CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-NETBIRD-TRUSTEDPATH-DISCOVERY11
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=newfi-stagingedge-netbird-trustedpath-discovery-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=0a2978e059f179306f2837a519ca9bfb6564bc3310e174392472e8847b3508d6
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=df7df330d75ac609c04c83316f088906b7687eec55dfe5b2f92c1019ee065d39
SANITIZED_OUTPUT_SHA256=fa0f4f51da57bf621027059915562fefe256db077b5ff1a1cfc50daa7a0a75e0
OUTPUT_BEGIN
DISCOVERY11_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-NETBIRD-TRUSTEDPATH-DISCOVERY11
MODE=read-only
MUTATIONS_PERFORMED=NO
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
TRUST_FILE_PRESENT=true
TRUST_FILE_SHA256=092eaa2c4f3a5f623e9440135d36e6bae7d8ae46a03d380d14a5e95657812b61
TRUSTED_NETBIRD_IDENTITY_EDGEVM=true
PUBLIC_VPS_REJECTED_HOSTKEY_MISMATCH=true
TRUST_SEAL_STATUS_OK_SIGNAL=true
NETBIRD_STATUS_JSON_RC=0
NETBIRD_STATUS_DETAIL_RC=0
EDGEVM_OVERLAY_IP_COUNT=1
EDGEVM_OVERLAY_IP_UNIQUE=true
EDGEVM_KNOWN_HOST_RC=0
EDGEVM_KNOWN_HOST_KEY_COUNT=1
EDGEVM_KNOWN_HOST_HASHES={"ssh-ed25519":"0e70c47cbb89d3651089d1c7b16e31a69def06234236cd16ccb801fdeae7b0d1"}
EDGEVM_KEYSCAN_RC=0
EDGEVM_KEYSCAN_KEY_COUNT=3
EDGEVM_KEYSCAN_HASHES={"ecdsa-sha2-nistp256":"2408a3334d153e2aca1071a5bdc7404a479db925bf6fabe31a33b1d24103243a","ssh-ed25519":"0e70c47cbb89d3651089d1c7b16e31a69def06234236cd16ccb801fdeae7b0d1","ssh-rsa":"dd7e969c71686f792e368eb8ea3218ba287c9bd8d929b526c9f9411de2f1e338"}
EDGEVM_EXISTING_HOSTKEY_MATCH=true
EDGEVM_EXISTING_HOSTKEY_ALGORITHMS=ssh-ed25519
DERIVED_SSH_USER_COUNT=3
DERIVED_SSH_USERS=debian,edgeadmin,root
DERIVED_SSH_USER_REFS=[{"path":"/root/post-reboot-pve01-check.sh","line":32,"user":"debian","kind":"user_at_target"},{"path":"/var/lib/homelab-netbird-vps-trust/latest.md","line":64,"user":"debian","kind":"scoped_assignment","var":"REMOTE_USER"},{"path":"/var/lib/homelab-netbird-vps-trust/latest.md","line":78,"user":"debian","kind":"scoped_assignment","var":"REMOTE_USER"},{"path":"/srv/homelab-ops/docs/superpowers/specs/2026-08-17-snikket-edge-cutover-design.md","line":16,"user":"root","kind":"user_at_target"},{"path":"/srv/homelab-ops/docs/superpowers/plans/2026-08-18-gitea-edge-publisher-v3.md","line":845,"user":"edgeadmin","kind":"user_at_target"},{"path":"/srv/homelab-ops/tasks/snikket-edge-cutover-v1/tools/cutover.py","line":16,"user":"debian","kind":"user_at_target"}]
TRUSTED_PATH_SOURCE_EVIDENCE=[{"path":"/usr/local/sbin/homelab-vps-identity-audit","line":14,"text":"ssh-keygen -F \"$VPS_IP\" -f [SENSITIVE_PATH] > \"$TMP/old-ip-known-hosts.txt\" 2>/dev/null || true"},{"path":"/usr/local/sbin/homelab-vps-identity-audit","line":15,"text":"ssh-keygen -F \"$VPS_ALIAS\" -f [SENSITIVE_PATH] > \"$TMP/old-alias-known-hosts.txt\" 2>/dev/null || true"},{"path":"/usr/local/sbin/homelab-vps-identity-audit","line":20,"text":"ssh-keyscan -T 10 -t ed25519,rsa,ecdsa \"$VPS_IP\" > \"$TMP/current-known-hosts\" 2>/dev/null || true"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":12,"text":"grep -q \"TRUSTED_NETBIRD_IDENTITY=edge-vm\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":13,"text":"grep -q \"PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":38,"text":"trusted_netbird_identity=edge-vm"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":41,"text":"public_vps_decision=REJECTED_HOSTKEY_MISMATCH"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":46,"text":"closed_tail=public_vps_rejected_hostkey_mismatch"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":51,"text":"echo \"STATUS=$STATUS TS=$TS TYPE=external-probe-vps BAD=$BAD WARN=$WARN MODE=STRATEGY_ONLY_NO_INDEPENDENT_RUNNER DEPLOYED=NO DEPLOY_DECISION=NO_DEPLOY VPS_TRUST=edge_vm_trusted_public_vps_rejected BACKUP_HOSTKEYS=not_used_public_vps_rejected PVE01_PUBLIC_SMOKE_BAD=$PVE01_PUBLIC_SMOKE_BAD INDEPENDENT_RUNNER=missing INDEPENDENT_RUNNER_AVAILABLE=no TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_"},{"path":"/var/lib/homelab-netbird-vps-trust/closure-latest.md","line":14,"text":"trusted_netbird_identity=edge-vm"},{"path":"/var/lib/homelab-netbird-vps-trust/closure-latest.md","line":16,"text":"edge_vm_netbird_peer_ok=1"},{"path":"/var/lib/homelab-netbird-vps-trust/closure-latest.md","line":18,"text":"public_vps_decision=REJECTED_HOSTKEY_MISMATCH"},{"path":"/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md","line":10,"text":"trusted_netbird_identity=edge-vm"},{"path":"/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md","line":13,"text":"public_vps_decision=REJECTED_HOSTKEY_MISMATCH"},{"path":"/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md","line":22,"text":"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md"},{"path":"/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md","line":23,"text":"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=external-probe-runner-decision BAD=0 WARN=0 MODE=NO_DEPLOY_DECISION INDEPENDENT_RUNNER_AVAILABLE=no DEPLOY_DECISION=NO_DEPLOY REASON=netbird_alias_is_edge_vm_and_public_vps_hostkey_mismatch TRUSTED_EDGE_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH REPORT=/var/lib/homelab-external-probe-vps/runner-decision-latest.md"}]
SAFE_NETBIRD_SSH_GATE=false
SAFE_NETBIRD_SSH_USER=UNRESOLVED
REMOTE_INSPECTION_RAN=false
REMOTE_INSPECTION_RC=SKIPPED
REMOTE_NGINX_FILTERED_LINE_COUNT=0
DISCOVERY11_DECISION=HOLD_TRUSTED_PATH_SSH_USER_AMBIGUOUS
DISCOVERY11_END=true

OUTPUT_END
CHAT_OUTPUT_END
