runtime: publish SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1

runtime/history/SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "workers2-independent-cloud-readonly-gate",
+  "started_at_utc": "2026-10-09T12:15:19Z",
+  "finished_at_utc": "2026-10-09T12:15:20Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "3c9bdca791f88db4594813543492d7695f107a5cc615a15cab110c4f212e6af2",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8",
+  "sanitized_output_sha256": "dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "WORKERS2_INDEPENDENT_CLOUD_READONLY_GATE=V1\nMODE=read-only\nNO_BACKUP_OR_NATIVE_VERIFIER_EXECUTED=true\nNO_SYSTEMD_OR_PVE_MUTATION=true\nNO_PRODUCTION_CONFIG_WRITES=true\nRCLONE_IF_EXECUTED_READ_SUBCOMMAND_ONLY=true\nCLOUD_SEAL_READBACK_PROVEN=false\nPINNED_HOST=true\nREGISTRY_PIN_OK=true\nLAUNCHER_PIN_OK=true\nAUDIT_PIN_OK=true\nREGISTRY_CT112_COUNT=1\nREGISTRY_CT112_ENABLED=true\nREGISTRY_VM101_COUNT=1\nREGISTRY_VM101_ENABLED=true\nSTATE_DOCUMENTS=33\nREPLICA_DOCS=26\nREPLICA_DICTIONARIES=52\nCT112_FILENAME_ANCHORS=1\nVM101_FILENAME_ANCHORS=1\nREPLICA_FIELDS_CRYPT_PHYSICAL_ONLY=true\nCT112_VM101_IDENTITY_INSIDE_DOC_PROVEN=false\nRCLONE_CONFIG_CANONICAL_CANDIDATES=5\nRCLONE_CONFIG_TRUSTED_FOUND=1\nRCLONE_CONFIG_UNTRUSTED_FOUND=0\nCONFIG_CONTENT_READ_PRIVATE=true\nCONFIG_GATE=PARSED_OFFLINE\nREPLICA_CRYPT_DISTINCT_VALUES=11\nREPLICA_PHYSICAL_DISTINCT_VALUES=11\nREPLICA_CRYPT_EQUALS_PHYSICAL_ELEMENTS=0\nREPLICA_SAME_CRYPT_WITHIN_PAIR=0\nREPLICA_SAME_PHYSICAL_WITHIN_PAIR=0\nCONFIG_REMOTE_SECTIONS=26\nCONFIG_CRYPT_BACKENDS=13\nCONFIG_STORAGE_BACKENDS=13\nCONFIG_CRYPT_REF_RESOLVED=13\nCONFIG_CRYPT_REF_UNRESOLVED=0\nREPLICA_CRYPT_NAMES_MATCH_CONFIG_CRYPT=52\nREPLICA_PHYSICAL_NAMES_MATCH_CONFIG=52\nREPLICA_CONFIG_MATCH_PROVES_REMOTE_OBJECT_EXISTS=false\nCT112_VM101_CLOUD_MAPPING_PROVEN=false\nCT112_REPLICA_PAIR_PRESENT=true\nCT112_CRYPT_MATCHED_CONFIG=2\nCT112_PHYSICAL_MATCHED_CONFIG=2\nCT112_CONFIG_CRYPT_PAIR_DISTINCT=true\nCT112_CONFIG_PHYSICAL_PAIR_DISTINCT=true\nVM101_REPLICA_PAIR_PRESENT=true\nVM101_CRYPT_MATCHED_CONFIG=2\nVM101_PHYSICAL_MATCHED_CONFIG=2\nVM101_CONFIG_CRYPT_PAIR_DISTINCT=true\nVM101_CONFIG_PHYSICAL_PAIR_DISTINCT=true\nCONFIG_LINKS_PROVE_PRODUCTION_CREDENTIAL_USE=false\nCLOUD_REPLICA_INDEPENDENCE_PROVEN=false\nSOURCE_FILES_READ=405\nSOURCE_FILES_FILTERED=1\nSOURCE_FILES_SKIPPED=0\nSOURCE_DIRS=52\nPINNED_WRAPPER_COUNT=1\nENTRY504_CANDIDATES=2\nPINNED_ENTRY504_COUNT=1\nPINNED_ENTRY_HAS_WRAPPER_SHA=true\nPINNED_ENTRY_HAS_WRAPPER_NAME=true\nENTRY_WRAPPER_SAME_RELEASE=false\nPINNED_ENTRY_SHA12=f06d526879c8\nPINNED_WRAPPER_SHA12=6f8dc6e71eaa\nENTRY_RELEASE_ROOT_SHA12=50a47e615a07\nWRAPPER_RELEASE_ROOT_SHA12=cd28576c43a3\nSOURCE_RELEASE_PYFILES=27\nSOURCE_CLOUD_CONFIG_EXACT_PATH_LITERALS=1\nSELECTED_CONFIG_SOURCE_LITERAL_MATCHES=1\nSOURCE_PROCESS_API_CALLS=29\nSOURCE_FUNCTIONS_READING_BOTH_REPLICA_KEYS=2\nACTIVE_CONFIG_SELECTED_BY_NATIVE_PROVEN=false\nNATIVE_READBACK_ARGV_PROVEN_SAFE=false\nNATIVE_MODULE_IMPORTED_OR_EXECUTED=false\nSTATE_SECOND_PASS_STABLE=33\nSTATE_ATOMIC_SNAPSHOT_PROVEN=false\nCONFIG_SECOND_PASS_STABLE=true\nCT112_REPLICA_PAIR_COUNT=2\nVM101_REPLICA_PAIR_COUNT=2\nREADONLY_BACKEND_ALLOWLIST_TYPES=7\nREADONLY_SELECTED_ROUTES=0\nREADONLY_SCOPE_TARGETS=2\nREADONLY_SCOPE_MAX_REMOTE_REQUESTS=4\nREADONLY_SCOPE_RECURSIVE=false\nREADONLY_SCOPE_MAX_OUTPUT_BYTES=196608\nREADONLY_SCOPE_SECONDS_PER_REMOTE=18\nCT112_ROUTES_VALIDATED=0\nCT112_TWO_DISTINCT_CONFIG_BACKENDS=false\nVM101_ROUTES_VALIDATED=0\nVM101_TWO_DISTINCT_CONFIG_BACKENDS=false\nBACKEND_SELECTOR_GATE=BACKEND_TYPE_NOT_ALLOWLISTED\nREMOTE_BACKENDS_PHYSICALLY_INDEPENDENT_PROVEN=false\nCREDENTIAL_REFRESH_RISK_GATE=NOT_EVALUATED_BLOCKED_SELECTOR\nREMOTE_PROBE_GATE=PRECONDITIONS_NOT_MET\nREADONLY_CLOUD_REQUESTS_EXECUTED=0\nREADONLY_LISTING_ALL_OK=false\nREADONLY_REMOTE_OBJECTS_SEAL_VERIFIED=false\nREMOTE_LISTING_ATTEMPTED=false\nCLOUD_NETWORK_IO_PERFORMED=false\nRCLONE_PROCESS_EXECUTED=false\nCT112_TWO_SEALED_REPLICAS=unverified\nVM101_TWO_SEALED_REPLICAS=unverified\nRPO_GFS=unverified\nISOLATED_DR=unverified\nFULL_AUDIT_COMPLETE=false\nDECISION=READONLY_CLOUD_GATE_CAPTURED\nNEXT_GATE=VERIFY_SEAL_MANIFEST_AND_RPO_IF_LISTED_ELSE_RESOLVE_GATE\nROOT_CAUSE_PROVEN=false\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}

runtime/history/SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1.txt

@@ -0,0 +1,147 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=workers2-independent-cloud-readonly-gate
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=3c9bdca791f88db4594813543492d7695f107a5cc615a15cab110c4f212e6af2
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8
+SANITIZED_OUTPUT_SHA256=dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8
+OUTPUT_BEGIN
+WORKERS2_INDEPENDENT_CLOUD_READONLY_GATE=V1
+MODE=read-only
+NO_BACKUP_OR_NATIVE_VERIFIER_EXECUTED=true
+NO_SYSTEMD_OR_PVE_MUTATION=true
+NO_PRODUCTION_CONFIG_WRITES=true
+RCLONE_IF_EXECUTED_READ_SUBCOMMAND_ONLY=true
+CLOUD_SEAL_READBACK_PROVEN=false
+PINNED_HOST=true
+REGISTRY_PIN_OK=true
+LAUNCHER_PIN_OK=true
+AUDIT_PIN_OK=true
+REGISTRY_CT112_COUNT=1
+REGISTRY_CT112_ENABLED=true
+REGISTRY_VM101_COUNT=1
+REGISTRY_VM101_ENABLED=true
+STATE_DOCUMENTS=33
+REPLICA_DOCS=26
+REPLICA_DICTIONARIES=52
+CT112_FILENAME_ANCHORS=1
+VM101_FILENAME_ANCHORS=1
+REPLICA_FIELDS_CRYPT_PHYSICAL_ONLY=true
+CT112_VM101_IDENTITY_INSIDE_DOC_PROVEN=false
+RCLONE_CONFIG_CANONICAL_CANDIDATES=5
+RCLONE_CONFIG_TRUSTED_FOUND=1
+RCLONE_CONFIG_UNTRUSTED_FOUND=0
+CONFIG_CONTENT_READ_PRIVATE=true
+CONFIG_GATE=PARSED_OFFLINE
+REPLICA_CRYPT_DISTINCT_VALUES=11
+REPLICA_PHYSICAL_DISTINCT_VALUES=11
+REPLICA_CRYPT_EQUALS_PHYSICAL_ELEMENTS=0
+REPLICA_SAME_CRYPT_WITHIN_PAIR=0
+REPLICA_SAME_PHYSICAL_WITHIN_PAIR=0
+CONFIG_REMOTE_SECTIONS=26
+CONFIG_CRYPT_BACKENDS=13
+CONFIG_STORAGE_BACKENDS=13
+CONFIG_CRYPT_REF_RESOLVED=13
+CONFIG_CRYPT_REF_UNRESOLVED=0
+REPLICA_CRYPT_NAMES_MATCH_CONFIG_CRYPT=52
+REPLICA_PHYSICAL_NAMES_MATCH_CONFIG=52
+REPLICA_CONFIG_MATCH_PROVES_REMOTE_OBJECT_EXISTS=false
+CT112_VM101_CLOUD_MAPPING_PROVEN=false
+CT112_REPLICA_PAIR_PRESENT=true
+CT112_CRYPT_MATCHED_CONFIG=2
+CT112_PHYSICAL_MATCHED_CONFIG=2
+CT112_CONFIG_CRYPT_PAIR_DISTINCT=true
+CT112_CONFIG_PHYSICAL_PAIR_DISTINCT=true
+VM101_REPLICA_PAIR_PRESENT=true
+VM101_CRYPT_MATCHED_CONFIG=2
+VM101_PHYSICAL_MATCHED_CONFIG=2
+VM101_CONFIG_CRYPT_PAIR_DISTINCT=true
+VM101_CONFIG_PHYSICAL_PAIR_DISTINCT=true
+CONFIG_LINKS_PROVE_PRODUCTION_CREDENTIAL_USE=false
+CLOUD_REPLICA_INDEPENDENCE_PROVEN=false
+SOURCE_FILES_READ=405
+SOURCE_FILES_FILTERED=1
+SOURCE_FILES_SKIPPED=0
+SOURCE_DIRS=52
+PINNED_WRAPPER_COUNT=1
+ENTRY504_CANDIDATES=2
+PINNED_ENTRY504_COUNT=1
+PINNED_ENTRY_HAS_WRAPPER_SHA=true
+PINNED_ENTRY_HAS_WRAPPER_NAME=true
+ENTRY_WRAPPER_SAME_RELEASE=false
+PINNED_ENTRY_SHA12=f06d526879c8
+PINNED_WRAPPER_SHA12=6f8dc6e71eaa
+ENTRY_RELEASE_ROOT_SHA12=50a47e615a07
+WRAPPER_RELEASE_ROOT_SHA12=cd28576c43a3
+SOURCE_RELEASE_PYFILES=27
+SOURCE_CLOUD_CONFIG_EXACT_PATH_LITERALS=1
+SELECTED_CONFIG_SOURCE_LITERAL_MATCHES=1
+SOURCE_PROCESS_API_CALLS=29
+SOURCE_FUNCTIONS_READING_BOTH_REPLICA_KEYS=2
+ACTIVE_CONFIG_SELECTED_BY_NATIVE_PROVEN=false
+NATIVE_READBACK_ARGV_PROVEN_SAFE=false
+NATIVE_MODULE_IMPORTED_OR_EXECUTED=false
+STATE_SECOND_PASS_STABLE=33
+STATE_ATOMIC_SNAPSHOT_PROVEN=false
+CONFIG_SECOND_PASS_STABLE=true
+CT112_REPLICA_PAIR_COUNT=2
+VM101_REPLICA_PAIR_COUNT=2
+READONLY_BACKEND_ALLOWLIST_TYPES=7
+READONLY_SELECTED_ROUTES=0
+READONLY_SCOPE_TARGETS=2
+READONLY_SCOPE_MAX_REMOTE_REQUESTS=4
+READONLY_SCOPE_RECURSIVE=false
+READONLY_SCOPE_MAX_OUTPUT_BYTES=196608
+READONLY_SCOPE_SECONDS_PER_REMOTE=18
+CT112_ROUTES_VALIDATED=0
+CT112_TWO_DISTINCT_CONFIG_BACKENDS=false
+VM101_ROUTES_VALIDATED=0
+VM101_TWO_DISTINCT_CONFIG_BACKENDS=false
+BACKEND_SELECTOR_GATE=BACKEND_TYPE_NOT_ALLOWLISTED
+REMOTE_BACKENDS_PHYSICALLY_INDEPENDENT_PROVEN=false
+CREDENTIAL_REFRESH_RISK_GATE=NOT_EVALUATED_BLOCKED_SELECTOR
+REMOTE_PROBE_GATE=PRECONDITIONS_NOT_MET
+READONLY_CLOUD_REQUESTS_EXECUTED=0
+READONLY_LISTING_ALL_OK=false
+READONLY_REMOTE_OBJECTS_SEAL_VERIFIED=false
+REMOTE_LISTING_ATTEMPTED=false
+CLOUD_NETWORK_IO_PERFORMED=false
+RCLONE_PROCESS_EXECUTED=false
+CT112_TWO_SEALED_REPLICAS=unverified
+VM101_TWO_SEALED_REPLICAS=unverified
+RPO_GFS=unverified
+ISOLATED_DR=unverified
+FULL_AUDIT_COMPLETE=false
+DECISION=READONLY_CLOUD_GATE_CAPTURED
+NEXT_GATE=VERIFY_SEAL_MANIFEST_AND_RPO_IF_LISTED_ELSE_RESOLVE_GATE
+ROOT_CAUSE_PROVEN=false
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_PRODUCTION_MUTATION
+END_MARKER=true
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.json

@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-261009-WORKERS2-OFFLINE-CLOUD-CONFIG-JOIN-99943R1",
+  "command_id": "SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "workers2-offline-cloud-config-join",
-  "started_at_utc": "2026-10-09T11:57:29Z",
-  "finished_at_utc": "2026-10-09T11:57:29Z",
+  "component": "workers2-independent-cloud-readonly-gate",
+  "started_at_utc": "2026-10-09T12:15:19Z",
+  "finished_at_utc": "2026-10-09T12:15:20Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "c2a79ca63e7b7fcca1dc74a2fcc524cad60c648d6efcb2898958d7b4dc128fab",
+  "command_sha256": "3c9bdca791f88db4594813543492d7695f107a5cc615a15cab110c4f212e6af2",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "65875d98daedbe8d2b120c9a8a6f603d16ed74e4032584d290464838bab1b97b",
-  "sanitized_output_sha256": "65875d98daedbe8d2b120c9a8a6f603d16ed74e4032584d290464838bab1b97b",
+  "raw_evidence_sha256": "dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8",
+  "sanitized_output_sha256": "dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "WORKERS2_OFFLINE_CLOUD_CONFIG_JOIN=V1\nMODE=read-only\nNO_CLOUD_IO=true\nNO_PRODUCTION_BACKUP_EXECUTED=true\nNO_NATIVE_MODULE_IMPORT=true\nNO_SERVICE_OR_VM_MUTATION=true\nPINNED_HOST=true\nREGISTRY_PIN_OK=true\nLAUNCHER_PIN_OK=true\nAUDIT_PIN_OK=true\nREGISTRY_CT112_COUNT=1\nREGISTRY_CT112_ENABLED=true\nREGISTRY_VM101_COUNT=1\nREGISTRY_VM101_ENABLED=true\nSTATE_DOCUMENTS=33\nREPLICA_DOCS=26\nREPLICA_DICTIONARIES=52\nCT112_FILENAME_ANCHORS=1\nVM101_FILENAME_ANCHORS=1\nREPLICA_FIELDS_CRYPT_PHYSICAL_ONLY=true\nCT112_VM101_IDENTITY_INSIDE_DOC_PROVEN=false\nRCLONE_CONFIG_CANONICAL_CANDIDATES=5\nRCLONE_CONFIG_TRUSTED_FOUND=1\nRCLONE_CONFIG_UNTRUSTED_FOUND=0\nCONFIG_CONTENT_READ_PRIVATE=true\nCONFIG_GATE=PARSED_OFFLINE\nREPLICA_CRYPT_DISTINCT_VALUES=11\nREPLICA_PHYSICAL_DISTINCT_VALUES=11\nREPLICA_CRYPT_EQUALS_PHYSICAL_ELEMENTS=0\nREPLICA_SAME_CRYPT_WITHIN_PAIR=0\nREPLICA_SAME_PHYSICAL_WITHIN_PAIR=0\nCONFIG_REMOTE_SECTIONS=26\nCONFIG_CRYPT_BACKENDS=13\nCONFIG_STORAGE_BACKENDS=13\nCONFIG_CRYPT_REF_RESOLVED=13\nCONFIG_CRYPT_REF_UNRESOLVED=0\nREPLICA_CRYPT_NAMES_MATCH_CONFIG_CRYPT=52\nREPLICA_PHYSICAL_NAMES_MATCH_CONFIG=52\nREPLICA_CONFIG_MATCH_PROVES_REMOTE_OBJECT_EXISTS=false\nCT112_VM101_CLOUD_MAPPING_PROVEN=false\nCT112_REPLICA_PAIR_PRESENT=true\nCT112_CRYPT_MATCHED_CONFIG=2\nCT112_PHYSICAL_MATCHED_CONFIG=2\nCT112_CONFIG_CRYPT_PAIR_DISTINCT=true\nCT112_CONFIG_PHYSICAL_PAIR_DISTINCT=true\nVM101_REPLICA_PAIR_PRESENT=true\nVM101_CRYPT_MATCHED_CONFIG=2\nVM101_PHYSICAL_MATCHED_CONFIG=2\nVM101_CONFIG_CRYPT_PAIR_DISTINCT=true\nVM101_CONFIG_PHYSICAL_PAIR_DISTINCT=true\nCONFIG_LINKS_PROVE_PRODUCTION_CREDENTIAL_USE=false\nCLOUD_REPLICA_INDEPENDENCE_PROVEN=false\nSOURCE_FILES_READ=405\nSOURCE_FILES_FILTERED=1\nSOURCE_FILES_SKIPPED=0\nSOURCE_DIRS=52\nPINNED_WRAPPER_COUNT=1\nENTRY504_CANDIDATES=2\nPINNED_ENTRY504_COUNT=1\nPINNED_ENTRY_HAS_WRAPPER_SHA=true\nPINNED_ENTRY_HAS_WRAPPER_NAME=true\nENTRY_WRAPPER_SAME_RELEASE=false\nPINNED_ENTRY_SHA12=f06d526879c8\nPINNED_WRAPPER_SHA12=6f8dc6e71eaa\nENTRY_RELEASE_ROOT_SHA12=50a47e615a07\nWRAPPER_RELEASE_ROOT_SHA12=cd28576c43a3\nSOURCE_RELEASE_PYFILES=27\nSOURCE_CLOUD_CONFIG_EXACT_PATH_LITERALS=1\nSOURCE_PROCESS_API_CALLS=29\nSOURCE_FUNCTIONS_READING_BOTH_REPLICA_KEYS=2\nACTIVE_CONFIG_SELECTED_BY_NATIVE_PROVEN=false\nNATIVE_READBACK_ARGV_PROVEN_SAFE=false\nCLOUD_NETWORK_IO_PERFORMED=false\nRCLONE_PROCESS_EXECUTED=false\nNATIVE_MODULE_IMPORTED_OR_EXECUTED=false\nSTATE_SECOND_PASS_STABLE=33\nSTATE_ATOMIC_SNAPSHOT_PROVEN=false\nCONFIG_SECOND_PASS_STABLE=true\nREMOTE_SELECTOR_PROVEN_SAFE=false\nCLOUD_A_B_TWO_SEALED_COPIES=unverified\nCT112_TWO_SEALED_REPLICAS=unverified\nVM101_TWO_SEALED_REPLICAS=unverified\nRPO_GFS=unverified\nISOLATED_DR=unverified\nFULL_AUDIT_COMPLETE=false\nDECISION=OFFLINE_CONFIG_RELATION_CAPTURED\nNEXT_GATE=VERIFY_ACTIVE_CONFIG_AND_READONLY_CLOUD_SELECTOR\nROOT_CAUSE_PROVEN=false\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261009-WORKERS2-OFFLINE-CLOUD-CONFIG-JOIN-99943R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "WORKERS2_INDEPENDENT_CLOUD_READONLY_GATE=V1\nMODE=read-only\nNO_BACKUP_OR_NATIVE_VERIFIER_EXECUTED=true\nNO_SYSTEMD_OR_PVE_MUTATION=true\nNO_PRODUCTION_CONFIG_WRITES=true\nRCLONE_IF_EXECUTED_READ_SUBCOMMAND_ONLY=true\nCLOUD_SEAL_READBACK_PROVEN=false\nPINNED_HOST=true\nREGISTRY_PIN_OK=true\nLAUNCHER_PIN_OK=true\nAUDIT_PIN_OK=true\nREGISTRY_CT112_COUNT=1\nREGISTRY_CT112_ENABLED=true\nREGISTRY_VM101_COUNT=1\nREGISTRY_VM101_ENABLED=true\nSTATE_DOCUMENTS=33\nREPLICA_DOCS=26\nREPLICA_DICTIONARIES=52\nCT112_FILENAME_ANCHORS=1\nVM101_FILENAME_ANCHORS=1\nREPLICA_FIELDS_CRYPT_PHYSICAL_ONLY=true\nCT112_VM101_IDENTITY_INSIDE_DOC_PROVEN=false\nRCLONE_CONFIG_CANONICAL_CANDIDATES=5\nRCLONE_CONFIG_TRUSTED_FOUND=1\nRCLONE_CONFIG_UNTRUSTED_FOUND=0\nCONFIG_CONTENT_READ_PRIVATE=true\nCONFIG_GATE=PARSED_OFFLINE\nREPLICA_CRYPT_DISTINCT_VALUES=11\nREPLICA_PHYSICAL_DISTINCT_VALUES=11\nREPLICA_CRYPT_EQUALS_PHYSICAL_ELEMENTS=0\nREPLICA_SAME_CRYPT_WITHIN_PAIR=0\nREPLICA_SAME_PHYSICAL_WITHIN_PAIR=0\nCONFIG_REMOTE_SECTIONS=26\nCONFIG_CRYPT_BACKENDS=13\nCONFIG_STORAGE_BACKENDS=13\nCONFIG_CRYPT_REF_RESOLVED=13\nCONFIG_CRYPT_REF_UNRESOLVED=0\nREPLICA_CRYPT_NAMES_MATCH_CONFIG_CRYPT=52\nREPLICA_PHYSICAL_NAMES_MATCH_CONFIG=52\nREPLICA_CONFIG_MATCH_PROVES_REMOTE_OBJECT_EXISTS=false\nCT112_VM101_CLOUD_MAPPING_PROVEN=false\nCT112_REPLICA_PAIR_PRESENT=true\nCT112_CRYPT_MATCHED_CONFIG=2\nCT112_PHYSICAL_MATCHED_CONFIG=2\nCT112_CONFIG_CRYPT_PAIR_DISTINCT=true\nCT112_CONFIG_PHYSICAL_PAIR_DISTINCT=true\nVM101_REPLICA_PAIR_PRESENT=true\nVM101_CRYPT_MATCHED_CONFIG=2\nVM101_PHYSICAL_MATCHED_CONFIG=2\nVM101_CONFIG_CRYPT_PAIR_DISTINCT=true\nVM101_CONFIG_PHYSICAL_PAIR_DISTINCT=true\nCONFIG_LINKS_PROVE_PRODUCTION_CREDENTIAL_USE=false\nCLOUD_REPLICA_INDEPENDENCE_PROVEN=false\nSOURCE_FILES_READ=405\nSOURCE_FILES_FILTERED=1\nSOURCE_FILES_SKIPPED=0\nSOURCE_DIRS=52\nPINNED_WRAPPER_COUNT=1\nENTRY504_CANDIDATES=2\nPINNED_ENTRY504_COUNT=1\nPINNED_ENTRY_HAS_WRAPPER_SHA=true\nPINNED_ENTRY_HAS_WRAPPER_NAME=true\nENTRY_WRAPPER_SAME_RELEASE=false\nPINNED_ENTRY_SHA12=f06d526879c8\nPINNED_WRAPPER_SHA12=6f8dc6e71eaa\nENTRY_RELEASE_ROOT_SHA12=50a47e615a07\nWRAPPER_RELEASE_ROOT_SHA12=cd28576c43a3\nSOURCE_RELEASE_PYFILES=27\nSOURCE_CLOUD_CONFIG_EXACT_PATH_LITERALS=1\nSELECTED_CONFIG_SOURCE_LITERAL_MATCHES=1\nSOURCE_PROCESS_API_CALLS=29\nSOURCE_FUNCTIONS_READING_BOTH_REPLICA_KEYS=2\nACTIVE_CONFIG_SELECTED_BY_NATIVE_PROVEN=false\nNATIVE_READBACK_ARGV_PROVEN_SAFE=false\nNATIVE_MODULE_IMPORTED_OR_EXECUTED=false\nSTATE_SECOND_PASS_STABLE=33\nSTATE_ATOMIC_SNAPSHOT_PROVEN=false\nCONFIG_SECOND_PASS_STABLE=true\nCT112_REPLICA_PAIR_COUNT=2\nVM101_REPLICA_PAIR_COUNT=2\nREADONLY_BACKEND_ALLOWLIST_TYPES=7\nREADONLY_SELECTED_ROUTES=0\nREADONLY_SCOPE_TARGETS=2\nREADONLY_SCOPE_MAX_REMOTE_REQUESTS=4\nREADONLY_SCOPE_RECURSIVE=false\nREADONLY_SCOPE_MAX_OUTPUT_BYTES=196608\nREADONLY_SCOPE_SECONDS_PER_REMOTE=18\nCT112_ROUTES_VALIDATED=0\nCT112_TWO_DISTINCT_CONFIG_BACKENDS=false\nVM101_ROUTES_VALIDATED=0\nVM101_TWO_DISTINCT_CONFIG_BACKENDS=false\nBACKEND_SELECTOR_GATE=BACKEND_TYPE_NOT_ALLOWLISTED\nREMOTE_BACKENDS_PHYSICALLY_INDEPENDENT_PROVEN=false\nCREDENTIAL_REFRESH_RISK_GATE=NOT_EVALUATED_BLOCKED_SELECTOR\nREMOTE_PROBE_GATE=PRECONDITIONS_NOT_MET\nREADONLY_CLOUD_REQUESTS_EXECUTED=0\nREADONLY_LISTING_ALL_OK=false\nREADONLY_REMOTE_OBJECTS_SEAL_VERIFIED=false\nREMOTE_LISTING_ATTEMPTED=false\nCLOUD_NETWORK_IO_PERFORMED=false\nRCLONE_PROCESS_EXECUTED=false\nCT112_TWO_SEALED_REPLICAS=unverified\nVM101_TWO_SEALED_REPLICAS=unverified\nRPO_GFS=unverified\nISOLATED_DR=unverified\nFULL_AUDIT_COMPLETE=false\nDECISION=READONLY_CLOUD_GATE_CAPTURED\nNEXT_GATE=VERIFY_SEAL_MANIFEST_AND_RPO_IF_LISTED_ELSE_RESOLVE_GATE\nROOT_CAUSE_PROVEN=false\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }

runtime/latest.txt

@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-261009-WORKERS2-OFFLINE-CLOUD-CONFIG-JOIN-99943R1
+COMMAND_ID=SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=workers2-offline-cloud-config-join
+COMPONENT=workers2-independent-cloud-readonly-gate
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=c2a79ca63e7b7fcca1dc74a2fcc524cad60c648d6efcb2898958d7b4dc128fab
+COMMAND_SHA256=3c9bdca791f88db4594813543492d7695f107a5cc615a15cab110c4f212e6af2
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,15 +24,16 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=65875d98daedbe8d2b120c9a8a6f603d16ed74e4032584d290464838bab1b97b
-SANITIZED_OUTPUT_SHA256=65875d98daedbe8d2b120c9a8a6f603d16ed74e4032584d290464838bab1b97b
+RAW_EVIDENCE_SHA256=dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8
+SANITIZED_OUTPUT_SHA256=dbc7da206056408c37dbc795de9e8840018499df45c4607f850908e9f1be04b8
 OUTPUT_BEGIN
-WORKERS2_OFFLINE_CLOUD_CONFIG_JOIN=V1
+WORKERS2_INDEPENDENT_CLOUD_READONLY_GATE=V1
 MODE=read-only
-NO_CLOUD_IO=true
-NO_PRODUCTION_BACKUP_EXECUTED=true
-NO_NATIVE_MODULE_IMPORT=true
-NO_SERVICE_OR_VM_MUTATION=true
+NO_BACKUP_OR_NATIVE_VERIFIER_EXECUTED=true
+NO_SYSTEMD_OR_PVE_MUTATION=true
+NO_PRODUCTION_CONFIG_WRITES=true
+RCLONE_IF_EXECUTED_READ_SUBCOMMAND_ONLY=true
+CLOUD_SEAL_READBACK_PROVEN=false
 PINNED_HOST=true
 REGISTRY_PIN_OK=true
 LAUNCHER_PIN_OK=true
@@ -95,32 +96,52 @@ ENTRY_RELEASE_ROOT_SHA12=50a47e615a07
 WRAPPER_RELEASE_ROOT_SHA12=cd28576c43a3
 SOURCE_RELEASE_PYFILES=27
 SOURCE_CLOUD_CONFIG_EXACT_PATH_LITERALS=1
+SELECTED_CONFIG_SOURCE_LITERAL_MATCHES=1
 SOURCE_PROCESS_API_CALLS=29
 SOURCE_FUNCTIONS_READING_BOTH_REPLICA_KEYS=2
 ACTIVE_CONFIG_SELECTED_BY_NATIVE_PROVEN=false
 NATIVE_READBACK_ARGV_PROVEN_SAFE=false
-CLOUD_NETWORK_IO_PERFORMED=false
-RCLONE_PROCESS_EXECUTED=false
 NATIVE_MODULE_IMPORTED_OR_EXECUTED=false
 STATE_SECOND_PASS_STABLE=33
 STATE_ATOMIC_SNAPSHOT_PROVEN=false
 CONFIG_SECOND_PASS_STABLE=true
-REMOTE_SELECTOR_PROVEN_SAFE=false
-CLOUD_A_B_TWO_SEALED_COPIES=unverified
+CT112_REPLICA_PAIR_COUNT=2
+VM101_REPLICA_PAIR_COUNT=2
+READONLY_BACKEND_ALLOWLIST_TYPES=7
+READONLY_SELECTED_ROUTES=0
+READONLY_SCOPE_TARGETS=2
+READONLY_SCOPE_MAX_REMOTE_REQUESTS=4
+READONLY_SCOPE_RECURSIVE=false
+READONLY_SCOPE_MAX_OUTPUT_BYTES=196608
+READONLY_SCOPE_SECONDS_PER_REMOTE=18
+CT112_ROUTES_VALIDATED=0
+CT112_TWO_DISTINCT_CONFIG_BACKENDS=false
+VM101_ROUTES_VALIDATED=0
+VM101_TWO_DISTINCT_CONFIG_BACKENDS=false
+BACKEND_SELECTOR_GATE=BACKEND_TYPE_NOT_ALLOWLISTED
+REMOTE_BACKENDS_PHYSICALLY_INDEPENDENT_PROVEN=false
+CREDENTIAL_REFRESH_RISK_GATE=NOT_EVALUATED_BLOCKED_SELECTOR
+REMOTE_PROBE_GATE=PRECONDITIONS_NOT_MET
+READONLY_CLOUD_REQUESTS_EXECUTED=0
+READONLY_LISTING_ALL_OK=false
+READONLY_REMOTE_OBJECTS_SEAL_VERIFIED=false
+REMOTE_LISTING_ATTEMPTED=false
+CLOUD_NETWORK_IO_PERFORMED=false
+RCLONE_PROCESS_EXECUTED=false
 CT112_TWO_SEALED_REPLICAS=unverified
 VM101_TWO_SEALED_REPLICAS=unverified
 RPO_GFS=unverified
 ISOLATED_DR=unverified
 FULL_AUDIT_COMPLETE=false
-DECISION=OFFLINE_CONFIG_RELATION_CAPTURED
-NEXT_GATE=VERIFY_ACTIVE_CONFIG_AND_READONLY_CLOUD_SELECTOR
+DECISION=READONLY_CLOUD_GATE_CAPTURED
+NEXT_GATE=VERIFY_SEAL_MANIFEST_AND_RPO_IF_LISTED_ELSE_RESOLVE_GATE
 ROOT_CAUSE_PROVEN=false
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
 MUTATION_OUTCOME=NO_PRODUCTION_MUTATION
 END_MARKER=true
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261009-WORKERS2-OFFLINE-CLOUD-CONFIG-JOIN-99943R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261009-WORKERS2-INDEPENDENT-CLOUD-READONLY-GATE-99944R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
 
 OUTPUT_END
 CHAT_OUTPUT_END