{
  "assessment": {
    "all_ok": true,
    "decision": "PASS_STEP_046I4_CLIENT_CONFIG_LOCATOR_READONLY",
    "expected_absence": {
      "db_written": false,
      "fs_written": false,
      "jobs_created": false,
      "private_material_published": false,
      "vm100_changed": false
    },
    "success_checks": {
      "db_lease_found_for_target": true,
      "db_peer_found_for_target": true,
      "db_pending_zero": true,
      "fs_locator_completed": true,
      "prototype_rebalancer_dryrun_ok": true,
      "prototype_rebalancer_noop": true,
      "prototype_sampler_dryrun_ok": true,
      "prototype_sampler_rows_five": true,
      "public_index_rebuilt": true,
      "vm100_allowed_ip_count_five": true,
      "vm100_peer_count_five": true,
      "vm100_state_ok": true,
      "vm100_target_line_cs3": true,
      "vm100_uci_peer_sections_zero": true,
      "vm121_db_locator_ok": true,
      "vm121_fs_locator_ok": true
    },
    "warnings": [
      "This is a read-only locator; it does not generate or publish client configs.",
      "PrivateKey/PresharedKey values are masked and should not appear in artifacts.",
      "If no direct config exists, next step should inspect backend config generation path, not repeat traffic proof."
    ]
  },
  "changes": {
    "jobs_created": "NO",
    "private_material_published": "NO",
    "vm100_changed": "NO",
    "vm121_db_changed": "NO",
    "vm121_fs_changed": "NO"
  },
  "db_lease_lookup": {
    "lease": {
      "assigned_at": "2026-07-09T13:18:38.59577+00:00",
      "assignment_source": "bootstrap",
      "cooldown_until": null,
      "egress_class": "cs3",
      "forced": false,
      "id": "d7f25eaf-e9d6-4211-a3cf-201fe8b16f96",
      "last_activity_at": null,
      "last_rx_bytes": 0,
      "last_rx_packets": 0,
      "last_tx_bytes": 0,
      "last_tx_packets": 0,
      "peer_id": "a3cbe3b5-8416-4847-b5ee-21f42359b465",
      "reason": "activity_sampler_idle_no_delta",
      "state": "idle",
      "target_id": "cs3_vpn5",
      "tunnel_ip": "10.253.1.12",
      "updated_at": "2026-07-10T09:51:11.406527+00:00"
    },
    "lease_found": true,
    "target": {
      "created_at": "2026-07-09T12:34:52.059511+00:00",
      "description": "Current proven cs3 -> vpn5 target",
      "egress_class": "cs3",
      "fwmark": "0x205",
      "id": "cs3_vpn5",
      "interface_name": "vpn5",
      "is_emergency": false,
      "kind": "vpn",
      "route_table": 205,
      "status": "enabled",
      "updated_at": "2026-07-09T12:34:52.059511+00:00",
      "weight": 100
    }
  },
  "db_peer_lookup": {
    "found": true,
    "peer": {
      "created_at": "2026-07-04T10:37:34.530114+00:00",
      "disabled_at": "2026-07-04T13:38:41.691553+00:00",
      "enabled": false,
      "id": "4b39aa87-4b59-4c71-950b-cf2dca3e606f",
      "node_id": "ddn-test",
      "paid_until": "2026-08-03T10:37:34.52517+00:00",
      "public_key": "pub_BFUhgsp-ejx-tAwttmNzzPupN-c0-5sSS3YRaevqpes",
      "tunnel_ip": "10.253.1.12",
      "user_id": "1f0b0e4a-e3ea-4d11-89d1-18d0db370ba7"
    },
    "peer_columns": [
      "id",
      "user_id",
      "node_id",
      "public_key",
      "preshared_key",
      "tunnel_ip",
      "paid_until",
      "enabled",
      "created_at",
      "disabled_at"
    ]
  },
  "db_summary": {
    "enabled_peers": 5,
    "lease_rows": 5,
    "pending_jobs": 0
  },
  "direct_config_candidates": [
    {
      "has_address": "false",
      "has_endpoint": "false",
      "has_peer": "false",
      "has_private": "false",
      "has_psk": "false",
      "path": "/root/router-ops-backups/canary-test-subscription-cs3-schemaderived-20260708-140352/create-fields.env",
      "raw": "candidate=/root/router-ops-backups/canary-test-subscription-cs3-schemaderived-20260708-140352/create-fields.env|has_private=false|has_psk=false|has_address=false|has_endpoint=false|has_peer=false"
    }
  ],
  "locator_summary": {
    "api_route_hints_seen": true,
    "db_pending_jobs": 0,
    "direct_config_candidate_count": 1,
    "lease_found": true,
    "next_recommendation": "inspect_backend_generation_endpoint_or_regenerate_config_safely",
    "peer_found": true,
    "source_config_refs_count": 6,
    "target_ip": "10.253.1.12",
    "usable_direct_candidate_count": 0
  },
  "matching_jobs": {
    "last_matching_jobs": [
      {
        "action": "enable_peer",
        "attempts": 1,
        "completed_at": "2026-07-08T14:03:53.415732+00:00",
        "created_at": "2026-07-08T14:03:52.371746+00:00",
        "id": "51bcba72-2824-4455-bdc2-4dfccd19c9e5",
        "node_id": "ddn-test",
        "payload_has_client_config": false,
        "payload_has_preshared_key": true,
        "payload_has_private_key": false,
        "payload_keys": [
          "paid_until",
          "preshared_key",
          "public_key",
          "tunnel_ip"
        ],
        "payload_tunnel_ip": "10.253.1.12",
        "peer_id": "a3cbe3b5-8416-4847-b5ee-21f42359b465",
        "status": "completed"
      },
      {
        "action": "enable_peer",
        "attempts": 1,
        "completed_at": "2026-07-04T10:37:52.25283+00:00",
        "created_at": "2026-07-04T10:37:34.531746+00:00",
        "id": "7196bb14-b3ba-4aaf-85f8-aa393fe1b4dc",
        "node_id": "ddn-test",
        "payload_has_client_config": false,
        "payload_has_preshared_key": true,
        "payload_has_private_key": false,
        "payload_keys": [
          "paid_until",
          "preshared_key",
          "public_key",
          "tunnel_ip"
        ],
        "payload_tunnel_ip": "10.253.1.12",
        "peer_id": "4b39aa87-4b59-4c71-950b-cf2dca3e606f",
        "status": "completed"
      }
    ],
    "matching_jobs_count": 2
  },
  "mode": "CLIENT_CONFIG_LOCATOR_READONLY_NO_SECRET_VALUES",
  "prototype_rebalancer_summary": {
    "action_count": 0,
    "active_count": 1,
    "blocked": false,
    "forced_count": 0,
    "idle_count": 4,
    "lease_rows": 5,
    "noop": true,
    "selector_match_count": 5,
    "slot_seen_count": 5,
    "target_count": 5
  },
  "prototype_sampler_summary": {
    "active_by_new_delta_count": 0,
    "rows": 5,
    "rows_with_selector_match": 5,
    "rows_with_zero_delta": 5
  },
  "publish": {
    "latest_report": "https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/",
    "local_report": "http://127.0.0.1:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260710-095113_step046i4_client_config_locator_readonly/",
    "public_index_rebuilt": true,
    "trycf_report": "https://helena-background-beam-harry.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/20260710-095113_step046i4_client_config_locator_readonly/"
  },
  "schema": "router-step-facts-v1",
  "step": "STEP_046I4_CLIENT_CONFIG_LOCATOR_READONLY"
}