{
  "schema": "vm101-profile-managed-selector-change-v1",
  "removed_recursive_root": "/root/hmn",
  "added_include_globs": [
    "/root/hmn/hmn-*.sh"
  ],
  "old_include_roots": [
    "/root/hmn",
    "/usr/local/bin",
    "/usr/local/sbin",
    "/usr/local/lib",
    "/etc/config",
    "/etc/init.d",
    "/etc/cron.d",
    "/etc/crontabs",
    "/etc/hotplug.d",
    "/etc/profile.d",
    "/etc/uci-defaults",
    "/etc/sysctl.d",
    "/etc/nftables.d",
    "/www/cgi-bin",
    "/etc/rc.local",
    "/etc/firewall.user"
  ],
  "new_include_roots": [
    "/usr/local/bin",
    "/usr/local/sbin",
    "/usr/local/lib",
    "/etc/config",
    "/etc/init.d",
    "/etc/cron.d",
    "/etc/crontabs",
    "/etc/hotplug.d",
    "/etc/profile.d",
    "/etc/uci-defaults",
    "/etc/sysctl.d",
    "/etc/nftables.d",
    "/www/cgi-bin",
    "/etc/rc.local",
    "/etc/firewall.user"
  ],
  "declared_excluded_paths": [
    {
      "path": "/root/hmn/hmn.env",
      "reason": "private secret settings"
    },
    {
      "path": "/root/hmn/refill.log",
      "reason": "runtime log"
    },
    {
      "path": "/root/hmn/backups",
      "reason": "generated backups"
    },
    {
      "path": "/root/hmn/cache",
      "reason": "generated cache"
    },
    {
      "path": "/root/hmn/checkpoints",
      "reason": "generated recovery evidence"
    },
    {
      "path": "/root/hmn/configs",
      "reason": "downloaded dynamic AWG configurations"
    },
    {
      "path": "/root/hmn/logs",
      "reason": "runtime logs"
    },
    {
      "path": "/root/hmn/patch-backups",
      "reason": "generated patch backups"
    },
    {
      "path": "/root/hmn/reports",
      "reason": "generated reports"
    },
    {
      "path": "/root/hmn/runs",
      "reason": "runtime execution records"
    },
    {
      "path": "/root/hmn/state",
      "reason": "runtime state"
    },
    {
      "path": "/root/hmn/test-runs",
      "reason": "test evidence"
    }
  ],
  "reason": "/root/hmn mixes managed scripts with dynamic state, archives and downloaded tunnel configurations"
}