TARGET_PACKAGE_SHA256=536801c5c187fc2cbba14c90c2f44eb4fce10a800b4673682e9580b410b3c644
>>> [vm101-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm101.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm101
>>> [vm101-source] run VM101 git publisher through approved nested SSH
>>> [vm101-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=1bfac15dd7d4901acd4f716cec2d7f0d884ac5b763922a436ffac740f6f0fbf7
MACHINE_ID=vm101
GIT_DIR=/root/.vm101-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm101.git
LOCAL_HEAD=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
>>> [vm101-git] verify remote branch
REMOTE_HEAD=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
>>> [vm101-git] build current project allowlist
>>> [vm101-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=64
TRACKED_COUNT=64
MANAGED_UNION_COUNT=64
>>> [vm101-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm101-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm101-git] build simulated git index
STAGED_CHANGE_COUNT=1
=== STAGED PATHS ===
etc/config/firewall
>>> [vm101-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=baed5e9770bfbd7464f1c8b07844ccf55aeab5ff
SIMULATED_TREE_FILE_COUNT=64
>>> [vm101-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm101-git] keyword review scan
=== FILES REQUIRING KEYWORD REVIEW ===
baed5e9770bfbd7464f1c8b07844ccf55aeab5ff:hmn/hmn-load-vpn-test.sh
baed5e9770bfbd7464f1c8b07844ccf55aeab5ff:hmn/hmn-set-code.sh

RESULT=PASS_vm101_GIT_PUBLISH_CHECK
MACHINE_ID=vm101
GIT_COMMIT=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
GIT_TREE=baed5e9770bfbd7464f1c8b07844ccf55aeab5ff
GIT_FILE_COUNT=64
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM101_PUBLISHER_RC=0

VM101_RESULT=PASS_vm101_GIT_PUBLISH_CHECK
VM101_COMMIT=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
VM101_REMOTE_COMMIT=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
>>> [vm101-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm101.git
From https://github.com/DChuvelev/wg-paid-vm101
 * branch            main       -> FETCH_HEAD
Reset branch 'main'
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 9b3eb4c vm101: publish managed source 2026-09-08T05:28:43Z

VM130_COMMIT=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
VM130_TREE=4cb7f1b72d854f3570935d208c76b99e2d4b039f
VM130_FILE_COUNT=64
VM130_STATUS=CLEAN
>>> [vm101-source] verify required managed paths
REQUIRED_PATH_OK=etc/crontabs/root
REQUIRED_PATH_OK=usr/local/sbin/router-vm101-git-publish.sh

RESULT=PASS_VM130_VM101_GIT_SOURCE_CHECK
VM101_COMMIT=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
VM130_COMMIT=9b3eb4c7098e2d48372c013fa37b094e9e7798b7
VM130_TREE=4cb7f1b72d854f3570935d208c76b99e2d4b039f
VM130_FILE_COUNT=64
VM101_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
SOURCE_STAGED_DRIFT=etc/config/firewall
===== VM101 AWG_REMOTE DNAT PREFLIGHT =====
ACCEPTED_PREEXISTING_DRIFT=firewall.dnat_awg_paid_51831
UNEXPECTED_FIREWALL_DRIFT=false
UDP_51832_FREE=true
PUBLIC_IPV4=95.165.105.4
RESULT=PASS_P28R2_R02_VM101_PREFLIGHT
VM100_AWG_REMOTE_WITNESS=PASS
RESULT=PASS_P28R2_R02_PREFLIGHT