carlos / platform Public

Census overlay sec-mail-user-boundary (proposed on #280)

cmd/console serve is re-frozen at main's disposition with this branch's
change appended: one more environment variable read and a fatal check,
the same three /data literals moved 282 bytes. The cmd/console and
internal/mail envelopes are re-pinned. No root read is added; the seal
moves. Proposal in
docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
claude agent, operated by paul@keymail.dev 626ed6b5d7c83747d8e1dad05624851ab4ee7eca parent 9a8e54a
3 files changed, +86 −0
  • docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md +64 −0
  • internal/provision/plan14_root_reads_test.go +16 −0
  • internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv +6 −0

CI failed — run details

CI log
amadan: log truncated — showing the last 209536 bytes of 1048765
2026/10/23 19:47:04 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:04 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy stopped at TXID 3 (clean true, src_covered true)
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is released
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:04 moves: a.go.example.com: the target gave execution up for rollback rb_6zkqn2o5r3dkqbncjpedhatdzy, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-target.json
2026/10/23 19:47:04 moves: a.go.example.com: the target keeps what it holds for rollback rb_6zkqn2o5r3dkqbncjpedhatdzy until the source has recovered
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:04 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:04 moves: a.go.example.com: the source of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is claimed
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:04 moves: a.go.example.com: the source executes the host again for rollback rb_6zkqn2o5r3dkqbncjpedhatdzy (clean true)
2026/10/23 19:47:04 moves: a.go.example.com: the source of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is restoring
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:04 moves: a.go.example.com: the source of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is verified
2026/10/23 19:47:04 moves: a.go.example.com: the source still matches what it recorded when it stopped
2026/10/23 19:47:04 moves: a.go.example.com: the source of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is probing
2026/10/23 19:47:04 moves: a.go.example.com: the source of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is probed
2026/10/23 19:47:04 moves: a.go.example.com: the source of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is recovered
2026/10/23 19:47:04 moves: a.go.example.com: the source of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is opened
2026/10/23 19:47:04 moves: a.go.example.com: rollback rb_6zkqn2o5r3dkqbncjpedhatdzy waits for the target's park before it closes
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is cleaning
2026/10/23 19:47:04 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
2026/10/23 19:47:04 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:04 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:04 moves: a.go.example.com: render the held row: the agent died before the rename
2026/10/23 19:47:04 moves: a.go.example.com: the target region's copies of mv_abcdefghijklmnopqrstuvwxyz are parked
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is past its cut_deadline (2026-10-07T09:01:55Z)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz rolls back as rb_qvf6dih7ptmn7ful2trb2b5gki: the landing ran past its deadline
2026/10/23 19:47:04 moves: a.go.example.com: the claim follows rollback rb_qvf6dih7ptmn7ful2trb2b5gki
2026/10/23 19:47:04 moves: a.go.example.com: the target's registered installation (stamp 8) is retired
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_qvf6dih7ptmn7ful2trb2b5gki stopped at TXID 3 (clean true, src_covered true)
2026/10/23 19:47:04 moves: a.go.example.com: the local artifacts of mv_abcdefghijklmnopqrstuvwxyz are parked in /tmp/TestBoxClosesAreRecordFirstrecovery_close_(movesrecover.go)3812961240/005/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/e45df49efc2e9c51e113a4c411b1804b
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_qvf6dih7ptmn7ful2trb2b5gki is released
2026/10/23 19:47:04 moves: a.go.example.com: the target's row and its timers are deleted
2026/10/23 19:47:04 moves: a.go.example.com: the target gave execution up for rollback rb_qvf6dih7ptmn7ful2trb2b5gki, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-target.json
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_6zkqn2o5r3dkqbncjpedhatdzy is cleaned
2026/10/23 19:47:04 moves: a.go.example.com: the target keeps what it holds for rollback rb_qvf6dih7ptmn7ful2trb2b5gki until the source has recovered
2026/10/23 19:47:04 moves: a.go.example.com: the target's half of the rollback of mv_abcdefghijklmnopqrstuvwxyz is complete
2026/10/23 19:47:04 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is rolled back and closed
2026/10/23 19:47:04 moves: a.go.example.com: injected crash
2026/10/23 19:47:04 moves: .page-outbox: the host claim does not read: this box runs no move step for it this pass: hostclaim: invalid host
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_qvf6dih7ptmn7ful2trb2b5gki is cleaning
2026/10/23 19:47:04 moves: a.go.example.com: the local artifacts of mv_abcdefghijklmnopqrstuvwxyz are parked in /tmp/TestBoxClosesAreRecordFirstrecovery_close_(movesrecover.go)3812961240/002/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/2670f514546bb57f7073cceca2df1d62
2026/10/23 19:47:04 moves: a.go.example.com: the source's journal of mv_abcdefghijklmnopqrstuvwxyz is parked
2026/10/23 19:47:04 moves: a.go.example.com: the local artifacts of rb_6zkqn2o5r3dkqbncjpedhatdzy are parked in /tmp/TestBoxClosesAreRecordFirstrecovery_close_(movesrecover.go)3812961240/002/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/645df77a182ed51d6171a68a052abf8b
2026/10/23 19:47:04 moves: a.go.example.com: the source's journal of rb_6zkqn2o5r3dkqbncjpedhatdzy is parked
2026/10/23 19:47:04 moves: .page-outbox: the host claim does not read: this box runs no move step for it this pass: hostclaim: invalid host
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:04 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:04 moves: a.go.example.com: not ready: the target has not published a readiness report yet
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:04 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 2101248 bytes; bar 16777216)
2026/10/23 19:47:04 moves: a.go.example.com: the target region's copies of mv_abcdefghijklmnopqrstuvwxyz are parked
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:04 moves: a.go.example.com: the target's registered installation (stamp 8) is retired
2026/10/23 19:47:04 moves: a.go.example.com: the held render's unfinished write /tmp/TestRenderTempIsRemovedByCleaningearlier_false4063990627/005/a.go.example.com.config.env.tmp is removed
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:04 moves: a.go.example.com: the local artifacts of mv_abcdefghijklmnopqrstuvwxyz are parked in /tmp/TestRenderTempIsRemovedByCleaningearlier_false4063990627/005/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/eb5497f98f8d87ea1c5ac919ace27181
2026/10/23 19:47:04 moves: a.go.example.com: the target's row and its timers are deleted
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_qvf6dih7ptmn7ful2trb2b5gki is cleaned
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:04 moves: a.go.example.com: the target's half of the rollback of mv_abcdefghijklmnopqrstuvwxyz is complete
2026/10/23 19:47:04 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:04 moves: a.go.example.com: injected crash
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz reverting (reverting)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz reverts: the cut ran past its deadline
2026/10/23 19:47:04 moves: a.go.example.com: the claim reverts to this box; the staging lane in uk is queued for its park
2026/10/23 19:47:04 moves: a.go.example.com: the revert of mv_abcdefghijklmnopqrstuvwxyz is at verify
2026/10/23 19:47:04 moves: a.go.example.com: the source still matches what it recorded when it stopped
2026/10/23 19:47:04 moves: a.go.example.com: the source answered its probe; the revert of mv_abcdefghijklmnopqrstuvwxyz is probed
2026/10/23 19:47:04 moves: a.go.example.com: the source serves again; the revert of mv_abcdefghijklmnopqrstuvwxyz waits for its lane's park
2026/10/23 19:47:04 moves: a.go.example.com: the revert of mv_abcdefghijklmnopqrstuvwxyz waits for 1 chore(s) of the move, its lane's park, to be acknowledged
2026/10/23 19:47:04 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz's lane is archived; its park is acknowledged after its horizon
2026/10/23 19:47:04 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz's lane in uk is parked
2026/10/23 19:47:04 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is reverted and closed
2026/10/23 19:47:04 moves: a.go.example.com: WARNING: no operator pager is wired on this box, so the rolled_back page of move mv_abcdefghijklmnopqrstuvwxyz is not sent; the move goes on (Plan 5 Task 9b wires the pager)
2026/10/23 19:47:04 moves: a.go.example.com: injected crash
2026/10/23 19:47:04 moves: a.go.example.com: the local artifacts of mv_abcdefghijklmnopqrstuvwxyz are parked in /tmp/TestBoxClosesAreRecordFirstrevert_close_(movesrevert.go)1289840163/002/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/8aa4d8d99294bf8f2414b2c9254865eb
2026/10/23 19:47:04 moves: a.go.example.com: the source's journal of the revert mv_abcdefghijklmnopqrstuvwxyz is parked
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:04 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:04 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:04 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:04 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:04 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:04 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:04 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:04 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:04 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:04 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:04 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:04 moves: a.go.example.com: render the held row: the agent died before the rename
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is past its cut_deadline (2026-10-07T09:01:55Z)
2026/10/23 19:47:04 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz rolls back as rb_jc3cb22wv5vz24lq6kv46sfas4: the landing ran past its deadline
2026/10/23 19:47:04 moves: a.go.example.com: the claim follows rollback rb_jc3cb22wv5vz24lq6kv46sfas4
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_jc3cb22wv5vz24lq6kv46sfas4 stopped at TXID 3 (clean true, src_covered true)
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_jc3cb22wv5vz24lq6kv46sfas4 is released
2026/10/23 19:47:04 moves: a.go.example.com: the target gave execution up for rollback rb_jc3cb22wv5vz24lq6kv46sfas4, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-target.json
2026/10/23 19:47:04 moves: a.go.example.com: the target keeps what it holds for rollback rb_jc3cb22wv5vz24lq6kv46sfas4 until the source has recovered
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_jc3cb22wv5vz24lq6kv46sfas4 is cleaning
2026/10/23 19:47:04 moves: a.go.example.com: the target region's copies of mv_abcdefghijklmnopqrstuvwxyz are parked
2026/10/23 19:47:04 moves: a.go.example.com: the target's registered installation (stamp 8) is retired
2026/10/23 19:47:04 moves: a.go.example.com: the held render's unfinished write /tmp/TestRenderTempIsRemovedByCleaningearlier_true3877391238/005/a.go.example.com.config.env.tmp is removed
2026/10/23 19:47:04 moves: a.go.example.com: a.go.example.com.config.env has no record that mv_abcdefghijklmnopqrstuvwxyz created it; it is left where it is
2026/10/23 19:47:04 moves: a.go.example.com: the local artifacts of mv_abcdefghijklmnopqrstuvwxyz are parked in /tmp/TestRenderTempIsRemovedByCleaningearlier_true3877391238/005/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/e6f36e3c3af3b1ae979b7f3081949b66
2026/10/23 19:47:04 moves: a.go.example.com: the target's row and its timers are deleted
2026/10/23 19:47:04 moves: a.go.example.com: the target of rollback rb_jc3cb22wv5vz24lq6kv46sfas4 is cleaned
2026/10/23 19:47:04 moves: a.go.example.com: the target's half of the rollback of mv_abcdefghijklmnopqrstuvwxyz is complete
  warm.test: repointed  -> v1 (edge; hibernating — runs it on next wake)
  warm.test: repointed v1 -> v2 (edge; hibernating — runs it on next wake)
2026/10/23 19:47:04 activator: warm.test serving v1 but v2 is adopted — cycling onto the new build
2026/10/23 19:47:04 agent: warm.test was adopted onto v2 by another pass — cycled its warm instance onto it
2026/10/23 19:47:04 activator: warm.test hibernated
2026/10/23 19:47:04 activator: warm.test hibernated
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: update to v2 failed: permission denied — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
2026/10/23 19:47:05 permission denied
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:05 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:05 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:05 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:05 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:05 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:05 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:05 moves: a.go.example.com: the landing carries no build state; removed version null of an earlier stay's at instances/a.go.example.com/build-state.json
2026/10/23 19:47:05 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:05 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:05 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:05 moves: a.go.example.com: database installed at /tmp/TestALandingWithNoBuildStateRemovesALeftoverOne1485264277/005/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:05 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:05 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:05 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:05 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:05 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:05 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:05 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:05 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:05 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:05 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:05 moves: a.go.example.com: database installed at /tmp/TestALandingWithNoBuildStatePlacesNone4202741848/005/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:05 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:05 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: update to v2 failed: permission denied — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:06 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:06 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:06 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:06 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:06 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:06 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:06 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:06 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:06 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:06 moves: a.go.example.com: render the held row: the agent died after writing A
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is past its cut_deadline (2026-10-07T09:01:55Z)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz rolls back as rb_ehj4cuwxzo7e6257ha5r2fjhui: the landing ran past its deadline
2026/10/23 19:47:06 moves: a.go.example.com: the claim follows rollback rb_ehj4cuwxzo7e6257ha5r2fjhui
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_ehj4cuwxzo7e6257ha5r2fjhui stopped at TXID 3 (clean true, src_covered true)
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_ehj4cuwxzo7e6257ha5r2fjhui is released
2026/10/23 19:47:06 moves: a.go.example.com: the target gave execution up for rollback rb_ehj4cuwxzo7e6257ha5r2fjhui, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-target.json
2026/10/23 19:47:06 moves: a.go.example.com: the target keeps what it holds for rollback rb_ehj4cuwxzo7e6257ha5r2fjhui until the source has recovered
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_ehj4cuwxzo7e6257ha5r2fjhui is cleaning
2026/10/23 19:47:06 moves: a.go.example.com: the target region's copies of mv_abcdefghijklmnopqrstuvwxyz are parked
2026/10/23 19:47:06 moves: a.go.example.com: the target's registered installation (stamp 8) is retired
2026/10/23 19:47:06 moves: a.go.example.com: the local artifacts of mv_abcdefghijklmnopqrstuvwxyz are parked in /tmp/TestRenderReplayKeepsEveryIntendedHash4253317324/005/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/6d8afc2c3997d160ef037c935104a2c3
2026/10/23 19:47:06 moves: a.go.example.com: the target's row and its timers are deleted
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_ehj4cuwxzo7e6257ha5r2fjhui is cleaned
2026/10/23 19:47:06 moves: a.go.example.com: the target's half of the rollback of mv_abcdefghijklmnopqrstuvwxyz is complete
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:06 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:06 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:06 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:06 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:06 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:06 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:06 moves: a.go.example.com: the landing placed the moved build state at instances/a.go.example.com/build-state.json
2026/10/23 19:47:06 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:06 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:06 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:06 moves: a.go.example.com: database installed at /tmp/TestTheLandingPlacesTheBuildStateBeforeTheProbe1181048580/005/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probing (landing-probing)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is probing
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probe_attempt (probe_attempt-1)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz passed its probe on attempt 1 of 1
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probed (landing-probed)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is probed
2026/10/23 19:47:06 moves: a.go.example.com: held at probed by the test
2026/10/23 19:47:06 agent: runs: acme.example.com: run run_abcdefghijklmnopqrstuvwxyz started (inv1)
2026/10/23 19:47:06 activator: sleepy.bab.oncarlos.com idle 1s — hibernating
2026/10/23 19:47:06 activator: sleepy.bab.oncarlos.com hibernated
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:06 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:06 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:06 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:06 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:06 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:06 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:06 moves: a.go.example.com: the landing placed the moved build state at instances/a.go.example.com/build-state.json
2026/10/23 19:47:06 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:06 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:06 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:06 moves: a.go.example.com: database installed at /tmp/TestTheLandingPlacesTheSealedVersionNotALaterOne1536415756/005/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:06 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:06 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:06 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:06 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:06 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:06 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:06 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:06 moves: a.go.example.com: the landing placed the moved build state at instances/a.go.example.com/build-state.json
2026/10/23 19:47:06 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:06 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:06 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:06 moves: a.go.example.com: database installed at /tmp/TestTheReturnLaneCarriesTheRequest1903916981/005/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:06 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is past its cut_deadline (2026-10-07T09:01:55Z)
2026/10/23 19:47:06 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz rolls back as rb_e32eup2kyfsky7kzgdxdfn5wci: the landing ran past its deadline
2026/10/23 19:47:06 moves: a.go.example.com: the claim follows rollback rb_e32eup2kyfsky7kzgdxdfn5wci
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_e32eup2kyfsky7kzgdxdfn5wci stopped at TXID 3 (clean false, src_covered false)
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_e32eup2kyfsky7kzgdxdfn5wci is released
2026/10/23 19:47:06 moves: a.go.example.com: the target gave execution up for rollback rb_e32eup2kyfsky7kzgdxdfn5wci, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-target.json
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_e32eup2kyfsky7kzgdxdfn5wci is returning
2026/10/23 19:47:06 moves: a.go.example.com: the return lane of rb_e32eup2kyfsky7kzgdxdfn5wci is sealed: 4 replica objects at TXID 3
2026/10/23 19:47:06 moves: a.go.example.com: the target of rollback rb_e32eup2kyfsky7kzgdxdfn5wci is returned
2026/10/23 19:47:06 moves: a.go.example.com: the target keeps what it holds for rollback rb_e32eup2kyfsky7kzgdxdfn5wci until the source has recovered
2026/10/23 19:47:06 agent: tunnel dial: dial tcp 127.0.0.1:45405: connect: connection refused (retry in 2.723724401s)
  sleepy.test: repointed  -> v1 (canary/dev; hibernating — bounced if awake, else runs it on next wake)
2026/10/23 19:47:06 adopt: bounced exec instance warm.test onto its new version
  warm.test: repointed  -> v1 (canary/dev; hibernating — bounced if awake, else runs it on next wake)
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: update to v2 failed: permission denied — rolled the symlink back
  flap.test: update to new failed: unit would not come back — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
2026/10/23 19:47:07 adopt: bounced exec instance plain.test onto its new version
  plain.test: updated  -> v1 (canary/dev)
2026/10/23 19:47:07 adopt: bounced exec instance warm.test onto its new version
  warm.test: repointed  -> v1 (canary/dev; hibernating — bounced if awake, else runs it on next wake)
  flap.test: update to new failed: unit would not come back — rolled the symlink back
  flap.test: updated old -> new (canary/dev)
  created /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/data/registry.db
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-adopt.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-adopt.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-adopt.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-app@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-app@.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-config-sync.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-dbread.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-dbread@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-edge.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-hibernate-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-hibernate-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance-cmd@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance-control.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance-control.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance-gen@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance-probe.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance-seed@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance-sidecar@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instance@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-instances.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-litestream.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-relay.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-restart.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-restart.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-restore-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-restore-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-stage.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-stage.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-system-join.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-system-join.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-system-recover.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-system-update.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos-system-update.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/carlos.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/data-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/run-carlos-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/system/run-carlos-logs.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/sysusers.d/carlos.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/systemd/journald.conf.d/50-cap.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/etc/tmpfiles.d/carlos.conf
bootstrap: staged under /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001 — on a real box (--root /) it would also:
  useradd --system --user-group --no-create-home --shell /usr/sbin/nologin carlos
  groupadd --system carlos-sockets
  chown -R carlos:carlos /data
  chown -R carlos:carlos-sockets /run/carlos
  chown -R carlos:carlos /run/carlos/apps
  chmod 2750 /run/carlos
  systemctl daemon-reload
  systemctl enable carlos-edge.service carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-recover.service carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl start carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl restart systemd-journald
  created /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/data/registry.db
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-app@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-app@.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-config-sync.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-dbread.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-dbread@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-edge.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-hibernate-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-hibernate-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-cmd@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-control.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-control.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-gen@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-probe.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-seed@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-sidecar@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instances.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-litestream.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-relay.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restart.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restart.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restore-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restore-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-stage.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-stage.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-join.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-join.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-recover.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-update.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-update.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/carlos.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/data-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/run-carlos-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/system/run-carlos-logs.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/sysusers.d/carlos.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/systemd/journald.conf.d/50-cap.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new/etc/tmpfiles.d/carlos.conf
bootstrap: staged under /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/001/opt/carlos/system/router/staging/new — on a real box (--root /) it would also:
  useradd --system --user-group --no-create-home --shell /usr/sbin/nologin carlos
  groupadd --system carlos-sockets
  chown -R carlos:carlos /data
  chown -R carlos:carlos-sockets /run/carlos
  chown -R carlos:carlos /run/carlos/apps
  chmod 2750 /run/carlos
  systemctl daemon-reload
  systemctl enable carlos-edge.service carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-recover.service carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl start carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl restart systemd-journald
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
2026/10/23 19:47:07 agent: telemetry read accounts/bab/telemetry.json: 503 slow down (the last good value stands; retried next pass)
  platform.example.com: rolled back to v1 but could not start it: unit was stopped during settle — this host may be serving nothing
2026/10/23 19:47:07 agent: instance keys: 1 minted, 0 already present, 0 set by app configuration, 0 never started here, 0 waiting for their configuration, 0 failed, 0 rows skipped
  platform.example.com: update to v2 failed: permission denied — rolled the symlink back
2026/10/23 19:47:07 activator: replica shop.bab.oncarlos.com not started: it has no key of its home's and no control socket, so an app on the instance-key helper would mint its own
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:07 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:07 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:07 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:07 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:07 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:07 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (rolling_back-source-building)
2026/10/23 19:47:07 moves: a.go.example.com: return mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:07 moves: a.go.example.com: the return placed the moved build state at instances/a.go.example.com/build-state.json
2026/10/23 19:47:07 moves: a.go.example.com: generation rb_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (rolling_back-source-published)
2026/10/23 19:47:07 moves: a.go.example.com: return mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (rolling_back-source-local)
2026/10/23 19:47:07 moves: a.go.example.com: return mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:07 moves: a.go.example.com: the source's artifacts of stamp 1 are retired
2026/10/23 19:47:07 moves: a.go.example.com: the local artifacts of rb_abcdefghijklmnopqrstuvwxyz are parked in /tmp/TestTheReturnInstallPlacesTheBuildState2927522120/002/.parked/cc4fe64fa6da6232556d039690a7c19690555ce5d542faba1e57a3d3c896c3bb/a.go.example.com/9f822bc39c8fbbb67488961c632aa9bb
2026/10/23 19:47:07 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-rb_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 55dbb82acc5c0c115c4dafe3b5bb8fd1a6b54694ab110cf32b00cbad0e10f430)
2026/10/23 19:47:07 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (rolling_back-source-configured)
2026/10/23 19:47:07 moves: a.go.example.com: return mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:07 moves: a.go.example.com: database installed at /tmp/TestTheReturnInstallPlacesTheBuildState2927522120/002/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation rb_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (rolling_back-source-restored)
2026/10/23 19:47:07 moves: a.go.example.com: return mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:07 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:07 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:07 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:07 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:07 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:07 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:07 moves: a.go.example.com: injected crash
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is past its cut_deadline (2026-10-07T09:01:55Z)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz rolls back as rb_wcvzgcrvfqwgpe7ftj4adctha4: the landing ran past its deadline
2026/10/23 19:47:07 moves: a.go.example.com: the claim follows rollback rb_wcvzgcrvfqwgpe7ftj4adctha4
2026/10/23 19:47:07 moves: a.go.example.com: the target of rollback rb_wcvzgcrvfqwgpe7ftj4adctha4 stopped at TXID 3 (clean false, src_covered false)
2026/10/23 19:47:07 moves: a.go.example.com: the target of rollback rb_wcvzgcrvfqwgpe7ftj4adctha4 is released
2026/10/23 19:47:07 moves: a.go.example.com: the target gave execution up for rollback rb_wcvzgcrvfqwgpe7ftj4adctha4, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-target.json
2026/10/23 19:47:07 moves: a.go.example.com: the target of rollback rb_wcvzgcrvfqwgpe7ftj4adctha4 is returning
2026/10/23 19:47:07 moves: a.go.example.com: the return lane of rb_wcvzgcrvfqwgpe7ftj4adctha4 is sealed: 4 replica objects at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: the target of rollback rb_wcvzgcrvfqwgpe7ftj4adctha4 is returned
2026/10/23 19:47:07 moves: a.go.example.com: the target keeps what it holds for rollback rb_wcvzgcrvfqwgpe7ftj4adctha4 until the source has recovered
  created /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/data/registry.db
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-adopt.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-adopt.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-adopt.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-app@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-app@.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-config-sync.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-dbread.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-dbread@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-edge.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-hibernate-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-hibernate-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance-cmd@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance-control.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance-control.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance-gen@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance-probe.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance-seed@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance-sidecar@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instance@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-instances.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-litestream.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-relay.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-restart.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-restart.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-restore-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-restore-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-stage.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-stage.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-system-join.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-system-join.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-system-recover.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-system-update.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos-system-update.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/carlos.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/data-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/run-carlos-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/system/run-carlos-logs.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/sysusers.d/carlos.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/systemd/journald.conf.d/50-cap.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/etc/tmpfiles.d/carlos.conf
bootstrap: staged under /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003 — on a real box (--root /) it would also:
  useradd --system --user-group --no-create-home --shell /usr/sbin/nologin carlos
  groupadd --system carlos-sockets
  chown -R carlos:carlos /data
  chown -R carlos:carlos-sockets /run/carlos
  chown -R carlos:carlos /run/carlos/apps
  chmod 2750 /run/carlos
  systemctl daemon-reload
  systemctl enable carlos-edge.service carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-recover.service carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl start carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl restart systemd-journald
  created /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/data/registry.db
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-app@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-app@.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-config-sync.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-dbread.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-dbread@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-edge.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-hibernate-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-hibernate-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-cmd@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-control.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-control.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-gen@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-probe.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-seed@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-sidecar@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instances.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-litestream.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-relay.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restart.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restart.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restore-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restore-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-stage.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-stage.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-join.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-join.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-recover.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-update.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-update.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/carlos.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/data-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/run-carlos-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/system/run-carlos-logs.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/sysusers.d/carlos.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/systemd/journald.conf.d/50-cap.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new/etc/tmpfiles.d/carlos.conf
bootstrap: staged under /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/003/opt/carlos/system/router/staging/new — on a real box (--root /) it would also:
  useradd --system --user-group --no-create-home --shell /usr/sbin/nologin carlos
  groupadd --system carlos-sockets
  chown -R carlos:carlos /data
  chown -R carlos:carlos-sockets /run/carlos
  chown -R carlos:carlos /run/carlos/apps
  chmod 2750 /run/carlos
  systemctl daemon-reload
  systemctl enable carlos-edge.service carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-recover.service carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl start carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl restart systemd-journald
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:07 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:07 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:07 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:07 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:07 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:07 moves: a.go.example.com: flipped to uk
  platform.example.com: updated v1 -> v2 (canary/console)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:07 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:07 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:07 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:07 moves: a.go.example.com: database installed at /tmp/TestLandingProbeCrashRestartsOnlyTheProbe178349344/005/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probing (landing-probing)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is probing
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probe_attempt (probe_attempt-1)
2026/10/23 19:47:07 moves: a.go.example.com: injected crash
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz passed its probe on attempt 1 of 2
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probed (landing-probed)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is probed
2026/10/23 19:47:07 moves: a.go.example.com: held at probed by the test
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:07 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:07 moves: a.go.example.com: not ready: the target has not published a readiness report yet
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:07 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:07 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:07 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:07 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:07 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:07 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 1b22b0194dfdb7c198891116f2f60dff64ad1d3a22543d67c683fe6c57f4826e)
2026/10/23 19:47:07 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz requested (requested)
2026/10/23 19:47:07 moves: a.go.example.com: staged the files archive sha256:c9229ef8e7256a1dcd5c2715b11ac3016951e8fee8e0bfa823aa2460f0d331c8 (2 files, 19 bytes)
2026/10/23 19:47:07 moves: a.go.example.com: not ready: the target has not published a readiness report yet
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz ready (ready)
2026/10/23 19:47:07 moves: a.go.example.com: move mv_abcdefghijklmnopqrstuvwxyz is ready (last round moved 1815 bytes; bar 16777216)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz cut_requested (cutting-requested)
2026/10/23 19:47:07 moves: a.go.example.com: database installed at /tmp/TestLandingBuildsInstallsAndRestores16206084/005/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz admitted (cutting-admitted)
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopping (cutting-stopping)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopping
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz stopped (cutting-stopped)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is stopped
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
2026/10/23 19:47:07 moves: a.go.example.com: stopped at TXID 3; execution given up, citing moves/bab/app/a.go.example.com/mv_abcdefghijklmnopqrstuvwxyz/stopped-source.json
2026/10/23 19:47:07 moves: a.go.example.com: sealed 4 replica objects at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz staged (cutting-staged)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is staged
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz archived (cutting-archived)
2026/10/23 19:47:07 moves: a.go.example.com: cut mv_abcdefghijklmnopqrstuvwxyz is archived
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz flipped (cutting-flipped)
2026/10/23 19:47:07 moves: a.go.example.com: flipped to uk
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz parking (landing-parking)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is parking
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz building (landing-building)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is building
2026/10/23 19:47:07 moves: a.go.example.com: generation mv_abcdefghijklmnopqrstuvwxyz built at TXID 3
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz published (landing-published)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is published
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz local (landing-local)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is local
2026/10/23 19:47:07 moves: a.go.example.com: the prepared files manifest instances/a.go.example.com/files/g-mv_abcdefghijklmnopqrstuvwxyz/manifest.json is written (sha256 bdd5101a4adb10e6490f5f54780ae99c4392728e66784a373d480b548b961831)
2026/10/23 19:47:07 moves: a.go.example.com: files, environment, timers and columns installed; .files-gen written
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz configured (landing-configured)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is configured
2026/10/23 19:47:07 moves: a.go.example.com: database installed at /tmp/TestLandingProbeCrashRestartsOnlyTheProbe178349344/014/a.go.example.com.db (sha256:ae0661eb68be3f7cf598dba7530492d53b78f5082395b4a1ac8e1f86ea82228d), generation mv_abcdefghijklmnopqrstuvwxyz
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz restored (landing-restored)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is restored
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz waits at restored: this box has no probe wake (claim Plan 11's launcher and Plan 5 Task 9's arming are needed)
  platform.example.com: rolled back to v1 but could not start it: permission denied — this host may be serving nothing
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probing (landing-probing)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is probing
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probe_attempt (probe_attempt-1)
2026/10/23 19:47:07 moves: a.go.example.com: injected crash
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probe_attempt (probe_attempt-2)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz passed its probe on attempt 2 of 2
2026/10/23 19:47:07 moves: a.go.example.com: mv_abcdefghijklmnopqrstuvwxyz probed (landing-probed)
2026/10/23 19:47:07 moves: a.go.example.com: landing mv_abcdefghijklmnopqrstuvwxyz is probed
2026/10/23 19:47:07 moves: a.go.example.com: held at probed by the test
2026/10/23 19:47:08 agent: build state of a.example.com: context deadline exceeded
2026/10/23 19:47:08 agent: build state refresh: the 200ms budget ran out; 2 of 3 hosts not reached keep their last copy
2026/10/23 19:47:08 activator: replica shop.bab.oncarlos.com not started: CARLOS_INSTANCE_KEY is not its home's key
  platform.example.com: update to v2 failed: permission denied — rolled the symlink back
2026/10/23 19:47:08 agent: build state of b.example.com: context deadline exceeded
2026/10/23 19:47:08 agent: build state refresh: the 200ms budget ran out; 2 of 3 hosts not reached keep their last copy
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
2026/10/23 19:47:08 agent: retention: pruned 3 of 3 eligible versions for bab/kass (keep 20)
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
2026/10/23 19:47:08 agent: retention: pruned 1 of 1 eligible versions for bab/kass (keep 20)
  created /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/data/registry.db
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-adopt.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-adopt.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-adopt.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-app@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-app@.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-config-sync.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-dbread.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-dbread@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-edge.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-hibernate-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-hibernate-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance-cmd@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance-control.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance-control.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance-gen@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance-probe.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance-seed@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance-sidecar@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instance@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-instances.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-litestream.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-relay.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-restart.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-restart.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-restore-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-restore-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-stage.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-stage.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-system-join.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-system-join.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-system-recover.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-system-update.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos-system-update.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/carlos.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/data-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/run-carlos-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/system/run-carlos-logs.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/sysusers.d/carlos.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/systemd/journald.conf.d/50-cap.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/etc/tmpfiles.d/carlos.conf
bootstrap: staged under /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005 — on a real box (--root /) it would also:
  useradd --system --user-group --no-create-home --shell /usr/sbin/nologin carlos
  groupadd --system carlos-sockets
  chown -R carlos:carlos /data
  chown -R carlos:carlos-sockets /run/carlos
  chown -R carlos:carlos /run/carlos/apps
  chmod 2750 /run/carlos
  systemctl daemon-reload
  systemctl enable carlos-edge.service carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-recover.service carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl start carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl restart systemd-journald
  created /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/data/registry.db
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-adopt.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-app@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-app@.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-config-sync.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-dbread.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-dbread@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-edge.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-hibernate-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-hibernate-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-cmd@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-control.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-control.socket
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-gen@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-probe.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-seed@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance-sidecar@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instance@.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-instances.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-litestream.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-relay.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restart.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restart.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restore-verify.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-restore-verify.timer
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-stage.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-stage.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-join.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-join.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-recover.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-update.path
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos-system-update.service
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/carlos.slice
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/data-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/run-carlos-instances.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/system/run-carlos-logs.mount
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/sysusers.d/carlos.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/systemd/journald.conf.d/50-cap.conf
  wrote /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new/etc/tmpfiles.d/carlos.conf
bootstrap: staged under /tmp/TestCensusInitializesWithAHeldStageRequest1055305866/005/opt/carlos/system/router/staging/new — on a real box (--root /) it would also:
  useradd --system --user-group --no-create-home --shell /usr/sbin/nologin carlos
  groupadd --system carlos-sockets
  chown -R carlos:carlos /data
  chown -R carlos:carlos-sockets /run/carlos
  chown -R carlos:carlos /run/carlos/apps
  chmod 2750 /run/carlos
  systemctl daemon-reload
  systemctl enable carlos-edge.service carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-recover.service carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl start carlos-relay.service carlos-adopt.timer carlos-adopt.path carlos-stage.path carlos-restart.path carlos-system-update.path carlos-system-join.path data-instances.mount run-carlos-instances.mount run-carlos-logs.mount carlos-instance-control.socket
  systemctl restart systemd-journald
  held.example.com: layout migration in flight; bundle not written this pass
2026/10/23 19:47:08 agent: build state of c.example.com: context deadline exceeded
2026/10/23 19:47:08 agent: build state refresh: the 200ms budget ran out; 2 of 3 hosts not reached keep their last copy
2026/10/23 19:47:08 agent: retention bab/kass: pruning nothing this pass: no box report names the build state of kass.example.com
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: running /tmp/TestPlan14RollbackCapabilitybad_executable264944772/001/versions/v2/console, not the new build in /tmp/TestPlan14RollbackCapabilitybad_executable264944772/001/versions/v1 — this host may be serving nothing
2026/10/23 19:47:08 agent: build state of a.example.com: context deadline exceeded
2026/10/23 19:47:08 agent: build state refresh: the 200ms budget ran out; 2 of 3 hosts not reached keep their last copy
2026/10/23 19:47:08 agent: retention: pruned 1 of 1 eligible versions for bab/kass (keep 20)
  platform.example.com: update to v2 failed: permission denied — rolled the symlink back
2026/10/23 19:47:08 agent: retention bab/kass: pruning nothing this pass: this box (sole housekeeper) could not collect its build states: database is locked
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
2026/10/23 19:47:08 activator: rearm.bab.oncarlos.com idle 0s — hibernating
2026/10/23 19:47:08 activator: rearm.bab.oncarlos.com hibernated
2026/10/23 19:47:08 activator: rearm.bab.oncarlos.com hibernated
  platform.example.com: update to v2 failed: console.service did not come up: permission denied
permission denied — rolled the symlink back
2026/10/23 19:47:09 relocate shop.example: finish: the participation slot is still open
2026/10/23 19:47:09 settled witness
  platform.example.com: updated v1 -> v2 (canary/console)
2026/10/23 19:47:09 agent: retention bab/kass: pruning nothing this pass: no box report names the build state of kass.example.com
2026/10/23 19:47:09 agent: schedules from the bucket are off (no deploy store on this box); once-timers registered by instances still run (runner every 15s)
2026/10/23 19:47:09 agent: tunnel dial: dial tcp 127.0.0.1:45405: connect: connection refused (retry in 2.21897632s)
2026/10/23 19:47:09 agent: scheduled work armed (converge on serial + hourly; runner every 15s)
2026/10/23 19:47:09 agent: scheduled work disabled: no deploy store
2026/10/23 19:47:09 activator: storeless.bab.oncarlos.com hibernated
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
2026/10/23 19:47:09 moves: "a.go.example.com": held release "v7" published for "mv_abcdefghijklmnopqrstuvwxyz" at "landing" "configured"
2026/10/23 19:47:09 moves: "a.go.example.com": held release "v7" published for "mv_abcdefghijklmnopqrstuvwxyz" at "landing" "configured"
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
2026/10/23 19:47:09 relocate shop.example: finish: the claim CAS failed
  platform.example.com: updated v1 -> v2 (canary/console)
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: permission denied — this host may be serving nothing
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: permission denied — this host may be serving nothing
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: unit entered failed state — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
  platform.example.com: update to v2 failed: permission denied — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
  platform.example.com: rolled back to v1 but could not start it: console.service did not come up: not ready after 5s: permission denied — this host may be serving nothing
  platform.example.com: update to v2 failed: console.service did not come up: not ready after 5s: permission denied — rolled the symlink back
FAIL
FAIL	github.com/carlosframework/platform/internal/host	155.348s
ok  	github.com/carlosframework/platform/internal/hostactors	10.126s
ok  	github.com/carlosframework/platform/internal/hostactors/awsmembership	0.009s
ok  	github.com/carlosframework/platform/internal/hostbox	6.918s
ok  	github.com/carlosframework/platform/internal/hostclaim	1.955s
ok  	github.com/carlosframework/platform/internal/hostenv	0.010s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.012s
ok  	github.com/carlosframework/platform/internal/hostexec	9.959s
ok  	github.com/carlosframework/platform/internal/hostfence	0.123s
ok  	github.com/carlosframework/platform/internal/hostfiles	12.839s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.039s
ok  	github.com/carlosframework/platform/internal/hostguard	1.240s
ok  	github.com/carlosframework/platform/internal/hostops	5.353s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.004s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.004s
ok  	github.com/carlosframework/platform/internal/hostrelocate	2.005s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.607s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.004s
ok  	github.com/carlosframework/platform/internal/infraview	0.016s
ok  	github.com/carlosframework/platform/internal/instancectl	5.310s
ok  	github.com/carlosframework/platform/internal/instanceexec	3.313s
ok  	github.com/carlosframework/platform/internal/instancefs	0.021s
ok  	github.com/carlosframework/platform/internal/instancekey	0.005s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.010s
ok  	github.com/carlosframework/platform/internal/layout	4.427s
ok  	github.com/carlosframework/platform/internal/lbhealth	0.019s
ok  	github.com/carlosframework/platform/internal/lease	10.384s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	1.110s
ok  	github.com/carlosframework/platform/internal/ledger	0.060s
ok  	github.com/carlosframework/platform/internal/mail	0.848s
ok  	github.com/carlosframework/platform/internal/maintenance	0.176s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	6.160s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.259s
ok  	github.com/carlosframework/platform/internal/metrics	0.006s
ok  	github.com/carlosframework/platform/internal/moves	35.990s
ok  	github.com/carlosframework/platform/internal/moves/archive	2.273s
ok  	github.com/carlosframework/platform/internal/objstore	1.090s
ok  	github.com/carlosframework/platform/internal/ops	0.330s
ok  	github.com/carlosframework/platform/internal/park	0.594s
ok  	github.com/carlosframework/platform/internal/plans	0.008s
ok  	github.com/carlosframework/platform/internal/privatefile	0.004s
ok  	github.com/carlosframework/platform/internal/provision	44.071s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.030s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	8.834s
ok  	github.com/carlosframework/platform/internal/relay	7.334s
ok  	github.com/carlosframework/platform/internal/release	39.507s
ok  	github.com/carlosframework/platform/internal/rollout	5.572s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.006s
ok  	github.com/carlosframework/platform/internal/rootaws	0.009s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.069s
ok  	github.com/carlosframework/platform/internal/rootstate	0.043s
ok  	github.com/carlosframework/platform/internal/runs	0.765s
ok  	github.com/carlosframework/platform/internal/s3compat	0.015s
ok  	github.com/carlosframework/platform/internal/safefile	0.006s
ok  	github.com/carlosframework/platform/internal/schedule	4.351s
ok  	github.com/carlosframework/platform/internal/seeds	0.018s
ok  	github.com/carlosframework/platform/internal/sim/engines	7.646s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	29.218s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	4.495s
ok  	github.com/carlosframework/platform/internal/status	0.236s
ok  	github.com/carlosframework/platform/internal/steering	0.014s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.365s
ok  	github.com/carlosframework/platform/internal/svcrole	0.005s
ok  	github.com/carlosframework/platform/internal/telemetry	0.006s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.012s
ok  	github.com/carlosframework/platform/internal/unixdial	0.002s
ok  	github.com/carlosframework/platform/internal/updatewords	0.007s
ok  	github.com/carlosframework/platform/internal/usage	0.005s
ok  	github.com/carlosframework/platform/internal/version	0.002s
ok  	github.com/carlosframework/platform/internal/vet	2.869s
FAIL
=== internal_console@0 (94 s)
ok  	github.com/carlosframework/platform/internal/console	91.446s
=== internal_console@1 (57 s)
ok  	github.com/carlosframework/platform/internal/console	53.888s
=== internal_console@2 (56 s)
ok  	github.com/carlosframework/platform/internal/console	53.157s
=== internal_console@3 (56 s)
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: alert watch: no keymail grant for ops-b@keymail.dev — not notified (they must sign in to the console once)
2026/10/23 19:44:22 console: alert watch: unparsable alerts/boxes/box-junk.json: invalid character 'n' looking for beginning of object key string
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: app region bab/paul:  (default)
2026/10/23 19:44:22 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: api ship bab/console: read app flags: SQL logic error: no such column: build_probe (1)
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:22 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:23 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:23 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:23 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:23 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:23 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:23 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:23 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:23 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:23 console: api db bab/titogo/acme.go.tito.io: stream level 0 1-1: context canceled
2026/10/23 19:44:23 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 console: could not notify member@example.com of a CLI token issue: keymail: lookup member@example.com: keymail: GET /api/federation/lookup?addr=member%40example.com&from=console%40127.0.0.1%3A41425: could not determine target mailbox
2026/10/23 19:44:23 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 console: could not notify member@example.com of a CLI token issue: keymail: lookup member@example.com: keymail: GET /api/federation/lookup?addr=member%40example.com&from=console%40127.0.0.1%3A38125: could not determine target mailbox
2026/10/23 19:44:23 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:23 console: could not notify member@example.com of a CLI token issue: keymail: lookup member@example.com: keymail: GET /api/federation/lookup?addr=member%40example.com&from=console%40127.0.0.1%3A42089: could not determine target mailbox
2026/10/23 19:44:24 console: db read dbr_ugmrxkz4wnroq5t6benldhbtye: relayed 1 chunks (99 bytes) in 1s, ended no-result
2026/10/23 19:44:24 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:24 console: could not notify member@example.com of a CLI token issue: keymail: lookup member@example.com: keymail: GET /api/federation/lookup?addr=member%40example.com&from=console%40127.0.0.1%3A42825: could not determine target mailbox
2026/10/23 19:44:24 console: db read dbr_azd6ogta27jjfd2qdhgehbwmhm: relayed 0 chunks (0 bytes) in 201ms, ended no-result
2026/10/23 19:44:24 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: api rollback km canary/x: rollback: km canary/x would go back to v1, which has no signed digest. Run carlos channels resign --app km canary/x first, or promote a newer build
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:25 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: finished seed sd_ooarisbd7eci5vzoo5wz3rsxwq of bab/shop/old.shop.example.com
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:26 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:27 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:27 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:27 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:27 console: api instance move bab/titogo/acme.go.tito.io: typed move write refused: hostops: identity mismatch
2026/10/23 19:44:27 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:27 console: api instance move bab/titogo/acme.go.tito.io: typed move write refused: hostops: identity mismatch
2026/10/23 19:44:27 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:27 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 console: offline move acme.shop.example.com: ignoring control/offline-moves/acme.shop.example.com/mv_geccnd3kn2t66ukicdq2uwrasi/seal.json: not the seal of this move
2026/10/23 19:44:28 console: offline move acme.shop.example.com: ignoring control/offline-moves/acme.shop.example.com/mv_geccnd3kn2t66ukicdq2uwrasi/seal.json: not the seal of this move
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 console: offline move bab/shop/acme.shop.example.com: write timeout
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 edges: box "uk-box" has an edges file under control/edges/ but no status snapshot at all, so no region outside the home is automatically eligible until it reports; said once
2026/10/23 19:44:28 edges: 1 edges file(s) under control/edges/ but no fresh box snapshot matched any of them, so automatic region placement sees the home alone (are edges and status in different buckets? see CARLOS_STATUS_BUCKET/CARLOS_STATUS_PREFIX)
2026/10/23 19:44:28 console: an incomplete read of the edges files or box snapshots (edges complete true, snapshots complete false), so no region outside the home is automatically eligible this request; said once
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:28 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:29 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:29 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:29 edges: could not read control/edges/se-box.json for the placement join: read timeout
2026/10/23 19:44:29 edges: could not read control/edges/se-box.json for the placement join: read timeout
2026/10/23 19:44:29 edges: box "se-box" has a fresh status snapshot but no edges file under control/edges/, so no region outside the home is automatically eligible until it publishes one; said once
2026/10/23 19:44:29 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:29 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:29 console: api instance move bab/titogo/acme.go.tito.io: protocol floor: moves: read floor: read timeout
2026/10/23 19:44:29 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:29 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:29 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: api instances create bab/titogo: pipeline read: pipeline wrapper: invalid character 'o' in literal null (expecting 'u')
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:44:30 console: from main.shop.example.com: upload canary.shop.example.com: access denied
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:44:30 console: from main.shop.example.com: publish canary.shop.example.com: the bucket refused the write
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:44:30 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:44:30 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:30 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: could not notify paul@keymail.dev of a CLI token issue: keymail: lookup paul@keymail.dev: Get "http://127.0.0.1:33643/api/federation/lookup?addr=paul%40keymail.dev&from=console%40127.0.0.1%3A46585": read tcp 127.0.0.1:55266->127.0.0.1:33643: read: connection reset by peer
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: could not notify alice@keymail.dev of a CLI token issue: keymail: lookup alice@keymail.dev: Get "http://127.0.0.1:38057/api/federation/lookup?addr=alice%40keymail.dev&from=console%40127.0.0.1%3A42893": dial tcp 127.0.0.1:38057: connect: connection refused
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: app region bab/widget:  (default)
2026/10/23 19:44:31 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: relay enabled bab/titogo in eu-west-1 by alice@keymail.dev (incarnation e68e764ab174e154, op 1)
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: relay enabled bab/titogo in eu-west-1 by alice@keymail.dev (incarnation 8e694222c7161e21, op 1)
2026/10/23 19:44:31 console: relay rotated eu-west-1 to kid k2, re-issued 1 app(s)
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:31 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: api run bab/shop/acme.example.com run_ueyy7cdrhcodyf5y4ky6wkz4jy: clear after ack: put refused; record read: <nil>
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: api run bab/shop/acme.example.com run_cjcftil5qjmnvbvohhj7jtzupq: clear after ack: <nil>; record read: get refused
2026/10/23 19:44:32 console: could not notify alice@keymail.dev of a CLI token issue: keymail: lookup alice@keymail.dev: Get "http://127.0.0.1:39259/api/federation/lookup?addr=alice%40keymail.dev&from=console%40127.0.0.1%3A44059": dial tcp 127.0.0.1:39259: connect: connection refused
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: api instance move bab/titogo/acme.example.com: the claim is moving under mv_ro7dw7mxhefc2rkzvjuwjvsvte but the record write failed: provision: move state conflict: a run is open on this instance: run-race. wait for it to finish or cancel it, then move the instance
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:32 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: api sidecars create bab/titogo: open registry: unable to open database file (14)
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: could not notify paul@keymail.dev of a CLI token issue: keymail: lookup paul@keymail.dev: Get "http://127.0.0.1:33879/api/federation/lookup?addr=paul%40keymail.dev&from=console%40127.0.0.1%3A36887": dial tcp 127.0.0.1:33879: connect: connection refused
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: api store provision bab: read entitlement: objstore: store/entitlements/bab.json: invalid character 'p' looking for beginning of value
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:33 console: could not notify alice@keymail.dev of a CLI token issue: keymail: grant revoked or invalid
2026/10/23 19:44:33 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: api store grant bab/titogo (bucket "other-uploads"): objstore: bucket or IAM user name belongs to another store: other-uploads
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: api system antivirus: read: release: system/antivirus.json: schema 99 is not 1
2026/10/23 19:44:34 console: api system antivirus: replacing an unreadable record on disable: release: system/antivirus.json: schema 99 is not 1
2026/10/23 19:44:34 console: object scanning disabled deployment-wide by alice@keymail.dev
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: api updates bab/km policy: enable refused, not every box applies update settings: ie-1: runs a binary that does not apply update settings
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: api updates bab/km policy: enable refused, the box inventory could not be read: edges records: AccessDenied: s3://carlos-prod-secret-bucket/ledgers request id ABC123
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:34 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:34 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: architecture refresh: console: infra inventory disabled for this process
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:35 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:36 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:36 console: refused: no eligible box in uk
2026/10/23 19:44:36 console: claim request refused: no eligible box in uk: hostops: region has no box that can take this
2026/10/23 19:44:37 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:37 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:37 console: refused: no eligible box in uk
2026/10/23 19:44:37 console: claim request refused: no eligible box in uk: hostops: region has no box that can take this
2026/10/23 19:44:37 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:38 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:38 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:38 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:38 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:39 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:39 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:39 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:39 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:39 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:39 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:39 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:39 console: api updates bab/kass/web.kass.carlosapp.dev: enable refused, not every box applies update settings: linus-marquetry: runs a binary that does not apply update settings
2026/10/23 19:44:39 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:39 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:40 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:40 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:40 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:40 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:40 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
--- FAIL: TestClaimAuthoritySourceCensus (0.24s)
    claim_authority_census_test.go:114: authority census differs: got 152 calls, want 151
    claim_authority_census_test.go:117: unreviewed authority use: ../../cmd/console/main.go|serve|mail.NewAWSProvisioner(ctx, region, mailBoundary)
2026/10/23 19:44:40 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:41 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:41 console: mail push: bab/kass: hostops: identity mismatch
2026/10/23 19:44:41 console: mail push: bab/kass: hostops: identity mismatch
2026/10/23 19:44:41 console: api config apply bab/kass (default): hostops: identity mismatch
2026/10/23 19:44:41 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:41 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:41 console: mail push: bab/kass: hostops: identity mismatch
2026/10/23 19:44:41 console: api config apply bab/kass (default): hostops: identity mismatch
2026/10/23 19:44:41 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:41 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:41 console: claim request refused: hostops: pending
2026/10/23 19:44:42 console: box box-ie-default has the legacy role (by paul@keymail.dev, roster revision 2)
2026/10/23 19:44:42 console: audit box-role platform: sql: no rows in result set
2026/10/23 19:44:43 console: the group in ie (routers) and its boxes [box-ie-default] have the legacy role (by paul@keymail.dev, roster revision 3)
2026/10/23 19:44:43 console: audit group-role platform: sql: no rows in result set
2026/10/23 19:44:44 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:44 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:45 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:45 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:45 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:45 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:46 console: mail push: bab/titogo: no answer: lost response
no answer: lost response
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: could not notify paul@keymail.dev of a CLI token issue: keymail: grant revoked or invalid
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:47 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:47 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:44:47 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:44:47 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:47 console: attach story.carlosframework.com: existing record is not this door's to adopt (read: provision: record bab/story/story.carlosframework.com: provision: invalid maintenance projection or protected fields)
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: attach story.carlosframework.com: record write: opStore: timed out after the object landed
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: attach story.carlosframework.com: record write: opStore: bucket unavailable
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: bill pass 2026-08: cost explorer: ThrottlingException: rate exceeded
2026/10/23 19:44:48 console: bill pass 2026-07: cost explorer: ThrottlingException: rate exceeded
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: sign-in email to bob@example.com from 127.0.0.1 refused by its limits; not sent
2026/10/23 19:44:48 console: sign-in submissions from 127.0.0.1 over the hourly cap; no lookup, no send
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:48 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: expiry pass: trash bab/tmp-a: release: write trash marker for bab/tmp-a: hookStore: put refused
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: geoip published ed972738 (GeoIP2-City, feed:test-feed)
2026/10/23 19:44:49 console: geoip feed test-feed: edition (none) rejected: download
2026/10/23 19:44:49 console: geoip published ed972738 (GeoIP2-City, feed:test-feed)
2026/10/23 19:44:49 console: geoip database aaaaaaaa (GeoIP2-City) followed from this box's edge
2026/10/23 19:44:49 console: geoip database aaaaaaaa (GeoIP2-City) followed from this box's edge
2026/10/23 19:44:49 console: geoip published ed972738 (GeoIP2-City, manual)
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: could not notify alice@keymail.dev of a CLI token issue: keymail: lookup alice@keymail.dev: Get "http://127.0.0.1:46239/api/federation/lookup?addr=alice%40keymail.dev&from=console%40127.0.0.1%3A43893": dial tcp 127.0.0.1:46239: connect: connection reset by peer
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:49 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:50 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:50 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:50 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:50 console: backfilled account manifest for bab (ops)
2026/10/23 19:44:50 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:50 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:52 console: materialized account bbw (Kass) from the bucket
2026/10/23 19:44:52 console: materialized account bac (Testco) from the bucket
2026/10/23 19:44:52 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:53 console: audit system-update platform: sql: database is closed
2026/10/23 19:44:53 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:53 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:53 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:55 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:56 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:44:58 console: api instance move bab/titogo/acme.go.tito.io: declared loss refused: hostresolve: evidence or operation does not authorize resolution
2026/10/23 19:44:58 console: moves: warning: acme.go.tito.io: the log of move mv_zqockwk7lrrp5m2q7dkvgcqomu at rolling_back-target-lost has been unwritten for over an hour: unconfirmed: no loss of the move's target has committed, and the move can still be declared lost
2026/10/23 19:44:58 console: moves: acme.go.tito.io: the log of move mv_zqockwk7lrrp5m2q7dkvgcqomu at rolling_back-target-lost was never confirmed and the claim no longer holds the instance it was queued for; dropped
2026/10/23 19:44:58 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:00 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:01 console: api instance move bab/titogo/acme.go.tito.io: typed move write: moves: the declared loss cannot be queued in the move log: SQL logic error: no such table: move_log_outbox (1)
2026/10/23 19:45:01 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:02 console: claim request refused: moves: the declared loss cannot be queued in the move log: SQL logic error: no such table: move_log_outbox (1)
2026/10/23 19:45:02 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:04 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:05 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:05 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:05 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:05 console: confirm pending change: database is locked
2026/10/23 19:45:05 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:05 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:05 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:05 console: app region bab/settle:  (default)
2026/10/23 19:45:05 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:05 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:07 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:07 console: host census report: report unavailable
2026/10/23 19:45:07 INFO console: host census report collision="console report: process foreign:22 published this console's report at 2026-10-23T19:45:07Z; another console process is using the same CARLOS_CONSOLE_ID"
2026/10/23 19:45:07 console: claim SQL alert: recipients: operators: SQL logic error: no such table: users (1)
2026/10/23 19:45:07 console: alert watch: no keymail grant for ops-b@keymail.dev — not notified (they must sign in to the console once)
2026/10/23 19:45:07 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:07 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:07 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:07 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:08 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:08 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:08 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:08 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:09 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:09 console: app region bab/on: ie (default)
2026/10/23 19:45:09 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:09 console: app region bab/off: ie (default)
2026/10/23 19:45:09 console: app region bab/unnamed:  (default)
2026/10/23 19:45:09 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:09 console: api instances create bab/titogo: read app region: db gone
2026/10/23 19:45:09 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:09 console: api instances create bab/titogo: incomplete edges or snapshot read, region uk unconfirmed
2026/10/23 19:45:09 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:09 console: app region bab/off-uk: ie (default)
2026/10/23 19:45:09 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:09 console: app region bab/off-mars: ie (default)
2026/10/23 19:45:09 console: could not notify paul@keymail.dev of a CLI token issue: keymail: lookup paul@keymail.dev: Get "http://127.0.0.1:46851/api/federation/lookup?addr=paul%40keymail.dev&from=console%40127.0.0.1%3A45663": dial tcp 127.0.0.1:46851: connect: connection refused
2026/10/23 19:45:09 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: relay enabled bab/titogo in eu-west-1 by alice@keymail.dev (incarnation 2b110d329c1fe33a, op 1)
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: relay enabled bab/titogo in eu-west-1 by alice@keymail.dev (incarnation 5ec9b4f4b4045fdd, op 1)
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: bab/kass is in the trash in the bucket; marking it trashed here
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: api instances list bab/kass: 1 record(s) unreadable [pi-host.example.test]; every fleet counts toward the rollout join
2026/10/23 19:45:10 status: fleet: skipping status/boxes/broken.json: corrupt snapshot: invalid character 'n' looking for beginning of object key string
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: run sweep: list records: provision: list accounts: context deadline exceeded
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:10 console: api run bab/shop/acme.example.com run_cccccccccccccccccccccccccc: audit marker: access denied
2026/10/23 19:45:10 console: run sweep: bab/shop run_cccccccccccccccccccccccccc: no audit marker yet, delete left for a later pass: dirstore: apps/bab/shop/runs/run_cccccccccccccccccccccccccc/audited: file does not exist
2026/10/23 19:45:10 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: scan callback: bab/app: dropped — delivery queue full
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000004
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000004 maxTXID=0000000000000004 size=537
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000004 txid.db=0000000000000004
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000004 txid.db=0000000000000005
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000005 maxTXID=0000000000000005 size=621
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000005 txid.db=0000000000000005
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000005 txid.db=0000000000000006
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000006 maxTXID=0000000000000006 size=704
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000006 txid.db=0000000000000006
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000006 txid.db=0000000000000007
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000007 maxTXID=0000000000000007 size=788
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000007 txid.db=0000000000000007
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000007 txid.db=0000000000000008
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000008 maxTXID=0000000000000008 size=871
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000008 txid.db=0000000000000008
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000008 txid.db=0000000000000009
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000009 maxTXID=0000000000000009 size=955
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000009 txid.db=0000000000000009
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000009 txid.db=000000000000000a
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=000000000000000a maxTXID=000000000000000a size=1038
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000a txid.db=000000000000000a
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000a txid.db=000000000000000b
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=000000000000000b maxTXID=000000000000000b size=1124
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000b txid.db=000000000000000b
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000b txid.db=000000000000000c
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=000000000000000c maxTXID=000000000000000c size=1208
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000c txid.db=000000000000000c
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000c txid.db=000000000000000d
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=000000000000000d maxTXID=000000000000000d size=1294
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000d txid.db=000000000000000d
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000d txid.db=000000000000000e
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=000000000000000e maxTXID=000000000000000e size=1387
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000e txid.db=000000000000000e
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000e txid.db=000000000000000f
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=000000000000000f maxTXID=000000000000000f size=1481
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000f txid.db=000000000000000f
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=000000000000000f txid.db=0000000000000010
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000010 maxTXID=0000000000000010 size=1569
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000010 txid.db=0000000000000010
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000010 txid.db=0000000000000011
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000011 maxTXID=0000000000000011 size=1661
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000011 txid.db=0000000000000011
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000011 txid.db=0000000000000012
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000012 maxTXID=0000000000000012 size=1755
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000012 txid.db=0000000000000012
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000012 txid.db=0000000000000013
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000013 maxTXID=0000000000000013 size=1843
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000013 txid.db=0000000000000013
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000013 txid.db=0000000000000014
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000014 maxTXID=0000000000000014 size=1935
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000014 txid.db=0000000000000014
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000014 txid.db=0000000000000015
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000015 maxTXID=0000000000000015 size=2031
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000015 txid.db=0000000000000015
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000015 txid.db=0000000000000016
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000016 maxTXID=0000000000000016 size=2119
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000016 txid.db=0000000000000016
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000016 txid.db=0000000000000017
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000017 maxTXID=0000000000000017 size=2216
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000017 txid.db=0000000000000017
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000017 txid.db=0000000000000018
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000018 maxTXID=0000000000000018 size=2309
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000018 txid.db=0000000000000018
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000018 txid.db=0000000000000019
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000019 maxTXID=0000000000000019 size=2403
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000019 txid.db=0000000000000019
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:45:11 console: finish seed sd_6xlwbkkd7cruh4qxve7lwnz6lm of bab/shop/canary.shop.example.com: tore down its store (bucket carlos-bab-shop-canary)
2026/10/23 19:45:11 console: finished seed sd_6xlwbkkd7cruh4qxve7lwnz6lm of bab/shop/canary.shop.example.com
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:45:11 console: finish seed sd_sntq7zpnouoyq56omigwvv6xo4 of canary.shop.example.com: deleted 3 replica objects under instances/canary.shop.example.com/
2026/10/23 19:45:11 console: finished seed sd_sntq7zpnouoyq56omigwvv6xo4 of bab/shop/canary.shop.example.com
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: seeds readiness: box "kass-2" in region "the home region" is unconfirmed: stale heartbeat, generated 2026-10-23T18:45:11Z
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: seeds pass: off on a host-claim console, where every seed door refuses
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000000 txid.db=0000000000000001
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000001 maxTXID=0000000000000001 size=720
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000001
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000001 txid.db=0000000000000002
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000002 maxTXID=0000000000000002 size=370
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000002
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000002 txid.db=0000000000000003
2026/10/23 19:45:11 INFO ltx file uploaded system=store db=source.db replica=file level=0 minTXID=0000000000000003 maxTXID=0000000000000003 size=454
2026/10/23 19:45:11 INFO replica sync system=store db=source.db replica=file txid.replica=0000000000000003 txid.db=0000000000000003
2026/10/23 19:45:11 console: seeds pass: deleted seeds/canary.shop.example.com/sd_syj4wbdr4amxbwbbev3orlc6qe/snapshot.db
2026/10/23 19:45:11 console: seeds pass: finish seed sd_syj4wbdr4amxbwbbev3orlc6qe of canary.shop.example.com: finish seed sd_syj4wbdr4amxbwbbev3orlc6qe of canary.shop.example.com: this console has no storage backend to tear its store down with
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: could not notify alice@keymail.dev of a CLI token issue: keymail: lookup alice@keymail.dev: Get "http://127.0.0.1:40715/api/federation/lookup?addr=alice%40keymail.dev&from=console%40127.0.0.1%3A43191": dial tcp 127.0.0.1:40715: connect: connection refused
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: app region bab/zephyr:  (default)
2026/10/23 19:45:11 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:11 console: app region bab/orphan:  (default)
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:11 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:11 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: retire kass canary/x: check followers: unable to open database file (14)
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: materialized account bac (Testco) from the bucket
2026/10/23 19:45:12 console: bac/perm is in the trash in the bucket — marking it trashed here
2026/10/23 19:45:12 console: bac/tmp-a is in the trash in the bucket — marking it trashed here
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:12 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:13 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:13 console: store decision bab: keymail to paul@keymail.dev: delivery failed
2026/10/23 19:45:13 console: store application bab: keymail to paul@keymail.dev: delivery failed
2026/10/23 19:45:13 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:13 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:13 console: render account_settings: write tcp 127.0.0.1:43205->127.0.0.1:49492: write: broken pipe
2026/10/23 19:45:13 console: account telemetry bab: dirstore: invalid key "apps/bab//telemetry.json"
2026/10/23 19:45:13 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:14 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:14 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:14 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:14 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:14 console: backfilled account manifest for bab (ops)
2026/10/23 19:45:14 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
2026/10/23 19:45:14 console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically
FAIL
FAIL	github.com/carlosframework/platform/internal/console	52.931s
FAIL
=== internal_console@4 (58 s)
ok  	github.com/carlosframework/platform/internal/console	55.508s
=== internal_console@5 (55 s)
ok  	github.com/carlosframework/platform/internal/console	53.035s
=== internal_console@6 (55 s)
ok  	github.com/carlosframework/platform/internal/console	52.462s
=== internal_console@7 (50 s)
ok  	github.com/carlosframework/platform/internal/console	47.810s
=== root@0 (118 s)
ok  	github.com/carlosframework/platform	115.677s
=== root@1 (101 s)
ok  	github.com/carlosframework/platform	98.543s
=== root@2 (86 s)
ok  	github.com/carlosframework/platform	83.199s

FAILED: rest internal_console@3
make: *** [Makefile:19: test] Error 1

amadan: step gate failed: exit status 2

amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md b/docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md
new file mode 100644
index 000000000..3ff18e578
--- /dev/null
+++ b/docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md
@@ -0,0 +1,64 @@
+# Census: email sending users get a permissions boundary
+
+Status: PROPOSED. The one row carries `rev3=PROPOSED-sec-mail-user-boundary`.
+The ruling is asked of the census owner on #280.
+
+Branch `sec-mail-user-boundary`, cut from main at 0d9e81dc.
+
+## What changed
+
+The console's AWS role may call `iam:CreateUser`, `iam:PutUserPolicy` and
+`iam:CreateAccessKey` on `user/carlos-mail/*`, and `internal/mail`'s AWS
+provisioner created those users with no permissions boundary. Anyone able to
+act as the role could create a user there, give it an administrator inline
+policy and mint it a key. Object storage closed the same gap with
+`CARLOS_STORE_USER_BOUNDARY`; this branch mirrors it for mail.
+
+- `mail.NewAWSProvisioner` takes a boundary ARN and refuses an empty or
+ malformed one before any AWS call. `EnsureUser` passes it to `CreateUser`
+ as `PermissionsBoundary`, and refuses to act without one.
+- When `CreateUser` reports the user exists, `EnsureUser` reads the user's
+ boundary from the `GetUser` it already made. If it is missing or
+ different, `PutUserPermissionsBoundary` sets the configured one before
+ `PutUserPolicy` runs. Nothing calls `DeleteUserPermissionsBoundary`.
+- `cmd/console serve` reads `CARLOS_MAIL_USER_BOUNDARY` and stops with
+ `log.Fatal` (through `mailUserBoundary`) when `CARLOS_MAIL_REGION` is set
+ and the boundary is empty or not an IAM policy ARN.
+
+None of this runs as root. The changed code runs in the console
+(`cmd/console serve` under `console.service`, user `carlos-console`). The
+root `carlos` binary links neither `internal/console` nor `internal/mail`
+(`TestRootBinaryLinksNoConsoleOrMail`). No root read is added.
+
+## Root-read census (TestPlan14RootReadCensus)
+
+Overlay `internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv`,
+loaded last, after `plan14-root-reads-static-redirects.tsv`. Without it the
+test reports 4 discrepancies; with it, none.
+
+### Changed unit, re-frozen at main's disposition
+
+It keeps main's basis (last set by `census-ruling-db-region-forward-2`), with
+this branch's identity and change appended.
+
+| unit | change | sites |
+|---|---|---|
+| `cmd/console/main.go` `serve` | reads `CARLOS_MAIL_USER_BOUNDARY` (an environment variable, not a file), `log.Fatal` when the mail region is set without a valid one, and hands `mail.NewAWSProvisioner` the boundary through a closure passed to `mailBackends` | the same three `/data` literals, each moved 282 bytes (4077, 5178, 5415 to 4359, 5460, 5697) |
+
+`mailUserBoundary` (new, `cmd/console/main.go`) and every changed
+`internal/mail/aws.go` function make no read the scanner counts, so they have
+no rows.
+
+### Envelopes re-pinned
+
+| envelope | why |
+|---|---|
+| `cmd/console` | `serve`, the new `mailUserBoundary`, the header doc comment, `mailDeployment`'s doc comment, and `TestMailUserBoundary` |
+| `internal/mail` | `aws.go`: the boundary field, `checkUserBoundary`/`CheckUserBoundary`, `ErrNoUserBoundary`, `CreateUser`'s field, `backfillBoundary`, `PutUserPermissionsBoundary` on `iamAPI`; and the new `aws_iam_test.go` |
+
+Seal: `65857c29501dc7676f52921bea79d08217542ecb1d775c67d20a3460c851d831`
+(static-redirects, checked first) to
+`d82a9191c6be745d34211a8add6ac0e63dc35b28c3f6bcde99cdbc3f67154f62`.
+
+Record-write census (9B8): unchanged (the provision package's census tests
+pass without an overlay). Claim routes: unchanged. go.mod: unchanged.
diff --git a/internal/provision/plan14_root_reads_test.go b/internal/provision/plan14_root_reads_test.go
index a38913fe7..09ed98fcf 100644
--- a/internal/provision/plan14_root_reads_test.go
+++ b/internal/provision/plan14_root_reads_test.go
@@ -1423,6 +1423,22 @@ func TestPlan14RootReadCensus(t *testing.T) {
t.Fatal(err)
}
seal = "65857c29501dc7676f52921bea79d08217542ecb1d775c67d20a3460c851d831"
+ // Census overlay sec-mail-user-boundary (email sending users are created
+ // under CARLOS_MAIL_USER_BOUNDARY and existing ones backfilled), loaded
+ // last, after static-redirects. Proposed; ruling asked of the census
+ // owner on #280
+ // (docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md).
+ // cmd/console serve is re-frozen (one more environment variable, the
+ // same three /data literals, moved); the cmd/console and internal/mail
+ // envelopes are re-pinned. No read is added. The serve declaration is
+ // re-frozen, so the seal moves; static-redirects's is checked first.
+ if errs := checkRootReadLegacy(inv, seal); len(errs) != 0 {
+ t.Fatal(errs)
+ }
+ if err = loadRootReadInventory(filepath.Join(root, "internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv"), &inv, true); err != nil {
+ t.Fatal(err)
+ }
+ seal = "d82a9191c6be745d34211a8add6ac0e63dc35b28c3f6bcde99cdbc3f67154f62"
errs := append(compareRootReads(got, inv), checkRootReadLegacy(inv, seal)...)
errs = append(errs, checkRootReadDeclarations(got, inv)...)
if len(errs) > 0 {
diff --git a/internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv b/internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv
new file mode 100644
index 000000000..76e3a4523
--- /dev/null
+++ b/internal/provision/testdata/plan14-root-reads-sec-mail-user-boundary.tsv
@@ -0,0 +1,6 @@
+# Census overlay sec-mail-user-boundary (email sending users are created under a permissions boundary, CARLOS_MAIL_USER_BOUNDARY, and existing users are backfilled with iam:PutUserPermissionsBoundary), loaded last, after static-redirects. PROPOSED-sec-mail-user-boundary; the ruling is asked of the census owner on #280 (docs/superpowers/notes/census-proposal-sec-mail-user-boundary.md).
+# cmd/console serve is re-frozen at main's disposition with this change appended: it reads one more environment variable and fails boot without it; its three /data literals move but are the same three. No read, file or record write is added. The cmd/console and internal/mail envelopes are re-pinned (main.go's mailUserBoundary and doc comment; aws.go's boundary check, CreateUser field and backfill; their tests). The serve declaration is re-frozen, so the seal moves; static-redirects's is checked first.
+@legacy 041b03c43c4c7ab2f7c07c3db18540abd86d776900b0d42c884a838de68bdb0b cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=passes CARLOS_CONSOLE_NAME to NewServer as Config.ConsoleName, the name the console's emails use; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-s3-change-index;identity=the console (cmd/console serve under console.service, user carlos-console);basis=arms the record view when CARLOS_CHANGE_INDEX=read (armChangeIndex) for the run and seed sweeps and starts its backstop loop; the same three /data literals at the same offsets; no read added;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=parses CARLOS_DB_FORWARD (dbForward) into Config.DBForward and builds its http.Server with console.NewHTTPServer, the same two timeouts; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-sec-mail-user-boundary;identity=the console (cmd/console serve under console.service, user carlos-console);basis=reads CARLOS_MAIL_USER_BOUNDARY (an environment variable, not a file) through mailUserBoundary, stops with log.Fatal when CARLOS_MAIL_REGION is set and it is empty or not an IAM policy ARN, and passes it to mail.NewAWSProvisioner through a closure handed to mailBackends; the same three /data literals, each moved 282 bytes; no read added data-literal@4359,data-literal@5460,data-literal@5697 2fbc4e6d3ad3999eeacd7eeb880d14f9dac4e70df75f192649cba2bf4da0f548
+cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=passes CARLOS_CONSOLE_NAME to NewServer as Config.ConsoleName, the name the console's emails use; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-s3-change-index;identity=the console (cmd/console serve under console.service, user carlos-console);basis=arms the record view when CARLOS_CHANGE_INDEX=read (armChangeIndex) for the run and seed sweeps and starts its backstop loop; the same three /data literals at the same offsets; no read added;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=parses CARLOS_DB_FORWARD (dbForward) into Config.DBForward and builds its http.Server with console.NewHTTPServer, the same two timeouts; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-sec-mail-user-boundary;identity=the console (cmd/console serve under console.service, user carlos-console);basis=reads CARLOS_MAIL_USER_BOUNDARY (an environment variable, not a file) through mailUserBoundary, stops with log.Fatal when CARLOS_MAIL_REGION is set and it is empty or not an IAM policy ARN, and passes it to mail.NewAWSProvisioner through a closure handed to mailBackends; the same three /data literals, each moved 282 bytes; no read added data-literal@4359,data-literal@5460,data-literal@5697 2fbc4e6d3ad3999eeacd7eeb880d14f9dac4e70df75f192649cba2bf4da0f548
+@coverage cmd/console 19d46a41e903849729d7c33dd049d5752fc03b80b7f93d393472b346324172cf
+@coverage internal/mail 1662bed49d1464be12e3b8df163ce136bdc10a87c9004ed68c006975f0677315