STEP_044C runtime egress lease schema with emergency override

Artifacts

Report

=== STEP_044C RESULT ===
step=STEP_044C_RUNTIME_EGRESS_LEASE_SCHEMA_IMPLEMENT
mode=IMPLEMENT_DB_SCHEMA_FOR_RUNTIME_EGRESS_LEASE_ALLOCATOR_WITH_EMERGENCY_OVERRIDE

db_summary:
  lease_table=public.peer_egress_leases
  targets_table=public.egress_targets
  settings_table=public.egress_allocator_settings
  lease_rows=0
  target_rows=5
  settings_rows=14
  enabled_peers=5
  pending_jobs=0
  rollback_sql_path_vm121=/opt/wg-access/rollbacks/rollback-step044c-runtime-egress-lease-schema-20260709-123451.sql

emergency_override_contract:
  ROUTER_EGRESS_ALLOCATOR_ENABLED=1
  ROUTER_EGRESS_REBALANCE_PAUSED=0
  ROUTER_EGRESS_FORCE_MODE=off
  ROUTER_EGRESS_FORCE_CLASS=
  ROUTER_EGRESS_FORCE_TARGET_ID=
  if FORCE_MODE=all_to_class/all_to_target: all enabled peers are forced to selected class/target
  while force mode is active: allocator/rebalance must not make independent per-peer decisions

normal_runtime_policy:
  activity_metric=inner forwarded traffic after wg_paid decrypt, preferably transit_vpn-bound
  metric_rule_template=iif wg_paid ip saddr TUNNEL_IP oif transit_vpn counter
  policy=sticky while active; reassign after idle threshold and cooldown

success_checks:
  postgres_container_found=True
  migration_sql_applied=True
  peer_egress_leases_table_exists=False
  egress_targets_table_exists=False
  egress_allocator_settings_table_exists=False
  lease_rows_zero_initially=True
  target_rows_five=True
  settings_rows_at_least_fourteen=True
  enabled_peer_count_preserved_five=True
  pending_jobs_zero=True
  lease_peer_id_column_seen=True
  lease_tunnel_ip_column_seen=True
  lease_egress_class_column_seen=True
  lease_target_id_column_seen=True
  lease_assignment_source_column_seen=True
  lease_forced_column_seen=True
  lease_state_column_seen=True
  target_cs1_vpn3_seen=True
  target_cs2_vpn4_seen=True
  target_cs3_vpn5_seen=True
  target_cs4_vpn1_seen=True
  target_cs5_vpn2_seen=True
  setting_allocator_enabled_seen=True
  setting_rebalance_paused_seen=True
  setting_force_mode_off_seen=True
  setting_force_class_seen=True
  setting_force_target_id_seen=True
  setting_idle_seconds_seen=True
  setting_active_min_packets_seen=True
  setting_active_min_bytes_seen=True
  lease_peer_unique_index_seen=True
  lease_tunnel_ip_unique_index_seen=True
  lease_forced_index_seen=True
  rollback_sql_written=True
  public_report_created=True

expected_absence:
  private_material_published=False
  manual_agent_service_start_used=False
  vm100_changed=False
  vm101_changed=False
  lease_rows_inserted=False
  client_config_changed=False
  wg_peer_runtime_changed=False
  force_mode_enabled_now=False
  rebalance_paused_now=False

warnings:
  - Schema is applied, but allocator code is not enabled yet; no runtime lease rows were inserted.
  - Emergency override contract is present but not active: FORCE_MODE=off and REBALANCE_PAUSED=0.

all_ok=False
decision=STOP_STEP_044C_RUNTIME_EGRESS_LEASE_SCHEMA_IMPLEMENT
next_step=STEP_044D_RUNTIME_EGRESS_LEASE_BOOTSTRAP_PREVIEW
LOCAL_REPORT=http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-123451_step044c_runtime_egress_lease_schema_implement/
TRYCF_REPORT=https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-123451_step044c_runtime_egress_lease_schema_implement/