{
  "assessment": {
    "all_ok": true,
    "blockers": [],
    "decision": "PASS_STEP_044J2_CONTROLLED_TRAFFIC_KEY_MAPPING_DIAGNOSIS",
    "expected_absence": {
      "activity_eval_written_to_db": false,
      "client_config_published": false,
      "force_mode_enabled": false,
      "manual_agent_service_start_used": false,
      "private_material_published": false,
      "rebalance_paused": false,
      "selector_changed": false,
      "vm100_changed": false,
      "vm101_changed": false,
      "vm121_db_changed": false,
      "wg_peer_runtime_changed": false
    },
    "success_checks": {
      "active_leases_zero": true,
      "activity_service_enabled": true,
      "activity_service_status_ok": true,
      "client_public_key_derived": true,
      "enabled_peers_five": true,
      "forced_leases_zero": true,
      "idle_leases_five": true,
      "key_mapping_diagnosis_created": true,
      "lease_rows_five": true,
      "pending_jobs_zero": true,
      "private_key_available_but_not_published": true,
      "public_index_rebuilt": true,
      "public_report_created": true,
      "secret_path_exists": true,
      "target_allowed_ip_line_found": true,
      "vm100_allowed_ip_count_five": true,
      "vm100_diag_collected": true,
      "vm100_peer_count_five": true,
      "vm100_selector_rows_five": true,
      "vm100_target_peer_public_key_resolved": true,
      "vm100_uci_peer_count_zero": true,
      "vm101_cs1_to_vpn3_seen": true,
      "vm101_cs2_to_vpn4_seen": true,
      "vm101_cs3_to_vpn5_seen": true,
      "vm101_cs4_to_vpn1_seen": true,
      "vm101_cs5_to_vpn2_seen": true,
      "vm101_slot_map_collected": true,
      "vm121_client_diag_collected": true,
      "vm121_db_collected": true
    },
    "warnings": [
      "STEP_044J2 is read-only diagnosis after STEP_044J produced no counter delta.",
      "Public key hashes/prefixes are published; private key/config is not published.",
      "Existing private client config appears stale for the current VM100 target peer; next traffic proof should create/use a fresh private config tied to a current runtime peer."
    ]
  },
  "changes": {
    "client_config_published": "NO",
    "manual_agent_service_start_used": "NO",
    "private_material_published": "NO",
    "selector_changed": "NO",
    "vm100_changed": "NO_READONLY_DIAGNOSIS",
    "vm101_changed": "NO",
    "vm121_db_changed": "NO",
    "wg_peer_runtime_changed": "NO"
  },
  "db_summary": {
    "active_leases": 0,
    "enabled_peers": 5,
    "forced_leases": 0,
    "idle_leases": 5,
    "lease_rows": 5,
    "pending_jobs": 0
  },
  "diagnosis": {
    "client_endpoint_from_config": "10.71.100.1:51830",
    "client_public_key_matches_vm100_target_peer": false,
    "client_public_key_prefix": "zUUEdc+Lac",
    "client_public_key_sha256": "03038e6347b393b03dfeeed5ea5014a39e6d6b1dd76bed2c802b42add85f4aa7",
    "probable_root_cause": "stale_private_client_config_public_key_mismatch",
    "server_endpoint_for_target": "(none)",
    "server_latest_handshake_for_target": "0",
    "server_transfer_for_target": "0\t0",
    "target_egress_class": "cs1",
    "target_id": "cs1_vpn3",
    "target_tunnel_ip": "10.253.1.10",
    "vm100_target_peer_public_key_prefix": "fmcqSUy1fE",
    "vm100_target_peer_public_key_sha256": "e6746640fe8fd85c510e8b714e3d9c9c4c1a80f06f9792848c19023bb1663024"
  },
  "mode": "READONLY_DIAGNOSE_WHY_CONTROLLED_TRAFFIC_DID_NOT_INCREMENT_VM100_ACTIVITY_COUNTERS",
  "publish": {
    "local_report": "http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-141007_step044j2_controlled_traffic_key_mapping_diagnosis/",
    "public_index_rebuilt": true,
    "trycf_report": "https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-141007_step044j2_controlled_traffic_key_mapping_diagnosis/"
  },
  "schema": "router-step-facts-v1",
  "step": "STEP_044J2_CONTROLLED_TRAFFIC_KEY_MAPPING_DIAGNOSIS"
}