amadan
harness: Run 11 G6 PASS, G7 FAIL: journal-migrate's census refuses the agent's lingering router cache system/router/v0.28.15/carlos after a plain update (systemleg.go:127-128, claimcensus.go:71/93-111); snapshot g7-fail-r11
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 files changed,
+336
−0
harness/RUNLOG.md+38 −0harness/evidence/run11/g7-fail.log+67 −0harness/evidence/run11/window.log+231 −0
CI failed — run details
CI log
=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok amadan.net/carlos/platform.git/launchctx 0.011s
? amadan.net/carlos/platform.git/launchctx/controlname [no test files]
? amadan.net/carlos/platform.git/launchctx/wireid [no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok github.com/carlosframework/platform 315.395s
? github.com/carlosframework/platform/cmd/changelog [no test files]
ok github.com/carlosframework/platform/cmd/console 3.001s
ok github.com/carlosframework/platform/cmd/moveprobe 92.179s
ok github.com/carlosframework/platform/cmd/zddprobe 0.702s
? github.com/carlosframework/platform/harness/apps/wakecheck [no test files]
ok github.com/carlosframework/platform/internal/activator 250.891s
ok github.com/carlosframework/platform/internal/agentsock 0.017s
ok github.com/carlosframework/platform/internal/alerting 0.003s
ok github.com/carlosframework/platform/internal/analytics 0.019s
ok github.com/carlosframework/platform/internal/appconfig 2.507s
ok github.com/carlosframework/platform/internal/apperr 0.072s
ok github.com/carlosframework/platform/internal/applog 0.124s
ok github.com/carlosframework/platform/internal/awsinv 0.003s
ok github.com/carlosframework/platform/internal/boxchoice 0.004s
ok github.com/carlosframework/platform/internal/boxid 0.670s
? github.com/carlosframework/platform/internal/boxid/boxidtest [no test files]
? github.com/carlosframework/platform/internal/boxid/internal/signtest [no test files]
ok github.com/carlosframework/platform/internal/boxvolumes 0.008s
ok github.com/carlosframework/platform/internal/caps 0.013s
ok github.com/carlosframework/platform/internal/certwarm 0.002s
ok github.com/carlosframework/platform/internal/cgroup 0.695s
ok github.com/carlosframework/platform/internal/changelog 0.314s
ok github.com/carlosframework/platform/internal/claimactivation 0.752s
ok github.com/carlosframework/platform/internal/clamd 0.054s
? github.com/carlosframework/platform/internal/cliflag [no test files]
ok github.com/carlosframework/platform/internal/console 404.723s
? github.com/carlosframework/platform/internal/controlname [no test files]
? github.com/carlosframework/platform/internal/controlsock [no test files]
ok github.com/carlosframework/platform/internal/dbdoor 6.141s
ok github.com/carlosframework/platform/internal/dbdoor/dbdoortest 0.009s
ok github.com/carlosframework/platform/internal/dbverify 0.004s
ok github.com/carlosframework/platform/internal/dnsrec 0.002s
ok github.com/carlosframework/platform/internal/docsite 0.005s
ok github.com/carlosframework/platform/internal/domains 2.412s
ok github.com/carlosframework/platform/internal/doorkey 0.006s
ok github.com/carlosframework/platform/internal/economics 0.003s
ok github.com/carlosframework/platform/internal/edge 44.762s
? github.com/carlosframework/platform/internal/edgeproof [no test files]
ok github.com/carlosframework/platform/internal/edgesfile 0.008s
ok github.com/carlosframework/platform/internal/fleetapi 0.134s
ok github.com/carlosframework/platform/internal/gate 1.656s
ok github.com/carlosframework/platform/internal/genselect 0.015s
ok github.com/carlosframework/platform/internal/geo 0.017s
ok github.com/carlosframework/platform/internal/geoip 0.030s
ok github.com/carlosframework/platform/internal/historyreadback 0.153s
ok github.com/carlosframework/platform/internal/host 180.938s
ok github.com/carlosframework/platform/internal/hostactors 5.373s
ok github.com/carlosframework/platform/internal/hostactors/awsmembership 0.004s
ok github.com/carlosframework/platform/internal/hostbox 2.640s
ok github.com/carlosframework/platform/internal/hostclaim 0.628s
ok github.com/carlosframework/platform/internal/hostenv 0.004s
ok github.com/carlosframework/platform/internal/hostevidence 0.005s
ok github.com/carlosframework/platform/internal/hostexec 4.761s
ok github.com/carlosframework/platform/internal/hostfence 0.030s
ok github.com/carlosframework/platform/internal/hostfiles 10.340s
ok github.com/carlosframework/platform/internal/hostfloor 0.014s
ok github.com/carlosframework/platform/internal/hostguard 1.036s
ok github.com/carlosframework/platform/internal/hostops 1.639s
? github.com/carlosframework/platform/internal/hostops/fencerelease [no test files]
ok github.com/carlosframework/platform/internal/hostops/internal/fencerelease 0.002s
ok github.com/carlosframework/platform/internal/hostquarantine 0.005s
ok github.com/carlosframework/platform/internal/hostrelocate 0.474s
ok github.com/carlosframework/platform/internal/hostresolve 0.148s
ok github.com/carlosframework/platform/internal/hostwrite 0.002s
ok github.com/carlosframework/platform/internal/infraview 0.015s
ok github.com/carlosframework/platform/internal/instancectl 5.224s
ok github.com/carlosframework/platform/internal/instanceexec 2.767s
ok github.com/carlosframework/platform/internal/instancefs 0.008s
ok github.com/carlosframework/platform/internal/instancekey 0.002s
ok github.com/carlosframework/platform/internal/instanceupdates 0.006s
ok github.com/carlosframework/platform/internal/layout 1.539s
ok github.com/carlosframework/platform/internal/lbhealth 0.004s
ok github.com/carlosframework/platform/internal/lease 9.804s
ok github.com/carlosframework/platform/internal/lease/leasetest 0.005s
ok github.com/carlosframework/platform/internal/ledger 0.012s
ok github.com/carlosframework/platform/internal/mail 0.151s
ok github.com/carlosframework/platform/internal/maintenance 0.076s
ok github.com/carlosframework/platform/internal/maintenanceexec 5.475s
ok github.com/carlosframework/platform/internal/maintenanceguard 0.093s
ok github.com/carlosframework/platform/internal/metrics 0.005s
ok github.com/carlosframework/platform/internal/moves 20.883s
ok github.com/carlosframework/platform/internal/moves/archive 0.802s
ok github.com/carlosframework/platform/internal/objstore 0.196s
ok github.com/carlosframework/platform/internal/ops 0.179s
ok github.com/carlosframework/platform/internal/park 0.197s
ok github.com/carlosframework/platform/internal/privatefile 0.003s
2026/10/20 23:29:32 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/20 23:29:32 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 23:29:32 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 23:29:32 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/20 23:29:32 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 23:29:32 provision: an app's records could not be listed: they are skipped
2026/10/20 23:29:32 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:32 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 23:29:32 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 23:29:32 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 23:29:32 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 23:29:32 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 23:29:32 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/20 23:29:32 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:29:32 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 23:29:32 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:29:32 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 23:29:32 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:29:32 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:29:32 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 23:29:32 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:29:32 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 23:29:32 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 23:29:32 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 23:29:32 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 23:29:32 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:29:32 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:32 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:32 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:32 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:29:32 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:32 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:32 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 23:29:32 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 23:29:32 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/20 23:29:32 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/20 23:29:32 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:29:32 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:32 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:33 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (4.72s)
plan14_root_reads_test.go:940: root read census: 148 discrepancies
changed root read internal/hostfence/writer.go:OpenRootFenceStore; review class, task, sites and digest
changed root source envelope harness
changed root source envelope harness/apps/wakecheck
changed root source envelope harness/boxes
changed root source envelope harness/boxes/shims
changed root source envelope harness/checks
changed root source envelope harness/console
changed root source envelope harness/infra
changed root source envelope harness/infra-copies/747f699/dev
changed root source envelope harness/infra-copies/a0b3f5a/dev
changed root source envelope harness/infra-copies/a0b3f5a/scripts
changed root source envelope harness/infra-copies/pr47
changed root source envelope harness/operator
changed root source envelope harness/release
changed root source envelope harness/scenarios
changed root source envelope harness/scenarios/cohort1
changed root source envelope harness/scenarios/cohort1/blocks
changed root source envelope harness/stand-ins
changed root source envelope internal/host
changed root source envelope internal/hostfence
changed root source envelope internal/publicrelease
changed root source envelope internal/s3compat
unclassified root read harness/apps/wakecheck/main.go:main file:Exec@333,file:Exec@804,file:Open@277,file:QueryRow@870
unclassified root read harness/boxes/boxes-up.sh:external file:external@0
unclassified root read harness/boxes/dmi-shim.sh:external file:external@0
unclassified root read harness/boxes/layout-probe.sh:external file:external@0
unclassified root read harness/boxes/leo-ext4-from.sh:external file:external@0
unclassified root read harness/boxes/leo-ext4.sh:external file:external@0
unclassified root read harness/boxes/leo-swap.sh:external file:external@0
unclassified root read harness/boxes/shims/systemd-zram-setup@.service:external file:external@0
unclassified root read harness/boxes/vendor-shims.sh:external file:external@0
unclassified root read harness/checks/check2.sh:external file:external@0
unclassified root read harness/checks/check5.sh:external file:external@0
unclassified root read harness/checks/check6.sh:external file:external@0
unclassified root read harness/checks/check6b.sh:external file:external@0
unclassified root read harness/checks/check7.sh:external file:external@0
unclassified root read harness/checks/check8.sh:external file:external@0
unclassified root read harness/checks/fix5.sh:external file:external@0
unclassified root read harness/checks/run6b.sh:external file:external@0
unclassified root read harness/checks/snap-base.sh:external file:external@0
unclassified root read harness/checks/snap-boot.sh:external file:external@0
unclassified root read harness/checks/ssmsmoke.sh:external file:external@0
unclassified root read harness/console/console-ext4.sh:external file:external@0
unclassified root read harness/console/console-setup.sh:external file:external@0
unclassified root read harness/console/signin.sh:external file:external@0
unclassified root read harness/console/system-update.sh:external file:external@0
unclassified root read harness/donor-user-data.sh:external file:external@0
unclassified root read harness/evidence.sh:external file:external@0
unclassified root read harness/host-setup.sh:external file:external@0
unclassified root read harness/host-user-data.sh:external file:external@0
unclassified root read harness/hrun.sh:external file:external@0
unclassified root read harness/infra-copies/747f699/dev/host-init.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/dev/host-init.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/scripts/bootstrap-box.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/scripts/ship-app.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/scripts/update-platform-binary.sh:external file:external@0
unclassified root read harness/infra-copies/pr47/probe.sh:external file:external@0
unclassified root read harness/infra-copies/pr47/remediation.sh:external file:external@0
unclassified root read harness/infra/infra-setup.sh:external file:external@0
unclassified root read harness/operator/operator-setup.sh:external file:external@0
unclassified root read harness/release/release-setup.sh:external file:external@0
unclassified root read harness/release/release-window.sh:external file:external@0
unclassified root read harness/release/step7-operator.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/50-publish-record.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/51-open-signer.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/51-roster-resume.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/51-roster.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/61-sign.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/61a-install-channel.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/62-guard-arm.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/63-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/63-sophie.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-console-report.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-evidence-key.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-runtime.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/74-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7a-leo.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7a-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/acceptance.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b1.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b2-c8.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b2-list.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b2.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4-after.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4-pair.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4-resume.sophie.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b5.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-preroll-bucket.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-preroll.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-preroll.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-roll.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-window.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g4-roll.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g5.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g9-check.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/p9.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/place-parent.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/pw-seed.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-a1-normal.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-console-upgrade.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-grow.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-move-precheck.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-move-setup.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-move.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-nest-watch.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-prep.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-report.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-console-e1.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-console.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-devcheck.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-move-precheck.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-move-setup.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-move.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-normal.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-rearm.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-release.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-setup.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-roll.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-strict2.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm2.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm3.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/reports.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/run-leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-env.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-identity.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-open-signer.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-sums.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w81.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w81b.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82-f4.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82-f5.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82b.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w84.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w9.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/box-helpers.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/signer-helpers.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/ssm.sh:external file:external@0
unclassified root read harness/scenarios/sync.sh:external file:external@0
unclassified root read harness/snapshot.sh:external file:external@0
unclassified root read harness/stand-ins/certs.sh:external file:external@0
unclassified root read internal/s3compat/harness.go:readHarnessFile file:ReadFile@189,file:Stat@55
changed reclassified declaration internal/hostfence/writer.go:OpenRootFenceStore
2026/10/20 23:29:44 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:29:44 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:44 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 23:29:45 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/20 23:29:45 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/20 23:29:45 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/20 23:29:45 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme.go.tito.io hibernate false -> true
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme.go.tito.io status-named false -> true
2026/10/20 23:29:45 provision: converged acme.go.tito.io status-named true -> false
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:29:45 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:29:45 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:29:45 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 23:29:45 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/20 23:29:45 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/20 23:29:45 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 23:29:45 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 23:29:45 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 23:29:45 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:45 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 23:29:45 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/20 23:29:45 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/20 23:29:45 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:29:45 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 23:29:45 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:29:45 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/20 23:29:45 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 23:29:45 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:29:45 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 23:29:45 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 23:29:45 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 23:29:45 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:29:45 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 23:29:45 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:29:45 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/20 23:29:45 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 23:29:45 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/20 23:29:45 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:29:45 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:29:45 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/20 23:29:45 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/20 23:29:45 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/20 23:29:45 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/20 23:29:45 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/20 23:29:45 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/20 23:29:45 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/20 23:29:45 provision: dry-run: would converge owned.go.tito.io seed
2026/10/20 23:29:45 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:29:45 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/20 23:29:45 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/20 23:29:45 provision: converged owned.go.tito.io channel stable -> edge
2026/10/20 23:29:45 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/20 23:29:45 provision: converged owned.go.tito.io hibernate false -> true
2026/10/20 23:29:45 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/20 23:29:45 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/20 23:29:45 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: removed retired static route site.go.tito.io (record gone)
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/20 23:29:45 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/20 23:29:45 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:46 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:46 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 23:29:46 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 23:29:46 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 23:29:46 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 23:29:46 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 23:29:46 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/20 23:29:46 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 23:29:46 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 23:29:46 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 23:29:46 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 23:29:46 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/20 23:29:46 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/20 23:29:46 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 23:29:46 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/20 23:29:46 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/20 23:29:46 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 23:29:46 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/20 23:29:46 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/20 23:29:46 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:46 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 23:29:46 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:46 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 23:29:46 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:46 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 23:29:46 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:46 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/20 23:29:46 provision: a.shop.example.com: swapped for import sd_sz52lmaiyxz3nvp4qa3btbzz3i (the original route is journaled)
2026/10/20 23:29:46 provision: a.shop.example.com: import sd_sz52lmaiyxz3nvp4qa3btbzz3i committed: its gate is cleared and its journal row dropped
2026/10/20 23:29:46 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:46 provision: a.shop.example.com: import sd_uau26w4vebhdh6m4gdobz55dn4 rolled back to its original route
2026/10/20 23:29:46 provision: a.shop.example.com: import sd_uau26w4vebhdh6m4gdobz55dn4: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 23:29:46 provision: a.shop.example.com: import sd_uau26w4vebhdh6m4gdobz55dn4 is cleaned up and its journal row retired
2026/10/20 23:29:46 provision: a.shop.example.com: import sd_exco6i2okpxh7tlg47tabmkyme rolled back to its original route
2026/10/20 23:29:46 provision: a.shop.example.com: import sd_exco6i2okpxh7tlg47tabmkyme: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 23:29:46 provision: a.shop.example.com: import sd_exco6i2okpxh7tlg47tabmkyme is cleaned up and its journal row retired
2026/10/20 23:29:46 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_w76362ys5kchuou2a3rutcvy5i
2026/10/20 23:29:46 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/20 23:29:46 provision: dry-run: would converge a.shop.example.com seed source
2026/10/20 23:29:46 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:47 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/20 23:29:47 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/20 23:29:47 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_dvqti3fbsshcexrji4teqzxzui cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_mhjuhol73skjqyxdmgcva2nzz4 cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_nz64l6ydvu7b2rcrpzmqbkxw64 is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_qy4d2g5uglz7itz2ygdtwb6tvu is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_6qwin36igps2dnnxvhodlpkfhu is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 23:29:47 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/20 23:29:47 provision: b.shop.example.com: import sd_mfscpbyf3srqp2qevgsxnxnqrq left alone this pass: the import journal could not be read
2026/10/20 23:29:47 provision: c.shop.example.com: import sd_wyjr4nvqoegvma2e3din4mspgu left alone this pass: the import journal could not be read
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_a46ieorkwkdstktd6ahe4reyd4 committed: its gate is cleared and its journal row dropped
2026/10/20 23:29:47 provision: a.shop.example.com: not converging import sd_aqulnuberqjiyxpo3qyeypndne: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 23:29:47 provision: a.shop.example.com: not converging import sd_xxso7z2gu5bzk72cq36cjtwi74: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 23:29:47 provision: a.shop.example.com: not converging import sd_65t462tlzecmasdow7oda66d6a: it is placed but not committed, and the row on this box has no import gate
2026/10/20 23:29:47 provision: a.shop.example.com: not converging import sd_xnrfidpe2nwpojfzxfflnxkqyu: it is placed but not committed, and the row on this box has no import gate
2026/10/20 23:29:47 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:47 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/20 23:29:47 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_4cecdigte23fjmxhliqgrqpbpy committed: its gate is cleared and its journal row dropped
2026/10/20 23:29:47 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:47 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:47 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/20 23:29:47 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_y4rnydtn7aqxbtwtidjkowcpje: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_y4rnydtn7aqxbtwtidjkowcpje rolled back (no box had swapped it)
2026/10/20 23:29:47 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/20 23:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:47 provision: removed instance route acme.go.tito.io (its seed sd_qze7gvtgdkntx5ocuf3q56q2pi was aborted); the next pass rolls it back
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_qze7gvtgdkntx5ocuf3q56q2pi: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_qze7gvtgdkntx5ocuf3q56q2pi rolled back (no box had swapped it)
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_numj52wzwllphfmctrb7u4geyq has a row this pass may not remove; leaving the seed aborted
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_p7p2yc3kda2ph22nj3d3xwavpu rolled back (no box had swapped it)
2026/10/20 23:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:47 provision: removed instance route acme.go.tito.io (its seed sd_p5zd7u4hddgmbu46wgxdxdvzdi was aborted); the next pass rolls it back
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_p5zd7u4hddgmbu46wgxdxdvzdi has no route on this box: its local data is removed
2026/10/20 23:29:47 provision: acme.go.tito.io: aborted seed sd_p5zd7u4hddgmbu46wgxdxdvzdi rolled back (no box had swapped it)
2026/10/20 23:29:47 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_vjveqqn7hxoptkfbcgi5lkg66e (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_vjveqqn7hxoptkfbcgi5lkg66e rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_vjveqqn7hxoptkfbcgi5lkg66e is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_taqtmogbxkzkf6y5ukpqrtreli (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_taqtmogbxkzkf6y5ukpqrtreli rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_taqtmogbxkzkf6y5ukpqrtreli is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_zat3jdobrql6rznhsycodq7cuu (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_zat3jdobrql6rznhsycodq7cuu rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_zat3jdobrql6rznhsycodq7cuu: the host's replica is left alone: its record no longer names this seed
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_zat3jdobrql6rznhsycodq7cuu is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_niagarbyh25unypvgo2qaqn3ca (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_niagarbyh25unypvgo2qaqn3ca rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_niagarbyh25unypvgo2qaqn3ca rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_niagarbyh25unypvgo2qaqn3ca is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_fpenl5ovbnpekgzjpdmhn7cqgi (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_fpenl5ovbnpekgzjpdmhn7cqgi rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_lpe4glan2poqo7vu657cixbncm (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_lpe4glan2poqo7vu657cixbncm is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_qhilepexvpofj2ptcrervm5xmq (the original route is journaled)
2026/10/20 23:29:47 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_qhilepexvpofj2ptcrervm5xmq left alone this pass: its record could not be read
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_t5xo4qiv3ayx6amxbfmzbybgxe (the original route is journaled)
2026/10/20 23:29:47 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_t5xo4qiv3ayx6amxbfmzbybgxe left alone this pass: its record could not be read
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_uid6evqrcdccvotalgu5ddphsy (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_uid6evqrcdccvotalgu5ddphsy: close the import gate: constraint failed: injected (1811)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_uid6evqrcdccvotalgu5ddphsy rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_uid6evqrcdccvotalgu5ddphsy is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_hppajctj4u3c5n4ukpwrxzgd2m (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_hppajctj4u3c5n4ukpwrxzgd2m: close the import gate: constraint failed: injected (1811)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_hppajctj4u3c5n4ukpwrxzgd2m rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_hppajctj4u3c5n4ukpwrxzgd2m is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_h7lmdsncrz2uf6qobhmyrb2daa (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_h7lmdsncrz2uf6qobhmyrb2daa rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_h7lmdsncrz2uf6qobhmyrb2daa rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_h7lmdsncrz2uf6qobhmyrb2daa is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_twxzcqajsap77kntwtuwcapib4 (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_twxzcqajsap77kntwtuwcapib4 rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_twxzcqajsap77kntwtuwcapib4 is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_yuyriqpin4pzn5w37eei2regqe (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_yuyriqpin4pzn5w37eei2regqe: retire its instance key: injected failure at retire-key
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_yuyriqpin4pzn5w37eei2regqe rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_yuyriqpin4pzn5w37eei2regqe is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_eidq2vnfm2x4skyvnzcq6ekcym (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_eidq2vnfm2x4skyvnzcq6ekcym rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_eidq2vnfm2x4skyvnzcq6ekcym is cleaned up and its journal row retired
2026/10/20 23:29:47 provision: a.shop.example.com: swapped for import sd_tq57hzonye23qnbgrox6ob3f3i (the original route is journaled)
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_tq57hzonye23qnbgrox6ob3f3i: remove its local data: injected failure at remove-local
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_tq57hzonye23qnbgrox6ob3f3i rolled back to its original route
2026/10/20 23:29:47 provision: a.shop.example.com: import sd_tq57hzonye23qnbgrox6ob3f3i is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_u2mglmrfh2udz3e4qxss3o6mea (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_u2mglmrfh2udz3e4qxss3o6mea rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_u2mglmrfh2udz3e4qxss3o6mea is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_eqeyboevnudmahgjyrkaacszuu (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_eqeyboevnudmahgjyrkaacszuu: remove its local data: injected failure at remove-local-done
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_eqeyboevnudmahgjyrkaacszuu rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_eqeyboevnudmahgjyrkaacszuu is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_jk5tbscxvk3mt5gfdoscvipyqu (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_jk5tbscxvk3mt5gfdoscvipyqu rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_jk5tbscxvk3mt5gfdoscvipyqu is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_tcqyxx3b26bcu7qnc2q2ypocam (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_tcqyxx3b26bcu7qnc2q2ypocam: restore the original route: constraint failed: injected (1811)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_tcqyxx3b26bcu7qnc2q2ypocam rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_tcqyxx3b26bcu7qnc2q2ypocam is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_hzk4jztc6wibrbwwpsd5lzyjya (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_hzk4jztc6wibrbwwpsd5lzyjya: restore the original route: constraint failed: injected (1811)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_hzk4jztc6wibrbwwpsd5lzyjya rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_hzk4jztc6wibrbwwpsd5lzyjya is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_wjwxuaok7s7itkifmg3ktumfxe (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_wjwxuaok7s7itkifmg3ktumfxe is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_lm6irxliyimrt7c7bsg245pz64 (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_lm6irxliyimrt7c7bsg245pz64 rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_lm6irxliyimrt7c7bsg245pz64: delete its snapshot: injected failure at delete-snapshot
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_lm6irxliyimrt7c7bsg245pz64 is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_fqqn27w5fb3rzspxun4r2ts26m (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_fqqn27w5fb3rzspxun4r2ts26m rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_fqqn27w5fb3rzspxun4r2ts26m is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_5wh7j75awkob2oefm4pvpepwwu (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_5wh7j75awkob2oefm4pvpepwwu rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_5wh7j75awkob2oefm4pvpepwwu: delete the host's replica: injected failure at delete-replica
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_5wh7j75awkob2oefm4pvpepwwu is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_6mvac5czkzeuogir222ydvian4 (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_6mvac5czkzeuogir222ydvian4 rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_6mvac5czkzeuogir222ydvian4 is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_dz3vtpklqrwrvmwhtfqebpzqkm (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_dz3vtpklqrwrvmwhtfqebpzqkm rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_dz3vtpklqrwrvmwhtfqebpzqkm: retire its journal row: constraint failed: injected (1811)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_dz3vtpklqrwrvmwhtfqebpzqkm is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_6r427g2nvr4ofnn5tldq4sdfou (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_6r427g2nvr4ofnn5tldq4sdfou rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_6r427g2nvr4ofnn5tldq4sdfou: retire its journal row: constraint failed: injected (1811)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_6r427g2nvr4ofnn5tldq4sdfou is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_4mkfw3k4klfihe7zsoqqr66sxu (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_4mkfw3k4klfihe7zsoqqr66sxu rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_4mkfw3k4klfihe7zsoqqr66sxu is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: mark import sd_4mkfw3k4klfihe7zsoqqr66sxu rolled back: injected failure at cas
2026/10/20 23:29:48 provision: a.shop.example.com: aborted seed sd_4mkfw3k4klfihe7zsoqqr66sxu rolled back (no box had swapped it)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_7oosrvn2jluv2gw4skylr4zw6i (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7oosrvn2jluv2gw4skylr4zw6i rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7oosrvn2jluv2gw4skylr4zw6i is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: aborted seed sd_7oosrvn2jluv2gw4skylr4zw6i rolled back (no box had swapped it)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_7e6sybaksgl5sojrhrgdvaaydi (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7e6sybaksgl5sojrhrgdvaaydi rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7e6sybaksgl5sojrhrgdvaaydi rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7e6sybaksgl5sojrhrgdvaaydi rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7e6sybaksgl5sojrhrgdvaaydi is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_e5gzf3qktqcd4oprfgykd4qktq (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_e5gzf3qktqcd4oprfgykd4qktq rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_e5gzf3qktqcd4oprfgykd4qktq is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_vm5ztmekqsp4ivposjrktn4yzi (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_vm5ztmekqsp4ivposjrktn4yzi rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_vm5ztmekqsp4ivposjrktn4yzi is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_ldhuc6p6auyyr62wkfeljunve4 (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_ldhuc6p6auyyr62wkfeljunve4 rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_ldhuc6p6auyyr62wkfeljunve4 is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_kituwbaqnqmjzkyndzj3zfekja (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_kituwbaqnqmjzkyndzj3zfekja rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_kituwbaqnqmjzkyndzj3zfekja is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_tpkq2rhztm6kklcqswujdlpqfm (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_tpkq2rhztm6kklcqswujdlpqfm rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_tpkq2rhztm6kklcqswujdlpqfm is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_4joq35msia2alsoobucbvjyg5m (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_4joq35msia2alsoobucbvjyg5m rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_4joq35msia2alsoobucbvjyg5m is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_v5ywbthjzphw4lm7bai4pijmmy (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_v5ywbthjzphw4lm7bai4pijmmy rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_v5ywbthjzphw4lm7bai4pijmmy is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_t4zsp4lpns5aky7e4zywz7hhsu (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_t4zsp4lpns5aky7e4zywz7hhsu has no route on this box: its local data is removed and no route is put back
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_t4zsp4lpns5aky7e4zywz7hhsu is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_7hfaazgeecodwpqdh5477pmwc4 (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_2mvlirw4uhj7iqyps726eyhktq (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_zlkkvlv654wbtmpjtaz5o7l23q (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_zlkkvlv654wbtmpjtaz5o7l23q cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_kfh3f3t7uqdzdg4u5g2nr3ghxe (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_kfh3f3t7uqdzdg4u5g2nr3ghxe is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/20 23:29:48 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/20 23:29:48 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_wtrnisosxt64azdzjvdwzqdkyy (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_vm7zlxybpou5wbss3kfw3zzyny (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_fau6k77dunoheq22dssgvxowkm (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_g3kcvynlitsz4z2zzxajmg75xq (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_l5kibqhudb3erik5vfdhbhuv2q (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_l5kibqhudb3erik5vfdhbhuv2q rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_yahlqmvh4xkgiadtitkodas23y (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_yahlqmvh4xkgiadtitkodas23y has no route on this box: its local data is removed and no route is put back
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_yahlqmvh4xkgiadtitkodas23y is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_xuoel2pisoemssqskigvjcadxe (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_xuoel2pisoemssqskigvjcadxe: remove its local data: injected failure at remove-local
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_xuoel2pisoemssqskigvjcadxe is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_tc2gtqghs2v6zrqyi55vnf4qlu (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_tc2gtqghs2v6zrqyi55vnf4qlu: a route appeared at the host, so its local database is left and the rollback waits
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_odpfsvoyvhqkxtg2ks4fkoyiza (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_odpfsvoyvhqkxtg2ks4fkoyiza rollback deferred: no fence generation: registry busy
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_ozuotaahwzarxmwwfsg2rwie2m (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_ozuotaahwzarxmwwfsg2rwie2m rollback deferred: no fence generation: the generation source answered 0
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_vm7fmt6p3rolxwth6xp2kgvd5e (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_uidapa647ebqdhpl2tvxbk2pt4 (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_pn2ffqeaeasham3zovoqedvd7q (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/20 23:29:48 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_eqekjw7szpv7x57m3ve5dcuu2e (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_eqekjw7szpv7x57m3ve5dcuu2e rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_eqekjw7szpv7x57m3ve5dcuu2e is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_7e77powzmdl63r3epzdblzl3yi (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7e77powzmdl63r3epzdblzl3yi rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_7e77powzmdl63r3epzdblzl3yi is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_x7ipyk3vstwanna4arbyvb445u (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_x7ipyk3vstwanna4arbyvb445u rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_x7ipyk3vstwanna4arbyvb445u is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_33pomj2nrezuvoifycbmlgcq4u (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_33pomj2nrezuvoifycbmlgcq4u: retire its instance key: the env file is a symlink
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_33pomj2nrezuvoifycbmlgcq4u rolled back to its original route
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_33pomj2nrezuvoifycbmlgcq4u is cleaned up and its journal row retired
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_5krfc3ljhktfxdtzrsrg3ywzrq (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 23:29:48 provision: a.shop.example.com: swapped for import sd_w3qdyp6asnyywvzzdsjflpi7li (the original route is journaled)
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_tiqh3rnwo73wsus4r2ath2ytra refused: there is no route at a.shop.example.com to replace
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_rn6p74l364qhr7bkiy44r7jdye refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_kpfy3xlbqnaybznd74n4iiqut4 refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_l2avb4lgabfai543bfat37c4p4 refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_knj2rwiwysmutued2uy6ahwzqi refused: the route belongs to app other
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_u56gtr6kmuk2iawmngtay6wmaq refused: the route is filed under another account
2026/10/20 23:29:48 provision: a.shop.example.com: import sd_pcxmspow7xt5mlhnqtknaryf4e refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_7kjub7ehjuch4jur2nax25lexq refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_eqy6mh6qqpswfrayzz7iiwteyy refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_wnp2j6txh2jm2vb2t7wld5l72u refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_cecknem7zxl7npz7dr23atf33y refused: the route is not an address route this import can take over (socket)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_vaoijupsldxhveieemspujlb4e refused: the route is not an address route this import can take over (no address)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_xq2yyrajprvhrdtsmw2sugxdey refused: the route is not an address route this import can take over (provisioned)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_dxlewxrjakd3ntqvlgtou25fdy refused: the route is not an address route this import can take over (kind static)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_ufdzgec6dnzy6os2zxg57vvfsi refused: the route is not an address route this import can take over (backing)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_ad35zvqp4kr3od7pc3gzf2y4ey refused: the route is not an address route this import can take over (tunnel)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_wjjhqn3qvlt2enszmmxjaoxpq4 refused: the route is not an address route this import can take over (caps)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_lli3kewvzczblcttghyr463p6m refused: the route is not an address route this import can take over (platform)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_26aibw3ewy43djtyqezdh4kkb4 refused: the route is not an address route this import can take over (canary)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_pochvqesic3cwuxabyqu4bdhuq refused: the route is not an address route this import can take over (kind sidecar)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_5xxcijrzulhhwf64k2q5nfdvnu refused: the route is not an address route this import can take over (region)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_xrnyv4cattbgepyuxfurrkvqra refused: the route is not an address route this import can take over (fleet_box)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_nqzr57jquasiyp6mgs3osnwaly refused: the route is not an address route this import can take over (hibernate)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_igm7bntjfispublcaggtyamab4 refused: the route is not an address route this import can take over (claim_owner)
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_imfulavabnhxejd7jsbchhgwn4 refused: this box does not run instances nested
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_c6d4c7rnh522pkdawo36yg2mmu refused: this box does not run instances nested
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_2nymecwwz53wtiu5jhvxonjxyy refused: claim control is on for this box
2026/10/20 23:29:49 provision: a.shop.example.com: swapped for import sd_puh727zqpyuupaxnjqyxlqrrfe (the original route is journaled)
2026/10/20 23:29:49 provision: a.shop.example.com: swapped for import sd_ndlhsfsp44f5uklg7rlnw7v4he (the original route is journaled)
2026/10/20 23:29:49 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/20 23:29:49 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_zxo7eeczpbb5sw2zr3hzbp63ua: its verify hash is not a sha256
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_pbo2fxfeu34vmzcwuj6jf5kf4a: its verify hash is not a sha256
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_hw4s4vxps6jezic6iwyngvaed4: its verify hash is not a sha256
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/20 23:29:49 provision: A.shop.example.com/..: not swapping for import sd_zrfr5osrwpofmzk4eq56ogklz4: its host or seed id is malformed (seeds: not a host)
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_ac4i6att2oozgyhfuxz3jpwyaa: its record does not describe a nested, hibernating instance
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_mgsmee4j237k57d73vg56obbbe: its record does not describe a nested, hibernating instance
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_v7njuk6dg6agyjiqsymdzoer54: its record does not describe a nested, hibernating instance
2026/10/20 23:29:49 provision: a.shop.example.com: not swapping for import sd_lprl2kojy6mewusuuj6ey6oceq: its record does not describe a nested, hibernating instance
2026/10/20 23:29:49 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/20 23:29:49 provision: a.shop.example.com: swapped for import sd_whw7c6imleyxj7pqgop363fogy (the original route is journaled)
2026/10/20 23:29:49 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/20 23:29:49 provision: a.shop.example.com: swapped for import sd_xqaitmsq6ekw57nbzulgpbblem (the original route is journaled)
2026/10/20 23:29:49 provision: a.shop.example.com: swapped for import sd_2zvrpqkrho4cvfzqfjxr73iwfm (the original route is journaled)
2026/10/20 23:29:49 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/20 23:29:49 provision: dry-run: would consider swapping a.shop.example.com for import sd_6hlvho3bj6f6lb7f26iu4kgzpq
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_c2jeirfp6i5ogsioqbav4rrttq rolled back to its original route
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_c2jeirfp6i5ogsioqbav4rrttq: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_c2jeirfp6i5ogsioqbav4rrttq is cleaned up and its journal row retired
2026/10/20 23:29:49 provision: a.shop.example.com: import sd_fqdz5bpupvzjbpfimr6yoxwcxm left alone: the import journal holds seed sd_pye234mnu2fc3cdlbvvpgkupfu at swapped
2026/10/20 23:29:49 provision: a.shop.example.com: not minting import sd_wwegicj23rsxnpsuxd4smq5lnu: it is swapped but not committed, and only its swap makes its row
2026/10/20 23:29:49 provision: a.shop.example.com: not minting import sd_uf3xd2tgkxeruly7lh42axckmu: it is placed but not committed, and only its swap makes its row
2026/10/20 23:29:49 provision: a.shop.example.com: swapped for import sd_hwnwmds5327xagauwbemdvjr7m (the original route is journaled)
2026/10/20 23:29:49 provision: a.shop.example.com: not minting import sd_hwnwmds5327xagauwbemdvjr7m: it is swapped but not committed, and only its swap makes its row
2026/10/20 23:29:49 provision: a.shop.example.com: not minting import sd_hwnwmds5327xagauwbemdvjr7m: it is placed but not committed, and only its swap makes its row
2026/10/20 23:29:49 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 23:29:49 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/20 23:29:49 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/20 23:29:49 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/20 23:29:49 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/20 23:29:49 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/20 23:29:49 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 23:29:49 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/20 23:29:49 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/20 23:29:49 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 23:29:49 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:29:49 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/20 23:29:49 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/20 23:29:49 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:29:49 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/20 23:29:49 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:29:49 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 23:29:49 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/20 23:29:49 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 23:29:49 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 23:29:49 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/20 23:29:49 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 23:29:49 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 23:29:49 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:49 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/20 23:29:49 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:49 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:49 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 23:29:50 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 23:29:50 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 23:29:50 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 23:29:50 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 23:29:50 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 23:29:50 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL github.com/carlosframework/platform/internal/provision 18.009s
ok github.com/carlosframework/platform/internal/publicrelease 0.009s
? github.com/carlosframework/platform/internal/regionname [no test files]
ok github.com/carlosframework/platform/internal/registry 5.418s
ok github.com/carlosframework/platform/internal/relay 7.224s
ok github.com/carlosframework/platform/internal/release 23.824s
ok github.com/carlosframework/platform/internal/rollout 3.614s
ok github.com/carlosframework/platform/internal/rolloutwords 0.003s
ok github.com/carlosframework/platform/internal/rootaws 0.006s
ok github.com/carlosframework/platform/internal/rootparticipation 0.058s
ok github.com/carlosframework/platform/internal/rootstate 0.026s
ok github.com/carlosframework/platform/internal/runs 0.570s
ok github.com/carlosframework/platform/internal/s3compat 0.004s
ok github.com/carlosframework/platform/internal/safefile 0.004s
ok github.com/carlosframework/platform/internal/schedule 2.494s
ok github.com/carlosframework/platform/internal/seeds 0.011s
ok github.com/carlosframework/platform/internal/sim/hostlife 8.356s
ok github.com/carlosframework/platform/internal/sim/litestreamfacts 4.160s
ok github.com/carlosframework/platform/internal/status 0.058s
ok github.com/carlosframework/platform/internal/steering 0.006s
ok github.com/carlosframework/platform/internal/stopevidence 0.253s
ok github.com/carlosframework/platform/internal/svcrole 0.002s
ok github.com/carlosframework/platform/internal/telemetry 0.004s
ok github.com/carlosframework/platform/internal/termfence 0.004s
ok github.com/carlosframework/platform/internal/tunnelclient 0.003s
ok github.com/carlosframework/platform/internal/unixdial 0.002s
ok github.com/carlosframework/platform/internal/updatewords 0.004s
ok github.com/carlosframework/platform/internal/usage 0.004s
ok github.com/carlosframework/platform/internal/version 0.002s
ok github.com/carlosframework/platform/internal/vet 1.534s
FAIL
make: *** [Makefile:18: test] Error 1
amadan: step gate failed: exit status 2
amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/harness/RUNLOG.md b/harness/RUNLOG.md| index 1144ffb53..b48bdb595 100644 |
| --- a/harness/RUNLOG.md |
| +++ b/harness/RUNLOG.md |
| @@ -2426,3 +2426,41 @@ harness leo has neither `sqlite3` nor `jq` (python3 only); harmless here because |
| So from a v0.28.5-equivalent parent (v0.28.12 carries 8376a468 and 8a313548) the fix release rolls onto an armed leo |
| by the plain update; the ruled re-arm was not needed. |
| + |
| +## Step 3, first window (WINDOW_ID 20261020T2325Z): G6 PASS, G7 FAIL on the agent's router cache |
| + |
| +`blocks/g10-window.host.sh 20261020T2325Z` (`evidence/run11/window.log`, `g7-fail.log`). `w81.box.sh` now matches the |
| +runbook (C7: no closing `install-control --dry-run`); `w82b.sh` carries C10's line; `b4.sh` has step 3a's wait. |
| +- **G6 PASS** (23:25:33-45Z): 8.1's twelve units `masked`, inactive, edge disabled, no tenant units, no carlos |
| + processes. 8.1b: console stopped on sophie (`Result=success ActiveState=inactive`), signer key present, collect |
| + one create-only write of `control/hosts-backfill.json`, `{"id":"cohort1-20261020","phase":"collecting", |
| + "directory_revision":17,"hosts":[]}`, eight `true`, REV 17. |
| +- **G7 FAIL** (23:25:46-47Z): host.env edit and its checks pass (`600 root:root 351`, the two lines appended), |
| + `install-control` dry run and apply as expected, then `journal-migrate --window` refuses: |
| + ``` |
| + 2026/10/20 23:25:47 hostbox: invalid typed retirement inventory: migration census: data entry "system/router/v0.28.15/carlos" is not classified |
| + ``` |
| + `migration.json` `"Phase":"recovered"`, `DirectoryRevision 17`, kept (runbook: never deleted). instance-control |
| + was not restarted by the block (it stops at the refusal; `active` from install). Snapshot **`g7-fail-r11`** |
| + (23:26Z; its restart started sophie's console again, claims-off). |
| + |
| +**Diagnosis.** `/data/system/router/v0.28.15/carlos` (carlos 600, 49873058 B, 23:18Z) is the agent's download cache |
| +of the release. The census's data rules (`claimDataCensus`, `internal/host/claimcensus.go:71` and `:93-111`) classify |
| +only `system/router/requested.json` there, so the walk refuses it (`internal/hostbox/migration_census_linux.go:105`). |
| +The agent drops the cache in `forget` (`internal/host/systemleg.go:297-303`) when it sees root's terminal result, |
| +but after a normal update it does not get there: root wrote `seen.json` at 23:18:33.045Z, restarted the edge at |
| +23:18:35Z (new agent pid 591, v0.28.15) and wrote `result.json` `applied` only at 23:18:52.205Z. The new agent's |
| +first observe ran before that, while `result.json` was still the old one, and returned at the noop/seen branch |
| +(`systemleg.go:127-128`) without a pending item; the forget branch (`:121-124`) needs a terminal result first. The |
| +next observe is the hourly floor (`systemObserveEvery = time.Hour`, `systemleg.go:71`) or a serial move, so the cache |
| +can sit there for up to an hour after a plain update. Run 8 never met it: its re-arm's cache was dropped at 12:27:44Z, |
| +~40 s after the apply, and `post-b5-run8b`, `post-8.1-run8` and `g10-stuck-run8` hold only `requested.json` there |
| +(also Run 10's `post-0285`). 8.1 masks the edge, so once the window is open the agent can never drop it. |
| + |
| +Reported to platform-1c (code question: classify `system/router/<version>/` in the census, or make the agent forget |
| +at startup once result.json is terminal). Runbook gap: nothing before 8.1 checks that `/data/system/router` holds |
| +only `requested.json`. |
| + |
| +**Resume, no hand fix:** restore `post-b5-run8b`, roll v0.28.15 again by the same plain update (identity and canary |
| +console are recreated in that lineage), wait for leo's own agent to drop the cache (its hourly observe), check |
| +`/data/system/router` = `requested.json` only, then a new WINDOW_ID. |
diff --git a/harness/evidence/run11/g7-fail.log b/harness/evidence/run11/g7-fail.log| new file mode 100644 |
| index 000000000..e50a3be0d |
| --- /dev/null |
| +++ b/harness/evidence/run11/g7-fail.log |
| @@ -0,0 +1,67 @@ |
| +[hssm] i-06a1ec144aa5226fb f5f01188-df69-409a-a87a-bc42092fd8fb Success exit=0 |
| +-rw-r--r-- 1 carlos carlos 133 Oct 20 23:18 /data/system/router/requested.json |
| + |
| +/data/system: |
| +total 12 |
| +drwxr-xr-x 3 carlos carlos 4096 Oct 20 01:24 . |
| +drwxr-x--- 17 carlos carlos 4096 Oct 20 23:25 .. |
| +drwxr-xr-x 3 carlos carlos 4096 Oct 20 23:18 router |
| + |
| +/data/system/router: |
| +total 16 |
| +drwxr-xr-x 3 carlos carlos 4096 Oct 20 23:18 . |
| +drwxr-xr-x 3 carlos carlos 4096 Oct 20 01:24 .. |
| +-rw-r--r-- 1 carlos carlos 133 Oct 20 23:18 requested.json |
| +drwxr-xr-x 2 carlos carlos 4096 Oct 20 23:18 v0.28.15 |
| + |
| +/data/system/router/v0.28.15: |
| +total 48720 |
| +drwxr-xr-x 2 carlos carlos 4096 Oct 20 23:18 . |
| +drwxr-xr-x 3 carlos carlos 4096 Oct 20 23:18 .. |
| +-rw------- 1 carlos carlos 49873058 Oct 20 23:18 carlos |
| +/var/lib/carlos-claims: |
| +total 60 |
| +drwx------ 3 root root 4096 Oct 20 23:25 . |
| +drwxr-xr-x 22 root root 4096 Oct 20 23:25 .. |
| +drwx------ 5 root root 4096 Oct 20 23:25 authority |
| +-rw-r--r-- 1 root root 49152 Oct 20 23:25 journals.db |
| +-rw------- 1 root root 0 Oct 20 23:25 migration.lock |
| + |
| +/var/lib/carlos-claims/authority: |
| +total 20 |
| +drwx------ 5 root root 4096 Oct 20 23:25 . |
| +drwx------ 3 root root 4096 Oct 20 23:25 .. |
| +drwx------ 2 root root 4096 Oct 20 23:25 exec |
| +drwx------ 2 root root 4096 Oct 20 23:25 fences |
| +drwx------ 2 root root 4096 Oct 20 23:25 migration |
| + |
| +/var/lib/carlos-claims/authority/migration: |
| +total 12 |
| +drwx------ 2 root root 4096 Oct 20 23:25 . |
| +drwx------ 5 root root 4096 Oct 20 23:25 .. |
| +-rw------- 1 root root 804 Oct 20 23:25 migration.json |
| +-rw------- 1 root root 0 Oct 20 23:25 migration.lock |
| +{"Schema":1,"Identity":{"Deployment":"harness-deployment","Box":"kathleen-juggling","Enrollment":"2e0246b20131d71a87a95fd7d2b9e840","Generation":1},"Phase":"recovered","Observation":"551ec05744537aa9e4c765aa84bc13978df26634a626acd5d2aa7016015d828a","Snapshot":{"Complete":true,"DirectoryRevision":17,"Exclusion":"\"7eedce03f7a6cae28a5ea8c4976e8711\"@7f7c8acefb9ec637d035c6d8532fb520d233553bf54f830f6db7a8de63011f83","Records":null,"Claims":null,"Items":[],"MoveJournals":0,"MoveReservations":0,"Report":{"box":"kathleen-juggling","enrollment":"2e0246b20131d71a87a95fd7d2b9e840","boot_id":"b468a99b-5c61-4ffd-8c67-1ffdc3f82647","reservation":"cohort1-20261020","directory_revision":17,"captured_at":"2026-10-20T23:25:47.015725327Z","complete":true,"installations":[],"seeds":{"journaled":[],"gated":[]}}}} |
| +active |
| +total 48 |
| +drwxr-xr-x 5 root root 4096 Oct 20 23:25 . |
| +drwxr-xr-x 63 root root 4096 Oct 20 01:48 .. |
| +-rw------- 1 root root 0 Oct 20 01:43 .claims-activation.lock |
| +drwxr-xr-x 2 root root 4096 Oct 20 01:03 apps |
| +drwx------ 3 root root 4096 Oct 20 23:25 claim-window-cohort1-20261020T2325Z |
| +drwx------ 2 root root 4096 Oct 20 01:50 fence-writer |
| +-rw-r--r-- 1 root root 25 Oct 20 00:57 harness-endpoint |
| +-rw-r--r-- 1 root root 44 Oct 20 01:12 harness-sums-pubkey |
| +-rw-r--r-- 1 root root 111 Oct 20 01:35 host-actor.json |
| +-rw------- 1 root root 45 Oct 20 01:43 host-evidence.key |
| +-rw------- 1 root root 351 Oct 20 23:25 host.env |
| +-rw------- 1 root root 262 Oct 20 01:03 host.env.bak-pool-20261020 |
| +-rw-r----- 1 root carlos 5 Oct 20 01:05 probe-secret |
| +== snapshot g7-fail-r11 23:26:12 |
| +infra: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11 |
| +leo: running failed=[] snapshots=post-b5-run8b,post-8.1-run8,g10-stuck-run8,post-window,g7-fail-r11 |
| +sophie: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11 |
| +dennis: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11 |
| +signer: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11 |
| +sophie-console volume snapshots: s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11 |
| +/dev/nvme0n1p1 59G 47G 9.7G 83% / |
diff --git a/harness/evidence/run11/window.log b/harness/evidence/run11/window.log| index e69de29bb..b50bcba6b 100644 |
| --- a/harness/evidence/run11/window.log |
| +++ b/harness/evidence/run11/window.log |
| @@ -0,0 +1,231 @@ |
| +######## 8.1 23:25:33.963Z |
| + |
| +Id=carlos-edge.service LoadState=loaded ActiveState=active |
| +Id=carlos-adopt.timer LoadState=loaded ActiveState=active |
| +Id=carlos-adopt.path LoadState=loaded ActiveState=active |
| +Id=carlos-stage.path LoadState=loaded ActiveState=active |
| +Id=carlos-restart.path LoadState=loaded ActiveState=active |
| +Id=carlos-system-update.path LoadState=loaded ActiveState=active |
| +Id=carlos-adopt.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-stage.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-config-sync.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-restart.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-system-update.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-system-recover.service LoadState=loaded ActiveState=inactive |
| + |
| +UNIT LOAD ACTIVE SUB DESCRIPTION |
| + |
| +0 loaded units listed. |
| +To show all installed unit files use 'systemctl list-unit-files'. |
| +Removed '/etc/systemd/system/multi-user.target.wants/carlos-edge.service'. |
| +UNIT LOAD ACTIVE SUB DESCRIPTION |
| + |
| +0 loaded units listed. |
| +To show all installed unit files use 'systemctl list-unit-files'. |
| +== 8.1 second block 23:25:34 |
| +Id=carlos-adopt.timer |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-adopt.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-stage.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-restart.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-update.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-adopt.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-stage.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-config-sync.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-restart.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-update.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-recover.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-edge.service |
| +LoadState=masked |
| +ActiveState=inactive |
| +8.1 DONE 23:25:35 |
| +[run-leo] w81.box.sh exit=0 |
| +######## 8.1b 23:25:35.221Z |
| +== quiesce: stop console.service on sophie 23:25:35.435Z |
| +Success Result=success ActiveState=inactive SubState=dead |
| + |
| +== signer key 23:25:37.664Z |
| +Success root 600 1 45 |
| + |
| +== 8.1b 23:25:39.914Z |
| +Success { |
| + "writes": [ |
| + { |
| + "key": "control/hosts-backfill.json", |
| + "before_etag": "" |
| + } |
| + ], |
| + "backfill": { |
| + "id": "cohort1-20261020", |
| + "phase": "collecting", |
| + "directory_revision": 17, |
| + "hosts": [] |
| + } |
| +} |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +REV=17 |
| +{"id":"cohort1-20261020","phase":"collecting","directory_revision":17,"hosts":[]} |
| + + WINDOW_ID=20261020T2325Z |
| ++ BACKFILL_ID=cohort1-20261020 |
| ++ refresh |
| ++ /usr/local/bin/carlos system claims inspect --bucket harness-deployment --aws-region eu-west-1 --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= |
| +2026/10/20 23:25:40 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq .signed_roster inspect.json |
| +++ jq -er .roster.revision inspect.json |
| ++ REV=17 |
| ++ jq -n --arg b harness-deployment --argjson rev 17 --arg id cohort1-20261020 '{phase:"backfill-collect",bucket:$b,expected_revision:$rev,backfill:{id:$id}}' |
| ++ /usr/local/bin/carlos system claims run --plan /root/claim-trial/plan.json --signing-key /run/claim-signer/release.key --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= --aws-region eu-west-1 --dry-run |
| +2026/10/20 23:25:40 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq '{writes: [.writes[] | {key, before_etag}], backfill}' backfill-collect-dry.json |
| ++ /usr/local/bin/carlos system claims run --plan /root/claim-trial/plan.json --signing-key /run/claim-signer/release.key --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= --aws-region eu-west-1 |
| +2026/10/20 23:25:41 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq -e --arg id cohort1-20261020 '.backfill.id == $id' backfill-collect.json |
| ++ jq -e '.backfill.phase == "collecting"' backfill-collect.json |
| ++ jq -e --argjson rev 17 '.backfill.directory_revision == $rev' backfill-collect.json |
| ++ jq -e '.backfill.hosts != null' backfill-collect.json |
| ++ jq -e '(.backfill.hosts | length) == 0' backfill-collect.json |
| ++ jq -e '(.writes | length) == 1' backfill-collect.json |
| ++ jq -e '.writes[0].key == "control/hosts-backfill.json"' backfill-collect.json |
| ++ jq -e '.writes[0].before_etag == ""' backfill-collect.json |
| ++ refresh |
| ++ /usr/local/bin/carlos system claims inspect --bucket harness-deployment --aws-region eu-west-1 --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= |
| +2026/10/20 23:25:41 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq .signed_roster inspect.json |
| +++ jq -er .roster.revision inspect.json |
| ++ REV=17 |
| ++ echo REV=17 |
| ++ jq -c .backfill backfill-collect.json |
| + |
| +8.1b END 23:25:45.997Z |
| +######## 8.2 23:25:46.008Z |
| +== host.env edit 23:25:46 |
| +/etc/carlos/host.env 600 root:root 351 |
| +9a10,11 |
| +> CARLOS_HOST_CLAIM=1 |
| +> CARLOS_HOST_CLAIM_ORIGINS=1 |
| +== 8.2 block 23:25:46 |
| +{ |
| + "dry_run": true, |
| + "reload": true, |
| + "source": "/etc/carlos/host.env", |
| + "start": false, |
| + "target": "/etc/systemd/system/carlos-instance-control.service" |
| +} |
| +{ |
| + "dry_run": false, |
| + "reload": true, |
| + "source": "/etc/carlos/host.env", |
| + "start": false, |
| + "target": "/etc/systemd/system/carlos-instance-control.service" |
| +} |
| +# /etc/systemd/system/carlos-instance-control.service |
| +# The root instance-control service (isolated-exec design §5). Socket- |
| +# activated, so it runs only while there is work. Its whole job is |
| +# systemctl start/stop/set-property on the three instance templates' units |
| +# and their host slices, on the agent's request, plus running the readiness |
| +# probe. Every unit name it passes to systemctl is built from a validated |
| +# host by the platform's own naming; nothing from a request reaches |
| +# systemctl as a string. |
| +# |
| +# Runs as ROOT deliberately, with no new-privileges lockout and no syscall |
| +# filter, for the systemctl child (the same rationale as |
| +# carlos-stage.service). It accepts a connection only from the edge unit's |
| +# main process (SO_PEERCRED uid carlos, pid == MainPID of |
| +# carlos-edge.service): a flat tenant is a child of that pid, never the pid |
| +# itself, and a nested tenant cannot reach the socket at all. |
| +# |
| +# At start it also looks UNDER the two instance bind mounts (unshare -m in |
| +# a private namespace, umount, list; design §8.2, "Recovery for a layout |
| +# that was unmounted anyway"). Files left in the raw mountpoint directory |
| +# while the layout was unmounted would otherwise be hidden by the mount and |
| +# invisible to the layout pass's destination check; a held file is a |
| +# failing line in every probe report and keeps /ready refusing nested wakes |
| +# until an operator moves or removes it and restarts this service. Root is |
| +# what makes that inspection possible: the private namespace and the umount |
| +# need CAP_SYS_ADMIN. ProtectSystem=strict leaves /data and /run visible. |
| +[Unit] |
| +Description=carlos instance control (root: start/stop carlos-instance*@ units for the agent) |
| +Requires=carlos-instance-control.socket data-instances.mount run-carlos-instances.mount run-carlos-logs.mount |
| +After=data-instances.mount run-carlos-instances.mount run-carlos-logs.mount |
| + |
| +[Service] |
| +StateDirectory=carlos-claims |
| +StateDirectoryMode=0700 |
| +EnvironmentFile=-/etc/carlos/host.env |
| +ExecStart=/opt/carlos/carlos instance-control |
| +ProtectSystem=strict |
| +# /run/systemd/system: the per-generation runtime drop-in (zero-downtime |
| +# deploys, plan 2 D1); nothing else is written there. |
| +ReadWritePaths=/run/carlos-control /run/carlos /var/lib/carlos-claims /var/lib/carlos-release/private /run/systemd/system /data /opt/carlos /etc/systemd/system /sys/fs/cgroup |
| +ProtectHome=yes |
| +PrivateTmp=yes |
| +PrivateDevices=yes |
| +ProtectKernelTunables=yes |
| +ProtectKernelModules=yes |
| +ProtectKernelLogs=yes |
| +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 |
| +MemoryDenyWriteExecute=yes |
| +MemoryMax=256M |
| +Environment=GOMEMLIMIT=192MiB |
| + |
| +# /run/systemd/system/service.d/zzz-lxc-service.conf |
| +[Service] |
| +ProcSubset=all |
| +ProtectProc=default |
| +ProtectControlGroups=no |
| +ProtectKernelTunables=no |
| +NoNewPrivileges=no |
| +LoadCredential= |
| +PrivateNetwork=no |
| +ImportCredential= |
| +ProtectHome=no |
| +ProtectSystem=no |
| +PrivateDevices=no |
| +PrivateTmp=no |
| +ProtectKernelLogs=no |
| +ProtectKernelModules=no |
| +ReadWritePaths= |
| +ReadOnlyPaths= |
| +2026/10/20 23:25:47 hostbox: invalid typed retirement inventory: migration census: data entry "system/router/v0.28.15/carlos" is not classified |
| +[run-leo] --env exit=1 |
| +STOP: 8.2 did not reach '8.2 DONE' |
| +failed to run commands: exit status 1[hssm] i-06a1ec144aa5226fb 13cdc556-fc14-46a6-ac41-0b1851ab1961 Failed exit=1 |