CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2
STATUS=BLOCKED
RC=2
HOST=pve01
MODE=change
COMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=bf03fcfd32ee6364f10812970dea507df2d9304bf75627a198781d726bcc5f55
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=true
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=BLOCKED
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=2
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c
SANITIZED_OUTPUT_SHA256=bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c
OUTPUT_BEGIN
STAGINGDNS_APPLY2_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2
COMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply
MODE=change
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
DISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873
PRIOR_DNS_APPLY1_HISTORY_SHA256=6ad59df4172788261d87a978a610e4b290ea86ba802cb7ebf4030100730aa633
PORTAL_PRODUCT_STATE_GATE=PASS
PUBLIC_DNS_PRESTATE={"1.1.1.1/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63750\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t862\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3743\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33703\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22886\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1600\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32030\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6932\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 512\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0}}
CLOUDFLARE_TOKEN_DISCOVERY={"candidate_count":0,"scanned_files":1486}
EDGE_VM_IDENTITY={"name":"edge-vm","node":"pve03","vmid":130}
EDGE_CLOUDFLARE_TOKEN_SCAN={"candidate_count":3,"rc":0,"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before","/opt/npmplus/secure/taftauto_cf_certbot.ini","/opt/npmplus/secure/forum_cf_token.env"]}
EDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1
CLOUDFLARE_TOKEN_SELECTED={"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before"],"valid_token_count":1,"zone_id_sha256":"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7"}
REFERENCE_DNS_RECORD={"content":"185.225.35.6","name":"git.gram1.ru","proxied":false,"ttl":1}
REFERENCE_DNS_RECORD={"count":0,"name":"uptime.gram1.ru","state":"SKIP"}
REFERENCE_DNS_RECORD={"count":0,"name":"gotify.gram1.ru","state":"SKIP"}
REFERENCE_DNS_RECORD={"count":0,"name":"home.gram1.ru","state":"SKIP"}
DNS_BLOCKED_REASON=INSUFFICIENT_EDGE_DNS_REFERENCES
FINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_INSUFFICIENT_EDGE_DNS_REFERENCES
HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"NEWFI-260908-A-STAGINGDNS-APPLY2","rollback_restored":null,"rollback_started":false,"status":"BLOCKED","version":1}

OUTPUT_END
CHAT_OUTPUT_END
