>>> [vm101-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm101.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm101
>>> [vm101-source] run VM101 git publisher through approved nested SSH
>>> [vm101-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=7f829a9d3575445ae0225deb1c636bd3c8869b19d32e80c72408c6bcdaf10ed5
MACHINE_ID=vm101
GIT_DIR=/root/.vm101-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm101.git
LOCAL_HEAD=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
>>> [vm101-git] verify remote branch
REMOTE_HEAD=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
>>> [vm101-git] build current project allowlist
>>> [vm101-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=37
TRACKED_COUNT=37
MANAGED_UNION_COUNT=37
>>> [vm101-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm101-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm101-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm101-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=6aa1b5439047ad84b82b1609e142378f4a95baf4
SIMULATED_TREE_FILE_COUNT=37
>>> [vm101-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm101-git] keyword review scan
=== FILES REQUIRING KEYWORD REVIEW ===
6aa1b5439047ad84b82b1609e142378f4a95baf4:hmn/hmn-load-vpn-test.sh
6aa1b5439047ad84b82b1609e142378f4a95baf4:hmn/hmn-set-code.sh

RESULT=PASS_vm101_GIT_PUBLISH_CHECK
MACHINE_ID=vm101
GIT_COMMIT=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
GIT_TREE=6aa1b5439047ad84b82b1609e142378f4a95baf4
GIT_FILE_COUNT=37
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM101_PUBLISHER_RC=0

VM101_RESULT=PASS_vm101_GIT_PUBLISH_CHECK
VM101_COMMIT=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
VM101_REMOTE_COMMIT=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
>>> [vm101-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm101.git
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 1c2c082 vm101: publish managed source 2026-07-26T09:05:56Z

VM130_COMMIT=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
VM130_TREE=6aa1b5439047ad84b82b1609e142378f4a95baf4
VM130_FILE_COUNT=37
VM130_STATUS=CLEAN
>>> [vm101-source] verify required managed paths
REQUIRED_PATH_OK=etc/crontabs/root
REQUIRED_PATH_OK=usr/local/sbin/router-vm101-git-publish.sh

RESULT=PASS_VM130_VM101_GIT_SOURCE_CHECK
VM101_COMMIT=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
VM130_COMMIT=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
VM130_TREE=6aa1b5439047ad84b82b1609e142378f4a95baf4
VM130_FILE_COUNT=37
VM101_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
VM101_STATUS=status: running
RESULT=PASS_R20QD_CONTINUATION_PVE_PREFLIGHT
VM101_BASELINE_COMMIT=1c2c08296d95c1c8a2bbd0db11ed967b981a5f6d
VM101_BASELINE_TREE=6aa1b5439047ad84b82b1609e142378f4a95baf4
VM101_BASELINE_FILE_COUNT=37
GIT_TRACKED_STATUS_CLEAN=true
FILE_SHA256=/etc/router-machine-git-source.conf:7f829a9d3575445ae0225deb1c636bd3c8869b19d32e80c72408c6bcdaf10ed5
FILE_SHA256=/usr/local/lib/router-wgpay-fallback-map.sh:cb4d1248544406869b292c5cb9387a238db61d925aee2057597d42da48132bde
FILE_SHA256=/usr/local/sbin/router-wgpay-canary-apply.sh:5035dbc1755d8e1cbf1396f3608f6b9931ceb31a06138a04224da6569ffec9a6
FILE_SHA256=/usr/local/sbin/router-wgpay-fallback-state.sh:1bc92a03db3bfb79ddfc5e6af695e230279e7bc249662d08d38ba37938610049
TRACKED_IN_HEAD=false:usr/local/lib/router-wgpay-fallback-map.sh
TRACKED_IN_HEAD=false:usr/local/sbin/router-wgpay-fallback-state.sh
FALLBACK_STATE_SHA256_BEFORE=f9ff8234623a1463e659c9dc87912b4c0cc23538964a3f90541b3ec256841926
FALLBACK_ACK_SHA256_BEFORE=6fc5addffdbadde5fe566631bc56b01ed5cdb99b29f1f652ed09f05eb0261f9e
MAPPER_NFT_NORMALIZED_SHA256_BEFORE=10f9b64e8958ef6869d26386cf63424418006c65ffd3b7584a88271e475cc59f
MAPPER_RULE_COUNT_BEFORE=5
CLEAR_RULE_COUNT_BEFORE=5
CORE_RUNTIME_ALREADY_COMPLETE=true
TARGET_INSTALLER_RERUN=false
LIVE_RUNTIME_REAPPLIED=false
RESULT=PASS_R20QD_CONTINUATION_VM101_PREFLIGHT
RESULT=PASS_R20QD_CONTINUATION_PREFLIGHT