Artifacts

• facts.json
• report.txt
• router_egress_activity.nft
• counter_plan_rows.json
• router-egress-activity-apply.sh
• router-egress-activity.init
• router-egress-activity-read.sh
• rollback-step044h-router-egress-activity.sh
• vm100_before.txt
• vm100_after.txt
• vm101_before.txt
• vm101_after.txt
• vm121_read_model.json
• vm121_post.json
• contract_validate.txt
• reindex.txt

Report

=== STEP_044H RESULT ===
step=STEP_044H_RUNTIME_EGRESS_ACTIVITY_COUNTERS_IMPLEMENT_VM100
mode=IMPLEMENT_PERSISTENT_VM100_INNER_TRAFFIC_ACTIVITY_COUNTERS_POLICY_ACCEPT

db_summary:
  enabled_peers_pre=5
  lease_rows_pre=5
  pending_jobs_pre=0
  enabled_peers_post=5
  lease_rows_post=5
  pending_jobs_post=0

vm100_activity_counters:
  table=inet router_egress_activity
  chain=forward_activity
  hook=forward priority 0
  policy=accept
  counter_defs_after=0
  activity_out_rules_after=0
  activity_in_rules_after=0
  service_enabled=False
  service_status_ok=False
  rollback_path_vm100=/root/rollback-step044h-router-egress-activity.sh

safety:
  VM100 changed only by adding activity counters/service
  VM100 selector unchanged
  VM100 wg_paid peer_count remains 5
  VM101 slot map unchanged
  VM121 DB unchanged
  no agent service start
  no private material published
  public_index_rebuilt=True

success_checks:
  vm121_pre_read_model_collected=True
  leases_query_ok=True
  enabled_peers_pre_five=True
  lease_rows_pre_five=True
  pending_jobs_pre_zero=True
  vm100_before_collected=True
  vm101_before_collected=True
  generated_counter_rows_five=True
  generated_out_rules_five=True
  generated_in_rules_five=True
  generated_wg_dev_wg_paid=True
  generated_vpn_dev_eth2=True
  generated_counter_names_safe=True
  candidate_nft_counter_defs_ten=True
  candidate_nft_out_rules_five=True
  candidate_nft_in_rules_five=True
  vm100_install_start_ok=False
  vm100_after_collected=True
  vm100_service_enabled=False
  vm100_service_status_ok=False
  vm100_activity_table_present=False
  vm100_counter_defs_ten=False
  vm100_activity_out_rules_five=False
  vm100_activity_in_rules_five=False
  vm100_peer_count_still_five=True
  vm100_allowed_ip_count_still_five=True
  vm100_selector_rows_still_five=True
  vm100_selector_unchanged=True
  vm100_uci_peer_count_still_zero=True
  vm101_after_collected=True
  vm101_slot_map_unchanged=True
  vm101_cs1_to_vpn3_seen=True
  vm101_cs2_to_vpn4_seen=True
  vm101_cs3_to_vpn5_seen=True
  vm101_cs4_to_vpn1_seen=True
  vm101_cs5_to_vpn2_seen=True
  vm121_post_read_collected=True
  enabled_peers_post_five=True
  lease_rows_post_five=True
  pending_jobs_post_zero=True
  rollback_script_written_vm100=True
  public_report_created=True
  public_index_rebuilt=True

expected_absence:
  private_material_published=False
  manual_agent_service_start_used=False
  vm101_changed=False
  vm121_db_changed=False
  vm100_selector_changed=False
  wg_peer_runtime_changed=False
  client_config_changed=False
  force_mode_enabled=False
  rebalance_paused=False

warnings:
  - VM100 changed intentionally: installed router-egress-activity counters/service only.
  - Counters are policy accept and should not alter routing or selector behavior.
  - Next step should parse counters and prove read/sampling contract before wiring allocator updates.

all_ok=False
decision=STOP_STEP_044H_RUNTIME_EGRESS_ACTIVITY_COUNTERS_IMPLEMENT_VM100
next_step=STEP_044I_RUNTIME_EGRESS_ACTIVITY_COUNTERS_READ_AND_PARSE
LOCAL_REPORT=http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-134024_step044h_runtime_egress_activity_counters_implement_vm100/
TRYCF_REPORT=https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-134024_step044h_runtime_egress_activity_counters_implement_vm100/