Artifacts

• facts.json
• report.txt
• vm100_before.json
• vm101_before.json
• vm121_create_agent.json
• vm100_after_agent.json
• result-real-cs5-v3-plan.json
• selector_preapply_guard.json
• remote-script-real-cs5.sh
• remote-apply.stdout
• vm100_final.json
• vm100_selector_final.txt
• vm121_final_sanity.json

Report

=== STEP_041K RESULT ===
schema=router-step-facts-v1
step=STEP_041K_ONE_SHOT_REAL_CS5_CREATE_AGENT_SELECTOR_NO_UCI
mode=ONE_SHOT_BACKEND_CREATE_AGENT_SELECTOR_NO_UCI

target:
  peer_id=628dab6b-501f-44ef-bdfd-f918b2ac9589
  tunnel_ip=10.253.1.14
  selector_line=10.253.1.14 cs5 canary_vpn2
  slot_code=vpn2
  selector_class=cs5
  fwmark=0x202
  table_id=202

backend/create/agent:
  backend_create_ok=True
  payload_without_tunnel_ip=True
  allocator_issued_ip14=True
  peer_id=628dab6b-501f-44ef-bdfd-f918b2ac9589
  public_key_md5=f5db4b23c9aaa0d9b59641ec4dd83e91
  psk_present=YES
  agent_jobs_clean=True

vm100:
  before_peer_count=4
  after_agent_peer_count=5
  final_peer_count=5
  final_runtime_ip14_present_rc=0
  final_selector_count=5
  final_selector_ip14_present_rc=0
  final_nft_ip14_cs5_present_rc=0
  final_uci_wireguard_wg_paid_section_count=0
  final_uci_ip14_present_rc=1

selector_apply:
  preapply_ok=True
  apply_rc=0
  stdout: remote_script_schema=wg-access-agent-selector-remote-script-v3
  stdout: remote_script_action=append
  stdout: selector_backup_path=/root/peers.conf.before-agent-selector-apply-20260709-090038
  stdout: rollback_path=/root/rollback-agent-selector-apply.sh
  stdout: selector_apply_action=append
  stdout: applied_vm100_wgpay_selector_rules=5
  stdout: postcheck_selector_line_present=YES
  stdout: postcheck_selector_service_enabled=YES
  stdout: postcheck_nft_rule_visible=YES

db_final:
  enabled_true_ips=['10.253.1.10', '10.253.1.11', '10.253.1.12', '10.253.1.13', '10.253.1.14']
  pending_global=0
  job_status_counts={'completed': 43}

assessment:
  clean_start_ok=True
  backend_create_ok=True
  payload_without_tunnel_ip=True
  allocator_issued_ip14=True
  agent_jobs_clean=True
  after_agent_runtime_ip14_present=True
  after_agent_selector_absent=True
  after_agent_uci_count_zero=True
  selector_guard_ok=True
  selector_apply_rc_ok=True
  selector_remote_schema_seen=True
  final_runtime_ip14_present=True
  final_selector_ip14_present=True
  final_nft_ip14_present=True
  final_peer_count_5=True
  final_selector_count_5=True
  final_uci_count_zero=True
  final_uci_ip14_absent=True
  db_final_pending_zero=True
  db_final_enabled_has_ip14=True
  vm101_vpn2_ready=True
  private_material_published=False
  all_one_shot_ok=False

changes:
  db_peer_created=YES
  agent_runtime_peer_added=YES_IF_FINAL_RUNTIME_PRESENT
  selector_line_added=YES_IF_FINAL_SELECTOR_PRESENT
  uci_changed=NO_EXPECTED
  network_reload_executed=NO
  vm101_changed=NO
  private_material_published=NO

note=endpoint may remain empty until real client handshake; runtime allowed_ips is expected before handshake.
decision=STOP_ONE_SHOT_CS5_NOT_CLEAN
LOCAL_REPORT=http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-090025_step041k_one_shot_real_cs5_create_agent_selector_no_uci/
TRYCF_REPORT=https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-090025_step041k_one_shot_real_cs5_create_agent_selector_no_uci/