu rolled back: injected failure at cas
2026/10/16 04:30:01 provision: a.shop.example.com: aborted seed sd_wmasgyupqcx3iqjfmvkqtldtiu rolled back (no box had swapped it)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_tupfeddhcwfvcyszefvqdfrusq (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_tupfeddhcwfvcyszefvqdfrusq rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_tupfeddhcwfvcyszefvqdfrusq is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: aborted seed sd_tupfeddhcwfvcyszefvqdfrusq rolled back (no box had swapped it)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_mh2jqeex5ezeayjkbndaxlzkau (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_mh2jqeex5ezeayjkbndaxlzkau rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_mh2jqeex5ezeayjkbndaxlzkau rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_mh2jqeex5ezeayjkbndaxlzkau rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_mh2jqeex5ezeayjkbndaxlzkau is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_suultff5iqwfavwyipcytqvivm (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_suultff5iqwfavwyipcytqvivm rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_suultff5iqwfavwyipcytqvivm is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_rrvlfb7awcduvqzwyxufnm6aua (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rrvlfb7awcduvqzwyxufnm6aua rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rrvlfb7awcduvqzwyxufnm6aua is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_fppze3r7dl4aqrv7yl3zc3xg4i (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_fppze3r7dl4aqrv7yl3zc3xg4i rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_fppze3r7dl4aqrv7yl3zc3xg4i is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_5a7v5hftxo7n3wijii3ekb46si (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_5a7v5hftxo7n3wijii3ekb46si rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_5a7v5hftxo7n3wijii3ekb46si is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_m57poe6ltk2u274a7uusz3wr4q (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_m57poe6ltk2u274a7uusz3wr4q rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_m57poe6ltk2u274a7uusz3wr4q is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_ijftjhbj5s3hppnxtuvd5h7tny (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ijftjhbj5s3hppnxtuvd5h7tny rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ijftjhbj5s3hppnxtuvd5h7tny is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_nm4epvmmpetl5oeafztcklm3rq (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_nm4epvmmpetl5oeafztcklm3rq rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_nm4epvmmpetl5oeafztcklm3rq is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_msxuu6divhmlhlbx3gkghixedy (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_msxuu6divhmlhlbx3gkghixedy has no route on this box: its local data is removed and no route is put back
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_msxuu6divhmlhlbx3gkghixedy is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_etalmm4emrycgoahkt5zfbc5q4 (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_yinxgu3rmjsn6iodw37xrslktm (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_p2nfilrt6awqx5wqvdf5ust4ba (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_p2nfilrt6awqx5wqvdf5ust4ba cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_64f4hwixnavbe3a23eipupm65i (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_64f4hwixnavbe3a23eipupm65i is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/16 04:30:01 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/16 04:30:01 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_hrkzoll4rg6ykekksvumckjkmq (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_dqw7ord4oxr2mmj4h7rxs645rm (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_tsgnel7lejnmhipghkt6yq2jyy (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_53hktaxqd2fg7c5wi7gb3qivd4 (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_umdpr6ncmj2t33rxdu7mlzkofu (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_umdpr6ncmj2t33rxdu7mlzkofu rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_ljlkt5e7l5jp3gtif7ztoyd62i (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ljlkt5e7l5jp3gtif7ztoyd62i has no route on this box: its local data is removed and no route is put back
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_ljlkt5e7l5jp3gtif7ztoyd62i is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_vdsdshf56qafttwvmgnlkucv5q (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_vdsdshf56qafttwvmgnlkucv5q: remove its local data: injected failure at remove-local
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_vdsdshf56qafttwvmgnlkucv5q is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_4inzn6rjnna4zwiuy7266ywx2q (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_4inzn6rjnna4zwiuy7266ywx2q: a route appeared at the host, so its local database is left and the rollback waits
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_fovqc3t4vuglm5nkhramyzk24e (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_fovqc3t4vuglm5nkhramyzk24e rollback deferred: no fence generation: registry busy
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_frvpyluwwiezw4mo37jq4umtrq (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_frvpyluwwiezw4mo37jq4umtrq rollback deferred: no fence generation: the generation source answered 0
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_gtxialagjfz72ir3cstxxilcni (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_whgwnhvvgqb2gtfdrehqbpfae4 (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_blsxeimc2ovgizmt7e6bf7fe2i (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/16 04:30:01 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_euxtf4c2xjs6chqoojoob5vdeu (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_euxtf4c2xjs6chqoojoob5vdeu rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_euxtf4c2xjs6chqoojoob5vdeu is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_wucdsuvfxci5jjr52fgdyz7eyu (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_wucdsuvfxci5jjr52fgdyz7eyu rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_wucdsuvfxci5jjr52fgdyz7eyu is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_pcuev4sjwi36pny5ucg3k5zvhe (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_pcuev4sjwi36pny5ucg3k5zvhe rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_pcuev4sjwi36pny5ucg3k5zvhe is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_4r5gidwmwbjkdv2jz7lpjtyukq (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_4r5gidwmwbjkdv2jz7lpjtyukq: retire its instance key: the env file is a symlink
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_4r5gidwmwbjkdv2jz7lpjtyukq rolled back to its original route
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_4r5gidwmwbjkdv2jz7lpjtyukq is cleaned up and its journal row retired
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_eu3w3dcxzwjtqg33y2hdbsmaly (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/16 04:30:01 provision: a.shop.example.com: swapped for import sd_v4d5zmedrmal3evpyhs5n3ey5q (the original route is journaled)
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_go744mnmjmbmjrxpuqr2iy5dhe refused: there is no route at a.shop.example.com to replace
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_uiuydv55silwactx7tc7uxvziq refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_z4sxsmm26s4reevt5jk4nieyqi refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_k7rrsx4r53lemg4camxubnvxdu refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_6dqmlhvwx7eokfuap4yi5ikbxi refused: the route belongs to app other
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_rjhuutzbgrxg6xwcwvlvnw7nfu refused: the route is filed under another account
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_4omdygrnzwfi7unmxlbpqvb52i refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/16 04:30:01 provision: a.shop.example.com: import sd_oyhzr3pi7abzwxrws54g3g6p74 refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_gr3eb7h56mclg2lk6vcvhcsq24 refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_3y5fywmxrhqepxu7gqchytaelq refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_5ropjxzbcmksofwnbugpi6ven4 refused: the route is not an address route this import can take over (socket)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_minfdyv6iwg7l3flluqgk6y7ie refused: the route is not an address route this import can take over (no address)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_aqf5vyfcfpz7lgle6ykem323ui refused: the route is not an address route this import can take over (provisioned)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_by4zieblbqvn7bos7mywxd3kuu refused: the route is not an address route this import can take over (kind static)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_ks53jp23vxipq6puoz72doljkm refused: the route is not an address route this import can take over (backing)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_4euozr52rpcnup7c3246cjidke refused: the route is not an address route this import can take over (tunnel)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_plicfapk563k5j4fznazvzdolm refused: the route is not an address route this import can take over (caps)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_xqlky7pnjj7npwyhpl55id7oje refused: the route is not an address route this import can take over (platform)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_qomzg4zwbxjggyemfcga5tepza refused: the route is not an address route this import can take over (canary)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_zmr75lvz4hciyjkqzkr3q77nym refused: the route is not an address route this import can take over (kind sidecar)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_jinvot3x7adw64pqrhottt36ke refused: the route is not an address route this import can take over (region)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_2wryid42lx6tgi7mqeqqbppw5m refused: the route is not an address route this import can take over (fleet_box)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_b2zzcjcsjhlnuqwpqlcu4p62yq refused: the route is not an address route this import can take over (hibernate)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_575u4mb3kvnkj2zfvtp66zlxmu refused: the route is not an address route this import can take over (claim_owner)
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_qfasz3urqegggrsv5y5e3ylbau refused: this box does not run instances nested
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_ihao7xu632etabyilob2gu5r7a refused: this box does not run instances nested
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_3nqoik7txjfxz345rfazxbhzpy refused: claim control is on for this box
2026/10/16 04:30:02 provision: a.shop.example.com: swapped for import sd_ujfwbeqc2nwkn6s3dh2awjvvpa (the original route is journaled)
2026/10/16 04:30:02 provision: a.shop.example.com: swapped for import sd_v3vfqjwowtpxrdkxvwlmo6idfu (the original route is journaled)
2026/10/16 04:30:02 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/16 04:30:02 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_r5zhaahfrttu6sblp6pmrvcu2q: its verify hash is not a sha256
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_fzk6hfhl4f232rli76x3qrvr7y: its verify hash is not a sha256
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_twgmpnxd7wdul77j7peqjdq3xa: its verify hash is not a sha256
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/16 04:30:02 provision: A.shop.example.com/..: not swapping for import sd_x3q5tachzyjrkyoj4dzyuzxbre: its host or seed id is malformed (seeds: not a host)
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_jm4kjfxq3z74dm7vsg3fi2jmnq: its record does not describe a nested, hibernating instance
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_u2r63gvquf3k7m37uo6z3tztly: its record does not describe a nested, hibernating instance
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_5ggstslvvz45igcvsor3zfpphe: its record does not describe a nested, hibernating instance
2026/10/16 04:30:02 provision: a.shop.example.com: not swapping for import sd_vamgn656vfyhpuzve667di3sye: its record does not describe a nested, hibernating instance
2026/10/16 04:30:02 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/16 04:30:02 provision: a.shop.example.com: swapped for import sd_mjhwo3fuq6y7rasr4ojzpvlv6i (the original route is journaled)
2026/10/16 04:30:02 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/16 04:30:02 provision: a.shop.example.com: swapped for import sd_ujuzielpg6jibjaj2vzqgxbb5y (the original route is journaled)
2026/10/16 04:30:02 provision: a.shop.example.com: swapped for import sd_bzluyxj5jpklstzskk7j3ntmy4 (the original route is journaled)
2026/10/16 04:30:02 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/16 04:30:02 provision: dry-run: would consider swapping a.shop.example.com for import sd_squ7muxvsbqont5wkqh4u67l7y
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_hyvxo3rifk62w7gb3gnwqpxlga rolled back to its original route
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_hyvxo3rifk62w7gb3gnwqpxlga: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_hyvxo3rifk62w7gb3gnwqpxlga is cleaned up and its journal row retired
2026/10/16 04:30:02 provision: a.shop.example.com: import sd_7bjsrxnhsb6zc7lhgssbz3h2j4 left alone: the import journal holds seed sd_sztrlxbztdo2a7x2xnjoduxfyu at swapped
2026/10/16 04:30:02 provision: a.shop.example.com: not minting import sd_3ffttwabhvk3fqubbazxkash5a: it is swapped but not committed, and only its swap makes its row
2026/10/16 04:30:02 provision: a.shop.example.com: not minting import sd_d3fxotqfm2x4et7yjv74rc5sga: it is placed but not committed, and only its swap makes its row
2026/10/16 04:30:02 provision: a.shop.example.com: swapped for import sd_gkd7m7yeaioseoevmbi6q23v2m (the original route is journaled)
2026/10/16 04:30:02 provision: a.shop.example.com: not minting import sd_gkd7m7yeaioseoevmbi6q23v2m: it is swapped but not committed, and only its swap makes its row
2026/10/16 04:30:02 provision: a.shop.example.com: not minting import sd_gkd7m7yeaioseoevmbi6q23v2m: it is placed but not committed, and only its swap makes its row
2026/10/16 04:30:02 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/16 04:30:02 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/16 04:30:02 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/16 04:30:02 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/16 04:30:02 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/16 04:30:02 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/16 04:30:02 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/16 04:30:02 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/16 04:30:02 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/16 04:30:02 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/16 04:30:02 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/16 04:30:02 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/16 04:30:02 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/16 04:30:02 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/16 04:30:02 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/16 04:30:02 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/16 04:30:02 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/16 04:30:02 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/16 04:30:02 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/16 04:30:02 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/16 04:30:02 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/16 04:30:02 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/16 04:30:02 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/16 04:30:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:02 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/16 04:30:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:02 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/16 04:30:03 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/16 04:30:03 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/16 04:30:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/16 04:30:03 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/16 04:30:03 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/16 04:30:03 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL github.com/carlosframework/platform/internal/provision 15.706s
ok github.com/carlosframework/platform/internal/publicrelease 0.007s
? github.com/carlosframework/platform/internal/regionname [no test files]
ok github.com/carlosframework/platform/internal/registry 4.891s
ok github.com/carlosframework/platform/internal/relay 7.223s
ok github.com/carlosframework/platform/internal/release 19.458s
ok github.com/carlosframework/platform/internal/rollout 3.671s
ok github.com/carlosframework/platform/internal/rolloutwords 0.003s
ok github.com/carlosframework/platform/internal/rootaws 0.007s
ok github.com/carlosframework/platform/internal/rootparticipation 0.007s
ok github.com/carlosframework/platform/internal/rootstate 0.025s
ok github.com/carlosframework/platform/internal/runs 0.570s
ok github.com/carlosframework/platform/internal/s3compat 0.005s
ok github.com/carlosframework/platform/internal/safefile 0.003s
ok github.com/carlosframework/platform/internal/schedule 2.463s
ok github.com/carlosframework/platform/internal/seeds 0.011s
ok github.com/carlosframework/platform/internal/sim/hostlife 9.097s
ok github.com/carlosframework/platform/internal/sim/litestreamfacts 3.505s
ok github.com/carlosframework/platform/internal/status 0.038s
ok github.com/carlosframework/platform/internal/steering 0.006s
ok github.com/carlosframework/platform/internal/stopevidence 0.231s
ok github.com/carlosframework/platform/internal/svcrole 0.002s
ok github.com/carlosframework/platform/internal/telemetry 0.004s
ok github.com/carlosframework/platform/internal/termfence 0.004s
ok github.com/carlosframework/platform/internal/tunnelclient 0.004s
ok github.com/carlosframework/platform/internal/unixdial 0.002s
ok github.com/carlosframework/platform/internal/updatewords 0.004s
ok github.com/carlosframework/platform/internal/usage 0.004s
ok github.com/carlosframework/platform/internal/version 0.002s
ok github.com/carlosframework/platform/internal/vet 1.545s
FAIL
make: *** [Makefile:18: test] Error 1
amadan: step gate failed: exit status 2
amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/docs/superpowers/specs/CODEX-REVIEW-BRIEF-INSTANCE-BOUND-TOKENS-FINAL.md b/docs/superpowers/specs/CODEX-REVIEW-BRIEF-INSTANCE-BOUND-TOKENS-FINAL.md| new file mode 100644 |
| index 000000000..efca1dbc3 |
| --- /dev/null |
| +++ b/docs/superpowers/specs/CODEX-REVIEW-BRIEF-INSTANCE-BOUND-TOKENS-FINAL.md |
| @@ -0,0 +1,84 @@ |
| +# Final review brief: instance-bound tokens (#155 half 1), whole branch |
| + |
| +You are the whole-branch code reviewer for branch `instance-bound-tokens-155` |
| +in this repository. Read-only: do not change the working tree, the index, |
| +HEAD or any branch. Do all of the review yourself; do not start other agents. |
| + |
| +## What was implemented |
| + |
| +A `cli_tokens` kind `instance` bound to one incarnation of one instance host, |
| +resolving to a role `svcrole.Self` that is outside the mintable catalogue and |
| +reaches six doors for its own host only; the host check in `cliRoute`; a |
| +`selfBinding` carried into every record read on those doors; in-app update |
| +settings writes limited to `instance_control`; a person-only mint door and |
| +`carlos instances token`. No automatic delivery (that is half 2). |
| + |
| +## Requirements |
| + |
| +- Spec (binding authority): `docs/superpowers/specs/2026-10-16-instance-bound-tokens-design.md` |
| + (rev 4, amended in §3.4 by the Task 6 ruling below). §2 holds the owner's |
| + rulings: do not reopen them. |
| +- Plan: `docs/superpowers/plans/2026-10-16-instance-bound-tokens.md`. |
| +- Earlier spec review rounds: `docs/superpowers/specs/CODEX-FINDINGS-INSTANCE-BOUND-TOKENS-R{1,2,3}.md`. |
| + |
| +## Git range |
| + |
| + git diff --stat ee35dee2..HEAD -- . ':!docs/superpowers' |
| + git diff ee35dee2..HEAD -- . ':!docs/superpowers' |
| + |
| +## The spec is a vision document |
| + |
| +For behaviour the spec is silent on, judge by what a reasonable person using |
| +this software would expect, and grade by the effect on that person. |
| + |
| +## Review focus (from the plan; check each deliberately) |
| + |
| +1. A Self token whose host is spelled differently from the record (upper case, trailing dot, percent-encoded): must be the canonical 404, never a match after normalisation. Pinned in Task 3. |
| +2. A Self token on a door with `{host}` that is NOT one of the six (delete, move mutations, import, channel, runs, db, email instance doors): must be the role 403 even for its own host. Pinned by Task 4's whole-route table. |
| +3. An app with no instances manifest or no `updates` policy: `instance_control` is empty, so Self can change nothing and install nothing. Pinned in Task 5. |
| +4. The browser settings page (`browserupdates.go`) shares `readUpdatesTarget`, `applyUpdates` and `requestInstall`: a person there must behave exactly as before. Pinned in Task 5 by running the existing browser updates tests unchanged. |
| +5. A minting member who later loses membership: the token keeps working (it belongs to the account, like app tokens) but they cannot revoke it from `/settings`; an owner can from the account pane. Pinned in Task 6. |
| + |
| +## Rulings the executor made (weigh them) |
| + |
| +- Task 2: Ruling: helper renamed mintInstanceToken → mintBoundToken — the name is taken by apiinstancesprivatestore_test.go — cost if wrong: none. Gated variants run for mint/revoke only (newClaimCase); lifecycle SQL (purge/rename/move) tested on the plain store like its existing twins — the gated lifecycle paths need a full claim world per op and their kind lists are the same SQL — cost if wrong: a gate refusal on purge of instance rows found only in CI's claim census. |
| +- Task 4: Ruling: the three update doors' registration moves from Task 4 to Task 5 (selfDoorsOpen = selfDoors[:3] until then) — so no commit admits Self to them before their binding and instance_control checks exist — cost if wrong: none. |
| +- Task 4: Ruling: the PATCH-refusal test asserts the record ETag unchanged but not the environment bundle or the seed marker — the Self refusal returns before any read or write, so the ETag plus handler order is the evidence — cost if wrong: a side effect before the refusal would go unseen. |
| +- Task 6: Ruling: delete revokes instance tokens AFTER the record is gone, best effort (spec rev 4 said before, fail closed) — revoke-first refused a claim-mode delete retry under the app's own exclusive operation (TestClaimDeleteRetryWhileParkingIsNotDone → 500); the incarnation check is the guarantee per spec §3.4 — cost if wrong: a failed revoke leaves a token row live that can only 404. Spec §3.4 updated. |
| +- Task 6: Ruling: TestControlPlaneAppRefusesAService{Promote,Rollback} fail locally with "error obtaining VCS status" building a cross-compiled test binary in this worktree — environmental (known: local gate needs GOFLAGS=-buildvcs=false), not this branch — cost if wrong: a real failure hidden until CI. |
| +- Task 6: Ruling: the mint door gets a claim census fixture (claimDoor over web.go.tito.io) and a claim-routes.txt line, as the app-token mint has. |
| +- Task 8: Ruling: root-package verb tests (TestShipVerb*, TestPromoteVerbAPIMode, TestDomainsCLIUsageErrors, and others) fail locally because config discovery walks up from the worktree to /home/paulca/.carlos/config — environmental for every checkout under $HOME, untouched by this branch — locally ran only the copy/docs/instances/usage pins; CI's full run is the gate — cost if wrong: a real root-package failure found in CI. |
| +- Task 4/8: Ruling: the PATCH Self refusal is emitted from refuseSelfPatchFields in instancetoken.go, not inline in apiinstances.go — the moves copy gate scans apiinstances.go as a legacy (main-only) file and the sentence is #155's copy, not moves copy — cost if wrong: none. |
| + |
| +## What to check, above all |
| + |
| +1. Any path by which a Self token for host A reads or changes anything about |
| + host B, the app as a whole, or another app or account; or by which an |
| + app-wide credential (Instance, Admin, any other role) gained reach it did |
| + not have at ee35dee2. |
| +2. Any consumer of token kind, `Principal.Name`, `Principal.App` or role that |
| + misreads an instance row. |
| +3. Lifetime: incarnation checks at every record read on the six doors; |
| + purge, trash/restore, rename, account move; the delete revoke. |
| +4. Claim-gate correctness of every new `cli_tokens` write. |
| +5. Tests that would pass while the property they name is false. |
| + |
| +Also: plan alignment, error handling, backward compatibility (an older |
| +console sharing the database), and test quality. Skip copy wording: the |
| +user-facing strings are in Paul's copy review now. |
| + |
| +## Output |
| + |
| +### Strengths |
| +### Issues |
| +#### Critical (Must Fix) |
| +#### Important (Should Fix) |
| +#### Minor (Nice to Have) |
| +For each: file:line, the scenario, why it matters, and a fix. |
| +### Declined to judge |
| +One line per behaviour you set aside, with the reason. |
| +### Verdict |
| +Ready to merge: yes / no / with fixes. |
| + |
| +Leave GOCACHE unset. You may run targeted tests (`go test ./internal/console/ |
| +-run 'TestSelf|TestInstanceToken'`), not the full suite. |