SNAPSHOT_NAME=r20qq-pre-topology-reconcile
SNAPSHOT_NAME_LENGTH=28
TARGET_PACKAGE_EXPECTED_SHA256=a22d20153ed2e92df72ead7e909728dca487810ad7120e5bead3f7847515d359
TARGET_PACKAGE_ACTUAL_SHA256=a22d20153ed2e92df72ead7e909728dca487810ad7120e5bead3f7847515d359
fixtures/vm101/root/hmn/hmn-rank-awg.sh: OK
rootfs/vm101/etc/router-machine-git-source.conf: OK
rootfs/vm101/usr/local/sbin/router-egress-full-pool-refresh.sh: OK
rootfs/vm101/usr/local/sbin/router-wgpay-topology-reconcile.sh: OK
runtime/vm101-topology-reconcile-isolated-proof.sh: OK
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:payload/rootfs/vm101/usr/local/sbin/router-egress-full-pool-refresh.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:payload/rootfs/vm101/usr/local/sbin/router-wgpay-topology-reconcile.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:payload/runtime/vm101-topology-reconcile-isolated-proof.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.1:scripts/vm100-preflight.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:scripts/vm101-preflight.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:scripts/vm101-backup.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:scripts/vm101-apply.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:scripts/vm101-postcheck.sh
TARGET_BUSYBOX_SYNTAX_OK=10.71.100.2:scripts/vm101-rollback.sh
>>> [vm100-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm100.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm100
>>> [vm100-source] run VM100 git publisher through approved nested SSH
>>> [vm100-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=1ab9b29bc9b55c359164350e0112e5deec893d279e8212cce516477b76f67635
MACHINE_ID=vm100
GIT_DIR=/root/.vm100-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm100.git
LOCAL_HEAD=83a8233181f3bd55faefd13b541edf5f80406c0e
>>> [vm100-git] verify remote branch
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
REMOTE_HEAD=83a8233181f3bd55faefd13b541edf5f80406c0e
>>> [vm100-git] build current project allowlist
>>> [vm100-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=28
TRACKED_COUNT=28
MANAGED_UNION_COUNT=28
>>> [vm100-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm100-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm100-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm100-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=f9a7e80c41c48b145bf2631d76afdeee4cc5e62c
SIMULATED_TREE_FILE_COUNT=28
>>> [vm100-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm100-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE

RESULT=PASS_vm100_GIT_PUBLISH_CHECK
MACHINE_ID=vm100
GIT_COMMIT=83a8233181f3bd55faefd13b541edf5f80406c0e
GIT_TREE=f9a7e80c41c48b145bf2631d76afdeee4cc5e62c
GIT_FILE_COUNT=28
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM100_RESULT=PASS_vm100_GIT_PUBLISH_CHECK
VM100_COMMIT=83a8233181f3bd55faefd13b541edf5f80406c0e
VM100_REMOTE_COMMIT=83a8233181f3bd55faefd13b541edf5f80406c0e
>>> [vm100-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm100.git
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 83a8233 vm100: publish managed source 2026-07-29T13:51:36Z

VM130_COMMIT=83a8233181f3bd55faefd13b541edf5f80406c0e
VM130_TREE=f9a7e80c41c48b145bf2631d76afdeee4cc5e62c
VM130_FILE_COUNT=28
VM130_STATUS=CLEAN
>>> [vm100-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm100-git-publish.sh

RESULT=PASS_VM130_VM100_GIT_SOURCE_CHECK
VM100_COMMIT=83a8233181f3bd55faefd13b541edf5f80406c0e
VM130_COMMIT=83a8233181f3bd55faefd13b541edf5f80406c0e
VM130_TREE=f9a7e80c41c48b145bf2631d76afdeee4cc5e62c
VM130_FILE_COUNT=28
VM100_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
>>> [vm101-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm101.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm101
>>> [vm101-source] run VM101 git publisher through approved nested SSH
>>> [vm101-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=432eac88e1c19582a726f9d2720e0c7de0336e179441823f71a943d76f679a60
MACHINE_ID=vm101
GIT_DIR=/root/.vm101-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm101.git
LOCAL_HEAD=13825aebae9e22cb019007a360d545525c4ce6b8
>>> [vm101-git] verify remote branch
REMOTE_HEAD=13825aebae9e22cb019007a360d545525c4ce6b8
>>> [vm101-git] build current project allowlist
>>> [vm101-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=54
TRACKED_COUNT=54
MANAGED_UNION_COUNT=54
>>> [vm101-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm101-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm101-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm101-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=1295b96c794fb737c175cfd1c5083a0472d4779d
SIMULATED_TREE_FILE_COUNT=54
>>> [vm101-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm101-git] keyword review scan
=== FILES REQUIRING KEYWORD REVIEW ===
1295b96c794fb737c175cfd1c5083a0472d4779d:hmn/hmn-load-vpn-test.sh
1295b96c794fb737c175cfd1c5083a0472d4779d:hmn/hmn-set-code.sh

RESULT=PASS_vm101_GIT_PUBLISH_CHECK
MACHINE_ID=vm101
GIT_COMMIT=13825aebae9e22cb019007a360d545525c4ce6b8
GIT_TREE=1295b96c794fb737c175cfd1c5083a0472d4779d
GIT_FILE_COUNT=54
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM101_PUBLISHER_RC=0

VM101_RESULT=PASS_vm101_GIT_PUBLISH_CHECK
VM101_COMMIT=13825aebae9e22cb019007a360d545525c4ce6b8
VM101_REMOTE_COMMIT=13825aebae9e22cb019007a360d545525c4ce6b8
>>> [vm101-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm101.git
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 13825ae vm101: publish managed source 2026-07-29T15:03:32Z

VM130_COMMIT=13825aebae9e22cb019007a360d545525c4ce6b8
VM130_TREE=1295b96c794fb737c175cfd1c5083a0472d4779d
VM130_FILE_COUNT=54
VM130_STATUS=CLEAN
>>> [vm101-source] verify required managed paths
REQUIRED_PATH_OK=etc/crontabs/root
REQUIRED_PATH_OK=usr/local/sbin/router-vm101-git-publish.sh

RESULT=PASS_VM130_VM101_GIT_SOURCE_CHECK
VM101_COMMIT=13825aebae9e22cb019007a360d545525c4ce6b8
VM130_COMMIT=13825aebae9e22cb019007a360d545525c4ce6b8
VM130_TREE=1295b96c794fb737c175cfd1c5083a0472d4779d
VM130_FILE_COUNT=54
VM101_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
VM100_QM_STATUS=status: running
VM101_QM_STATUS=status: running
RESULT=PASS_R20QQ_PVE_PREFLIGHT
VM100_CURRENT_COMMIT=83a8233181f3bd55faefd13b541edf5f80406c0e
VM100_CURRENT_TREE=f9a7e80c41c48b145bf2631d76afdeee4cc5e62c
VM100_CURRENT_FILE_COUNT=28
VM100_TRACKED_STATUS_CLEAN=true
VM100_SELECTOR_COUNTS=1,1,1,1,1
VM100_TOPOLOGY_MODE=NORMAL
VM100_DIRECT_POLICY_ENABLED=false
VM100_ACTIVE_DIRECT_ROUTE=false
RESULT=PASS_R20QQ_VM100_PREFLIGHT
PATH_SHA256=/etc/router-machine-git-source.conf:432eac88e1c19582a726f9d2720e0c7de0336e179441823f71a943d76f679a60
PATH_SHA256=/usr/local/sbin/router-egress-full-pool-refresh.sh:b26dc566b710ddba30e463b873003d10a4f09edc532515011b2aa9c9bc17c097
VM101_CURRENT_COMMIT=13825aebae9e22cb019007a360d545525c4ce6b8
VM101_CURRENT_TREE=1295b96c794fb737c175cfd1c5083a0472d4779d
VM101_CURRENT_FILE_COUNT=54
VM101_TRACKED_STATUS_CLEAN=true
VM101_HEALTHY_SLOT_COUNT=5
VM101_FALLBACK_MODE=NORMAL
VM101_DIRECT_SOURCE_PRESENT=false
VM101_FULL_REFRESH_PROCESS_PRESENT=false
VM101_RECONCILE_PATH_PRESENT=false
VM101_RECOVERY_STATE_SHA256=1987d5b037be1c239918dfadb586e40a1d667ceacee3435bfab1b845ca009f12
VM101_FALLBACK_STATE_SHA256=8f536f1357afa50ff97e8bd4871e30deb2357a22ead8683e2058bf0db4faf175
VM101_FALLBACK_ACK_SHA256=dc01d32cf4efacc794cce048b04ac3e9ead7761df0b25fd98d05ab45d2bda9ba
VM101_WATCHER_STATE_SHA256=39c7827c64cc6860605dd319f690fbcf3418ae7e599770f19cf57c2af4fc19a3
VM101_DELIVERY_STATE_SHA256=1a75fd6f53612ec22b1d9eb4d2aa0a2a87df7bf7d8522f0022db09ba096baaad
RESULT=PASS_R20QQ_VM101_PREFLIGHT
RESULT=PASS_R20QQ_PREFLIGHT