=== ROUTER STEP FACTS CONTRACT VALIDATION ===
step=STEP_044H4_REPAIR_VM100_ACTIVITY_COUNTERS_VIA_PVE_SCP
decision=STOP
all_ok=False
structure_ok=True
success_ok=False
expected_absence_ok=True
blockers_ok=True
success_checks_count=44
expected_absence_count=9

false_success_checks:
  - pve_file_sizes_nonzero_after_scp
  - pve_nft_check_ok
  - pve_scp_apply_ok
  - rollback_script_written_vm100
  - vm100_activity_in_rules_five
  - vm100_activity_out_rules_five
  - vm100_activity_table_present
  - vm100_counter_defs_ten
  - vm100_service_enabled
  - vm100_service_status_ok

warnings:
  - STEP_044H4 repairs STEP_044H/H2/H3 zero-byte delivery by using PVE scp to VM100 and ssh -n for commands.
  - VM100 changed intentionally: installed router-egress-activity counters/service only.
  - Counters are policy accept and should not alter routing or selector behavior.