RESULT=STOP_COPY_OR_TRANSFER_ERROR
STEP_ID=STEP_050M07R15A_LEGACY_EXECUTION_FREEZE_AND_CLEAN_FOUNDATION_R02
TIMESTAMP_UTC=20260716-091034

PURPOSE:
Freeze and remove VM101 legacy execution paths and establish one clean five-slot LOCAL_REPAIR foundation.

BEFORE:
- Published canonical source: commit 0a6998cfead6a1e8b820cce9c00171dd6e81c6a1, tree b2646e97025823532daa549235e1643f75f11c4e, 47 files.
- Live OpenWrt git ls-tree name count is diagnostic only; commit+tree identity and published source manifest are authoritative.
- Old table-200/two-slot refresh, rebalance, emergency, validator, cron and state paths remained present.

AFTER:
- One production loop: health watcher -> dispatcher -> LOCAL_REPAIR.
- HMN provider boundary: download -> low-level vpn_test -> unified-quarantine ranker.
- Unified state under /var/lib/router-egress-recovery.
- Table 200 and legacy entry points absent.
- Machine Git expected file count: 29.

ACTUAL:
COMMIT=
TREE=
GIT_FILE_COUNT=
AUTO_ROLLBACK=PASS
RUNTIME_IMPACT=true
VM101_PUBLIC_URL=
VM101_MODEL_URL=
VM101_METHODS_URL=
LOCAL_M07_PLAN_URL=

RUNTIME:
- health-repair watcher stopped and restarted;
- legacy services disabled and removed;
- table 200 routes/rules flushed;
- vpn_test left down;
- vpn1..vpn5 endpoints must remain byte-for-byte unchanged.

ROLLBACK:
TARGET_BACKUP=/root/router-ops-backups/20260716-091034_STEP_050M07R15A_LEGACY_EXECUTION_FREEZE_AND_CLEAN_FOUNDATION_R02
TARGET_ROLLBACK=/root/router-ops-backups/20260716-091034_STEP_050M07R15A_LEGACY_EXECUTION_FREEZE_AND_CLEAN_FOUNDATION_R02/rollback.sh
LOCAL_ROLLBACK=/opt/router-ops/steps/20260716-091034_STEP_050M07R15A_LEGACY_EXECUTION_FREEZE_AND_CLEAN_FOUNDATION_R02/rollback.sh

LIMITATIONS:
FULL_POOL_REFRESH, DEGRADED_POOL, consolidation, Direct emergency and bootstrap recovery remain disabled and future work.