=== STEP_044J3B RESULT ===
step=STEP_044J3B_CONTROLLED_TRAFFIC_TEMP_RUNTIME_PEER_QUOTING_FIX
mode=TEMPORARILY_BIND_FRESH_CLIENT_KEY_TO_CURRENT_RUNTIME_PEER_IP_PROVE_ACTIVITY_COUNTER_DELTA_RESTORE_ORIGINAL

target_activity:
  target_tunnel_ip=10.253.1.10
  out_counter=peer_10_253_1_10_out_vpn
  in_counter=peer_10_253_1_10_in_vpn
  total_delta_packets=60
  total_delta_bytes=13680
  packets_min=10
  bytes_min=16384
  active_now=True

runtime_peer_restore:
  old_pub_sha256=e6746640fe8fd85c510e8b714e3d9c9c4c1a80f06f9792848c19023bb1663024
  temp_pub_sha256=e3eba697582e3937ea3d7f333d74eefc69c139b4e203597431b2e4f737b93c96
  restored_pub_sha256=e6746640fe8fd85c510e8b714e3d9c9c4c1a80f06f9792848c19023bb1663024
  final_pub_sha256=e6746640fe8fd85c510e8b714e3d9c9c4c1a80f06f9792848c19023bb1663024
  final_matches_original=True

safety:
  VM100 runtime peer key changed only temporarily during controlled traffic
  full wg_paid runtime config restored from local VM100 backup
  VM100 selector unchanged
  VM101 unchanged
  VM121 DB unchanged
  no agent service start
  no private material published
  public_index_rebuilt=True

success_checks:
  temp_client_generated=True
  temp_private_key_available_but_not_published=True
  vm100_before_collected=True
  vm100_target_peer_found_before=True
  vm100_peer_count_before_five=True
  vm100_selector_rows_before_five=True
  activity_service_enabled_before=True
  activity_service_status_before=True
  counter_before_rows_ten=True
  vm100_substitution_ok=True
  temp_peer_applied_to_target=True
  peer_count_after_substitution_five=True
  allowed_ip_count_after_substitution_five=True
  vm121_traffic_ran_without_errors=True
  netns_cleanup_ok=True
  traffic_attempted=True
  vm100_after_traffic_collected=True
  counter_after_rows_ten=True
  target_out_counter_present=True
  target_in_counter_present=True
  target_delta_positive=True
  target_delta_reaches_activity_threshold=True
  target_active_now_true=True
  vm100_restore_ok=True
  restored_target_hash_matches_original=True
  vm100_final_collected=True
  final_target_hash_matches_original=True
  vm100_peer_count_final_five=True
  vm100_allowed_ip_count_final_five=True
  selector_final_matches_before=True
  activity_service_enabled_final=True
  activity_service_status_final=True
  vm101_slot_map_collected=True
  vm101_cs1_to_vpn3_seen=True
  vm101_cs2_to_vpn4_seen=True
  vm101_cs3_to_vpn5_seen=True
  vm101_cs4_to_vpn1_seen=True
  vm101_cs5_to_vpn2_seen=True
  vm121_db_final_collected=True
  enabled_peers_five=True
  lease_rows_five=True
  idle_leases_five=True
  active_leases_zero=True
  forced_leases_zero=True
  pending_jobs_zero=True
  public_report_created=True
  public_index_rebuilt=True

expected_absence:
  private_material_published=False
  manual_agent_service_start_used=False
  vm101_changed=False
  vm121_db_changed=False
  selector_left_changed=False
  wg_peer_runtime_left_changed=False
  client_config_published=False
  force_mode_enabled=False
  rebalance_paused=False
  activity_eval_written_to_db=False

warnings:
  - STEP_044J3B temporarily replaces VM100 wg_paid target peer public key for 10.253.1.10/32, then restores full wg_paid config from local VM100 backup.
  - VM100 runtime peer is expected to change only during the controlled traffic window; final state must match original target peer hash.
  - Private client key and full wg_paid backup config are not published.

all_ok=True
decision=PASS_STEP_044J3B_CONTROLLED_TRAFFIC_TEMP_RUNTIME_PEER_QUOTING_FIX
next_step=STEP_044K_RUNTIME_EGRESS_ACTIVITY_SAMPLER_DRYRUN_DB_UPDATE_PREVIEW
LOCAL_REPORT=http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-141954_step044j3b_controlled_traffic_temp_runtime_peer_quoting_fix/
TRYCF_REPORT=https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-141954_step044j3b_controlled_traffic_temp_runtime_peer_quoting_fix/