carlos / platform Public

harness: H16 leo on ext4, TTL extended to 18:40Z, C8/F5 blocks

claude 4 days ago 9d460849c1c3e4997da16fc62a63defd6ca89775 parent 4f53b1b
5 files changed, +114 −15
harness/RESOURCES.md +1 −0
harness/TEARDOWN.md +5 −2
harness/boxes/leo-ext4.sh +19 −0
harness/scenarios/cohort1/blocks/b2-c8.leo.sh +22 −13
harness/scenarios/cohort1/blocks/w82-f5.box.sh +67 −0
CI log
=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	312.633s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	2.898s
ok  	github.com/carlosframework/platform/cmd/moveprobe	93.150s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.707s
?   	github.com/carlosframework/platform/harness/apps/wakecheck	[no test files]
ok  	github.com/carlosframework/platform/internal/activator	250.551s
ok  	github.com/carlosframework/platform/internal/agentsock	0.017s
ok  	github.com/carlosframework/platform/internal/alerting	0.003s
ok  	github.com/carlosframework/platform/internal/analytics	0.018s
ok  	github.com/carlosframework/platform/internal/appconfig	2.480s
ok  	github.com/carlosframework/platform/internal/apperr	0.072s
ok  	github.com/carlosframework/platform/internal/applog	0.138s
ok  	github.com/carlosframework/platform/internal/awsinv	0.007s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.004s
ok  	github.com/carlosframework/platform/internal/boxid	0.680s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.009s
ok  	github.com/carlosframework/platform/internal/caps	0.012s
ok  	github.com/carlosframework/platform/internal/certwarm	0.002s
ok  	github.com/carlosframework/platform/internal/cgroup	0.695s
ok  	github.com/carlosframework/platform/internal/changelog	0.315s
ok  	github.com/carlosframework/platform/internal/claimactivation	0.786s
ok  	github.com/carlosframework/platform/internal/clamd	0.055s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	406.632s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	6.284s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.009s
ok  	github.com/carlosframework/platform/internal/dbverify	0.005s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.002s
ok  	github.com/carlosframework/platform/internal/docsite	0.004s
ok  	github.com/carlosframework/platform/internal/domains	2.433s
ok  	github.com/carlosframework/platform/internal/doorkey	0.006s
ok  	github.com/carlosframework/platform/internal/economics	0.003s
ok  	github.com/carlosframework/platform/internal/edge	44.998s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.008s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.134s
ok  	github.com/carlosframework/platform/internal/gate	1.656s
ok  	github.com/carlosframework/platform/internal/genselect	0.015s
ok  	github.com/carlosframework/platform/internal/geo	0.018s
ok  	github.com/carlosframework/platform/internal/geoip	0.029s
ok  	github.com/carlosframework/platform/internal/historyreadback	0.153s
ok  	github.com/carlosframework/platform/internal/host	179.854s
ok  	github.com/carlosframework/platform/internal/hostactors	5.496s
ok  	github.com/carlosframework/platform/internal/hostactors/awsmembership	0.013s
ok  	github.com/carlosframework/platform/internal/hostbox	2.636s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.557s
ok  	github.com/carlosframework/platform/internal/hostenv	0.013s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.013s
ok  	github.com/carlosframework/platform/internal/hostexec	4.750s
ok  	github.com/carlosframework/platform/internal/hostfence	0.036s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.350s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.013s
ok  	github.com/carlosframework/platform/internal/hostguard	1.043s
ok  	github.com/carlosframework/platform/internal/hostops	1.678s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.012s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.012s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.440s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.171s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.014s
ok  	github.com/carlosframework/platform/internal/infraview	0.014s
ok  	github.com/carlosframework/platform/internal/instancectl	5.224s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.748s
ok  	github.com/carlosframework/platform/internal/instancefs	0.018s
ok  	github.com/carlosframework/platform/internal/instancekey	0.002s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.008s
ok  	github.com/carlosframework/platform/internal/layout	1.557s
ok  	github.com/carlosframework/platform/internal/lbhealth	0.004s
ok  	github.com/carlosframework/platform/internal/lease	9.799s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.005s
ok  	github.com/carlosframework/platform/internal/ledger	0.011s
ok  	github.com/carlosframework/platform/internal/mail	0.182s
ok  	github.com/carlosframework/platform/internal/maintenance	0.075s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.490s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.087s
ok  	github.com/carlosframework/platform/internal/metrics	0.006s
ok  	github.com/carlosframework/platform/internal/moves	20.911s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.798s
ok  	github.com/carlosframework/platform/internal/objstore	0.181s
ok  	github.com/carlosframework/platform/internal/ops	0.175s
ok  	github.com/carlosframework/platform/internal/park	0.199s
ok  	github.com/carlosframework/platform/internal/privatefile	0.004s
2026/10/20 09:53:45 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/20 09:53:45 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/20 09:53:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:45 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 09:53:45 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 09:53:45 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/20 09:53:45 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 09:53:45 provision: an app's records could not be listed: they are skipped
2026/10/20 09:53:45 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:53:45 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 09:53:45 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 09:53:45 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 09:53:45 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 09:53:45 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/20 09:53:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:45 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 09:53:45 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/20 09:53:45 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 09:53:45 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 09:53:45 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 09:53:45 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/20 09:53:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:45 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 09:53:46 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 09:53:46 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 09:53:46 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 09:53:46 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 09:53:46 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 09:53:46 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 09:53:46 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 09:53:46 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 09:53:46 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 09:53:46 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:53:46 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:46 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:46 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 09:53:46 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:46 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:46 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 09:53:46 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 09:53:46 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/20 09:53:46 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/20 09:53:46 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 09:53:46 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:46 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (4.75s)
    plan14_root_reads_test.go:940: root read census: 120 discrepancies
        changed root read internal/hostfence/writer.go:OpenRootFenceStore; review class, task, sites and digest
        changed root source envelope harness
        changed root source envelope harness/apps/wakecheck
        changed root source envelope harness/boxes
        changed root source envelope harness/boxes/shims
        changed root source envelope harness/checks
        changed root source envelope harness/console
        changed root source envelope harness/infra
        changed root source envelope harness/infra-copies/747f699/dev
        changed root source envelope harness/infra-copies/a0b3f5a/dev
        changed root source envelope harness/infra-copies/a0b3f5a/scripts
        changed root source envelope harness/infra-copies/pr47
        changed root source envelope harness/operator
        changed root source envelope harness/release
        changed root source envelope harness/scenarios
        changed root source envelope harness/scenarios/cohort1
        changed root source envelope harness/scenarios/cohort1/blocks
        changed root source envelope harness/stand-ins
        changed root source envelope internal/host
        changed root source envelope internal/hostfence
        changed root source envelope internal/publicrelease
        changed root source envelope internal/s3compat
        unclassified root read harness/apps/wakecheck/main.go:main file:Exec@333,file:Exec@804,file:Open@277,file:QueryRow@870
        unclassified root read harness/boxes/boxes-up.sh:external file:external@0
        unclassified root read harness/boxes/dmi-shim.sh:external file:external@0
        unclassified root read harness/boxes/layout-probe.sh:external file:external@0
        unclassified root read harness/boxes/leo-ext4.sh:external file:external@0
        unclassified root read harness/boxes/shims/systemd-zram-setup@.service:external file:external@0
        unclassified root read harness/boxes/vendor-shims.sh:external file:external@0
        unclassified root read harness/checks/check2.sh:external file:external@0
        unclassified root read harness/checks/check5.sh:external file:external@0
        unclassified root read harness/checks/check6.sh:external file:external@0
        unclassified root read harness/checks/check6b.sh:external file:external@0
        unclassified root read harness/checks/check7.sh:external file:external@0
        unclassified root read harness/checks/check8.sh:external file:external@0
        unclassified root read harness/checks/fix5.sh:external file:external@0
        unclassified root read harness/checks/run6b.sh:external file:external@0
        unclassified root read harness/checks/snap-base.sh:external file:external@0
        unclassified root read harness/checks/snap-boot.sh:external file:external@0
        unclassified root read harness/checks/ssmsmoke.sh:external file:external@0
        unclassified root read harness/console/console-ext4.sh:external file:external@0
        unclassified root read harness/console/console-setup.sh:external file:external@0
        unclassified root read harness/console/signin.sh:external file:external@0
        unclassified root read harness/console/system-update.sh:external file:external@0
        unclassified root read harness/donor-user-data.sh:external file:external@0
        unclassified root read harness/evidence.sh:external file:external@0
        unclassified root read harness/host-setup.sh:external file:external@0
        unclassified root read harness/host-user-data.sh:external file:external@0
        unclassified root read harness/hrun.sh:external file:external@0
        unclassified root read harness/infra-copies/747f699/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/bootstrap-box.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/ship-app.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/update-platform-binary.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/probe.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/remediation.sh:external file:external@0
        unclassified root read harness/infra/infra-setup.sh:external file:external@0
        unclassified root read harness/operator/operator-setup.sh:external file:external@0
        unclassified root read harness/release/release-setup.sh:external file:external@0
        unclassified root read harness/release/release-window.sh:external file:external@0
        unclassified root read harness/release/step7-operator.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/50-publish-record.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster-resume.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61-sign.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61a-install-channel.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/62-guard-arm.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-sophie.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-console-report.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-evidence-key.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-runtime.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/74-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-leo.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/acceptance.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b1.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2-c8.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-after.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-pair.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-resume.sophie.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b5.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g4-roll.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g5.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/p9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/place-parent.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/pw-seed.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-roll.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict2.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm2.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm3.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/reports.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/run-leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-env.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-identity.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-sums.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82-f4.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82-f5.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w84.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/box-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/signer-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/ssm.sh:external file:external@0
        unclassified root read harness/scenarios/sync.sh:external file:external@0
        unclassified root read harness/snapshot.sh:external file:external@0
        unclassified root read harness/stand-ins/certs.sh:external file:external@0
        unclassified root read internal/s3compat/harness.go:readHarnessFile file:ReadFile@189,file:Stat@55
        changed reclassified declaration internal/hostfence/writer.go:OpenRootFenceStore
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 09:53:58 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/20 09:53:58 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/20 09:53:58 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/20 09:53:58 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged acme.go.tito.io hibernate false -> true
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged acme.go.tito.io status-named false -> true
2026/10/20 09:53:58 provision: converged acme.go.tito.io status-named true -> false
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 09:53:58 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 09:53:58 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 09:53:58 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 09:53:58 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/20 09:53:58 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/20 09:53:58 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 09:53:58 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 09:53:58 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 09:53:58 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:58 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 09:53:58 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/20 09:53:58 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/20 09:53:58 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 09:53:58 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 09:53:58 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 09:53:58 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/20 09:53:58 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 09:53:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 09:53:58 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 09:53:58 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 09:53:58 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 09:53:58 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 09:53:58 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 09:53:58 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 09:53:58 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/20 09:53:58 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 09:53:58 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/20 09:53:58 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 09:53:58 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 09:53:58 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/20 09:53:58 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/20 09:53:58 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/20 09:53:58 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/20 09:53:58 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/20 09:53:58 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/20 09:53:58 provision: dry-run: would converge owned.go.tito.io seed
2026/10/20 09:53:58 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/20 09:53:58 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 09:53:58 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/20 09:53:58 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/20 09:53:58 provision: converged owned.go.tito.io channel stable -> edge
2026/10/20 09:53:58 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/20 09:53:58 provision: converged owned.go.tito.io hibernate false -> true
2026/10/20 09:53:58 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/20 09:53:58 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:58 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/20 09:53:58 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/20 09:53:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: removed retired static route site.go.tito.io (record gone)
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/20 09:53:59 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/20 09:53:59 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 09:53:59 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 09:53:59 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 09:53:59 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 09:53:59 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 09:53:59 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/20 09:53:59 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 09:53:59 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 09:53:59 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 09:53:59 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 09:53:59 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/20 09:53:59 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/20 09:53:59 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 09:53:59 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/20 09:53:59 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/20 09:53:59 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 09:53:59 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/20 09:53:59 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/20 09:53:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:59 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 09:53:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:59 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 09:53:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:59 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 09:53:59 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:53:59 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/20 09:54:00 provision: a.shop.example.com: swapped for import sd_cahtkt35dgod3kgdcszoit63gq (the original route is journaled)
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_cahtkt35dgod3kgdcszoit63gq committed: its gate is cleared and its journal row dropped
2026/10/20 09:54:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_aaekqm7dbeszieh64yxr2x44wi rolled back to its original route
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_aaekqm7dbeszieh64yxr2x44wi: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_aaekqm7dbeszieh64yxr2x44wi is cleaned up and its journal row retired
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_2oajt6q2uj2po3hl65qpbj26yi rolled back to its original route
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_2oajt6q2uj2po3hl65qpbj26yi: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_2oajt6q2uj2po3hl65qpbj26yi is cleaned up and its journal row retired
2026/10/20 09:54:00 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_biatyt23kbm2hncl5l77j355le
2026/10/20 09:54:00 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/20 09:54:00 provision: dry-run: would converge a.shop.example.com seed source
2026/10/20 09:54:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 09:54:00 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/20 09:54:00 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/20 09:54:00 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_kf42fv7qjwtpm2hwyvg2e3oos4 cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_uunbuh4ywlxgi3dh4rl5fxqcoa cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_6sntybh555cdckq64f54dwjkne is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_3ammwni3l4vudjuxijzzcnazk4 is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_aoufyudmysbbfyd7k7qq54udlm is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 09:54:00 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/20 09:54:00 provision: b.shop.example.com: import sd_n6ckadhpdpbd4hlbdxzsnmycpa left alone this pass: the import journal could not be read
2026/10/20 09:54:00 provision: c.shop.example.com: import sd_kdfe2yf2esf3f2zp63yx6femyu left alone this pass: the import journal could not be read
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_dkjdug2iv3wgy25y374laql7mi committed: its gate is cleared and its journal row dropped
2026/10/20 09:54:00 provision: a.shop.example.com: not converging import sd_f3k37rq6bbcuex3ic4tziu7omu: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 09:54:00 provision: a.shop.example.com: not converging import sd_xfs2yczjfe3rhpovlsex5yrz5m: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 09:54:00 provision: a.shop.example.com: not converging import sd_ermgbzb2lt7uda3r7cotiwld74: it is placed but not committed, and the row on this box has no import gate
2026/10/20 09:54:00 provision: a.shop.example.com: not converging import sd_fvq2mmvotxeujzemttvagvwm7u: it is placed but not committed, and the row on this box has no import gate
2026/10/20 09:54:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 09:54:00 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/20 09:54:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 09:54:00 provision: a.shop.example.com: import sd_bktomjc3trwvzj2nqy7fcpifoe committed: its gate is cleared and its journal row dropped
2026/10/20 09:54:00 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 09:54:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:00 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 09:54:00 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/20 09:54:00 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_2tiqyv22izm5qtmqz5o6hnkwqa: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_2tiqyv22izm5qtmqz5o6hnkwqa rolled back (no box had swapped it)
2026/10/20 09:54:00 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/20 09:54:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:00 provision: removed instance route acme.go.tito.io (its seed sd_2grgdlarqjcwldwt5lpqcyq3cm was aborted); the next pass rolls it back
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_2grgdlarqjcwldwt5lpqcyq3cm: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_2grgdlarqjcwldwt5lpqcyq3cm rolled back (no box had swapped it)
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_ak2v2hhzubiz46l2bnelq3546q has a row this pass may not remove; leaving the seed aborted
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_o6hwl3pl6ly3gbept4inoshssy rolled back (no box had swapped it)
2026/10/20 09:54:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:00 provision: removed instance route acme.go.tito.io (its seed sd_qpscudhsarfvv76vyrh24e3knu was aborted); the next pass rolls it back
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_qpscudhsarfvv76vyrh24e3knu has no route on this box: its local data is removed
2026/10/20 09:54:00 provision: acme.go.tito.io: aborted seed sd_qpscudhsarfvv76vyrh24e3knu rolled back (no box had swapped it)
2026/10/20 09:54:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_xec7nwumodtqulrbtsqmwl4sze (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_xec7nwumodtqulrbtsqmwl4sze rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_xec7nwumodtqulrbtsqmwl4sze is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_t6ubi366iz2uk7co435cu2frxm (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_t6ubi366iz2uk7co435cu2frxm rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_t6ubi366iz2uk7co435cu2frxm is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_od3lni422dpgyryysjfazxz5pe (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_od3lni422dpgyryysjfazxz5pe rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_od3lni422dpgyryysjfazxz5pe: the host's replica is left alone: its record no longer names this seed
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_od3lni422dpgyryysjfazxz5pe is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_npcxxwtjafltjdodvg4yfibofm (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_npcxxwtjafltjdodvg4yfibofm rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_npcxxwtjafltjdodvg4yfibofm rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_npcxxwtjafltjdodvg4yfibofm is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_qu7bssng7msxfqz3m2umi5vt5u (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_qu7bssng7msxfqz3m2umi5vt5u rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_2pku2v7z3kjatxvex7zgaykqha (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_2pku2v7z3kjatxvex7zgaykqha is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_grzkde7dp6ii7ryqdjabd7bq3a (the original route is journaled)
2026/10/20 09:54:01 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_grzkde7dp6ii7ryqdjabd7bq3a left alone this pass: its record could not be read
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_p2rbtythuxwjoxzoh4am6hpdci (the original route is journaled)
2026/10/20 09:54:01 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_p2rbtythuxwjoxzoh4am6hpdci left alone this pass: its record could not be read
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_obxbj6ppixkxrgc5mur6klhd6a (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_obxbj6ppixkxrgc5mur6klhd6a: close the import gate: constraint failed: injected (1811)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_obxbj6ppixkxrgc5mur6klhd6a rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_obxbj6ppixkxrgc5mur6klhd6a is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_ieqo26cdbxp7nqd72vqvcvqogu (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ieqo26cdbxp7nqd72vqvcvqogu: close the import gate: constraint failed: injected (1811)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ieqo26cdbxp7nqd72vqvcvqogu rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ieqo26cdbxp7nqd72vqvcvqogu is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_e5furt2wc5bo7vaxrrfq7edzuu (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_e5furt2wc5bo7vaxrrfq7edzuu rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_e5furt2wc5bo7vaxrrfq7edzuu rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_e5furt2wc5bo7vaxrrfq7edzuu is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_n4bzzp7wmzlywlct7lpghqwwgi (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_n4bzzp7wmzlywlct7lpghqwwgi rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_n4bzzp7wmzlywlct7lpghqwwgi is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_lmxiosomitbc23lrbww4d4gwxe (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_lmxiosomitbc23lrbww4d4gwxe: retire its instance key: injected failure at retire-key
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_lmxiosomitbc23lrbww4d4gwxe rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_lmxiosomitbc23lrbww4d4gwxe is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_7vkkq3gk3576y7d4uxmmjha6g4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_7vkkq3gk3576y7d4uxmmjha6g4 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_7vkkq3gk3576y7d4uxmmjha6g4 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_to5cl664rl4at6bosztilidyym (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_to5cl664rl4at6bosztilidyym: remove its local data: injected failure at remove-local
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_to5cl664rl4at6bosztilidyym rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_to5cl664rl4at6bosztilidyym is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_6xpxzdelg43jtpk5qobgn76jqu (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_6xpxzdelg43jtpk5qobgn76jqu rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_6xpxzdelg43jtpk5qobgn76jqu is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_yf625a3xoakwm26zjmxqwyi5d4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_yf625a3xoakwm26zjmxqwyi5d4: remove its local data: injected failure at remove-local-done
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_yf625a3xoakwm26zjmxqwyi5d4 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_yf625a3xoakwm26zjmxqwyi5d4 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_7wfv2tuipzxzvdxpaevg7dzyki (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_7wfv2tuipzxzvdxpaevg7dzyki rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_7wfv2tuipzxzvdxpaevg7dzyki is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_asnrfnukiqz3d4lnru5s7wvb7y (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_asnrfnukiqz3d4lnru5s7wvb7y: restore the original route: constraint failed: injected (1811)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_asnrfnukiqz3d4lnru5s7wvb7y rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_asnrfnukiqz3d4lnru5s7wvb7y is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_3e4qjcibjpmksu7ii75raee254 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_3e4qjcibjpmksu7ii75raee254: restore the original route: constraint failed: injected (1811)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_3e4qjcibjpmksu7ii75raee254 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_3e4qjcibjpmksu7ii75raee254 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_7vfd3pm7qbgjytid5ctzqm3g2m (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_7vfd3pm7qbgjytid5ctzqm3g2m is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_dn4kqjallwlybkezdswoffx3wq (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_dn4kqjallwlybkezdswoffx3wq rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_dn4kqjallwlybkezdswoffx3wq: delete its snapshot: injected failure at delete-snapshot
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_dn4kqjallwlybkezdswoffx3wq is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_wmjn2lgec37zl5uwz2ajayvkoe (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_wmjn2lgec37zl5uwz2ajayvkoe rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_wmjn2lgec37zl5uwz2ajayvkoe is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_aohgqjjddvonto6lku3vspgx3q (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_aohgqjjddvonto6lku3vspgx3q rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_aohgqjjddvonto6lku3vspgx3q: delete the host's replica: injected failure at delete-replica
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_aohgqjjddvonto6lku3vspgx3q is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_zsuk5jxaz2flqsoajbvuli2kfi (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_zsuk5jxaz2flqsoajbvuli2kfi rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_zsuk5jxaz2flqsoajbvuli2kfi is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_jffup6h5u6dyochnlvtgmfsmw4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_jffup6h5u6dyochnlvtgmfsmw4 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_jffup6h5u6dyochnlvtgmfsmw4: retire its journal row: constraint failed: injected (1811)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_jffup6h5u6dyochnlvtgmfsmw4 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_uvtf3kcqwzqdjebtrcy5zt6vue (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_uvtf3kcqwzqdjebtrcy5zt6vue rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_uvtf3kcqwzqdjebtrcy5zt6vue: retire its journal row: constraint failed: injected (1811)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_uvtf3kcqwzqdjebtrcy5zt6vue is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_6wgvcp4ppp32gqjalbrmxx2afy (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_6wgvcp4ppp32gqjalbrmxx2afy rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_6wgvcp4ppp32gqjalbrmxx2afy is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: mark import sd_6wgvcp4ppp32gqjalbrmxx2afy rolled back: injected failure at cas
2026/10/20 09:54:01 provision: a.shop.example.com: aborted seed sd_6wgvcp4ppp32gqjalbrmxx2afy rolled back (no box had swapped it)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_go6wri2xtehhozl5rfzduak3m4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_go6wri2xtehhozl5rfzduak3m4 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_go6wri2xtehhozl5rfzduak3m4 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: aborted seed sd_go6wri2xtehhozl5rfzduak3m4 rolled back (no box had swapped it)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_fui6k7rllt5e5cqjjija5za4q4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_fui6k7rllt5e5cqjjija5za4q4 rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_fui6k7rllt5e5cqjjija5za4q4 rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_fui6k7rllt5e5cqjjija5za4q4 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_fui6k7rllt5e5cqjjija5za4q4 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_kjklgsvsazjkhbw4q3bsc2p3k4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_kjklgsvsazjkhbw4q3bsc2p3k4 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_kjklgsvsazjkhbw4q3bsc2p3k4 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_ubc4yyvacmbndegtt2hzykmbo4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ubc4yyvacmbndegtt2hzykmbo4 rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ubc4yyvacmbndegtt2hzykmbo4 is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_nawrruhj742ufsobxwujjpo2ja (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_nawrruhj742ufsobxwujjpo2ja rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_nawrruhj742ufsobxwujjpo2ja is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_lg4zm6xmxesaw7cmcecv7ma5su (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_lg4zm6xmxesaw7cmcecv7ma5su rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_lg4zm6xmxesaw7cmcecv7ma5su is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_ntgd64f54ytwmvzi3zcooq2gxy (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ntgd64f54ytwmvzi3zcooq2gxy rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ntgd64f54ytwmvzi3zcooq2gxy is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_iflsqr7inathwr7rfajk65ry2q (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_iflsqr7inathwr7rfajk65ry2q rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_iflsqr7inathwr7rfajk65ry2q is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_ywa7za6azw54zj76jogvoccymq (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ywa7za6azw54zj76jogvoccymq rolled back to its original route
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ywa7za6azw54zj76jogvoccymq is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_26xg2rbaiamanypl4cn6u54lwi (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_26xg2rbaiamanypl4cn6u54lwi has no route on this box: its local data is removed and no route is put back
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_26xg2rbaiamanypl4cn6u54lwi is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_aw6cplwldislu36xbpfhs5nih4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_a2imk7fhp3g5wuhnukvidtigqy (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_ytirgpv2mtj7pdjbb4m5mqbvtu (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_ytirgpv2mtj7pdjbb4m5mqbvtu cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_d555yq75oqahrlxgu5ay53fbg4 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_d555yq75oqahrlxgu5ay53fbg4 is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/20 09:54:01 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/20 09:54:01 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_ycss2ko2eqi53a7mzmaqa6pu3y (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_rfvzfxgp7gc73bcepuahyz7syi (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_nnlj4pv5evw5t4wpy4gfgsch34 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_oagcxe6mldqiq2djwnebjnjy74 (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_vkspudyegavplbskby6b4jtaei (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_vkspudyegavplbskby6b4jtaei rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_fhounuhfe552awgiwrbr2splcu (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_fhounuhfe552awgiwrbr2splcu has no route on this box: its local data is removed and no route is put back
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_fhounuhfe552awgiwrbr2splcu is cleaned up and its journal row retired
2026/10/20 09:54:01 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_aml2o5kvt5gpsw3kafamx24xoe (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_aml2o5kvt5gpsw3kafamx24xoe: remove its local data: injected failure at remove-local
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_aml2o5kvt5gpsw3kafamx24xoe is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/20 09:54:01 provision: a.shop.example.com: swapped for import sd_y5lzy42s65nkeqa6srtbhgq27y (the original route is journaled)
2026/10/20 09:54:01 provision: a.shop.example.com: import sd_y5lzy42s65nkeqa6srtbhgq27y: a route appeared at the host, so its local database is left and the rollback waits
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_65t56h3pfrhqifw2h2g5b4qngy (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_65t56h3pfrhqifw2h2g5b4qngy rollback deferred: no fence generation: registry busy
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_qgt7i7n2p7hbkbhcy6gcwfo6mu (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_qgt7i7n2p7hbkbhcy6gcwfo6mu rollback deferred: no fence generation: the generation source answered 0
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_so6lzpmppwszippiw2z3tb44se (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_q5hdyd6spkrbzknwwu7en4cbia (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_flhcmaoymdmncjbmlfwpowxvty (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/20 09:54:02 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_xg676zmm26o2iddmn7ab37c5si (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_xg676zmm26o2iddmn7ab37c5si rolled back to its original route
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_xg676zmm26o2iddmn7ab37c5si is cleaned up and its journal row retired
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_7rnfdc6m6z3uxwquyhuzaxw4aq (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_7rnfdc6m6z3uxwquyhuzaxw4aq rolled back to its original route
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_7rnfdc6m6z3uxwquyhuzaxw4aq is cleaned up and its journal row retired
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_2bjevc4ioqsicjdrifbmir53qm (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_2bjevc4ioqsicjdrifbmir53qm rolled back to its original route
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_2bjevc4ioqsicjdrifbmir53qm is cleaned up and its journal row retired
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_qsasmas4goobv6phatlv5qspna (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_qsasmas4goobv6phatlv5qspna: retire its instance key: the env file is a symlink
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_qsasmas4goobv6phatlv5qspna rolled back to its original route
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_qsasmas4goobv6phatlv5qspna is cleaned up and its journal row retired
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_auy5xy36ezcnlebwsyk47gtjii (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_z5wk6slk4xbglembvvkm77r2vi (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_u3xrt5s2dzyn6ni6qfdutbd7d4 refused: there is no route at a.shop.example.com to replace
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_riyiw4rem2icww7sfcnhv3jakq refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_f3xzymsdyh2uqrrrqcfvahb43e refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_acropvvvriqfhb5kd7jjsvaery refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_7yzzqnlggp25o3z4tysav3stnu refused: the route belongs to app other
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_bdqysasfaetnarw6gjokmc3bcu refused: the route is filed under another account
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_7v6pc3vbzebx6nnojemsgy5npu refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_ybeydxqxz2zww5lm3epyqxhmnu refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_jzvg3ftcwnw3qqy2mr23lamhsu refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_nlaggzfr6mw74nt653taxwjaoq refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_3le5khxwxcq6ccvzctxraq4iae refused: the route is not an address route this import can take over (socket)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_m4nze3gaspg5yascxead5lpppm refused: the route is not an address route this import can take over (no address)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_uhcq65jabrb75oftrugsnbq64e refused: the route is not an address route this import can take over (provisioned)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_aopyjq5grs6uu5vv3djmpbd5q4 refused: the route is not an address route this import can take over (kind static)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_k5tyagevpyc5aaprvagbjsoxma refused: the route is not an address route this import can take over (backing)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_eaydnkl5ljjw44iz2mb645j3fy refused: the route is not an address route this import can take over (tunnel)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_wac4gbjh225uytdevmswjlaofq refused: the route is not an address route this import can take over (caps)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_dedvwtsitifllmpe75s2zvpkny refused: the route is not an address route this import can take over (platform)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_hagiybg4juqufqzaafxsxwxm5u refused: the route is not an address route this import can take over (canary)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_vgw42cdm6ulqevk3jmrkiik6wu refused: the route is not an address route this import can take over (kind sidecar)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_33a6q7h4erqfwosqbti5ntvtuy refused: the route is not an address route this import can take over (region)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_za2agsa3o2nor2fd2kefzwnsvi refused: the route is not an address route this import can take over (fleet_box)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_43kvff36avldd55bhrrklh5vey refused: the route is not an address route this import can take over (hibernate)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_2fdxgek4ds4onxrrfwkqxb5vnm refused: the route is not an address route this import can take over (claim_owner)
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_wvkvo2qg63s7wrntpm7oud5umq refused: this box does not run instances nested
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_efom6fnthn57cscoe5zkgdwcli refused: this box does not run instances nested
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_evy7ueosqye45k66iybq4bbpre refused: claim control is on for this box
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_wx54s4pmkyhpdg6hnyduzsyjem (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_eqr5xnvaaoswotmqcz7vzc3ouu (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/20 09:54:02 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_5yl5ibmqhhph7365dm7sufgc3y: its verify hash is not a sha256
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_k6xqvechft3vg3kspcywccpboa: its verify hash is not a sha256
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_ljldzrbkaid5r4rsd2nplq3sge: its verify hash is not a sha256
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/20 09:54:02 provision: A.shop.example.com/..: not swapping for import sd_s6dyytfxvmtaxhxeqcnypqonmq: its host or seed id is malformed (seeds: not a host)
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_npzwd3bgtylqsrohazpbm334ga: its record does not describe a nested, hibernating instance
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_pcd2z76guoiddvogba4qelocw4: its record does not describe a nested, hibernating instance
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_uqke3jijq76pcokuo6ka6otqpy: its record does not describe a nested, hibernating instance
2026/10/20 09:54:02 provision: a.shop.example.com: not swapping for import sd_zftwjbnsrm62ycxekddo4umwiq: its record does not describe a nested, hibernating instance
2026/10/20 09:54:02 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_xkmk5cehe5mz2t72ibpwjkfvgu (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_ewtk22bijevi4vh6clqhxhuzf4 (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_o5epu63xq34gvo6grlxupmzjzq (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/20 09:54:02 provision: dry-run: would consider swapping a.shop.example.com for import sd_636ftc6cr5lalzbyoijkvc4che
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_ina55nuiomqvo7dt22poocj5ra rolled back to its original route
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_ina55nuiomqvo7dt22poocj5ra: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_ina55nuiomqvo7dt22poocj5ra is cleaned up and its journal row retired
2026/10/20 09:54:02 provision: a.shop.example.com: import sd_kvyzfhzso3457egs3vo6edjgr4 left alone: the import journal holds seed sd_dsxamfqzr567envf4asnpo6liy at swapped
2026/10/20 09:54:02 provision: a.shop.example.com: not minting import sd_46jf5kjqrpldvk4pix2jy3qfke: it is swapped but not committed, and only its swap makes its row
2026/10/20 09:54:02 provision: a.shop.example.com: not minting import sd_gscrcurm3mu7gqvgqkeannwriq: it is placed but not committed, and only its swap makes its row
2026/10/20 09:54:02 provision: a.shop.example.com: swapped for import sd_qbuitkshq7lhn5esz7hcpgzsbe (the original route is journaled)
2026/10/20 09:54:02 provision: a.shop.example.com: not minting import sd_qbuitkshq7lhn5esz7hcpgzsbe: it is swapped but not committed, and only its swap makes its row
2026/10/20 09:54:02 provision: a.shop.example.com: not minting import sd_qbuitkshq7lhn5esz7hcpgzsbe: it is placed but not committed, and only its swap makes its row
2026/10/20 09:54:02 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 09:54:03 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/20 09:54:03 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/20 09:54:03 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/20 09:54:03 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/20 09:54:03 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/20 09:54:03 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 09:54:03 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/20 09:54:03 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/20 09:54:03 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 09:54:03 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/20 09:54:03 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/20 09:54:03 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/20 09:54:03 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 09:54:03 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/20 09:54:03 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 09:54:03 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 09:54:03 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/20 09:54:03 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 09:54:03 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 09:54:03 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/20 09:54:03 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 09:54:03 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 09:54:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:03 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/20 09:54:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:03 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 09:54:03 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 09:54:03 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 09:54:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 09:54:03 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 09:54:03 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 09:54:03 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL	github.com/carlosframework/platform/internal/provision	17.604s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.009s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	5.424s
ok  	github.com/carlosframework/platform/internal/relay	7.226s
ok  	github.com/carlosframework/platform/internal/release	24.098s
ok  	github.com/carlosframework/platform/internal/rollout	3.646s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.006s
ok  	github.com/carlosframework/platform/internal/rootaws	0.006s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.057s
ok  	github.com/carlosframework/platform/internal/rootstate	0.027s
ok  	github.com/carlosframework/platform/internal/runs	0.565s
ok  	github.com/carlosframework/platform/internal/s3compat	0.005s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.501s
ok  	github.com/carlosframework/platform/internal/seeds	0.011s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	8.533s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	4.105s
ok  	github.com/carlosframework/platform/internal/status	0.057s
ok  	github.com/carlosframework/platform/internal/steering	0.005s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.244s
ok  	github.com/carlosframework/platform/internal/svcrole	0.001s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.004s
ok  	github.com/carlosframework/platform/internal/unixdial	0.002s
ok  	github.com/carlosframework/platform/internal/updatewords	0.004s
ok  	github.com/carlosframework/platform/internal/usage	0.004s
ok  	github.com/carlosframework/platform/internal/version	0.003s
ok  	github.com/carlosframework/platform/internal/vet	1.538s
FAIL
make: *** [Makefile:18: test] Error 1

amadan: step gate failed: exit status 2

amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/harness/RESOURCES.md b/harness/RESOURCES.md
index fbfc845ce..8ad02ac48 100644
--- a/harness/RESOURCES.md
+++ b/harness/RESOURCES.md
@@ -15,3 +15,4 @@ Appended as each is created. Teardown commands: harness/TEARDOWN.md.
| 2026-10-20T00:51:52Z | (terminated) donor-2 | i-019177034b088459f | documents in s3://carlos-harness-640012953448/donors/donor-2/ |
+| 2026-10-20T09:5xZ | TTL extended | i-06a1ec144aa5226fb, sg-0b9cf4c2a508b7cec, vol-035c92e5b506cc3db, bucket carlos-harness-640012953448, role and instance profile carlos-harness | ttl and expires tags 2026-10-20T12:40Z -> 2026-10-20T18:40Z; on the host `shutdown -c; shutdown -h 18:40` (shutdown --show: 18:40:00 UTC); coordinator's request |
diff --git a/harness/TEARDOWN.md b/harness/TEARDOWN.md
index c64602f70..1ba66e21c 100644
--- a/harness/TEARDOWN.md
+++ b/harness/TEARDOWN.md
@@ -5,9 +5,12 @@ sandbox off (AWS needs it). Account 640012953448, eu-west-1, profile `kass`.
Each destructive step checks the `purpose=carlos-harness` tag first and prints
what it is about to remove.
-The host also removes itself: it runs `shutdown -h 12:40` UTC (its TTL,
-2026-10-20T12:40Z) with `instance-initiated-shutdown-behavior=terminate`, and its
+The host also removes itself: it runs `shutdown -h 18:40` UTC (its TTL,
+2026-10-20T18:40Z; extended from 12:40Z at 09:5xZ on the coordinator's word, on-box with
+`shutdown -c; shutdown -h 18:40` and in the ttl/expires tags) with
+`instance-initiated-shutdown-behavior=terminate`, and its
root volume has `DeleteOnTermination=true`. Steps 3 to 5 are still needed after that.
+On the host, container `leo-btrfs` (stopped) and the `hdir` pool's `leo` go with the host.
```bash
A="aws --profile kass --region eu-west-1"
diff --git a/harness/boxes/leo-ext4.sh b/harness/boxes/leo-ext4.sh
new file mode 100755
index 000000000..1b0968209
--- /dev/null
+++ b/harness/boxes/leo-ext4.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+# H16 (on host, root): leo's root filesystem moves from the btrfs pool to the host's ext4 `hdir` dir pool.
+# The window's retired-generation scan compares a tree's st_dev with its base mount's device in mountinfo
+# (internal/host/rootgeneration_kernel_linux.go:265); on btrfs a subvolume's st_dev (0:159 here) never
+# equals mountinfo's (0:61), so journal-migrate refused "/proc/1/task/1: mounts: permission denied".
+# Dev's leo is ext4, where they agree. The btrfs leo is kept, stopped, as leo-btrfs (with its snapshots).
+# leo-ext4.sh <snapshot to copy from: every container is restored to it first>
+set -euo pipefail
+S=$1
+bash /root/harness/snapshot.sh restore "$S" | tail -1
+incus stop leo
+incus copy leo leo-e --storage hdir --instance-only
+incus rename leo leo-btrfs
+incus config device override leo-btrfs eth0 ipv4.address=203.0.113.121 2>/dev/null || incus config device set leo-btrfs eth0 ipv4.address=203.0.113.121
+incus rename leo-e leo
+incus start leo
+for i in $(seq 1 60); do incus exec leo -- systemctl is-system-running --wait >/dev/null 2>&1 && break; sleep 2; done
+incus exec leo -- sh -c 'echo "leo: $(systemctl is-system-running) failed=[$(systemctl --failed --no-legend --plain)]"; ip -4 -br a show eth0; for p in / /data /data/.instances /opt/carlos; do echo "$p dev=$(stat -c %d $p)"; done; grep -E " / | /data/instances " /proc/self/mountinfo | cut -d" " -f3-5; cat /sys/devices/virtual/dmi/id/board_asset_tag; ls -d /etc/carlos/claim-window-*; systemctl show carlos-edge.service -p LoadState --value'
+incus list -f csv -c nsS
diff --git a/harness/scenarios/cohort1/blocks/b2-c8.leo.sh b/harness/scenarios/cohort1/blocks/b2-c8.leo.sh
index 079df0bbc..59a89bcc8 100755
--- a/harness/scenarios/cohort1/blocks/b2-c8.leo.sh
+++ b/harness/scenarios/cohort1/blocks/b2-c8.leo.sh
@@ -1,18 +1,27 @@
-# Runbook correction C8 (the owner's ruling, 2026-10-20): B2 also moves leo's WHOLE /data/pointer-digests/
-# tree aside, recorded like the other leftovers. First list every <acct>/<app>/<channel>.digests; any
-# that names an app with a record AND a route on leo is a STOP (it contradicts G5).
+# Runbook correction C8 (the owner's ruling, 2026-10-20, widened after the 465c3a08 run): B2 also moves
+# leo's WHOLE pointer-digest ratchets aside, recorded like the other leftovers: the edge's
+# /data/pointer-digests (release.EdgeRatchetDir) and root's /opt/carlos/pointer-digests
+# (release.RootRatchetDir). First list every <acct>/<app>/<channel>.digests in each; any that names an app
+# with a route on leo is a STOP (it contradicts G5; G5 has already shown the bucket holds no record).
set -eu
umask 077
ASIDE=$(ls -d /var/lib/carlos-aside-* | tail -1) # B2's aside directory on this box
test "$(stat -c '%a %U:%G' "$ASIDE")" = '700 root:root'
test "$(stat -c %d /data)" = "$(stat -c %d /var/lib)"
-find /data/pointer-digests -type f -name '*.digests' -printf '%P\n' | sort | tee "$ASIDE/pointer-digests.list"
-while IFS=/ read -r acct app file; do
- routes=$(python3 -c "import sqlite3,sys; c=sqlite3.connect('file:/data/registry.db?mode=ro',uri=True); print(c.execute('select count(*) from routes where app=?',(sys.argv[1],)).fetchone()[0])" "$app")
- echo "$acct/$app/$file routes-on-leo=$routes"
- test "$routes" = 0
-done < "$ASIDE/pointer-digests.list"
-mv -T -- /data/pointer-digests "$ASIDE/pointer-digests"
-echo "moved /data/pointer-digests"
-test ! -e /data/pointer-digests
-ls -laR "$ASIDE/pointer-digests"
+test "$(stat -c %d /opt/carlos)" = "$(stat -c %d /var/lib)"
+for pair in /data/pointer-digests:data-pointer-digests /opt/carlos/pointer-digests:opt-pointer-digests; do
+ src=${pair%%:*}; dst=$ASIDE/${pair##*:}
+ if [ ! -e "$src" ] && [ ! -L "$src" ]; then echo "absent $src"; continue; fi
+ test -d "$src"; test ! -L "$src"
+ find "$src" -type f -name '*.digests' -printf '%P\n' | sort | tee "$dst.list"
+ while IFS=/ read -r acct app file; do
+ routes=$(python3 -c "import sqlite3,sys; c=sqlite3.connect('file:/data/registry.db?mode=ro',uri=True); print(c.execute('select count(*) from routes where app=?',(sys.argv[1],)).fetchone()[0])" "$app")
+ echo "$src: $acct/$app/$file routes-on-leo=$routes"
+ test "$routes" = 0
+ done < "$dst.list"
+ mv -T -- "$src" "$dst"
+ echo "moved $src"
+ test ! -e "$src"
+done
+# the move of /data/pointer-digests in the first C8 run went to $ASIDE/pointer-digests
+ls -la "$ASIDE"; find "$ASIDE" -name '*.digests' | sort
diff --git a/harness/scenarios/cohort1/blocks/w82-f5.box.sh b/harness/scenarios/cohort1/blocks/w82-f5.box.sh
new file mode 100644
index 000000000..6f9054b94
--- /dev/null
+++ b/harness/scenarios/cohort1/blocks/w82-f5.box.sh
@@ -0,0 +1,67 @@
+# Runbook 8.2 on leo, with the harness deviation F5 (marked below) (after w-env.box.sh). The host.env edit first: the runbook gives only its result,
+# not a command ("through the approved configuration procedure"), so this is the procedure used
+# (Runbook corrections, C3): append the two flags, then check the stated result line by line.
+echo "== host.env edit $(date -u +%T)"
+H=/etc/carlos/host.env
+cmp -- "$H" "$WINDOW/host.env.before"
+test "$(grep -c '^CARLOS_HOST_CLAIM=' "$H")" = 0
+test "$(grep -c '^CARLOS_HOST_CLAIM_ORIGINS=' "$H")" = 0
+printf 'CARLOS_HOST_CLAIM=1\nCARLOS_HOST_CLAIM_ORIGINS=1\n' >> "$H"
+test "$(grep -cx 'CARLOS_HOST_CLAIM=1' "$H")" = 1
+test "$(grep -cx 'CARLOS_HOST_CLAIM_ORIGINS=1' "$H")" = 1
+test "$(grep -c '^CARLOS_MOVES_PHASE1' "$H")" = 0
+test "$(grep -c '^CARLOS_REGION' "$H")" = 0
+test "$(grep -cx 'CARLOS_POOLS=cohort1' "$H")" = 1
+stat -c '%n %a %U:%G %s' "$H"; diff "$WINDOW/host.env.before" "$H" || true
+echo "== 8.2 block $(date -u +%T)"
+pub /opt/carlos/carlos system claims install-control --dry-run
+pub /opt/carlos/carlos system claims install-control
+systemctl cat carlos-instance-control.service
+# HARNESS DEVIATION F5 (pending the owner's fix): install-control leaves its lock
+# /etc/systemd/system/.claims-activation.lock inside the census root, which the census refuses
+# (claimcensus.go claimUnitCensus has no class for it). Move the empty lock into $WINDOW first.
+L=/etc/systemd/system/.claims-activation.lock
+stat -c '%n %F %U:%G %a %s' "$L"
+test -f "$L"; test ! -L "$L"; test "$(stat -c '%U:%G %a %s' "$L")" = 'root:root 600 0'
+holders=$(for f in /proc/[0-9]*/fd/*; do [ "$(readlink "$f" 2>/dev/null)" = "$L" ] && echo "$f"; done; true)
+test -z "$holders" && echo "F5: no process holds $L" || { echo "F5: held by $holders: STOP"; exit 1; }
+mv -T -- "$L" "$WINDOW/claims-activation.lock.moved"
+test ! -e "$L" && echo "F5: moved $L into \$WINDOW"
+ umask 022
+ set -a
+ . /etc/carlos/host.env
+ set +a
+ /opt/carlos/carlos system journal-migrate --window "$WINDOW"
+# Mode check after journal-migrate (window package, umask audit). Its census
+# step creates /opt/carlos/system/guard/moves and .../seeds as public
+# directories (rootstate.Open(dir, true, true): Mkdirat 0755, then it
+# refuses unless group and other have r-x, and it never chmods). The agent,
+# running as carlos, reads the floor projections there. Any mismatch is a
+# STOP: do not chmod by hand, do not rerun, hold.
+stat -c '%n %a %U:%G' /var/lib/carlos-claims /opt/carlos/system /opt/carlos/system/guard \
+ /opt/carlos/system/guard/moves /opt/carlos/system/guard/seeds
+test "$(stat -c '%a %U:%G' /var/lib/carlos-claims)" = '700 root:root'
+for d in /opt/carlos/system /opt/carlos/system/guard /opt/carlos/system/guard/moves /opt/carlos/system/guard/seeds; do
+ test "$(stat -c '%a %U:%G' "$d")" = '755 root:root'
+ sudo -u carlos test -r "$d"
+ sudo -u carlos test -x "$d"
+done
+sudo -u carlos test -x /opt/carlos/system/guard/carlos
+if [ -e /var/lib/carlos-swap-status ]; then
+ test "$(stat -c '%a %U:%G' /var/lib/carlos-swap-status)" = '755 root:root'
+ sudo -u carlos test -x /var/lib/carlos-swap-status
+fi
+# Root's exec census must exist before any restart (platform-1e, 2026-10-20):
+# without it, root's legacy restart fallback ignores the claim flag.
+# Missing is a STOP: hold, restart nothing.
+test -f /var/lib/carlos-claims/authority/exec/census.json
+test ! -L /var/lib/carlos-claims/authority/exec/census.json
+systemctl daemon-reload
+systemctl add-wants multi-user.target carlos-instance-control.service
+systemctl restart carlos-instance-control.service
+systemctl is-active carlos-instance-control.service
+journalctl -u carlos-instance-control.service --since '-5min' --no-pager
+ls -la /var/lib/carlos-claims/authority/migration/
+echo "8.2 DONE $(date -u +%T)"