B1B2A_SOURCE_POLICY=PASS
>>> [vm121-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm121.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm121
>>> [vm121-source] run VM121 git publisher through approved direct SSH
>>> [vm121-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=7af60e3d7de8335842addc60ced35672f821fb173eaccb59a830d8aba0c606da
MACHINE_ID=vm121
GIT_DIR=/root/.vm121-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm121.git
LOCAL_HEAD=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
>>> [vm121-git] verify remote branch
REMOTE_HEAD=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
>>> [vm121-git] build current project allowlist
>>> [vm121-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=81
TRACKED_COUNT=81
MANAGED_UNION_COUNT=81
>>> [vm121-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm121-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm121-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm121-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=6274cebfdd296f136f43706dd224c3cdfe0201c4
SIMULATED_TREE_FILE_COUNT=81
>>> [vm121-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm121-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE

RESULT=PASS_VM121_GIT_PUBLISH_CHECK
MACHINE_ID=vm121
GIT_COMMIT=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
GIT_TREE=6274cebfdd296f136f43706dd224c3cdfe0201c4
GIT_FILE_COUNT=81
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM121_RESULT=PASS_VM121_GIT_PUBLISH_CHECK
VM121_COMMIT=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
VM121_REMOTE_COMMIT=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
>>> [vm121-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm121.git
From https://github.com/DChuvelev/wg-paid-vm121
 * branch            main       -> FETCH_HEAD
Reset branch 'main'
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 8234f34 vm121: publish managed source 2026-10-09T13:58:54Z

VM130_COMMIT=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
VM130_TREE=6274cebfdd296f136f43706dd224c3cdfe0201c4
VM130_FILE_COUNT=81
VM130_STATUS=CLEAN
>>> [vm121-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm121-git-publish.sh

RESULT=PASS_VM130_VM121_GIT_SOURCE_CHECK
VM121_COMMIT=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
VM130_COMMIT=8234f348cbe74856ba1bd1cb79fc526bc7cdccb5
VM130_TREE=6274cebfdd296f136f43706dd224c3cdfe0201c4
VM130_FILE_COUNT=81
VM121_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
INFO  [alembic.runtime.migration] Context impl PostgresqlImpl.
INFO  [alembic.runtime.migration] Will assume transactional DDL.
RESULT=PASS_B1B2A_R02_PREFLIGHT