{ "assessment": { "all_ok": true, "blockers": [], "decision": "PASS_STEP_044J3B_CONTROLLED_TRAFFIC_TEMP_RUNTIME_PEER_QUOTING_FIX", "expected_absence": { "activity_eval_written_to_db": false, "client_config_published": false, "force_mode_enabled": false, "manual_agent_service_start_used": false, "private_material_published": false, "rebalance_paused": false, "selector_left_changed": false, "vm101_changed": false, "vm121_db_changed": false, "wg_peer_runtime_left_changed": false }, "success_checks": { "active_leases_zero": true, "activity_service_enabled_before": true, "activity_service_enabled_final": true, "activity_service_status_before": true, "activity_service_status_final": true, "allowed_ip_count_after_substitution_five": true, "counter_after_rows_ten": true, "counter_before_rows_ten": true, "enabled_peers_five": true, "final_target_hash_matches_original": true, "forced_leases_zero": true, "idle_leases_five": true, "lease_rows_five": true, "netns_cleanup_ok": true, "peer_count_after_substitution_five": true, "pending_jobs_zero": true, "public_index_rebuilt": true, "public_report_created": true, "restored_target_hash_matches_original": true, "selector_final_matches_before": true, "target_active_now_true": true, "target_delta_positive": true, "target_delta_reaches_activity_threshold": true, "target_in_counter_present": true, "target_out_counter_present": true, "temp_client_generated": true, "temp_peer_applied_to_target": true, "temp_private_key_available_but_not_published": true, "traffic_attempted": true, "vm100_after_traffic_collected": true, "vm100_allowed_ip_count_final_five": true, "vm100_before_collected": true, "vm100_final_collected": true, "vm100_peer_count_before_five": true, "vm100_peer_count_final_five": true, "vm100_restore_ok": true, "vm100_selector_rows_before_five": true, "vm100_substitution_ok": true, "vm100_target_peer_found_before": true, "vm101_cs1_to_vpn3_seen": true, "vm101_cs2_to_vpn4_seen": true, "vm101_cs3_to_vpn5_seen": true, "vm101_cs4_to_vpn1_seen": true, "vm101_cs5_to_vpn2_seen": true, "vm101_slot_map_collected": true, "vm121_db_final_collected": true, "vm121_traffic_ran_without_errors": true }, "warnings": [ "STEP_044J3B temporarily replaces VM100 wg_paid target peer public key for 10.253.1.10/32, then restores full wg_paid config from local VM100 backup.", "VM100 runtime peer is expected to change only during the controlled traffic window; final state must match original target peer hash.", "Private client key and full wg_paid backup config are not published." ] }, "changes": { "client_config_published": "NO", "manual_agent_service_start_used": "NO", "private_material_published": "NO", "selector_changed": "NO", "vm100_changed": "TEMPORARY_RUNTIME_PEER_PUBLIC_KEY_SUBSTITUTION_AND_COUNTER_INCREMENTS_THEN_RESTORED", "vm101_changed": "NO", "vm121_db_changed": "NO", "wg_peer_runtime_left_changed": "NO" }, "db_summary": { "active_leases": 0, "enabled_peers": 5, "forced_leases": 0, "idle_leases": 5, "lease_rows": 5, "pending_jobs": 0 }, "mode": "TEMPORARILY_BIND_FRESH_CLIENT_KEY_TO_CURRENT_RUNTIME_PEER_IP_PROVE_ACTIVITY_COUNTER_DELTA_RESTORE_ORIGINAL", "publish": { "local_report": "http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-141954_step044j3b_controlled_traffic_temp_runtime_peer_quoting_fix/", "public_index_rebuilt": true, "trycf_report": "https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260709-141954_step044j3b_controlled_traffic_temp_runtime_peer_quoting_fix/" }, "runtime_peer_restore": { "final_matches_original": true, "final_pub_sha256": "e6746640fe8fd85c510e8b714e3d9c9c4c1a80f06f9792848c19023bb1663024", "old_pub_sha256": "e6746640fe8fd85c510e8b714e3d9c9c4c1a80f06f9792848c19023bb1663024", "restored_pub_sha256": "e6746640fe8fd85c510e8b714e3d9c9c4c1a80f06f9792848c19023bb1663024", "temp_pub_sha256": "e3eba697582e3937ea3d7f333d74eefc69c139b4e203597431b2e4f737b93c96" }, "schema": "router-step-facts-v1", "step": "STEP_044J3B_CONTROLLED_TRAFFIC_TEMP_RUNTIME_PEER_QUOTING_FIX", "target_activity": { "active_now": true, "in_counter": "peer_10_253_1_10_in_vpn", "in_delta": { "after_bytes": 6840, "after_packets": 30, "before_bytes": 0, "before_packets": 0, "counter_name": "peer_10_253_1_10_in_vpn", "delta_bytes": 6840, "delta_packets": 30 }, "out_counter": "peer_10_253_1_10_out_vpn", "out_delta": { "after_bytes": 6840, "after_packets": 30, "before_bytes": 0, "before_packets": 0, "counter_name": "peer_10_253_1_10_out_vpn", "delta_bytes": 6840, "delta_packets": 30 }, "target_tunnel_ip": "10.253.1.10", "threshold": { "bytes_min": 16384, "packets_min": 10 }, "total_delta_bytes": 13680, "total_delta_packets": 60 }, "traffic_sanitized": { "cleanup": { "netns_del": { "rc": 0, "stderr": "", "stdout": "" } }, "config_found": true, "endpoint": "10.71.100.1:51830", "errors": [], "private_material_published": false, "server_public_key_prefix": "FD1J+KVZ96", "steps": { "addr_add": { "rc": 0, "stderr": "", "stdout": "" }, "link_add": { "rc": 0, "stderr": "", "stdout": "" }, "link_to_ns": { "rc": 0, "stderr": "", "stdout": "" }, "link_up": { "rc": 0, "stderr": "", "stdout": "" }, "netns_add": { "rc": 0, "stderr": "", "stdout": "" }, "route_add": { "rc": 0, "stderr": "", "stdout": "" }, "wg_set": { "rc": 0, "stderr": "", "stdout": "" } }, "target_tunnel_ip": "10.253.1.10", "traffic": { "ping_1_1_1_1": { "rc": 0, "stderr": "", "stdout": "PING 1.1.1.1 (1.1.1.1) 200(228) bytes of data.\n208 bytes from 1.1.1.1: icmp_seq=1 ttl=55 time=92.6 ms\n208 bytes from 1.1.1.1: icmp_seq=2 ttl=55 time=68.1 ms\n208 bytes from 1.1.1.1: icmp_seq=3 ttl=55 time=120 ms\n208 bytes from 1.1.1.1: icmp_seq=4 ttl=55 time=76.4 ms\n208 bytes from 1.1.1.1: icmp_seq=5 ttl=55 time=82.1 ms\n208 bytes from 1.1.1.1: icmp_seq=6 ttl=55 time=78.4 ms\n208 bytes from 1.1.1.1: icmp_seq=7 ttl=55 time=149 ms\n208 bytes from 1.1.1.1: icmp_seq=8 ttl=55 time=131 ms\n208 bytes from 1.1.1.1: icmp_seq=9 ttl=55 time=62.0 ms\n208 bytes from 1.1.1.1: icmp_seq=10 ttl=55 time=186 ms\n208 bytes from 1.1.1.1: icmp_seq=11 ttl=55 time=77.7 ms\n208 bytes from 1.1.1.1: icmp_seq=12 ttl=55 time=164 ms\n208 bytes from 1.1.1.1: icmp_seq=13 ttl=55 time=63.6 ms\n208 bytes from 1.1.1.1: icmp_seq=14 ttl=55 time=73.9 ms\n208 bytes from 1.1.1.1: icmp_seq=15 ttl=55 time=152 ms\n208 bytes from 1.1.1.1: icmp_seq=16 ttl=55 time=218 ms\n208 bytes from 1.1.1.1: icmp_seq=17 ttl=55 time=77.9 ms\n208 bytes from 1.1.1.1: icmp_seq=18 ttl=55 time=187 ms\n208 bytes from 1.1.1.1: icmp_seq=19 ttl=55 time=88.5 ms\n208 bytes from 1.1.1.1: icmp_seq=20 ttl=55 time=63.3 ms\n\n--- 1.1.1.1 ping statistics ---\n20 packets transmitted, 20 received, 0% packet loss, time 19027ms\nrtt min/avg/max/mdev = 62.036/110.583/217.632/47.672 ms" }, "ping_8_8_8_8": { "rc": 0, "stderr": "", "stdout": "PING 8.8.8.8 (8.8.8.8) 200(228) bytes of data.\n208 bytes from 8.8.8.8: icmp_seq=1 ttl=115 time=95.1 ms\n208 bytes from 8.8.8.8: icmp_seq=2 ttl=115 time=69.3 ms\n208 bytes from 8.8.8.8: icmp_seq=3 ttl=115 time=168 ms\n208 bytes from 8.8.8.8: icmp_seq=4 ttl=115 time=141 ms\n208 bytes from 8.8.8.8: icmp_seq=5 ttl=115 time=131 ms\n208 bytes from 8.8.8.8: icmp_seq=6 ttl=115 time=61.1 ms\n208 bytes from 8.8.8.8: icmp_seq=7 ttl=115 time=73.7 ms\n208 bytes from 8.8.8.8: icmp_seq=8 ttl=115 time=59.2 ms\n208 bytes from 8.8.8.8: icmp_seq=9 ttl=115 time=66.5 ms\n208 bytes from 8.8.8.8: icmp_seq=10 ttl=115 time=62.8 ms\n\n--- 8.8.8.8 ping statistics ---\n10 packets transmitted, 10 received, 0% packet loss, time 9012ms\nrtt min/avg/max/mdev = 59.189/92.646/167.663/37.356 ms" }, "wg_show": { "rc": 0, "stderr": "", "stdout": "interface: wg044j3b\n public key: FVpiRHpwaJv8FkDhWJ9eQEAFwTxbbl2cTdbZYY1DTSk=\n private key: (hidden)\n listening port: 41564\n\npeer: FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY=\n endpoint: 10.71.100.1:51830\n allowed ips: 0.0.0.0/0\n latest handshake: 28 seconds ago\n transfer: 8.06 KiB received, 8.14 KiB sent\n persistent keepalive: every 25 seconds" } } } }