1
0

runtime: publish SUPPORT-261005-SNIKKET-FINAL-OPS-SEAL-99600R1

This commit is contained in:
homelab-runtime-publisher
2026-10-05 09:52:21 +00:00
parent 15d13966b8
commit 425e845db5
4 changed files with 171 additions and 130 deletions
@@ -0,0 +1,38 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-261005-SNIKKET-FINAL-OPS-SEAL-99600R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "read-only",
"component": "snikket-final-ops-seal",
"started_at_utc": "2026-10-05T09:52:20Z",
"finished_at_utc": "2026-10-05T09:52:20Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "a7c877dea591432a6895318941ef6541ce0a56a5995f3c7f06bee5cdb572688c",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "227878d28d392d680e8629d6dc41651460fff74d937b6f3f6b3d41eb488226ee",
"sanitized_output_sha256": "227878d28d392d680e8629d6dc41651460fff74d937b6f3f6b3d41eb488226ee",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "SNIKKET_FINAL_OPS_SEAL_WRAPPER=V1\nMODE=read-only\nHOST_PVE01=true\nINGRESS_HOSTKEY_SELF_BOUND=true\nNO_VM_MUTATION=true\nNO_BACKUP_MUTATION=true\nNO_REMOTE_MUTATION=true\nNO_STATE_MUTATION=true\nNO_SOURCE_MUTATION=true\nNO_MONITOR_MUTATION=true\nNO_DNS_MUTATION=true\nSELF_EXACT_CODE_1=404\nSELF_EXACT_CODE_2=404\nSELF_EXACT_CODE_3=404\nSELF_EXACT_CODE_4=404\nSELF_EXACT_404X4=true\nPREV_TXT_HTTP=200\nPREV_JSON_HTTP=200\nHEAD_HTTP=200\nFINAL_PYTHON_RC=0\nRELAY_COMMAND_ID_MATCH=true\nRELAY_STATUS_OK=true\nRELAY_READONLY=true\nRELAY_SELF_404X4=true\nRELAY_PASS_TRUE=true\nRELAY_PREV_99598_OK=true\nHOSTNAME_HARNESS_EFFECT_PROVEN=false\nFRESH_RUNTIME_HEAD_ID=15d13966b8d1435d215798fc289c3f7878c1821b\nFRESH_RUNTIME_HEAD_MESSAGE_SHA256=024d9beb9517880623a3500dd4f5b6564691c49486ef2574121e434e0831ea83\nFINAL_PRECONDITION_GATE=false\nFINAL_OPERATIONAL_ACCEPTANCE_PASS=false\nROOT_CAUSE_CLASS=HOSTNAME_RCA_RELAY_NOT_PROVEN\nDECISION=HOLD_SNIKKET_FINAL_OPS_SEAL\nNEXT_GATE=SNIKKET_HOSTNAME_RCA_RESULT_RECONCILE\nTASK_RESULT=HOLD_SNIKKET_OPERATIONAL_FINAL_SEAL\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nFINAL_PYTHON_STDERR_BYTES=0\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\n"
}
@@ -0,0 +1,76 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-261005-SNIKKET-FINAL-OPS-SEAL-99600R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=snikket-final-ops-seal
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=a7c877dea591432a6895318941ef6541ce0a56a5995f3c7f06bee5cdb572688c
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=227878d28d392d680e8629d6dc41651460fff74d937b6f3f6b3d41eb488226ee
SANITIZED_OUTPUT_SHA256=227878d28d392d680e8629d6dc41651460fff74d937b6f3f6b3d41eb488226ee
OUTPUT_BEGIN
SNIKKET_FINAL_OPS_SEAL_WRAPPER=V1
MODE=read-only
HOST_PVE01=true
INGRESS_HOSTKEY_SELF_BOUND=true
NO_VM_MUTATION=true
NO_BACKUP_MUTATION=true
NO_REMOTE_MUTATION=true
NO_STATE_MUTATION=true
NO_SOURCE_MUTATION=true
NO_MONITOR_MUTATION=true
NO_DNS_MUTATION=true
SELF_EXACT_CODE_1=404
SELF_EXACT_CODE_2=404
SELF_EXACT_CODE_3=404
SELF_EXACT_CODE_4=404
SELF_EXACT_404X4=true
PREV_TXT_HTTP=200
PREV_JSON_HTTP=200
HEAD_HTTP=200
FINAL_PYTHON_RC=0
RELAY_COMMAND_ID_MATCH=true
RELAY_STATUS_OK=true
RELAY_READONLY=true
RELAY_SELF_404X4=true
RELAY_PASS_TRUE=true
RELAY_PREV_99598_OK=true
HOSTNAME_HARNESS_EFFECT_PROVEN=false
FRESH_RUNTIME_HEAD_ID=15d13966b8d1435d215798fc289c3f7878c1821b
FRESH_RUNTIME_HEAD_MESSAGE_SHA256=024d9beb9517880623a3500dd4f5b6564691c49486ef2574121e434e0831ea83
FINAL_PRECONDITION_GATE=false
FINAL_OPERATIONAL_ACCEPTANCE_PASS=false
ROOT_CAUSE_CLASS=HOSTNAME_RCA_RELAY_NOT_PROVEN
DECISION=HOLD_SNIKKET_FINAL_OPS_SEAL
NEXT_GATE=SNIKKET_HOSTNAME_RCA_RESULT_RECONCILE
TASK_RESULT=HOLD_SNIKKET_OPERATIONAL_FINAL_SEAL
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
FINAL_PYTHON_STDERR_BYTES=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
OUTPUT_END
CHAT_OUTPUT_END
+11 -11
View File
File diff suppressed because one or more lines are too long
+46 -119
View File
@@ -1,22 +1,22 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-261005-HOME-GRAM1-NETBIRD-PEER-DNS-POLICY-RCA-99599R1
STATUS=FAIL
RC=52
COMMAND_ID=SUPPORT-261005-SNIKKET-FINAL-OPS-SEAL-99600R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=home-gram1-netbird-peer-dns-policy-rca
COMPONENT=snikket-final-ops-seal
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=a57b891fd2971bb26a4c101ed2507e8c6833907b817e0de6daee5ff3a5d28e63
COMMAND_SHA256=a7c877dea591432a6895318941ef6541ce0a56a5995f3c7f06bee5cdb572688c
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=52
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
@@ -24,122 +24,49 @@ MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=3e4f1879b00ba16d89d6709bc923bab558aa7be4cbca2319e9cfcdfef16019ad
SANITIZED_OUTPUT_SHA256=3e4f1879b00ba16d89d6709bc923bab558aa7be4cbca2319e9cfcdfef16019ad
RAW_EVIDENCE_SHA256=227878d28d392d680e8629d6dc41651460fff74d937b6f3f6b3d41eb488226ee
SANITIZED_OUTPUT_SHA256=227878d28d392d680e8629d6dc41651460fff74d937b6f3f6b3d41eb488226ee
OUTPUT_BEGIN
HOME_GRAM1_NETBIRD_PEER_DNS_POLICY_RCA=V1
NO_LOCAL_WINDOWS_MUTATION=true
NO_NETBIRD_CLIENT_MUTATION=true
NO_NETBIRD_SERVER_MUTATION=true
NO_DNS_POLICY_MUTATION=true
NO_GROUP_MUTATION=true
NO_SERVER_RESTART=true
SNIKKET_FINAL_OPS_SEAL_WRAPPER=V1
MODE=read-only
HOST_PVE01=true
L_PEER_DIAG_OK=true
L_NB_PRESENT=true
L_NB_CONNECTED=true
L_NB_STATUS_SHA=MISSING
L_NB_DETAIL_SHA=MISSING
L_PC_HOSTNAME_SHA=MISSING
L_NB_ADAPTER_COUNT=1
L_NB_IP_COUNT=1
L_NB_IP_1_SHA=MISSING
L_NB_IP_2_SHA=MISSING
L_NB_IP_3_SHA=MISSING
L_NB_IP_4_SHA=MISSING
L_NB_IP_5_SHA=MISSING
L_STATUS_HOSTNAME_HINT_SHA=MISSING
L_STATUS_IP_HINT_SHA=MISSING
L_HOME_DNS_COUNT=1
NB_SSH_ALIAS_COUNT=0
SOURCE_1_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_2_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_3_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_4_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_5_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_6_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_7_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_8_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_9_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_10_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_11_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_12_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_13_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_14_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_15_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_16_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_17_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_18_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_19_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_20_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_21_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_22_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_23_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_24_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_25_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_26_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_27_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_28_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_29_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_30_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_31_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_32_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_33_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_34_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_35_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_36_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_37_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_38_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_39_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_40_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_41_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_42_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_43_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_44_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_45_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_46_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_47_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_48_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_49_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_50_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_51_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_52_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_53_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_54_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_55_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_56_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_57_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_58_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_59_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_60_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_61_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_62_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_63_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_64_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_65_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_66_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_67_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_68_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_69_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_70_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_71_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_72_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_73_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_74_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_75_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_76_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_77_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_78_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_79_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_80_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_MATCH_COUNT=80
NB_SSH_TRY_e16ce208_RC=255
NB_SERVER_REACHABLE=false
RCA_CLASS=NETBIRD_SERVER_NOT_REACHABLE_FROM_PVE01
DECISION=HOLD_NETBIRD_PEER_DNS_POLICY_RCA
NEXT_GATE=NETBIRD_SERVER_ACCESS_RECONCILE
TASK_RESULT=HOME_GRAM1_NETBIRD_PEER_DNS_POLICY_RCA
INGRESS_HOSTKEY_SELF_BOUND=true
NO_VM_MUTATION=true
NO_BACKUP_MUTATION=true
NO_REMOTE_MUTATION=true
NO_STATE_MUTATION=true
NO_SOURCE_MUTATION=true
NO_MONITOR_MUTATION=true
NO_DNS_MUTATION=true
SELF_EXACT_CODE_1=404
SELF_EXACT_CODE_2=404
SELF_EXACT_CODE_3=404
SELF_EXACT_CODE_4=404
SELF_EXACT_404X4=true
PREV_TXT_HTTP=200
PREV_JSON_HTTP=200
HEAD_HTTP=200
FINAL_PYTHON_RC=0
RELAY_COMMAND_ID_MATCH=true
RELAY_STATUS_OK=true
RELAY_READONLY=true
RELAY_SELF_404X4=true
RELAY_PASS_TRUE=true
RELAY_PREV_99598_OK=true
HOSTNAME_HARNESS_EFFECT_PROVEN=false
FRESH_RUNTIME_HEAD_ID=15d13966b8d1435d215798fc289c3f7878c1821b
FRESH_RUNTIME_HEAD_MESSAGE_SHA256=024d9beb9517880623a3500dd4f5b6564691c49486ef2574121e434e0831ea83
FINAL_PRECONDITION_GATE=false
FINAL_OPERATIONAL_ACCEPTANCE_PASS=false
ROOT_CAUSE_CLASS=HOSTNAME_RCA_RELAY_NOT_PROVEN
DECISION=HOLD_SNIKKET_FINAL_OPS_SEAL
NEXT_GATE=SNIKKET_HOSTNAME_RCA_RESULT_RECONCILE
TASK_RESULT=HOLD_SNIKKET_OPERATIONAL_FINAL_SEAL
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
FINAL_PYTHON_STDERR_BYTES=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null