{
  "assessment": {
    "all_ok": false,
    "blockers": [],
    "decision": "STOP_STEP_044C_RUNTIME_EGRESS_LEASE_SCHEMA_IMPLEMENT",
    "expected_absence": {
      "client_config_changed": false,
      "force_mode_enabled_now": false,
      "lease_rows_inserted": false,
      "manual_agent_service_start_used": false,
      "private_material_published": false,
      "rebalance_paused_now": false,
      "vm100_changed": false,
      "vm101_changed": false,
      "wg_peer_runtime_changed": false
    },
    "success_checks": {
      "egress_allocator_settings_table_exists": false,
      "egress_targets_table_exists": false,
      "enabled_peer_count_preserved_five": true,
      "lease_assignment_source_column_seen": true,
      "lease_egress_class_column_seen": true,
      "lease_forced_column_seen": true,
      "lease_forced_index_seen": true,
      "lease_peer_id_column_seen": true,
      "lease_peer_unique_index_seen": true,
      "lease_rows_zero_initially": true,
      "lease_state_column_seen": true,
      "lease_target_id_column_seen": true,
      "lease_tunnel_ip_column_seen": true,
      "lease_tunnel_ip_unique_index_seen": true,
      "migration_sql_applied": true,
      "peer_egress_leases_table_exists": false,
      "pending_jobs_zero": true,
      "postgres_container_found": true,
      "public_report_created": true,
      "rollback_sql_written": true,
      "setting_active_min_bytes_seen": true,
      "setting_active_min_packets_seen": true,
      "setting_allocator_enabled_seen": true,
      "setting_force_class_seen": true,
      "setting_force_mode_off_seen": true,
      "setting_force_target_id_seen": true,
      "setting_idle_seconds_seen": true,
      "setting_rebalance_paused_seen": true,
      "settings_rows_at_least_fourteen": true,
      "target_cs1_vpn3_seen": true,
      "target_cs2_vpn4_seen": true,
      "target_cs3_vpn5_seen": true,
      "target_cs4_vpn1_seen": true,
      "target_cs5_vpn2_seen": true,
      "target_rows_five": true
    },
    "warnings": [
      "Schema is applied, but allocator code is not enabled yet; no runtime lease rows were inserted.",
      "Emergency override contract is present but not active: FORCE_MODE=off and REBALANCE_PAUSED=0."
    ]
  },
  "changes": {
    "client_config_changed": "NO",
    "force_mode_enabled": "NO",
    "lease_rows_inserted": "NO",
    "manual_agent_service_start_used": "NO",
    "private_material_published": "NO",
    "rebalance_paused": "NO",
    "vm100_changed": "NO",
    "vm101_changed": "NO",
    "vm121_db_schema_changed": "YES",
    "wg_peer_runtime_changed": "NO"
  },
  "db_summary": {
    "enabled_peers": 5,
    "lease_rows": 0,
    "pending_jobs": 0,
    "rollback_sql_path_vm121": "/opt/wg-access/rollbacks/rollback-step044c-runtime-egress-lease-schema-20260709-123451.sql",
    "settings_rows": 14,
    "target_rows": 5
  },
  "design_contract": {
    "activity_metric": "inner forwarded traffic after wg_paid decrypt; prefer transit_vpn-bound; do not use WireGuard handshake alone",
    "emergency_policy": "when FORCE_MODE is all_to_class/all_to_target, allocator/rebalance must not make independent per-peer decisions; all enabled peers are forced to selected class/target until flag is cleared",
    "initial_tunables": {
      "ROUTER_EGRESS_ACTIVE_MIN_BYTES": 16384,
      "ROUTER_EGRESS_ACTIVE_MIN_PACKETS": 10,
      "ROUTER_EGRESS_ACTIVITY_METRIC": "inner_forwarded_transit_vpn",
      "ROUTER_EGRESS_ALLOCATOR_ENABLED": 1,
      "ROUTER_EGRESS_FORCE_CLASS": "",
      "ROUTER_EGRESS_FORCE_MODE": "off",
      "ROUTER_EGRESS_FORCE_TARGET_ID": "",
      "ROUTER_EGRESS_IDLE_SECONDS": 900,
      "ROUTER_EGRESS_REASSIGN_COOLDOWN_SECONDS": 900,
      "ROUTER_EGRESS_REBALANCE_PAUSED": 0,
      "ROUTER_EGRESS_SAMPLE_SECONDS": 120
    },
    "lease_table": "public.peer_egress_leases",
    "metric_rule_template": "iif wg_paid ip saddr TUNNEL_IP oif transit_vpn counter",
    "normal_policy": "least active leases, sticky while active, reassign after idle threshold and cooldown",
    "pause_policy": "when ROUTER_EGRESS_REBALANCE_PAUSED=1, no automatic reassignment occurs",
    "settings_table": "public.egress_allocator_settings",
    "targets_table": "public.egress_targets"
  },
  "mode": "IMPLEMENT_DB_SCHEMA_FOR_RUNTIME_EGRESS_LEASE_ALLOCATOR_WITH_EMERGENCY_OVERRIDE",
  "publish": {
    "local_report": "http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-123451_step044c_runtime_egress_lease_schema_implement/",
    "trycf_report": "https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-123451_step044c_runtime_egress_lease_schema_implement/"
  },
  "schema": "router-step-facts-v1",
  "step": "STEP_044C_RUNTIME_EGRESS_LEASE_SCHEMA_IMPLEMENT"
}