CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-HISTORICAL-ROUTE-172R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=infra-dr-vps-historical-route-pve01
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=6662eddd5f2259b6f4a096b9c586e239a15c91a6c8e7e0328b76f15c1fa79e6c
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=a6fdcf1c92c2f056a0ae23a45774d0cf2d12b99a76ee2490c868e9573d3f07b7
SANITIZED_OUTPUT_SHA256=a6fdcf1c92c2f056a0ae23a45774d0cf2d12b99a76ee2490c868e9573d3f07b7
OUTPUT_BEGIN
INFRA172_BEGIN
COMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-HISTORICAL-ROUTE-172R1
MODE=READ_ONLY
PRIOR_171_COMMIT=4ac5820682bd86c4bcd385692139c75369b0be03
INFRA172_ROLE_DNS={"MD_RELAY":{"hostname":"nb.pvepro.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0},"SPB_INGRESS":{"hostname":"newfi.ru","ip_refs":[{"address_class":"PUBLIC","identity_marker":"HISTORICAL_SPB_INGRESS","ip_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"}],"rc":0},"US_NETBIRD":{"hostname":"nb.gram1.ru","ip_refs":[{"address_class":"PUBLIC","ip_sha256":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16"}],"rc":0}}
INFRA172_CURRENT_RESIDUE={"file_count":4,"rows":[{"assignments":[{"key":"User","kind":"USER","line":9,"value":"root"}],"evidence":[{"evidence":{"kind":"SANITIZED","text":"Description=Create current ingress recovery artifact on cold standby node"},"line":2},{"evidence":{"kind":"SANITIZED","text":"User=root"},"line":9},{"evidence":{"kind":"SANITIZED","text":"<LONG:1f7afc3312fd233f>"},"line":11}],"source":{"basename":"homelab-ingress-standby-refresh.service","kind":"CURRENT","path_sha256":"d267675a7c11436bf83d33ba637a28d00f08e91013f12af00a28d138eddc531e"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"Description=Daily ingress cold standby recovery artifact refresh"},"line":2},{"evidence":{"kind":"SANITIZED","text":"Unit=homelab-ingress-standby-refresh.service"},"line":8}],"source":{"basename":"homelab-ingress-standby-refresh.timer","kind":"CURRENT","path_sha256":"96feda8920362dd961046ef5f1375e8ccb4182400fe02408c76604e4aa4832c1"}},{"assignments":[{"key":"DEST","kind":"HOST_EXPR","line":120,"value_sha256":"fc4d602aa16170b89bda4c70d75d89e6183b14f994516aa7b3e032c3f18cbb4e"}],"evidence":[{"evidence":{"kind":"SANITIZED","text":"export LC_ALL=C"},"line":3},{"evidence":{"kind":"SANITIZED","text":"LOCK=\"/run/lock/homelab-ingress-standby-refresh.lock\""},"line":5},{"evidence":{"kind":"SANITIZED","text":"DRILL_REPORT=\"/var/lib/homelab-chat/CR0023-cold-standby-drill.txt\""},"line":6},{"evidence":{"kind":"SANITIZED","text":"STATE_DIR=\"/var/lib/homelab-ingress-standby\""},"line":7},{"evidence":{"kind":"SANITIZED","text":"RELAY=\"$(mktemp)\""},"line":12},{"evidence":{"kind":"SANITIZED","text":"rm -f \"$TMP_STATE\" \"$RELAY\" \"$RESOURCES\""},"line":16},{"evidence":{"kind":"SANITIZED","text":"test -f \"$DRILL_REPORT\""},"line":26},{"evidence":{"kind":"SANITIZED","text":"grep -q '^CR0023_COLD_STANDBY_DRILL_STATUS=SUCCESS$' \"$DRILL_REPORT\""},"line":27},{"evidence":{"kind":"SANITIZED","text":"STANDBY_VMID=\"$(sed -n 's/^STANDBY_VMID=//p' \"$DRILL_REPORT\" | head -n 1)\""},"line":29},{"evidence":{"kind":"SANITIZED","text":"STANDBY_NODE=\"$(sed -n 's/^STANDBY_NODE=//p' \"$DRILL_REPORT\" | head -n 1)\""},"line":30},{"evidence":{"kind":"SANITIZED","text":"import json, sys"},"line":39},{"evidence":{"kind":"SANITIZED","text":"import json, sys"},"line":47},{"evidence":{"kind":"SANITIZED","text":"if [ \"$node\" = \"$(hostname -s)\" ] || [ \"$node\" = \"$(hostname)\" ]; then"},"line":60},{"evidence":{"kind":"SANITIZED","text":"ssh -o BatchMode=yes -o ConnectTimeout=10 root@\"$node\" \"$@\""},"line":63},{"evidence":{"kind":"SANITIZED","text":"if [ \"$SOURCE_NODE\" = \"$(hostname -s)\" ] || [ \"$SOURCE_NODE\" = \"$(hostname)\" ]; then"},"line":91},{"evidence":{"kind":"SANITIZED","text":"cat \"$SOURCE_BACKUP\" >\"$RELAY\""},"line":92},{"evidence":{"kind":"SANITIZED","text":"ssh -o BatchMode=yes -o ConnectTimeout=10 root@\"$SOURCE_NODE\" \"cat '$SOURCE_BACKUP'\" >\"$RELAY\""},"line":94},{"evidence":{"kind":"SANITIZED","text":"test \"$(stat -c %s \"$RELAY\")\" = \"$SOURCE_SIZE\""},"line":97},{"evidence":{"kind":"SANITIZED","text":"test \"$(sha256sum \"$RELAY\" | awk '{print $1}')\" = \"$SOURCE_SHA256\""},"line":98},{"evidence":{"kind":"SANITIZED","text":"DEST_DIR=\"/var/backups/ingress-standby-source\""},"line":100}],"source":{"basename":"homelab-ingress-standby-refresh","kind":"CURRENT","path":"/usr/local/sbin/homelab-ingress-standby-refresh"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"export LC_ALL=C"},"line":3},{"evidence":{"kind":"SANITIZED","text":"DRILL_REPORT=\"/var/lib/homelab-chat/CR0023-cold-standby-drill.txt\""},"line":6},{"evidence":{"kind":"SANITIZED","text":"STATE_DIR=\"/var/lib/homelab-health/ingress-failover\""},"line":7},{"evidence":{"kind":"SANITIZED","text":"LOCK_FILE=\"/run/lock/homelab-ingress-failover.lock\""},"line":9},{"evidence":{"kind":"SANITIZED","text":"echo \"INGRESS_FAILOVER_LOCK=BUSY\""},"line":15},{"evidence":{"kind":"SANITIZED","text":"test -f \"$DRILL_REPORT\""},"line":19},{"evidence":{"kind":"SANITIZED","text":"sed -n 's/^STANDBY_VMID=//p' \"$DRILL_REPORT\" |"},"line":22},{"evidence":{"kind":"SANITIZED","text":"sed -n 's/^STANDBY_NODE=//p' \"$DRILL_REPORT\" |"},"line":27},{"evidence":{"kind":"SANITIZED","text":"import json"},"line":48},{"evidence":{"kind":"SANITIZED","text":"import sys"},"line":49},{"evidence":{"kind":"SANITIZED","text":"if [ \"$node\" = \"$(hostname -s)\" ] ||"},"line":71},{"evidence":{"kind":"SANITIZED","text":"[ \"$node\" = \"$(hostname)\" ]"},"line":72},{"evidence":{"kind":"SANITIZED","text":"ssh \\"},"line":76},{"evidence":{"kind":"SANITIZED","text":"export LC_ALL=C"},"line":196},{"evidence":{"kind":"SANITIZED","text":"echo \"ACTIVE_INGRESS=$active\""},"line":241}],"source":{"basename":"homelab-ingress-failover","kind":"CURRENT","path":"/usr/local/sbin/homelab-ingress-failover"}}]}
INFRA172_GIT_META={"commit_count":11,"file_count":17,"git_rcs":[0,0,0,0],"repo_present":true}
INFRA172_GIT_EVIDENCE={"count":17,"rows":[{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"H=\"/var/lib/homelab-health/edge-ingress-hardening.txt\""},"line":4},{"evidence":{"kind":"SANITIZED","text":"LAN_IP=\"$(hostname -I | tr ' ' '\\n' | grep -m1 '^192\\.168\\.50\\.' || true)\""},"line":9},{"evidence":{"kind":"SANITIZED","text":"# NetBird uses UDP/51820. Do not block it on edge."},"line":38},{"evidence":{"kind":"SANITIZED","text":"delete_rule_if_exists \"$IPT\"  -p udp --dport 51820 -j DROP"},"line":39},{"evidence":{"kind":"SANITIZED","text":"delete_rule_if_exists \"$IP6T\" -p udp --dport 51820 -j DROP"},"line":40},{"evidence":{"kind":"SANITIZED","text":"# Allow private NetBird overlay peers to reach NPMplus web entrypoints."},"line":42},{"evidence":{"kind":"SANITIZED","text":"add_input_rule \"$IPT\" -i wt0 -s <IP:CGNAT_OVERLAY_CANDIDATE:7feea0554afada76>/16 -p tcp -m multiport --dports 80,443 -j ACCEPT"},"line":43},{"evidence":{"kind":"SANITIZED","text":"if \"$IPT\" -C INPUT -s \"$KUMA_IP\" -p tcp --dport 81 -j ACCEPT 2>/dev/null; then"},"line":47},{"evidence":{"kind":"SANITIZED","text":"\"$IPT\" -I INPUT 1 -s \"$KUMA_IP\" -p tcp --dport 81 -j ACCEPT"},"line":50},{"evidence":{"kind":"SANITIZED","text":"add_input_rule \"$IPT\"  -p tcp --dport 81 ! -i lo -j DROP"},"line":55},{"evidence":{"kind":"SANITIZED","text":"add_input_rule \"$IP6T\" -p tcp --dport 81 ! -i lo -j DROP"},"line":56},{"evidence":{"kind":"SANITIZED","text":"\"$IPT\" -C INPUT -i wt0 -s <IP:CGNAT_OVERLAY_CANDIDATE:7feea0554afada76>/16 -p tcp -m multiport --dports 80,443 -j ACCEPT 2>/dev/null || status=ERROR"},"line":61},{"evidence":{"kind":"SANITIZED","text":"[ -z \"${KUMA_IP:-}\" ] || \"$IPT\" -C INPUT -s \"$KUMA_IP\" -p tcp --dport 81 -j ACCEPT 2>/dev/null || status=ERROR"},"line":62},{"evidence":{"kind":"SANITIZED","text":"\"$IPT\" -C INPUT -p tcp --dport 81 ! -i lo -j DROP 2>/dev/null || status=ERROR"},"line":63},{"evidence":{"kind":"SANITIZED","text":"if \"$IPT\" -C INPUT -p udp --dport 51820 -j DROP 2>/dev/null; then"},"line":64},{"evidence":{"kind":"REDACTED_SECRET_BEARING_LINE","line_sha256":"afec0cfc0d1fd30371b43a57bd6bb2c5e7abf28c5f31e7c0b1b915200f891fa4","var_refs":[]},"line":68}],"role_hint":["SPB_INGRESS"],"source":{"basename":"homelab-edge-ingress-hardening","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"c50956c9b33835940d70a6b64d295b3d0ddeeca304b11deadcc91145f5c6c97d"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"Description=Homelab edge ingress hardening rules"},"line":2},{"evidence":{"kind":"SANITIZED","text":"<LONG:4a21a1c27a6cbb8a>"},"line":8},{"evidence":{"kind":"SANITIZED","text":"WantedBy=multi-user.target"},"line":12}],"role_hint":["SPB_INGRESS"],"source":{"basename":"homelab-edge-ingress-hardening.service","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"46fd7f5094fd54a19665dc8d535c977b492de7ee4a52970a5c7c309428282e95"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"Description=Re-apply homelab edge ingress hardening rules"},"line":2}],"role_hint":["SPB_INGRESS"],"source":{"basename":"homelab-edge-ingress-hardening.timer","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"9f00ab8ac998a1c9b2cf556fb6e257e737c2cbd62608f7a38310ba3d547e1df5"}},{"assignments":[{"key":"VPS_IP","kind":"HOST","line":4,"value":{"address_class":"PUBLIC","ip_sha256":"f743a81d85de402239bdb782892adc0886327b57d99fdb0b889aaf4768e59620"}}],"evidence":[{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-backup"},"line":2},{"evidence":{"kind":"SANITIZED","text":"VPS_IP=<IP:PUBLIC:f743a81d85de4022>"},"line":4},{"evidence":{"kind":"SANITIZED","text":"<LONG:069b630e24267642>"},"line":5},{"evidence":{"kind":"SANITIZED","text":"<LONG:22cbb8d0af019715>"},"line":6}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-backup.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"c9ec7a06c04903e50186b3ee98b8aadfb39632d401824b8741cde5f2c1803013"}},{"assignments":[{"key":"DST_HOST","kind":"HOST","line":4,"value":{"address_class":"PRIVATE","ip_sha256":"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b"}}],"evidence":[{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-offhost"},"line":2},{"evidence":{"kind":"SANITIZED","text":"DST_HOST=<IP:PRIVATE:01df4a7e1c20cbeb>"},"line":4},{"evidence":{"kind":"SANITIZED","text":"<LONG:4a8eddddea83e58d>"},"line":5},{"evidence":{"kind":"SANITIZED","text":"REMOTE_LATEST=20260701T013054Z"},"line":7},{"evidence":{"kind":"SANITIZED","text":"REMOTE_FILES=30"},"line":8},{"evidence":{"kind":"SANITIZED","text":"REMOTE_SIZE=466M"},"line":9}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-offhost.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"24ad9010c9b2a63d0200e4eab876ed55d0a6674865ec29eba0e5ffa0cadb9caf"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-restore-validation"},"line":2},{"evidence":{"kind":"SANITIZED","text":"<LONG:dbae31e30e1c5fd4>/netbird-vps-backup.tgz"},"line":5},{"evidence":{"kind":"SANITIZED","text":"ROOT_NETBIRD_ENTRIES=7"},"line":9}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-restore.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"03182de1081e8461f8305079d0f1e53ab00801963b0f094053428bb9e4fddd0c"}},{"assignments":[{"key":"STATUS","kind":"SECRET_REDACTED","line":1,"line_sha256":"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692"}],"evidence":[{"evidence":{"kind":"REDACTED_SECRET_BEARING_LINE","line_sha256":"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692","var_refs":[]},"line":1}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-trust-clean-seal.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"1a9ca0f3db859fbb8ee746a8b92af49c40c32f6f447cec1beed77050a8acb15c"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=<IP:CGNAT_OVERLAY_CANDIDATE:5649415146501fa3> PUBLIC_VPS_IP=<IP:PUBLIC:f743a81d85de4022> PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md"},"line":1}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-trust-closure.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"130cdd6f02e08d3f6c81c06b9847451adae99e0a083cae5830079abe7a6917af"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"JOB_ID=netbird_vps_backup"},"line":4},{"evidence":{"kind":"SANITIZED","text":"JOB_NAME=netbird-vps-backup"},"line":5},{"evidence":{"kind":"SANITIZED","text":"TIMER=netbird-vps-backup.timer"},"line":7},{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-backup.service"},"line":8},{"evidence":{"kind":"SANITIZED","text":"<LONG:3da699c4b7695192>/0-netbird-vps-trust.txt"},"line":15},{"evidence":{"kind":"SANITIZED","text":"LEGACY_SOURCE_PATH=/var/lib/homelab-health/netbird-vps-trust.txt"},"line":21},{"evidence":{"kind":"SANITIZED","text":"CANONICAL_JOB_ID=netbird_vps_backup"},"line":22}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-trust.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"f7fba6fb4a8c37260757f75d0327db5e0c63d753d0e859d4f4c60df8bcbd3f2f"}},{"assignments":[{"key":"User","kind":"USER","line":9,"value":"root"}],"evidence":[{"evidence":{"kind":"SANITIZED","text":"Description=Create current ingress recovery artifact on cold standby node"},"line":2},{"evidence":{"kind":"SANITIZED","text":"User=root"},"line":9},{"evidence":{"kind":"SANITIZED","text":"<LONG:1f7afc3312fd233f>"},"line":11}],"role_hint":["SPB_INGRESS"],"source":{"basename":"homelab-ingress-standby-refresh.service","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"344df7907257f81499a2bdc6531b3f203edb4e4d3df0a586bbfe5a6b357ea02b"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"Description=Daily ingress cold standby recovery artifact refresh"},"line":2},{"evidence":{"kind":"SANITIZED","text":"Unit=homelab-ingress-standby-refresh.service"},"line":8}],"role_hint":["SPB_INGRESS"],"source":{"basename":"homelab-ingress-standby-refresh.timer","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"7c9e49d69d774458a73ef95449cfabb56b79e5601174bf609548a63ee197cdc7"}},{"assignments":[{"key":"VPS_IP","kind":"HOST","line":4,"value":{"address_class":"PUBLIC","ip_sha256":"f743a81d85de402239bdb782892adc0886327b57d99fdb0b889aaf4768e59620"}}],"evidence":[{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-backup"},"line":2},{"evidence":{"kind":"SANITIZED","text":"VPS_IP=<IP:PUBLIC:f743a81d85de4022>"},"line":4},{"evidence":{"kind":"SANITIZED","text":"<LONG:069b630e24267642>"},"line":5},{"evidence":{"kind":"SANITIZED","text":"<LONG:22cbb8d0af019715>"},"line":6}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-backup.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"ff0d6f530cf4369d1bd150444195b755fdd35211d2653282b9f7c4b94b185fe8"}},{"assignments":[{"key":"DST_HOST","kind":"HOST","line":4,"value":{"address_class":"PRIVATE","ip_sha256":"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b"}}],"evidence":[{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-offhost"},"line":2},{"evidence":{"kind":"SANITIZED","text":"DST_HOST=<IP:PRIVATE:01df4a7e1c20cbeb>"},"line":4},{"evidence":{"kind":"SANITIZED","text":"<LONG:4a8eddddea83e58d>"},"line":5},{"evidence":{"kind":"SANITIZED","text":"REMOTE_LATEST=20260701T013054Z"},"line":7},{"evidence":{"kind":"SANITIZED","text":"REMOTE_FILES=30"},"line":8},{"evidence":{"kind":"SANITIZED","text":"REMOTE_SIZE=466M"},"line":9}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-offhost.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"4daf227b611bbc2e721c8f827be86e845c18724d8dd011110fef7749dd59246b"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-restore-validation"},"line":2},{"evidence":{"kind":"SANITIZED","text":"<LONG:dbae31e30e1c5fd4>/netbird-vps-backup.tgz"},"line":5},{"evidence":{"kind":"SANITIZED","text":"ROOT_NETBIRD_ENTRIES=7"},"line":9}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-restore.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"016df98d88a53e58eb13a37c7448de465d5c626181e63a8c7e36508790679abc"}},{"assignments":[{"key":"STATUS","kind":"SECRET_REDACTED","line":1,"line_sha256":"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692"}],"evidence":[{"evidence":{"kind":"REDACTED_SECRET_BEARING_LINE","line_sha256":"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692","var_refs":[]},"line":1}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-trust-clean-seal.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"6c209e239afa21900a8a52e9bc48880daf3a471cc9a76782c8b4fe653584ae25"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=<IP:CGNAT_OVERLAY_CANDIDATE:5649415146501fa3> PUBLIC_VPS_IP=<IP:PUBLIC:f743a81d85de4022> PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md"},"line":1}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-trust-closure.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"59d5c1cbd74daa8014c62a4545760605ec77238a1befd138d9f60d989e61bfd0"}},{"assignments":[],"evidence":[{"evidence":{"kind":"SANITIZED","text":"JOB_ID=netbird_vps_backup"},"line":4},{"evidence":{"kind":"SANITIZED","text":"JOB_NAME=netbird-vps-backup"},"line":5},{"evidence":{"kind":"SANITIZED","text":"TIMER=netbird-vps-backup.timer"},"line":7},{"evidence":{"kind":"SANITIZED","text":"SERVICE=netbird-vps-backup.service"},"line":8},{"evidence":{"kind":"SANITIZED","text":"<LONG:3da699c4b7695192>/0-netbird-vps-trust.txt"},"line":15},{"evidence":{"kind":"SANITIZED","text":"LEGACY_SOURCE_PATH=/var/lib/homelab-health/netbird-vps-trust.txt"},"line":21},{"evidence":{"kind":"SANITIZED","text":"CANONICAL_JOB_ID=netbird_vps_backup"},"line":22}],"role_hint":["US_NETBIRD"],"source":{"basename":"netbird-vps-trust.txt","commit_ref_sha256":"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092","kind":"GIT","path_sha256":"7b48060cff67cb75166dd86dcd1f32cb4bc1ddd13da4d3c683b4480b5bb7a813"}}]}
INFRA172_JOURNAL_EVIDENCE={"rows":[{"rc":0,"selected_rows":[{"evidence":{"kind":"SANITIZED","text":"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging..."},"line":1},{"evidence":{"kind":"SANITIZED","text":"STATUS=OK TS=2026-07-14T01:28:39Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit"},"line":2},{"evidence":{"kind":"SANITIZED","text":"netbird-vps-backup.service: Deactivated successfully."},"line":3},{"evidence":{"kind":"SANITIZED","text":"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging."},"line":4},{"evidence":{"kind":"SANITIZED","text":"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging..."},"line":5},{"evidence":{"kind":"SANITIZED","text":"STATUS=OK TS=2026-07-15T01:39:00Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit"},"line":6},{"evidence":{"kind":"SANITIZED","text":"netbird-vps-backup.service: Deactivated successfully."},"line":7},{"evidence":{"kind":"SANITIZED","text":"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging."},"line":8},{"evidence":{"kind":"SANITIZED","text":"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging..."},"line":9},{"evidence":{"kind":"SANITIZED","text":"STATUS=OK TS=2026-07-16T01:25:14Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit"},"line":10},{"evidence":{"kind":"SANITIZED","text":"netbird-vps-backup.service: Deactivated successfully."},"line":11},{"evidence":{"kind":"SANITIZED","text":"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging."},"line":12},{"evidence":{"kind":"SANITIZED","text":"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging..."},"line":13},{"evidence":{"kind":"SANITIZED","text":"STATUS=OK TS=2026-07-17T01:31:14Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit"},"line":14},{"evidence":{"kind":"SANITIZED","text":"netbird-vps-backup.service: Deactivated successfully."},"line":15},{"evidence":{"kind":"SANITIZED","text":"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging."},"line":16}],"unit":"netbird-vps-backup.service"},{"rc":0,"selected_rows":[],"unit":"netbird-vps-backup-restore.service"},{"rc":0,"selected_rows":[],"unit":"netbird-vps-backup-offhost.service"},{"rc":0,"selected_rows":[{"evidence":{"kind":"SANITIZED","text":"Starting homelab-ingress-standby-refresh.service - Create current ingress recovery artifact on cold standby node..."},"line":1},{"evidence":{"kind":"SANITIZED","text":"homelab-ingress-standby-refresh.service: Main process exited, code=exited, status=1/FAILURE"},"line":2},{"evidence":{"kind":"SANITIZED","text":"homelab-ingress-standby-refresh.service: Failed with result 'exit-code'."},"line":3},{"evidence":{"kind":"SANITIZED","text":"Failed to start homelab-ingress-standby-refresh.service - Create current ingress recovery artifact on cold standby node."},"line":4}],"unit":"homelab-ingress-standby-refresh.service"}]}
INFRA172_ROUTE_CANDIDATES={"count":0,"rows":[]}
INFRA172_ROLE_ROUTE_SUMMARY={"MD_RELAY":{"historical_trusted_user_routes":[],"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]},"SPB_INGRESS":{"historical_trusted_user_routes":[],"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]},"US_NETBIRD":{"historical_trusted_user_routes":[],"route_candidates":[],"trusted_user_route_proven":false,"trusted_user_routes":[]}}
INFRA172_SUMMARY={"decision":"HOLD_EXTERNAL_SSH_HISTORICAL_ROUTE_INCOMPLETE","holds":["US_NETBIRD:TRUSTED_USER_ROUTE_NOT_PROVEN","MD_RELAY:TRUSTED_USER_ROUTE_NOT_PROVEN","SPB_INGRESS:TRUSTED_USER_ROUTE_NOT_PROVEN"],"roles_hold":["US_NETBIRD","MD_RELAY","SPB_INGRESS"],"roles_ready":[]}
EXTERNAL_SSH_ATTEMPTS=0
SSH_KEYSCAN_ATTEMPTS=0
KNOWN_HOSTS_WRITES=0
SSH_CONFIG_WRITES=0
CONFIGURATION_WRITES=0
FILE_WRITES_BY_PROBE=0
SECRETS_PRINTED=NO
INFRA172_END

OUTPUT_END
CHAT_OUTPUT_END
