carlos / platform Public

harness: Run 10 A2 PASS: re-arm from the v0.28.4 stand-in, console install-console --upgrade works from a plain-installed console

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

claude 4 days ago ebd8559ae2396b038f9aac8587cc63f0c31e95a3 parent 23a6af4

5 files changed, +284 −0

harness/RUNLOG.md +24 −0
harness/evidence/run10/a2-console.log +96 −0
harness/evidence/run10/a2-leo.log +66 −0
harness/evidence/run10/a2-restore-release.log +30 −0
harness/evidence/run10/a2-sophie.log +68 −0

CI failed — run details

CI log

=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	315.019s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	3.024s
ok  	github.com/carlosframework/platform/cmd/moveprobe	93.308s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.724s
?   	github.com/carlosframework/platform/harness/apps/wakecheck	[no test files]
ok  	github.com/carlosframework/platform/internal/activator	250.623s
ok  	github.com/carlosframework/platform/internal/agentsock	0.043s
ok  	github.com/carlosframework/platform/internal/alerting	0.007s
ok  	github.com/carlosframework/platform/internal/analytics	0.023s
ok  	github.com/carlosframework/platform/internal/appconfig	2.578s
ok  	github.com/carlosframework/platform/internal/apperr	0.100s
ok  	github.com/carlosframework/platform/internal/applog	0.191s
ok  	github.com/carlosframework/platform/internal/awsinv	0.009s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.005s
ok  	github.com/carlosframework/platform/internal/boxid	0.866s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.012s
ok  	github.com/carlosframework/platform/internal/caps	0.016s
ok  	github.com/carlosframework/platform/internal/certwarm	0.005s
ok  	github.com/carlosframework/platform/internal/cgroup	0.719s
ok  	github.com/carlosframework/platform/internal/changelog	0.351s
ok  	github.com/carlosframework/platform/internal/claimactivation	0.898s
ok  	github.com/carlosframework/platform/internal/clamd	0.059s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	406.483s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	5.654s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.013s
ok  	github.com/carlosframework/platform/internal/dbverify	0.004s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.005s
ok  	github.com/carlosframework/platform/internal/docsite	0.007s
ok  	github.com/carlosframework/platform/internal/domains	2.461s
ok  	github.com/carlosframework/platform/internal/doorkey	0.007s
ok  	github.com/carlosframework/platform/internal/economics	0.004s
ok  	github.com/carlosframework/platform/internal/edge	45.008s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.010s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.154s
ok  	github.com/carlosframework/platform/internal/gate	1.668s
ok  	github.com/carlosframework/platform/internal/genselect	0.019s
ok  	github.com/carlosframework/platform/internal/geo	0.009s
ok  	github.com/carlosframework/platform/internal/geoip	0.033s
ok  	github.com/carlosframework/platform/internal/historyreadback	0.161s
ok  	github.com/carlosframework/platform/internal/host	184.559s
ok  	github.com/carlosframework/platform/internal/hostactors	5.945s
ok  	github.com/carlosframework/platform/internal/hostactors/awsmembership	0.009s
ok  	github.com/carlosframework/platform/internal/hostbox	2.658s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.603s
ok  	github.com/carlosframework/platform/internal/hostenv	0.004s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.005s
ok  	github.com/carlosframework/platform/internal/hostexec	4.893s
ok  	github.com/carlosframework/platform/internal/hostfence	0.035s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.427s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.013s
ok  	github.com/carlosframework/platform/internal/hostguard	1.011s
ok  	github.com/carlosframework/platform/internal/hostops	1.660s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.005s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.002s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.456s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.158s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.002s
ok  	github.com/carlosframework/platform/internal/infraview	0.008s
ok  	github.com/carlosframework/platform/internal/instancectl	5.213s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.723s
ok  	github.com/carlosframework/platform/internal/instancefs	0.006s
ok  	github.com/carlosframework/platform/internal/instancekey	0.002s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.007s
ok  	github.com/carlosframework/platform/internal/layout	1.577s
ok  	github.com/carlosframework/platform/internal/lbhealth	0.003s
ok  	github.com/carlosframework/platform/internal/lease	9.794s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.006s
ok  	github.com/carlosframework/platform/internal/ledger	0.012s
ok  	github.com/carlosframework/platform/internal/mail	0.175s
ok  	github.com/carlosframework/platform/internal/maintenance	0.086s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.550s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.082s
ok  	github.com/carlosframework/platform/internal/metrics	0.006s
ok  	github.com/carlosframework/platform/internal/moves	21.084s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.817s
ok  	github.com/carlosframework/platform/internal/objstore	0.183s
ok  	github.com/carlosframework/platform/internal/ops	0.168s
ok  	github.com/carlosframework/platform/internal/park	0.224s
ok  	github.com/carlosframework/platform/internal/privatefile	0.003s
2026/10/20 21:28:00 provision: listing apps/bab/blog/instances/: list refused — its records are unseen this pass
2026/10/20 21:28:00 provision: listing apps/bab/: listdirs refused — its records are unseen this pass
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 21:28:00 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 21:28:00 provision: skipping record apps/bac/tito/instances/one.example.com.json: unreadable: read refused
2026/10/20 21:28:00 provision: listing apps/bac/tito/instances/: list refused — its records are unseen this pass
2026/10/20 21:28:00 provision: an app's records could not be listed: they are skipped
2026/10/20 21:28:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:00 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 21:28:00 provision: remove retired instance route shop.example: provision: claim admission unavailable
2026/10/20 21:28:00 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 21:28:00 provision: remove retired sidecar route worker.sidecar.internal: provision: claim admission unavailable
2026/10/20 21:28:00 provision: claim install acme.go.tito.io: provision: claim admission unavailable
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 21:28:00 provision: claim install bot.eleven.bac.sidecar.internal: provision: claim admission unavailable
2026/10/20 21:28:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 21:28:00 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 21:28:00 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 21:28:00 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: no sealed config
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 21:28:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 21:28:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 21:28:00 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 21:28:00 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 21:28:00 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 21:28:00 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:00 provision: claim install acme.go.tito.io: registry: claim row ownership changed or unknown
2026/10/20 21:28:00 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 21:28:01 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["run"])
2026/10/20 21:28:01 provision: claim install bot.eleven.bac.sidecar.internal: registry: claim row ownership changed or unknown
2026/10/20 21:28:01 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 21:28:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 21:28:01 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 21:28:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:01 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:01 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:01 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 21:28:01 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:01 provision: skipping record apps/bac/tito/instances/new.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:01 provision: minted instance route rg.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route ri.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rj.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rf.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rh.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rk.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rl.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rb.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rc.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route rd.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route ra.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 21:28:01 provision: skipping record apps/bac/tito/instances/rb.go.tito.io.json: read failed: read refused
2026/10/20 21:28:01 provision: minted instance route re.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appc.example (app "appc" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appd.example (app "appd" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appe.example (app "appe" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.apph.example (app "apph" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appf.example (app "appf" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appg.example (app "appg" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appi.example (app "appi" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appj.example (app "appj" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appa.example (app "appa" acct "bac")
2026/10/20 21:28:01 provision: minted instance route x.appb.example (app "appb" acct "bac")
2026/10/20 21:28:01 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 21:28:01 provision: minted instance route r0065.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0070.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0073.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0009.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0045.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0091.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0100.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0109.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0117.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0013.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0052.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0071.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0076.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0083.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0024.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0077.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0004.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0058.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0062.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0111.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0090.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0129.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0034.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0064.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0105.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0108.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0023.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0047.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0092.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0127.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0011.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0020.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0040.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0085.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0103.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0006.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0041.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0094.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0104.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0123.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0126.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0110.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0002.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0027.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0042.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0072.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0079.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0114.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0044.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0074.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0032.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0033.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0035.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0059.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0075.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0082.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0118.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0128.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0098.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0101.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0049.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0061.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0096.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0102.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0005.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0028.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0067.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0097.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0000.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0054.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0095.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0112.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0116.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0012.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0026.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0050.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0087.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0122.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0060.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0078.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0113.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0037.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0051.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0007.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0125.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0010.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0043.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0066.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0088.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0014.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0016.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0053.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0039.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0093.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0017.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0048.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0057.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0120.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0008.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0021.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0031.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0106.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0038.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0055.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0080.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0119.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0003.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0015.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0036.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0084.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0121.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0025.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0001.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0018.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0068.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0124.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0099.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0115.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0019.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0022.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0056.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0086.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0089.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0107.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0030.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0046.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0063.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0069.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0081.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:01 provision: minted instance route r0029.go.tito.io (app "tito" acct "bac")
--- FAIL: TestPlan14RootReadCensus (4.70s)
    plan14_root_reads_test.go:940: root read census: 137 discrepancies
        changed root read internal/hostfence/writer.go:OpenRootFenceStore; review class, task, sites and digest
        changed root source envelope harness
        changed root source envelope harness/apps/wakecheck
        changed root source envelope harness/boxes
        changed root source envelope harness/boxes/shims
        changed root source envelope harness/checks
        changed root source envelope harness/console
        changed root source envelope harness/infra
        changed root source envelope harness/infra-copies/747f699/dev
        changed root source envelope harness/infra-copies/a0b3f5a/dev
        changed root source envelope harness/infra-copies/a0b3f5a/scripts
        changed root source envelope harness/infra-copies/pr47
        changed root source envelope harness/operator
        changed root source envelope harness/release
        changed root source envelope harness/scenarios
        changed root source envelope harness/scenarios/cohort1
        changed root source envelope harness/scenarios/cohort1/blocks
        changed root source envelope harness/stand-ins
        changed root source envelope internal/host
        changed root source envelope internal/hostfence
        changed root source envelope internal/publicrelease
        changed root source envelope internal/s3compat
        unclassified root read harness/apps/wakecheck/main.go:main file:Exec@333,file:Exec@804,file:Open@277,file:QueryRow@870
        unclassified root read harness/boxes/boxes-up.sh:external file:external@0
        unclassified root read harness/boxes/dmi-shim.sh:external file:external@0
        unclassified root read harness/boxes/layout-probe.sh:external file:external@0
        unclassified root read harness/boxes/leo-ext4-from.sh:external file:external@0
        unclassified root read harness/boxes/leo-ext4.sh:external file:external@0
        unclassified root read harness/boxes/leo-swap.sh:external file:external@0
        unclassified root read harness/boxes/shims/systemd-zram-setup@.service:external file:external@0
        unclassified root read harness/boxes/vendor-shims.sh:external file:external@0
        unclassified root read harness/checks/check2.sh:external file:external@0
        unclassified root read harness/checks/check5.sh:external file:external@0
        unclassified root read harness/checks/check6.sh:external file:external@0
        unclassified root read harness/checks/check6b.sh:external file:external@0
        unclassified root read harness/checks/check7.sh:external file:external@0
        unclassified root read harness/checks/check8.sh:external file:external@0
        unclassified root read harness/checks/fix5.sh:external file:external@0
        unclassified root read harness/checks/run6b.sh:external file:external@0
        unclassified root read harness/checks/snap-base.sh:external file:external@0
        unclassified root read harness/checks/snap-boot.sh:external file:external@0
        unclassified root read harness/checks/ssmsmoke.sh:external file:external@0
        unclassified root read harness/console/console-ext4.sh:external file:external@0
        unclassified root read harness/console/console-setup.sh:external file:external@0
        unclassified root read harness/console/signin.sh:external file:external@0
        unclassified root read harness/console/system-update.sh:external file:external@0
        unclassified root read harness/donor-user-data.sh:external file:external@0
        unclassified root read harness/evidence.sh:external file:external@0
        unclassified root read harness/host-setup.sh:external file:external@0
        unclassified root read harness/host-user-data.sh:external file:external@0
        unclassified root read harness/hrun.sh:external file:external@0
        unclassified root read harness/infra-copies/747f699/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/dev/host-init.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/bootstrap-box.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/ship-app.sh:external file:external@0
        unclassified root read harness/infra-copies/a0b3f5a/scripts/update-platform-binary.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/probe.sh:external file:external@0
        unclassified root read harness/infra-copies/pr47/remediation.sh:external file:external@0
        unclassified root read harness/infra/infra-setup.sh:external file:external@0
        unclassified root read harness/operator/operator-setup.sh:external file:external@0
        unclassified root read harness/release/release-setup.sh:external file:external@0
        unclassified root read harness/release/release-window.sh:external file:external@0
        unclassified root read harness/release/step7-operator.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/50-publish-record.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster-resume.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/51-roster.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61-sign.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/61a-install-channel.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/62-guard-arm.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/63-sophie.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-console-report.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-evidence-key.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7-runtime.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/74-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-leo.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/7a-run.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/acceptance.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b1.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2-c8.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2-list.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b2.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-after.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-pair.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4-resume.sophie.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b4.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/b5.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g4-roll.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g5.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/g9-check.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/p9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/place-parent.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/pw-seed.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-a1-normal.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-console-upgrade.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r10-prep.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-console-e1.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-console.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-devcheck.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-move-precheck.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-move-setup.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-move.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-normal.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-rearm.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-release.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/r9-setup.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-roll.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict.leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm-strict2.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm2.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/rearm3.host.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/reports.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/run-leo.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-env.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-identity.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-open-signer.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w-sums.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w81b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82-f4.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82-f5.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w82b.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w84.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/blocks/w9.box.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/box-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/signer-helpers.sh:external file:external@0
        unclassified root read harness/scenarios/cohort1/ssm.sh:external file:external@0
        unclassified root read harness/scenarios/sync.sh:external file:external@0
        unclassified root read harness/snapshot.sh:external file:external@0
        unclassified root read harness/stand-ins/certs.sh:external file:external@0
        unclassified root read internal/s3compat/harness.go:readHarnessFile file:ReadFile@189,file:Stat@55
        changed reclassified declaration internal/hostfence/writer.go:OpenRootFenceStore
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: refusing to mint route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted service route svc.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route console.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route shared.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 21:28:12 provision: converged acme.go.tito.io channel edge -> canary/rehearsal
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:12 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: empty channel
2026/10/20 21:28:12 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 21:28:12 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged acme.go.tito.io environment "" -> "staging"
2026/10/20 21:28:13 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged acme.go.tito.io steering "" -> "latency"
2026/10/20 21:28:13 provision: converged acme.go.tito.io steering "latency" -> ""
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged acme.go.tito.io hibernate false -> true
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged acme.go.tito.io hibernate true -> false (replication "daily" cleared: only a hibernating route's rung is read)
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged acme.go.tito.io status-named false -> true
2026/10/20 21:28:13 provision: converged acme.go.tito.io status-named true -> false
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted service route ha.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7002" -> "127.0.0.1:7001,127.0.0.1:7003" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 21:28:13 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7001,127.0.0.1:7003" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 21:28:13 provision: converged ha.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:7003,127.0.0.1:7001" -> "127.0.0.1:7003,127.0.0.1:7001" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "{\"path\":\"/healthz\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 21:28:13 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged whole.go.tito.io upstreams addr "127.0.0.1:9443" -> "", addrs "" -> "127.0.0.1:9443,127.0.0.1:9444" (probe "" -> "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}")
2026/10/20 21:28:13 provision: converged whole.go.tito.io upstreams addr "" -> "", addrs "127.0.0.1:9443,127.0.0.1:9444" -> "" (probe "{\"path\":\"/\",\"status\":200,\"interval_ms\":2000,\"fail_after\":3,\"rise_after\":2}" -> "")
2026/10/20 21:28:13 provision: whole.go.tito.io: record describes a different route SHAPE than the row (kind "instance"/"service" unit ""/"" socket "/run/carlos/whole.go.tito.io.sock"/"" db "/data/whole.go.tito.io.db"/"") — not converged in place; `carlos remove whole.go.tito.io` purges this route's capability grants (registry.Delete's contract, not a bug) before the next pass re-mints it, so treat that as a last resort, not a routine fix
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted service route whole.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: skipping accounts/bac/account.json: malformed account manifest: invalid character 'o' in literal null (expecting 'u')
2026/10/20 21:28:13 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: manifest bac/tito: read failed: provision: manifest bac/tito: invalid character 'o' in literal null (expecting 'u')
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: disagrees with its own path (host="wrong-host.go.tito.io" account="bac" app="tito")
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/acme$evil.go.tito.io.json: host "acme$evil.go.tito.io" is not a hostname
2026/10/20 21:28:13 provision: not removing acme$evil.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/bad-service.go.tito.io.json: invalid shape: kind service with no addr: the platform only proxies to a service, so the record must name the upstream it proxies to
2026/10/20 21:28:13 provision: not removing bad-service.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/no-channel.go.tito.io.json: empty channel
2026/10/20 21:28:13 provision: not removing no-channel.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: skipping record apps/bac/tito/instances/acme.go.tito.io.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:13 provision: not removing acme.go.tito.io: its record exists but could not be read cleanly this pass
2026/10/20 21:28:13 provision: removed retired instance route ghost.go.tito.io (record gone)
2026/10/20 21:28:13 provision: duplicate host dup.go.tito.io: keeping apps/bac/tito/instances/dup.go.tito.io.json, skipping apps/bad/tito/instances/dup.go.tito.io.json
2026/10/20 21:28:13 provision: minted instance route dup.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 21:28:13 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 21:28:13 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 21:28:13 provision: removed retired static route site.go.tito.io (app in the trash)
2026/10/20 21:28:13 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 21:28:13 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 21:28:13 provision: removed retired instance route acme.go.tito.io (app in the trash)
2026/10/20 21:28:13 provision: bac/tito is in the trash — not minting instance routes for it
2026/10/20 21:28:13 provision: trash marker for bac/tito unreadable: release: malformed trash marker for bac/tito: invalid character 'n' looking for beginning of object key string — not minting for this app
2026/10/20 21:28:13 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 21:28:13 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 21:28:13 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 21:28:13 provision: converged acme.go.tito.io channel canary/rehearsal -> edge
2026/10/20 21:28:13 provision: converged acme.go.tito.io environment "staging" -> ""
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (backing "unit" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (tunnel "pi-fleet" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (caps "port:25" (box-scoped, not expressible in a record)) — leaving it alone
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (platform (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (canary (owned by the domains reconcile pass)) — leaving it alone
2026/10/20 21:28:13 provision: acme.go.tito.io exists but is not the route this record describes (db "/data/other.db"/"/data/acme.go.tito.io.db") — leaving it alone
2026/10/20 21:28:13 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 21:28:13 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 21:28:13 provision: dry-run: would mint instance route acme.go.tito.io (app "tito" acct "bac" channel "stable")
2026/10/20 21:28:13 provision: dry-run: would adopt existing route adopt.go.tito.io (app "tito" acct "bac") — this record would own its channel and environment
2026/10/20 21:28:13 provision: dry-run: would converge adopt.go.tito.io channel stable -> edge
2026/10/20 21:28:13 provision: dry-run: would converge adopt.go.tito.io environment "" -> "staging"
2026/10/20 21:28:13 provision: dry-run: would converge owned.go.tito.io channel stable -> edge
2026/10/20 21:28:13 provision: dry-run: would converge owned.go.tito.io environment "" -> "staging"
2026/10/20 21:28:13 provision: dry-run: would converge owned.go.tito.io hibernate false -> true
2026/10/20 21:28:13 provision: dry-run: would converge owned.go.tito.io seed
2026/10/20 21:28:13 provision: dry-run: would remove retired instance route gone.go.tito.io (record gone)
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: adopted existing route adopt.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 21:28:13 provision: converged adopt.go.tito.io channel stable -> edge
2026/10/20 21:28:13 provision: converged adopt.go.tito.io environment "" -> "staging"
2026/10/20 21:28:13 provision: converged owned.go.tito.io channel stable -> edge
2026/10/20 21:28:13 provision: converged owned.go.tito.io environment "" -> "staging"
2026/10/20 21:28:13 provision: converged owned.go.tito.io hibernate false -> true
2026/10/20 21:28:13 provision: removed retired instance route gone.go.tito.io (record gone)
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: adopted existing route story.carlosframework.com (app "story" acct "bad") — this record now owns its channel and environment
2026/10/20 21:28:13 provision: story.carlosframework.com exists but is not the route this record describes (kind "instance"/"static") — leaving it alone
2026/10/20 21:28:13 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted service route pubs.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted service route pub.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route unit.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route exec.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted service route loop.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted service route named.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted service route priv.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted static route pisite.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted static route site.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: removed retired static route site.go.tito.io (record gone)
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged acme.go.tito.io replicas "ie,uk" -> "uk"
2026/10/20 21:28:13 provision: converged acme.go.tito.io replicas "uk" -> ""
2026/10/20 21:28:13 provision: minted instance route acme-uk.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: converged acme-uk.go.tito.io replica mark true -> false
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:13 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:14 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:14 provision: minted instance route router.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:14 provision: acme.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 21:28:14 provision: router.go.tito.io: not minting this pass: the box's layout intent could not be read: store down
2026/10/20 21:28:14 provision: adopted existing route acme.go.tito.io (app "tito" acct "bac") — this record now owns its channel and environment
2026/10/20 21:28:14 provision: converged acme.go.tito.io channel stable -> edge
2026/10/20 21:28:14 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 21:28:14 provision: not removing acme.go.tito.io (record gone): participant of a running operation
2026/10/20 21:28:14 provision: removed retired instance route acme.go.tito.io (record gone)
2026/10/20 21:28:14 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
2026/10/20 21:28:14 provision: refusing to mint held route acme.go.tito.io (app "tito" acct "bac"): this box declares CARLOS_INBOUND=none (no-inbound) and cannot serve routed instance traffic
2026/10/20 21:28:14 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 21:28:14 provision: acme.go.tito.io: held restoring by rb_other, not by mv_acme; leaving it
2026/10/20 21:28:14 provision: acme.go.tito.io: the row is not this pass's (app "other" acct ""); not holding it for mv_acme
2026/10/20 21:28:14 provision: acme.go.tito.io exists but is not the route this record describes (app "other"/"tito") — leaving it alone
2026/10/20 21:28:14 provision: dry-run: would mint instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac" channel "stable")
2026/10/20 21:28:14 provision: acme.go.tito.io: not held landing by mv_acme: the row's hold changed under this pass; the next pass judges it afresh
2026/10/20 21:28:14 provision: held acme.go.tito.io landing by mv_acme (was ready)
2026/10/20 21:28:14 provision: minted instance route acme.example.com (app "shop" acct "bac")
2026/10/20 21:28:14 provision: minted instance route plain.example.com (app "shop" acct "bac")
2026/10/20 21:28:14 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:14 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 21:28:14 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:14 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 21:28:14 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:14 provision: skipping record apps/bac/shop/instances/liar.shop.example.com.json: disagrees with its own path (host="other.shop.example.com" account="bac" app="shop")
2026/10/20 21:28:14 provision: skipping record apps/bac/shop/instances/garbled.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:14 provision: listing apps/bac/shop/instances/: list refused — its records are unseen this pass
2026/10/20 21:28:14 provision: a.shop.example.com: swapped for import sd_ca2ztgdm2fxkaqx3xjyo24b27a (the original route is journaled)
2026/10/20 21:28:14 provision: a.shop.example.com: import sd_ca2ztgdm2fxkaqx3xjyo24b27a committed: its gate is cleared and its journal row dropped
2026/10/20 21:28:14 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:14 provision: a.shop.example.com: import sd_o34tx5d3jv3mg7djlj4mnywthq rolled back to its original route
2026/10/20 21:28:14 provision: a.shop.example.com: import sd_o34tx5d3jv3mg7djlj4mnywthq: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 21:28:14 provision: a.shop.example.com: import sd_o34tx5d3jv3mg7djlj4mnywthq is cleaned up and its journal row retired
2026/10/20 21:28:14 provision: a.shop.example.com: import sd_sgiwgic4iypxeur7zb7lkhp57a rolled back to its original route
2026/10/20 21:28:14 provision: a.shop.example.com: import sd_sgiwgic4iypxeur7zb7lkhp57a: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 21:28:14 provision: a.shop.example.com: import sd_sgiwgic4iypxeur7zb7lkhp57a is cleaned up and its journal row retired
2026/10/20 21:28:14 provision: dry-run: would redo a.shop.example.com's swap record CAS for import sd_4hojlkknyeu6hfiewdmxo7iegq
2026/10/20 21:28:14 provision: dry-run: would clear a.shop.example.com's import gate
2026/10/20 21:28:14 provision: dry-run: would converge a.shop.example.com seed source
2026/10/20 21:28:14 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:15 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (connection reset)
2026/10/20 21:28:15 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (provision: invalid maintenance projection or protected fields)
2026/10/20 21:28:15 provision: a.shop.example.com: the import's record apps/bac/shop/instances/a.shop.example.com.json is not one this pass can use (the record under apps/bac/shop/instances/a.shop.example.com.json is apps/bac/shop/instances/b.shop.example.com.json's)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_fglwjxnqrfyvdhkwjnc6dysnwa cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_nauia7qwasdomhw72nzm435eh4 cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_xpcp4avzrl5fvhytun7kmp4j4i is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_pgbszhntkkokcokdbt752pizwe is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_kjtwwgor6epmmm24ecacb2w4im is journaled, but this box cannot act on imports; its row is left alone
2026/10/20 21:28:15 provision: the import journal could not be read: registry: import journal a.shop.example.com: original row: unexpected end of JSON input (no import is acted on and no route is removed this pass)
2026/10/20 21:28:15 provision: c.shop.example.com: import sd_veqopt6rk2v45u2sl5db6mmcsi left alone this pass: the import journal could not be read
2026/10/20 21:28:15 provision: b.shop.example.com: import sd_pxg4rsavdtvgmqczq7572rkxgi left alone this pass: the import journal could not be read
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_znvhfzyhic2fetwujfbtv4om2u committed: its gate is cleared and its journal row dropped
2026/10/20 21:28:15 provision: a.shop.example.com: not converging import sd_636bcpsrq6ymxekr5s3dhwba34: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 21:28:15 provision: a.shop.example.com: not converging import sd_phv6wnmr3ws7slyqrlilf5dmqq: it is swapped but not committed, and the row on this box has no import gate
2026/10/20 21:28:15 provision: a.shop.example.com: not converging import sd_dr2pwbhlhso2t7gxbmjqaq6jhe: it is placed but not committed, and the row on this box has no import gate
2026/10/20 21:28:15 provision: a.shop.example.com: not converging import sd_np3c56xbdhilhjviewacaestgy: it is placed but not committed, and the row on this box has no import gate
2026/10/20 21:28:15 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:15 provision: converge seed source on a.shop.example.com: constraint failed: seed_source is read-only here (1811)
2026/10/20 21:28:15 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_z4bkij6565mfhjnt5pamafvm64 committed: its gate is cleared and its journal row dropped
2026/10/20 21:28:15 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:15 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:15 provision: acme.go.tito.io: row is on the nested layout (db "/data/instances/acme.go.tito.io/acme.go.tito.io.db" socket "/run/carlos/instances/acme.go.tito.io/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:15 provision: acme.go.tito.io: not minting a seeded instance: this box does not mint nested (<nil>)
2026/10/20 21:28:15 provision: acme.go.tito.io: not minting a seeded instance: claim control is on for this box
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_2khbxcuofdajy2j477xcu6woba: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_2khbxcuofdajy2j477xcu6woba rolled back (no box had swapped it)
2026/10/20 21:28:15 provision: acme.go.tito.io: not minting a seeded instance: its record does not describe a hibernating instance
2026/10/20 21:28:15 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:15 provision: removed instance route acme.go.tito.io (its seed sd_w7wa37w37mmnsuyihqediuzcbi was aborted); the next pass rolls it back
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_w7wa37w37mmnsuyihqediuzcbi: this box cannot read seed markers, and places no seed; nothing local is removed
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_w7wa37w37mmnsuyihqediuzcbi rolled back (no box had swapped it)
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_dl5i4bt36zek2c5yz4beqnqwdu has a row this pass may not remove; leaving the seed aborted
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_rtf34gcshnk5bqfj7r53vk7oci rolled back (no box had swapped it)
2026/10/20 21:28:15 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:15 provision: removed instance route acme.go.tito.io (its seed sd_eqmw3rpoe6vilrmzmvtszu4h4e was aborted); the next pass rolls it back
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_eqmw3rpoe6vilrmzmvtszu4h4e has no route on this box: its local data is removed
2026/10/20 21:28:15 provision: acme.go.tito.io: aborted seed sd_eqmw3rpoe6vilrmzmvtszu4h4e rolled back (no box had swapped it)
2026/10/20 21:28:15 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_qntptwgiz62uhlkzaowhzzh3h4 (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_qntptwgiz62uhlkzaowhzzh3h4 rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_qntptwgiz62uhlkzaowhzzh3h4 is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_rhqf6pwogtrfbdkeswy57xykia (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_rhqf6pwogtrfbdkeswy57xykia rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_rhqf6pwogtrfbdkeswy57xykia is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_wmclbfovi3gcfeabgca5abmpb4 (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_wmclbfovi3gcfeabgca5abmpb4 rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_wmclbfovi3gcfeabgca5abmpb4: the host's replica is left alone: its record no longer names this seed
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_wmclbfovi3gcfeabgca5abmpb4 is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_xqsyqr5oa7wjdibfeqgpnb3uny (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_xqsyqr5oa7wjdibfeqgpnb3uny rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_xqsyqr5oa7wjdibfeqgpnb3uny rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_xqsyqr5oa7wjdibfeqgpnb3uny is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_tchjuitliagchznl6ul2gzsi5u (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_tchjuitliagchznl6ul2gzsi5u rollback deferred: the host is not fenced and stopped yet (stop unproven)
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_6ld7mf27qinunz2ehoxkcu4st4 (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_6ld7mf27qinunz2ehoxkcu4st4 is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_myehmp7zefga3zismhnpjxf3xa (the original route is journaled)
2026/10/20 21:28:15 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: malformed: provision: invalid maintenance projection or protected fields
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_myehmp7zefga3zismhnpjxf3xa left alone this pass: its record could not be read
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_qjbj4aehxhwgjy3k3ne7jrmhbm (the original route is journaled)
2026/10/20 21:28:15 provision: skipping record apps/bac/shop/instances/a.shop.example.com.json: read failed: connection reset
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_qjbj4aehxhwgjy3k3ne7jrmhbm left alone this pass: its record could not be read
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_xztqigc6jylkpfjanswo2wrx7a (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_xztqigc6jylkpfjanswo2wrx7a: close the import gate: constraint failed: injected (1811)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_xztqigc6jylkpfjanswo2wrx7a rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_xztqigc6jylkpfjanswo2wrx7a is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_serjzrf3u62owvz3nvtdqeo6kq (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_serjzrf3u62owvz3nvtdqeo6kq: close the import gate: constraint failed: injected (1811)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_serjzrf3u62owvz3nvtdqeo6kq rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_serjzrf3u62owvz3nvtdqeo6kq is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_scz4l3ix3sgciegwgbrwbzn5cy (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_scz4l3ix3sgciegwgbrwbzn5cy rollback deferred: the host is not fenced and stopped yet (injected failure at fence)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_scz4l3ix3sgciegwgbrwbzn5cy rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_scz4l3ix3sgciegwgbrwbzn5cy is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_gfp4bg3qiu43fiv7i3urj7f24q (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_gfp4bg3qiu43fiv7i3urj7f24q rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_gfp4bg3qiu43fiv7i3urj7f24q is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_iznxbzej3ip2tesy7p6ml5pziy (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_iznxbzej3ip2tesy7p6ml5pziy: retire its instance key: injected failure at retire-key
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_iznxbzej3ip2tesy7p6ml5pziy rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_iznxbzej3ip2tesy7p6ml5pziy is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_2bhkjptcs2y56qfbl5w6zcoyhq (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_2bhkjptcs2y56qfbl5w6zcoyhq rolled back to its original route
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_2bhkjptcs2y56qfbl5w6zcoyhq is cleaned up and its journal row retired
2026/10/20 21:28:15 provision: a.shop.example.com: swapped for import sd_qyqkjwsbkq4ymcvy6pkl4cs6jm (the original route is journaled)
2026/10/20 21:28:15 provision: a.shop.example.com: import sd_qyqkjwsbkq4ymcvy6pkl4cs6jm: remove its local data: injected failure at remove-local
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_qyqkjwsbkq4ymcvy6pkl4cs6jm rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_qyqkjwsbkq4ymcvy6pkl4cs6jm is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_ty2lealvzipurkcs7toskn2vum (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ty2lealvzipurkcs7toskn2vum rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ty2lealvzipurkcs7toskn2vum is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_dilb4iag3uvqg5atcr4c7oexli (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_dilb4iag3uvqg5atcr4c7oexli: remove its local data: injected failure at remove-local-done
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_dilb4iag3uvqg5atcr4c7oexli rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_dilb4iag3uvqg5atcr4c7oexli is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_eqwui5r5n7f56kt5ocqv3ypgli (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_eqwui5r5n7f56kt5ocqv3ypgli rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_eqwui5r5n7f56kt5ocqv3ypgli is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_uxwcwnjjopolesmz6ppd4u42q4 (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_uxwcwnjjopolesmz6ppd4u42q4: restore the original route: constraint failed: injected (1811)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_uxwcwnjjopolesmz6ppd4u42q4 rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_uxwcwnjjopolesmz6ppd4u42q4 is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_jm2skd6akti3jfma5w2bkaw2te (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_jm2skd6akti3jfma5w2bkaw2te: restore the original route: constraint failed: injected (1811)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_jm2skd6akti3jfma5w2bkaw2te rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_jm2skd6akti3jfma5w2bkaw2te is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_ejvcyrbgexmogtqphee4hgdqdy (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ejvcyrbgexmogtqphee4hgdqdy is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_ybmos76fq34zqyq3jzsdchexfm (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ybmos76fq34zqyq3jzsdchexfm rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ybmos76fq34zqyq3jzsdchexfm: delete its snapshot: injected failure at delete-snapshot
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ybmos76fq34zqyq3jzsdchexfm is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_ovzbgytv2farmgmei22rfgsin4 (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ovzbgytv2farmgmei22rfgsin4 rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ovzbgytv2farmgmei22rfgsin4 is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_zwrlisgu4ylga4qldmbwnwpaze (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_zwrlisgu4ylga4qldmbwnwpaze rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_zwrlisgu4ylga4qldmbwnwpaze: delete the host's replica: injected failure at delete-replica
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_zwrlisgu4ylga4qldmbwnwpaze is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_lzasw4jqfyox4zttm2zn2ytxfu (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_lzasw4jqfyox4zttm2zn2ytxfu rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_lzasw4jqfyox4zttm2zn2ytxfu is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_4ylrj2ah6k32iv5i2x6vngrpva (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_4ylrj2ah6k32iv5i2x6vngrpva rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_4ylrj2ah6k32iv5i2x6vngrpva: retire its journal row: constraint failed: injected (1811)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_4ylrj2ah6k32iv5i2x6vngrpva is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_mqb3tkfehvfgbaefkb5d2xdrfq (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_mqb3tkfehvfgbaefkb5d2xdrfq rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_mqb3tkfehvfgbaefkb5d2xdrfq: retire its journal row: constraint failed: injected (1811)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_mqb3tkfehvfgbaefkb5d2xdrfq is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_kaggtgjdsvpxydgceh3pkvuqpa (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_kaggtgjdsvpxydgceh3pkvuqpa rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_kaggtgjdsvpxydgceh3pkvuqpa is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: mark import sd_kaggtgjdsvpxydgceh3pkvuqpa rolled back: injected failure at cas
2026/10/20 21:28:16 provision: a.shop.example.com: aborted seed sd_kaggtgjdsvpxydgceh3pkvuqpa rolled back (no box had swapped it)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_ft6aapueqeuydzrec3jcp5ifna (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ft6aapueqeuydzrec3jcp5ifna rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ft6aapueqeuydzrec3jcp5ifna is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: aborted seed sd_ft6aapueqeuydzrec3jcp5ifna rolled back (no box had swapped it)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_r6zws34lbvllo4kplmfws2qcmi (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_r6zws34lbvllo4kplmfws2qcmi rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_r6zws34lbvllo4kplmfws2qcmi rollback deferred: the host is not fenced and stopped yet (<nil>)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_r6zws34lbvllo4kplmfws2qcmi rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_r6zws34lbvllo4kplmfws2qcmi is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_cxy5b2t5dgoxsass24uwreprmy (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_cxy5b2t5dgoxsass24uwreprmy rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_cxy5b2t5dgoxsass24uwreprmy is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_hcskcg4mnhf23qhtqdp2kflrfu (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_hcskcg4mnhf23qhtqdp2kflrfu rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_hcskcg4mnhf23qhtqdp2kflrfu is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_lmmfdrqng3fkmmnpcqrmlmmnpq (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_lmmfdrqng3fkmmnpcqrmlmmnpq rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_lmmfdrqng3fkmmnpcqrmlmmnpq is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_xgcnwaby2bgw3w2aoxs3hsy3q4 (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_xgcnwaby2bgw3w2aoxs3hsy3q4 rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_xgcnwaby2bgw3w2aoxs3hsy3q4 is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_pefcn2fosxwxubux6wik7mjsuq (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_pefcn2fosxwxubux6wik7mjsuq rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_pefcn2fosxwxubux6wik7mjsuq is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_53ipbypii7nmsk5hxr3rnstebe (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_53ipbypii7nmsk5hxr3rnstebe rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_53ipbypii7nmsk5hxr3rnstebe is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_xqmnx5fft237mkgj5yc4uqgc6a (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_xqmnx5fft237mkgj5yc4uqgc6a rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_xqmnx5fft237mkgj5yc4uqgc6a is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: minted instance route a.shop.example.com (app "other" acct "bac")
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_lrfrqkolkaw4pptmv26fyazj6y (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_lrfrqkolkaw4pptmv26fyazj6y has no route on this box: its local data is removed and no route is put back
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_lrfrqkolkaw4pptmv26fyazj6y is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_cmlteiy5v5l5pttzxwvg43sy7e (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_lqbau45w7iyod3zp2eiu2bkohy (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_zzbpkq6f2cxhbo7jcbac7cvhey (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_zzbpkq6f2cxhbo7jcbac7cvhey cannot roll back on this box: the activator is not wired; it stays journaled and gated
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_a3qmkx2tgq7myyplurdcra2d4i (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_a3qmkx2tgq7myyplurdcra2d4i is not rolled back: the route changed under the fence, so nothing there is touched
2026/10/20 21:28:16 provision: a.shop.example.com: import "../not-a-seed" names no snapshot and no replica; only its journal row is cleaned up
2026/10/20 21:28:16 provision: a.shop.example.com: import ../not-a-seed is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_7je3ewqzwe72jakenp4ags3ese (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_dpn5d56o4rxuuipv7e57utymse (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_dafatcsutb2tortqdvzm5k5sem (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_qehcijablnrojtusthjwoy36ke (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_vpam55cg5dv2i2dlhbaujumx7m (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_vpam55cg5dv2i2dlhbaujumx7m rollback deferred: the host is not fenced and stopped yet (stop evidence unreadable)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_epfnzxtxksb44cievtl2d5rfby (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_epfnzxtxksb44cievtl2d5rfby has no route on this box: its local data is removed and no route is put back
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_epfnzxtxksb44cievtl2d5rfby is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_4m3frvmyz4suhwekjy5qyn5ke4 (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_4m3frvmyz4suhwekjy5qyn5ke4: remove its local data: injected failure at remove-local
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_4m3frvmyz4suhwekjy5qyn5ke4 is not rolled back: the route at the host is not the import's, so nothing there is touched
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_a4rzt54cmc3vfrld34ukyojunu (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_a4rzt54cmc3vfrld34ukyojunu: a route appeared at the host, so its local database is left and the rollback waits
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_22clhxixhqpnrsdtsllufuitgu (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_22clhxixhqpnrsdtsllufuitgu rollback deferred: no fence generation: registry busy
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_2pw4kmc6trrnxagvxguyfo3sxy (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_2pw4kmc6trrnxagvxguyfo3sxy rollback deferred: no fence generation: the generation source answered 0
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_2vqwmhvdhhqqpjpjmzol76hvdu (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_sai2zazbha76erlhzrkvs7inbu (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_kpzby7cmf7v4cmxyrgabjjmdsu (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import deferred: this box cannot read the instance's env file
2026/10/20 21:28:16 provision: a.shop.example.com: import deferred: the instance's env file could not be read: a symlink
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_uhmkwlzmshbh2zk7kiyqhuffva (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_uhmkwlzmshbh2zk7kiyqhuffva rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_uhmkwlzmshbh2zk7kiyqhuffva is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_ursbodlc6lagt5aja3iuvixeum (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ursbodlc6lagt5aja3iuvixeum rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ursbodlc6lagt5aja3iuvixeum is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_4n7hzohkniy3mhl6hjdovhrpka (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_4n7hzohkniy3mhl6hjdovhrpka rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_4n7hzohkniy3mhl6hjdovhrpka is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_xh7jhoijbtku66hzzltlfntf54 (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_xh7jhoijbtku66hzzltlfntf54: retire its instance key: the env file is a symlink
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_xh7jhoijbtku66hzzltlfntf54 rolled back to its original route
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_xh7jhoijbtku66hzzltlfntf54 is cleaned up and its journal row retired
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_vnmtz4n7j2l3ipzntst7hkf2s4 (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: row is on the nested layout (db "/data/instances/a.shop.example.com/a.shop.example.com.db" socket "/run/carlos/instances/a.shop.example.com/app.sock"); the record's shared paths are not drift
2026/10/20 21:28:16 provision: a.shop.example.com: swapped for import sd_yolwmepx3wftmlhv2ft27cfz6y (the original route is journaled)
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_nrjqg6usvgisu45hvc7rqn2md4 refused: there is no route at a.shop.example.com to replace
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_ifuukw57clhlnwuphtmn2cf7k4 refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_zef74ctlisrcjysgroan6i5wbi refused: the route's address is 127.0.0.1:8401,127.0.0.1:8402, not 127.0.0.1:8401
2026/10/20 21:28:16 provision: a.shop.example.com: import sd_vsenqb4v4t4f2axvmwbmnce3ta refused: the route's address is 127.0.0.1:9, not 127.0.0.1:8401
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_ese335daa3scwa5f6yiayb67ge refused: the route belongs to app other
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_tmyqmqtgvuggffi73vuhvonswu refused: the route is filed under another account
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_q3wnt6ggksh47yxtzv3ihyqjie refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_5a2dswu67ctxevij6xv4ubihbq refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_si5thaiw5cnukwsb6vemlzzmd4 refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_5c4pgjz47d4c64kzmdcqh5runq refused: the route is filed under the operator account, and no assignment maps shop to this app
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_3auidnycazqbn4ytseumsjjnze refused: the route is not an address route this import can take over (socket)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_oxgp5l2z7iunkmgfxci2ixu4tm refused: the route is not an address route this import can take over (no address)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_5hlqnqrkthoutjnuy73bvqjsmm refused: the route is not an address route this import can take over (provisioned)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_gewb4upe46mgmks6dhl4xwvvqi refused: the route is not an address route this import can take over (kind static)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_g66pve4twess52hwlvhizaqgte refused: the route is not an address route this import can take over (backing)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_pzetcli5dowqa3j5omoitcfh6q refused: the route is not an address route this import can take over (tunnel)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_jp2gnezdlaifog7v6t4yb4vmqm refused: the route is not an address route this import can take over (caps)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_4prd2axmt3opgzjrsdi6k7hjta refused: the route is not an address route this import can take over (platform)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_e24crez3lnttljm7qkzean7fna refused: the route is not an address route this import can take over (canary)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_ce7tu7aukrrq57tln2lemegepa refused: the route is not an address route this import can take over (kind sidecar)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_3sp2572kwtrvrnfovqkoo2v3bq refused: the route is not an address route this import can take over (region)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_i3jhslhgkkhtt7rejtegnqf7v4 refused: the route is not an address route this import can take over (fleet_box)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_reteliiznboqvjmbejhd3zbmou refused: the route is not an address route this import can take over (hibernate)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_ucjruurugdistwdiojxrm4jlre refused: the route is not an address route this import can take over (claim_owner)
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_bysdk75wjxvv7qbglrkxjma5mm refused: this box does not run instances nested
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_azbgvn6vj7kw6nlln4ataxazrq refused: this box does not run instances nested
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_pmja665363alivtw7jywqh2vuq refused: claim control is on for this box
2026/10/20 21:28:17 provision: a.shop.example.com: swapped for import sd_n2qipqkwbpckdzorawcwjxtaxi (the original route is journaled)
2026/10/20 21:28:17 provision: a.shop.example.com: swapped for import sd_icpu5j64suv4tkqb33ms2dchym (the original route is journaled)
2026/10/20 21:28:17 provision: a.shop.example.com: import deferred: the legacy route assignments could not be read: store down
2026/10/20 21:28:17 provision: a.shop.example.com: import deferred: this box cannot read the legacy route assignments
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_p5enjrrsimi6dhd4evubhmfitm: its verify hash is not a sha256
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_dwyexyl4pp4k2pndt32eqmj55a: its verify hash is not a sha256
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_fjhpi66fc63a7n2onufikvspja: its verify hash is not a sha256
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_../../x: its host or seed id is malformed (seeds: not a seed id)
2026/10/20 21:28:17 provision: A.shop.example.com/..: not swapping for import sd_jg4atqfvs6f4emrutb3wosf64q: its host or seed id is malformed (seeds: not a host)
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_ivptqiscwqezfm3z5qvwhzgb34: its record does not describe a nested, hibernating instance
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_zioyqdmpzotmvvk4vzgppmosoe: its record does not describe a nested, hibernating instance
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_xd6effm4jq62aua5a3qgvj3lci: its record does not describe a nested, hibernating instance
2026/10/20 21:28:17 provision: a.shop.example.com: not swapping for import sd_pr6pl24ml2ay5tlhhp5f2ikgjy: its record does not describe a nested, hibernating instance
2026/10/20 21:28:17 provision: a.shop.example.com: import deferred: the box's layout intent could not be read: store down
2026/10/20 21:28:17 provision: a.shop.example.com: swapped for import sd_je7wicotpfqw2mayqtwqwesune (the original route is journaled)
2026/10/20 21:28:17 provision: a.shop.example.com: import deferred: the box's nested probe did not answer: ready probe timed out
2026/10/20 21:28:17 provision: a.shop.example.com: swapped for import sd_vof5yrgwuv4xdrebspbyqghmya (the original route is journaled)
2026/10/20 21:28:17 provision: a.shop.example.com: swapped for import sd_bi44lvbm32fnige4kakgfk6nbu (the original route is journaled)
2026/10/20 21:28:17 provision: a.shop.example.com: import deferred: the route is held by operation op_1
2026/10/20 21:28:17 provision: dry-run: would consider swapping a.shop.example.com for import sd_agntajjtraiylaip6rgy2khtty
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_dnnbtzhszell7u6cl7jihscj3m rolled back to its original route
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_dnnbtzhszell7u6cl7jihscj3m: the host's replica is left alone: the record apps/bac/shop/instances/a.shop.example.com.json holds the host
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_dnnbtzhszell7u6cl7jihscj3m is cleaned up and its journal row retired
2026/10/20 21:28:17 provision: a.shop.example.com: import sd_5rmpabrsg3xy6wjwmkz55qqhla left alone: the import journal holds seed sd_e6mbqn6gvjrad6wkliigkeltu4 at swapped
2026/10/20 21:28:17 provision: a.shop.example.com: not minting import sd_pcvbqo4ohuxt4bitgzoiozmb4e: it is swapped but not committed, and only its swap makes its row
2026/10/20 21:28:17 provision: a.shop.example.com: not minting import sd_gdchbconbmceogwsxvfl6ivcli: it is placed but not committed, and only its swap makes its row
2026/10/20 21:28:17 provision: a.shop.example.com: swapped for import sd_ltbn7zvjvwthoi6lpvih4zrrd4 (the original route is journaled)
2026/10/20 21:28:17 provision: a.shop.example.com: not minting import sd_ltbn7zvjvwthoi6lpvih4zrrd4: it is swapped but not committed, and only its swap makes its row
2026/10/20 21:28:17 provision: a.shop.example.com: not minting import sd_ltbn7zvjvwthoi6lpvih4zrrd4: it is placed but not committed, and only its swap makes its row
2026/10/20 21:28:17 provision: minted instance route a.shop.example.com (app "shop" acct "bac")
2026/10/20 21:28:17 provision: removed retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: converged sidecar bot.eleven.bac.sidecar.internal args ["sidecar","run"] -> ["worker","run"]
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: converged sidecar bot.eleven.bac.sidecar.internal ceilings 300/3600 -> 60/120
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: converged sidecar bot.eleven.bac.sidecar.internal channel stable -> canary/eleven
2026/10/20 21:28:17 provision: converged sidecar bot.eleven.bac.sidecar.internal environment "other" -> "relay"
2026/10/20 21:28:17 provision: converged sidecar bot.eleven.bac.sidecar.internal hibernate true -> false
2026/10/20 21:28:17 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: read failed: failStore: reads disabled under apps/bac/eleven/sidecars/
2026/10/20 21:28:17 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: malformed: invalid character 'n' looking for beginning of object key string
2026/10/20 21:28:17 provision: not removing sidecar bot.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 21:28:17 provision: skipping sidecar record apps/bac/eleven/sidecars/bot.json: empty channel
2026/10/20 21:28:17 provision: skipping sidecar record apps/bac/eleven/sidecars/held.json: empty channel
2026/10/20 21:28:17 provision: not removing sidecar held.eleven.bac.sidecar.internal: its record exists but could not be read cleanly this pass
2026/10/20 21:28:17 provision: removed retired sidecar route old.eleven.bac.sidecar.internal (record gone)
2026/10/20 21:28:17 provision: bac/eleven has sidecar records but no sidecars manifest — not minting
2026/10/20 21:28:17 provision: bac/eleven is in the trash — not minting sidecar routes for it
2026/10/20 21:28:17 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 21:28:17 provision: sidecar hub.relay.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: minted sidecar route hub.relay.bac.sidecar.internal (app "relay" acct "bac" args ["relay"])
2026/10/20 21:28:17 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 21:28:17 provision: removed retired sidecar route bot.eleven.bac.sidecar.internal (record gone)
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: sidecar bot.eleven.bac.sidecar.internal is not placeable here: it asks for "no-inbound" placement and this box accepts inbound work (CARLOS_INBOUND="")
2026/10/20 21:28:17 provision: skipping sidecar record apps/bac/relay/sidecars/hub.json: read failed: failStore: reads disabled under apps/bac/relay/sidecars/
2026/10/20 21:28:17 provision: REFUSING to mint sidecar bot.eleven.bac.sidecar.internal: bot.eleven.bac.sidecar.internal-sidecar.env is staged on this box — the legacy file co-spawn and a native sidecar row are two mechanisms for one host; remove the file to migrate this host onto sidecar records
2026/10/20 21:28:17 provision: minted sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" args ["sidecar","run"])
2026/10/20 21:28:17 provision: dry-run: would mint sidecar route bot.eleven.bac.sidecar.internal (app "eleven" acct "bac" channel "stable" args ["sidecar","run"])
2026/10/20 21:28:17 provision: dry-run: would remove retired sidecar route gone.eleven.bac.sidecar.internal (record gone)
2026/10/20 21:28:18 provision: bot.eleven.bac.sidecar.internal exists but is not a sidecar row this pass owns (kind "sidecar" provisioned false app "eleven" acct "bac") — leaving it alone
2026/10/20 21:28:18 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:18 provision: converged acme.go.tito.io update settings "{\"updates\":\"manual\",\"channel\":\"stable\"}" -> ""
2026/10/20 21:28:18 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:18 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:18 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 21:28:18 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 21:28:18 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 21:28:18 provision: minted instance route acme.go.tito.io (app "tito" acct "bac")
2026/10/20 21:28:18 provision: manifest bac/tito: read failed: provision: manifest bac/tito: unexpected end of JSON input
2026/10/20 21:28:18 provision: acme.go.tito.io: not minted this pass: the app's update policy could not be read
2026/10/20 21:28:18 provision: minted instance route acme.go.tito.io held landing by mv_acme (app "tito" acct "bac")
FAIL
FAIL	github.com/carlosframework/platform/internal/provision	17.538s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.008s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	5.428s
ok  	github.com/carlosframework/platform/internal/relay	7.225s
ok  	github.com/carlosframework/platform/internal/release	24.338s
ok  	github.com/carlosframework/platform/internal/rollout	3.664s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.005s
ok  	github.com/carlosframework/platform/internal/rootaws	0.007s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.058s
ok  	github.com/carlosframework/platform/internal/rootstate	0.029s
ok  	github.com/carlosframework/platform/internal/runs	0.581s
ok  	github.com/carlosframework/platform/internal/s3compat	0.005s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.510s
ok  	github.com/carlosframework/platform/internal/seeds	0.011s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	8.745s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	3.949s
ok  	github.com/carlosframework/platform/internal/status	0.060s
ok  	github.com/carlosframework/platform/internal/steering	0.006s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.163s
ok  	github.com/carlosframework/platform/internal/svcrole	0.002s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.005s
ok  	github.com/carlosframework/platform/internal/unixdial	0.003s
ok  	github.com/carlosframework/platform/internal/updatewords	0.004s
ok  	github.com/carlosframework/platform/internal/usage	0.005s
ok  	github.com/carlosframework/platform/internal/version	0.002s
ok  	github.com/carlosframework/platform/internal/vet	1.547s
FAIL
make: *** [Makefile:18: test] Error 1

amadan: step gate failed: exit status 2

amadan: job failed at step gate — its output is above, not at the tail of this log

diff --git a/harness/RUNLOG.md b/harness/RUNLOG.md

index 6d240ef5a..fbd61252f 100644

--- a/harness/RUNLOG.md

+++ b/harness/RUNLOG.md

@@ -2034,3 +2034,27 @@ the same upgrade again -> already_installed true, exit 0; slots unchanged

Snapshot **`post-candidate`** (21:10:20-21:10:53Z): every box v0.28.8, console `9887a9a4...` by `--upgrade` (prev

`dd24213d...`), claims off, roster rev 17.

+## (A2) From `pre-0285` (dev's state today: armed, v0.28.4 stand-in, console paused): PASS, `--upgrade` works

+Restored `pre-0285` (21:10-21:11Z): every box harness v0.28.5; sophie's console `b2b431f3...` in BOTH slots

+(`console` and `console.prev`, 755 root:root, one link: what a plain `install-console` leaves, as on real dev),

+`CARLOS_HOST_CLAIM=` empty. Signing session again in this lineage (21:11:57-21:12:32Z): console `e0986eab` promoted

+to `canary/console` first, session `cohort1-20261020T211202Z`, create-only `releases/v0.28.8.json` (`09a72593...`,

+same router and console shas), REV 9.

+| step | at | result |

+|---|---|---|

+| leo by the ruled re-arm (`r9-rearm.host.sh leo kathleen-juggling stable v0.28.8`) | 21:13:08-21:22:03Z | PASS. Path stopped; promote stable (rev 9 -> 10); the agent's cache arrived ~5 min after the promote (Run 9: 49 s; inside the 5 m spread, the block's wait is 10 min); staged = sums = identity; `system apply` success 19.3 s (21:18:05-21:18:24Z); applied/result `applied` v0.28.8; identities `v0.28.5 v0.28.8`; edge exe = release, NRestarts 0; `carlos v0.28.8`/`.prev v0.28.5`; path active; binary shredded; report `activation_complete true`; roster rev 11, `[]` |

+| dennis by its normal update (same promote) | 21:16:32-21:16:50Z | PASS. result `applied` stable v0.28.8 |

+| sophie's router by the re-arm, canary | 21:24:52-21:27:10Z | PASS. As leo's (cache present within ~1 min, apply 19.4 s, 21:25:59-21:26:18Z); identities `v0.28.5 v0.28.8`; rev 13, `[]`; all three `v0.28.8 current`. Console kept running `b2b431f3...` |

+| **sophie's console by `install-console --upgrade` FIRST** | 21:27:23-21:27:25Z | **PASS, no fallback to E1 needed.** `--from b2b431f3...` (the running exe): dry run then apply `already_installed false, upgraded true, previous_sha b2b431f3...`, exit 0; `console` = `9887a9a4...` (47382690 B), `console.prev` = `b2b431f3...` (the v0.28.4 stand-in) |

+| restart and verify | 21:27:24Z | pid 1139, exe `/opt/carlos/system/console/console` = `9887a9a4...`, `CARLOS_HOST_CLAIM=` empty, NRestarts 0, healthz 200 in 0.44 s, `/` 200 |

+| console-report (rev 13), dry run then real | 21:27:24Z | exit 0, `binary_sha256 9887a9a4...` |

+| the same upgrade again | 21:27:25Z | `already_installed true`, exit 0, slots unchanged |

+So from dev's state today (a console installed by a plain `install-console`, both slots the same build), the

+candidate's `--upgrade --from <running sha>` is the supported road: R9-4's block is now (router first, then)

+`install-console --identity identity.v0.28.6.json --source /opt/carlos/versions/<CV>/console ... --upgrade --from

+<sha256 of the running console> --dry-run`, the same without `--dry-run`, `systemctl restart console.service`,

+`console-report`. Not snapshotted (the logs carry it: `evidence/run10/a2-*.log`).

diff --git a/harness/evidence/run10/a2-console.log b/harness/evidence/run10/a2-console.log

new file mode 100644

index 000000000..69a6441f7

--- /dev/null

+++ b/harness/evidence/run10/a2-console.log

@@ -0,0 +1,96 @@

+[hssm] i-06a1ec144aa5226fb acac4a39-3d91-401f-95c1-43b85106798b Success exit=0

+identity file = published object

+source: agent-staged /opt/carlos/versions/e0986eab/console (root:root 755 1)

+roster revision now 13

+before: pid 325 exe /opt/carlos/system/console/console sha b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0

+ /opt/carlos/system/console/console 755 root:root 1 47186082 sha b2b431f3b2fb4600

+ /opt/carlos/system/console/console.prev 755 root:root 1 47186082 sha b2b431f3b2fb4600

+router: carlos v0.28.8; identities: v0.28.5.json v0.28.8.json

+== dry run 21:27:23.282Z

+ "already_installed": false,

+ "dry_run": true,

+ "from": "b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0",

+ "mode": "0755",

+ "path": "/opt/carlos/system/console/console",

+ "previous": "/opt/carlos/system/console/console.prev",

+ "previous_sha": "b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0",

+ "release_tag": "v0.28.8",

+ "sha256": "9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611",

+ "source": "/opt/carlos/versions/e0986eab/console",

+ "upgraded": true

+exit=0

+== upgrade 21:27:23.557Z

+ "already_installed": false,

+ "dry_run": false,

+ "from": "b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0",

+ "mode": "0755",

+ "path": "/opt/carlos/system/console/console",

+ "previous": "/opt/carlos/system/console/console.prev",

+ "previous_sha": "b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0",

+ "release_tag": "v0.28.8",

+ "sha256": "9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611",

+ "source": "/opt/carlos/versions/e0986eab/console",

+ "upgraded": true

+exit=0

+ /opt/carlos/system/console/console 755 root:root 1 47382690 sha 9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611

+ /opt/carlos/system/console/console.prev 755 root:root 1 47186082 sha b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0

+console = the release console

+console.prev = the old build (b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0)

+restart at 21:27:24.173Z: active

+console pid 1139 exe /opt/carlos/system/console/console sha256 9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611

+running = the release console

+CARLOS_HOST_CLAIM=

+NRestarts=0 ExecMainStartTimestamp=Tue 2026-10-20 21:27:24 UTC ActiveState=active

+healthz 200 (21:27:24.611Z); / 200

+== console-report (rev 13) 21:27:24.635Z

+ "bucket": "harness-deployment",

+ "console_process": {

+ "console_id": "dev-console",

+ "enrollment": "e29fb09644be7c7a85a4acd3de194d01",

+ "process_id": "a183b650-ed01-40ed-b0d2-154f202b9870:4026532824:1139:7476421",

+ "binary_sha256": "9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611",

+ "guard_floor_sha256": "53d81bb7b0823bf983e44fa96618e3f3331e181ea04c15b9b535d959463a0c55",

+ "all_launch_paths_guarded": false

+ },

+ "dry_run": true,

+ "expected_roster_revision": 13,

+ "key": "status/boxes/ada-letterpress.json"

+dry exit=0

+ "bucket": "harness-deployment",

+ "console_process": {

+ "console_id": "dev-console",

+ "enrollment": "e29fb09644be7c7a85a4acd3de194d01",

+ "process_id": "a183b650-ed01-40ed-b0d2-154f202b9870:4026532824:1139:7476421",

+ "binary_sha256": "9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611",

+ "guard_floor_sha256": "53d81bb7b0823bf983e44fa96618e3f3331e181ea04c15b9b535d959463a0c55",

+ "all_launch_paths_guarded": false

+ },

+ "dry_run": false,

+ "expected_roster_revision": 13,

+ "key": "status/boxes/ada-letterpress.json"

+exit=0

+== the same upgrade again 21:27:25.416Z

+ "already_installed": true,

+ "dry_run": false,

+ "from": "b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0",

+ "mode": "0755",

+ "path": "/opt/carlos/system/console/console",

+ "previous": "/opt/carlos/system/console/console.prev",

+ "previous_sha": "b2b431f3b2fb4600817dd909ad2dc61f04542a10a7e22ddc9a524b531c2f17e0",

+ "release_tag": "v0.28.8",

+ "sha256": "9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611",

+ "source": "/opt/carlos/versions/e0986eab/console",

+ "upgraded": true

+exit=0

+ /opt/carlos/system/console/console 755 root:root 1 47382690 sha 9887a9a42b058708

+ /opt/carlos/system/console/console.prev 755 root:root 1 47186082 sha b2b431f3b2fb4600

diff --git a/harness/evidence/run10/a2-leo.log b/harness/evidence/run10/a2-leo.log

new file mode 100644

index 000000000..8247722a2

--- /dev/null

+++ b/harness/evidence/run10/a2-leo.log

@@ -0,0 +1,66 @@

+[hssm] i-06a1ec144aa5226fb ce7b5e23-031a-49c4-b624-1b57c58973f5 Success exit=0

+box reports fresh at 21:13:07

+SUMS_SHA=a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792 IDENT_SHA=a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792

+roster before: {"rev":9,"activations":[]}

+== leo before: carlos v0.28.5 / prev carlos v0.28.5

+== 1 stop the path on leo 21:13:08.769Z

+ActiveState=inactive

+== 2 promote router/stable 21:13:08.892Z

+promote v0.28.8 to router/stable — 2 box(es) will roll over 5m:

+ kathleen-juggling (linux-arm64, running v0.28.5)

+ noor-marquetry (linux-arm64, running v0.28.5)

+warning: v0.28.8 has not been on canary; promoting straight to stable

+ using uploaded v0.28.8 for linux-arm64

+ mirrored bootstrap/router/v0.28.8/carlos-linux-arm64

+ pointed router/stable at v0.28.8 (spread 5m0s)

+ serial bumped: boxes on stable start their spread

+promoted boxes on stable roll themselves; watch with: carlos system status --channel stable

+roster after promote: {"rev":10,"activations":["9a2d608113106e39cbf27d0e5c166f98"]}

+== 3-7 on leo 21:13:10.136Z

+cache: fetched by the agent

+staged /root/carlos-v0.28.8 a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792 = signed sums = identity

+Running as unit: run-p387-i716954.service

+Finished with result: success

+Main processes terminated with: code=exited, status=0/SUCCESS

+Service runtime: 19.271s

+CPU time consumed: 1.550s

+Memory peak: 117.2M (swap: 0B)

+ "version": "v0.28.8",

+ "channel": "stable",

+ "at": "2026-10-20T21:18:24.624659222Z"

+ "channel": "stable",

+ "version": "v0.28.8",

+ "promoted_at": "2026-10-20T21:13:09Z",

+ "outcome": "applied",

+ "at": "2026-10-20T21:18:24.630371685Z"

+total 16

+drwxr-xr-x 2 root root 4096 Oct 20 21:18 .

+drwxr-xr-x 3 root root 4096 Oct 20 21:18 ..

+-rw-r--r-- 1 root root 1076 Oct 20 01:35 v0.28.5.json

+-rw-r--r-- 1 root root 1076 Oct 20 21:18 v0.28.8.json

+completed.json: 9a2d608113106e39cbf27d0e5c166f98

+edge pid 594 exe = the release

+NRestarts=0

+ExecMainStartTimestamp=Tue 2026-10-20 21:18:07 UTC

+ActiveState=active

+carlos v0.28.8

+carlos v0.28.5

+ActiveState=active

+shredded /root/carlos-v0.28.8

+leo block exit=0 21:18:31.237Z

+== 6 operator-side evidence

+{"generated_at":"2026-10-20T21:19:08.196587377Z","release":"v0.28.8","binary":"a0b192477b3b8bca","activation_id":"9a2d608113106e39cbf27d0e5c166f98","activation_complete":true}

+21:22:03 roster {"rev":11,"activations":[]}

+canary v0.28.5 promoted 2026-10-20T01:22:57Z spread 5m0s file

+stable v0.28.8 promoted 2026-10-20T21:13:09Z spread 5m0s file

+ada-letterpress linux-arm64 canary v0.28.5 current

+kathleen-juggling linux-arm64 stable v0.28.8 current

+noor-marquetry linux-arm64 stable v0.28.8 current

+rearm exit=0

diff --git a/harness/evidence/run10/a2-restore-release.log b/harness/evidence/run10/a2-restore-release.log

new file mode 100644

index 000000000..096c34841

--- /dev/null

+++ b/harness/evidence/run10/a2-restore-release.log

@@ -0,0 +1,30 @@

+[hssm] i-06a1ec144aa5226fb d441a1f5-374d-4e24-8c85-2b82cee20e9a Success exit=0

+sophie-console volume restored to pre-0285

+leo: running failed=[] snapshots=pre-0285,e-refused-0285,post-0285,pre-move-r9,post-candidate

+leo carlos v0.28.5

+sophie carlos v0.28.5

+dennis carlos v0.28.5

+console exe sha b2b431f3b2fb4600

+/opt/carlos/system/console/console 755 root:root 1 47186082 b2b431f3b2fb4600

+/opt/carlos/system/console/console.prev 755 root:root 1 47186082 b2b431f3b2fb4600

+== release-window v0.28.8 (21:11:57.420Z)

+== release v0.28.8

+verify sums: Signature Verified Successfully

+operator CLI: carlos v0.28.8

+== 1a/1e

+canary/console 1b635e61 2026-10-20T01:12:48Z yes

+== 2

+== 4

+promoted console e0986eab -> canary/console

+canary/console e0986eab 2026-10-20T21:12:01Z yes

+== session open (21:12:02.001Z)

+run-id cohort1-20261020T211202Z

+carlos v0.28.8

+root 600 1 45

+== publish-identity v0.28.8, console e0986eab (21:12:24.243Z)

+publish-identity writes: [{"key":"control/system/router/releases/v0.28.8.json","before_etag":"","sha256":"09a72593c9733b0fe0224a387a4641b562a1c96838b70522661e56ca95450a1b","payload":{"schema":1,"component":"router","channel":"stable","current":{"console_artifacts":{"linux-arm64":{"key":"bootstrap/console/v0.28.8/carlos-linux-arm64","sha256":"9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611"}},"release_tag":"v0.28.8","moves_protocol":1,"version":"v0.28.8","artifacts":{"linux-arm64":{"key":"bootstrap/router/v0.28.8/carlos-linux-arm64","sha256":"a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792"}},"source":"release:v0.28.8","released_at":"0001-01-01T00:00:00Z"},"spread":"0s","promoted_at":"2026-10-20T21:12:25Z"}}]

+REV=9

+identity file = published object

+identity router a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792 console 9887a9a42b058708f1cef9fb552d4048f83e0376d2bf160a788c5fa159ed3611

+== done (21:12:32.665Z)

diff --git a/harness/evidence/run10/a2-sophie.log b/harness/evidence/run10/a2-sophie.log

new file mode 100644

index 000000000..057acecc7

--- /dev/null

+++ b/harness/evidence/run10/a2-sophie.log

@@ -0,0 +1,68 @@

+[hssm] i-06a1ec144aa5226fb 764c3c4d-abe2-49e4-95cf-5d6a4051db9d Success exit=0

+box reports fresh at 21:24:51

+SUMS_SHA=a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792 IDENT_SHA=a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792

+roster before: {"rev":11,"activations":[]}

+== sophie before: carlos v0.28.5 / prev carlos v0.28.5

+== 1 stop the path on sophie 21:24:52.569Z

+ActiveState=inactive

+== 2 promote router/canary 21:24:52.685Z

+promote v0.28.8 to router/canary — 1 box(es) will roll over 5m:

+ ada-letterpress (linux-arm64, running v0.28.5)

+ using uploaded v0.28.8 for linux-arm64

+ bootstrap/router/v0.28.8/carlos-linux-arm64 already mirrored

+ pointed router/canary at v0.28.8 (spread 5m0s)

+ serial bumped: boxes on canary start their spread

+promoted boxes on canary roll themselves; watch with: carlos system status --channel canary

+roster after promote: {"rev":12,"activations":["e436fc10b9c6465f3e51b0c1515d9254"]}

+== 3-7 on sophie 21:24:53.915Z

+cache: fetched by the agent

+staged /root/carlos-v0.28.8 a0b192477b3b8bca59ce17f23001818d384d7c8fa33e5deea97f7319c652d792 = signed sums = identity

+Running as unit: run-p554-i721429.service; invocation ID: 70806bbbed3e4d4694cef31c5a3c2ea2

+Finished with result: success

+Main processes terminated with: code=exited, status=0/SUCCESS

+Service runtime: 19.414s

+CPU time consumed: 1.720s

+Memory peak: 115M (swap: 0B)

+ "version": "v0.28.8",

+ "channel": "canary",

+ "at": "2026-10-20T21:26:18.492849234Z"

+ "channel": "canary",

+ "version": "v0.28.8",

+ "promoted_at": "2026-10-20T21:24:52Z",

+ "outcome": "applied",

+ "at": "2026-10-20T21:26:18.497183953Z"

+total 16

+drwxr-xr-x 1 root root 48 Oct 20 21:25 .

+drwxr-xr-x 1 root root 148 Oct 20 21:26 ..

+-rw-r--r-- 1 root root 1076 Oct 20 01:37 v0.28.5.json

+-rw-r--r-- 1 root root 1076 Oct 20 21:25 v0.28.8.json

+completed.json: e436fc10b9c6465f3e51b0c1515d9254

+edge pid 765 exe = the release

+NRestarts=0

+ExecMainStartTimestamp=Tue 2026-10-20 21:26:01 UTC

+ActiveState=active

+carlos v0.28.8

+carlos v0.28.5

+ActiveState=active

+shredded /root/carlos-v0.28.8

+sophie block exit=0 21:26:25.364Z

+== 6 operator-side evidence

+{"generated_at":"2026-10-20T21:27:02.132882587Z","release":"v0.28.8","binary":"a0b192477b3b8bca","activation_id":"e436fc10b9c6465f3e51b0c1515d9254","activation_complete":true}

+21:27:10 roster {"rev":13,"activations":[]}

+canary v0.28.8 promoted 2026-10-20T21:24:52Z spread 5m0s file

+stable v0.28.8 promoted 2026-10-20T21:13:09Z spread 5m0s file

+ada-letterpress linux-arm64 canary v0.28.8 current

+kathleen-juggling linux-arm64 stable v0.28.8 current

+noor-marquetry linux-arm64 stable v0.28.8 current

+rearm exit=0

+leo: {"channel":"stable","version":"v0.28.8","promoted_at":"2026-10-20T21:13:09Z","outcome":"applied","at":"2026-10-20T21:18:24.630371685Z"}

+dennis: {"channel":"stable","version":"v0.28.8","promoted_at":"2026-10-20T21:13:09Z","outcome":"applied","at":"2026-10-20T21:16:50.327710104Z"}

+Oct 20 21:16:32 dennis systemd[1]: Starting carlos-system-update.service - carlos platform self-update (root apply)...

+Oct 20 21:16:50 dennis systemd[1]: Finished carlos-system-update.service - carlos platform self-update (root apply).