=== STEP_044H5 RESULT ===
step=STEP_044H5_REPAIR_VM100_ACTIVITY_COUNTERS_VIA_PVE_SCP_LEGACY
mode=REPAIR_AND_IMPLEMENT_PERSISTENT_VM100_ACTIVITY_COUNTERS_VIA_PVE_LEGACY_SCP

db_summary:
  enabled_peers_pre=5
  lease_rows_pre=5
  pending_jobs_pre=0
  enabled_peers_post=5
  lease_rows_post=5
  pending_jobs_post=0

vm100_activity_counters:
  table=inet router_egress_activity
  chain=forward_activity
  hook=forward priority 0
  policy=accept
  counter_defs_after=20
  activity_out_rules_after=5
  activity_in_rules_after=5
  rollback_path_vm100=/root/rollback-step044h5-router-egress-activity.sh

safety:
  VM100 changed only by adding/fixing activity counters/service
  VM100 selector unchanged
  VM100 wg_paid peer_count remains 5
  VM101 slot map unchanged
  VM121 DB unchanged
  no agent service start
  no private material published
  public_index_rebuilt=True

success_checks:
  vm121_pre_read_ok=True
  leases_query_ok=True
  enabled_peers_pre_five=True
  lease_rows_pre_five=True
  pending_jobs_pre_zero=True
  vm100_before_collected=True
  vm101_before_collected=True
  payload_tar_created=True
  payload_files_nonempty_locally=True
  pve_scp_legacy_apply_ok=True
  pve_file_sizes_nonzero_after_scp_legacy=True
  pve_nft_check_ok=True
  generated_counter_rows_five=True
  generated_counter_defs_ten=True
  generated_out_rules_five=True
  generated_in_rules_five=True
  generated_wg_dev_wg_paid=True
  generated_vpn_dev_eth2=True
  vm100_after_collected=True
  vm100_service_enabled=True
  vm100_service_status_ok=True
  vm100_activity_table_present=True
  vm100_counter_defs_ten=False
  vm100_activity_out_rules_five=True
  vm100_activity_in_rules_five=True
  vm100_peer_count_still_five=True
  vm100_allowed_ip_count_still_five=True
  vm100_selector_rows_still_five=True
  vm100_selector_unchanged=True
  vm100_uci_peer_count_still_zero=True
  vm101_after_collected=True
  vm101_slot_map_unchanged=True
  vm101_cs1_to_vpn3_seen=True
  vm101_cs2_to_vpn4_seen=True
  vm101_cs3_to_vpn5_seen=True
  vm101_cs4_to_vpn1_seen=True
  vm101_cs5_to_vpn2_seen=True
  vm121_post_read_collected=True
  enabled_peers_post_five=True
  lease_rows_post_five=True
  pending_jobs_post_zero=True
  rollback_script_written_vm100=True
  public_report_created=True
  public_index_rebuilt=True

expected_absence:
  private_material_published=False
  manual_agent_service_start_used=False
  vm101_changed=False
  vm121_db_changed=False
  vm100_selector_changed=False
  wg_peer_runtime_changed=False
  client_config_changed=False
  force_mode_enabled=False
  rebalance_paused=False

warnings:
  - STEP_044H5 repairs previous delivery failures by using legacy scp protocol: scp -O.
  - VM100 changed intentionally: installed router-egress-activity counters/service only.
  - Counters are policy accept and should not alter routing or selector behavior.

all_ok=False
decision=STOP_STEP_044H5_REPAIR_VM100_ACTIVITY_COUNTERS_VIA_PVE_SCP_LEGACY
next_step=STEP_044I_RUNTIME_EGRESS_ACTIVITY_COUNTERS_READ_AND_PARSE
LOCAL_REPORT=http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-135544_step044h5_repair_vm100_activity_counters_via_pve_scp_legacy/
TRYCF_REPORT=https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-135544_step044h5_repair_vm100_activity_counters_via_pve_scp_legacy/