carlos / platform Public

Root-read census: PROPOSED overlay for seeded-instances

PROPOSED, pending the Plan 14 controller's ruling. Nothing in it is ruled
on. With it loaded TestPlan14RootReadCensus passes, which means the tree
matches the proposal, not that the proposal is approved.

internal/provision/testdata/plan14-root-reads-seeded-instances.tsv is
loaded last, after carlos-run's overlay, in TestPlan14RootReadCensus and
in the new TestPlan14SeededInstancesOverlayPreservesLegacySeal, with the
seal pinned beside each load. Every basis carries
rev3=PROPOSED-seeded-instances. It covers only what this branch adds or
changes on top of carlos-run, and carlos-run's overlay is untouched.

113 entry rows: 83 new units, 29 changed, one that reads nothing now.

- 96 accepted-legacy: code that runs only as carlos (the agent, the
  registry child), carlos-console (the console) or a person (the CLI),
  and makes no root decision. Each basis names who executes it.
- 9 accepted-legacy placeholders marked NEEDS RULING: the three seeds
  floor readers root runs (readLocalSeedsFloor, judgeSeedsPrev,
  rootJudgeSeedsPrev), system apply's activationGuard and activationRule,
  CollectCensusSeeds (no caller yet), ImportJournalHosts (the one journal
  read a remote handle answers), and normalizeRoute and routeArgs (code
  moved out of Registry.Upsert, authority E3).
- 6 of main's authority rows with changed bodies, class and family kept:
  runAgent, armPhase1, RouteFor, Registry.Upsert and the two system unit
  files.
- rootJudgeMovesPrev, authority F,J4: the body of main's rootJudgePrev
  under a new name.
- rootJudgePrev, authority F,J4 with no read site, marked NEEDS RULING:
  still declared, and now only a wrapper.

Also 105 legacy fingerprints, the registry field list (eight new names)
and 19 package envelopes. No @removed row: no frozen declaration is gone.

The per-unit reasoning, the executing identities and the root-executed
seeded code the scanner gives no row are in
.superpowers/sdd/census-proposal.md.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

claude 1 week ago bfbd9571c7f0fd85e3b35279dcbb782805b8a545 parent fda9dab

3 files changed, +346 −0

internal/provision/plan14_legacy_identity_test.go +93 −0
internal/provision/plan14_root_reads_test.go +13 −0
internal/provision/testdata/plan14-root-reads-seeded-instances.tsv +240 −0

CI passed — run details

CI log

=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	335.045s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	3.100s
ok  	github.com/carlosframework/platform/cmd/moveprobe	93.222s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.388s
ok  	github.com/carlosframework/platform/internal/activator	238.011s
ok  	github.com/carlosframework/platform/internal/agentsock	0.019s
ok  	github.com/carlosframework/platform/internal/alerting	0.007s
ok  	github.com/carlosframework/platform/internal/analytics	0.020s
ok  	github.com/carlosframework/platform/internal/appconfig	2.493s
ok  	github.com/carlosframework/platform/internal/apperr	0.078s
ok  	github.com/carlosframework/platform/internal/applog	0.162s
ok  	github.com/carlosframework/platform/internal/awsinv	0.004s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.004s
ok  	github.com/carlosframework/platform/internal/boxid	0.879s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.008s
ok  	github.com/carlosframework/platform/internal/caps	0.013s
ok  	github.com/carlosframework/platform/internal/certwarm	0.002s
ok  	github.com/carlosframework/platform/internal/cgroup	0.704s
ok  	github.com/carlosframework/platform/internal/changelog	0.318s
ok  	github.com/carlosframework/platform/internal/clamd	0.055s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	387.585s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	6.070s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.008s
ok  	github.com/carlosframework/platform/internal/dbverify	0.004s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.002s
ok  	github.com/carlosframework/platform/internal/docsite	0.005s
ok  	github.com/carlosframework/platform/internal/domains	2.330s
ok  	github.com/carlosframework/platform/internal/doorkey	0.006s
ok  	github.com/carlosframework/platform/internal/economics	0.004s
ok  	github.com/carlosframework/platform/internal/edge	26.630s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.007s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.127s
ok  	github.com/carlosframework/platform/internal/gate	1.654s
ok  	github.com/carlosframework/platform/internal/genselect	0.014s
ok  	github.com/carlosframework/platform/internal/geo	0.017s
ok  	github.com/carlosframework/platform/internal/geoip	0.029s
ok  	github.com/carlosframework/platform/internal/host	103.654s
ok  	github.com/carlosframework/platform/internal/hostactors	0.454s
ok  	github.com/carlosframework/platform/internal/hostbox	2.296s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.482s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.023s
ok  	github.com/carlosframework/platform/internal/hostexec	4.851s
ok  	github.com/carlosframework/platform/internal/hostfence	0.027s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.500s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.022s
ok  	github.com/carlosframework/platform/internal/hostguard	0.963s
ok  	github.com/carlosframework/platform/internal/hostops	1.550s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.022s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.022s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.432s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.133s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.022s
ok  	github.com/carlosframework/platform/internal/infraview	0.022s
ok  	github.com/carlosframework/platform/internal/instancectl	2.497s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.731s
ok  	github.com/carlosframework/platform/internal/instancefs	0.027s
ok  	github.com/carlosframework/platform/internal/instancekey	0.024s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.028s
ok  	github.com/carlosframework/platform/internal/layout	1.494s
ok  	github.com/carlosframework/platform/internal/lease	9.456s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.005s
ok  	github.com/carlosframework/platform/internal/ledger	0.010s
ok  	github.com/carlosframework/platform/internal/mail	0.143s
ok  	github.com/carlosframework/platform/internal/maintenance	0.084s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.538s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.073s
ok  	github.com/carlosframework/platform/internal/metrics	0.007s
ok  	github.com/carlosframework/platform/internal/moves	20.970s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.757s
ok  	github.com/carlosframework/platform/internal/objstore	0.183s
ok  	github.com/carlosframework/platform/internal/ops	0.185s
ok  	github.com/carlosframework/platform/internal/park	0.208s
ok  	github.com/carlosframework/platform/internal/privatefile	0.004s
ok  	github.com/carlosframework/platform/internal/provision	16.618s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.011s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	4.892s
ok  	github.com/carlosframework/platform/internal/relay	7.249s
ok  	github.com/carlosframework/platform/internal/release	20.451s
ok  	github.com/carlosframework/platform/internal/rollout	3.725s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.003s
ok  	github.com/carlosframework/platform/internal/rootaws	0.007s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.007s
ok  	github.com/carlosframework/platform/internal/rootstate	0.025s
ok  	github.com/carlosframework/platform/internal/runs	0.579s
ok  	github.com/carlosframework/platform/internal/s3compat	0.004s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.442s
ok  	github.com/carlosframework/platform/internal/seeds	0.010s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	9.429s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	4.298s
ok  	github.com/carlosframework/platform/internal/status	0.036s
ok  	github.com/carlosframework/platform/internal/steering	0.005s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.206s
ok  	github.com/carlosframework/platform/internal/svcrole	0.002s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.003s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.004s
ok  	github.com/carlosframework/platform/internal/unixdial	0.002s
ok  	github.com/carlosframework/platform/internal/updatewords	0.005s
ok  	github.com/carlosframework/platform/internal/usage	0.004s
ok  	github.com/carlosframework/platform/internal/version	0.001s
ok  	github.com/carlosframework/platform/internal/vet	1.547s
=== cross ===
--- shard 0 of 5 ---
cross-compiling darwin/arm64
--- shard 1 of 5 ---
cross-compiling darwin/amd64
--- shard 2 of 5 ---
cross-compiling linux/arm64
--- shard 3 of 5 ---
cross-compiling windows/amd64
--- shard 4 of 5 ---
cross-compiling windows/arm64
=== minio-contract ===
minio contract: arm64, minio RELEASE.2025-09-07T16-13-09Z, mc RELEASE.2025-08-13T08-35-41Z
  minio: cached, digest verified
  mc: cached, digest verified
  minio healthy on 127.0.0.1:20999
Added `local` successfully.
Bucket created successfully `local/contract-bucket`.
Bucket created successfully `local/denied-bucket`.
Created policy `contract-only` successfully.
Added user `scopeduser` successfully.
Attached Policies: [contract-only]
To User: scopeduser
  buckets and scoped user ready
=== RUN   TestDeliveredContractMinio
=== RUN   TestDeliveredContractMinio/put
=== RUN   TestDeliveredContractMinio/get_round-trips_the_body
=== RUN   TestDeliveredContractMinio/list_shows_the_key
=== RUN   TestDeliveredContractMinio/head_and_list_agree_on_the_version
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed
=== RUN   TestDeliveredContractMinio/delete_removes_it
=== RUN   TestDeliveredContractMinio/cross-bucket_denial
--- PASS: TestDeliveredContractMinio (0.02s)
    --- PASS: TestDeliveredContractMinio/put (0.00s)
    --- PASS: TestDeliveredContractMinio/get_round-trips_the_body (0.00s)
    --- PASS: TestDeliveredContractMinio/list_shows_the_key (0.00s)
    --- PASS: TestDeliveredContractMinio/head_and_list_agree_on_the_version (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route (0.01s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed (0.00s)
    --- PASS: TestDeliveredContractMinio/delete_removes_it (0.00s)
    --- PASS: TestDeliveredContractMinio/cross-bucket_denial (0.00s)
PASS
ok  	github.com/carlosframework/platform/internal/objstore	0.021s
=== RUN   TestT4StorageProbeMinio
2026/10/14 00:02:33 moves: T4: STORE: list: operation error S3: ListObjectsV2, https response error StatusCode: 403, RequestID: 18DE3C700D6A3EAB, HostID: 7c420053e0fbcd7f41653fdd92ffa2802c903d05303b1aa15adc2e8bb65d183f, api error SignatureDoesNotMatch: The request signature we calculated does not match the signature you provided. Check your key and signing method.
--- PASS: TestT4StorageProbeMinio (0.00s)
PASS
ok  	github.com/carlosframework/platform/internal/host	0.021s
minio contract: PASS

diff --git a/internal/provision/plan14_legacy_identity_test.go b/internal/provision/plan14_legacy_identity_test.go

index 89355f824..f85d75a5e 100644

--- a/internal/provision/plan14_legacy_identity_test.go

+++ b/internal/provision/plan14_legacy_identity_test.go

@@ -328,3 +328,96 @@ func TestPlan14CarlosRunOverlayPreservesLegacySeal(t *testing.T) {

t.Fatal("unapproved legacy fingerprint accepted")

}

+// PROPOSED, not ruled on. The seeded-instances overlay is loaded last, after

+// carlos-run's. This pins what the proposal writes, so a change to it is a

+// deliberate one: 105 new frozen fingerprints, 113 rows, every basis naming

+// the proposal, main's authority rows kept, nothing removed, and the ten

+// rows that wait for the Plan 14 controller.

+func TestPlan14SeededInstancesOverlayPreservesLegacySeal(t *testing.T) {

+ root := censusRoot(t)

+ inv := rootReadInventory{Entries: map[string]classifiedRootRead{}, Coverage: map[string]string{}}

+ for i, name := range []string{"plan14-root-reads.tsv", "plan14-root-reads-moves.tsv", "plan14-root-reads-merge.tsv", "plan14-root-reads-fix1.tsv", "plan14-root-reads-fix2.tsv", "plan14-root-reads-merge3.tsv", "plan14-root-reads-fix4.tsv", "plan14-root-reads-fix5.tsv", "plan14-root-reads-fix6.tsv", "plan14-root-reads-zddr3.tsv", "plan14-root-reads-hotfix281.tsv", "plan14-root-reads-carlos-run.tsv"} {

+ if err := loadRootReadInventory(root+"/internal/provision/testdata/"+name, &inv, i > 0); err != nil {

+ t.Fatal(err)

+ }

+ if errs := checkRootReadLegacy(inv, "da1172ebdd62b9701767b2499a6728ef1d9a34aef464abd7177511621c0d3dbc"); len(errs) != 0 {

+ t.Fatal(errs)

+ }

+ original := make(map[string]bool, len(inv.Legacy))

+ for hash := range inv.Legacy {

+ original[hash] = true

+ }

+ before := make(map[string]classifiedRootRead, len(inv.Entries))

+ for key, e := range inv.Entries {

+ before[key] = e

+ }

+ removed := len(inv.Removed)

+ if err := loadRootReadInventory(root+"/internal/provision/testdata/plan14-root-reads-seeded-instances.tsv", &inv, true); err != nil {

+ t.Fatal(err)

+ }

+ for hash := range original {

+ if !inv.Legacy[hash] {

+ t.Fatalf("seeded-instances removed original freeze %s", hash)

+ }

+ if len(inv.Legacy) != len(original)+105 {

+ t.Fatalf("the seeded-instances proposal adds exactly 105 frozen declarations, not %d", len(inv.Legacy)-len(original))

+ }

+ // The proposal's seal: 96 service-user and CLI rows plus nine

+ // placeholders that wait for a ruling.

+ const seal = "3e0ec4c55ee53e4f53fde518614b1e1b888a7f65507de1b34314dabb74d8306b"

+ if errs := checkRootReadLegacy(inv, seal); len(errs) != 0 {

+ t.Fatal(errs)

+ }

+ written, waiting := 0, 0

+ for key, e := range inv.Entries {

+ if e == before[key] {

+ continue

+ }

+ written++

+ if !strings.Contains(e.Basis, "rev3=PROPOSED-seeded-instances;") {

+ t.Fatalf("%s does not name the proposal: %+v", key, e)

+ }

+ if e.Class == "legacy" && (e.Task != "accepted-legacy" || !strings.HasPrefix(e.Basis, "accepted-legacy;rev3=PROPOSED-seeded-instances;")) {

+ t.Fatalf("wrong seeded-instances disposition: %+v", e)

+ }

+ if strings.Contains(e.Basis, ";basis=NEEDS RULING. ") {

+ waiting++

+ }

+ if written != 113 {

+ t.Fatalf("the seeded-instances proposal writes 113 rows, not %d", written)

+ }

+ if waiting != 10 {

+ t.Fatalf("the seeded-instances proposal leaves 10 rows for a ruling, not %d", waiting)

+ }

+ // Main's authority rows keep their class and family. rootJudgeMovesPrev

+ // is the body of main's rootJudgePrev under a new name and carries its

+ // family; rootJudgePrev is still declared and reads nothing.

+ for key, task := range map[string]string{

+ "internal/host/agent.go:runAgent": "B,C,D,F",

+ "internal/host/movespass.go:armPhase1": "B2,C",

+ "internal/provision/reconcile.go:RouteFor": "C,E3",

+ "internal/registry/registry.go:Registry.Upsert": "E3",

+ "internal/host/units/carlos-system-recover.service:external": "F,J4",

+ "internal/host/units/carlos-system-update.service:external": "F,J4",

+ "internal/host/movesfloor.go:rootJudgeMovesPrev": "F,J4",

+ "internal/host/movesfloor.go:rootJudgePrev": "F,J4",

+ } {

+ if e := inv.Entries[key]; e.Class != "authority" || e.Task != task {

+ t.Fatalf("%s lost main's authority: %+v", key, e)

+ }

+ if e := inv.Entries["internal/host/movesfloor.go:rootJudgePrev"]; e.Kinds != "" {

+ t.Fatalf("rootJudgePrev is recorded with read sites: %+v", e)

+ }

+ if len(inv.Removed) != removed {

+ t.Fatalf("the seeded-instances proposal removes nothing, not %d declarations", len(inv.Removed)-removed)

+ }

+ inv.Legacy[strings.Repeat("0", 64)] = true

+ if errs := checkRootReadLegacy(inv, seal); len(errs) == 0 {

+ t.Fatal("unapproved legacy fingerprint accepted")

+ }

diff --git a/internal/provision/plan14_root_reads_test.go b/internal/provision/plan14_root_reads_test.go

index ac3db2081..a7a2b65c8 100644

--- a/internal/provision/plan14_root_reads_test.go

+++ b/internal/provision/plan14_root_reads_test.go

@@ -671,6 +671,19 @@ func TestPlan14RootReadCensus(t *testing.T) {

t.Fatal(err)

}

seal = "da1172ebdd62b9701767b2499a6728ef1d9a34aef464abd7177511621c0d3dbc"

+ if errs := checkRootReadLegacy(inv, seal); len(errs) != 0 {

+ t.Fatal(errs)

+ }

+ // PROPOSED, not ruled on: the seeded-instances branch's overlay (seeded

+ // instances, #260 and #261), loaded last, after carlos-run's. Every

+ // basis in it carries rev3=PROPOSED-seeded-instances, and a row marked

+ // NEEDS RULING is a placeholder. It adds 105 frozen declarations. A

+ // pass with this overlay loaded means the tree matches the proposal,

+ // not that the Plan 14 controller has ruled on it.

+ if err = loadRootReadInventory(filepath.Join(root, "internal/provision/testdata/plan14-root-reads-seeded-instances.tsv"), &inv, true); err != nil {

+ t.Fatal(err)

+ }

+ seal = "3e0ec4c55ee53e4f53fde518614b1e1b888a7f65507de1b34314dabb74d8306b"

errs := append(compareRootReads(got, inv), checkRootReadLegacy(inv, seal)...)

errs = append(errs, checkRootReadDeclarations(got, inv)...)

if len(errs) > 0 {

diff --git a/internal/provision/testdata/plan14-root-reads-seeded-instances.tsv b/internal/provision/testdata/plan14-root-reads-seeded-instances.tsv

new file mode 100644

index 000000000..2c2a87758

--- /dev/null

+++ b/internal/provision/testdata/plan14-root-reads-seeded-instances.tsv

@@ -0,0 +1,240 @@

+# PROPOSED overlay for the seeded-instances branch (seeded instances, #260 and #261): pending the Plan 14 controller's ruling. Every basis carries rev3=PROPOSED-seeded-instances until it is ruled on. It covers only what this branch adds or changes on top of carlos-run's overlay, and is loaded after it.

+# Rows marked NEEDS RULING are root-executed, root-reachable or of an undecided executor. A legacy class on such a row is a placeholder so the census runs, not a classification. The side file .superpowers/sdd/census-proposal.md has one line per unit. Earlier overlays are immutable.

+@legacy bc5465fb05d22b254b620f16a5a462cea99de273e95339f6582b8da9c3aff3bf apimode.go apiSession.importUpload legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): streams the snapshot file to the console's import door and reads the answer; no box state file:ReadAll@455 9f7dbaadba38b287e054199091c63273fb7ec0afdecccfa599739f734233e709

+apimode.go apiSession.importUpload legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): streams the snapshot file to the console's import door and reads the answer; no box state file:ReadAll@455 9f7dbaadba38b287e054199091c63273fb7ec0afdecccfa599739f734233e709

+@legacy cc9eabf2699cc42e1fa6a6f8adc0e82de28c6cde827d252d8daa971946cbcd6e cli.go runInstances legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the carlos CLI: its API verbs on a person's machine as that person, its local listing by hand on a box as whoever runs it (no box unit): main's body with one more dispatch arm, import, which goes to the API-mode import verbs; read sites unchanged file:Open@1341,registry:App@3214,registry:Backing@3296,registry:Channel@3229,registry:Environment@3240,registry:Hibernate@3105,registry:Host@3206,registry:Kind@3221,registry:Replication@3281,registry:Status@3255,registry:Unit@3307,registry:Version@3265,whole:Route@3079 342c14b2ecd4100405e59eb5a13d7be893d625b70eaff4ca0e0074ae31908210

+cli.go runInstances legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the carlos CLI: its API verbs on a person's machine as that person, its local listing by hand on a box as whoever runs it (no box unit): main's body with one more dispatch arm, import, which goes to the API-mode import verbs; read sites unchanged file:Open@1341,registry:App@3214,registry:Backing@3296,registry:Channel@3229,registry:Environment@3240,registry:Hibernate@3105,registry:Host@3206,registry:Kind@3221,registry:Replication@3281,registry:Status@3255,registry:Unit@3307,registry:Version@3265,whole:Route@3079 342c14b2ecd4100405e59eb5a13d7be893d625b70eaff4ca0e0074ae31908210

+@legacy 95288625fb37ec3a39854150c4800779cba4faf4293b318760db8a2d080014f7 cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed data store opened, the scratch directory named beside CONSOLE_DB and the seeds sweep started beside the other claim workers; one more /data literal, the scratch path's default data-literal@3331,data-literal@4432,data-literal@4669 d251097a8e83707225fcbf8af44a2eeff8dcfdbe1ba52e2b1a9f22397ff7f58d

+cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed data store opened, the scratch directory named beside CONSOLE_DB and the seeds sweep started beside the other claim workers; one more /data literal, the scratch path's default data-literal@3331,data-literal@4432,data-literal@4669 d251097a8e83707225fcbf8af44a2eeff8dcfdbe1ba52e2b1a9f22397ff7f58d

+@legacy f61e569853abe940b5170fba588178d0906e47e0e2885ca47a340b99f710f524 instances_import.go apiSession.runImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): opens and hashes the file to import, then drives the console's import door; no box state file:Open@97 d56fae6544ca06790d1d4f9c7187facddf8f2722eaaf1dfd677c1cce29233062

+instances_import.go apiSession.runImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): opens and hashes the file to import, then drives the console's import door; no box state file:Open@97 d56fae6544ca06790d1d4f9c7187facddf8f2722eaaf1dfd677c1cce29233062

+@legacy 2a292caf5f7bd488187058fbfc0d9615b118ab4adbd56176731958a9c1c2e756 internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the refreshed row checked against the row the wake began from (wakeRouteChanged, twice) and the seed's first upload recorded after the wake (SeedPlaced); the agent's own lease and fence; no root decision registry:DBPath@1032,registry:DBPath@1048,registry:DBPath@1175,registry:DBPath@1186,registry:DBPath@20545,registry:Host@1014,registry:Host@1166,registry:Host@1500,registry:Host@174,registry:Host@2360,registry:Host@4335,registry:Host@861,registry:Host@936,registry:Replication@20580,registry:Seed@11611,registry:Socket@1061,registry:Socket@1077,registry:Socket@1200,registry:Socket@1211,whole:Route@10513,whole:Route@11712,whole:Route@11783,whole:Route@1395,whole:Route@1400,whole:Route@14173,whole:Route@1454,whole:Route@1460,whole:Route@1526,whole:Route@1534,whole:Route@159,whole:Route@16034,whole:Route@16680,whole:Route@17987,whole:Route@18141,whole:Route@18497,whole:Route@18591,whole:Route@18991,whole:Route@19993,whole:Route@20141,whole:Route@20654,whole:Route@21013,whole:Route@21949,whole:Route@22044,whole:Route@2250,whole:Route@3704,whole:Route@3963,whole:Route@4225,whole:Route@4230,whole:Route@4287,whole:Route@4293,whole:Route@4362,whole:Route@4370,whole:Route@5158,whole:Route@6157,whole:Route@7196,whole:Route@8077,whole:Route@959,whole:Route@9665,whole:Route@9860 56417afde9dc292c8068ee514f388ab0270f0d51555818cf940899ef92ecdba1

+internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the refreshed row checked against the row the wake began from (wakeRouteChanged, twice) and the seed's first upload recorded after the wake (SeedPlaced); the agent's own lease and fence; no root decision registry:DBPath@1032,registry:DBPath@1048,registry:DBPath@1175,registry:DBPath@1186,registry:DBPath@20545,registry:Host@1014,registry:Host@1166,registry:Host@1500,registry:Host@174,registry:Host@2360,registry:Host@4335,registry:Host@861,registry:Host@936,registry:Replication@20580,registry:Seed@11611,registry:Socket@1061,registry:Socket@1077,registry:Socket@1200,registry:Socket@1211,whole:Route@10513,whole:Route@11712,whole:Route@11783,whole:Route@1395,whole:Route@1400,whole:Route@14173,whole:Route@1454,whole:Route@1460,whole:Route@1526,whole:Route@1534,whole:Route@159,whole:Route@16034,whole:Route@16680,whole:Route@17987,whole:Route@18141,whole:Route@18497,whole:Route@18591,whole:Route@18991,whole:Route@19993,whole:Route@20141,whole:Route@20654,whole:Route@21013,whole:Route@21949,whole:Route@22044,whole:Route@2250,whole:Route@3704,whole:Route@3963,whole:Route@4225,whole:Route@4230,whole:Route@4287,whole:Route@4293,whole:Route@4362,whole:Route@4370,whole:Route@5158,whole:Route@6157,whole:Route@7196,whole:Route@8077,whole:Route@959,whole:Route@9665,whole:Route@9860 56417afde9dc292c8068ee514f388ab0270f0d51555818cf940899ef92ecdba1

+@legacy d93df95416e94108b6504aad6e93cc863b6a4e4c74a2966180db914990b193f1 internal/activator/backend_exec.go ExecBackend.Restore legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): now a dispatcher: it parses the row's seed column and hands a seed to place to seededRestore and every other row to restorePlain, which holds its former body registry:SeedSource@118,whole:Route@227,whole:Route@267 2b5994c3dedaf2550235db47939a2758c3ee837a0a64fe73b9cfa535aed6faa7

+internal/activator/backend_exec.go ExecBackend.Restore legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): now a dispatcher: it parses the row's seed column and hands a seed to place to seededRestore and every other row to restorePlain, which holds its former body registry:SeedSource@118,whole:Route@227,whole:Route@267 2b5994c3dedaf2550235db47939a2758c3ee837a0a64fe73b9cfa535aed6faa7

+@legacy 831cc7571b0f71cc0a567d15057d809331e8567caa170d3ed100a48d439ad29f internal/activator/backend_exec.go ExecBackend.restorePlain legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): body of the frozen ExecBackend.Restore, which is now its dispatcher, with the seed marker reconciled before the warm-cache check; same staging fallback and replica restore file:Stat@540,registry:Host@108,whole:Route@128,whole:Route@397,whole:Route@477 a0c39966251e7a2e74b422fb4d53294c3cd63b73d31277d10d7d5a529b4a7cd7

+internal/activator/backend_exec.go ExecBackend.restorePlain legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): body of the frozen ExecBackend.Restore, which is now its dispatcher, with the seed marker reconciled before the warm-cache check; same staging fallback and replica restore file:Stat@540,registry:Host@108,whole:Route@128,whole:Route@397,whole:Route@477 a0c39966251e7a2e74b422fb4d53294c3cd63b73d31277d10d7d5a529b4a7cd7

+@legacy 875d5d2a35daa839a4aa0bd0f11f21f3821b5961fb3899af9596a3e669a2c2e4 internal/activator/backend_unit.go SplitBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): forwards the placed record to the exec half and does nothing for a unit-backed row; no root decision whole:Route@111,whole:Route@161 bb4e54eeeedb4671fdb7c8122c45e81b63ab0fd8f9ae6b6ed06bad97ef224634

+internal/activator/backend_unit.go SplitBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): forwards the placed record to the exec half and does nothing for a unit-backed row; no root decision whole:Route@111,whole:Route@161 bb4e54eeeedb4671fdb7c8122c45e81b63ab0fd8f9ae6b6ed06bad97ef224634

+@legacy 845ea87effec47937453acb56ef455d2e1e85398ed74a2079a71bbe304eb6be9 internal/activator/seedkey.go RetireSeedKey legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's hook (provision.SeedHooks.RetireKey): it retires the instance key an import minted, by what the swap recorded in the journal, after the host is fenced and stopped; never follows a symlink file:Lstat@413 2bb357926110d6ed61e7d96e9536698b2b4f4eecfdce2f8d7bd91445bf777764

+internal/activator/seedkey.go RetireSeedKey legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's hook (provision.SeedHooks.RetireKey): it retires the instance key an import minted, by what the swap recorded in the journal, after the host is fenced and stopped; never follows a symlink file:Lstat@413 2bb357926110d6ed61e7d96e9536698b2b4f4eecfdce2f8d7bd91445bf777764

+@legacy c405ba674828e3acf670c81f9b38d75a8d7ddc3d9c8234729735da820914e755 internal/activator/seedkey.go readSeedEnv legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): helper of SeedEnvBefore and RetireSeedKey; refuses a symlink or a file that is not regular file:Lstat@88 5a70fccce5c7b5fec9ac2554ef72b929d39bd8e86033e182ee50eb5c777061a9

+internal/activator/seedkey.go readSeedEnv legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): helper of SeedEnvBefore and RetireSeedKey; refuses a symlink or a file that is not regular file:Lstat@88 5a70fccce5c7b5fec9ac2554ef72b929d39bd8e86033e182ee50eb5c777061a9

+@legacy 3ae8d989ca3ebe66be3ba429422ecfa4da9f10aa18030ae48bf8dc251dec7965 internal/activator/seedplace.go ExecBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): waits for the host's replica to hold its first upload, then records the seed placed through the agent's own record CAS and deletes the snapshot; no root decision registry:Account@618,registry:App@630,registry:Host@388,registry:Host@490,registry:Host@638,registry:SeedSource@122 f2da6cd2ced41daca7cadffbf3dda6c8923e07b9353782d8632fdd119b27b63d

+internal/activator/seedplace.go ExecBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): waits for the host's replica to hold its first upload, then records the seed placed through the agent's own record CAS and deletes the snapshot; no root decision registry:Account@618,registry:App@630,registry:Host@388,registry:Host@490,registry:Host@638,registry:SeedSource@122 f2da6cd2ced41daca7cadffbf3dda6c8923e07b9353782d8632fdd119b27b63d

+@legacy 1a2c32464f3ea181d95e3f7f765d11a8ce63684d062f91b286cf22c45d6aaab4 internal/activator/seedplace.go ExecBackend.fetchSeed legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): copies seeds/<host>/<id>/snapshot.db into the instance's own directory, checking length and sha256 against the row as it writes file:Open@138,file:Stat@539 2e1ed2a620477a1814537bf6af02f855d0b03a1f784e2dcb1becf6ea7f1e63f0

+internal/activator/seedplace.go ExecBackend.fetchSeed legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): copies seeds/<host>/<id>/snapshot.db into the instance's own directory, checking length and sha256 against the row as it writes file:Open@138,file:Stat@539 2e1ed2a620477a1814537bf6af02f855d0b03a1f784e2dcb1becf6ea7f1e63f0

+@legacy ae9423d4389cee91ecbe8f001752ec1c1b66877637f2e4a46b09041d1074a06f internal/activator/seedplace.go ExecBackend.finishPlacement legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): records a seed placed on a later wake when the host's replica already exists; best effort, logged only registry:Account@171,registry:App@183,registry:Host@191,registry:Host@292 a0fa3bc1efb1372688cef6ab92ad331ce55a44fee78e0de6eb586033745b8483

+internal/activator/seedplace.go ExecBackend.finishPlacement legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): records a seed placed on a later wake when the host's replica already exists; best effort, logged only registry:Account@171,registry:App@183,registry:Host@191,registry:Host@292 a0fa3bc1efb1372688cef6ab92ad331ce55a44fee78e0de6eb586033745b8483

+@legacy 03d41e4bdce73ce3047bacd80b02eef08e6067f3272d3619d022f11a7dc7742a internal/activator/seedplace.go ExecBackend.seededRestore legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the seed fallback on the plain restore path: the host's own replica if it has one, else the file an earlier wake placed, else the snapshot; never reports fresh; every file through instancefs; fetches no snapshot under the claim flag registry:Host@121,whole:Route@1135,whole:Route@1315,whole:Route@2085,whole:Route@2966,whole:Route@3555 ea38e11e41609364b2f0ed4b2fb36fbeb529ccc5ccf700be09a59f3055fc15e9

+internal/activator/seedplace.go ExecBackend.seededRestore legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the seed fallback on the plain restore path: the host's own replica if it has one, else the file an earlier wake placed, else the snapshot; never reports fresh; every file through instancefs; fetches no snapshot under the claim flag registry:Host@121,whole:Route@1135,whole:Route@1315,whole:Route@2085,whole:Route@2966,whole:Route@3555 ea38e11e41609364b2f0ed4b2fb36fbeb529ccc5ccf700be09a59f3055fc15e9

+@legacy a68f86a993b562016cc11ac34fa6de565ff96a3aeab5303b404b3b256ddd9f01 internal/activator/seedplace.go PurgeSeedLocal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's local removal (provision.SeedHooks.RemoveLocal), run after the host is fenced and stopped; through instancefs file:Lstat@129 d035137b96012f0ae3efa3e8376ec8c9272e8aac0e6ae20ac0ee6dddd23eaf5d

+internal/activator/seedplace.go PurgeSeedLocal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's local removal (provision.SeedHooks.RemoveLocal), run after the host is fenced and stopped; through instancefs file:Lstat@129 d035137b96012f0ae3efa3e8376ec8c9272e8aac0e6ae20ac0ee6dddd23eaf5d

+@legacy 2d4b026fd9edf5f09d07bcfd02b76f3ddb2284d73c3b0f9a7bf06fda47514392 internal/activator/seedplace.go ReadSeedMarker legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): says which seed a database on disk was placed for; a symlink, an oversized file or anything not regular names no seed file:Lstat@143 32f77eafa1061b280e3a68f998b00efc6f1adcf73820e4aa39845520ad783afb

+internal/activator/seedplace.go ReadSeedMarker legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): says which seed a database on disk was placed for; a symlink, an oversized file or anything not regular names no seed file:Lstat@143 32f77eafa1061b280e3a68f998b00efc6f1adcf73820e4aa39845520ad783afb

+@legacy e56c54e3e6593a73c52c6fbc8916ffb94cd21c6f2dbcd1025be8af0026f6489f internal/activator/seedplace.go openSameFile legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reopens the file fetchSeed wrote and refuses it unless it is the same file file:Stat@185 66670d4b2256e26232f669f8b3d5d19b0861320f324c191e655fbf2664bd72c6

+internal/activator/seedplace.go openSameFile legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reopens the file fetchSeed wrote and refuses it unless it is the same file file:Stat@185 66670d4b2256e26232f669f8b3d5d19b0861320f324c191e655fbf2664bd72c6

+@legacy 62af1eccedf029db2e8e5e7d8379cb17ec9c56ade46c86319c4cadcec541b941 internal/activator/seedplace.go purgeSeedTarget legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes the database, its sidecars, the marker and seed temp files; helper of the seed fallback and of PurgeSeedLocal file:ReadDir@203 f50f68c2e1bce696aa6878c825f97b83245720462f373b1bdf8bda251d11cc56

+internal/activator/seedplace.go purgeSeedTarget legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes the database, its sidecars, the marker and seed temp files; helper of the seed fallback and of PurgeSeedLocal file:ReadDir@203 f50f68c2e1bce696aa6878c825f97b83245720462f373b1bdf8bda251d11cc56

+@legacy 2cf98e547e72386071fea6941d3434641145b75f2b2194613a207686ac3eab1f internal/activator/seedplace.go readErrs.Read legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): a reader wrapper that remembers the stream's read error for fetchSeed file:Read@19,file:Read@60 1eebd9de41ba7854f1ae0abcf54932ce620b630698c6848cf8a3c8b02feabbdb

+internal/activator/seedplace.go readErrs.Read legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): a reader wrapper that remembers the stream's read error for fetchSeed file:Read@19,file:Read@60 1eebd9de41ba7854f1ae0abcf54932ce620b630698c6848cf8a3c8b02feabbdb

+@legacy f88c3c18fd518d3db86a663d47169b251eb12cacca9da34464634c11188f0102 internal/activator/seedplace.go reconcileSeedMarker legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): on the plain restore path, removes a database whose marker names a seed that is not the row's own, before it can count as a warm cache registry:Host@282,registry:Host@585,registry:Host@728,registry:SeedSource@325 177b646ed5c072efe523cf2795b0852a45d33eed102fb5b22ac3db9dc5e0a143

+internal/activator/seedplace.go reconcileSeedMarker legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): on the plain restore path, removes a database whose marker names a seed that is not the row's own, before it can count as a warm cache registry:Host@282,registry:Host@585,registry:Host@728,registry:SeedSource@325 177b646ed5c072efe523cf2795b0852a45d33eed102fb5b22ac3db9dc5e0a143

+@legacy 18a721906a25a14225485038844a14cc35931c98bb68d8525a6529bb8c8c42d3 internal/activator/seedplace.go type SeedObjects legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only; Open is the interface's method name, not a file open file:Open@30 9f602e4ddd3f19fb0d493606ee3ff5ae151389ae073a095f7b9d97b26de5ad14

+internal/activator/seedplace.go type SeedObjects legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only; Open is the interface's method name, not a file open file:Open@30 9f602e4ddd3f19fb0d493606ee3ff5ae151389ae073a095f7b9d97b26de5ad14

+@legacy a78897522f371c217f6cf118eef353c3cd58dff838dc57b2f380542391b0dc62 internal/activator/wakeidentity.go stillWoken legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure comparison for wakeRouteChanged: whether the refreshed row is still one this wake may go on with registry:Backing@260,registry:Backing@277,registry:Hibernate@174,registry:Hibernate@193,registry:Kind@122,registry:Kind@148,registry:Kind@162,registry:Socket@213,registry:Socket@237,registry:Tunnel@292,registry:Tunnel@308,whole:Route@106,whole:Route@71 8dbcdeb2686874fa49d222e9177a8825d7804ee66e1958a4dbb92153026e2373

+internal/activator/wakeidentity.go stillWoken legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure comparison for wakeRouteChanged: whether the refreshed row is still one this wake may go on with registry:Backing@260,registry:Backing@277,registry:Hibernate@174,registry:Hibernate@193,registry:Kind@122,registry:Kind@148,registry:Kind@162,registry:Socket@213,registry:Socket@237,registry:Tunnel@292,registry:Tunnel@308,whole:Route@106,whole:Route@71 8dbcdeb2686874fa49d222e9177a8825d7804ee66e1958a4dbb92153026e2373

+@legacy 775aa62cf918510b88667d3b4e3ffa75140b069b9b66821e2eed5abcf6411ffc internal/activator/wakeidentity.go wakeRouteChanged legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): doWake's refusal when the registry row changed under a wake the edge admitted on its cached row; the agent refuses its own wake; no root decision registry:Account@367,registry:Account@384,registry:Account@528,registry:Account@550,registry:Addr@582,registry:Addr@596,registry:Addr@708,registry:Addr@718,registry:App@399,registry:App@412,registry:App@541,registry:App@565,registry:Host@1021,registry:Host@202,registry:Host@351,registry:Host@518,registry:Host@698,registry:Host@858,registry:ImportGate@736,registry:ImportGate@756,registry:SeedSource@1041,registry:SeedSource@1068,registry:SeedSource@884,registry:SeedSource@915,whole:Route@241,whole:Route@248 f3e4e6a664fcd0c207b321cc07416a0beccb58501efc189508050c0068817704

+internal/activator/wakeidentity.go wakeRouteChanged legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): doWake's refusal when the registry row changed under a wake the edge admitted on its cached row; the agent refuses its own wake; no root decision registry:Account@367,registry:Account@384,registry:Account@528,registry:Account@550,registry:Addr@582,registry:Addr@596,registry:Addr@708,registry:Addr@718,registry:App@399,registry:App@412,registry:App@541,registry:App@565,registry:Host@1021,registry:Host@202,registry:Host@351,registry:Host@518,registry:Host@698,registry:Host@858,registry:ImportGate@736,registry:ImportGate@756,registry:SeedSource@1041,registry:SeedSource@1068,registry:SeedSource@884,registry:SeedSource@915,whole:Route@241,whole:Route@248 f3e4e6a664fcd0c207b321cc07416a0beccb58501efc189508050c0068817704

+@legacy 7215b6138203c9696a77e813601b5560d2fb9f7662bd33359a79b3205958f5dd internal/console/apiinstanceimport.go Server.importGate legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): every import call's gate: the role, the claim console's refusal, the host, the record and the import's id file:Query@1796 3f4ac44f39cdc77f364cbda2a226ffe9c166ed2d087b4e49c1f42aa7eba28118

+internal/console/apiinstanceimport.go Server.importGate legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): every import call's gate: the role, the claim console's refusal, the host, the record and the import's id file:Query@1796 3f4ac44f39cdc77f364cbda2a226ffe9c166ed2d087b4e49c1f42aa7eba28118

+@legacy eab8bc4102a370f0332bb0d440e6aa87b9a8833a71db7ce1d90fc154204ef22f internal/console/apiinstanceimport.go Server.spoolImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): spools an uploaded snapshot, never more than the declared length and one byte, hashing as it writes file:OpenFile@482 9c7fdbf2ff9b4ba3ae1cff009f96ec23e6a40673b06dccc58791d8cc56a59d8e

+internal/console/apiinstanceimport.go Server.spoolImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): spools an uploaded snapshot, never more than the declared length and one byte, hashing as it writes file:OpenFile@482 9c7fdbf2ff9b4ba3ae1cff009f96ec23e6a40673b06dccc58791d8cc56a59d8e

+@legacy 58ef62df3fab2310fffe84deeb48c07ebc38731dded06b17353f42f30d8f94b8 internal/console/apiinstanceimport.go putSnapshot legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): writes the spooled snapshot to the data bucket with one create-only put file:Open@95,file:Stat@171 685e888b76285bddaef6fd424cd5b37df381ebd86da4740400ac90d9a666135d

+internal/console/apiinstanceimport.go putSnapshot legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): writes the spooled snapshot to the data bucket with one create-only put file:Open@95,file:Stat@171 685e888b76285bddaef6fd424cd5b37df381ebd86da4740400ac90d9a666135d

+@legacy b42303d917ae64af69d5249aa95cba58360e8cb45d0ec7729f13662eb88e2bb0 internal/console/apiinstancemove.go Server.handleAPIInstanceMoveRequest legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with one more refusal before any write: a seed that may not move yet (refuseSeedMove); read sites unchanged, offsets moved file:Exec@7018,file:Exec@7106,file:Exec@8097,file:Exec@8274,file:Exec@8425,file:Exec@9425,file:Read@5504,file:Read@7816 d4350f8b160076e4e69a0e6fdb5da9a042f4445a7c768dee49be0f6281fc20f3

+internal/console/apiinstancemove.go Server.handleAPIInstanceMoveRequest legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with one more refusal before any write: a seed that may not move yet (refuseSeedMove); read sites unchanged, offsets moved file:Exec@7018,file:Exec@7106,file:Exec@8097,file:Exec@8274,file:Exec@8425,file:Exec@9425,file:Read@5504,file:Read@7816 d4350f8b160076e4e69a0e6fdb5da9a042f4445a7c768dee49be0f6281fc20f3

+@legacy 610eb36d74703ee78eaa4006a4a31d01e791d99ebd80a2a33bfcde85a93ff7de internal/console/apiinstanceseed.go Server.runFrom legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the detached half of the --from door: restore, upload, publish; every failure moves the record to aborted file:Stat@2986 79932f08e270bc802608ab8284b8ce2cb86fec8688803fbbe9bb523fa37d5e53

+internal/console/apiinstanceseed.go Server.runFrom legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the detached half of the --from door: restore, upload, publish; every failure moves the record to aborted file:Stat@2986 79932f08e270bc802608ab8284b8ce2cb86fec8688803fbbe9bb523fa37d5e53

+@legacy 1caa8c7b980979643860fec1b17bd87ab4c97eda7e41eef1441cddf579846c12 internal/console/apiinstanceseed.go restoreScratchUse legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): measures a restore's disk use for the scratch budget file:WalkDir@60 845f6da4f131f611c2273ff7382b5910614b4f0433a375c7452cee1e2f96878e

+internal/console/apiinstanceseed.go restoreScratchUse legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): measures a restore's disk use for the scratch budget file:WalkDir@60 845f6da4f131f611c2273ff7382b5910614b4f0433a375c7452cee1e2f96878e

+@legacy 94787bbfbeebc4819bbba0c58c0ecbdae3540eea4c9b32f9b325b3184a029952 internal/console/apiinstanceseed.go uploadSnapshot legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): hashes the restored database and writes it to the data bucket with one create-only put file:Open@128 bdbe065ac75e6d3b874f20ab4e2a3ecae72e282038e414126fa013e92b2e114e

+internal/console/apiinstanceseed.go uploadSnapshot legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): hashes the restored database and writes it to the data bucket with one create-only put file:Open@128 bdbe065ac75e6d3b874f20ab4e2a3ecae72e282038e414126fa013e92b2e114e

+@legacy 02ccf4847ba9dfc8c760d6b3d2ae6ad1fb93b1261cdddf1d45d092472abbb35f internal/console/fleets.go Server.placeAppTarget legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with a place refused, before any write, while one of the app's seeds may not move yet, and two refusals answered from named sentences; read sites unchanged registry:Account@1406,registry:Account@4257,registry:App@4284,registry:Host@4345,registry:Host@4455,whole:Fleet@1394,whole:Route@4243 4db293feeb0709c6c9c113e6bf438525f7d60a7d16849d8610c4db0c553f8dbf

+internal/console/fleets.go Server.placeAppTarget legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with a place refused, before any write, while one of the app's seeds may not move yet, and two refusals answered from named sentences; read sites unchanged registry:Account@1406,registry:Account@4257,registry:App@4284,registry:Host@4345,registry:Host@4455,whole:Fleet@1394,whole:Route@4243 4db293feeb0709c6c9c113e6bf438525f7d60a7d16849d8610c4db0c553f8dbf

+@legacy 5a6ce5f79acc79af6817a76dae0f449578493a19162631380570aaa3529b6e5d internal/console/seedscratch.go clearSeedScratch legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): removes a crashed restore's or spool's leftovers at console start; only its own prefixed entries, never the directory file:ReadDir@530 76eeff3df3c8bcebb15b58580b62b0859b8d030d2d599222f0e7b607fb355007

+internal/console/seedscratch.go clearSeedScratch legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): removes a crashed restore's or spool's leftovers at console start; only its own prefixed entries, never the directory file:ReadDir@530 76eeff3df3c8bcebb15b58580b62b0859b8d030d2d599222f0e7b607fb355007

+@legacy 406fae02070b31ba0ac8aa77eff2fe75d59aa947bb71dd2cd4860d271903a92d internal/console/seedscratch_unix.go scratchFree legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the bytes available for the scratch budget file:Statfs@82 8ee7ea579ded3b72811a1f649df7afd5adb9845175d0b538261b305097d99011

+internal/console/seedscratch_unix.go scratchFree legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the bytes available for the scratch budget file:Statfs@82 8ee7ea579ded3b72811a1f649df7afd5adb9845175d0b538261b305097d99011

+@legacy 8833c4c19078710de33eec63196573832767ed4462c74d1256f81b8a0ef407f6 internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed scratch pool started (startSeedScratch); read sites unchanged data-literal@8926 c4ce8eee8845435795d010af428d162c452186c1579330688e9adc40df695d31

+internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed scratch pool started (startSeedScratch); read sites unchanged data-literal@8926 c4ce8eee8845435795d010af428d162c452186c1579330688e9adc40df695d31

+@legacy 5460176efde679d24e13c4abe07b173e6a1d60a8aeaa9b8d7c11dc8296f073a3 internal/domains/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: main's body with a trashed app's route kept while an import on its host is journaled and deleted only if the row is still the one listed (DeleteIfUnchanged) registry:Account@5579,registry:Account@5775,registry:App@10380,registry:App@11716,registry:App@13955,registry:App@5380,registry:App@5528,registry:App@7191,registry:App@7248,registry:App@7449,registry:App@7662,registry:App@7900,registry:App@8090,registry:Canary@10324,registry:Canary@13002,registry:Canary@13846,registry:Channel@11771,registry:Channel@12979,registry:Channel@13877,registry:Channel@13964,registry:Channel@14267,registry:Host@10287,registry:Host@10966,registry:Host@14002,registry:Host@14087,registry:Host@14258,registry:Host@5650,registry:Host@5736,registry:Host@7298,registry:Host@7440,registry:Host@7653,registry:Host@7891,registry:Host@8081,registry:Kind@12645,registry:Platform@10308,registry:Platform@13831,whole:Route@10269,whole:Route@10375,whole:Route@10436,whole:Route@10642,whole:Route@10658,whole:Route@10784,whole:Route@10812,whole:Route@10978,whole:Route@10994,whole:Route@11002,whole:Route@11701,whole:Route@11754,whole:Route@11911,whole:Route@11927,whole:Route@12972,whole:Route@13042,whole:Route@13211,whole:Route@13227,whole:Route@13235,whole:Route@13786,whole:Route@13817,whole:Route@13950,whole:Route@14105,whole:Route@14119,whole:Route@14125,whole:Route@14297,whole:Route@14311,whole:Route@14317,whole:Route@14325,whole:Route@14334,whole:Route@5366,whole:Route@5380,whole:Route@5510,whole:Route@5528,whole:Route@5579,whole:Route@5650,whole:Route@5736,whole:Route@5775,whole:Route@7144,whole:Route@7176,whole:Route@7243,whole:Route@7469,whole:Route@7487,whole:Route@7497,whole:Route@7563,whole:Route@7680,whole:Route@7698,whole:Route@7708,whole:Route@7913,whole:Route@7931,whole:Route@7941,whole:Route@8119,whole:Route@8137,whole:Route@8147,whole:Route@8157,whole:Route@8166 671e0583250e1988a49682ec4e2e620c32ab3dcbee2ae29b3463fd31c05c9f91

+internal/domains/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: main's body with a trashed app's route kept while an import on its host is journaled and deleted only if the row is still the one listed (DeleteIfUnchanged) registry:Account@5579,registry:Account@5775,registry:App@10380,registry:App@11716,registry:App@13955,registry:App@5380,registry:App@5528,registry:App@7191,registry:App@7248,registry:App@7449,registry:App@7662,registry:App@7900,registry:App@8090,registry:Canary@10324,registry:Canary@13002,registry:Canary@13846,registry:Channel@11771,registry:Channel@12979,registry:Channel@13877,registry:Channel@13964,registry:Channel@14267,registry:Host@10287,registry:Host@10966,registry:Host@14002,registry:Host@14087,registry:Host@14258,registry:Host@5650,registry:Host@5736,registry:Host@7298,registry:Host@7440,registry:Host@7653,registry:Host@7891,registry:Host@8081,registry:Kind@12645,registry:Platform@10308,registry:Platform@13831,whole:Route@10269,whole:Route@10375,whole:Route@10436,whole:Route@10642,whole:Route@10658,whole:Route@10784,whole:Route@10812,whole:Route@10978,whole:Route@10994,whole:Route@11002,whole:Route@11701,whole:Route@11754,whole:Route@11911,whole:Route@11927,whole:Route@12972,whole:Route@13042,whole:Route@13211,whole:Route@13227,whole:Route@13235,whole:Route@13786,whole:Route@13817,whole:Route@13950,whole:Route@14105,whole:Route@14119,whole:Route@14125,whole:Route@14297,whole:Route@14311,whole:Route@14317,whole:Route@14325,whole:Route@14334,whole:Route@5366,whole:Route@5380,whole:Route@5510,whole:Route@5528,whole:Route@5579,whole:Route@5650,whole:Route@5736,whole:Route@5775,whole:Route@7144,whole:Route@7176,whole:Route@7243,whole:Route@7469,whole:Route@7487,whole:Route@7497,whole:Route@7563,whole:Route@7680,whole:Route@7698,whole:Route@7708,whole:Route@7913,whole:Route@7931,whole:Route@7941,whole:Route@8119,whole:Route@8137,whole:Route@8147,whole:Route@8157,whole:Route@8166 671e0583250e1988a49682ec4e2e620c32ab3dcbee2ae29b3463fd31c05c9f91

+@legacy 550df1c2a982f0b1ed5e9b10e045768ea35c3c95293831ce847490e03b13a694 internal/domains/reconcile.go importJournalHosts legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: the set of hosts the import journal holds, for Reconcile's removal phase registry:Host@219,whole:ImportJournal@182,whole:ImportJournal@206 7071dbfa1f9fefd7c370d63afda0e6c7c15377d3c0bd44aa9ce66d582465e8b4

+internal/domains/reconcile.go importJournalHosts legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: the set of hosts the import journal holds, for Reconcile's removal phase registry:Host@219,whole:ImportJournal@182,whole:ImportJournal@206 7071dbfa1f9fefd7c370d63afda0e6c7c15377d3c0bd44aa9ce66d582465e8b4

+@legacy e4804d07885724a1a97328903bad2c57207d253d25e1eed4793e0c430d1385b5 internal/edge/edge.go Edge.ServeHTTP legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import gate checked after the door's scope and a gated row left out of the response cache; serving only registry:Gate@13482,registry:Gate@13542,registry:Gate@13600,registry:Host@13585,registry:ImportGate@16657,registry:Kind@11721,registry:Kind@16628,whole:Route@11724,whole:Route@12282,whole:Route@12377,whole:Route@12453,whole:Route@13485,whole:Route@13545,whole:Route@13588,whole:Route@13603,whole:Route@14416,whole:Route@16631,whole:Route@16660,whole:Route@17806,whole:Route@9739,whole:Route@9951 60872c023fee4d687076bd87284e0d057328d39900cf21eaefd73175ad9066f6

+internal/edge/edge.go Edge.ServeHTTP legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import gate checked after the door's scope and a gated row left out of the response cache; serving only registry:Gate@13482,registry:Gate@13542,registry:Gate@13600,registry:Host@13585,registry:ImportGate@16657,registry:Kind@11721,registry:Kind@16628,whole:Route@11724,whole:Route@12282,whole:Route@12377,whole:Route@12453,whole:Route@13485,whole:Route@13545,whole:Route@13588,whole:Route@13603,whole:Route@14416,whole:Route@16631,whole:Route@16660,whole:Route@17806,whole:Route@9739,whole:Route@9951 60872c023fee4d687076bd87284e0d057328d39900cf21eaefd73175ad9066f6

+@legacy 9f9f6c3a42b9671627223e15ad0848d72920067e081088fd5ba79d770a9dd8c0 internal/edge/importgate.go Edge.importGateAdmit legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import gate: a gated row admits only a GET carrying the verify token; anything else is a 503; serving only registry:Host@343,registry:Host@357,registry:ImportGate@274,registry:ImportGate@297,registry:ImportGate@417,whole:Route@197,whole:Route@250,whole:Route@261 6fdd512a0ab93db09fe6277151a34c5798951f0536673501ea0de522c1d4673d

+internal/edge/importgate.go Edge.importGateAdmit legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import gate: a gated row admits only a GET carrying the verify token; anything else is a 503; serving only registry:Host@343,registry:Host@357,registry:ImportGate@274,registry:ImportGate@297,registry:ImportGate@417,whole:Route@197,whole:Route@250,whole:Route@261 6fdd512a0ab93db09fe6277151a34c5798951f0536673501ea0de522c1d4673d

+internal/host/agent.go runAgent authority B,C,D,F rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with wireSeedPlacement called in the activator start's Configure step, before armMovesPass, and the startup sweep's result stored for the import rollback in Recover; read sites unchanged, offsets moved; main's B,C,D,F authority retained file:Exec@13674,file:Open@731,registry:App@10065,whole:Route@10057,whole:Route@22981 571e36a2207f4cb50b92c9d4296940418f5b90816f726e9053a543e08d1e2860

+@legacy b71c8b6fee13bdd44811f959a0bd36cf89590e2f627fcaa5323f208c73da2196 internal/host/edgesfile.go edgesFileLoop legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the box's seeds fields added to the edges file it publishes (withSeedsFields); a report, not a decision file:Read@2587 33e36a8d72d9b69790c3fc689205e3b2b4ed17d409abdd78ef736b8a0cdde5f1

+internal/host/edgesfile.go edgesFileLoop legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the box's seeds fields added to the edges file it publishes (withSeedsFields); a report, not a decision file:Read@2587 33e36a8d72d9b69790c3fc689205e3b2b4ed17d409abdd78ef736b8a0cdde5f1

+internal/host/movesfloor.go rootJudgeMovesPrev authority F,J4 rev3=PROPOSED-seeded-instances;basis=the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root): body of main's rootJudgePrev (authority F,J4) under a new name, byte for byte; rootJudgePrev is now a wrapper that calls it and the seeds half; main's F,J4 authority carried with the body file:Stat@113,file:Stat@314 9465a8b384042e42a5df4eba86a3f5e568c35ebe3bf80c59bb459e47813ccfd8

+internal/host/movesfloor.go rootJudgePrev authority F,J4 rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root): still declared, and reads nothing now: it joins rootJudgeMovesPrev, which holds its former two stats, and rootJudgeSeedsPrev. Kept as main's F,J4 row with no read site, pinned to the declaration 9771f604e5b8db6b6010c818eb8dca21273a1772d061bbe71bb5c029f0e7c55a

+@legacy fe06fc4683aaed59ea6c79f27ee6c443ffd9acc2eea3d4626e8c73171cb399db internal/host/moveslandinstall.go installRun.restore legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), in its moves worker: main's body with a leftover <db>.seed marker removed beside the database a landing installs; read sites unchanged file:Lstat@1980,file:Lstat@3200 87e110a47ac74745c4857971de4243f0568dd9539d498364e56b6057febf60da

+internal/host/moveslandinstall.go installRun.restore legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), in its moves worker: main's body with a leftover <db>.seed marker removed beside the database a landing installs; read sites unchanged file:Lstat@1980,file:Lstat@3200 87e110a47ac74745c4857971de4243f0568dd9539d498364e56b6057febf60da

+internal/host/movespass.go armPhase1 authority B2,C rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the S1 probe hook refusing a row whose import gate is set; main's B2,C authority retained registry:ImportGate@8279,whole:Route@8266,whole:Route@8408,whole:Route@8750,whole:Route@8878 f43d59bf5ac12d18c9a7c71377fe6049172b4e40240206d93738e6ad061f94ac

+@legacy 9ffe89e8ee77e96c065f9c0cd50a85d0a271760060be318c48f89ccfcdea1afd internal/host/seedsfloor.go judgeSeedsPrev legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root) through notePrev, and the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root) through rootJudgeSeedsPrev: root-executed and new. Writes or removes /opt/carlos/carlos.prev.seeds-allowed, the verdict the two system units' seeds clause reads. The floor file it judges by is in /data/.moves, which the agent (carlos) also writes. The seeds twin of judgePrevWith (authority F,J4 on main); legacy here is a placeholder file:Stat@286 5527bbb26794b8828798621a8be1669cc09a0cfcaad64fd475f04cb5ebba7eef

+internal/host/seedsfloor.go judgeSeedsPrev legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root) through notePrev, and the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root) through rootJudgeSeedsPrev: root-executed and new. Writes or removes /opt/carlos/carlos.prev.seeds-allowed, the verdict the two system units' seeds clause reads. The floor file it judges by is in /data/.moves, which the agent (carlos) also writes. The seeds twin of judgePrevWith (authority F,J4 on main); legacy here is a placeholder file:Stat@286 5527bbb26794b8828798621a8be1669cc09a0cfcaad64fd475f04cb5ebba7eef

+@legacy 49e1ccafc92b84db995223659f0e77ff40ff7053e1241d96ab84754e8d847504 internal/host/seedsfloor.go readLocalSeedsFloor legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root) and the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root); also the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), for its hourly refresh and its edges file: root-executed and new. The seeds floor every root check reads: the activation rule, the verdict on carlos.prev and the floor's own sync. The file is in /data/.moves, which the agent (carlos) also writes. The seeds twin of readLocalFloor (authority F,J4 on main); legacy here is a placeholder file:Stat@285 267922c15ad354f2302f8e53a85134f0826abff505597109df6f6f0a3d9dacc2

+internal/host/seedsfloor.go readLocalSeedsFloor legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root) and the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root); also the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), for its hourly refresh and its edges file: root-executed and new. The seeds floor every root check reads: the activation rule, the verdict on carlos.prev and the floor's own sync. The file is in /data/.moves, which the agent (carlos) also writes. The seeds twin of readLocalFloor (authority F,J4 on main); legacy here is a placeholder file:Stat@285 267922c15ad354f2302f8e53a85134f0826abff505597109df6f6f0a3d9dacc2

+@legacy 796f95e33cf1720884e7f7a3ea4c6d917a3cee0eab46f5bd59f34026ce3f83e1 internal/host/seedsfloor.go rootJudgeSeedsPrev legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root): root-executed and new. The adopt pass's seeds half: re-judges carlos.prev against the seeds floor under the prev lock, and does nothing on a box with neither file. The seeds twin of main's rootJudgePrev body (authority F,J4); legacy here is a placeholder file:Stat@119 b4716501adbd72975a3dbe0dc0ee63d96543e4b397610556012c1348d835b7f3

+internal/host/seedsfloor.go rootJudgeSeedsPrev legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root): root-executed and new. The adopt pass's seeds half: re-judges carlos.prev against the seeds floor under the prev lock, and does nothing on a box with neither file. The seeds twin of main's rootJudgePrev body (authority F,J4); legacy here is a placeholder file:Stat@119 b4716501adbd72975a3dbe0dc0ee63d96543e4b397610556012c1348d835b7f3

+@legacy 20c46ac39ac6130db496df3e8e820ffccb435df6ae27f7cb3be7c813488793d8 internal/host/seedwiring.go storeSeedObjects.Open legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): streams seeds/<host>/<id>/snapshot.db for the seed fallback and refuses a store that cannot stream file:Open@26,file:Open@329 b50c37c146b553190e2923ed6ef09703869f8a56cc673776158205f407a6af08

+internal/host/seedwiring.go storeSeedObjects.Open legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): streams seeds/<host>/<id>/snapshot.db for the seed fallback and refuses a store that cannot stream file:Open@26,file:Open@329 b50c37c146b553190e2923ed6ef09703869f8a56cc673776158205f407a6af08

+@legacy 929ed44f929a196608208a3470ed8be455e6c99684b275bba44e18b8af73e574 internal/host/seedwiring.go wireSeedPlacement legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): arms seeded instances on the box at startup: the claim flag, the data bucket, the record store and the provision pass's hooks; called from runAgent's Configure step registry:DBPath@1105 3b369313717811428079ebb7e50aceb96dd6014a6d5fd2673e7d4410d00e4ec0

+internal/host/seedwiring.go wireSeedPlacement legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): arms seeded instances on the box at startup: the claim flag, the data bucket, the record store and the provision pass's hooks; called from runAgent's Configure step registry:DBPath@1105 3b369313717811428079ebb7e50aceb96dd6014a6d5fd2673e7d4410d00e4ec0

+@legacy d1f5c8cfd62de79a66497555428048c33218ca13a3d8c34d907ccf75687378f9 internal/host/systemapply.go systemApplier.activationGuard legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): root-executed, changed. Main's body (accepted-legacy, rev3=J1) with the seeds floor's refusal checked first under the floor lock; the registry read is unchanged whole:Route@761 9f87adc40d645ed37d0c63fa3f045ca12ec765d2a2826016d667294cd94972e6

+internal/host/systemapply.go systemApplier.activationGuard legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): root-executed, changed. Main's body (accepted-legacy, rev3=J1) with the seeds floor's refusal checked first under the floor lock; the registry read is unchanged whole:Route@761 9f87adc40d645ed37d0c63fa3f045ca12ec765d2a2826016d667294cd94972e6

+@legacy eee815c386f4b027018c53ab304c07344736b7537bccdd05da1395c300d436c2 internal/host/systemapply.go systemApplier.activationRule legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): root-executed, changed. Main's body (accepted-legacy, rev3=J1) with the seeds floor's refusal checked first; the registry reads are unchanged whole:Route@778,whole:Route@785,whole:Route@987 44323c4af3e8fba1907a9b41c22dd982b419ab8e36a68d0fe56d1faa87bdaae5

+internal/host/systemapply.go systemApplier.activationRule legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): root-executed, changed. Main's body (accepted-legacy, rev3=J1) with the seeds floor's refusal checked first; the registry reads are unchanged whole:Route@778,whole:Route@785,whole:Route@987 44323c4af3e8fba1907a9b41c22dd982b419ab8e36a68d0fe56d1faa87bdaae5

+internal/host/units/carlos-system-recover.service external authority F,J4 rev3=PROPOSED-seeded-instances;basis=systemd (PID 1) runs its /bin/sh ExecStart as root at boot; the shell execs carlos.prev system floor-allows-prev and then carlos or carlos.prev system apply --recover, all root: main's unit with a second clause in the choice of binary: once the seeds floor line is there and not empty, carlos.prev runs only when floor-allows-prev says its seeds verdict equals it. A new root read of a file in /data/.moves, which the agent (carlos) also writes; main's F,J4 authority retained file:external@0 30a521da765ab4ce9136f3a36497d081c2caaa38aba73c4f0377b0c428ae1d80

+internal/host/units/carlos-system-update.service external authority F,J4 rev3=PROPOSED-seeded-instances;basis=systemd (PID 1) runs its /bin/sh ExecStart as root when an update is requested; the shell execs carlos.prev system floor-allows-prev and then carlos or carlos.prev system apply, all root: main's unit with a second clause in the choice of binary: once the seeds floor line is there and not empty, carlos.prev runs only when floor-allows-prev says its seeds verdict equals it. A new root read of a file in /data/.moves, which the agent (carlos) also writes; main's F,J4 authority retained file:external@0 77d1b854d7f79e1874a59409eecb56df782fd7a3defc63cf791f7cc59c707195

+@legacy b72d36704508b90a072f1337905c70bd1326a4461b0bbdd1dcff0e9b0d492d58 internal/hostops/backfill_seeds.go CollectCensusSeeds legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. no process yet: nothing in the tree calls it. It is written for the box's census collector, whose identity is not decided: the box's seed state for the claim activation census. Until a collector calls it, CensusReport.Seeds stays nil and activation refuses. Whoever collects decides whether this is a root read; legacy here is a placeholder registry:Host@384,registry:ImportGate@329,whole:Route@315 ce08b3b3bb50b4c9b6655713e02dad3f9ff87e133b99405beb928fb68d9c8b6a

+internal/hostops/backfill_seeds.go CollectCensusSeeds legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. no process yet: nothing in the tree calls it. It is written for the box's census collector, whose identity is not decided: the box's seed state for the claim activation census. Until a collector calls it, CensusReport.Seeds stays nil and activation refuses. Whoever collects decides whether this is a root read; legacy here is a placeholder registry:Host@384,registry:ImportGate@329,whole:Route@315 ce08b3b3bb50b4c9b6655713e02dad3f9ff87e133b99405beb928fb68d9c8b6a

+@legacy 72d0b693d242bd56673d0a78f45edd4e7914ebec6d0f978fbe848ce05344cb9e internal/provision/provision.go MoveRequest legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@169 d2dcb74b965027a7a0d4c54a6b818cb6bb64e84bfeab0b9181863c98454f28f1

+internal/provision/provision.go MoveRequest legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@169 d2dcb74b965027a7a0d4c54a6b818cb6bb64e84bfeab0b9181863c98454f28f1

+@legacy 3ccde201b9538b078e038ff03eae15fd45e377093796abaec8863c2ce0ecbdce internal/provision/provision.go MoveStartTransition legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs, directly and through hostops.StartClaimMoveRecord; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@164 a7d33b177b9de6830a113b63ddd4a0aab2d5ac685589a280440ffff17baa1986

+internal/provision/provision.go MoveStartTransition legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs, directly and through hostops.StartClaimMoveRecord; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@164 a7d33b177b9de6830a113b63ddd4a0aab2d5ac685589a280440ffff17baa1986

+@legacy 72772489a14490060b8fb00dfb247ca5d736641602c087bee1364c8f9d15a156 internal/provision/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import journal read before the records are acted on (journalPass), seeded records dispatched first (seedAction), journaled hosts kept out of the removal phase and a row's seed column converged from its record; the agent's own pass registry:Account@19247,registry:Account@20339,registry:Account@33924,registry:Account@33970,registry:App@19220,registry:App@20312,registry:App@33944,registry:App@33982,registry:ClaimOwnership@19834,registry:DBPath@26035,registry:DBPath@26050,registry:DBPath@26296,registry:DBPath@26827,registry:DBPath@26840,registry:Gate@22975,registry:Gate@23115,registry:Gate@23380,registry:Hibernate@21953,registry:Hibernate@22271,registry:Hibernate@22622,registry:Hibernate@22910,registry:Host@13124,registry:Host@33902,registry:Host@34072,registry:Host@34169,registry:Host@34284,registry:Host@34629,registry:Host@34726,registry:Host@34862,registry:Host@35020,registry:Host@35122,registry:Kind@19976,registry:Kind@20239,registry:Kind@25953,registry:Kind@25966,registry:Kind@26076,registry:Kind@26089,registry:Kind@26738,registry:Kind@26749,registry:Kind@33138,registry:Kind@34853,registry:Kind@35011,registry:Kind@35113,registry:Pool@33230,registry:Provisioned@19196,registry:Provisioned@20288,registry:Provisioned@33188,registry:Region@33219,registry:Replication@22356,registry:Replication@22483,registry:Seed@24455,registry:SeedSource@23960,registry:Socket@26001,registry:Socket@26016,registry:Socket@26313,registry:Socket@26797,registry:Socket@26810,registry:Unit@25919,registry:Unit@25932,registry:Unit@26764,registry:Unit@26775,whole:ClaimOwnership@19837,whole:ClaimOwnership@19854,whole:Route@13106,whole:Route@13117,whole:Route@13135,whole:Route@14235,whole:Route@14535,whole:Route@14542,whole:Route@14582,whole:Route@14943,whole:Route@15261,whole:Route@16122,whole:Route@16478,whole:Route@16487,whole:Route@16533,whole:Route@18841,whole:Route@19312,whole:Route@19322,whole:Route@19679,whole:Route@19686,whole:Route@19754,whole:Route@20077,whole:Route@20720,whole:Route@22043,whole:Route@26145,whole:Route@27624,whole:Route@27669,whole:Route@27679,whole:Route@28542,whole:Route@29294,whole:Route@32586,whole:Route@33255,whole:Route@34933 4dbcb2300e2598da672bac77c37de9479ce04f7a29cfbe9ded8f36baed05abb6

+internal/provision/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import journal read before the records are acted on (journalPass), seeded records dispatched first (seedAction), journaled hosts kept out of the removal phase and a row's seed column converged from its record; the agent's own pass registry:Account@19247,registry:Account@20339,registry:Account@33924,registry:Account@33970,registry:App@19220,registry:App@20312,registry:App@33944,registry:App@33982,registry:ClaimOwnership@19834,registry:DBPath@26035,registry:DBPath@26050,registry:DBPath@26296,registry:DBPath@26827,registry:DBPath@26840,registry:Gate@22975,registry:Gate@23115,registry:Gate@23380,registry:Hibernate@21953,registry:Hibernate@22271,registry:Hibernate@22622,registry:Hibernate@22910,registry:Host@13124,registry:Host@33902,registry:Host@34072,registry:Host@34169,registry:Host@34284,registry:Host@34629,registry:Host@34726,registry:Host@34862,registry:Host@35020,registry:Host@35122,registry:Kind@19976,registry:Kind@20239,registry:Kind@25953,registry:Kind@25966,registry:Kind@26076,registry:Kind@26089,registry:Kind@26738,registry:Kind@26749,registry:Kind@33138,registry:Kind@34853,registry:Kind@35011,registry:Kind@35113,registry:Pool@33230,registry:Provisioned@19196,registry:Provisioned@20288,registry:Provisioned@33188,registry:Region@33219,registry:Replication@22356,registry:Replication@22483,registry:Seed@24455,registry:SeedSource@23960,registry:Socket@26001,registry:Socket@26016,registry:Socket@26313,registry:Socket@26797,registry:Socket@26810,registry:Unit@25919,registry:Unit@25932,registry:Unit@26764,registry:Unit@26775,whole:ClaimOwnership@19837,whole:ClaimOwnership@19854,whole:Route@13106,whole:Route@13117,whole:Route@13135,whole:Route@14235,whole:Route@14535,whole:Route@14542,whole:Route@14582,whole:Route@14943,whole:Route@15261,whole:Route@16122,whole:Route@16478,whole:Route@16487,whole:Route@16533,whole:Route@18841,whole:Route@19312,whole:Route@19322,whole:Route@19679,whole:Route@19686,whole:Route@19754,whole:Route@20077,whole:Route@20720,whole:Route@22043,whole:Route@26145,whole:Route@27624,whole:Route@27669,whole:Route@27679,whole:Route@28542,whole:Route@29294,whole:Route@32586,whole:Route@33255,whole:Route@34933 4dbcb2300e2598da672bac77c37de9479ce04f7a29cfbe9ded8f36baed05abb6

+internal/provision/reconcile.go RouteFor authority C,E3 rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos); also root, in the claim root's landing registration (ClaimRootHTTP.rootLandingRoute) and the relocation install (relocationRecord): main's body with one more field: the row's seed column, derived from the record's seed (SeedColumn). Every caller gets it, the two root ones included, so a root-registered row for a seeded record now carries the seed the activator places from; main's C,E3 authority retained registry:Addr@1268,registry:Addrs@1277,registry:DBPath@1216,registry:DBPath@914,registry:Health@1287,registry:Hibernate@1160,registry:Socket@1178,registry:Socket@876,whole:Route@1325 606aab27963d08e9c8f465455489840ccf80a3d190d7aca1a67e19efa9fe3075

+@legacy 30074bbbff3f457f698eadd3615beded196a8daad70ebe759aa458da1a35f11b internal/provision/seed.go SeedAbortBecause legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the record transition the --from door aborts a seed with, recording its reason file:Open@432 94860f2e04f2f87802f7d120661f5965030d2ea041ad9bab1bb1cf83b7a2da39

+internal/provision/seed.go SeedAbortBecause legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the record transition the --from door aborts a seed with, recording its reason file:Open@432 94860f2e04f2f87802f7d120661f5965030d2ea041ad9bab1bb1cf83b7a2da39

+@legacy 920b98c92cb35061a68856daf04106c305ba993b2dde555f7f37da92b1f72a16 internal/provision/seedreconcile.go journalPass legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the box's import journal before the records are acted on and drives each row's host; on a claim-armed box it only protects the hosts and acts on nothing registry:Host@1689,registry:Host@1915,registry:Host@2249,registry:Host@2624,registry:Host@3129,registry:Host@3323,registry:Host@3368,registry:Host@3459,registry:Host@3586,registry:Host@3620,registry:Host@3725,registry:Host@3918,registry:Host@533,registry:Host@558,registry:Host@765,registry:RecordKey@2143,registry:RecordKey@2271,registry:SeedID@1697,registry:SeedID@1923,registry:SeedID@2257,registry:SeedID@2632,registry:SeedID@2775,registry:SeedID@3137,registry:SeedID@3376,registry:SeedID@3594,registry:SeedID@3926,registry:SeedID@773,registry:State@1707,registry:State@2352,registry:State@2642,whole:ImportJournal@1778,whole:ImportJournal@2465,whole:ImportJournal@2820,whole:ImportJournal@2979,whole:ImportJournal@514 ef46f7c4ae634f472ac53b4754c030f0f24317aa3bd8a13598e80aa23269a528

+internal/provision/seedreconcile.go journalPass legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the box's import journal before the records are acted on and drives each row's host; on a claim-armed box it only protects the hosts and acts on nothing registry:Host@1689,registry:Host@1915,registry:Host@2249,registry:Host@2624,registry:Host@3129,registry:Host@3323,registry:Host@3368,registry:Host@3459,registry:Host@3586,registry:Host@3620,registry:Host@3725,registry:Host@3918,registry:Host@533,registry:Host@558,registry:Host@765,registry:RecordKey@2143,registry:RecordKey@2271,registry:SeedID@1697,registry:SeedID@1923,registry:SeedID@2257,registry:SeedID@2632,registry:SeedID@2775,registry:SeedID@3137,registry:SeedID@3376,registry:SeedID@3594,registry:SeedID@3926,registry:SeedID@773,registry:State@1707,registry:State@2352,registry:State@2642,whole:ImportJournal@1778,whole:ImportJournal@2465,whole:ImportJournal@2820,whole:ImportJournal@2979,whole:ImportJournal@514 ef46f7c4ae634f472ac53b4754c030f0f24317aa3bd8a13598e80aa23269a528

+@legacy 3ab15423c44cdfb0a3a17b07171937785d51817aac422dd9fa717db353b143de internal/provision/seedreconcile.go journalRecord legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): finds the record a journal row belongs to, from the pass's set or the store registry:Host@198,registry:Host@277,registry:Host@565,registry:RecordKey@209,registry:RecordKey@331,registry:RecordKey@573,whole:ImportJournal@457 ed4f8cd033967157e6ba96cb84f95da7ed8a08898f18f8c66334eaeb62b97453

+internal/provision/seedreconcile.go journalRecord legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): finds the record a journal row belongs to, from the pass's set or the store registry:Host@198,registry:Host@277,registry:Host@565,registry:RecordKey@209,registry:RecordKey@331,registry:RecordKey@573,whole:ImportJournal@457 ed4f8cd033967157e6ba96cb84f95da7ed8a08898f18f8c66334eaeb62b97453

+@legacy bdc720b8dc9cd3336ac6703f5b702c13873c5b9a041d89b1adda86cd28eaed36 internal/provision/seedreconcile.go purgeAbortedFromLocal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes an aborted --from seed's local database through the activator's hooks, under its fence, when no row holds the host and the marker names the seed whole:Route@1742 f6833aede4951dd975c11c0735c52678f7b4eb1a0934588c428e477d6c78ca78

+internal/provision/seedreconcile.go purgeAbortedFromLocal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes an aborted --from seed's local database through the activator's hooks, under its fence, when no row holds the host and the marker names the seed whole:Route@1742 f6833aede4951dd975c11c0735c52678f7b4eb1a0934588c428e477d6c78ca78

+@legacy c05652bc67a204fa1e146cd3c6eec9844c923ec2a329713967b848d851f305bf internal/provision/seedreconcile.go retireAbortedSeedRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): retires the row this box minted for a --from seed that was aborted after its publish landed, through the pass's ordinary retire, once it is shown to be the record's own provisioned row in scope registry:Account@233,registry:App@262,registry:Host@1066,registry:Host@479,registry:Host@743,registry:Host@917,registry:Kind@1057,registry:Kind@129,registry:Kind@734,registry:Kind@908,registry:Pool@198,registry:Provisioned@156,registry:Region@187,whole:Route@223,whole:Route@814 9913af31435d24752c4a39c540c0997439ea347fa066e298ca73d224f7961ae7

+internal/provision/seedreconcile.go retireAbortedSeedRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): retires the row this box minted for a --from seed that was aborted after its publish landed, through the pass's ordinary retire, once it is shown to be the record's own provisioned row in scope registry:Account@233,registry:App@262,registry:Host@1066,registry:Host@479,registry:Host@743,registry:Host@917,registry:Kind@1057,registry:Kind@129,registry:Kind@734,registry:Kind@908,registry:Pool@198,registry:Provisioned@156,registry:Region@187,whole:Route@223,whole:Route@814 9913af31435d24752c4a39c540c0997439ea347fa066e298ca73d224f7961ae7

+@legacy 69ea86c0c9a4acc511f3173cfecca2c66c6f456fd85aca2a3cdc4570089fcb0e internal/provision/seedreconcile.go seedAction legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the per-record dispatch for seeded records: handle as an ordinary record, swap, finish an abort, or skip registry:ImportGate@2223,whole:Route@415 b8f6347a59575b2d4c3865e8827e1381f9c8928f23f2cd87fbb640420c84ffcf

+internal/provision/seedreconcile.go seedAction legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the per-record dispatch for seeded records: handle as an ordinary record, swap, finish an abort, or skip registry:ImportGate@2223,whole:Route@415 b8f6347a59575b2d4c3865e8827e1381f9c8928f23f2cd87fbb640420c84ffcf

+@legacy a24203b3fb746bd4d8b753506c2f8cdefc3d642ca28e1c6b6e13e7b1a9390911 internal/provision/seedreconcile.go startRollback legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands an abandoned import to its rollback; a dry run starts nothing registry:Host@227,registry:SeedID@235,whole:ImportJournal@291 c6afd408a1fe7b065596dbd62ce7d92d166b7a7bc74ea5a58fc95a0668f56933

+internal/provision/seedreconcile.go startRollback legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands an abandoned import to its rollback; a dry run starts nothing registry:Host@227,registry:SeedID@235,whole:ImportJournal@291 c6afd408a1fe7b065596dbd62ce7d92d166b7a7bc74ea5a58fc95a0668f56933

+@legacy ab34d6299181c151d8e9ce6fa60573657057c0bf08b9434a49aa0e396fd174f7 internal/provision/seedrollback.go cleanUpImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's bucket and journal cleanup, run from cleanup-pending; it fences and stops nothing registry:Host@1030,registry:Host@1157,registry:Host@1225,registry:Host@1321,registry:Host@1403,registry:Host@1504,registry:Host@1621,registry:Host@168,registry:Host@2159,registry:Host@316,registry:Host@389,registry:Host@523,registry:Host@834,registry:SeedID@1038,registry:SeedID@1165,registry:SeedID@1329,registry:SeedID@1411,registry:SeedID@1512,registry:SeedID@1629,registry:SeedID@176,registry:SeedID@1893,registry:SeedID@1999,registry:SeedID@2167,registry:SeedID@324,registry:SeedID@397,registry:SeedID@531,registry:SeedID@842,whole:ImportJournal@725,whole:ImportJournal@929 08c1f537f2bd62c3349958f742ec460f2741433aa09d66e31a4013ae193c5d42

+internal/provision/seedrollback.go cleanUpImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's bucket and journal cleanup, run from cleanup-pending; it fences and stops nothing registry:Host@1030,registry:Host@1157,registry:Host@1225,registry:Host@1321,registry:Host@1403,registry:Host@1504,registry:Host@1621,registry:Host@168,registry:Host@2159,registry:Host@316,registry:Host@389,registry:Host@523,registry:Host@834,registry:SeedID@1038,registry:SeedID@1165,registry:SeedID@1329,registry:SeedID@1411,registry:SeedID@1512,registry:SeedID@1629,registry:SeedID@176,registry:SeedID@1893,registry:SeedID@1999,registry:SeedID@2167,registry:SeedID@324,registry:SeedID@397,registry:SeedID@531,registry:SeedID@842,whole:ImportJournal@725,whole:ImportJournal@929 08c1f537f2bd62c3349958f742ec460f2741433aa09d66e31a4013ae193c5d42

+@legacy 87e009ac107f9f6660857743fa1d5741e2fa4aae8e6faf70372ceefdf5a49933 internal/provision/seedrollback.go importRowOf legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row is the import's own, at the nested path the swap gave it registry:DBPath@129,registry:Host@168,whole:ImportJournal@123,whole:Route@119 2aa2cd524d8d5da0a949194169af37ca9d1c5d0409acaa9fa73b53172d8d666a

+internal/provision/seedrollback.go importRowOf legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row is the import's own, at the nested path the swap gave it registry:DBPath@129,registry:Host@168,whole:ImportJournal@123,whole:Route@119 2aa2cd524d8d5da0a949194169af37ca9d1c5d0409acaa9fa73b53172d8d666a

+@legacy 43fa3f71fc28f062c4fd942aca664ad7787ad9e88110660851bf23bb1f247aa5 internal/provision/seedrollback.go journalRecordByKey legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads and checks the record a journal row names registry:Host@324,registry:RecordKey@134,registry:RecordKey@373,registry:RecordKey@443 3424932d53adbfd085c8ae4fb8dab4b0619ac0e56946a69087c4561d1355178a

+internal/provision/seedrollback.go journalRecordByKey legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads and checks the record a journal row names registry:Host@324,registry:RecordKey@134,registry:RecordKey@373,registry:RecordKey@443 3424932d53adbfd085c8ae4fb8dab4b0619ac0e56946a69087c4561d1355178a

+@legacy ea52e1fdac59cd7909d203ac63cd78492a91f75ead0486af125e29f0aec1e540 internal/provision/seedrollback.go removeOrphanedLocal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's local removal for an import whose row something removed, under the activator's fence; it retires the import's instance key first registry:EnvBefore@1254,registry:FenceGen@234,registry:FenceGen@663,registry:FenceGen@912,registry:Host@1049,registry:Host@1246,registry:Host@1351,registry:Host@1438,registry:Host@1559,registry:Host@157,registry:Host@1717,registry:Host@226,registry:Host@351,registry:Host@552,registry:Host@616,registry:Host@655,registry:Host@767,registry:Host@904,registry:SeedID@1057,registry:SeedID@1359,registry:SeedID@1567,registry:SeedID@1725,registry:SeedID@359,registry:SeedID@406,registry:SeedID@560,registry:SeedID@775,whole:Route@812 2e3bce663237c84674ef3cf697e08a77b755a36be80d3fc65478ad725d0b06cf

+internal/provision/seedrollback.go removeOrphanedLocal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's local removal for an import whose row something removed, under the activator's fence; it retires the import's instance key first registry:EnvBefore@1254,registry:FenceGen@234,registry:FenceGen@663,registry:FenceGen@912,registry:Host@1049,registry:Host@1246,registry:Host@1351,registry:Host@1438,registry:Host@1559,registry:Host@157,registry:Host@1717,registry:Host@226,registry:Host@351,registry:Host@552,registry:Host@616,registry:Host@655,registry:Host@767,registry:Host@904,registry:SeedID@1057,registry:SeedID@1359,registry:SeedID@1567,registry:SeedID@1725,registry:SeedID@359,registry:SeedID@406,registry:SeedID@560,registry:SeedID@775,whole:Route@812 2e3bce663237c84674ef3cf697e08a77b755a36be80d3fc65478ad725d0b06cf

+@legacy bcbf922596b132a1747b0874d05f673bc8da98dc79e0278723a1a81139171bab internal/provision/seedrollback.go replicaIsTheImports legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decides whether the host's replica is the import's to delete registry:Host@1076,registry:RecordKey@1093,registry:SeedID@208 2b1925d38da3102d13d372a700a458379f0936b393a0e06449e05ab9cea929ed

+internal/provision/seedrollback.go replicaIsTheImports legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decides whether the host's replica is the import's to delete registry:Host@1076,registry:RecordKey@1093,registry:SeedID@208 2b1925d38da3102d13d372a700a458379f0936b393a0e06449e05ab9cea929ed

+@legacy cb6d92bc93ac2b08e699717be0067aa1d0e2d0db60a4cb246ac01c5ab7656e97 internal/provision/seedrollback.go rollBackRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's route steps: close the gate, fence and stop through the activator, retire the import's key, remove the local database, restore the original route; each step resumes from the journal registry:DBPath@3201,registry:EnvBefore@3221,registry:FenceGen@2198,registry:FenceGen@2280,registry:FenceGen@2995,registry:FenceGen@3855,registry:FenceGen@828,registry:Host@1419,registry:Host@1497,registry:Host@1603,registry:Host@1681,registry:Host@1880,registry:Host@2190,registry:Host@2272,registry:Host@2444,registry:Host@2654,registry:Host@2756,registry:Host@2987,registry:Host@3131,registry:Host@3213,registry:Host@3319,registry:Host@3480,registry:Host@3685,registry:Host@3790,registry:Host@3847,registry:Host@4001,registry:Host@403,registry:Host@520,registry:Host@820,registry:Host@976,registry:ImportGate@2928,registry:SeedID@1427,registry:SeedID@1505,registry:SeedID@1611,registry:SeedID@1722,registry:SeedID@1736,registry:SeedID@1888,registry:SeedID@2452,registry:SeedID@2764,registry:SeedID@3139,registry:SeedID@3327,registry:SeedID@3488,registry:SeedID@3693,registry:SeedID@3798,registry:SeedID@4009,registry:SeedID@528,registry:SeedID@984,registry:State@1158,registry:State@1748,registry:State@3868,registry:State@764,whole:ImportJournal@1003,whole:ImportJournal@1452,whole:ImportJournal@1636,whole:ImportJournal@1708,whole:ImportJournal@1898,whole:ImportJournal@1918,whole:ImportJournal@1933,whole:ImportJournal@1938,whole:ImportJournal@2476,whole:ImportJournal@2788,whole:ImportJournal@2864,whole:ImportJournal@2879,whole:ImportJournal@2922,whole:ImportJournal@3158,whole:ImportJournal@3352,whole:ImportJournal@3513,whole:ImportJournal@3822,whole:ImportJournal@4030,whole:ImportJournal@552,whole:ImportJournal@606,whole:Route@2635,whole:Route@2816,whole:Route@2917,whole:Route@3392,whole:Route@3913,whole:Route@568,whole:Route@601 f95ea47fc49fc54387e06aba7d1797a3b561b267dc6453873896973db4d8bc69

+internal/provision/seedrollback.go rollBackRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's route steps: close the gate, fence and stop through the activator, retire the import's key, remove the local database, restore the original route; each step resumes from the journal registry:DBPath@3201,registry:EnvBefore@3221,registry:FenceGen@2198,registry:FenceGen@2280,registry:FenceGen@2995,registry:FenceGen@3855,registry:FenceGen@828,registry:Host@1419,registry:Host@1497,registry:Host@1603,registry:Host@1681,registry:Host@1880,registry:Host@2190,registry:Host@2272,registry:Host@2444,registry:Host@2654,registry:Host@2756,registry:Host@2987,registry:Host@3131,registry:Host@3213,registry:Host@3319,registry:Host@3480,registry:Host@3685,registry:Host@3790,registry:Host@3847,registry:Host@4001,registry:Host@403,registry:Host@520,registry:Host@820,registry:Host@976,registry:ImportGate@2928,registry:SeedID@1427,registry:SeedID@1505,registry:SeedID@1611,registry:SeedID@1722,registry:SeedID@1736,registry:SeedID@1888,registry:SeedID@2452,registry:SeedID@2764,registry:SeedID@3139,registry:SeedID@3327,registry:SeedID@3488,registry:SeedID@3693,registry:SeedID@3798,registry:SeedID@4009,registry:SeedID@528,registry:SeedID@984,registry:State@1158,registry:State@1748,registry:State@3868,registry:State@764,whole:ImportJournal@1003,whole:ImportJournal@1452,whole:ImportJournal@1636,whole:ImportJournal@1708,whole:ImportJournal@1898,whole:ImportJournal@1918,whole:ImportJournal@1933,whole:ImportJournal@1938,whole:ImportJournal@2476,whole:ImportJournal@2788,whole:ImportJournal@2864,whole:ImportJournal@2879,whole:ImportJournal@2922,whole:ImportJournal@3158,whole:ImportJournal@3352,whole:ImportJournal@3513,whole:ImportJournal@3822,whole:ImportJournal@4030,whole:ImportJournal@552,whole:ImportJournal@606,whole:Route@2635,whole:Route@2816,whole:Route@2917,whole:Route@3392,whole:Route@3913,whole:Route@568,whole:Route@601 f95ea47fc49fc54387e06aba7d1797a3b561b267dc6453873896973db4d8bc69

+@legacy e7db259029e2be41dab1e3144f36afb3984c6d460bb2a7d61472d05510118601 internal/provision/seedrollback.go rollbackImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback, driven by the journal; dispatches on the journal's state registry:Host@244,registry:Host@426,registry:Host@760,registry:SeedID@252,registry:SeedID@434,registry:SeedID@768,registry:State@464,registry:State@778,whole:ImportJournal@553,whole:ImportJournal@593,whole:ImportJournal@832 4ea6357fead354abe0b96cd21b590dc2fb0e1d8af5bed5c65dd7908ebeb437d0

+internal/provision/seedrollback.go rollbackImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback, driven by the journal; dispatches on the journal's state registry:Host@244,registry:Host@426,registry:Host@760,registry:SeedID@252,registry:SeedID@434,registry:SeedID@768,registry:State@464,registry:State@778,whole:ImportJournal@553,whole:ImportJournal@593,whole:ImportJournal@832 4ea6357fead354abe0b96cd21b590dc2fb0e1d8af5bed5c65dd7908ebeb437d0

+@legacy 0cd8e3ef986dfb1398e96846f8c487504fae3d7c694596388b6bc9b1fab1dd68 internal/provision/seedswap.go importRefusal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's predicates in order; a refusal is recorded on the record registry:App@1095,registry:App@666,registry:App@744,registry:App@901,whole:Route@277,whole:Route@391,whole:Route@537,whole:Route@799,whole:Route@862 f30071bc66ecde38bc177b23d0ea6386c15b2494f8d9aaa4a90b1614422720fc

+internal/provision/seedswap.go importRefusal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's predicates in order; a refusal is recorded on the record registry:App@1095,registry:App@666,registry:App@744,registry:App@901,whole:Route@277,whole:Route@391,whole:Route@537,whole:Route@799,whole:Route@862 f30071bc66ecde38bc177b23d0ea6386c15b2494f8d9aaa4a90b1614422720fc

+@legacy 5a1058b7fb785eb3aa1add7f6c1ba689d25a348a9fffae9c19edf31050fe4cf2 internal/provision/seedswap.go importRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): builds the gated exec row the swap installs, from the record through RouteFor at the nested paths registry:ImportGate@218,whole:Route@264 c5824165d9e84b633b8783496158544a93505307bb3bcb8736cf06f588c8bdbc

+internal/provision/seedswap.go importRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): builds the gated exec row the swap installs, from the record through RouteFor at the nested paths registry:ImportGate@218,whole:Route@264 c5824165d9e84b633b8783496158544a93505307bb3bcb8736cf06f588c8bdbc

+@legacy d5f76b94aa5e13e6940f4e4f6d8de5befed03c4452bce6677ca03d11d7f3b5fc internal/provision/seedswap.go importShape legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether the legacy row is an addr-backed instance or service this import may take over registry:Addr@182,registry:Addrs@199,registry:Backing@288,registry:Canary@448,registry:Caps@372,registry:ClaimOwnership@595,registry:FleetBox@483,registry:Hibernate@554,registry:Kind@127,registry:Kind@529,registry:Kind@61,registry:Kind@86,registry:Platform@409,registry:Provisioned@243,registry:Region@711,registry:Socket@141,registry:Tunnel@331,whole:ClaimOwnership@598 4fac331384f5aec6baf7eaaebaebb81202f969dfc6f2e4ab9217df7030b4fcf2

+internal/provision/seedswap.go importShape legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether the legacy row is an addr-backed instance or service this import may take over registry:Addr@182,registry:Addrs@199,registry:Backing@288,registry:Canary@448,registry:Caps@372,registry:ClaimOwnership@595,registry:FleetBox@483,registry:Hibernate@554,registry:Kind@127,registry:Kind@529,registry:Kind@61,registry:Kind@86,registry:Platform@409,registry:Provisioned@243,registry:Region@711,registry:Socket@141,registry:Tunnel@331,whole:ClaimOwnership@598 4fac331384f5aec6baf7eaaebaebb81202f969dfc6f2e4ab9217df7030b4fcf2

+@legacy 59f2e1f8c03ad5027af159c9ec2b892d381396a8a3a953114cb0b9ea73667799 internal/provision/seedswap.go importUngateable legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): why a swap must not run at all: no verify hash, a bad host or seed id, or a row the activator would not manage registry:Hibernate@350,whole:Route@390 73f88d6afe9c79b434a71da1fbfd01159c33bf3cc78ff5c1de94ca9cbf75c212

+internal/provision/seedswap.go importUngateable legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): why a swap must not run at all: no verify hash, a bad host or seed id, or a row the activator would not manage registry:Hibernate@350,whole:Route@390 73f88d6afe9c79b434a71da1fbfd01159c33bf3cc78ff5c1de94ca9cbf75c212

+@legacy 7288a45f49a94e839ef60cf61ddb290a9bae3395528874e4933f2bc012428931 internal/provision/seedswap.go operatorFiled legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row may be taken only through the operator's assignment whole:Route@123,whole:Route@62 ced99f42334595b13ff5599e5e820ff0a9da5ca36abe83cf8ea81cef93c61259

+internal/provision/seedswap.go operatorFiled legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row may be taken only through the operator's assignment whole:Route@123,whole:Route@62 ced99f42334595b13ff5599e5e820ff0a9da5ca36abe83cf8ea81cef93c61259

+@legacy 0e0151d3af3f0351fc457eecbd9d3e6a0cb857a8d7b501b24ea7f51900fed1a3 internal/provision/seedswap.go swapImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import's swap: the journal first, then the predicates, then one registry transaction, then the record's CAS to swapped registry:DBPath@4032,registry:HoldOp@2290,registry:HoldOp@2406,registry:RecordKey@1204,registry:SeedID@1139,registry:SeedID@1379,registry:State@1166,registry:State@1389,whole:ImportJournal@1123,whole:ImportJournal@4468,whole:Route@1530,whole:Route@2271,whole:Route@2645,whole:Route@3053,whole:Route@3480,whole:Route@4322,whole:Route@4333,whole:Route@4477 af87cf52f0588a695e273f6719c74ad9738db80cbb07282e0dac2a993e610016

+internal/provision/seedswap.go swapImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import's swap: the journal first, then the predicates, then one registry transaction, then the record's CAS to swapped registry:DBPath@4032,registry:HoldOp@2290,registry:HoldOp@2406,registry:RecordKey@1204,registry:SeedID@1139,registry:SeedID@1379,registry:State@1166,registry:State@1389,whole:ImportJournal@1123,whole:ImportJournal@4468,whole:Route@1530,whole:Route@2271,whole:Route@2645,whole:Route@3053,whole:Route@3480,whole:Route@4322,whole:Route@4333,whole:Route@4477 af87cf52f0588a695e273f6719c74ad9738db80cbb07282e0dac2a993e610016

+@legacy 9fa9738e5a033bab3cccb6cb91cf5db0330802f183f52cf4f6f0794bc74927c8 internal/registry/coldhandover.go Registry.RestoreClaimRows legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); its caller is hostbox's cold handover: main's body with the route insert bound through routeArgs and placeholders, the helpers Upsert now uses, so a restored row carries every column including seed_source and import_gate; the remote arm is unchanged file:QueryRowContext@1520,file:QueryRowContext@1947,file:QueryRowContext@2222,file:QueryRowContext@2563,file:QueryRowContext@3666,registry:Attempts@4310,registry:ClaimIncarnation@1004,registry:ClaimIncarnation@1026,registry:ClaimIncarnation@4360,registry:ClaimIncarnation@442,registry:ClaimIncarnation@472,registry:ClaimOwner@1098,registry:ClaimOwner@1114,registry:ClaimOwner@4394,registry:ClaimOwnership@331,registry:ClaimOwnership@368,registry:ClaimOwnership@661,registry:ClaimOwnership@703,registry:ClaimOwnership@857,registry:ClaimOwnership@895,registry:ClaimOwnership@947,registry:ClaimRowID@3376,registry:ClaimRowID@3514,registry:ClaimRowID@4408,registry:ClaimStamp@1057,registry:ClaimStamp@1073,registry:ClaimStamp@4380,registry:ClaimStamp@503,registry:ClaimStamp@528,registry:Contents@2973,registry:CreatedAt@4322,registry:DueAt@4335,registry:Host@2020,registry:Host@2306,registry:Host@3356,registry:Host@3498,registry:Host@3786,registry:Host@3803,registry:Host@405,registry:Host@4226,registry:Host@423,registry:Host@975,registry:Host@985,registry:Kind@4242,registry:LastAt@4276,registry:LastMs@4300,registry:LastStatus@4286,registry:Name@2317,registry:Name@3506,registry:Name@4234,registry:NextAt@4266,registry:Path@4258,registry:Registration@3589,registry:Registration@4344,registry:Route@1026,registry:Route@1073,registry:Route@1114,registry:Route@2020,registry:Route@2116,registry:Route@331,registry:Route@3356,registry:Route@3376,registry:Route@3398,registry:Route@368,registry:Route@3786,registry:Route@3803,registry:Route@4032,registry:Route@405,registry:Route@423,registry:Route@442,registry:Route@472,registry:Route@503,registry:Route@528,registry:Route@638,registry:Route@649,registry:Route@985,registry:Spec@4250,registry:Timers@2185,registry:Timers@3458,registry:Timers@4097,registry:Timers@556,registry:Timers@575,registry:Timers@814,registry:Timers@838,registry:remote@121,registry:remote@151,registry:sql@1187,whole:ClaimOwnership@341,whole:ClaimOwnership@379,whole:ClaimOwnership@668,whole:ClaimOwnership@709,whole:ClaimOwnership@859,whole:ClaimOwnership@897,whole:ClaimOwnership@949,whole:ClaimRowArchive@2830,whole:ColdRows@1456,whole:ColdRows@244,whole:ColdRows@249,whole:ColdRows@254,whole:ColdRows@265,whole:Route@1031,whole:Route@1078,whole:Route@1119,whole:Route@2025,whole:Route@2082,whole:Route@2121,whole:Route@335,whole:Route@3360,whole:Route@3380,whole:Route@3402,whole:Route@373,whole:Route@3791,whole:Route@3808,whole:Route@4037,whole:Route@409,whole:Route@428,whole:Route@446,whole:Route@477,whole:Route@508,whole:Route@532,whole:Route@642,whole:Route@654,whole:Route@747,whole:Route@757,whole:Route@990,whole:Timer@2190,whole:Timer@2347,whole:Timer@2354,whole:Timer@3462,whole:Timer@3586,whole:Timer@4102,whole:Timer@560,whole:Timer@580,whole:Timer@819,whole:Timer@842,whole:Timer@853,whole:Timer@936,whole:Timer@941,whole:remoteClient@123,whole:remoteClient@153 c98ba5ddc177a5095e6b0cef51a9f2828b12277485916af134275a7bb87f01df

+internal/registry/coldhandover.go Registry.RestoreClaimRows legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); its caller is hostbox's cold handover: main's body with the route insert bound through routeArgs and placeholders, the helpers Upsert now uses, so a restored row carries every column including seed_source and import_gate; the remote arm is unchanged file:QueryRowContext@1520,file:QueryRowContext@1947,file:QueryRowContext@2222,file:QueryRowContext@2563,file:QueryRowContext@3666,registry:Attempts@4310,registry:ClaimIncarnation@1004,registry:ClaimIncarnation@1026,registry:ClaimIncarnation@4360,registry:ClaimIncarnation@442,registry:ClaimIncarnation@472,registry:ClaimOwner@1098,registry:ClaimOwner@1114,registry:ClaimOwner@4394,registry:ClaimOwnership@331,registry:ClaimOwnership@368,registry:ClaimOwnership@661,registry:ClaimOwnership@703,registry:ClaimOwnership@857,registry:ClaimOwnership@895,registry:ClaimOwnership@947,registry:ClaimRowID@3376,registry:ClaimRowID@3514,registry:ClaimRowID@4408,registry:ClaimStamp@1057,registry:ClaimStamp@1073,registry:ClaimStamp@4380,registry:ClaimStamp@503,registry:ClaimStamp@528,registry:Contents@2973,registry:CreatedAt@4322,registry:DueAt@4335,registry:Host@2020,registry:Host@2306,registry:Host@3356,registry:Host@3498,registry:Host@3786,registry:Host@3803,registry:Host@405,registry:Host@4226,registry:Host@423,registry:Host@975,registry:Host@985,registry:Kind@4242,registry:LastAt@4276,registry:LastMs@4300,registry:LastStatus@4286,registry:Name@2317,registry:Name@3506,registry:Name@4234,registry:NextAt@4266,registry:Path@4258,registry:Registration@3589,registry:Registration@4344,registry:Route@1026,registry:Route@1073,registry:Route@1114,registry:Route@2020,registry:Route@2116,registry:Route@331,registry:Route@3356,registry:Route@3376,registry:Route@3398,registry:Route@368,registry:Route@3786,registry:Route@3803,registry:Route@4032,registry:Route@405,registry:Route@423,registry:Route@442,registry:Route@472,registry:Route@503,registry:Route@528,registry:Route@638,registry:Route@649,registry:Route@985,registry:Spec@4250,registry:Timers@2185,registry:Timers@3458,registry:Timers@4097,registry:Timers@556,registry:Timers@575,registry:Timers@814,registry:Timers@838,registry:remote@121,registry:remote@151,registry:sql@1187,whole:ClaimOwnership@341,whole:ClaimOwnership@379,whole:ClaimOwnership@668,whole:ClaimOwnership@709,whole:ClaimOwnership@859,whole:ClaimOwnership@897,whole:ClaimOwnership@949,whole:ClaimRowArchive@2830,whole:ColdRows@1456,whole:ColdRows@244,whole:ColdRows@249,whole:ColdRows@254,whole:ColdRows@265,whole:Route@1031,whole:Route@1078,whole:Route@1119,whole:Route@2025,whole:Route@2082,whole:Route@2121,whole:Route@335,whole:Route@3360,whole:Route@3380,whole:Route@3402,whole:Route@373,whole:Route@3791,whole:Route@3808,whole:Route@4037,whole:Route@409,whole:Route@428,whole:Route@446,whole:Route@477,whole:Route@508,whole:Route@532,whole:Route@642,whole:Route@654,whole:Route@747,whole:Route@757,whole:Route@990,whole:Timer@2190,whole:Timer@2347,whole:Timer@2354,whole:Timer@3462,whole:Timer@3586,whole:Timer@4102,whole:Timer@560,whole:Timer@580,whole:Timer@819,whole:Timer@842,whole:Timer@853,whole:Timer@936,whole:Timer@941,whole:remoteClient@123,whole:remoteClient@153 c98ba5ddc177a5095e6b0cef51a9f2828b12277485916af134275a7bb87f01df

+@legacy 15632a372256e621c0fa12aede4a8dd64c94585341df735663ee145a30f383ec internal/registry/fencegen.go Registry.NextFenceGeneration legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands out a fence generation above every earlier one, in one transaction (inTx refuses a remote handle); for the import rollback and the layout pass file:Exec@346,file:QueryRow@151 65f7ca3459cfb3a99fd59935ae2cfcf7c9fba6e92db5ffea842387235f04f03b

+internal/registry/fencegen.go Registry.NextFenceGeneration legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands out a fence generation above every earlier one, in one transaction (inTx refuses a remote handle); for the import rollback and the layout pass file:Exec@346,file:QueryRow@151 65f7ca3459cfb3a99fd59935ae2cfcf7c9fba6e92db5ffea842387235f04f03b

+@legacy e76b0a90fd834f625eef5c824198fae274dc03d4ea4cee0ebbfb0210267efbff internal/registry/fencegen.go Registry.migrateFenceGenerations legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the fence_generation table on open file:Exec@64,registry:sql@64 f79cf40868b257c295406963e7d1d8a97450e0f502671067c56495f35e556c74

+internal/registry/fencegen.go Registry.migrateFenceGenerations legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the fence_generation table on open file:Exec@64,registry:sql@64 f79cf40868b257c295406963e7d1d8a97450e0f502671067c56495f35e556c74

+@legacy 9335acdadfd7ed4ce5e70a9b337180128a5d21ea20c570637d6faa8350deaaa8 internal/registry/importjournal.go IsImportRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure test: whether a row is the one a journal row's swap put in place registry:Host@77,registry:Host@88,registry:ImportGate@143,registry:Kind@98,registry:Provisioned@123,registry:SeedID@197,registry:SeedID@59,registry:SeedSource@179 a1cb6f4a96f88e5be9abe54c58b6360e455b81b3b9f6eda42476f364af00f11c

+internal/registry/importjournal.go IsImportRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure test: whether a row is the one a journal row's swap put in place registry:Host@77,registry:Host@88,registry:ImportGate@143,registry:Kind@98,registry:Provisioned@123,registry:SeedID@197,registry:SeedID@59,registry:SeedSource@179 a1cb6f4a96f88e5be9abe54c58b6360e455b81b3b9f6eda42476f364af00f11c

+@legacy 4e0eb56930747dc5dde9f28d5e2adea03ac37f9a29ec5634bbc1a30f2c082a3d internal/registry/importjournal.go Registry.CloseImportGate legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's first step: journal to rolling-back with its fence generation and the gate closed; not served on a remote handle file:Exec@346,file:Exec@508,registry:State@302,whole:ImportJournal@262 382ee08a3a5560f880ef0d4d93a2f28b218bfa4bc7dcf75e33478994dfd9615f

+internal/registry/importjournal.go Registry.CloseImportGate legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's first step: journal to rolling-back with its fence generation and the gate closed; not served on a remote handle file:Exec@346,file:Exec@508,registry:State@302,whole:ImportJournal@262 382ee08a3a5560f880ef0d4d93a2f28b218bfa4bc7dcf75e33478994dfd9615f

+@legacy f87c5aa1c0e56486ca8fda7e4cd05f021f419b44dddd62c40a673f9ebdbccdc9 internal/registry/importjournal.go Registry.CommitImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): clears the gate and retires the journal; not served on a remote handle file:Exec@205,file:Exec@316 849f2ee23f0df258efe6a6db4eba51d8396a2a2b0de6337b74b24cb4b97919e8

+internal/registry/importjournal.go Registry.CommitImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): clears the gate and retires the journal; not served on a remote handle file:Exec@205,file:Exec@316 849f2ee23f0df258efe6a6db4eba51d8396a2a2b0de6337b74b24cb4b97919e8

+@legacy 9a8ac7e28c6ddf45a7422788b9b602d67d1dcc9efba271c8a9b6db1e7966986d internal/registry/importjournal.go Registry.DeleteImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's last journal step; not served on a remote handle file:Exec@216 688b65f68fe657cd9bc02f1ab79aeb634e52630948f273e47303b3996d9640a4

+internal/registry/importjournal.go Registry.DeleteImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's last journal step; not served on a remote handle file:Exec@216 688b65f68fe657cd9bc02f1ab79aeb634e52630948f273e47303b3996d9640a4

+@legacy dc89fc27ef742be0ce535f353f5e221df615c90d80d697ae1d61f3502b4def57 internal/registry/importjournal.go Registry.ImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a host's journal row; answers errRemoteMethod on a remote handle, so no root pass reads the journal through it registry:remote@76,registry:sql@147,whole:remoteClient@78 a0bd66adfa8eb64d1694bcd63eb5c167f592dd71afa0877a624421d4abcb3b09

+internal/registry/importjournal.go Registry.ImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a host's journal row; answers errRemoteMethod on a remote handle, so no root pass reads the journal through it registry:remote@76,registry:sql@147,whole:remoteClient@78 a0bd66adfa8eb64d1694bcd63eb5c167f592dd71afa0877a624421d4abcb3b09

+@legacy e1e8a329ce5d62e065c7461883f6eb286f166793973bd9c71211cd2bb115f126 internal/registry/importjournal.go Registry.ImportJournalHosts legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. its SQLite arm as carlos, in the agent or the registry child (carlos __registry-child); its remote arm in whichever process holds a remote handle, and a root pass does. No caller in the tree yet, outside the child's dispatch: the one journal read that answers on a remote handle, added for the claim activation census. It lets a root pass read state the agent (carlos) writes; nothing root calls it today; legacy here is a placeholder file:Query@339,registry:Hosts@303,registry:remote@64,registry:remote@96,registry:sql@339,whole:remoteClient@66,whole:remoteClient@98 05fd83dbf1582d6d8bebb59e2be373db87c1a56b0c99bc00dab926f17369c5ea

+internal/registry/importjournal.go Registry.ImportJournalHosts legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. its SQLite arm as carlos, in the agent or the registry child (carlos __registry-child); its remote arm in whichever process holds a remote handle, and a root pass does. No caller in the tree yet, outside the child's dispatch: the one journal read that answers on a remote handle, added for the claim activation census. It lets a root pass read state the agent (carlos) writes; nothing root calls it today; legacy here is a placeholder file:Query@339,registry:Hosts@303,registry:remote@64,registry:remote@96,registry:sql@339,whole:remoteClient@66,whole:remoteClient@98 05fd83dbf1582d6d8bebb59e2be373db87c1a56b0c99bc00dab926f17369c5ea

+@legacy b392b886e645e53a1e494e5c4a5bbcc0e388f99521ae06722ad0af73bcfbffd2 internal/registry/importjournal.go Registry.ImportJournals legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the import journal for the provision and domains passes; answers errRemoteMethod on a remote handle file:Query@132,registry:remote@67,registry:sql@132,whole:ImportJournal@391,whole:ImportJournal@404,whole:ImportJournal@409,whole:ImportJournal@423,whole:remoteClient@69 9cbbdfae62162812ab9aae0d647550f01cd4513279fb7cf035a0bc6b9873229c

+internal/registry/importjournal.go Registry.ImportJournals legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the import journal for the provision and domains passes; answers errRemoteMethod on a remote handle file:Query@132,registry:remote@67,registry:sql@132,whole:ImportJournal@391,whole:ImportJournal@404,whole:ImportJournal@409,whole:ImportJournal@423,whole:remoteClient@69 9cbbdfae62162812ab9aae0d647550f01cd4513279fb7cf035a0bc6b9873229c

+@legacy 1d504a9e9c98a7c085fcbe5996759df773991e7181b51c3dd568fb79141d63fd internal/registry/importjournal.go Registry.RestoreImportRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's restore: the original route back exactly as stored, replacing only the import's own row; not served on a remote handle file:Exec@304,file:Exec@481,registry:Original@420,whole:ImportJournal@231,whole:Route@275,whole:Route@422 4d6a41685cb50575b1db3c0be43430a89c179d52cbe0419466618af6e781c368

+internal/registry/importjournal.go Registry.RestoreImportRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's restore: the original route back exactly as stored, replacing only the import's own row; not served on a remote handle file:Exec@304,file:Exec@481,registry:Original@420,whole:ImportJournal@231,whole:Route@275,whole:Route@422 4d6a41685cb50575b1db3c0be43430a89c179d52cbe0419466618af6e781c368

+@legacy fbc52080c314e71aaf52b1f6c6bfa9809794385aae56869f918ae9e5aee32845 internal/registry/importjournal.go Registry.SwapForImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's transaction: with no journal row and the stored route still the original, replaces the route and writes the journal row; not served on a remote handle file:Exec@1462,file:Exec@1642,registry:At@1787,registry:ClaimOwnership@473,registry:EnvBefore@1793,registry:EnvBefore@297,registry:HoldOp@524,registry:Host@1032,registry:Host@1180,registry:Host@1236,registry:Host@129,registry:Host@1435,registry:Host@148,registry:Host@1507,registry:Host@1726,registry:Host@278,registry:Host@458,registry:Host@672,registry:Host@74,registry:Host@951,registry:ImportGate@551,registry:Original@129,registry:Original@1330,registry:Original@473,registry:Original@524,registry:Original@551,registry:Original@710,registry:Original@850,registry:RecordKey@108,registry:RecordKey@1758,registry:SeedID@1188,registry:SeedID@1734,registry:SeedID@90,whole:ClaimOwnership@484,whole:ImportJournal@1080,whole:ImportJournal@193,whole:Route@1285,whole:Route@131,whole:Route@1322,whole:Route@1332,whole:Route@1592,whole:Route@186,whole:Route@475,whole:Route@526,whole:Route@553,whole:Route@712,whole:Route@804,whole:Route@844,whole:Route@852 f55fae3ef3a731c6ea57d82573c214082316a2c7e01255b0e8f549a6d4f25474

+internal/registry/importjournal.go Registry.SwapForImport legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's transaction: with no journal row and the stored route still the original, replaces the route and writes the journal row; not served on a remote handle file:Exec@1462,file:Exec@1642,registry:At@1787,registry:ClaimOwnership@473,registry:EnvBefore@1793,registry:EnvBefore@297,registry:HoldOp@524,registry:Host@1032,registry:Host@1180,registry:Host@1236,registry:Host@129,registry:Host@1435,registry:Host@148,registry:Host@1507,registry:Host@1726,registry:Host@278,registry:Host@458,registry:Host@672,registry:Host@74,registry:Host@951,registry:ImportGate@551,registry:Original@129,registry:Original@1330,registry:Original@473,registry:Original@524,registry:Original@551,registry:Original@710,registry:Original@850,registry:RecordKey@108,registry:RecordKey@1758,registry:SeedID@1188,registry:SeedID@1734,registry:SeedID@90,whole:ClaimOwnership@484,whole:ImportJournal@1080,whole:ImportJournal@193,whole:Route@1285,whole:Route@131,whole:Route@1322,whole:Route@1332,whole:Route@1592,whole:Route@186,whole:Route@475,whole:Route@526,whole:Route@553,whole:Route@712,whole:Route@804,whole:Route@844,whole:Route@852 f55fae3ef3a731c6ea57d82573c214082316a2c7e01255b0e8f549a6d4f25474

+@legacy 4ca16adda3bf385090ce77e419889e1b459533957b74b5a3e6c154da7aa06c8e internal/registry/importjournal.go Registry.inTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): runs a function in one BEGIN IMMEDIATE transaction at synchronous=FULL; answers errRemoteMethod on a remote handle registry:remote@60,whole:claimTransaction@238,whole:remoteClient@62 34a76788f015f15a04d2d0f2ae444b4bd45c3972827e69e92f86dc0bf0401c24

+internal/registry/importjournal.go Registry.inTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): runs a function in one BEGIN IMMEDIATE transaction at synchronous=FULL; answers errRemoteMethod on a remote handle registry:remote@60,whole:claimTransaction@238,whole:remoteClient@62 34a76788f015f15a04d2d0f2ae444b4bd45c3972827e69e92f86dc0bf0401c24

+@legacy 5c5e051819ac70f1029715f91d53520c38d6a0f93c9120b1dff5c930f4e18442 internal/registry/importjournal.go Registry.migrateImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the import_journal table and its env_before column on open file:Exec@514,file:Exec@64,registry:sql@514,registry:sql@64 7570de2ce1b6d9d9bb81f597397977d519ed347798d120c0ee8af228fa34ce11

+internal/registry/importjournal.go Registry.migrateImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the import_journal table and its env_before column on open file:Exec@514,file:Exec@64,registry:sql@514,registry:sql@64 7570de2ce1b6d9d9bb81f597397977d519ed347798d120c0ee8af228fa34ce11

+@legacy ad7c46d8c50cd61ef76e27904051dd4be5232fce9184c899f3df8d12048e536d internal/registry/importjournal.go getRouteTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a route by host inside the journal's transaction file:QueryRow@77,whole:Route@256 bab612fb3b033817d5495a3869d84d9e5d2d464028df970b57646795540602bb

+internal/registry/importjournal.go getRouteTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a route by host inside the journal's transaction file:QueryRow@77,whole:Route@256 bab612fb3b033817d5495a3869d84d9e5d2d464028df970b57646795540602bb

+@legacy d44652c1853a3eb1eba3fae82baa68c974c4862b8e6011af23aa7d99f0dde0d9 internal/registry/importjournal.go hashImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), from SnapshotFingerprint: folds the import journal into the snapshot fingerprint, so a registry snapshot never restores a stale journal unnoticed file:Query@70 7c60d298ba3a000711feb49c5a2a6964d78c645ee5bbf0253a8d244f19920a46

+internal/registry/importjournal.go hashImportJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), from SnapshotFingerprint: folds the import journal into the snapshot fingerprint, so a registry snapshot never restores a stale journal unnoticed file:Query@70 7c60d298ba3a000711feb49c5a2a6964d78c645ee5bbf0253a8d244f19920a46

+@legacy 9e9eb95cae076faf73f5313b722fa590a4014b943298db67c4752d3e6c45abc7 internal/registry/importjournal.go importRowTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's row when it is the import's own; refuses any other row registry:Host@264,registry:Host@90,registry:SeedID@272,whole:ImportJournal@174,whole:Route@140,whole:Route@168,whole:Route@293 7345ae8a84da81610e353b46e85a00c9834d086b5f38e0ec6a5faa08d7ce2c89

+internal/registry/importjournal.go importRowTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's row when it is the import's own; refuses any other row registry:Host@264,registry:Host@90,registry:SeedID@272,whole:ImportJournal@174,whole:Route@140,whole:Route@168,whole:Route@293 7345ae8a84da81610e353b46e85a00c9834d086b5f38e0ec6a5faa08d7ce2c89

+@legacy 082a4417057943c664ce281a530be7fdf4f72432681ae34b81ffb5610774c979 internal/registry/importjournal.go insertRouteTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): inserts a route exactly as given, for the swap and the restore file:Exec@56,whole:Route@153 9de96bc2387e027a476167f331013f136387da800c1884846d8545b7916f1c1f

+internal/registry/importjournal.go insertRouteTx legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): inserts a route exactly as given, for the swap and the restore file:Exec@56,whole:Route@153 9de96bc2387e027a476167f331013f136387da800c1884846d8545b7916f1c1f

+@legacy 9d70e0337d8f15faa2ef2290d70974f2b9f13c99a0c08c56e90549b235984844 internal/registry/importjournal.go journalFor legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's journal row, which must name the seed and be in an expected state registry:SeedID@177,registry:State@328,registry:State@441,whole:ImportJournal@165,whole:ImportJournal@353 422efef58626a930d9aaba6f2d5bc9bb01ed7a3f1e4b04ff30a73b7dc0dd29a0

+internal/registry/importjournal.go journalFor legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's journal row, which must name the seed and be in an expected state registry:SeedID@177,registry:State@328,registry:State@441,whole:ImportJournal@165,whole:ImportJournal@353 422efef58626a930d9aaba6f2d5bc9bb01ed7a3f1e4b04ff30a73b7dc0dd29a0

+@legacy 52d6ca31aaa67c53e2edc0749c246eca7cfa148df37ba441e1063ae6fd014f4f internal/registry/importjournal.go scanJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads one journal row by host file:QueryRow@93,whole:ImportJournal@281 6bd3a5337b628469de13e0a718c7a75c43b1d67a6cde2109d0bb72565ec8ea08

+internal/registry/importjournal.go scanJournal legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads one journal row by host file:QueryRow@93,whole:ImportJournal@281 6bd3a5337b628469de13e0a718c7a75c43b1d67a6cde2109d0bb72565ec8ea08

+@legacy 1b7802ea393b0a3be146a819a3afdcd503d8bd260006e2d95fa9e494f2141bb2 internal/registry/importjournal.go scanJournalRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decodes a journal row, its stored original route included registry:At@189,registry:EnvBefore@196,registry:FenceGen@176,registry:Host@125,registry:Host@381,registry:Original@283,registry:RecordKey@152,registry:SeedID@134,registry:State@166,whole:ImportJournal@232,whole:ImportJournal@318,whole:ImportJournal@405,whole:Route@285 752a3b638a5580ea0a1d03f3b031b5669539d1cfc899f0a520c51e2c845da983

+internal/registry/importjournal.go scanJournalRow legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decodes a journal row, its stored original route included registry:At@189,registry:EnvBefore@196,registry:FenceGen@176,registry:Host@125,registry:Host@381,registry:Original@283,registry:RecordKey@152,registry:SeedID@134,registry:State@166,whole:ImportJournal@232,whole:ImportJournal@318,whole:ImportJournal@405,whole:Route@285 752a3b638a5580ea0a1d03f3b031b5669539d1cfc899f0a520c51e2c845da983

+@legacy ee08cc3857979bf2a84fc588a8211298dac5a948fb5023bbe752224ed14dc96a internal/registry/importjournal.go seedColumnID legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure: the seed id a seed_source column names registry:ID@193 e56c15dc9a03ba6db62a462cbd16968db61be4873b6260c134669b5baccdbf6e

+internal/registry/importjournal.go seedColumnID legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure: the seed id a seed_source column names registry:ID@193 e56c15dc9a03ba6db62a462cbd16968db61be4873b6260c134669b5baccdbf6e

+@legacy 9ab44c01a191dfcf04a86d775f68c4bb8df82eedb95172c6230dac579b2d1c82 internal/registry/importjournal.go type queryer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the query half of a transaction file:QueryRow@26 9680462eb066e0897df8b01561c7d2503e7d2c533417c35d37701cf70041ee07

+internal/registry/importjournal.go type queryer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the query half of a transaction file:QueryRow@26 9680462eb066e0897df8b01561c7d2503e7d2c533417c35d37701cf70041ee07

+@legacy da0cffbf088505603e3e059df9cfcbf7fcb9dd9b0335d6247a6a2e61cb24870c internal/registry/importjournal.go type txer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the transaction the journal's steps run in file:Exec@32 81fb9416633ed62206ee4c95744a8dc526c315e10ffa2abb9eaa8484ead0ad61

+internal/registry/importjournal.go type txer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the transaction the journal's steps run in file:Exec@32 81fb9416633ed62206ee4c95744a8dc526c315e10ffa2abb9eaa8484ead0ad61

+@legacy 5d0cfd758e197bf614c8e88d48dc34474119d1d296b7d63bf871d1a1ffe640c9 internal/registry/registry.go Registry.Fingerprint legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with the import gate folded into the edge's change poll when it is set, so an ungated registry digests as before file:Exec@284,file:Open@188,file:Query@2936,file:Query@3415,file:Query@368,file:Query@4401,file:Query@5097,file:Query@6009,registry:ClaimIncarnation@1116,registry:ClaimIncarnation@2218,registry:ClaimIncarnation@2295,registry:ClaimOwner@1160,registry:ClaimOwner@2419,registry:ClaimOwner@2484,registry:ClaimRowID@1179,registry:ClaimRowID@2511,registry:ClaimRowID@2577,registry:ClaimStamp@1141,registry:ClaimStamp@2328,registry:ClaimStamp@2392,registry:Text@158,registry:path@207,registry:remote@55,registry:remote@87,whole:remoteClient@57,whole:remoteClient@89 0f6015c65146fcc0d5867acb1150306d3a594fbe9e3e48bf9cbe0efa4fea09b0

+internal/registry/registry.go Registry.Fingerprint legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with the import gate folded into the edge's change poll when it is set, so an ungated registry digests as before file:Exec@284,file:Open@188,file:Query@2936,file:Query@3415,file:Query@368,file:Query@4401,file:Query@5097,file:Query@6009,registry:ClaimIncarnation@1116,registry:ClaimIncarnation@2218,registry:ClaimIncarnation@2295,registry:ClaimOwner@1160,registry:ClaimOwner@2419,registry:ClaimOwner@2484,registry:ClaimRowID@1179,registry:ClaimRowID@2511,registry:ClaimRowID@2577,registry:ClaimStamp@1141,registry:ClaimStamp@2328,registry:ClaimStamp@2392,registry:Text@158,registry:path@207,registry:remote@55,registry:remote@87,whole:remoteClient@57,whole:remoteClient@89 0f6015c65146fcc0d5867acb1150306d3a594fbe9e3e48bf9cbe0efa4fea09b0

+@legacy a8f78e37e974b2dec22666efbea4147175c7caa275f59285158878716e4bfd61 internal/registry/registry.go Registry.SetSeedSource legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): converges a row's seed column from its record, for the provision pass; answers errRemoteMethod on a remote handle file:Exec@120,registry:remote@61,registry:sql@120,whole:remoteClient@63 65020817ba9577503121dd23b01c0342450a289b2fcac6c4430f5b9978965a21

+internal/registry/registry.go Registry.SetSeedSource legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): converges a row's seed column from its record, for the provision pass; answers errRemoteMethod on a remote handle file:Exec@120,registry:remote@61,registry:sql@120,whole:remoteClient@63 65020817ba9577503121dd23b01c0342450a289b2fcac6c4430f5b9978965a21

+@legacy cf6c5a1d7d0393ac068ad0ec8bafabcbec35aa17ab2b5654d5741cf321dafa73 internal/registry/registry.go Registry.SnapshotFingerprint legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with seed_source and import_gate hashed only when set and the import journal folded in (hashImportJournal) file:Exec@300,file:Open@204,file:Query@2681,file:Query@3100,file:Query@3579,file:Query@385,registry:Text@174,registry:path@223,registry:remote@63,registry:remote@95,whole:remoteClient@65,whole:remoteClient@97 3a68e72fa101c332114e4a8063d1084dbb22e1bd0b8e2e13f488e543342056a6

+internal/registry/registry.go Registry.SnapshotFingerprint legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with seed_source and import_gate hashed only when set and the import journal folded in (hashImportJournal) file:Exec@300,file:Open@204,file:Query@2681,file:Query@3100,file:Query@3579,file:Query@385,registry:Text@174,registry:path@223,registry:remote@63,registry:remote@95,whole:remoteClient@65,whole:remoteClient@97 3a68e72fa101c332114e4a8063d1084dbb22e1bd0b8e2e13f488e543342056a6

+internal/registry/registry.go Registry.Upsert authority E3 rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle, root passes included: main's body with its insert defaults moved to normalizeRoute and its bind list to routeArgs, and two columns added (seed_source, import_gate); the conflict clause, with the tenant-change rule E3 names, is unchanged; main's E3 authority retained file:Exec@175,registry:remote@47,registry:remote@77,registry:sql@175,whole:Route@128,whole:Route@136,whole:Route@2927,whole:remoteClient@49,whole:remoteClient@79 df5cb046e2243462e8a146826db4c62fcbf04c080ff07935f209b64f58a77b4e

+@legacy 700fbe5d5d0fc565c60309a468cd65376386420b0f2fcbd57963bafd3e773088 internal/registry/registry.go Registry.migrate legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open; a box CLI verb that opens the registry directly runs it as whoever runs the verb: main's body with two columns added to routes (seed_source, import_gate) and the import journal's and fence counter's migrations called file:Exec@3474,file:Exec@3798,file:Exec@4529,file:Exec@51,file:Exec@5389,file:Exec@5668,file:Exec@6531,file:Exec@6707,registry:sql@3474,registry:sql@3798,registry:sql@4529,registry:sql@51,registry:sql@5389,registry:sql@5668,registry:sql@6531,registry:sql@6707 b3f8ac27ac435689acd6cf502fc0e8deb074b5bc3eadbf3791cfc17331f082cf

+internal/registry/registry.go Registry.migrate legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open; a box CLI verb that opens the registry directly runs it as whoever runs the verb: main's body with two columns added to routes (seed_source, import_gate) and the import journal's and fence counter's migrations called file:Exec@3474,file:Exec@3798,file:Exec@4529,file:Exec@51,file:Exec@5389,file:Exec@5668,file:Exec@6531,file:Exec@6707,registry:sql@3474,registry:sql@3798,registry:sql@4529,registry:sql@51,registry:sql@5389,registry:sql@5668,registry:sql@6531,registry:sql@6707 b3f8ac27ac435689acd6cf502fc0e8deb074b5bc3eadbf3791cfc17331f082cf

+@legacy d5b5d1d054613be6dd81015c38a21f8943d0cd6a6a1c6e24378c027eaed2b7c5 internal/registry/registry.go normalizeRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), wherever Upsert's SQLite arm and the import swap run: the insert defaults that were in Registry.Upsert's body (authority E3 on main), moved out unchanged so the import swap's row gets them too. Whether E3 covers them is the controller's call; legacy here is a placeholder registry:CreatedAt@41,registry:CreatedAt@62,registry:Hibernate@691,registry:Kind@146,registry:Kind@163,registry:Replica@1038,registry:Replicas@1052,registry:Replication@707,registry:Status@101,registry:Status@120,whole:Route@1079 d2d955e8b393fdf5b5ef44896c8ce532bf9deaf0c1fba71990d0fe83a20e1135

+internal/registry/registry.go normalizeRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), wherever Upsert's SQLite arm and the import swap run: the insert defaults that were in Registry.Upsert's body (authority E3 on main), moved out unchanged so the import swap's row gets them too. Whether E3 covers them is the controller's call; legacy here is a placeholder registry:CreatedAt@41,registry:CreatedAt@62,registry:Hibernate@691,registry:Kind@146,registry:Kind@163,registry:Replica@1038,registry:Replicas@1052,registry:Replication@707,registry:Status@101,registry:Status@120,whole:Route@1079 d2d955e8b393fdf5b5ef44896c8ce532bf9deaf0c1fba71990d0fe83a20e1135

+@legacy c28f2523e4648c4dd804a9079eca0325a6d2efaf6666304509a9934302622586 internal/registry/registry.go routeArgs legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), wherever a route is inserted: Upsert, the cold handover restore and the import journal's inserts: the bind list that was in Registry.Upsert's body (authority E3 on main) and in RestoreClaimRows, as one function, with seed_source and import_gate added. Whether E3 covers it is the controller's call; legacy here is a placeholder registry:Account@355,registry:Addr@83,registry:Addrs@451,registry:App@152,registry:Args@505,registry:Backing@253,registry:BuildState@730,registry:Canary@216,registry:Caps@381,registry:CertExpiresAt@338,registry:Channel@177,registry:ClaimIncarnation@577,registry:ClaimOwner@611,registry:ClaimRowID@625,registry:ClaimStamp@597,registry:CreatedAt@492,registry:DBPath@116,registry:DNSCheckedAt@320,registry:DNSStatus@307,registry:Environment@366,registry:FleetBox@439,registry:Gate@484,registry:GoodDemand@680,registry:GoodDigest@666,registry:GoodVersion@651,registry:Health@460,registry:Hibernate@196,registry:HoldOp@639,registry:Host@49,registry:IdleSeconds@513,registry:ImportGate@760,registry:Kind@65,registry:LastError@101,registry:MaxRunSeconds@528,registry:NextDue@242,registry:Platform@294,registry:Pool@159,registry:PrevVersion@137,registry:Provisioned@407,registry:Region@167,registry:Replica@565,registry:Replicas@547,registry:Replication@227,registry:Seed@423,registry:SeedSource@746,registry:ServingVersion@694,registry:Slug@57,registry:Socket@73,registry:Status@91,registry:StatusNamed@272,registry:Steering@472,registry:Tunnel@389,registry:Unit@431,registry:UpdateSettings@712,registry:Version@126 04acfa081699432cded2a04a2c1d0cce5ffa33f86268698a7ab6718bc124497f

+internal/registry/registry.go routeArgs legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=NEEDS RULING. the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), wherever a route is inserted: Upsert, the cold handover restore and the import journal's inserts: the bind list that was in Registry.Upsert's body (authority E3 on main) and in RestoreClaimRows, as one function, with seed_source and import_gate added. Whether E3 covers it is the controller's call; legacy here is a placeholder registry:Account@355,registry:Addr@83,registry:Addrs@451,registry:App@152,registry:Args@505,registry:Backing@253,registry:BuildState@730,registry:Canary@216,registry:Caps@381,registry:CertExpiresAt@338,registry:Channel@177,registry:ClaimIncarnation@577,registry:ClaimOwner@611,registry:ClaimRowID@625,registry:ClaimStamp@597,registry:CreatedAt@492,registry:DBPath@116,registry:DNSCheckedAt@320,registry:DNSStatus@307,registry:Environment@366,registry:FleetBox@439,registry:Gate@484,registry:GoodDemand@680,registry:GoodDigest@666,registry:GoodVersion@651,registry:Health@460,registry:Hibernate@196,registry:HoldOp@639,registry:Host@49,registry:IdleSeconds@513,registry:ImportGate@760,registry:Kind@65,registry:LastError@101,registry:MaxRunSeconds@528,registry:NextDue@242,registry:Platform@294,registry:Pool@159,registry:PrevVersion@137,registry:Provisioned@407,registry:Region@167,registry:Replica@565,registry:Replicas@547,registry:Replication@227,registry:Seed@423,registry:SeedSource@746,registry:ServingVersion@694,registry:Slug@57,registry:Socket@73,registry:Status@91,registry:StatusNamed@272,registry:Steering@472,registry:Tunnel@389,registry:Unit@431,registry:UpdateSettings@712,registry:Version@126 04acfa081699432cded2a04a2c1d0cce5ffa33f86268698a7ab6718bc124497f

+@legacy af930e6cd38a14facde3391ee24b1c87e1a0455d2385abaaa3489b74776706ba internal/registry/registry.go scanRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user): main's body with the two new columns scanned registry:Account@393,registry:Addr@161,registry:Addrs@483,registry:App@236,registry:Args@542,registry:Backing@318,registry:BuildState@767,registry:Canary@838,registry:Caps@423,registry:CertExpiresAt@375,registry:Channel@266,registry:ClaimIncarnation@604,registry:ClaimOwner@640,registry:ClaimRowID@655,registry:ClaimStamp@625,registry:CreatedAt@526,registry:DBPath@197,registry:DNSCheckedAt@358,registry:DNSStatus@344,registry:Environment@407,registry:FleetBox@468,registry:Gate@517,registry:GoodDemand@714,registry:GoodDigest@699,registry:GoodVersion@683,registry:Health@493,registry:Hibernate@814,registry:HoldOp@670,registry:Host@123,registry:IdleSeconds@551,registry:ImportGate@799,registry:Kind@141,registry:LastError@183,registry:MaxRunSeconds@567,registry:NextDue@306,registry:Platform@884,registry:Pool@244,registry:PrevVersion@220,registry:Provisioned@908,registry:Region@255,registry:Replica@935,registry:Replicas@585,registry:Replication@290,registry:Seed@450,registry:SeedSource@784,registry:ServingVersion@729,registry:Slug@132,registry:Socket@150,registry:Status@170,registry:StatusNamed@859,registry:Steering@504,registry:Tunnel@432,registry:Unit@459,registry:UpdateSettings@748,registry:Version@208,whole:Route@964 6cd466677cbe8e4c6373cadfcaa62052348cb479aa5aa2ec7567637a81b24c77

+internal/registry/registry.go scanRoute legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user): main's body with the two new columns scanned registry:Account@393,registry:Addr@161,registry:Addrs@483,registry:App@236,registry:Args@542,registry:Backing@318,registry:BuildState@767,registry:Canary@838,registry:Caps@423,registry:CertExpiresAt@375,registry:Channel@266,registry:ClaimIncarnation@604,registry:ClaimOwner@640,registry:ClaimRowID@655,registry:ClaimStamp@625,registry:CreatedAt@526,registry:DBPath@197,registry:DNSCheckedAt@358,registry:DNSStatus@344,registry:Environment@407,registry:FleetBox@468,registry:Gate@517,registry:GoodDemand@714,registry:GoodDigest@699,registry:GoodVersion@683,registry:Health@493,registry:Hibernate@814,registry:HoldOp@670,registry:Host@123,registry:IdleSeconds@551,registry:ImportGate@799,registry:Kind@141,registry:LastError@183,registry:MaxRunSeconds@567,registry:NextDue@306,registry:Platform@884,registry:Pool@244,registry:PrevVersion@220,registry:Provisioned@908,registry:Region@255,registry:Replica@935,registry:Replicas@585,registry:Replication@290,registry:Seed@450,registry:SeedSource@784,registry:ServingVersion@729,registry:Slug@132,registry:Socket@150,registry:Status@170,registry:StatusNamed@859,registry:Steering@504,registry:Tunnel@432,registry:Unit@459,registry:UpdateSettings@748,registry:Version@208,whole:Route@964 6cd466677cbe8e4c6373cadfcaa62052348cb479aa5aa2ec7567637a81b24c77

+@legacy de2c41b7bfbdca952a9e42f029449fe7cbb5d6a7a3a1f4f7e6dcacc2e5dac3ca internal/registry/remote_dispatch.go Registry.dispatchRemote legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry child (carlos __registry-child, which a root pass forks as the service user carlos): main's body with one more method served, ImportJournalHosts; every other journal method stays unserved registry:A@6080,registry:Account@3543,registry:Accounts@2556,registry:Addr@4120,registry:Addrs@4128,registry:Alias@6128,registry:Alias@6192,registry:Alias@6280,registry:Aliases@6002,registry:Alive@7822,registry:Args@5704,registry:At@5145,registry:At@6211,registry:At@6289,registry:At@7570,registry:Attempts@7592,registry:B@1941,registry:Backing@3939,registry:BuildState@4346,registry:Changed@1749,registry:Changed@2912,registry:Changed@2999,registry:Changed@3088,registry:Changed@3159,registry:Changed@3241,registry:Changed@7502,registry:Channel@3603,registry:Channel@4586,registry:Channel@4990,registry:CheckedAt@5071,registry:Class@4058,registry:DoneBefore@7831,registry:Due@5474,registry:Due@5538,registry:Due@7614,registry:Env@4654,registry:Env@4901,registry:Env@5001,registry:ExcludeHosts@7297,registry:ExcludeHosts@7392,registry:ExpectGood@5270,registry:ExpectOp@2967,registry:Expected@1003,registry:Expected@229,registry:Expected@692,registry:F@1721,registry:F@1782,registry:Fleet@1807,registry:Fleet@1999,registry:Fleet@2081,registry:Fleet@2162,registry:Fleet@2255,registry:FleetBoxes@2216,registry:Fleets@1865,registry:From@3714,registry:From@3775,registry:FromDB@3850,registry:FromOp@3055,registry:FromSock@3860,registry:Hash@4526,registry:Health@4137,registry:Host@212,registry:Host@2740,registry:Host@2781,registry:Host@2867,registry:Host@2943,registry:Host@3029,registry:Host@3121,registry:Host@3193,registry:Host@3285,registry:Host@3535,registry:Host@3595,registry:Host@3653,registry:Host@3706,registry:Host@3767,registry:Host@3842,registry:Host@3931,registry:Host@3985,registry:Host@4050,registry:Host@4112,registry:Host@4190,registry:Host@4265,registry:Host@4338,registry:Host@4403,registry:Host@4464,registry:Host@4518,registry:Host@4646,registry:Host@4700,registry:Host@4761,registry:Host@4823,registry:Host@5053,registry:Host@5137,registry:Host@5194,registry:Host@5262,registry:Host@5351,registry:Host@5411,registry:Host@5466,registry:Host@5530,registry:Host@5645,registry:Host@5696,registry:Host@5763,registry:Host@5838,registry:Host@5901,registry:Host@6498,registry:Host@6645,registry:Host@6933,registry:Host@6997,registry:Host@7056,registry:Host@7139,registry:Host@7222,registry:Host@7453,registry:Host@7538,registry:Host@7670,registry:Host@7751,registry:Host@777,registry:Host@7914,registry:Host@888,registry:Hosts@2619,registry:Hosts@4577,registry:Hosts@4892,registry:Hosts@4981,registry:Id@1308,registry:Id@1407,registry:Id@1487,registry:Id@1638,registry:Id@997,registry:IdValue@2375,registry:Idle@5771,registry:Journal@1015,registry:Journal@1314,registry:Journal@1493,registry:Journal@382,registry:Keep@7930,registry:Kind@7759,registry:Kind@7922,registry:Label@2008,registry:Label@2090,registry:Label@2171,registry:Label@4769,registry:Limit@7288,registry:Limit@7383,registry:MaxRun@5779,registry:Method@151,registry:Ms@7586,registry:Name@1835,registry:Name@2394,registry:Name@7005,registry:Name@7064,registry:Name@7147,registry:Name@7461,registry:Name@7546,registry:Name@7678,registry:Name@785,registry:Name@896,registry:Next@241,registry:NextAt@7604,registry:NextGood@5284,registry:NextValue@1567,registry:NextValue@1665,registry:Now@5972,registry:Now@7281,registry:Now@7376,registry:Now@7469,registry:Now@920,registry:Number64@2482,registry:Number@7719,registry:Number@7790,registry:Number@7875,registry:Observed@305,registry:ObservedValue@583,registry:Old@1560,registry:Old@1658,registry:On@5419,registry:On@5846,registry:On@5909,registry:Op@2885,registry:Op@2961,registry:Op@3129,registry:Op@3201,registry:Op@3293,registry:Owner@220,registry:Owner@317,registry:Owner@600,registry:P@6599,registry:Path@6830,registry:Paths@6527,registry:Prefix@6653,registry:Prev@5209,registry:Registration@7155,registry:Registration@7554,registry:Registration@793,registry:Registration@904,registry:Replica@4472,registry:Replicas@4411,registry:Retirement@1644,registry:Route@2717,registry:Routes@2675,registry:Routes@3319,registry:Routes@5572,registry:Routes@5939,registry:Rows@6941,registry:Seed@5653,registry:Sqid@2386,registry:Sqid@2449,registry:Sqid@2528,registry:Status@2180,registry:Status@2875,registry:Status@2951,registry:Status@3037,registry:Status@3661,registry:Status@5061,registry:Status@6201,registry:Status@7576,registry:Status@7686,registry:Status@809,registry:Steering@4198,registry:StringMap@2292,registry:T@687,registry:T@6881,registry:TValue@2822,registry:Tags@2099,registry:Target@4831,registry:Targets@393,registry:Text@1213,registry:Text@1360,registry:Text@2496,registry:Text@6686,registry:Text@6749,registry:Timer@644,registry:Timer@6969,registry:Timers@7192,registry:Timers@7251,registry:Timers@7340,registry:Times@7964,registry:To@3722,registry:To@3783,registry:ToDB@3872,registry:ToOp@3047,registry:ToSock@3880,registry:TokenHash@2017,registry:Tunnel@4708,registry:Unit@3993,registry:UpdateSettings@4273,registry:Ver@5202,registry:Ver@5359,registry:W@6432,registry:Wildcards@6326,whole:Account@2560,whole:ClaimOwnership@222,whole:ClaimOwnership@319,whole:ClaimOwnership@602,whole:ClaimRow@395,whole:ClaimRowArchive@501,whole:ClaimRowArchive@511,whole:ColdRows@1562,whole:ColdRows@1569,whole:ColdRows@1660,whole:ColdRows@1667,whole:Fleet@1723,whole:Fleet@1784,whole:Fleet@1811,whole:Fleet@1869,whole:FleetBox@1943,whole:FleetBox@2220,whole:GoodBuild@5272,whole:GoodBuild@5286,whole:Route@2679,whole:Route@2721,whole:Route@2824,whole:Route@307,whole:Route@3323,whole:Route@3478,whole:Route@3484,whole:Route@5576,whole:Route@5943,whole:RouteAlias@6006,whole:RouteAlias@6082,whole:RoutePath@6531,whole:RoutePath@6601,whole:Timer@585,whole:Timer@648,whole:Timer@6883,whole:Timer@689,whole:Timer@6943,whole:Timer@6973,whole:Timer@7196,whole:Timer@7255,whole:Timer@7344,whole:WildcardDomain@6330,whole:WildcardDomain@6434 1b1cd373ce1d8e05aaf697bbe97b85582d3227fd094b4bf9e555acf3e43c79ab

+internal/registry/remote_dispatch.go Registry.dispatchRemote legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the registry child (carlos __registry-child, which a root pass forks as the service user carlos): main's body with one more method served, ImportJournalHosts; every other journal method stays unserved registry:A@6080,registry:Account@3543,registry:Accounts@2556,registry:Addr@4120,registry:Addrs@4128,registry:Alias@6128,registry:Alias@6192,registry:Alias@6280,registry:Aliases@6002,registry:Alive@7822,registry:Args@5704,registry:At@5145,registry:At@6211,registry:At@6289,registry:At@7570,registry:Attempts@7592,registry:B@1941,registry:Backing@3939,registry:BuildState@4346,registry:Changed@1749,registry:Changed@2912,registry:Changed@2999,registry:Changed@3088,registry:Changed@3159,registry:Changed@3241,registry:Changed@7502,registry:Channel@3603,registry:Channel@4586,registry:Channel@4990,registry:CheckedAt@5071,registry:Class@4058,registry:DoneBefore@7831,registry:Due@5474,registry:Due@5538,registry:Due@7614,registry:Env@4654,registry:Env@4901,registry:Env@5001,registry:ExcludeHosts@7297,registry:ExcludeHosts@7392,registry:ExpectGood@5270,registry:ExpectOp@2967,registry:Expected@1003,registry:Expected@229,registry:Expected@692,registry:F@1721,registry:F@1782,registry:Fleet@1807,registry:Fleet@1999,registry:Fleet@2081,registry:Fleet@2162,registry:Fleet@2255,registry:FleetBoxes@2216,registry:Fleets@1865,registry:From@3714,registry:From@3775,registry:FromDB@3850,registry:FromOp@3055,registry:FromSock@3860,registry:Hash@4526,registry:Health@4137,registry:Host@212,registry:Host@2740,registry:Host@2781,registry:Host@2867,registry:Host@2943,registry:Host@3029,registry:Host@3121,registry:Host@3193,registry:Host@3285,registry:Host@3535,registry:Host@3595,registry:Host@3653,registry:Host@3706,registry:Host@3767,registry:Host@3842,registry:Host@3931,registry:Host@3985,registry:Host@4050,registry:Host@4112,registry:Host@4190,registry:Host@4265,registry:Host@4338,registry:Host@4403,registry:Host@4464,registry:Host@4518,registry:Host@4646,registry:Host@4700,registry:Host@4761,registry:Host@4823,registry:Host@5053,registry:Host@5137,registry:Host@5194,registry:Host@5262,registry:Host@5351,registry:Host@5411,registry:Host@5466,registry:Host@5530,registry:Host@5645,registry:Host@5696,registry:Host@5763,registry:Host@5838,registry:Host@5901,registry:Host@6498,registry:Host@6645,registry:Host@6933,registry:Host@6997,registry:Host@7056,registry:Host@7139,registry:Host@7222,registry:Host@7453,registry:Host@7538,registry:Host@7670,registry:Host@7751,registry:Host@777,registry:Host@7914,registry:Host@888,registry:Hosts@2619,registry:Hosts@4577,registry:Hosts@4892,registry:Hosts@4981,registry:Id@1308,registry:Id@1407,registry:Id@1487,registry:Id@1638,registry:Id@997,registry:IdValue@2375,registry:Idle@5771,registry:Journal@1015,registry:Journal@1314,registry:Journal@1493,registry:Journal@382,registry:Keep@7930,registry:Kind@7759,registry:Kind@7922,registry:Label@2008,registry:Label@2090,registry:Label@2171,registry:Label@4769,registry:Limit@7288,registry:Limit@7383,registry:MaxRun@5779,registry:Method@151,registry:Ms@7586,registry:Name@1835,registry:Name@2394,registry:Name@7005,registry:Name@7064,registry:Name@7147,registry:Name@7461,registry:Name@7546,registry:Name@7678,registry:Name@785,registry:Name@896,registry:Next@241,registry:NextAt@7604,registry:NextGood@5284,registry:NextValue@1567,registry:NextValue@1665,registry:Now@5972,registry:Now@7281,registry:Now@7376,registry:Now@7469,registry:Now@920,registry:Number64@2482,registry:Number@7719,registry:Number@7790,registry:Number@7875,registry:Observed@305,registry:ObservedValue@583,registry:Old@1560,registry:Old@1658,registry:On@5419,registry:On@5846,registry:On@5909,registry:Op@2885,registry:Op@2961,registry:Op@3129,registry:Op@3201,registry:Op@3293,registry:Owner@220,registry:Owner@317,registry:Owner@600,registry:P@6599,registry:Path@6830,registry:Paths@6527,registry:Prefix@6653,registry:Prev@5209,registry:Registration@7155,registry:Registration@7554,registry:Registration@793,registry:Registration@904,registry:Replica@4472,registry:Replicas@4411,registry:Retirement@1644,registry:Route@2717,registry:Routes@2675,registry:Routes@3319,registry:Routes@5572,registry:Routes@5939,registry:Rows@6941,registry:Seed@5653,registry:Sqid@2386,registry:Sqid@2449,registry:Sqid@2528,registry:Status@2180,registry:Status@2875,registry:Status@2951,registry:Status@3037,registry:Status@3661,registry:Status@5061,registry:Status@6201,registry:Status@7576,registry:Status@7686,registry:Status@809,registry:Steering@4198,registry:StringMap@2292,registry:T@687,registry:T@6881,registry:TValue@2822,registry:Tags@2099,registry:Target@4831,registry:Targets@393,registry:Text@1213,registry:Text@1360,registry:Text@2496,registry:Text@6686,registry:Text@6749,registry:Timer@644,registry:Timer@6969,registry:Timers@7192,registry:Timers@7251,registry:Timers@7340,registry:Times@7964,registry:To@3722,registry:To@3783,registry:ToDB@3872,registry:ToOp@3047,registry:ToSock@3880,registry:TokenHash@2017,registry:Tunnel@4708,registry:Unit@3993,registry:UpdateSettings@4273,registry:Ver@5202,registry:Ver@5359,registry:W@6432,registry:Wildcards@6326,whole:Account@2560,whole:ClaimOwnership@222,whole:ClaimOwnership@319,whole:ClaimOwnership@602,whole:ClaimRow@395,whole:ClaimRowArchive@501,whole:ClaimRowArchive@511,whole:ColdRows@1562,whole:ColdRows@1569,whole:ColdRows@1660,whole:ColdRows@1667,whole:Fleet@1723,whole:Fleet@1784,whole:Fleet@1811,whole:Fleet@1869,whole:FleetBox@1943,whole:FleetBox@2220,whole:GoodBuild@5272,whole:GoodBuild@5286,whole:Route@2679,whole:Route@2721,whole:Route@2824,whole:Route@307,whole:Route@3323,whole:Route@3478,whole:Route@3484,whole:Route@5576,whole:Route@5943,whole:RouteAlias@6006,whole:RouteAlias@6082,whole:RoutePath@6531,whole:RoutePath@6601,whole:Timer@585,whole:Timer@648,whole:Timer@6883,whole:Timer@689,whole:Timer@6943,whole:Timer@6973,whole:Timer@7196,whole:Timer@7255,whole:Timer@7344,whole:WildcardDomain@6330,whole:WildcardDomain@6434 1b1cd373ce1d8e05aaf697bbe97b85582d3227fd094b4bf9e555acf3e43c79ab

+@legacy 98b501ebc423ea4d42969cf569ae9c1f747d7e1c8f6688c06306dde6adfea534 internal/registry/routecas.go Registry.DeleteIfUnchanged legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: deletes a route only while the stored row still has the identity the caller listed it with; answers errRemoteMethod on a remote handle file:Exec@137,registry:Account@335,registry:App@351,registry:CreatedAt@430,registry:Host@309,registry:ImportGate@392,registry:Kind@322,registry:Provisioned@369,registry:SeedSource@411,registry:remote@71,registry:sql@137,whole:remoteClient@73 2e08c168b9d5b3bf22fbadb1ff60e8acfcedaba353fc0a67e858045c0441de4c

+internal/registry/routecas.go Registry.DeleteIfUnchanged legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: deletes a route only while the stored row still has the identity the caller listed it with; answers errRemoteMethod on a remote handle file:Exec@137,registry:Account@335,registry:App@351,registry:CreatedAt@430,registry:Host@309,registry:ImportGate@392,registry:Kind@322,registry:Provisioned@369,registry:SeedSource@411,registry:remote@71,registry:sql@137,whole:remoteClient@73 2e08c168b9d5b3bf22fbadb1ff60e8acfcedaba353fc0a67e858045c0441de4c

+@legacy ec6513f2cad89c7b4d33e8869c218d0435f7da7e14ce0be463e38f65741bb6e3 internal/schedule/runner.go Runner.Tick legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its scheduler: main's body with an uncommitted import's row given no tick, at the pre-filter and again at the decision; no root decision registry:Host@1184,registry:Host@1226,registry:Host@1247,registry:Host@1271,registry:Host@5182,registry:ImportGate@2694,registry:ImportGate@3609,registry:Status@2487,registry:Status@3595,whole:Route@1653,whole:Route@1943,whole:Route@3375,whole:Route@3566,whole:Route@4699,whole:Route@5048,whole:Route@5223,whole:Route@5259,whole:Timer@1051,whole:Timer@1155,whole:Timer@1177,whole:Timer@1240,whole:Timer@1264,whole:Timer@1280,whole:Timer@4374,whole:Timer@4703,whole:Timer@5263,whole:Timer@820,whole:Timer@902 8dc7c12d55bce58cb399d7c6a15d62a145f3239cb3bb98833c78f58aa64826fc

+internal/schedule/runner.go Runner.Tick legacy accepted-legacy accepted-legacy;rev3=PROPOSED-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its scheduler: main's body with an uncommitted import's row given no tick, at the pre-filter and again at the decision; no root decision registry:Host@1184,registry:Host@1226,registry:Host@1247,registry:Host@1271,registry:Host@5182,registry:ImportGate@2694,registry:ImportGate@3609,registry:Status@2487,registry:Status@3595,whole:Route@1653,whole:Route@1943,whole:Route@3375,whole:Route@3566,whole:Route@4699,whole:Route@5048,whole:Route@5223,whole:Route@5259,whole:Timer@1051,whole:Timer@1155,whole:Timer@1177,whole:Timer@1240,whole:Timer@1264,whole:Timer@1280,whole:Timer@4374,whole:Timer@4703,whole:Timer@5263,whole:Timer@820,whole:Timer@902 8dc7c12d55bce58cb399d7c6a15d62a145f3239cb3bb98833c78f58aa64826fc

+@fields A,Account,Accounts,AddedAt,Addr,Addrs,Alias,Aliases,Alive,App,Archives,Args,At,Attempts,B,Backing,Bucket,BuildState,Callback,CallbackError,CallbackFailed,Canary,Caps,CertExpiresAt,Changed,Channel,CheckedAt,ClaimIncarnation,ClaimOwner,ClaimOwnership,ClaimRowID,ClaimStamp,Class,Contents,CreatedAt,DBPath,DNSCheckedAt,DNSStatus,Deadline,Demand,Digest,DoneBefore,Due,DueAt,Env,EnvBefore,Environment,Error,ErrorKind,ExcludeHosts,ExpectGood,ExpectOp,Expected,F,Failed,FenceGen,Fleet,FleetBox,FleetBoxes,Fleets,From,FromDB,FromOp,FromSock,Gate,GoodDemand,GoodDigest,GoodVersion,Hash,Health,Held,Hibernate,HoldOp,Host,Hosts,ID,Id,IdValue,Idle,IdleSeconds,ImportGate,Journal,Keep,Kind,Label,LastAt,LastError,LastMs,LastStatus,Limit,MaxRun,MaxRunSeconds,Method,Ms,Name,Next,NextAt,NextDue,NextGood,NextValue,Now,Number,Number64,Observed,ObservedValue,Old,On,Op,Original,Owner,Ownership,P,Path,Paths,Platform,Pool,Prefix,Prev,PrevVersion,Provisioned,RecordKey,Region,Registration,Replica,Replicas,Replication,Retirement,Route,Routes,Row,Rows,Seed,SeedID,SeedSource,ServingVersion,Slug,Socket,Spec,Sqid,State,Status,StatusNamed,Steering,StringMap,T,TValue,Tags,Target,Targets,Text,Timer,Timers,Times,To,ToDB,ToOp,ToSock,TokenHash,Tunnel,Unit,UpdateSettings,Ver,Version,W,WakeIncarnation,Wildcards,closed,conn,connect,ctx,d,dec,done,enc,full,input,mu,output,path,remote,sql,wait

+@coverage . 1e94e1644297311bfaeec977a479d454eb39c6ab51e7cdd57f2dbc452cd92033

+@coverage cmd/console 0554957d7bc31eb4553b6a98c7481738d11bfd4fb809277bf7e0cc723422ad2e

+@coverage internal/activator 4b51e5d52e47d8bf641c80225c8ed3aaceff5f4195c3e35fc8743c8e544aa9c3

+@coverage internal/console 14f3cbaa75545fe3c7a481ee6952fc98541483ef905c7033b3ffb18111e45949

+@coverage internal/dbdoor 0109cd1cd4f0ca14d57bc6562166424273f770d8261e60b738c61f9a6d080dd9

+@coverage internal/domains 5567102a98888ddde8215456353a92b21eb06298d3a4040a37efe614d83b7712

+@coverage internal/edge 7204f5dbc67ed7f7e50e649f0d66a206b973021d5df01e1204f399940a72c7b5

+@coverage internal/edgesfile c862243226bf37d4ce1a064310189b83e7e493ed4104612a9e1c59817587f18c

+@coverage internal/host 6cd5529acda8af6cd32ee0081012b8f7b6b4bcb0332132cba2ac2ec9d9711a15

+@coverage internal/host/units d5cb4f1dbfb14212e7d032e47b2c078f2e34cb5edfad2d41afa5e00618a4e8e8

+@coverage internal/hostbox c280e0c7a8c572aa3ebfd6dd9c26930f0066a1dd0d044197621fe2e7bc5be98f

+@coverage internal/hostops c8359a1002567bf29bd1950674fb51fc398c74f4d55df52d04aab152c3be23fb

+@coverage internal/lease 25a3a38c25844638a2ae9d153bbb2940352464869f314e8b2486b56948f43cd7

+@coverage internal/objstore 1090e9de29388fe1a90553d2bd529bba355ba9997aa3f139011e638de18db414

+@coverage internal/provision 23d7dcec8048b5d76a4bfac0191994c10b873a8d554341f5638a54767118b1fe

+@coverage internal/registry 00bbadaf906eac94af2c466161d57ef9da8ff09241de8bdf5b7ea62c4849cba3

+@coverage internal/release 40edff9a5f84594ec70a0a553ddc4ad92dc67dffea94ddccc4ea58470574897d

+@coverage internal/schedule 295d28a90ab322dd05781d30bde48bffcf8e8eb49884460c02a1b559bf72259b

+@coverage internal/seeds 433f3cc6c1b885bf7b95c4530fc1af78e5d3b64b578a7dee919797afbdc09967