amadan
harness: Run 11b window 20261021T0816Z: G6-G9 PASS on 27303f54 (journal-migrate accepts the router cache); snapshot post-8.2b
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 files changed,
+639
−0
harness/RUNLOG.md+25 −0harness/evidence/run11b/window.log+614 −0
CI failed — run details
CI log
=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok amadan.net/carlos/platform.git/launchctx 0.011s
? amadan.net/carlos/platform.git/launchctx/controlname [no test files]
? amadan.net/carlos/platform.git/launchctx/wireid [no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok github.com/carlosframework/platform 304.834s
? github.com/carlosframework/platform/cmd/changelog [no test files]
ok github.com/carlosframework/platform/cmd/console 2.896s
ok github.com/carlosframework/platform/cmd/moveprobe 93.240s
ok github.com/carlosframework/platform/cmd/zddprobe 0.711s
? github.com/carlosframework/platform/harness/apps/wakecheck [no test files]
ok github.com/carlosframework/platform/internal/activator 250.359s
ok github.com/carlosframework/platform/internal/agentsock 0.016s
ok github.com/carlosframework/platform/internal/alerting 0.004s
ok github.com/carlosframework/platform/internal/analytics 0.021s
ok github.com/carlosframework/platform/internal/appconfig 2.487s
ok github.com/carlosframework/platform/internal/apperr 0.070s
ok github.com/carlosframework/platform/internal/applog 0.124s
ok github.com/carlosframework/platform/internal/awsinv 0.004s
ok github.com/carlosframework/platform/internal/boxchoice 0.004s
ok github.com/carlosframework/platform/internal/boxid 0.567s
? github.com/carlosframework/platform/internal/boxid/boxidtest [no test files]
? github.com/carlosframework/platform/internal/boxid/internal/signtest [no test files]
ok github.com/carlosframework/platform/internal/boxvolumes 0.008s
ok github.com/carlosframework/platform/internal/caps 0.012s
ok github.com/carlosframework/platform/internal/certwarm 0.002s
ok github.com/carlosframework/platform/internal/cgroup 0.710s
ok github.com/carlosframework/platform/internal/changelog 0.329s
ok github.com/carlosframework/platform/internal/claimactivation 0.840s
ok github.com/carlosframework/platform/internal/clamd 0.055s
? github.com/carlosframework/platform/internal/cliflag [no test files]
ok github.com/carlosframework/platform/internal/console 404.016s
? github.com/carlosframework/platform/internal/controlname [no test files]
? github.com/carlosframework/platform/internal/controlsock [no test files]
ok github.com/carlosframework/platform/internal/dbdoor 5.807s
ok github.com/carlosframework/platform/internal/dbdoor/dbdoortest 0.011s
ok github.com/carlosframework/platform/internal/dbverify 0.004s
ok github.com/carlosframework/platform/internal/dnsrec 0.002s
ok github.com/carlosframework/platform/internal/docsite 0.005s
ok github.com/carlosframework/platform/internal/domains 2.353s
ok github.com/carlosframework/platform/internal/doorkey 0.006s
ok github.com/carlosframework/platform/internal/economics 0.004s
ok github.com/carlosframework/platform/internal/edge 44.822s
? github.com/carlosframework/platform/internal/edgeproof [no test files]
ok github.com/carlosframework/platform/internal/edgesfile 0.008s
ok github.com/carlosframework/platform/internal/fleetapi 0.131s
ok github.com/carlosframework/platform/internal/gate 1.660s
ok github.com/carlosframework/platform/internal/genselect 0.018s
ok github.com/carlosframework/platform/internal/geo 0.014s
ok github.com/carlosframework/platform/internal/geoip 0.031s
ok github.com/carlosframework/platform/internal/historyreadback 0.150s
ok github.com/carlosframework/platform/internal/host 180.451s
ok github.com/carlosframework/platform/internal/hostactors 5.920s
ok github.com/carlosframework/platform/internal/hostactors/awsmembership 0.013s
ok github.com/carlosframework/platform/internal/hostbox 2.616s
ok github.com/carlosframework/platform/internal/hostclaim 0.560s
ok github.com/carlosframework/platform/internal/hostenv 0.013s
ok github.com/carlosframework/platform/internal/hostevidence 0.013s
ok github.com/carlosframework/platform/internal/hostexec 4.992s
ok github.com/carlosframework/platform/internal/hostfence 0.034s
ok github.com/carlosframework/platform/internal/hostfiles 10.521s
ok github.com/carlosframework/platform/internal/hostfloor 0.018s
ok github.com/carlosframework/platform/internal/hostguard 1.005s
ok github.com/carlosframework/platform/internal/hostops 1.581s
? github.com/carlosframework/platform/internal/hostops/fencerelease [no test files]
ok github.com/carlosframework/platform/internal/hostops/internal/fencerelease 0.012s
ok github.com/carlosframework/platform/internal/hostquarantine 0.013s
ok github.com/carlosframework/platform/internal/hostrelocate 0.463s
ok github.com/carlosframework/platform/internal/hostresolve 0.141s
ok github.com/carlosframework/platform/internal/hostwrite 0.014s
ok github.com/carlosframework/platform/internal/infraview 0.017s
ok github.com/carlosframework/platform/internal/instancectl 5.226s
ok github.com/carlosframework/platform/internal/instanceexec 2.742s
ok github.com/carlosframework/platform/internal/instancefs 0.017s
ok github.com/carlosframework/platform/internal/instancekey 0.014s
ok github.com/carlosframework/platform/internal/instanceupdates 0.021s
ok github.com/carlosframework/platform/internal/layout 1.526s
ok github.com/carlosframework/platform/internal/lbhealth 0.014s
ok github.com/carlosframework/platform/internal/lease 9.838s
ok github.com/carlosframework/platform/internal/lease/leasetest 0.006s
ok github.com/carlosframework/platform/internal/ledger 0.019s
ok github.com/carlosframework/platform/internal/mail 0.172s
ok github.com/carlosframework/platform/internal/maintenance 0.087s
ok github.com/carlosframework/platform/internal/maintenanceexec 5.542s
ok github.com/carlosframework/platform/internal/maintenanceguard 0.072s
ok github.com/carlosframework/platform/internal/metrics 0.005s
ok github.com/carlosframework/platform/internal/moves 21.000s
ok github.com/carlosframework/platform/internal/moves/archive 0.846s
ok github.com/carlosframework/platform/internal/objstore 0.174s
ok github.com/carlosframework/platform/internal/ops 0.182s
ok github.com/carlosframework/platform/internal/park 0.223s
ok github.com/carlosframework/platform/internal/privatefile 0.003s
2026/10/21 08:20:23 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/21 08:20:23 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/21 08:20:24 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/21 08:20:24 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/21 08:20:24 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/21 08:20:24 provision: an app's records could not be listed: they are skipped
2026/10/21 08:20:24 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:20:24 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/21 08:20:24 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/21 08:20:24 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/21 08:20:24 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/21 08:20:24 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/21 08:20:24 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/21 08:20:24 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 08:20:24 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/21 08:20:24 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 08:20:24 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/21 08:20:24 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 08:20:24 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 08:20:24 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/21 08:20:24 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 08:20:24 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/21 08:20:24 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/21 08:20:24 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/21 08:20:24 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/21 08:20:24 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 08:20:24 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:20:24 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:24 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:24 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 08:20:24 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:24 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:24 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/21 08:20:24 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/21 08:20:24 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/21 08:20:24 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/21 08:20:24 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 08:20:24 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:24 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (4.48s)
plan14_root_reads_test.go:940: root read census: 154 discrepancies
changed root read internal/hostfence/writer.go:OpenRootFenceStore; review class, task, sites and digest
changed root source envelope harness
changed root source envelope harness/apps/wakecheck
changed root source envelope harness/boxes
changed root source envelope harness/boxes/shims
changed root source envelope harness/checks
changed root source envelope harness/console
changed root source envelope harness/infra
changed root source envelope harness/infra-copies/747f699/dev
changed root source envelope harness/infra-copies/a0b3f5a/dev
changed root source envelope harness/infra-copies/a0b3f5a/scripts
changed root source envelope harness/infra-copies/pr47
changed root source envelope harness/operator
changed root source envelope harness/release
changed root source envelope harness/scenarios
changed root source envelope harness/scenarios/cohort1
changed root source envelope harness/scenarios/cohort1/blocks
changed root source envelope harness/stand-ins
changed root source envelope internal/host
changed root source envelope internal/hostfence
changed root source envelope internal/publicrelease
changed root source envelope internal/s3compat
unclassified root read harness/apps/wakecheck/main.go:main file:Exec@333,file:Exec@804,file:Open@277,file:QueryRow@870
unclassified root read harness/boxes/boxes-up.sh:external file:external@0
unclassified root read harness/boxes/dmi-shim.sh:external file:external@0
unclassified root read harness/boxes/layout-probe.sh:external file:external@0
unclassified root read harness/boxes/leo-ext4-from.sh:external file:external@0
unclassified root read harness/boxes/leo-ext4.sh:external file:external@0
unclassified root read harness/boxes/leo-swap.sh:external file:external@0
unclassified root read harness/boxes/shims/systemd-zram-setup@.service:external file:external@0
unclassified root read harness/boxes/vendor-shims.sh:external file:external@0
unclassified root read harness/checks/check2.sh:external file:external@0
unclassified root read harness/checks/check5.sh:external file:external@0
unclassified root read harness/checks/check6.sh:external file:external@0
unclassified root read harness/checks/check6b.sh:external file:external@0
unclassified root read harness/checks/check7.sh:external file:external@0
unclassified root read harness/checks/check8.sh:external file:external@0
unclassified root read harness/checks/fix5.sh:external file:external@0
unclassified root read harness/checks/run6b.sh:external file:external@0
unclassified root read harness/checks/snap-base.sh:external file:external@0
unclassified root read harness/checks/snap-boot.sh:external file:external@0
unclassified root read harness/checks/ssmsmoke.sh:external file:external@0
unclassified root read harness/console/console-ext4.sh:external file:external@0
unclassified root read harness/console/console-setup.sh:external file:external@0
unclassified root read harness/console/signin.sh:external file:external@0
unclassified root read harness/console/system-update.sh:external file:external@0
unclassified root read harness/donor-user-data.sh:external file:external@0
unclassified root read harness/evidence.sh:external file:external@0
unclassified root read harness/host-setup.sh:external file:external@0
unclassified root read harness/host-user-data.sh:external file:external@0
unclassified root read harness/hrun.sh:external file:external@0
unclassified root read harness/infra-copies/747f699/dev/host-init.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/dev/host-init.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/scripts/bootstrap-box.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/scripts/ship-app.sh:external file:external@0
unclassified root read harness/infra-copies/a0b3f5a/scripts/update-platform-binary.sh:external file:external@0
unclassified root read harness/infra-copies/pr47/probe.sh:external file:external@0
unclassified root read harness/infra-copies/pr47/remediation.sh:external file:external@0
unclassified root read harness/infra/infra-setup.sh:external file:external@0
unclassified root read harness/operator/operator-setup.sh:external file:external@0
unclassified root read harness/release/release-setup.sh:external file:external@0
unclassified root read harness/release/release-window.sh:external file:external@0
unclassified root read harness/release/step7-operator.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/50-publish-record.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/51-open-signer.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/51-roster-resume.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/51-roster.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/61-sign.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/61a-install-channel.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/62-guard-arm.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/63-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/63-sophie.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-console-report.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-evidence-key.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7-runtime.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/74-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7a-leo.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/7a-run.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/acceptance.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b1.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b2-c8.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b2-list.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b2.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4-after.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4-pair.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4-pair2.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4-resume.sophie.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b4.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/b5.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-preroll-bucket.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-preroll.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-preroll.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-r16.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-reroll.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-roll.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-wait-cache.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-watch.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10-window.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g10b-b4.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g4-roll.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g5.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/g9-check.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/p9.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/place-parent.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/pw-seed.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-a1-normal.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-console-upgrade.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-grow.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-move-precheck.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-move-setup.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-move.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-nest-watch.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-prep.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r10-report.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-console-e1.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-console.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-devcheck.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-move-precheck.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-move-setup.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-move.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-normal.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-rearm.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-release.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/r9-setup.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-roll.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm-strict2.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm2.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/rearm3.host.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/reports.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/run-leo.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-env.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-identity.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-open-signer.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w-sums.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w81.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w81b.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82-f4.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82-f5.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w82b.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w84.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/blocks/w9.box.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/box-helpers.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/signer-helpers.sh:external file:external@0
unclassified root read harness/scenarios/cohort1/ssm.sh:external file:external@0
unclassified root read harness/scenarios/sync.sh:external file:external@0
unclassified root read harness/snapshot.sh:external file:external@0
unclassified root read harness/stand-ins/certs.sh:external file:external@0
unclassified root read internal/s3compat/harness.go:readHarnessFile file:ReadFile@189,file:Stat@55
changed reclassified declaration internal/hostfence/writer.go:OpenRootFenceStore
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged acme.go.tito.io channel stable -> edge
2026/10/21 08:20:55 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/21 08:20:55 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/21 08:20:55 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/21 08:20:55 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged acme.go.tito.io hibernate false -> true
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged acme.go.tito.io status-named false -> true
2026/10/21 08:20:55 provision: converged acme.go.tito.io status-named true -> false
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 08:20:55 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 08:20:55 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 08:20:55 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/21 08:20:55 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/21 08:20:55 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/21 08:20:55 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/21 08:20:55 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/21 08:20:55 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/21 08:20:55 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:55 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/21 08:20:55 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/21 08:20:55 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/21 08:20:55 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 08:20:55 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 08:20:55 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/21 08:20:55 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:55 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 08:20:55 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/21 08:20:55 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/21 08:20:55 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 08:20:55 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/21 08:20:55 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/21 08:20:55 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/21 08:20:55 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 08:20:55 provision: converged acme.go.tito.io channel stable -> edge
2026/10/21 08:20:55 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 08:20:55 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/21 08:20:55 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/21 08:20:55 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 08:20:55 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/21 08:20:55 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/21 08:20:55 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/21 08:20:56 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/21 08:20:56 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/21 08:20:56 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/21 08:20:56 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 08:20:56 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 08:20:56 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/21 08:20:56 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/21 08:20:56 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/21 08:20:56 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/21 08:20:56 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/21 08:20:56 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/21 08:20:56 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/21 08:20:56 provision: dry-run: would converge owned.go.tito.io seed
2026/10/21 08:20:56 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 08:20:56 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/21 08:20:56 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/21 08:20:56 provision: converged owned.go.tito.io channel stable -> edge
2026/10/21 08:20:56 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/21 08:20:56 provision: converged owned.go.tito.io hibernate false -> true
2026/10/21 08:20:56 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/21 08:20:56 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/21 08:20:56 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: removed retired static route site.go.tito.io (record gone)
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/21 08:20:56 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/21 08:20:56 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:56 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/21 08:20:56 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/21 08:20:56 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/21 08:20:56 provision: converged acme.go.tito.io channel stable -> edge
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/21 08:20:56 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/21 08:20:56 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/21 08:20:56 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/21 08:20:56 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/21 08:20:56 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/21 08:20:56 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/21 08:20:56 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/21 08:20:56 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/21 08:20:56 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/21 08:20:56 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/21 08:20:56 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/21 08:20:56 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/21 08:20:56 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/21 08:20:56 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:56 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/21 08:20:56 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:56 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/21 08:20:56 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:56 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/21 08:20:56 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:56 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/21 08:20:57 provision: a.shop.example.com: swapped for import sd_j3zlahmxgmb3j7yzjeky5bmtsi (the original route is journaled)
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_j3zlahmxgmb3j7yzjeky5bmtsi committed: its gate is cleared and its journal row dropped
2026/10/21 08:20:57 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_ftowww6qmt2d4ho67krxdzixfq rolled back to its original route
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_ftowww6qmt2d4ho67krxdzixfq: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_ftowww6qmt2d4ho67krxdzixfq is cleaned up and its journal row retired
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_alpqpti6g3rw3xclh75ycmkaje rolled back to its original route
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_alpqpti6g3rw3xclh75ycmkaje: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_alpqpti6g3rw3xclh75ycmkaje is cleaned up and its journal row retired
2026/10/21 08:20:57 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_mbezrf63vfeguqtjzk63ezszwi
2026/10/21 08:20:57 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/21 08:20:57 provision: dry-run: would converge a.shop.example.com seed source
2026/10/21 08:20:57 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:57 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/21 08:20:57 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/21 08:20:57 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_ojiexowrof6kcpmt2gksbevn4i cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_yoycsywgkxrvotm3ezzi5fxs7y cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_a2lr65aqxzx4jbq2trsnfujs4m is journaled, but this box cannot act on imports; its row is left alone
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_fblwbmq2mz4y3vn2xiu533xuui is journaled, but this box cannot act on imports; its row is left alone
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_vwqbbsru72vt47ddb5gukydi3e is journaled, but this box cannot act on imports; its row is left alone
2026/10/21 08:20:57 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/21 08:20:57 provision: b.shop.example.com: import sd_nhj7djddfyoxwsc4q65qh3ln6u left alone this pass: the import journal could not be read
2026/10/21 08:20:57 provision: c.shop.example.com: import sd_455eoqetydgl5ytphsvmouwc3q left alone this pass: the import journal could not be read
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_kpggsteewozh47tnjdwn5moouq committed: its gate is cleared and its journal row dropped
2026/10/21 08:20:57 provision: a.shop.example.com: not converging import sd_3burwj2xw2bhncifh7wxtoxay4: it is swapped but not committed, and the row on this box has no import gate
2026/10/21 08:20:57 provision: a.shop.example.com: not converging import sd_5ajkkrp6s6zz5656oox454vxga: it is swapped but not committed, and the row on this box has no import gate
2026/10/21 08:20:57 provision: a.shop.example.com: not converging import sd_htv3smvaub53cqkrtzfqojg75q: it is placed but not committed, and the row on this box has no import gate
2026/10/21 08:20:57 provision: a.shop.example.com: not converging import sd_dzlupm65vd2xqqm6ttqvidrqpm: it is placed but not committed, and the row on this box has no import gate
2026/10/21 08:20:57 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:57 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/21 08:20:57 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:57 provision: a.shop.example.com: import sd_6it74cq4pcm7mxxk77p3ifknna committed: its gate is cleared and its journal row dropped
2026/10/21 08:20:57 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:57 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:57 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/21 08:20:57 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_upyplqiwouzf42b25l6ih6lvay: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_upyplqiwouzf42b25l6ih6lvay rolled back (no box had swapped it)
2026/10/21 08:20:57 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/21 08:20:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:57 provision: removed instance route acme.go.tito.io (its seed sd_jpgk74p44oejroi2fmpoazdm7a was aborted); the next pass rolls it back
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_jpgk74p44oejroi2fmpoazdm7a: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_jpgk74p44oejroi2fmpoazdm7a rolled back (no box had swapped it)
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_i44mtbelrcmiovwjzwp4hgobrm has a row this pass may not remove; leaving the seed aborted
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_mskpsjlwm3qy2nqvfdpex7ftcm rolled back (no box had swapped it)
2026/10/21 08:20:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:57 provision: removed instance route acme.go.tito.io (its seed sd_yrqen36dvjzvi74q75xtnvdlyu was aborted); the next pass rolls it back
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_yrqen36dvjzvi74q75xtnvdlyu has no route on this box: its local data is removed
2026/10/21 08:20:57 provision: acme.go.tito.io: aborted seed sd_yrqen36dvjzvi74q75xtnvdlyu rolled back (no box had swapped it)
2026/10/21 08:20:57 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_uxbfnromm5lkqteoghkkpwszmu (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_uxbfnromm5lkqteoghkkpwszmu rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_uxbfnromm5lkqteoghkkpwszmu is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_xv4dylm6ao256ad7x3qj4fi6ka (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_xv4dylm6ao256ad7x3qj4fi6ka rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_xv4dylm6ao256ad7x3qj4fi6ka is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_ie2ivfvfnhns6bzfsbdoypduyq (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_ie2ivfvfnhns6bzfsbdoypduyq rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_ie2ivfvfnhns6bzfsbdoypduyq: the host's replica is left alone: its record no longer names this seed
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_ie2ivfvfnhns6bzfsbdoypduyq is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_5ykavxt7kaa4miiow2dy2rnt2m (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_5ykavxt7kaa4miiow2dy2rnt2m rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_5ykavxt7kaa4miiow2dy2rnt2m rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_5ykavxt7kaa4miiow2dy2rnt2m is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_4tjw4pcxlshzdud24gykqhz4ty (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_4tjw4pcxlshzdud24gykqhz4ty rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_rtfaiio4kvu2bolcw3ru7cqxue (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_rtfaiio4kvu2bolcw3ru7cqxue is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_6u7v6b4kcvbbanpaj4kaet5oia (the original route is journaled)
2026/10/21 08:20:58 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6u7v6b4kcvbbanpaj4kaet5oia left alone this pass: its record could not be read
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_ljmsl3gvy2i4n33a52aqnsx6oi (the original route is journaled)
2026/10/21 08:20:58 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_ljmsl3gvy2i4n33a52aqnsx6oi left alone this pass: its record could not be read
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_wyelxltky6vzrq32nwr2ks6lee (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_wyelxltky6vzrq32nwr2ks6lee: close the import gate: constraint failed: injected (1811)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_wyelxltky6vzrq32nwr2ks6lee rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_wyelxltky6vzrq32nwr2ks6lee is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_fu5tdo77qeusqh5omgw2ymxw5y (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fu5tdo77qeusqh5omgw2ymxw5y: close the import gate: constraint failed: injected (1811)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fu5tdo77qeusqh5omgw2ymxw5y rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fu5tdo77qeusqh5omgw2ymxw5y is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_edwyzczl7d7qy6rsnwnwm6mci4 (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_edwyzczl7d7qy6rsnwnwm6mci4 rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_edwyzczl7d7qy6rsnwnwm6mci4 rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_edwyzczl7d7qy6rsnwnwm6mci4 is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_wnvosyzkw76kyz6fwc3fitcbiy (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_wnvosyzkw76kyz6fwc3fitcbiy rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_wnvosyzkw76kyz6fwc3fitcbiy is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_6zazlw4btk7nmujhzpggf6jsjy (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6zazlw4btk7nmujhzpggf6jsjy: retire its instance key: injected failure at retire-key
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6zazlw4btk7nmujhzpggf6jsjy rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6zazlw4btk7nmujhzpggf6jsjy is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_7sascxify2opu25ev7ruzllp4m (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_7sascxify2opu25ev7ruzllp4m rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_7sascxify2opu25ev7ruzllp4m is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_sq2d73war7npgtet2aevutn7je (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_sq2d73war7npgtet2aevutn7je: remove its local data: injected failure at remove-local
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_sq2d73war7npgtet2aevutn7je rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_sq2d73war7npgtet2aevutn7je is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_tzhc2uktt7mws5cqlhvobaok6a (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_tzhc2uktt7mws5cqlhvobaok6a rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_tzhc2uktt7mws5cqlhvobaok6a is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_fxqjugr5amwg7kvdc2nstbm4ti (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fxqjugr5amwg7kvdc2nstbm4ti: remove its local data: injected failure at remove-local-done
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fxqjugr5amwg7kvdc2nstbm4ti rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fxqjugr5amwg7kvdc2nstbm4ti is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_ifxgo4olwotwfycwlpbih674k4 (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_ifxgo4olwotwfycwlpbih674k4 rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_ifxgo4olwotwfycwlpbih674k4 is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_7ziscecj7qceglp7qghualxhee (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_7ziscecj7qceglp7qghualxhee: restore the original route: constraint failed: injected (1811)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_7ziscecj7qceglp7qghualxhee rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_7ziscecj7qceglp7qghualxhee is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_xfoldrlpu52wvrwau7zf3euhtm (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_xfoldrlpu52wvrwau7zf3euhtm: restore the original route: constraint failed: injected (1811)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_xfoldrlpu52wvrwau7zf3euhtm rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_xfoldrlpu52wvrwau7zf3euhtm is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_yutn6idlzf4i73c65cm4jbwm6e (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_yutn6idlzf4i73c65cm4jbwm6e is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_67bf64uupoml7zivcigazfbe6e (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_67bf64uupoml7zivcigazfbe6e rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_67bf64uupoml7zivcigazfbe6e: delete its snapshot: injected failure at delete-snapshot
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_67bf64uupoml7zivcigazfbe6e is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_6hbyj5qqz6ccba5iv2wtv5oece (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6hbyj5qqz6ccba5iv2wtv5oece rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6hbyj5qqz6ccba5iv2wtv5oece is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_o7llayie7lywlxuxaobqovktmu (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_o7llayie7lywlxuxaobqovktmu rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_o7llayie7lywlxuxaobqovktmu: delete the host's replica: injected failure at delete-replica
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_o7llayie7lywlxuxaobqovktmu is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_b6cfwojzjryxwsrhdmcrpbkudi (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_b6cfwojzjryxwsrhdmcrpbkudi rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_b6cfwojzjryxwsrhdmcrpbkudi is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_4xaf2b22o4uvqce5ffpcsyfvgi (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_4xaf2b22o4uvqce5ffpcsyfvgi rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_4xaf2b22o4uvqce5ffpcsyfvgi: retire its journal row: constraint failed: injected (1811)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_4xaf2b22o4uvqce5ffpcsyfvgi is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_fh2toq5thzta4vohzaligrjboi (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fh2toq5thzta4vohzaligrjboi rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fh2toq5thzta4vohzaligrjboi: retire its journal row: constraint failed: injected (1811)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_fh2toq5thzta4vohzaligrjboi is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_gycbhpl55dnrbp2d62xjgfksnm (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_gycbhpl55dnrbp2d62xjgfksnm rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_gycbhpl55dnrbp2d62xjgfksnm is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: mark import sd_gycbhpl55dnrbp2d62xjgfksnm rolled back: injected failure at cas
2026/10/21 08:20:58 provision: a.shop.example.com: aborted seed sd_gycbhpl55dnrbp2d62xjgfksnm rolled back (no box had swapped it)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_h34beywu6yt2tfx4rfyisf32bu (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_h34beywu6yt2tfx4rfyisf32bu rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_h34beywu6yt2tfx4rfyisf32bu is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: aborted seed sd_h34beywu6yt2tfx4rfyisf32bu rolled back (no box had swapped it)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_si4olamnfkbzdg2o7kzklj3why (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_si4olamnfkbzdg2o7kzklj3why rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_si4olamnfkbzdg2o7kzklj3why rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_si4olamnfkbzdg2o7kzklj3why rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_si4olamnfkbzdg2o7kzklj3why is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_mc2bb5fcvqq7fszmwgj6usxlga (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_mc2bb5fcvqq7fszmwgj6usxlga rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_mc2bb5fcvqq7fszmwgj6usxlga is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_7nibjwkemw7mqqix5ady7bcfei (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_7nibjwkemw7mqqix5ady7bcfei rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_7nibjwkemw7mqqix5ady7bcfei is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_eixbfy44y3drc2y7rycn52egim (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_eixbfy44y3drc2y7rycn52egim rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_eixbfy44y3drc2y7rycn52egim is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_s6qmnk4oogebnqv454toxvqojy (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_s6qmnk4oogebnqv454toxvqojy rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_s6qmnk4oogebnqv454toxvqojy is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_6paxxct7wbp74cmxmzpl3gruxi (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6paxxct7wbp74cmxmzpl3gruxi rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_6paxxct7wbp74cmxmzpl3gruxi is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_t6uky7ji4zir5lerclw2qetwgm (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_t6uky7ji4zir5lerclw2qetwgm rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_t6uky7ji4zir5lerclw2qetwgm is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_yw54vv3peqjrcpjrloplktsyc4 (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_yw54vv3peqjrcpjrloplktsyc4 rolled back to its original route
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_yw54vv3peqjrcpjrloplktsyc4 is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_su6el3kc2xhrpdxme22wlquq4m (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_su6el3kc2xhrpdxme22wlquq4m has no route on this box: its local data is removed and no route is put back
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_su6el3kc2xhrpdxme22wlquq4m is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_zrxjsqqmx5wvpqtmmjgxalp57u (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_73mwfkwji3gqvngduvonrgwgvu (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_xxprj3tzddrl6u6yockdo3kiwm (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_xxprj3tzddrl6u6yockdo3kiwm cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_szdb3nrrej23it2rugev5o5r3u (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_szdb3nrrej23it2rugev5o5r3u is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/21 08:20:58 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/21 08:20:58 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_6exkolwdx22pdwsucgmpzzpfze (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_uyyssf2qqnx6cabxte5a7gehce (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_rx63y7dj2m6n4hwd3sy6uzou54 (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_dun2rss2z2jllks3turteoa7tm (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_wguolayvjuxql7jh35yrrofoiq (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_wguolayvjuxql7jh35yrrofoiq rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/21 08:20:58 provision: a.shop.example.com: swapped for import sd_e2p3vjcu2ff5ibntjrbn6zoutu (the original route is journaled)
2026/10/21 08:20:58 provision: a.shop.example.com: import sd_e2p3vjcu2ff5ibntjrbn6zoutu has no route on this box: its local data is removed and no route is put back
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_e2p3vjcu2ff5ibntjrbn6zoutu is cleaned up and its journal row retired
2026/10/21 08:20:59 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_ygrhd4yk4fzhdbvlboaznnlnhe (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_ygrhd4yk4fzhdbvlboaznnlnhe: remove its local data: injected failure at remove-local
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_ygrhd4yk4fzhdbvlboaznnlnhe is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_rit22henr2rv4ff5is6aqwlgp4 (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_rit22henr2rv4ff5is6aqwlgp4: a route appeared at the host, so its local database is left and the rollback waits
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_v2ucmxdocv4tfa23s4uwjyn4ve (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_v2ucmxdocv4tfa23s4uwjyn4ve rollback deferred: no fence generation: registry busy
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_doi4jcqnnx5v4mj5x6frn4zxdy (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_doi4jcqnnx5v4mj5x6frn4zxdy rollback deferred: no fence generation: the generation source answered 0
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_fsi666p77kfjrpol5cqrm7tb7i (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_556r7ptcijw3cpwdbletdgbbd4 (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_e2st47xilgw4nwasg46mbcpq4m (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/21 08:20:59 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_m5kobjedlhnpgiy7zjxoejdcpa (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_m5kobjedlhnpgiy7zjxoejdcpa rolled back to its original route
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_m5kobjedlhnpgiy7zjxoejdcpa is cleaned up and its journal row retired
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_p3vhm35xiwdmbtlblpcom7i36a (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_p3vhm35xiwdmbtlblpcom7i36a rolled back to its original route
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_p3vhm35xiwdmbtlblpcom7i36a is cleaned up and its journal row retired
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_rxptux4kmepdvabx4z4pa2xqee (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_rxptux4kmepdvabx4z4pa2xqee rolled back to its original route
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_rxptux4kmepdvabx4z4pa2xqee is cleaned up and its journal row retired
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_mdfbvt3xuhke2glbgoh4itmmkm (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_mdfbvt3xuhke2glbgoh4itmmkm: retire its instance key: the env file is a symlink
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_mdfbvt3xuhke2glbgoh4itmmkm rolled back to its original route
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_mdfbvt3xuhke2glbgoh4itmmkm is cleaned up and its journal row retired
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_qv3qjozc5j6na5gylc3y3zjewe (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_k72oy5eadnfg4k6ztcuj7zpc4m (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_ujw46fpd7hkc5dsusetotlsbbm refused: there is no route at a.shop.example.com to replace
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_hfm7eahc5q3a2bkkmghatgm4oe refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_5ojahoqpg3csf6mdxgc5rk6qoa refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_mnz5rc7tuhx2t7u6eaowb3szku refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_cvg6tb3g72ksb3u5vxyfkmiu4q refused: the route belongs to app other
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_iuul5vfooulf7fsovpc3cmm6pq refused: the route is filed under another account
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_xofp6lhwazo7yj6r2umbwx5cw4 refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_zwpdtnzsfxo6ouvwzqckhwvjee refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_xu5wdvft77gf5a7umms4boyidu refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_srbrp6hxkbpzh2tx7tgzrya3q4 refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_tbg4dvg35rgloazidl3wxb6qbm refused: the route is not an address route this import can take over (socket)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_kayaybp4r6zxe7w6xvlgf3dl6q refused: the route is not an address route this import can take over (no address)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_3v4k6g547ml5aiykn4llngtrjy refused: the route is not an address route this import can take over (provisioned)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_dy3conj7eg2dfqjjhqlvapfxiq refused: the route is not an address route this import can take over (kind static)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_fi4pjcfwvtouwld62juhqw7y6e refused: the route is not an address route this import can take over (backing)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_5xcvetquwqnr3fu7yhh72646ce refused: the route is not an address route this import can take over (tunnel)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_zxtp5mqx6nb6wrr5juqbtsy6mu refused: the route is not an address route this import can take over (caps)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_4ahh4hwi2j3jrm5al5f53h66hu refused: the route is not an address route this import can take over (platform)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_uxs45nad7r7kxn7g6lywgfjwou refused: the route is not an address route this import can take over (canary)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_v3vywrvu3alacjg3yoqt4itwba refused: the route is not an address route this import can take over (kind sidecar)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_2urpjxhlpphzwmsy5ftilh7dgm refused: the route is not an address route this import can take over (region)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_675nnb2v5brfzrub5beiyigj6m refused: the route is not an address route this import can take over (fleet_box)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_7hup23ytkivm27ipvtkoc7dem4 refused: the route is not an address route this import can take over (hibernate)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_nuzmtljfq3mhikb6dln5w4ayea refused: the route is not an address route this import can take over (claim_owner)
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_p6xpot25xaihmrg42y77fdhd5a refused: this box does not run instances nested
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_fijmigk2iiyzu6l5synz2coriu refused: this box does not run instances nested
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_3iphbclwtlp3qxjp6gjrff76si refused: claim control is on for this box
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_kn57ifwhjdwuri26hjtf22vrmu (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_irc4fgmjdh56fqdwqqf54e3u5e (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/21 08:20:59 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_uhgg22n6d6dcxieqtvsz2mkiki: its verify hash is not a sha256
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_ulyyjc4z2ktzgk37w76vgxhqme: its verify hash is not a sha256
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_ifszciun4vcqd7u4rms3b57yee: its verify hash is not a sha256
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/21 08:20:59 provision: A.shop.example.com/..: not swapping for import sd_lcpm4dnlkcsznjlklmchz2gnmm: its host or seed id is malformed (seeds: not a host)
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_a5epymmemmixos55kxrmuoon7q: its record does not describe a nested, hibernating instance
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_k2roqkzpp6eng6so75gqayd3qq: its record does not describe a nested, hibernating instance
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_sbvwkzvbvud3gsd2ewq2f4wlam: its record does not describe a nested, hibernating instance
2026/10/21 08:20:59 provision: a.shop.example.com: not swapping for import sd_zrcykiied6bzzo2x5qfhfq34va: its record does not describe a nested, hibernating instance
2026/10/21 08:20:59 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_4am5votbvxo4uxe6w6jvbpvzbm (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_mmey5jatgciq7qbd7wyvvirree (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_mzlfw7eurcocq7ef5ztzlhnowu (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/21 08:20:59 provision: dry-run: would consider swapping a.shop.example.com for import sd_uawk4bljsocsaofudzozunwgli
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_mrowuf2enkfkqnxt4rravp6lfm rolled back to its original route
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_mrowuf2enkfkqnxt4rravp6lfm: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_mrowuf2enkfkqnxt4rravp6lfm is cleaned up and its journal row retired
2026/10/21 08:20:59 provision: a.shop.example.com: import sd_ilqay5oxet2vlwzlwrqb2qrcpa left alone: the import journal holds seed sd_fjauikujiylp7brgiunkqcqo6y at swapped
2026/10/21 08:20:59 provision: a.shop.example.com: not minting import sd_zzrkeecque7pozepedlovrvsny: it is swapped but not committed, and only its swap makes its row
2026/10/21 08:20:59 provision: a.shop.example.com: not minting import sd_67ica7xuijgddf53ugwj5ak5iy: it is placed but not committed, and only its swap makes its row
2026/10/21 08:20:59 provision: a.shop.example.com: swapped for import sd_fjmka6pap7mbnlpp7obf42zn2q (the original route is journaled)
2026/10/21 08:20:59 provision: a.shop.example.com: not minting import sd_fjmka6pap7mbnlpp7obf42zn2q: it is swapped but not committed, and only its swap makes its row
2026/10/21 08:20:59 provision: a.shop.example.com: not minting import sd_fjmka6pap7mbnlpp7obf42zn2q: it is placed but not committed, and only its swap makes its row
2026/10/21 08:21:00 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/21 08:21:00 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/21 08:21:00 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/21 08:21:00 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/21 08:21:00 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/21 08:21:00 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/21 08:21:00 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/21 08:21:00 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/21 08:21:00 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/21 08:21:00 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/21 08:21:00 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/21 08:21:00 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/21 08:21:00 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/21 08:21:00 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 08:21:00 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/21 08:21:00 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 08:21:00 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/21 08:21:00 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/21 08:21:00 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/21 08:21:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/21 08:21:00 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/21 08:21:00 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/21 08:21:00 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/21 08:21:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:21:00 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/21 08:21:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:21:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:21:00 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/21 08:21:00 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/21 08:21:00 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/21 08:21:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/21 08:21:00 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/21 08:21:00 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/21 08:21:00 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL github.com/carlosframework/platform/internal/provision 36.419s
ok github.com/carlosframework/platform/internal/publicrelease 0.007s
? github.com/carlosframework/platform/internal/regionname [no test files]
ok github.com/carlosframework/platform/internal/registry 5.509s
ok github.com/carlosframework/platform/internal/relay 7.234s
ok github.com/carlosframework/platform/internal/release 23.998s
ok github.com/carlosframework/platform/internal/rollout 3.821s
ok github.com/carlosframework/platform/internal/rolloutwords 0.004s
ok github.com/carlosframework/platform/internal/rootaws 0.006s
ok github.com/carlosframework/platform/internal/rootparticipation 0.057s
ok github.com/carlosframework/platform/internal/rootstate 0.027s
ok github.com/carlosframework/platform/internal/runs 0.577s
ok github.com/carlosframework/platform/internal/s3compat 0.004s
ok github.com/carlosframework/platform/internal/safefile 0.004s
ok github.com/carlosframework/platform/internal/schedule 2.499s
ok github.com/carlosframework/platform/internal/seeds 0.012s
ok github.com/carlosframework/platform/internal/sim/hostlife 9.511s
ok github.com/carlosframework/platform/internal/sim/litestreamfacts 3.773s
ok github.com/carlosframework/platform/internal/status 0.059s
ok github.com/carlosframework/platform/internal/steering 0.005s
ok github.com/carlosframework/platform/internal/stopevidence 0.300s
ok github.com/carlosframework/platform/internal/svcrole 0.002s
ok github.com/carlosframework/platform/internal/telemetry 0.004s
ok github.com/carlosframework/platform/internal/termfence 0.004s
ok github.com/carlosframework/platform/internal/tunnelclient 0.004s
ok github.com/carlosframework/platform/internal/unixdial 0.002s
ok github.com/carlosframework/platform/internal/updatewords 0.004s
ok github.com/carlosframework/platform/internal/usage 0.004s
ok github.com/carlosframework/platform/internal/version 0.002s
ok github.com/carlosframework/platform/internal/vet 1.572s
FAIL
make: *** [Makefile:18: test] Error 1
amadan: step gate failed: exit status 2
amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/harness/RUNLOG.md b/harness/RUNLOG.md| index e7dfb17b1..da555bfa9 100644 |
| --- a/harness/RUNLOG.md |
| +++ b/harness/RUNLOG.md |
| @@ -2539,3 +2539,28 @@ restore, on a fresh build, as briefed. |
| - **Task 9 again after the roll: PASS** (08:15:38Z), every line `0` on leo and in the bucket, rev 17. |
| - **`ls -la /data/system/router` on leo** (08:15:50Z, informational): `requested.json` (133 B, 08:09:02Z) and the |
| version cache `v0.28.17/` (08:09:02Z). Exactly the shape the runbook expects; Run 11's G7 refused this tree. |
| + |
| +## Step 5: the window, WINDOW_ID 20261021T0816Z: G6, G7, G8, G9 PASS (08:16:38-08:18:39Z) |
| + |
| +`blocks/g10-window.host.sh 20261021T0816Z` (`evidence/run11b/window.log`, the full SSM log from the bucket; the inline |
| +copy was cut at step 9). |
| +- **G6 PASS** (08:16:38-51Z): 8.1's twelve units `LoadState=masked`, inactive, `8.1 DONE 08:16:40`. 8.1b: console |
| + stopped on sophie 08:16:40Z (`Result=success ActiveState=inactive`), signer key `root 600 1 45`, `backfill-collect` |
| + one create-only write of `control/hosts-backfill.json` (`before_etag ""`), `{"id":"cohort1-20261021","phase": |
| + "collecting","directory_revision":17,"hosts":[]}`, eight `true`, REV 17. |
| +- **G7 PASS** (08:16:51-53Z): host.env `600 root:root 351` + the two lines; `install-control` dry run and apply; |
| + **`journal-migrate --window` accepted `/data/system/router/v0.28.17/`** (no census refusal: the 27303f54 fix); |
| + mode checks `/var/lib/carlos-claims 700`, `/opt/carlos/system{,/guard,/guard/moves,/guard/seeds} 755 root:root`; |
| + `authority/exec/census.json` present; instance-control active; `migration.json`, `report.json` written; leo's |
| + census report (413 B) `installations` empty (`jq -e` true). |
| +- **G8 PASS** (08:16:53-08:17:07Z): `backfill-done` phase `done`, one If-Match write (`before_etag "14d14f16..."`), |
| + `hosts []`, `unreported ["ada-letterpress"]`, `reports {"kathleen-juggling": "aaae8d6f..."}`, every `jq -e` true, |
| + **8.2b digest check true**: `LEO_CENSUS_SHA aaae8d6fa1046548b6f7531f0b9edead90654a304e27b4e2d29a89aaa9a31380` = |
| + the report's value. REV 17. Console started again on sophie 08:17:02Z, healthz 200 (stopped 8.1b to 8.2b: 21 s). |
| +- Snapshot **`post-8.2b`** (the first of that name; Run 8 took none) (08:17:07-31Z), every container `failed=[]`. |
| +- **G9 PASS** (08:17:31-08:18:39Z): 8.4 checks and restore, `8.4 DONE`; step 9: edge `active` through |
| + `/opt/carlos/system/guard/carlos system guard-exec edge`, enabled, the five triggers active, the six services |
| + inactive; `REFUSING CARLOS_SWAP=overlap (host-claims-on)` once, `signed roster has no home region` 0; leo's report |
| + 08:18:35Z v0.28.17 `a79ed726`, `host_claim_enabled true`, `floor_guard_ready true`; `system status` leo current. |
| + As in Run 8, the idle agent logs `agent: regional claims: hostbox: unresolved lifecycle contract` once a minute |
| + (`hostbox.ErrUnsupported`, `internal/hostbox/work.go:17`) with no claim on the box. |
diff --git a/harness/evidence/run11b/window.log b/harness/evidence/run11b/window.log| new file mode 100644 |
| index 000000000..82877f3c9 |
| --- /dev/null |
| +++ b/harness/evidence/run11b/window.log |
| @@ -0,0 +1,614 @@ |
| +######## 8.1 08:16:38.991Z |
| + |
| +Id=carlos-edge.service LoadState=loaded ActiveState=active |
| +Id=carlos-adopt.timer LoadState=loaded ActiveState=active |
| +Id=carlos-adopt.path LoadState=loaded ActiveState=active |
| +Id=carlos-stage.path LoadState=loaded ActiveState=active |
| +Id=carlos-restart.path LoadState=loaded ActiveState=active |
| +Id=carlos-system-update.path LoadState=loaded ActiveState=active |
| +Id=carlos-adopt.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-stage.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-config-sync.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-restart.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-system-update.service LoadState=loaded ActiveState=inactive |
| +Id=carlos-system-recover.service LoadState=loaded ActiveState=inactive |
| + |
| +UNIT LOAD ACTIVE SUB DESCRIPTION |
| + |
| +0 loaded units listed. |
| +To show all installed unit files use 'systemctl list-unit-files'. |
| +Removed '/etc/systemd/system/multi-user.target.wants/carlos-edge.service'. |
| +UNIT LOAD ACTIVE SUB DESCRIPTION |
| + |
| +0 loaded units listed. |
| +To show all installed unit files use 'systemctl list-unit-files'. |
| +== 8.1 second block 08:16:39 |
| +Id=carlos-adopt.timer |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-adopt.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-stage.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-restart.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-update.path |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-adopt.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-stage.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-config-sync.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-restart.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-update.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-recover.service |
| +LoadState=masked |
| +ActiveState=inactive |
| + |
| +Id=carlos-edge.service |
| +LoadState=masked |
| +ActiveState=inactive |
| +8.1 DONE 08:16:40 |
| +[run-leo] w81.box.sh exit=0 |
| +######## 8.1b 08:16:40.421Z |
| +== quiesce: stop console.service on sophie 08:16:40.639Z |
| +Success Result=success ActiveState=inactive SubState=dead |
| + |
| +== signer key 08:16:42.964Z |
| +Success root 600 1 45 |
| + |
| +== 8.1b 08:16:45.260Z |
| +Success { |
| + "writes": [ |
| + { |
| + "key": "control/hosts-backfill.json", |
| + "before_etag": "" |
| + } |
| + ], |
| + "backfill": { |
| + "id": "cohort1-20261021", |
| + "phase": "collecting", |
| + "directory_revision": 17, |
| + "hosts": [] |
| + } |
| +} |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +REV=17 |
| +{"id":"cohort1-20261021","phase":"collecting","directory_revision":17,"hosts":[]} |
| + + WINDOW_ID=20261021T0816Z |
| ++ BACKFILL_ID=cohort1-20261021 |
| ++ refresh |
| ++ /usr/local/bin/carlos system claims inspect --bucket harness-deployment --aws-region eu-west-1 --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= |
| +2026/10/21 08:16:46 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq .signed_roster inspect.json |
| +++ jq -er .roster.revision inspect.json |
| ++ REV=17 |
| ++ jq -n --arg b harness-deployment --argjson rev 17 --arg id cohort1-20261021 '{phase:"backfill-collect",bucket:$b,expected_revision:$rev,backfill:{id:$id}}' |
| ++ /usr/local/bin/carlos system claims run --plan /root/claim-trial/plan.json --signing-key /run/claim-signer/release.key --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= --aws-region eu-west-1 --dry-run |
| +2026/10/21 08:16:46 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq '{writes: [.writes[] | {key, before_etag}], backfill}' backfill-collect-dry.json |
| ++ /usr/local/bin/carlos system claims run --plan /root/claim-trial/plan.json --signing-key /run/claim-signer/release.key --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= --aws-region eu-west-1 |
| +2026/10/21 08:16:46 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq -e --arg id cohort1-20261021 '.backfill.id == $id' backfill-collect.json |
| ++ jq -e '.backfill.phase == "collecting"' backfill-collect.json |
| ++ jq -e --argjson rev 17 '.backfill.directory_revision == $rev' backfill-collect.json |
| ++ jq -e '.backfill.hosts != null' backfill-collect.json |
| ++ jq -e '(.backfill.hosts | length) == 0' backfill-collect.json |
| ++ jq -e '(.writes | length) == 1' backfill-collect.json |
| ++ jq -e '.writes[0].key == "control/hosts-backfill.json"' backfill-collect.json |
| ++ jq -e '.writes[0].before_etag == ""' backfill-collect.json |
| ++ refresh |
| ++ /usr/local/bin/carlos system claims inspect --bucket harness-deployment --aws-region eu-west-1 --public-key SN3K2ONYVeE7TgHKrmNAdltYLDGRcrG/7ybG7Y9rJt0= |
| +2026/10/21 08:16:46 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| ++ jq .signed_roster inspect.json |
| +++ jq -er .roster.revision inspect.json |
| ++ REV=17 |
| ++ echo REV=17 |
| ++ jq -c .backfill backfill-collect.json |
| + |
| +8.1b END 08:16:51.331Z |
| +######## 8.2 08:16:51.341Z |
| +== host.env edit 08:16:51 |
| +/etc/carlos/host.env 600 root:root 351 |
| +9a10,11 |
| +> CARLOS_HOST_CLAIM=1 |
| +> CARLOS_HOST_CLAIM_ORIGINS=1 |
| +== 8.2 block 08:16:51 |
| +{ |
| + "dry_run": true, |
| + "reload": true, |
| + "source": "/etc/carlos/host.env", |
| + "start": false, |
| + "target": "/etc/systemd/system/carlos-instance-control.service" |
| +} |
| +{ |
| + "dry_run": false, |
| + "reload": true, |
| + "source": "/etc/carlos/host.env", |
| + "start": false, |
| + "target": "/etc/systemd/system/carlos-instance-control.service" |
| +} |
| +# /etc/systemd/system/carlos-instance-control.service |
| +# The root instance-control service (isolated-exec design §5). Socket- |
| +# activated, so it runs only while there is work. Its whole job is |
| +# systemctl start/stop/set-property on the three instance templates' units |
| +# and their host slices, on the agent's request, plus running the readiness |
| +# probe. Every unit name it passes to systemctl is built from a validated |
| +# host by the platform's own naming; nothing from a request reaches |
| +# systemctl as a string. |
| +# |
| +# Runs as ROOT deliberately, with no new-privileges lockout and no syscall |
| +# filter, for the systemctl child (the same rationale as |
| +# carlos-stage.service). It accepts a connection only from the edge unit's |
| +# main process (SO_PEERCRED uid carlos, pid == MainPID of |
| +# carlos-edge.service): a flat tenant is a child of that pid, never the pid |
| +# itself, and a nested tenant cannot reach the socket at all. |
| +# |
| +# At start it also looks UNDER the two instance bind mounts (unshare -m in |
| +# a private namespace, umount, list; design §8.2, "Recovery for a layout |
| +# that was unmounted anyway"). Files left in the raw mountpoint directory |
| +# while the layout was unmounted would otherwise be hidden by the mount and |
| +# invisible to the layout pass's destination check; a held file is a |
| +# failing line in every probe report and keeps /ready refusing nested wakes |
| +# until an operator moves or removes it and restarts this service. Root is |
| +# what makes that inspection possible: the private namespace and the umount |
| +# need CAP_SYS_ADMIN. ProtectSystem=strict leaves /data and /run visible. |
| +[Unit] |
| +Description=carlos instance control (root: start/stop carlos-instance*@ units for the agent) |
| +Requires=carlos-instance-control.socket data-instances.mount run-carlos-instances.mount run-carlos-logs.mount |
| +After=data-instances.mount run-carlos-instances.mount run-carlos-logs.mount |
| + |
| +[Service] |
| +StateDirectory=carlos-claims |
| +StateDirectoryMode=0700 |
| +EnvironmentFile=-/etc/carlos/host.env |
| +ExecStart=/opt/carlos/carlos instance-control |
| +ProtectSystem=strict |
| +# /run/systemd/system: the per-generation runtime drop-in (zero-downtime |
| +# deploys, plan 2 D1); nothing else is written there. |
| +ReadWritePaths=/run/carlos-control /run/carlos /var/lib/carlos-claims /var/lib/carlos-release/private /run/systemd/system /data /opt/carlos /etc/systemd/system /sys/fs/cgroup |
| +ProtectHome=yes |
| +PrivateTmp=yes |
| +PrivateDevices=yes |
| +ProtectKernelTunables=yes |
| +ProtectKernelModules=yes |
| +ProtectKernelLogs=yes |
| +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 |
| +MemoryDenyWriteExecute=yes |
| +MemoryMax=256M |
| +Environment=GOMEMLIMIT=192MiB |
| + |
| +# /run/systemd/system/service.d/zzz-lxc-service.conf |
| +[Service] |
| +ProcSubset=all |
| +ProtectProc=default |
| +ProtectControlGroups=no |
| +ProtectKernelTunables=no |
| +NoNewPrivileges=no |
| +LoadCredential= |
| +PrivateNetwork=no |
| +ImportCredential= |
| +ProtectHome=no |
| +ProtectSystem=no |
| +PrivateDevices=no |
| +PrivateTmp=no |
| +ProtectKernelLogs=no |
| +ProtectKernelModules=no |
| +ReadWritePaths= |
| +ReadOnlyPaths= |
| +/var/lib/carlos-claims 700 root:root |
| +/opt/carlos/system 755 root:root |
| +/opt/carlos/system/guard 755 root:root |
| +/opt/carlos/system/guard/moves 755 root:root |
| +/opt/carlos/system/guard/seeds 755 root:root |
| +Created symlink '/etc/systemd/system/multi-user.target.wants/carlos-instance-control.service' → '/etc/systemd/system/carlos-instance-control.service'. |
| +active |
| +Oct 21 08:14:09 leo carlos[605]: 2026/10/21 08:14:09 instance-control: probe: imds-v6 unverified no route to the address; deny not exercised |
| +Oct 21 08:14:09 leo carlos[605]: 2026/10/21 08:14:09 instance-control: probe: private-v6 unverified no route to fd00::1, fec0::1, 64:ff9b::a00:1; deny not exercised |
| +Oct 21 08:14:09 leo carlos[605]: 2026/10/21 08:14:09 instance-control: probe: io-weight unverified weights are set, but no disk here has io.cost or BFQ to enforce them |
| +Oct 21 08:16:53 leo systemd[1]: Stopping carlos-instance-control.service - carlos instance control (root: start/stop carlos-instance*@ units for the agent)... |
| +Oct 21 08:16:53 leo systemd[1]: carlos-instance-control.service: Deactivated successfully. |
| +Oct 21 08:16:53 leo systemd[1]: Stopped carlos-instance-control.service - carlos instance control (root: start/stop carlos-instance*@ units for the agent). |
| +Oct 21 08:16:53 leo systemd[1]: Started carlos-instance-control.service - carlos instance control (root: start/stop carlos-instance*@ units for the agent). |
| +total 16 |
| +drwx------ 2 root root 4096 Oct 21 08:16 . |
| +drwx------ 5 root root 4096 Oct 21 08:16 .. |
| +-rw------- 1 root root 803 Oct 21 08:16 migration.json |
| +-rw------- 1 root root 0 Oct 21 08:16 migration.lock |
| +-rw------- 1 root root 299 Oct 21 08:16 report.json |
| +8.2 DONE 08:16:53 |
| +[run-leo] --env exit=0 |
| +######## 8.2b 08:16:53.594Z |
| +== 8.2 census report read 08:16:53.629Z |
| +Completed 413 Bytes/413 Bytes (70.0 KiB/s) with 1 file(s) remaining download: s3://harness-deployment/control/host-census/cohort1-20261021/kathleen-juggling.json to cohort1/tmp/cohort1/leo-census.json |
| +true |
| +"f177521046c8857b9cc58165976411e8" 2026-10-21T08:16:52+00:00 413 |
| +operator-side sha256 of the raw object: aaae8d6fa1046548b6f7531f0b9edead90654a304e27b4e2d29a89aaa9a31380 |
| +operator-side sha256 of jq -c of it: aaae8d6fa1046548b6f7531f0b9edead90654a304e27b4e2d29a89aaa9a31380 |
| +2026-10-21 08:16:52 413 kathleen-juggling.json |
| +== 8.2b 08:16:55.871Z |
| +Success { |
| + "writes": [ |
| + { |
| + "key": "control/hosts-backfill.json", |
| + "before_etag": "\"14d14f16267c35ad1965fd47a4ebe238\"" |
| + } |
| + ], |
| + "backfill": { |
| + "id": "cohort1-20261021", |
| + "phase": "done", |
| + "directory_revision": 17, |
| + "hosts": [], |
| + "reports": { |
| + "kathleen-juggling": "aaae8d6fa1046548b6f7531f0b9edead90654a304e27b4e2d29a89aaa9a31380" |
| + }, |
| + "unreported": [ |
| + "ada-letterpress" |
| + ] |
| + } |
| +} |
| +.backfill.phase == "done" -> true |
| +(.backfill.hosts | length) == 0 -> true |
| +.backfill.unreported == ["ada-letterpress"] -> true |
| +(.backfill.reports | keys) == ["kathleen-juggling"] -> true |
| +(.writes | length) == 1 -> true |
| +.writes[0].key == "control/hosts-backfill.json" -> true |
| +(.writes[0].before_etag | length) > 0 -> true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +true |
| +LEO_CENSUS_SHA=aaae8d6fa1046548b6f7531f0b9edead90654a304e27b4e2d29a89aaa9a31380 reports={"kathleen-juggling":"aaae8d6fa1046548b6f7531f0b9edead90654a304e27b4e2d29a89aaa9a31380"} |
| +true |
| +REV=17 |
| +{"backfill":{"id":"cohort1-20261021","phase":"done","directory_revision":17,"hosts":[],"reports":{"kathleen-juggling":"aaae8d6fa1046548b6f7531f0b9edead90654a304e27b4e2d29a89aaa9a31380"},"unreported":["ada-letterpress"]},"writes":[{"key":"control/hosts-backfill.json","before_etag":"\"14d14f16267c35ad1965fd47a4ebe238\""}]} |
| + 2026/10/21 08:16:56 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| +2026/10/21 08:16:56 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| +2026/10/21 08:16:57 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| +2026/10/21 08:16:58 ALERT: root AWS file, profile, endpoint and trust-store environment overrides ignored |
| + |
| +== console start on sophie 08:17:01.915Z |
| +Success active |
| +healthz 200 |
| +Oct 21 08:16:41 sophie systemd[1]: Stopping console.service - CARLOS platform console... |
| +Oct 21 08:16:41 sophie systemd[1]: console.service: Deactivated successfully. |
| +Oct 21 08:16:41 sophie systemd[1]: Stopped console.service - CARLOS platform console. |
| +Oct 21 08:16:41 sophie systemd[1]: console.service: Consumed 942ms CPU time, 128M memory peak. |
| +Oct 21 08:17:02 sophie systemd[1]: Started console.service - CARLOS platform console. |
| +Oct 21 08:17:02 sophie carlos[528]: console: no console email (set CARLOS_CONSOLE_MAIL_FROM or CARLOS_MAIL_PLATFORM_SUFFIX, and CARLOS_MAIL_REGION); invites go by Keymail or by hand |
| +Oct 21 08:17:03 sophie carlos[528]: console: CARLOS_SECRETS_PUBKEY is unset, so no region outside the home can be chosen automatically |
| +Oct 21 08:17:03 sophie carlos[528]: console: http://127.0.0.1:8090 listening on 127.0.0.1:8090 |
| + |
| +8.2b END 08:17:07.921Z |
| +######## snapshot post-8.2b 08:17:07.929Z |
| +infra: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11,post-8.2b |
| +leo: running failed=[] snapshots=post-b5-run8b,post-8.1-run8,g10-stuck-run8,post-window,g7-fail-r11,post-8.2b |
| +sophie: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11,post-8.2b |
| +dennis: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11,post-8.2b |
| +signer: running failed=[] snapshots=base,boot,pre62,s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11,post-8.2b |
| +sophie-console volume snapshots: s7,pre-window,pre-window-seeded,post-b5,post-b5-465c3a08,post-b5-465c3a08-c8,post-b5-clean,post-b5-run8,post-b5-run8b,post-8.1-run8,g10-stuck-run8,item6-plain-update-fail,post-window,pre-0285,post-0285,post-candidate,post-move-r10,g7-fail-r11,post-8.2b |
| +######## 8.4 08:17:31.518Z |
| +== 8.4 check 08:17:31 |
| +LoadState=masked |
| +ActiveState=inactive |
| +{ |
| + "dry_run": true, |
| + "reload": true, |
| + "source": "/etc/carlos/host.env", |
| + "start": false, |
| + "target": "/etc/systemd/system/carlos-instance-control.service" |
| +} |
| +== 8.4 restore 08:17:31 |
| +Id=carlos-adopt.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-stage.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-config-sync.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-restart.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-update.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-recover.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-adopt.timer |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-adopt.path |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-stage.path |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-restart.path |
| +LoadState=loaded |
| +ActiveState=inactive |
| + |
| +Id=carlos-system-update.path |
| +LoadState=loaded |
| +ActiveState=inactive |
| +== 8.4 instance dirs 08:17:32 |
| +/data/.instances: |
| +total 12 |
| +drwx------ 3 carlos carlos 4096 Oct 20 09:01 . |
| +drwxr-x--- 17 carlos carlos 4096 Oct 21 08:16 .. |
| +drwx------ 2 carlos carlos 4096 Oct 21 08:17 _probe |
| + |
| +/data/instances: |
| +total 12 |
| +drwx------ 3 carlos carlos 4096 Oct 20 09:01 . |
| +drwxr-x--- 17 carlos carlos 4096 Oct 21 08:16 .. |
| +drwx------ 2 carlos carlos 4096 Oct 21 08:17 _probe |
| +LoadState=masked |
| +ActiveState=inactive |
| +8.4 DONE 08:17:32 |
| +[run-leo] --env exit=0 |
| +######## 9 08:17:32.285Z |
| +== 9 08:17:32 |
| +# /etc/systemd/system/carlos-edge.service |
| +# The single-box role: `carlos agent` = edge (TLS terminator + host router) + |
| +# hibernation activator + hourly release adoption in one process. Ported from |
| +# Eleven's deploy/systemd/lchat-router.service, renamed, same hardening. |
| +# Hibernating instances run as THIS unit's children (the activator); systemd- |
| +# managed instances get their own units. |
| +[Unit] |
| +Description=carlos edge (TLS terminator, host router, activator, release adoption) |
| +# The three nosymfollow mounts of the isolated-exec design (§3.2) are hard |
| +# requirements: an edge that starts without them would start unprotected, |
| +# so it does not start at all. |
| +Requires=data-instances.mount run-carlos-instances.mount run-carlos-logs.mount |
| +After=network-online.target data-instances.mount run-carlos-instances.mount run-carlos-logs.mount |
| +Wants=network-online.target |
| + |
| +[Service] |
| +# Optional host-wide config (0600, root-owned): CARLOS_HIBERNATE_*, |
| +# CARLOS_DEPLOYMENT_BUCKET/_DIR, CARLOS_RELEASE_PUBKEY, CARLOS_RESERVED_SLUGS... |
| +EnvironmentFile=-/etc/carlos/host.env |
| +ExecStart=/opt/carlos/carlos agent |
| +# `carlos add` writes are picked up by the registry fingerprint watcher within |
| +# seconds; SIGHUP is the operator's explicit "reload now". |
| +ExecReload=/bin/kill -HUP $MAINPID |
| +Restart=always |
| +RestartSec=1 |
| + |
| +# --- hardening (ported from lchat-router.service; see Eleven's |
| +# docs/instance-router.md § Hardening) --- |
| +User=carlos |
| +Group=carlos |
| +# The edge is the ONLY unit that binds privileged ports (:80 + :443); this cap |
| +# lets it do so as a non-root user. Instances bind unix sockets only. |
| +AmbientCapabilities=CAP_NET_BIND_SERVICE |
| +CapabilityBoundingSet=CAP_NET_BIND_SERVICE |
| +NoNewPrivileges=yes |
| +ProtectSystem=strict |
| +ProtectHome=yes |
| +ReadWritePaths=/data /run/carlos |
| +PrivateTmp=yes |
| +PrivateDevices=yes |
| +ProtectClock=yes |
| +ProtectHostname=yes |
| +ProtectKernelTunables=yes |
| +ProtectKernelModules=yes |
| +ProtectKernelLogs=yes |
| +# ProtectControlGroups is deliberately ABSENT: it would mount /sys/fs/cgroup |
| +# read-only, and Delegate= (below) needs this unit's own subtree writable. |
| +# The hardening that line bought is retained by ownership instead — plain |
| +# DAC keeps everything OUTSIDE the chowned subtree read-only to this |
| +# unprivileged user. |
| +ProtectProc=invisible |
| +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX |
| +RestrictNamespaces=yes |
| +RestrictRealtime=yes |
| +# No RestrictSUIDSGID=: systemd cannot read the mode inside openat2's |
| +# open_how, so it refuses openat2 outright (ENOSYS), and the agent's every |
| +# open under an instance directory, and every rename of the layout pass, |
| +# is an openat2 (isolated-exec design R15; the templates lost the line |
| +# first and this unit was found still carrying it, #126). R15's reasoning |
| +# for the templates carries here, and the one capability this unit holds |
| +# does not change it: a set-id file is a threat through CAP_CHOWN, |
| +# CAP_FSETID or CAP_SETUID, none of which is in the bounding set, so |
| +# anything the agent could mark set-id is owned by carlos and gains carlos |
| +# only to a process that is not already carlos and is not under |
| +# no_new_privs. The agent and its flat children run under |
| +# NoNewPrivileges=; the nested templates hold no capabilities and see only |
| +# their own directories; /run is nosuid, and the instance trees under |
| +# /data are mounted nosuid. The agent passes no set-id bit anywhere |
| +# (instancefs strips modes to their permission bits), so what is left is a |
| +# compromised agent handing its own uid to a lower-privileged unit, which |
| +# is no gain for an attacker that already has it. The agent checks openat2 |
| +# in its own unit at start (instancefs.SelfCheck) and refuses nested wakes |
| +# and the layout pass while the call is blocked, so this line coming back |
| +# is loud, not a half-migrated host. |
| +LockPersonality=yes |
| +# Pure Go — the binary never maps writable+executable memory. |
| +MemoryDenyWriteExecute=yes |
| +SystemCallFilter=@system-service |
| +SystemCallErrorNumber=EPERM |
| +SystemCallArchitectures=native |
| +# The outer wall (memory-pressure spec 2026-08-28 §2.2) used to be two |
| +# MemoryHigh/MemoryMax lines here, bounding the agent plus its exec |
| +# children. Instances are sibling units now (isolated-exec design §4.3), so |
| +# the wall is carlos.slice's, which holds this unit and every instance and |
| +# bounds exactly what it bounded before. The oom_score_adj story is |
| +# unchanged: tenants carry OOMScoreAdjust=500 in their template. |
| +Slice=carlos.slice |
| +# systemd's default OOMPolicy=stop STOPS the whole service when the kernel |
| +# OOM-kills ANY process in the unit's cgroup tree (memory.events is |
| +# hierarchical, delegation or not). Restart=always would bring the edge |
| +# back a second later and cycle every awake instance on the box. With |
| +# continue, one tenant's kill is one tenant's kill; the activator recycles |
| +# it on its next request. |
| +OOMPolicy=continue |
| +TasksMax=1024 |
| +# Exec-backed instances run as this unit's children. Delegation hands the |
| +# unit its own cgroup subtree — chowned to User=carlos, unmanaged by systemd |
| +# below this point — so the agent can give each child its own cgroup for |
| +# per-instance accounting (docs/superpowers/specs/ |
| +# 2026-08-07-exec-child-accounting-design.md). The subtree still dies with |
| +# the service: restart semantics are unchanged. |
| +Delegate=cpu memory io pids |
| + |
| +[Install] |
| +WantedBy=multi-user.target |
| + |
| +# /etc/systemd/system/carlos-edge.service.d/90-host-floor.conf |
| +[Unit] |
| +Requires=carlos-system-recover.service |
| +After=carlos-system-recover.service |
| +[Service] |
| +ExecStart= |
| +ExecStart=/opt/carlos/system/guard/carlos system guard-exec edge |
| + |
| +# /run/systemd/system/service.d/zzz-lxc-service.conf |
| +[Service] |
| +ProcSubset=all |
| +ProtectProc=default |
| +ProtectControlGroups=no |
| +ProtectKernelTunables=no |
| +NoNewPrivileges=no |
| +LoadCredential= |
| +PrivateNetwork=no |
| +ImportCredential= |
| +ProtectHome=no |
| +ProtectSystem=no |
| +PrivateDevices=no |
| +PrivateTmp=no |
| +ProtectKernelLogs=no |
| +ProtectKernelModules=no |
| +ReadWritePaths= |
| +ReadOnlyPaths= |
| +ExecStart={ path=/opt/carlos/system/guard/carlos ; argv[]=/opt/carlos/system/guard/carlos system guard-exec edge ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } |
| +Requires=sysinit.target run-carlos-logs.mount carlos-system-recover.service carlos.slice run-carlos-instances.mount data-instances.mount |
| +After=network-online.target data-instances.mount sysinit.target basic.target run-carlos-logs.mount run-carlos-instances.mount harness-dmi-instance.service carlos-system-recover.service carlos.slice systemd-journald.socket |
| +Created symlink '/etc/systemd/system/multi-user.target.wants/carlos-edge.service' → '/etc/systemd/system/carlos-edge.service'. |
| +active |
| +Id=carlos-adopt.timer |
| +LoadState=loaded |
| +ActiveState=active |
| +UnitFileState=enabled |
| + |
| +Id=carlos-adopt.path |
| +LoadState=loaded |
| +ActiveState=active |
| +UnitFileState=enabled |
| + |
| +Id=carlos-stage.path |
| +LoadState=loaded |
| +ActiveState=active |
| +UnitFileState=enabled |
| + |
| +Id=carlos-restart.path |
| +LoadState=loaded |
| +ActiveState=active |
| +UnitFileState=enabled |
| + |
| +Id=carlos-system-update.path |
| +LoadState=loaded |
| +ActiveState=active |
| +UnitFileState=enabled |
| + |
| +Id=carlos-adopt.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| +UnitFileState=static |
| + |
| +Id=carlos-stage.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| +UnitFileState=static |
| + |
| +Id=carlos-config-sync.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| +UnitFileState=static |
| + |
| +Id=carlos-restart.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| +UnitFileState=static |
| + |
| +Id=carlos-system-update.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| +UnitFileState=static |
| + |
| +Id=carlos-system-recover.service |
| +LoadState=loaded |
| +ActiveState=inactive |
| +UnitFileState=enabled |
| + |
| +Id=carlos-edge.service |
| +LoadState=loaded |
| +ActiveState=active |
| +UnitFileState=enabled |
| +== 9 checks 08:17:34 |
| +1 |
| +0 |
| +MainPID=849 |
| +ExecMainStartTimestamp=Wed 2026-10-21 08:17:34 UTC |
| +/opt/carlos/carlos |
| +9 DONE 08:17:54 |
| +[run-leo] --env exit=0 |
| +######## G9 checks 08:17:54.680Z |
| +{"generated_at":"2026-10-21T08:18:35.087873089Z","release":"v0.28.17","binary":"a79ed7263e3e92d3","host_claim_enabled":true,"floor_guard_ready":true} |
| +canary v0.28.5 promoted 2026-10-20T01:22:57Z spread 5m0s file |
| +stable v0.28.17 promoted 2026-10-21T08:05:51Z spread 5m0s file |
| + |
| +ada-letterpress linux-arm64 canary v0.28.5 current |
| +kathleen-juggling linux-arm64 stable v0.28.17 current |
| +noor-marquetry linux-arm64 stable v0.28.17 current |
| +Oct 21 08:09:07 leo carlos[631]: 2026/10/21 08:09:07 edge: registry changed — reloaded (0 route(s)) |
| +Oct 21 08:17:34 leo carlos[849]: 2026/10/21 08:17:34 agent: REFUSING CARLOS_SWAP=overlap (host-claims-on): host claims are on, and claims-backed launches cannot yet keep a swap's recovery choice, execution evidence, generations file or good build, so this box stays on today's stop-then-wake paths |
| +Oct 21 08:17:35 leo carlos[849]: 2026/10/21 08:17:35 agent: regional claims: hostbox: unresolved lifecycle contract |
| +Oct 21 08:17:36 leo carlos[849]: 2026/10/21 08:17:36 edge: registry changed — reloaded (0 route(s)) |
| +Oct 21 08:18:35 leo carlos[849]: 2026/10/21 08:18:35 agent: regional claims: hostbox: unresolved lifecycle contract |
| +WINDOW END 08:18:39.468Z |