>>> [router-machine-close] machine=vm100 mode=--publish >>> [vm100-source] precheck MODE=--publish REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm100.git REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm100 >>> [vm100-source] run VM100 git publisher through approved nested SSH >>> [vm100-git] precheck MODE=--publish PROFILE=/etc/router-machine-git-source.conf PROFILE_VERSION=2 PROFILE_SHA256=ee2c3b5366d8eb4c4ebf9766c07f6926ecc927e9c38a3766d870fc7397ab2743 MACHINE_ID=vm100 GIT_DIR=/root/.vm100-source.git WORK_TREE=/ BRANCH=main REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm100.git LOCAL_HEAD=83a8233181f3bd55faefd13b541edf5f80406c0e >>> [vm100-git] verify remote branch ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' REMOTE_HEAD=83a8233181f3bd55faefd13b541edf5f80406c0e >>> [vm100-git] build current project allowlist >>> [vm100-git] read paths already tracked by git CURRENT_ALLOWED_COUNT=29 TRACKED_COUNT=28 MANAGED_UNION_COUNT=29 >>> [vm100-git] strict path validation STRICT_PATH_VALIDATION=true >>> [vm100-git] show tracked files now missing from machine TRACKED_PATH_MISSING_COUNT=0 >>> [vm100-git] build simulated git index STAGED_CHANGE_COUNT=4 === STAGED PATHS === etc/router-machine-git-source.conf etc/router-wgpay-selector.d/canonical.conf etc/router-wgpay-slot-topology.conf usr/local/sbin/router-wgpay-slot-topology-apply.sh >>> [vm100-git] validate simulated staged paths STAGED_PATH_VALIDATION=true SIMULATED_TREE_SHA=decb190091126e3ff3aa49eb139c940c56f5354a SIMULATED_TREE_FILE_COUNT=29 >>> [vm100-git] high-confidence secret scan of simulated tree HIGH_CONFIDENCE_SECRET_MATCHES=0 >>> [vm100-git] keyword review scan KEYWORD_REVIEW_FILES=NONE >>> [vm100-git] verify real git index has no pre-staged changes >>> [vm100-git] install validated simulated index >>> [vm100-git] create commit [main 22fba62] vm100: publish managed source 2026-07-29T20:18:34Z 4 files changed, 65 insertions(+), 5 deletions(-) create mode 100644 etc/router-wgpay-selector.d/canonical.conf NEW_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c NEW_TREE=decb190091126e3ff3aa49eb139c940c56f5354a >>> [vm100-git] push branch to remote ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' To github.com:DChuvelev/wg-paid-vm100.git 83a8233..22fba62 main -> main >>> [vm100-git] verify remote commit ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' LOCAL_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c REMOTE_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c RESULT=PASS_vm100_GIT_PUBLISH MACHINE_ID=vm100 GIT_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c GIT_TREE=decb190091126e3ff3aa49eb139c940c56f5354a GIT_FILE_COUNT=29 COMMIT_CREATED=true PUSH_PERFORMED=true REPOSITORY=https://github.com/DChuvelev/wg-paid-vm100 VM100_RESULT=PASS_vm100_GIT_PUBLISH VM100_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c VM100_REMOTE_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c >>> [vm100-source] clone or refresh repository on VM130 CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm100.git From https://github.com/DChuvelev/wg-paid-vm100 * branch main -> FETCH_HEAD 83a8233..22fba62 main -> origin/main Reset branch 'main' branch 'main' set up to track 'origin/main'. Your branch is up to date with 'origin/main'. HEAD is now at 22fba62 vm100: publish managed source 2026-07-29T20:18:34Z VM130_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c VM130_TREE=decb190091126e3ff3aa49eb139c940c56f5354a VM130_FILE_COUNT=29 VM130_STATUS=CLEAN >>> [vm100-source] verify required managed paths REQUIRED_PATH_OK=etc/router-machine-git-source.conf REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh REQUIRED_PATH_OK=usr/local/sbin/router-vm100-git-publish.sh >>> [vm100-source] create archive and metadata from exact Git commit ARCHIVE=/tmp/vm100-git-source-publish.gtLasg/wg-paid-vm100-22fba62c8001.tar.gz ARCHIVE_SHA256=65318e856ebbd43c4ea06d6392e9d1f6b395ad1c85314210207afdebfabf8afb ARCHIVE_BASE64=/tmp/vm100-git-source-publish.gtLasg/wg-paid-vm100-22fba62c8001.tar.gz.b64.txt MANIFEST=/tmp/vm100-git-source-publish.gtLasg/git-tree-manifest.txt PATHS=/tmp/vm100-git-source-publish.gtLasg/managed-paths.txt FACTS=/tmp/vm100-git-source-publish.gtLasg/facts.json >>> [vm100-source] publish atomically into latest/ and archive prior version into old/ PUBLISHED_DIR=/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260729-201838_vm100_git_source_22fba62c8001 PUBLISHED_RELATIVE_PATH=latest/20260729-201838_vm100_git_source_22fba62c8001 PUBLIC_OBJECT_KIND=vm100 PREVIOUS_MOVED_COUNT=1 COLLISION_DEDUPLICATED_COUNT=0 PUBLICATION_REUSED=false PUBLICATION_TRANSACTION_ID=20260729-201838_570303_14733 PUBLICATION_COMMITTED=true LOCAL_POSTCHECK=PASS LATEST_INDEX_CONTAINS_FOLDER=true LOCAL_INDEX=http://192.168.30.84:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260729-201838_vm100_git_source_22fba62c8001/ LATEST_ROOT_URL=https://reports.secret-studio.ru/latest/ OLD_ROOT_URL=https://reports.secret-studio.ru/old/ PUBLIC_INDEX=https://reports.secret-studio.ru/latest/ PUBLIC_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/ VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/ TRYCF_INDEX=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/ TRYCF_REPORT=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260729-201838_vm100_git_source_22fba62c8001/ RESULT=PASS_ROUTER_PUBLISH_REPORT ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=db68e02b02345538f8ed41b4481f048e16617520d3ed2f60ec2f127dac4b48c2 RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/ HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=db68e02b02345538f8ed41b4481f048e16617520d3ed2f60ec2f127dac4b48c2 HTTP_OUTPUT=/tmp/vm100-git-source-publish.gtLasg/http-index.html ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=65318e856ebbd43c4ea06d6392e9d1f6b395ad1c85314210207afdebfabf8afb RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/wg-paid-vm100-22fba62c8001.tar.gz HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=65318e856ebbd43c4ea06d6392e9d1f6b395ad1c85314210207afdebfabf8afb HTTP_OUTPUT=/tmp/vm100-git-source-publish.gtLasg/http-archive.tar.gz ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=da7e77d902dc75f2848ea0634e99bd1cc53f56126be4693eca4234084d728dbd RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/facts.json HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=da7e77d902dc75f2848ea0634e99bd1cc53f56126be4693eca4234084d728dbd HTTP_OUTPUT=/tmp/vm100-git-source-publish.gtLasg/http-facts.json ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=8c8007fc1a26a1fad3e3353e0f531febd28a1ebf86c870edbf3c913f71d1011e RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/git-tree-manifest.txt HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=8c8007fc1a26a1fad3e3353e0f531febd28a1ebf86c870edbf3c913f71d1011e HTTP_OUTPUT=/tmp/vm100-git-source-publish.gtLasg/http-manifest.txt >>> [vm100-source] save current source archive state RESULT=PASS_VM130_VM100_GIT_SOURCE_PUBLISH VM100_GIT_SOURCE_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c VM100_GIT_SOURCE_TREE=decb190091126e3ff3aa49eb139c940c56f5354a VM100_GIT_SOURCE_FILE_COUNT=29 VM100_GIT_SOURCE_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/ VM100_GIT_SOURCE_ARCHIVE_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/wg-paid-vm100-22fba62c8001.tar.gz VM100_GIT_SOURCE_ARCHIVE_B64_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/wg-paid-vm100-22fba62c8001.tar.gz.b64.txt VM100_GIT_SOURCE_FACTS_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/facts.json VM100_GIT_SOURCE_MANIFEST_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/git-tree-manifest.txt VM100_GIT_SOURCE_ARCHIVE_SHA256=65318e856ebbd43c4ea06d6392e9d1f6b395ad1c85314210207afdebfabf8afb VM100_PUSH_PERFORMED=true ARCHIVE_CREATED=true PUBLISHER_RESULT=PASS_ROUTER_PUBLISH_REPORT PUBLISHER_RC=0 PUBLISHER_RC_NONZERO_SALVAGED=false PUBLICATION_COMMITTED=true LOCAL_POSTCHECK=PASS LATEST_INDEX_CONTAINS_FOLDER=true HTTP_POSTCHECK=PASS SOURCE_STATE_UPDATED=true PERMANENT_HTTPS_PUBLISHED=true RESULT=PASS_ROUTER_MACHINE_CLOSE MACHINE=vm100 DESCRIPTION=STEP_050M07R20QR: add immutable canonical selector and restore working selector byte-for-byte on final NORMAL; isolated proof only; production routing unchanged COMMIT=22fba62c800167f6391beb3dd727012b29e5651c TREE=decb190091126e3ff3aa49eb139c940c56f5354a GIT_FILE_COUNT=29 SOURCE_PUBLISH_BACKEND=/opt/router-ops/bin/router-vm100-git-source-publish BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20260729-201832_vm100_570260/backend.txt BACKEND_RC=0 BACKEND_RC_NONZERO_SALVAGED=false CLASSIFICATION=PASS_AUTHORITATIVE_BACKEND_AND_PUBLICATION VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/ VM100_GIT_COMMIT=22fba62c800167f6391beb3dd727012b29e5651c VM100_GIT_TREE=decb190091126e3ff3aa49eb139c940c56f5354a VM100_GIT_FILE_COUNT=29 VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260729-201838_vm100_git_source_22fba62c8001/ VM100_SOURCE_CHANGE=true VM100_CHANGED_PATHS=etc/router-machine-git-source.conf,etc/router-wgpay-selector.d/canonical.conf,etc/router-wgpay-slot-topology.conf,usr/local/sbin/router-wgpay-slot-topology-apply.sh VM101_GIT_COMMIT=e656f9bfde6d727292f38cae43e41811a23d6714 VM101_GIT_TREE=48a6c4365ccde9caaec7765fa796f09cbd74771e VM101_GIT_FILE_COUNT=55 VM101_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260729-180106_vm101_git_source_e656f9bfde6d/ VM101_SOURCE_CHANGE=false RESULT=PASS_R20QR_SOURCE_PUBLISH