carlos / platform Public

adopt: hand a named unit's whole process group to root (#315, Astra P2)

A route with no Unit of its own whose upstream, account, app and channel
match a route that names one is served by that unit's process
(processGroup). The first commit handed only the bound route to root, so
the agent still repointed and stamped such a sibling: X-Carlos-Version
would claim v2 while console.service ran v1. Before #315's change the
bound route's failed restart poisoned v2 for siblings that sorted after
it; the hand-off poisons nothing, so it now covers the group itself
(unitServed). A registry that cannot be listed hands the route to root.

Summary

RootRestartsUnits covers every route a named unit serves, not just the
one that names it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

claude 5 days ago c216596b334c10aed254080d06e779292f700b9b parent 71483ea

3 files changed, +75 −8

internal/release/adopt.go +11 −8
internal/release/rollback.go +26 −0
internal/release/rootunits_test.go +38 −0

CI failed — run details

CI log

=== gate ===
go: downloading github.com/aws/aws-sdk-go-v2 v1.44.0
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.6
go: downloading github.com/aws/aws-sdk-go-v2/service/sns v1.43.0
go: downloading github.com/aws/aws-sdk-go-v2/service/s3 v1.105.0
go: downloading modernc.org/sqlite v1.55.0
go: downloading github.com/aws/aws-sdk-go-v2/service/route53 v1.64.1
go: downloading github.com/benbjohnson/litestream v0.5.14
go: downloading github.com/superfly/ltx v0.5.1
go: downloading github.com/aws/aws-sdk-go-v2/service/ec2 v1.324.0
go: downloading github.com/aws/aws-sdk-go-v2/service/autoscaling v1.74.0
go: downloading github.com/aws/smithy-go v1.28.1
go: downloading github.com/aws/aws-sdk-go-v2/service/acm v1.45.0
go: downloading github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.68.0
go: downloading github.com/aws/aws-sdk-go-v2/service/iam v1.58.2
go: downloading github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.37.0
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.45.6
go: downloading github.com/oschwald/maxminddb-golang v1.13.1
go: downloading golang.org/x/crypto v0.53.0
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/aws/aws-sdk-go-v2/service/ssm v1.74.0
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.6
go: downloading github.com/pion/logging v0.2.4
go: downloading github.com/pion/stun/v3 v3.0.1
go: downloading github.com/pion/turn/v4 v4.1.4
go: downloading golang.org/x/net v0.56.0
go: downloading github.com/klauspost/compress v1.18.0
go: downloading github.com/aws/aws-sdk-go-v2/service/sesv2 v1.66.6
go: downloading github.com/aws/aws-sdk-go-v2/service/costexplorer v1.67.5
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.40
go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.38
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.19
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.40
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.16
go: downloading github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4
go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.0.4
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.30.8
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.12
go: downloading github.com/pierrec/lz4/v4 v4.1.22
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.40
go: downloading github.com/pion/randutil v0.1.0
go: downloading github.com/pion/transport/v4 v4.0.1
go: downloading github.com/pion/transport/v3 v3.0.8
go: downloading github.com/pion/dtls/v3 v3.0.7
go: downloading github.com/prometheus/client_golang v1.17.0
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.18
go: downloading github.com/lmittmann/tint v1.1.3
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.23
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.31
go: downloading github.com/wlynxg/anet v0.0.5
go: downloading github.com/prometheus/common v0.45.0
go: downloading google.golang.org/protobuf v1.36.10
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/prometheus/procfs v0.12.0
go: downloading github.com/prometheus/client_model v0.5.0
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading golang.org/x/text v0.38.0
go: downloading github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0
go: downloading modernc.org/libc v1.74.1
go: downloading modernc.org/memory v1.11.0
go: downloading modernc.org/mathutil v1.7.1
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
go: downloading golang.org/x/tools v0.47.0
go: downloading golang.org/x/mod v0.37.0
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	318.526s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	2.752s
ok  	github.com/carlosframework/platform/cmd/moveprobe	93.305s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.714s
ok  	github.com/carlosframework/platform/internal/activator	250.897s
ok  	github.com/carlosframework/platform/internal/agentsock	0.015s
ok  	github.com/carlosframework/platform/internal/alerting	0.004s
ok  	github.com/carlosframework/platform/internal/analytics	0.023s
ok  	github.com/carlosframework/platform/internal/appconfig	2.473s
ok  	github.com/carlosframework/platform/internal/apperr	0.077s
ok  	github.com/carlosframework/platform/internal/applog	0.157s
ok  	github.com/carlosframework/platform/internal/awsinv	0.004s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.006s
ok  	github.com/carlosframework/platform/internal/boxid	0.780s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.009s
ok  	github.com/carlosframework/platform/internal/caps	0.012s
ok  	github.com/carlosframework/platform/internal/certwarm	0.004s
ok  	github.com/carlosframework/platform/internal/cgroup	0.707s
ok  	github.com/carlosframework/platform/internal/changelog	0.317s
ok  	github.com/carlosframework/platform/internal/claimactivation	0.820s
ok  	github.com/carlosframework/platform/internal/clamd	0.056s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	407.641s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	6.208s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.010s
ok  	github.com/carlosframework/platform/internal/dbverify	0.005s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.003s
ok  	github.com/carlosframework/platform/internal/docsite	0.004s
ok  	github.com/carlosframework/platform/internal/domains	2.357s
ok  	github.com/carlosframework/platform/internal/doorkey	0.006s
ok  	github.com/carlosframework/platform/internal/economics	0.004s
ok  	github.com/carlosframework/platform/internal/edge	45.082s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.008s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.132s
ok  	github.com/carlosframework/platform/internal/gate	1.655s
ok  	github.com/carlosframework/platform/internal/genselect	0.017s
ok  	github.com/carlosframework/platform/internal/geo	0.010s
ok  	github.com/carlosframework/platform/internal/geoip	0.031s
ok  	github.com/carlosframework/platform/internal/historyreadback	0.154s
ok  	github.com/carlosframework/platform/internal/host	187.610s
ok  	github.com/carlosframework/platform/internal/hostactors	6.530s
ok  	github.com/carlosframework/platform/internal/hostactors/awsmembership	0.016s
ok  	github.com/carlosframework/platform/internal/hostbox	2.636s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.586s
ok  	github.com/carlosframework/platform/internal/hostenv	0.016s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.016s
ok  	github.com/carlosframework/platform/internal/hostexec	5.331s
ok  	github.com/carlosframework/platform/internal/hostfence	0.031s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.967s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.016s
ok  	github.com/carlosframework/platform/internal/hostguard	1.033s
ok  	github.com/carlosframework/platform/internal/hostops	1.668s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.016s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.015s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.472s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.152s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.015s
ok  	github.com/carlosframework/platform/internal/infraview	0.015s
ok  	github.com/carlosframework/platform/internal/instancectl	5.276s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.762s
ok  	github.com/carlosframework/platform/internal/instancefs	0.018s
ok  	github.com/carlosframework/platform/internal/instancekey	0.017s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.027s
ok  	github.com/carlosframework/platform/internal/layout	1.600s
ok  	github.com/carlosframework/platform/internal/lbhealth	0.003s
ok  	github.com/carlosframework/platform/internal/lease	9.839s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.006s
ok  	github.com/carlosframework/platform/internal/ledger	0.015s
ok  	github.com/carlosframework/platform/internal/mail	0.165s
ok  	github.com/carlosframework/platform/internal/maintenance	0.079s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.700s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.068s
ok  	github.com/carlosframework/platform/internal/metrics	0.005s
ok  	github.com/carlosframework/platform/internal/moves	21.597s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.811s
ok  	github.com/carlosframework/platform/internal/objstore	0.173s
ok  	github.com/carlosframework/platform/internal/ops	0.172s
ok  	github.com/carlosframework/platform/internal/park	0.201s
ok  	github.com/carlosframework/platform/internal/privatefile	0.007s
2026/10/19 23:38:36 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/19 23:38:36 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/19 23:38:36 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/19 23:38:36 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/19 23:38:36 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/19 23:38:36 provision: an app's records could not be listed: they are skipped
2026/10/19 23:38:36 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:38:36 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/19 23:38:36 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/19 23:38:36 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/19 23:38:36 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/19 23:38:36 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/19 23:38:36 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/19 23:38:36 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/19 23:38:36 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/19 23:38:36 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/19 23:38:36 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/19 23:38:36 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/19 23:38:36 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/19 23:38:36 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/19 23:38:36 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/19 23:38:36 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/19 23:38:36 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/19 23:38:36 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/19 23:38:36 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/19 23:38:36 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/19 23:38:36 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:38:36 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:38:36 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:38:36 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/19 23:38:36 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:38:36 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:38:36 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:36 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/19 23:38:37 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/19 23:38:37 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/19 23:38:37 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/19 23:38:37 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/19 23:38:37 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/19 23:38:37 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (4.68s)
    plan14_root_reads_test.go:940: root read census: 5 discrepancies
        changed root read internal/release/adopt.go:adoptHost; review class, task, sites and digest
        changed root source envelope internal/host
        changed root source envelope internal/release
        stale root read internal/release/adopt.go:type passConfig
        unclassified root read internal/release/rollback.go:unitServed registry:App@281,registry:App@290,registry:Host@244,registry:Host@254,registry:Unit@265,registry:Unit@70,whole:Route@119,whole:Route@233,whole:Route@316,whole:Route@335,whole:Route@351,whole:Route@379,whole:Route@398
2026/10/19 23:40:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:01 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/19 23:40:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged acme.go.tito.io channel stable -> edge
2026/10/19 23:40:02 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/19 23:40:02 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/19 23:40:02 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/19 23:40:02 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged acme.go.tito.io hibernate false -> true
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged acme.go.tito.io status-named false -> true
2026/10/19 23:40:02 provision: converged acme.go.tito.io status-named true -> false
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/19 23:40:02 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/19 23:40:02 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/19 23:40:02 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/19 23:40:02 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/19 23:40:02 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/19 23:40:02 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/19 23:40:02 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/19 23:40:02 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/19 23:40:02 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:40:02 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/19 23:40:02 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/19 23:40:02 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/19 23:40:02 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/19 23:40:02 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/19 23:40:02 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/19 23:40:02 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/19 23:40:02 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/19 23:40:02 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/19 23:40:02 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/19 23:40:02 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/19 23:40:02 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/19 23:40:02 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/19 23:40:02 provision: converged acme.go.tito.io channel stable -> edge
2026/10/19 23:40:02 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/19 23:40:02 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/19 23:40:02 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/19 23:40:02 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/19 23:40:02 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/19 23:40:02 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/19 23:40:02 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/19 23:40:02 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/19 23:40:02 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/19 23:40:02 provision: dry-run: would converge owned.go.tito.io seed
2026/10/19 23:40:02 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/19 23:40:02 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/19 23:40:02 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/19 23:40:02 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/19 23:40:02 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/19 23:40:02 provision: converged owned.go.tito.io channel stable -> edge
2026/10/19 23:40:02 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/19 23:40:02 provision: converged owned.go.tito.io hibernate false -> true
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/19 23:40:02 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/19 23:40:02 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/19 23:40:02 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/19 23:40:02 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/19 23:40:02 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: removed retired static route site.go.tito.io (record gone)
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:02 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/19 23:40:03 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/19 23:40:03 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:03 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/19 23:40:03 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/19 23:40:03 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/19 23:40:03 provision: converged acme.go.tito.io channel stable -> edge
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/19 23:40:03 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/19 23:40:03 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/19 23:40:03 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/19 23:40:03 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/19 23:40:03 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/19 23:40:03 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/19 23:40:03 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/19 23:40:03 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/19 23:40:03 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/19 23:40:03 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/19 23:40:03 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/19 23:40:03 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/19 23:40:03 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/19 23:40:03 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:40:03 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/19 23:40:03 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:40:03 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/19 23:40:03 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:40:03 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/19 23:40:03 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:40:03 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/19 23:40:03 provision: a.shop.example.com: swapped for import sd_n6nicnixkbwfophj24n5wakf24 (the original route is journaled)
2026/10/19 23:40:03 provision: a.shop.example.com: import sd_n6nicnixkbwfophj24n5wakf24 committed: its gate is cleared and its journal row dropped
2026/10/19 23:40:03 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_xpbdmbee6nxt4jgz4p6l3ae2sm rolled back to its original route
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_xpbdmbee6nxt4jgz4p6l3ae2sm: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_xpbdmbee6nxt4jgz4p6l3ae2sm is cleaned up and its journal row retired
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_uiorcmgk4estntqrgfcwrfr5yy rolled back to its original route
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_uiorcmgk4estntqrgfcwrfr5yy: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_uiorcmgk4estntqrgfcwrfr5yy is cleaned up and its journal row retired
2026/10/19 23:40:04 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_vavzdvqxnixqhgv244pkuvh4xe
2026/10/19 23:40:04 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/19 23:40:04 provision: dry-run: would converge a.shop.example.com seed source
2026/10/19 23:40:04 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:04 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/19 23:40:04 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/19 23:40:04 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_idq7skabw5fiblg6q3fjcxx27u cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_tnaxm5k42ein3ykgoj5m7it6jq cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_3yodvzezoksccmar4gsxlmfqmy is journaled, but this box cannot act on imports; its row is left alone
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_ieehvg3xphpy3gyhxq6g6x7lde is journaled, but this box cannot act on imports; its row is left alone
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_3y633knzbtuhp7omnj7xdonjpq is journaled, but this box cannot act on imports; its row is left alone
2026/10/19 23:40:04 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/19 23:40:04 provision: b.shop.example.com: import sd_m2umhygie5we6dnr3bkxrzgatm left alone this pass: the import journal could not be read
2026/10/19 23:40:04 provision: c.shop.example.com: import sd_3ghgwjvouv65afc3d7xuxr626e left alone this pass: the import journal could not be read
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_kavbnhx77lc5khprxtm3gyx2ki committed: its gate is cleared and its journal row dropped
2026/10/19 23:40:04 provision: a.shop.example.com: not converging import sd_bzk3kjd6aqtda7spaakq3ssyha: it is swapped but not committed, and the row on this box has no import gate
2026/10/19 23:40:04 provision: a.shop.example.com: not converging import sd_evwzcoh2zdc4cuz3atc64hfcve: it is swapped but not committed, and the row on this box has no import gate
2026/10/19 23:40:04 provision: a.shop.example.com: not converging import sd_oyajvoygztniywtszqqqtzj3jq: it is placed but not committed, and the row on this box has no import gate
2026/10/19 23:40:04 provision: a.shop.example.com: not converging import sd_qw334d556oyyjw3j2hjdiid4ei: it is placed but not committed, and the row on this box has no import gate
2026/10/19 23:40:04 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:04 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/19 23:40:04 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_covb4ubp3venhf57ghclis3tcm committed: its gate is cleared and its journal row dropped
2026/10/19 23:40:04 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:04 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:04 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/19 23:40:04 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_jcjzlm7axgoeyqsivowgxwmlwe: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_jcjzlm7axgoeyqsivowgxwmlwe rolled back (no box had swapped it)
2026/10/19 23:40:04 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/19 23:40:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:04 provision: removed instance route acme.go.tito.io (its seed sd_ozw6mj5443h5eesyntgnpp6w5a was aborted); the next pass rolls it back
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_ozw6mj5443h5eesyntgnpp6w5a: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_ozw6mj5443h5eesyntgnpp6w5a rolled back (no box had swapped it)
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_arzf5bnsd56wkjh2mv37zgqhh4 has a row this pass may not remove; leaving the seed aborted
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_miujgnchpavt4kw345oud7c73u rolled back (no box had swapped it)
2026/10/19 23:40:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:04 provision: removed instance route acme.go.tito.io (its seed sd_aadt7b7em4x7sidsdqbsgfkuj4 was aborted); the next pass rolls it back
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_aadt7b7em4x7sidsdqbsgfkuj4 has no route on this box: its local data is removed
2026/10/19 23:40:04 provision: acme.go.tito.io: aborted seed sd_aadt7b7em4x7sidsdqbsgfkuj4 rolled back (no box had swapped it)
2026/10/19 23:40:04 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_qwukyt265py36neo5wcd5ky6mi (the original route is journaled)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_qwukyt265py36neo5wcd5ky6mi rolled back to its original route
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_qwukyt265py36neo5wcd5ky6mi is cleaned up and its journal row retired
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_fg5skhkgjzrg5ghoz2o63p3p3i (the original route is journaled)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_fg5skhkgjzrg5ghoz2o63p3p3i rolled back to its original route
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_fg5skhkgjzrg5ghoz2o63p3p3i is cleaned up and its journal row retired
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_f6keol5pglzpsttqbsmbazq3sy (the original route is journaled)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_f6keol5pglzpsttqbsmbazq3sy rolled back to its original route
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_f6keol5pglzpsttqbsmbazq3sy: the host's replica is left alone: its record no longer names this seed
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_f6keol5pglzpsttqbsmbazq3sy is cleaned up and its journal row retired
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_5od7ppcaolqrx5y2u5j32mohy4 (the original route is journaled)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_5od7ppcaolqrx5y2u5j32mohy4 rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_5od7ppcaolqrx5y2u5j32mohy4 rolled back to its original route
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_5od7ppcaolqrx5y2u5j32mohy4 is cleaned up and its journal row retired
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_4g3ri4453lyvac77kcapmyppdi (the original route is journaled)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_4g3ri4453lyvac77kcapmyppdi rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_ejdclsq6tiubazgiffwsbovqbi (the original route is journaled)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_ejdclsq6tiubazgiffwsbovqbi is cleaned up and its journal row retired
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_b24nykubt4ssaoeddtv3bitb6q (the original route is journaled)
2026/10/19 23:40:04 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_b24nykubt4ssaoeddtv3bitb6q left alone this pass: its record could not be read
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_s6wbuoceic6aduvauutqfztena (the original route is journaled)
2026/10/19 23:40:04 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_s6wbuoceic6aduvauutqfztena left alone this pass: its record could not be read
2026/10/19 23:40:04 provision: a.shop.example.com: swapped for import sd_7hir7la6yrjyomyhs2fsqew4lq (the original route is journaled)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_7hir7la6yrjyomyhs2fsqew4lq: close the import gate: constraint failed: injected (1811)
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_7hir7la6yrjyomyhs2fsqew4lq rolled back to its original route
2026/10/19 23:40:04 provision: a.shop.example.com: import sd_7hir7la6yrjyomyhs2fsqew4lq is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_k6cvtve6ruy2gviaksbceqe3iq (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_k6cvtve6ruy2gviaksbceqe3iq: close the import gate: constraint failed: injected (1811)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_k6cvtve6ruy2gviaksbceqe3iq rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_k6cvtve6ruy2gviaksbceqe3iq is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_y4mqjovgyzj3xmbxfwnvnrh4bu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_y4mqjovgyzj3xmbxfwnvnrh4bu rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_y4mqjovgyzj3xmbxfwnvnrh4bu rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_y4mqjovgyzj3xmbxfwnvnrh4bu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_6bvebsz23ps5nksbqdoj6547qi (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_6bvebsz23ps5nksbqdoj6547qi rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_6bvebsz23ps5nksbqdoj6547qi is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_5gg7rdlcjapv2noj55iopr3zmu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_5gg7rdlcjapv2noj55iopr3zmu: retire its instance key: injected failure at retire-key
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_5gg7rdlcjapv2noj55iopr3zmu rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_5gg7rdlcjapv2noj55iopr3zmu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_v4hvhwwe4up32wuiiwdvtz4eee (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_v4hvhwwe4up32wuiiwdvtz4eee rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_v4hvhwwe4up32wuiiwdvtz4eee is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_kyg5sv3e7dlpsds24ivpwrmdle (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_kyg5sv3e7dlpsds24ivpwrmdle: remove its local data: injected failure at remove-local
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_kyg5sv3e7dlpsds24ivpwrmdle rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_kyg5sv3e7dlpsds24ivpwrmdle is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_nzxx4womqu432255c76ifanv4e (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_nzxx4womqu432255c76ifanv4e rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_nzxx4womqu432255c76ifanv4e is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_jgagplaethx24pstvakt6ch2fa (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_jgagplaethx24pstvakt6ch2fa: remove its local data: injected failure at remove-local-done
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_jgagplaethx24pstvakt6ch2fa rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_jgagplaethx24pstvakt6ch2fa is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_srs3vkpfvg4weedzkfocxg5vfq (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_srs3vkpfvg4weedzkfocxg5vfq rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_srs3vkpfvg4weedzkfocxg5vfq is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_vxlpyb5php7rabtlkv3liyj2ne (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_vxlpyb5php7rabtlkv3liyj2ne: restore the original route: constraint failed: injected (1811)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_vxlpyb5php7rabtlkv3liyj2ne rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_vxlpyb5php7rabtlkv3liyj2ne is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_zl6zpksnnijvzdyvksmtisqcnu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_zl6zpksnnijvzdyvksmtisqcnu: restore the original route: constraint failed: injected (1811)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_zl6zpksnnijvzdyvksmtisqcnu rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_zl6zpksnnijvzdyvksmtisqcnu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_c7itxcnrcupvjfozwevvefhtua (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_c7itxcnrcupvjfozwevvefhtua is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_7dq3xoupvho7mbkxd6cn77fodu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_7dq3xoupvho7mbkxd6cn77fodu rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_7dq3xoupvho7mbkxd6cn77fodu: delete its snapshot: injected failure at delete-snapshot
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_7dq3xoupvho7mbkxd6cn77fodu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_yda7cmkxed4y6mduoirigfv6r4 (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_yda7cmkxed4y6mduoirigfv6r4 rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_yda7cmkxed4y6mduoirigfv6r4 is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_mcdxm4vi6bo5skmz7u5jve35w4 (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_mcdxm4vi6bo5skmz7u5jve35w4 rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_mcdxm4vi6bo5skmz7u5jve35w4: delete the host's replica: injected failure at delete-replica
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_mcdxm4vi6bo5skmz7u5jve35w4 is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_lz55eaphhyr4pasxirdzp5gdsq (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_lz55eaphhyr4pasxirdzp5gdsq rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_lz55eaphhyr4pasxirdzp5gdsq is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_gxt7xw3biz2f5zlusx5mpzbp3y (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_gxt7xw3biz2f5zlusx5mpzbp3y rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_gxt7xw3biz2f5zlusx5mpzbp3y: retire its journal row: constraint failed: injected (1811)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_gxt7xw3biz2f5zlusx5mpzbp3y is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_c76wp7fo5khjr4q7fkjnw564ee (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_c76wp7fo5khjr4q7fkjnw564ee rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_c76wp7fo5khjr4q7fkjnw564ee: retire its journal row: constraint failed: injected (1811)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_c76wp7fo5khjr4q7fkjnw564ee is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_lyzuv7ohssnyreoeu26ohtmyti (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_lyzuv7ohssnyreoeu26ohtmyti rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_lyzuv7ohssnyreoeu26ohtmyti is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: mark import sd_lyzuv7ohssnyreoeu26ohtmyti rolled back: injected failure at cas
2026/10/19 23:40:05 provision: a.shop.example.com: aborted seed sd_lyzuv7ohssnyreoeu26ohtmyti rolled back (no box had swapped it)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_b42rspybi536wemxtpcu7yinli (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_b42rspybi536wemxtpcu7yinli rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_b42rspybi536wemxtpcu7yinli is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: aborted seed sd_b42rspybi536wemxtpcu7yinli rolled back (no box had swapped it)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_xbbyrbntsdivrcu2tb53jy3aj4 (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_xbbyrbntsdivrcu2tb53jy3aj4 rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_xbbyrbntsdivrcu2tb53jy3aj4 rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_xbbyrbntsdivrcu2tb53jy3aj4 rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_xbbyrbntsdivrcu2tb53jy3aj4 is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_7ynqiaief7pqoxdqrreg5ujkui (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_7ynqiaief7pqoxdqrreg5ujkui rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_7ynqiaief7pqoxdqrreg5ujkui is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_tox6nnrvysq62y2kw6b7upeany (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_tox6nnrvysq62y2kw6b7upeany rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_tox6nnrvysq62y2kw6b7upeany is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_m5s4dletw32ybjkke47bnninzu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_m5s4dletw32ybjkke47bnninzu rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_m5s4dletw32ybjkke47bnninzu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_sjx4fs24lequrfirs7zbk5q27e (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_sjx4fs24lequrfirs7zbk5q27e rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_sjx4fs24lequrfirs7zbk5q27e is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_5ne3pyzsp3bnflrmo3utg4yxm4 (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_5ne3pyzsp3bnflrmo3utg4yxm4 rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_5ne3pyzsp3bnflrmo3utg4yxm4 is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_n6pusfz4buvghs4pxsy7qaxafu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_n6pusfz4buvghs4pxsy7qaxafu rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_n6pusfz4buvghs4pxsy7qaxafu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_dnsmnhd7drbx3polobo4ge4zqe (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_dnsmnhd7drbx3polobo4ge4zqe rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_dnsmnhd7drbx3polobo4ge4zqe is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_5gle2povohmuesprgvv56dfodu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_5gle2povohmuesprgvv56dfodu has no route on this box: its local data is removed and no route is put back
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_5gle2povohmuesprgvv56dfodu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_j2dl7hypb7itpdlq3x3b5ird2u (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_xybjqnshfe7dy3wca6kkfroaj4 (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_wyc4l75rzj6bmuhd7kdv5tyyda (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_wyc4l75rzj6bmuhd7kdv5tyyda cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_zz7jtum5lriz7ek4nguw3ir63q (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_zz7jtum5lriz7ek4nguw3ir63q is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/19 23:40:05 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/19 23:40:05 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_fml3d5rbdx73vlknk4aiuunrze (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_r6m55ebhkqog7yhvqp4tvxoloa (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_ls5trgpvazb5qlh6z37hvlyjla (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_76bnlknk2cvhxigojufb6fdpim (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_jqo5ha357cxndowx336dlleonq (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_jqo5ha357cxndowx336dlleonq rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_q2uksywctb27wba2id75zqc2o4 (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_q2uksywctb27wba2id75zqc2o4 has no route on this box: its local data is removed and no route is put back
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_q2uksywctb27wba2id75zqc2o4 is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_bri72y2lf3ooryo6t7tc47mtm4 (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_bri72y2lf3ooryo6t7tc47mtm4: remove its local data: injected failure at remove-local
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_bri72y2lf3ooryo6t7tc47mtm4 is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_x2r5m5ymptymvvmbnubfybj7ee (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_x2r5m5ymptymvvmbnubfybj7ee: a route appeared at the host, so its local database is left and the rollback waits
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_3hb6uw2rxnmwdpqf42yqdbonum (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_3hb6uw2rxnmwdpqf42yqdbonum rollback deferred: no fence generation: registry busy
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_a5tqybqrw2qe54bwdluq3gvomu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_a5tqybqrw2qe54bwdluq3gvomu rollback deferred: no fence generation: the generation source answered 0
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_hg74r6wq2ilbqqchalszg5yckm (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_2s3xizo3s6o7zk5gfmdt5ox7wq (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_vk5rpvtokuullmhuslfmtszbsq (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/19 23:40:05 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_n7durbmcivmqjewgt7kufsrdwu (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_n7durbmcivmqjewgt7kufsrdwu rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_n7durbmcivmqjewgt7kufsrdwu is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_cexiyq2qqgapjxbdmsbzpav7se (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_cexiyq2qqgapjxbdmsbzpav7se rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_cexiyq2qqgapjxbdmsbzpav7se is cleaned up and its journal row retired
2026/10/19 23:40:05 provision: a.shop.example.com: swapped for import sd_glfbe2d5oomf65lj3xg2a4vhoi (the original route is journaled)
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_glfbe2d5oomf65lj3xg2a4vhoi rolled back to its original route
2026/10/19 23:40:05 provision: a.shop.example.com: import sd_glfbe2d5oomf65lj3xg2a4vhoi is cleaned up and its journal row retired
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_cg5chrfcppod6tyfksokah5tfy (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_cg5chrfcppod6tyfksokah5tfy: retire its instance key: the env file is a symlink
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_cg5chrfcppod6tyfksokah5tfy rolled back to its original route
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_cg5chrfcppod6tyfksokah5tfy is cleaned up and its journal row retired
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_gxrcigqvpesp4htenkrchthq7q (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_eb2tyobzldc2hceddo5kqtnr4e (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_r24brayjwgsabpdo3dxlr3lihi refused: there is no route at a.shop.example.com to replace
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_xc37spni6lgihq6t26zggpy6f4 refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_2vd3jumtru2ajrjfaktm3mqzwa refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_ybobflqk2iykmsgxiafr7ferme refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_ex4pmeazqojhi324wy5tne57uu refused: the route belongs to app other
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_z6ilzacdlkwca2yplkzda53avm refused: the route is filed under another account
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_pnqywomg7uwy3thusjybm3nuwu refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_lpecofwbsnhsrib3xsxqzw45tu refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_ajuj3qhywf3zmy7q5hhcinfpxy refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_c7kwvc3wpxc6vauv3ssc4vb42y refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_iyjymfncqahfnkabj4cbqvd7vi refused: the route is not an address route this import can take over (socket)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_3lzfxdiaa3aeoj4bnu347kds2u refused: the route is not an address route this import can take over (no address)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_qjqcdsxrpmrp3hb3bicek6vkee refused: the route is not an address route this import can take over (provisioned)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_trqerd7za2bt3qvqmm36webwxq refused: the route is not an address route this import can take over (kind static)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_g5zv76qmwib552lhptuscozyry refused: the route is not an address route this import can take over (backing)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_srg2kr45xkfcnv5sn6ixgqvory refused: the route is not an address route this import can take over (tunnel)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_4dygkcm2n3552g2wpvvaku644m refused: the route is not an address route this import can take over (caps)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_hhamlr4uhtvhquum5o2tjsqrsq refused: the route is not an address route this import can take over (platform)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_nw3ubjaggkej2tkzaz5dk7osxu refused: the route is not an address route this import can take over (canary)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_6dbhrf7lrxrad63lumcc7nbm3y refused: the route is not an address route this import can take over (kind sidecar)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_wawdpjrhxqov3czzxsawbv2f44 refused: the route is not an address route this import can take over (region)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_l5zlfhqwg56kgmrgba7iane7ae refused: the route is not an address route this import can take over (fleet_box)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_qkvk6hns2k3ylrwqth2mrpo6yu refused: the route is not an address route this import can take over (hibernate)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_g6ps36hetpvpzhzbjvd5ispalq refused: the route is not an address route this import can take over (claim_owner)
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_dwoooe6tlogz27vts7oed7aq6i refused: this box does not run instances nested
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_uvajz2a5iyfbra7b4lieywjzwm refused: this box does not run instances nested
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_jrzowlp2jafwfqokdgh3ksio4q refused: claim control is on for this box
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_u7uhjkmag4pqv5shgx7rvi763i (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_lwr46wkerms3ltcq2hkufewhkm (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/19 23:40:06 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_qgmg44tyd54dx7b4h7sf74n2lm: its verify hash is not a sha256
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_i7tucavmu7vs3keeh47qgqijly: its verify hash is not a sha256
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_jpibpztjmfhw354nmygmpwxun4: its verify hash is not a sha256
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/19 23:40:06 provision: A.shop.example.com/..: not swapping for import sd_wf32emdhsiwd673xcrnipvgsoy: its host or seed id is malformed (seeds: not a host)
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_l2zmauq2oeki7vcdnyne4t2hhi: its record does not describe a nested, hibernating instance
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_ltznahevabvtbyxafuiggs2dnm: its record does not describe a nested, hibernating instance
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_n6ereng34wyflpa4r72qteswnm: its record does not describe a nested, hibernating instance
2026/10/19 23:40:06 provision: a.shop.example.com: not swapping for import sd_uwclsbod3oyrestiwvyq4swc6m: its record does not describe a nested, hibernating instance
2026/10/19 23:40:06 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_7rjgzfmi3zduuvwfkz3zgc5nnq (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_isng7t4pdtgmamqgpmyrimeo7a (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_xq2vvypvb7xitcdxpbiyufv5ea (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/19 23:40:06 provision: dry-run: would consider swapping a.shop.example.com for import sd_26tiloju5ole7rri5dcje3vn2y
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_i2r64i3dfyq5u7w7rxbtgu7yve rolled back to its original route
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_i2r64i3dfyq5u7w7rxbtgu7yve: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_i2r64i3dfyq5u7w7rxbtgu7yve is cleaned up and its journal row retired
2026/10/19 23:40:06 provision: a.shop.example.com: import sd_mv4szwe22ys4jxmbsoy4qlzlqa left alone: the import journal holds seed sd_3hiyjzbbvhtyugh3mvj3tcrnvy at swapped
2026/10/19 23:40:06 provision: a.shop.example.com: not minting import sd_myvuflbkqqyzvwldjuifz6btti: it is swapped but not committed, and only its swap makes its row
2026/10/19 23:40:06 provision: a.shop.example.com: not minting import sd_4r5epuppnrctkhnz4q5mirjjke: it is placed but not committed, and only its swap makes its row
2026/10/19 23:40:06 provision: a.shop.example.com: swapped for import sd_aykosqqnzehauuc35gzh4dafne (the original route is journaled)
2026/10/19 23:40:06 provision: a.shop.example.com: not minting import sd_aykosqqnzehauuc35gzh4dafne: it is swapped but not committed, and only its swap makes its row
2026/10/19 23:40:06 provision: a.shop.example.com: not minting import sd_aykosqqnzehauuc35gzh4dafne: it is placed but not committed, and only its swap makes its row
2026/10/19 23:40:06 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/19 23:40:06 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/19 23:40:06 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:06 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:06 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/19 23:40:06 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:06 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/19 23:40:06 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:06 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/19 23:40:06 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/19 23:40:06 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/19 23:40:06 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/19 23:40:06 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/19 23:40:06 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/19 23:40:06 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/19 23:40:06 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/19 23:40:06 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/19 23:40:06 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/19 23:40:06 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/19 23:40:06 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/19 23:40:07 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/19 23:40:07 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/19 23:40:07 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:07 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/19 23:40:07 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/19 23:40:07 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:07 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/19 23:40:07 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:07 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:07 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/19 23:40:07 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/19 23:40:07 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:07 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/19 23:40:07 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/19 23:40:07 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/19 23:40:07 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/19 23:40:07 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/19 23:40:07 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/19 23:40:07 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/19 23:40:07 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:07 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/19 23:40:07 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:07 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:07 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/19 23:40:07 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/19 23:40:07 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/19 23:40:07 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/19 23:40:07 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/19 23:40:07 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/19 23:40:07 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL	github.com/carlosframework/platform/internal/provision	90.937s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.008s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	5.757s
ok  	github.com/carlosframework/platform/internal/relay	7.285s
ok  	github.com/carlosframework/platform/internal/release	26.697s
ok  	github.com/carlosframework/platform/internal/rollout	3.698s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.004s
ok  	github.com/carlosframework/platform/internal/rootaws	0.007s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.058s
ok  	github.com/carlosframework/platform/internal/rootstate	0.026s
ok  	github.com/carlosframework/platform/internal/runs	0.584s
ok  	github.com/carlosframework/platform/internal/s3compat	0.004s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.513s
ok  	github.com/carlosframework/platform/internal/seeds	0.011s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	12.001s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	4.105s
ok  	github.com/carlosframework/platform/internal/status	0.065s
ok  	github.com/carlosframework/platform/internal/steering	0.005s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.247s
ok  	github.com/carlosframework/platform/internal/svcrole	0.002s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.005s
ok  	github.com/carlosframework/platform/internal/unixdial	0.003s
ok  	github.com/carlosframework/platform/internal/updatewords	0.004s
ok  	github.com/carlosframework/platform/internal/usage	0.005s
ok  	github.com/carlosframework/platform/internal/version	0.008s
ok  	github.com/carlosframework/platform/internal/vet	1.573s
FAIL
make: *** [Makefile:18: test] Error 1

amadan: step gate failed: exit status 2

amadan: job failed at step gate — its output is above, not at the tail of this log

diff --git a/internal/release/adopt.go b/internal/release/adopt.go

index 2f790c3af..2867b8797 100644

--- a/internal/release/adopt.go

+++ b/internal/release/adopt.go

@@ -174,10 +174,13 @@ var ErrUnitRestartNeedsRoot = errors.New("release: a route's named unit is resta

// poisoned the version and tried to start the old build over a process that

// had never stopped.

-// With it, a route that names its unit is handed to root before anything is

-// staged or repointed, through OnStageBlocked with ErrUnitRestartNeedsRoot,

-// the way a build this process cannot stage is. The live link keeps naming

-// the running build, nothing is poisoned and no refusal is recorded; root's

+// With it, a route that names its unit, and every route in that unit's

+// process group (processGroup: same account, app, channel and upstream), is

+// handed to root before anything is staged or repointed, through

+// OnStageBlocked with ErrUnitRestartNeedsRoot, the way a build this process

+// cannot stage is. The live links keep naming the running build, so no

+// sibling is stamped with a build the unit does not run. Nothing is poisoned

+// and no refusal is recorded; root's

// pass stages, repoints, restarts and stamps. Every hold, refusal and proof

// check before the hand-off still applies, so root is only asked for a build

// this pass would have installed.

@@ -1519,10 +1522,10 @@ func adoptHost(ctx context.Context, work hostwrite.Work, reg *registry.Registry,

if !admitted {

return

}

- // A named unit this process cannot restart is root's (RootRestartsUnits):

- // ask for its pass and touch nothing. Silent on the tick; the requester

- // logs each request it writes.

- if cfg.unitsToRoot && rt.Unit != "" && restart != nil && !cfg.hostWrites.Enabled {

+ // A named unit this process cannot restart is root's (RootRestartsUnits),

+ // and so is every route its process serves: ask for root's pass and touch

+ // nothing. Silent on the tick; the requester logs each request it writes.

+ if cfg.unitsToRoot && restart != nil && !cfg.hostWrites.Enabled && unitServed(reg, rt) {

if cfg.stageBlocked != nil {

cfg.stageBlocked(rt.Host, ver, ErrUnitRestartNeedsRoot)

}

diff --git a/internal/release/rollback.go b/internal/release/rollback.go

index dcdbe3831..830a0f6cf 100644

--- a/internal/release/rollback.go

+++ b/internal/release/rollback.go

@@ -66,6 +66,32 @@ func processGroup(reg *registry.Registry, bound registry.Route) []registry.Route

return out

}

+// unitServed reports whether rt's process is a unit an operator named: rt

+// names one itself, or rt is in the processGroup of a route that does. A

+// registry that cannot be listed answers true, so a RootRestartsUnits pass

+// hands the route to root rather than stamp a build the unit may not run.

+func unitServed(reg *registry.Registry, rt registry.Route) bool {

+ if rt.Unit != "" {

+ return true

+ }

+ up := upstream(rt)

+ if up == "" {

+ return false

+ }

+ all, err := reg.List()

+ if err != nil {

+ return true

+ }

+ for _, r := range all {

+ if r.Host != rt.Host && r.Unit != "" && r.App == rt.App &&

+ RouteAccount(r) == RouteAccount(rt) && upstream(r) == up &&

+ routeChannel(r) == routeChannel(rt) {

+ return true

+ }

+ return false

// rollbackGroup puts every group route whose link names the rejected version

// onto restored (what bound now runs), stamps it to match, and returns bound

// and every group host: the hosts writeGroupRefusals refuses. restored ""

diff --git a/internal/release/rootunits_test.go b/internal/release/rootunits_test.go

index 6310fa3cd..497e81219 100644

--- a/internal/release/rootunits_test.go

+++ b/internal/release/rootunits_test.go

@@ -112,3 +112,41 @@ func TestRootRestartsUnitsNeedsANamedUnitAndARestart(t *testing.T) {

t.Fatalf("live = %q, %v, relays %d; want v1 and no relay", ver, err, relays)

}

+// Astra review of #315: a route with no unit of its own whose process is a

+// named unit (same account, app, channel and upstream) is root's too. Stamped

+// by the agent it would claim a build console.service does not run.

+func TestRootRestartsUnitsHandsTheProcessGroupToRoot(t *testing.T) {

+ ctx, reg, s, pub, opt := startUnitFixture(t, "console.example.com")

+ if err := reg.SetUnit("console.example.com", ""); err != nil {

+ t.Fatal(err)

+ }

+ groupFixtureRoute(t, reg, "platform.example.com", "", "127.0.0.1:8090", "console.service")

+ if err := reg.SetUpstreams("console.example.com", "127.0.0.1:8090", "", ""); err != nil {

+ t.Fatal(err)

+ }

+ if err := PointLive(opt, "platform.example.com", "bab", "old", "console"); err != nil {

+ t.Fatal(err)

+ }

+ var relayed []string

+ relay := func(host, ver string, err error) {

+ if errors.Is(err, ErrUnitRestartNeedsRoot) {

+ relayed = append(relayed, host)

+ }

+ restart := func(host string) error {

+ t.Errorf("restart(%s): every host here is the unit's", host)

+ return nil

+ }

+ if err := Pass(ctx, reg, s, pub, opt, restart, OnStageBlocked(relay), RootRestartsUnits()); err != nil {

+ t.Fatal(err)

+ }

+ if len(relayed) != 2 {

+ t.Fatalf("relayed = %v, want both hosts", relayed)

+ }

+ for _, h := range []string{"console.example.com", "platform.example.com"} {

+ if ver, err := LiveVersion(opt, h); err != nil || ver != "old" {

+ t.Fatalf("%s live = %q, %v; want old", h, ver, err)

+ }