carlos / platform Public

harness: RUNLOG runs 2 to 4 up to G4 (F1 vs owner's fix, held activation finding)

claude agent, operated by paul@keymail.dev cb39317145fa97c000a3e6117cabe9d94ccc1dd9 parent 75491d1
3 files changed, +68 −4
  • harness/RUNLOG.md +64 −0
  • harness/scenarios/cohort1/blocks/w-open-signer.sh +2 −2
  • harness/scenarios/cohort1/values.env +2 −2

CI failed — run details

CI log
=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.012s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	316.024s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	2.946s
ok  	github.com/carlosframework/platform/cmd/moveprobe	93.214s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.703s
?   	github.com/carlosframework/platform/harness/apps/wakecheck	[no test files]
ok  	github.com/carlosframework/platform/internal/activator	250.811s
ok  	github.com/carlosframework/platform/internal/agentsock	0.017s
ok  	github.com/carlosframework/platform/internal/alerting	0.006s
ok  	github.com/carlosframework/platform/internal/analytics	0.019s
ok  	github.com/carlosframework/platform/internal/appconfig	2.498s
ok  	github.com/carlosframework/platform/internal/apperr	0.071s
ok  	github.com/carlosframework/platform/internal/applog	0.128s
ok  	github.com/carlosframework/platform/internal/awsinv	0.003s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.004s
ok  	github.com/carlosframework/platform/internal/boxid	0.635s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.008s
ok  	github.com/carlosframework/platform/internal/caps	0.013s
ok  	github.com/carlosframework/platform/internal/certwarm	0.002s
ok  	github.com/carlosframework/platform/internal/cgroup	0.697s
ok  	github.com/carlosframework/platform/internal/changelog	0.316s
ok  	github.com/carlosframework/platform/internal/claimactivation	0.785s
ok  	github.com/carlosframework/platform/internal/clamd	0.054s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	406.631s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	6.137s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.009s
ok  	github.com/carlosframework/platform/internal/dbverify	0.006s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.002s
ok  	github.com/carlosframework/platform/internal/docsite	0.005s
ok  	github.com/carlosframework/platform/internal/domains	2.418s
ok  	github.com/carlosframework/platform/internal/doorkey	0.008s
ok  	github.com/carlosframework/platform/internal/economics	0.004s
ok  	github.com/carlosframework/platform/internal/edge	44.875s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.008s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.133s
ok  	github.com/carlosframework/platform/internal/gate	1.656s
ok  	github.com/carlosframework/platform/internal/genselect	0.014s
ok  	github.com/carlosframework/platform/internal/geo	0.009s
ok  	github.com/carlosframework/platform/internal/geoip	0.030s
ok  	github.com/carlosframework/platform/internal/historyreadback	0.157s
ok  	github.com/carlosframework/platform/internal/host	181.672s
ok  	github.com/carlosframework/platform/internal/hostactors	6.305s
ok  	github.com/carlosframework/platform/internal/hostactors/awsmembership	0.015s
ok  	github.com/carlosframework/platform/internal/hostbox	2.698s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.542s
ok  	github.com/carlosframework/platform/internal/hostenv	0.015s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.014s
ok  	github.com/carlosframework/platform/internal/hostexec	4.795s
ok  	github.com/carlosframework/platform/internal/hostfence	0.030s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.439s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.015s
ok  	github.com/carlosframework/platform/internal/hostguard	1.002s
ok  	github.com/carlosframework/platform/internal/hostops	1.683s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.019s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.019s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.437s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.146s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.019s
ok  	github.com/carlosframework/platform/internal/infraview	0.015s
ok  	github.com/carlosframework/platform/internal/instancectl	5.233s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.745s
ok  	github.com/carlosframework/platform/internal/instancefs	0.005s
ok  	github.com/carlosframework/platform/internal/instancekey	0.002s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.008s
ok  	github.com/carlosframework/platform/internal/layout	1.573s
ok  	github.com/carlosframework/platform/internal/lbhealth	0.002s
ok  	github.com/carlosframework/platform/internal/lease	9.804s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.005s
ok  	github.com/carlosframework/platform/internal/ledger	0.013s
ok  	github.com/carlosframework/platform/internal/mail	0.158s
ok  	github.com/carlosframework/platform/internal/maintenance	0.085s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.486s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.069s
ok  	github.com/carlosframework/platform/internal/metrics	0.005s
ok  	github.com/carlosframework/platform/internal/moves	20.959s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.845s
ok  	github.com/carlosframework/platform/internal/objstore	0.187s
ok  	github.com/carlosframework/platform/internal/ops	0.198s
ok  	github.com/carlosframework/platform/internal/park	0.201s
ok  	github.com/carlosframework/platform/internal/privatefile	0.004s
2026/10/20 08:12:55 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/20 08:12:55 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 08:12:56 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 08:12:56 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/20 08:12:56 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 08:12:56 provision: an app's records could not be listed: they are skipped
2026/10/20 08:12:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:12:56 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 08:12:56 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 08:12:56 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 08:12:56 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 08:12:56 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 08:12:56 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/20 08:12:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 08:12:56 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 08:12:56 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 08:12:56 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 08:12:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 08:12:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 08:12:56 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 08:12:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 08:12:56 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 08:12:56 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 08:12:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 08:12:56 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 08:12:56 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 08:12:56 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:12:56 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:12:56 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:12:56 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 08:12:56 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:12:56 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:12:56 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 08:12:56 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 08:12:56 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/20 08:12:56 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/20 08:12:56 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 08:12:56 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/20 08:12:56 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (4.86s)
    plan14_root_reads_test.go:940: root read census: 102 discrepancies
        changed root read internal/hostfence/writer.go:OpenRootFenceStore; review class, task, sites and digest
        changed root source envelope harness
        changed root source envelope harness/apps/wakecheck
        changed root source envelope harness/boxes
        changed root source envelope harness/boxes/shims
        changed root source envelope harness/checks
        changed root source envelope harness/console
        changed root source envelope harness/infra
        changed root source envelope harness/infra-copies/747f699/dev
        changed root source envelope harness/infra-copies/a0b3f5a/dev
        changed root source envelope harness/infra-copies/a0b3f5a/scripts
        changed root source envelope harness/infra-copies/pr47
        changed root source envelope harness/operator
        changed root source envelope harness/release
        changed root source envelope harness/scenarios
        changed root source envelope harness/scenarios/cohort1
        changed root source envelope harness/scenarios/cohort1/blocks
        changed root source envelope harness/stand-ins
        changed root source envelope internal/host
        changed root source envelope internal/hostfence
        changed root source envelope internal/publicrelease
        changed root source envelope internal/s3compat
        unclassified root read harness/apps/wakecheck/main.go:main file:Exec@333,file:Exec@804,file:Open@277,file:QueryRow@870
        unclassified root read harness/boxes/boxes-up.sh:external file:external@0
        unclassified root read harness/boxes/dmi-shim.sh:external file:external@0
        unclassified root read harness/boxes/layout-probe.sh:external file:external@0
        unclassified root read harness/boxes/shims/systemd-zram-setup@.service:external file:external@0
        unclassified root read harness/boxes/vendor-shims.sh:external file:external@0
        unclassified root read harness/checks/check2.sh:external file:external@0
        unclassified root read harness/checks/check5.sh:external file:external@0
        unclassified root read harness/checks/check6.sh:external file:external@0
        unclassified root read harness/checks/check6b.sh:external file:external@0
        unclassified root read harness/checks/check7.sh:external file:external@0
        unclassified root read harness/checks/check8.sh:external file:external@0
        unclassified root read harness/checks/fix5.sh:external file:external@0
        unclassified root read harness/checks/run6b.sh:external file:external@0
        unclassified root read harness/checks/snap-base.sh:external file:external@0
        unclassified root read harness/checks/snap-boot.sh:external file:external@0
        unclassified root read harness/checks/ssmsmoke.sh:external file:external@0
        unclassified root read harness/console/console-ext4.sh:external file:external@0
        unclassified root read harness/console/console-setup.sh:external file:external@0
        unclassified root read harness/console/signin.sh:external file:external@0
        unclassified root read harness/console/system-update.sh:external file:external@0
        unclassified root read harness/donor-user-data.sh:external file:external@0
        unclassified root read harness/evidence.sh:external file:external@0
        unclassified root read harness/host-setup.sh:external file:external@0
        unclassified root read harness/host-user-data.sh:external file:external@0
        unclassified root read harness/hrun.sh:external file:external@0
        unclassified root read harness/infra-copies/747f699/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/bootstrap-box.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/ship-app.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/update-platform-binary.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/probe.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/remediation.sh:external file:external@0
        unclassified root read harness/infra/infra-setup.sh:external file:external@0
        unclassified root read harness/operator/operator-setup.sh:external file:external@0
        unclassified root read harness/release/release-setup.sh:external file:external@0
        unclassified root read harness/release/release-window.sh:external file:external@0
        unclassified root read harness/release/step7-operator.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/50-publish-record.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster-resume.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61-sign.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61a-install-channel.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/62-guard-arm.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-sophie.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-console-report.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-evidence-key.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-runtime.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/74-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-leo.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b1.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b5.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g4-roll.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/p9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/pw-seed.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/reports.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/run-leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-env.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-identity.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-sums.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w84.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/box-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/signer-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/ssm.sh:external file:external@0
        unclassified root read harness/scenarios/sync.sh:external file:external@0
        unclassified root read harness/snapshot.sh:external file:external@0
        unclassified root read harness/stand-ins/certs.sh:external file:external@0
        unclassified root read internal/s3compat/harness.go:readHarnessFile file:ReadFile@189,file:Stat@55
        changed reclassified declaration internal/hostfence/writer.go:OpenRootFenceStore
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 08:13:08 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/20 08:13:08 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/20 08:13:08 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/20 08:13:08 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged acme.go.tito.io hibernate false -> true
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged acme.go.tito.io status-named false -> true
2026/10/20 08:13:08 provision: converged acme.go.tito.io status-named true -> false
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 08:13:08 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 08:13:08 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 08:13:08 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 08:13:08 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/20 08:13:08 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/20 08:13:08 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/20 08:13:08 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/20 08:13:08 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 08:13:08 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 08:13:08 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 08:13:08 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:08 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 08:13:08 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 08:13:08 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 08:13:09 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:13:09 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 08:13:09 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/20 08:13:09 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/20 08:13:09 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 08:13:09 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 08:13:09 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 08:13:09 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/20 08:13:09 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 08:13:09 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 08:13:09 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 08:13:09 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 08:13:09 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 08:13:09 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 08:13:09 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 08:13:09 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 08:13:09 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/20 08:13:09 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/20 08:13:09 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 08:13:09 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 08:13:09 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/20 08:13:09 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/20 08:13:09 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/20 08:13:09 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/20 08:13:09 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/20 08:13:09 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/20 08:13:09 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/20 08:13:09 provision: dry-run: would converge owned.go.tito.io seed
2026/10/20 08:13:09 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 08:13:09 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/20 08:13:09 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/20 08:13:09 provision: converged owned.go.tito.io channel stable -> edge
2026/10/20 08:13:09 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/20 08:13:09 provision: converged owned.go.tito.io hibernate false -> true
2026/10/20 08:13:09 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/20 08:13:09 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/20 08:13:09 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: removed retired static route site.go.tito.io (record gone)
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/20 08:13:09 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/20 08:13:09 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:09 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 08:13:09 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 08:13:09 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 08:13:09 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 08:13:09 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/20 08:13:09 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 08:13:09 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 08:13:09 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 08:13:09 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 08:13:09 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/20 08:13:09 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/20 08:13:09 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 08:13:09 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/20 08:13:09 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/20 08:13:09 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 08:13:10 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/20 08:13:10 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/20 08:13:10 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:13:10 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 08:13:10 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:13:10 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 08:13:10 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:13:10 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 08:13:10 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:13:10 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/20 08:13:10 provision: a.shop.example.com: swapped for import sd_wksj2kyjao7c3wbmftfmerfsoy (the original route is journaled)
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_wksj2kyjao7c3wbmftfmerfsoy committed: its gate is cleared and its journal row dropped
2026/10/20 08:13:10 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_4pxe54sjkpwcsubgeat2oggkwm rolled back to its original route
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_4pxe54sjkpwcsubgeat2oggkwm: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_4pxe54sjkpwcsubgeat2oggkwm is cleaned up and its journal row retired
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_23av4lsn7v6633xrrjajnljnq4 rolled back to its original route
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_23av4lsn7v6633xrrjajnljnq4: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_23av4lsn7v6633xrrjajnljnq4 is cleaned up and its journal row retired
2026/10/20 08:13:10 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_j74edigdu3ig4pfqpyltfrcxwi
2026/10/20 08:13:10 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/20 08:13:10 provision: dry-run: would converge a.shop.example.com seed source
2026/10/20 08:13:10 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:10 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/20 08:13:10 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/20 08:13:10 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_5iylggn4fdfzryj7sabiubls3y cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_svmviisidgone5ghwbur47mdym cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_y64zf6kfeenvevraoavjyb3fd4 is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_x5hdwozybyjrxpvoiwqu47r24u is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_emwuvus74jhp3lypzhe2d5k4dy is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 08:13:10 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/20 08:13:10 provision: c.shop.example.com: import sd_rzv33kioijgwckybtvje72qoy4 left alone this pass: the import journal could not be read
2026/10/20 08:13:10 provision: b.shop.example.com: import sd_i4o4ik5bu355iuyxsyfn2zb7iq left alone this pass: the import journal could not be read
2026/10/20 08:13:10 provision: a.shop.example.com: import sd_ysng666ghyknqhosexclydla2i committed: its gate is cleared and its journal row dropped
2026/10/20 08:13:10 provision: a.shop.example.com: not converging import sd_7tky6x4m7a5wn4bx5m7hsdomcu: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 08:13:10 provision: a.shop.example.com: not converging import sd_garvwch6d6zhqsjtmohiyp46je: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 08:13:10 provision: a.shop.example.com: not converging import sd_6kuw63p7kasbdmmecujo5ixl6m: it is placed but not committed, and the row on this box has no import gate
2026/10/20 08:13:10 provision: a.shop.example.com: not converging import sd_5on566r2dythe6uwmoxy6oxkdq: it is placed but not committed, and the row on this box has no import gate
2026/10/20 08:13:10 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:10 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/20 08:13:10 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_thgnio2c2djgyb32dk43vvayiu committed: its gate is cleared and its journal row dropped
2026/10/20 08:13:11 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:11 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:11 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:11 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/20 08:13:11 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_3qofjqyzc45f2oleag7fnzqyou: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_3qofjqyzc45f2oleag7fnzqyou rolled back (no box had swapped it)
2026/10/20 08:13:11 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/20 08:13:11 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:11 provision: removed instance route acme.go.tito.io (its seed sd_7dmioay5f3elnihoytwei2rdyi was aborted); the next pass rolls it back
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_7dmioay5f3elnihoytwei2rdyi: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_7dmioay5f3elnihoytwei2rdyi rolled back (no box had swapped it)
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_u245afavx36kc74cka6bbqam6m has a row this pass may not remove; leaving the seed aborted
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_z35f37gbyx22sszbqvlno32iwy rolled back (no box had swapped it)
2026/10/20 08:13:11 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:11 provision: removed instance route acme.go.tito.io (its seed sd_vgvqxtzlc3y2cclehhy4nxccaa was aborted); the next pass rolls it back
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_vgvqxtzlc3y2cclehhy4nxccaa has no route on this box: its local data is removed
2026/10/20 08:13:11 provision: acme.go.tito.io: aborted seed sd_vgvqxtzlc3y2cclehhy4nxccaa rolled back (no box had swapped it)
2026/10/20 08:13:11 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_vqtmcckvambzbnkireiuxsrzwy (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_vqtmcckvambzbnkireiuxsrzwy rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_vqtmcckvambzbnkireiuxsrzwy is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_j5lo46lkxchstjqphpe6pjttqu (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_j5lo46lkxchstjqphpe6pjttqu rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_j5lo46lkxchstjqphpe6pjttqu is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_zfnttg45rtkfgrjn4bszz2wanq (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_zfnttg45rtkfgrjn4bszz2wanq rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_zfnttg45rtkfgrjn4bszz2wanq: the host's replica is left alone: its record no longer names this seed
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_zfnttg45rtkfgrjn4bszz2wanq is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_qmozouwb73qed6q3l54ysbxhru (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_qmozouwb73qed6q3l54ysbxhru rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_qmozouwb73qed6q3l54ysbxhru rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_qmozouwb73qed6q3l54ysbxhru is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_tyh5i3x7eonlg25jnjt24sai7y (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_tyh5i3x7eonlg25jnjt24sai7y rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_qkbap7cova3wihdxszf2a263me (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_qkbap7cova3wihdxszf2a263me is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_khn4gjns2zzrbeewcbil7zj56y (the original route is journaled)
2026/10/20 08:13:11 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_khn4gjns2zzrbeewcbil7zj56y left alone this pass: its record could not be read
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_eo3senjqdbo4stzashqjxqcnre (the original route is journaled)
2026/10/20 08:13:11 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_eo3senjqdbo4stzashqjxqcnre left alone this pass: its record could not be read
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_u25kkjo3x2hdghx6ltbexa6nky (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_u25kkjo3x2hdghx6ltbexa6nky: close the import gate: constraint failed: injected (1811)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_u25kkjo3x2hdghx6ltbexa6nky rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_u25kkjo3x2hdghx6ltbexa6nky is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_3m3tls4fjcqq3i5g7mwzjau7ee (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_3m3tls4fjcqq3i5g7mwzjau7ee: close the import gate: constraint failed: injected (1811)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_3m3tls4fjcqq3i5g7mwzjau7ee rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_3m3tls4fjcqq3i5g7mwzjau7ee is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_p6crzao2cxsdw6iu7aoz5j2fse (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_p6crzao2cxsdw6iu7aoz5j2fse rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_p6crzao2cxsdw6iu7aoz5j2fse rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_p6crzao2cxsdw6iu7aoz5j2fse is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_robg6kpdrp7eflnzvc5mznesda (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_robg6kpdrp7eflnzvc5mznesda rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_robg6kpdrp7eflnzvc5mznesda is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_rd4jmfvruovsh4jdztsxqjz4cq (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_rd4jmfvruovsh4jdztsxqjz4cq: retire its instance key: injected failure at retire-key
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_rd4jmfvruovsh4jdztsxqjz4cq rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_rd4jmfvruovsh4jdztsxqjz4cq is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_saadtvm7gltwgzdx7r4q5qvyl4 (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_saadtvm7gltwgzdx7r4q5qvyl4 rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_saadtvm7gltwgzdx7r4q5qvyl4 is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_ebvsekvuspz5o36p5pbkfjoanm (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_ebvsekvuspz5o36p5pbkfjoanm: remove its local data: injected failure at remove-local
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_ebvsekvuspz5o36p5pbkfjoanm rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_ebvsekvuspz5o36p5pbkfjoanm is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_kh44u6a4qor7rdaxt6o3whjwpe (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_kh44u6a4qor7rdaxt6o3whjwpe rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_kh44u6a4qor7rdaxt6o3whjwpe is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_twp6qr4kisgzltohq7wlame5vi (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_twp6qr4kisgzltohq7wlame5vi: remove its local data: injected failure at remove-local-done
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_twp6qr4kisgzltohq7wlame5vi rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_twp6qr4kisgzltohq7wlame5vi is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_3qzu7d6gsxmxfmrv6hhqxkegyi (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_3qzu7d6gsxmxfmrv6hhqxkegyi rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_3qzu7d6gsxmxfmrv6hhqxkegyi is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_havahteobzubqh575ztr3jofje (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_havahteobzubqh575ztr3jofje: restore the original route: constraint failed: injected (1811)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_havahteobzubqh575ztr3jofje rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_havahteobzubqh575ztr3jofje is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_2nhzfmdupnsqmf3r5twgwr7iy4 (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_2nhzfmdupnsqmf3r5twgwr7iy4: restore the original route: constraint failed: injected (1811)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_2nhzfmdupnsqmf3r5twgwr7iy4 rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_2nhzfmdupnsqmf3r5twgwr7iy4 is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_m2cyidh4sayu7b4tqhtnlrvfzm (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_m2cyidh4sayu7b4tqhtnlrvfzm is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_6f2rmo7q6aonviryqs6ac5kz2a (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_6f2rmo7q6aonviryqs6ac5kz2a rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_6f2rmo7q6aonviryqs6ac5kz2a: delete its snapshot: injected failure at delete-snapshot
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_6f2rmo7q6aonviryqs6ac5kz2a is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_kgymvc66w5k5jefvknvddetrpy (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_kgymvc66w5k5jefvknvddetrpy rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_kgymvc66w5k5jefvknvddetrpy is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_j7fwsg6ssjujwvlsxldxuil2g4 (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_j7fwsg6ssjujwvlsxldxuil2g4 rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_j7fwsg6ssjujwvlsxldxuil2g4: delete the host's replica: injected failure at delete-replica
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_j7fwsg6ssjujwvlsxldxuil2g4 is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_ss5asqf7sxteayqbpzb7rtrfjy (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_ss5asqf7sxteayqbpzb7rtrfjy rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_ss5asqf7sxteayqbpzb7rtrfjy is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_7vjj6cswyfrwj7w77jv4vanrlq (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_7vjj6cswyfrwj7w77jv4vanrlq rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_7vjj6cswyfrwj7w77jv4vanrlq: retire its journal row: constraint failed: injected (1811)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_7vjj6cswyfrwj7w77jv4vanrlq is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_uisozgdfbqwtqcpycrj4g4phvu (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_uisozgdfbqwtqcpycrj4g4phvu rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_uisozgdfbqwtqcpycrj4g4phvu: retire its journal row: constraint failed: injected (1811)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_uisozgdfbqwtqcpycrj4g4phvu is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_xqt2fi4anhhwbzn3c2alfsvmuu (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_xqt2fi4anhhwbzn3c2alfsvmuu rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_xqt2fi4anhhwbzn3c2alfsvmuu is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: mark import sd_xqt2fi4anhhwbzn3c2alfsvmuu rolled back: injected failure at cas
2026/10/20 08:13:11 provision: a.shop.example.com: aborted seed sd_xqt2fi4anhhwbzn3c2alfsvmuu rolled back (no box had swapped it)
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_ic4tcnv4o5mexyanup4c7skiki (the original route is journaled)
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_ic4tcnv4o5mexyanup4c7skiki rolled back to its original route
2026/10/20 08:13:11 provision: a.shop.example.com: import sd_ic4tcnv4o5mexyanup4c7skiki is cleaned up and its journal row retired
2026/10/20 08:13:11 provision: a.shop.example.com: aborted seed sd_ic4tcnv4o5mexyanup4c7skiki rolled back (no box had swapped it)
2026/10/20 08:13:11 provision: a.shop.example.com: swapped for import sd_jmgiwoc6uynjba5kbac2f2kdjy (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_jmgiwoc6uynjba5kbac2f2kdjy rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_jmgiwoc6uynjba5kbac2f2kdjy rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_jmgiwoc6uynjba5kbac2f2kdjy rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_jmgiwoc6uynjba5kbac2f2kdjy is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_q2vzpbablrzwhad7veej3rrls4 (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_q2vzpbablrzwhad7veej3rrls4 rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_q2vzpbablrzwhad7veej3rrls4 is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_i4kjv7saouv5q3u4iset6s33j4 (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_i4kjv7saouv5q3u4iset6s33j4 rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_i4kjv7saouv5q3u4iset6s33j4 is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_edrmlwz4ddiacycn3kda2afppa (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_edrmlwz4ddiacycn3kda2afppa rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_edrmlwz4ddiacycn3kda2afppa is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_bd2m473omb7im54mbcm5owcotu (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_bd2m473omb7im54mbcm5owcotu rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_bd2m473omb7im54mbcm5owcotu is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_uafn2sevdgwpcyuwamzeq6lhfe (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_uafn2sevdgwpcyuwamzeq6lhfe rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_uafn2sevdgwpcyuwamzeq6lhfe is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_dbjn73n6v62a7vuozktmbsk4iq (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_dbjn73n6v62a7vuozktmbsk4iq rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_dbjn73n6v62a7vuozktmbsk4iq is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_wwk3tbwepk6xoixav2xbpxiqqy (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_wwk3tbwepk6xoixav2xbpxiqqy rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_wwk3tbwepk6xoixav2xbpxiqqy is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_cydluixhvycob5u5s3mal5g3eq (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_cydluixhvycob5u5s3mal5g3eq has no route on this box: its local data is removed and no route is put back
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_cydluixhvycob5u5s3mal5g3eq is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_i3abvpav6zh2msi33b4ctexzuy (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_kgu73r5ashrq4hgkgcadprlnny (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_aa4ydqcxnn7lgoi6jvnyrhgzbi (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_aa4ydqcxnn7lgoi6jvnyrhgzbi cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_5x2m3junkjmu2u23x6es2xcclu (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_5x2m3junkjmu2u23x6es2xcclu is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/20 08:13:12 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/20 08:13:12 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_ulv7nqlkoxj6v3xmryocqzgkku (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_cvfh32fmd5xj63cov26tpr6qdu (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_s2sxottunhjda3um553hnstoxe (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_pke7c46grmnepabkdnmym7u5sa (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_q4bls62f5wqr37v6fuls42mjhq (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_q4bls62f5wqr37v6fuls42mjhq rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_bfmnyno2hjml37crqi5rpbepta (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_bfmnyno2hjml37crqi5rpbepta has no route on this box: its local data is removed and no route is put back
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_bfmnyno2hjml37crqi5rpbepta is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_rvghrjbkgfvvbffx3ff5wikm54 (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_rvghrjbkgfvvbffx3ff5wikm54: remove its local data: injected failure at remove-local
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_rvghrjbkgfvvbffx3ff5wikm54 is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_wngmvwd5cz2rnhwm54i6adml3m (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_wngmvwd5cz2rnhwm54i6adml3m: a route appeared at the host, so its local database is left and the rollback waits
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_xeldtqru26zmtv3uvpn5pcy2cy (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_xeldtqru26zmtv3uvpn5pcy2cy rollback deferred: no fence generation: registry busy
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_bsgz25bonzb5urfrd3wwyeh6zu (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_bsgz25bonzb5urfrd3wwyeh6zu rollback deferred: no fence generation: the generation source answered 0
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_uojcojryashz4bcotajzfr4e3y (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_ttpsfmkstro5tdz5nw56ipwvaa (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_xpatepguy4hpxfdfiagv5477gq (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/20 08:13:12 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_qfttzymr4yrpunjhuyljeeiehm (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qfttzymr4yrpunjhuyljeeiehm rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qfttzymr4yrpunjhuyljeeiehm is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_i6rokhinud5wifdnaelal6v55y (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_i6rokhinud5wifdnaelal6v55y rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_i6rokhinud5wifdnaelal6v55y is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_5ak24qbwykytzpvgbl36lb7asu (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_5ak24qbwykytzpvgbl36lb7asu rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_5ak24qbwykytzpvgbl36lb7asu is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_qzi2qfu2wya2duruxnhz4bhehy (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qzi2qfu2wya2duruxnhz4bhehy: retire its instance key: the env file is a symlink
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qzi2qfu2wya2duruxnhz4bhehy rolled back to its original route
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qzi2qfu2wya2duruxnhz4bhehy is cleaned up and its journal row retired
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_noty7g5ieqieagwd2xungu7bei (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 08:13:12 provision: a.shop.example.com: swapped for import sd_esy34d5cbire2falxpgrpkw5wy (the original route is journaled)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_66e6xrbr5okc7oxrkjhllil47i refused: there is no route at a.shop.example.com to replace
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_62cvcwovntonirfoa2pg3gzni4 refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_msejzlkkub6ep6cxxwydl2bs4m refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_hwbeb4uqi5mfiegemfehusciny refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_7nq7uujwthyftwrgjtvcepywaq refused: the route belongs to app other
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_nmtlnolh6ij6u6chrbobaqyube refused: the route is filed under another account
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_6datzkh7ulz6n43o2vzan4ygk4 refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_kynaqzaldcobkvogcghpj3oray refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qxxefrnkckht72juohvh4x7fua refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_bgnetaeo24vyzie24exn6j5puq refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_wjsoplkntc35ibutuwruriqsum refused: the route is not an address route this import can take over (socket)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_nmdlrp2xdqzku7njuadbw3k62q refused: the route is not an address route this import can take over (no address)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_wd7squomi3uy2mk6mdsqyamx3a refused: the route is not an address route this import can take over (provisioned)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_w5v7vxkdifh6xurwi2leb23shu refused: the route is not an address route this import can take over (kind static)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qkwqdigfoxw4eriehrtz55crym refused: the route is not an address route this import can take over (backing)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_g6sel7c3laslpxo6aldktorqei refused: the route is not an address route this import can take over (tunnel)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_nhkxm7jaes5fi6uo544mt6ti5a refused: the route is not an address route this import can take over (caps)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_xxt6h6s2nx5klqw4ywkw63eyoq refused: the route is not an address route this import can take over (platform)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_tu7aqu3jewcbekf5fqmejx6j34 refused: the route is not an address route this import can take over (canary)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_u4nchczlanc3c7mkldetqxcda4 refused: the route is not an address route this import can take over (kind sidecar)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_x5xdwjip26ys2cuhfw6z76brii refused: the route is not an address route this import can take over (region)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_3ljo55gfpznurk5c4o5mcilnem refused: the route is not an address route this import can take over (fleet_box)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_qujsuldgcifbayyifsaxzg5fv4 refused: the route is not an address route this import can take over (hibernate)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_iqp2eqwb7jta2lr2jawely7pne refused: the route is not an address route this import can take over (claim_owner)
2026/10/20 08:13:12 provision: a.shop.example.com: import sd_rab2xdxnjjbjgh6bes64givmva refused: this box does not run instances nested
2026/10/20 08:13:13 provision: a.shop.example.com: import sd_p5b5c5cc7crz4bpvehv2pjva2m refused: this box does not run instances nested
2026/10/20 08:13:13 provision: a.shop.example.com: import sd_rb3qmkk7h4utc3j4hk32liadmu refused: claim control is on for this box
2026/10/20 08:13:13 provision: a.shop.example.com: swapped for import sd_dk7tmbxmjl2t4dq3qzbhdwwrem (the original route is journaled)
2026/10/20 08:13:13 provision: a.shop.example.com: swapped for import sd_sxc76i4thsj2mfzxyqbektb2ma (the original route is journaled)
2026/10/20 08:13:13 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/20 08:13:13 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_26lnjqlb4znm2o6czohurmy2de: its verify hash is not a sha256
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_yqeamdki4vrrykugsbrpjsozy4: its verify hash is not a sha256
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_2hfzkg3yewxyqble7gk4igwpz4: its verify hash is not a sha256
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/20 08:13:13 provision: A.shop.example.com/..: not swapping for import sd_p4w6z4zrzgahak5qehyqm2ckhe: its host or seed id is malformed (seeds: not a host)
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_sxhv3dl6jjorvovhr4tafi2hwy: its record does not describe a nested, hibernating instance
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_5ekpgngsczecpmpjhjvz4r6efq: its record does not describe a nested, hibernating instance
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_jwk5vup2aic6wnhadfbbtruxmy: its record does not describe a nested, hibernating instance
2026/10/20 08:13:13 provision: a.shop.example.com: not swapping for import sd_vvei43kshl26ximrg4cfbzvjhq: its record does not describe a nested, hibernating instance
2026/10/20 08:13:13 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/20 08:13:13 provision: a.shop.example.com: swapped for import sd_ldfmt6b4tndebiqu4jwtvcojia (the original route is journaled)
2026/10/20 08:13:13 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/20 08:13:13 provision: a.shop.example.com: swapped for import sd_3hn2ydxx5pny33tpbxmeuspbpu (the original route is journaled)
2026/10/20 08:13:13 provision: a.shop.example.com: swapped for import sd_zeoiz2vmddradpqggx75pofaxy (the original route is journaled)
2026/10/20 08:13:13 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/20 08:13:13 provision: dry-run: would consider swapping a.shop.example.com for import sd_emzweruysc5az2ahkqk45nagd4
2026/10/20 08:13:13 provision: a.shop.example.com: import sd_7iiwugdviiiobzu4secfsr4q24 rolled back to its original route
2026/10/20 08:13:13 provision: a.shop.example.com: import sd_7iiwugdviiiobzu4secfsr4q24: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 08:13:13 provision: a.shop.example.com: import sd_7iiwugdviiiobzu4secfsr4q24 is cleaned up and its journal row retired
2026/10/20 08:13:13 provision: a.shop.example.com: import sd_lpyrmr5r3dnx6paysbga4zhbpu left alone: the import journal holds seed sd_wcf42a35dz6krl5iu3e6ubwmt4 at swapped
2026/10/20 08:13:13 provision: a.shop.example.com: not minting import sd_j26l5knto7kz776q3cnw7u2sv4: it is swapped but not committed, and only its swap makes its row
2026/10/20 08:13:13 provision: a.shop.example.com: not minting import sd_53xyfahj7eisfn4occcthx5jui: it is placed but not committed, and only its swap makes its row
2026/10/20 08:13:13 provision: a.shop.example.com: swapped for import sd_eyps6r22smv3mhcgfvrnxup2mq (the original route is journaled)
2026/10/20 08:13:13 provision: a.shop.example.com: not minting import sd_eyps6r22smv3mhcgfvrnxup2mq: it is swapped but not committed, and only its swap makes its row
2026/10/20 08:13:13 provision: a.shop.example.com: not minting import sd_eyps6r22smv3mhcgfvrnxup2mq: it is placed but not committed, and only its swap makes its row
2026/10/20 08:13:13 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 08:13:13 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/20 08:13:13 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/20 08:13:13 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/20 08:13:13 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/20 08:13:13 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/20 08:13:13 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 08:13:13 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/20 08:13:13 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/20 08:13:13 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 08:13:13 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/20 08:13:13 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/20 08:13:13 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/20 08:13:13 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 08:13:13 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 08:13:13 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 08:13:13 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 08:13:13 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/20 08:13:13 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 08:13:13 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 08:13:13 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/20 08:13:13 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 08:13:13 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 08:13:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:13 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/20 08:13:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:13 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 08:13:13 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 08:13:13 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 08:13:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 08:13:13 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 08:13:13 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 08:13:13 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL	github.com/carlosframework/platform/internal/provision	17.797s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.008s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	5.423s
ok  	github.com/carlosframework/platform/internal/relay	7.226s
ok  	github.com/carlosframework/platform/internal/release	23.895s
ok  	github.com/carlosframework/platform/internal/rollout	3.650s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.003s
ok  	github.com/carlosframework/platform/internal/rootaws	0.007s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.060s
ok  	github.com/carlosframework/platform/internal/rootstate	0.026s
ok  	github.com/carlosframework/platform/internal/runs	0.563s
ok  	github.com/carlosframework/platform/internal/s3compat	0.005s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.495s
ok  	github.com/carlosframework/platform/internal/seeds	0.015s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	8.872s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	3.882s
ok  	github.com/carlosframework/platform/internal/status	0.059s
ok  	github.com/carlosframework/platform/internal/steering	0.006s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.199s
ok  	github.com/carlosframework/platform/internal/svcrole	0.002s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.004s
ok  	github.com/carlosframework/platform/internal/unixdial	0.003s
ok  	github.com/carlosframework/platform/internal/updatewords	0.004s
ok  	github.com/carlosframework/platform/internal/usage	0.005s
ok  	github.com/carlosframework/platform/internal/version	0.002s
ok  	github.com/carlosframework/platform/internal/vet	1.597s
FAIL
make: *** [Makefile:18: test] Error 1

amadan: step gate failed: exit status 2

amadan: job failed at step gate — its output is above, not at the tail of this log
diff --git a/harness/RUNLOG.md b/harness/RUNLOG.md
index 58ac2b041..edcf375ab 100644
--- a/harness/RUNLOG.md
+++ b/harness/RUNLOG.md
@@ -869,3 +869,67 @@ refusing code runs in the **old** updater, so a fix in the new release only help
candidate's side (the child must not print the ALERT when the two variables already hold the disabled
path); a fix in `Disk.Run` (stdout only) reaches boxes only after a roll. `carlos.prev.allowed` was
written at 07:34Z by the refused attempt.
+
+## Run 2: d940c09f (stopped at G4)
+
+`pre-window` restored, H14/H15 applied again, `pw-seed.sh` again (07:51-07:53Z), then snapshot
+**`pre-window-seeded`** (every later run starts here). Build: d940c09f + harness patch, v0.28.6, carlos
+`f03a243f...`, console `198dea64...`; tests as run 1, green. Console `d940c09f` shipped and promoted.
+**G2 PASS** (07:54Z, same answers as run 1). **G3 PASS** (07:55Z): run-id `cohort1-20261020T075454Z`,
+identity `control/system/router/releases/v0.28.6.json` create-only, REV 9.
+**G4 FAIL** (promote 07:55:45Z): leo refused at 07:57:08Z with the same `candidate reports "...ALERT...\ncarlos
+v0.28.6"`; dennis rolled. d940c09f has the same `Disk.Run`/`scrubEnvironment` code.
+
+**Finding: the console re-signs the roster at an armed box's promote** (EXPECTED, the claim owner says:
+`reserveHostUpdate`, `internal/console/hostactivation.go:31`). At 07:55:45.700Z sophie (203.0.113.22, the
+console) put `control/host-actors.json` (2235 -> 9407 bytes), revision 9 -> 10, adding
+`activations/<id>` for router/stable: actor `box:kathleen-juggling`, `hashes` (old, new, old), the
+publication's before/after pointer and expected etag, leo's release report, `update_mode promote`.
+So every plan with `expected_revision` after a console-driven update, promote or rollback must refresh
+REV first (Runbook corrections, C4).
+
+## Run 3: a4290bf8 + F1 (bypass; superseded by run 4 before G4)
+
+The coordinator approved a candidate-side bypass through the real armed `system update`: **F1**,
+`harness/patches/f1-rootaws-child-alert.patch` (sha256 `dc47dbe7...`), exact diff:
+```
+ for _, key := range keys {
+- if _, set := os.LookupEnv(key); set {
++ // HARNESS F1 (not a reviewed fix): a root parent's own scrub leaves
++ // these two set to disabledSharedFile, and its root children inherit
++ // them; that is this package's setting, not an override.
++ if v, set := os.LookupEnv(key); set && !(v == disabledSharedFile && (key == "AWS_CONFIG_FILE" || key == "AWS_SHARED_CREDENTIALS_FILE")) {
+ changed = true
+ }
+```
+**F1 against the owner's fix (8376a468 `rootaws: an inherited disabled shared-file sentinel is not an
+override`): the same predicate**, `(key == "AWS_CONFIG_FILE" || key == "AWS_SHARED_CREDENTIALS_FILE") &&
+value == disabledSharedFile`, factored there into `inheritedSentinel(key, value)` with a test
+(`environment_test.go`, +38). No behavioural difference: any other value of either key, and every other
+key in the list, still alerts. Run 3 got as far as G2 PASS and G3 PASS (08:05Z, v0.28.6 = a4290bf8+F1,
+carlos `2775250a...`) and was then dropped for 8376a468; it never rolled.
+
+## Run 4: 8376a468 (the owner's fix)
+
+Build: 8376a468 + harness patch, **v0.28.7**, carlos `67bc705c...`, console `293073e0...`; tagged tests
+green, rootaws ok, the window tests ok. Artefacts `artefacts/v0.28.7-8376a468/`.
+
+**G4 cannot be re-run from `g4-fail-cc90d542`** (08:09Z): the promote of v0.28.7 was refused,
+`activation 85d57bf5ca120faab899e87372d9c4b8 is held for router/stable. It is released when every reserved
+box reports completion or is excluded by a termination fence or quarantine. If it was never published,
+cancel it with carlos system cancel-activation`. Code: a refused stage never changes the box, so
+`settleGuard` records no completion and leaves the reservation "for the agent's retry or an operator"
+(`internal/host/guardtransaction.go:126-145`); the agent retries the same refused candidate;
+`cancel-activation` refuses a published activation (`internal/console/hostactivation.go:333`);
+`ReleaseActivation` takes only completion or the D7 exclusions (`internal/hostactors/activation_complete.go:13-56`).
+**So on dev one refused armed roll blocks every later promote and rollback of that channel: G4's failure
+action ("fix forward only") is not executable without quarantining or fencing leo** (Runbook corrections,
+C5). Snapshot `g4-held-8376a468`. G4 is re-run from `pre-window-seeded` instead (the parent updater on
+leo is still the old v0.28.5, so the candidate-side fix is what is tested).
+
+From `pre-window-seeded` (08:10Z): release v0.28.7, console `8376a468` shipped and promoted.
+**G2 PASS** (08:11Z, as before). **G3 PASS** (08:11:49Z): run-id `cohort1-20261020T081130Z`, signer
+`carlos v0.28.7` OK, key `root 600 1 45`, identity `v0.28.7.json` create-only (`ae70c80a...`), REV 9.
+First promote at 08:12:00Z: `hostactors: roster authority refused`. Harness artefact: the snapshot
+restore at 08:10:50Z left every box report from the snapshot's time (over 15 minutes old) and the boxes
+had not ticked yet; all three reported at 08:12:08Z and the roster was unchanged (rev 9). Promote retried once.
diff --git a/harness/scenarios/cohort1/blocks/w-open-signer.sh b/harness/scenarios/cohort1/blocks/w-open-signer.sh
index 728690c69..fa7bf0b9d 100755
--- a/harness/scenarios/cohort1/blocks/w-open-signer.sh
+++ b/harness/scenarios/cohort1/blocks/w-open-signer.sh
@@ -9,12 +9,12 @@ set -euo pipefail
cd ~/cohort1
RUN=cohort1-$(date -u +%Y%m%dT%H%M%SZ); echo "$RUN" > run-id; echo "run-id $RUN"
X=s3://harness-deployment/claim-signer/$RUN
-for f in ~/release.pub ~/release-v0.28.6/SHA256SUMS.txt ~/release-v0.28.6/SHA256SUMS.txt.sig ~/release-v0.28.6/carlos-linux-arm64 \
+for f in ~/release.pub ~/release-$WTAG/SHA256SUMS.txt ~/release-$WTAG/SHA256SUMS.txt.sig ~/release-$WTAG/carlos-linux-arm64 \
inputs/floor.json inputs/regions.json inputs/leo.json inputs/sophie.json inputs/console.json signer-helpers.sh; do
aws s3 cp --quiet "$f" "$X/$(basename "$f")"
done
aws s3 ls "$X/"
-SUMS=$(cd ~/release-v0.28.6 && sha256sum carlos-linux-arm64 SHA256SUMS.txt SHA256SUMS.txt.sig | awk '{print $1}' | paste -sd' ')
+SUMS=$(cd ~/release-$WTAG && sha256sum carlos-linux-arm64 SHA256SUMS.txt SHA256SUMS.txt.sig | awk '{print $1}' | paste -sd' ')
H=$(sha256sum signer-helpers.sh | cut -d' ' -f1); P=$(sha256sum ~/release.pub | cut -d' ' -f1)
./ssm.sh eu-west-1 "$SIGNER" "
set -euo pipefail
diff --git a/harness/scenarios/cohort1/values.env b/harness/scenarios/cohort1/values.env
index a3d021917..5405e2657 100644
--- a/harness/scenarios/cohort1/values.env
+++ b/harness/scenarios/cohort1/values.env
@@ -11,7 +11,7 @@ PROFILE=harness # dev: kass
TAG=v0.28.5 # dev: v0.28.4
CV=1b635e61 # dev: f3bf1214 (the console's ship version)
# Window (Option B) values, 2026-10-20 morning harness run:
-WTAG=v0.28.7 # dev: v0.28.5. Run 2 after its G4 FAIL: harness fix-forward v0.28.7 = d940c09f + harness patch + F1 (patches/f1-rootaws-child-alert.patch)
-WCV=d940c09f-f1 # dev: the v0.28.5 console's ship version
+WTAG=v0.28.7 # dev: v0.28.5. Run 4: harness v0.28.7 = claim-empty-cohort-done @ 8376a468 (the owner's rootaws fix) + harness patch; G4 re-run from g4-fail-cc90d542
+WCV=8376a468 # dev: the v0.28.5 console's ship version
DOMAIN=dev.harness.test # dev: dev.carlosframework.com
CONSOLE=http://127.0.0.1:8090 # dev: https://platform.dev.carlosframework.com