>>> [vm121 01] Verify installed artifacts
INSTALLED_ARTIFACTS_VALID=true

>>> [vm121 02] Verify repository and GitHub
LOCAL_REPOSITORY_UNBORN=true
REMOTE_REPOSITORY_EMPTY=true
DEPLOY_KEY_ACCESS=true

>>> [vm121 03] Verify exact 41 live files
LIVE_FILE_COUNT=41

>>> [vm121 04] Build simulated initial index
SIMULATED_TREE_SHA=b6fb72951eedc96decf445b71e7d9d6e77ec5ee3
SIMULATED_TREE_FILE_COUNT=41

>>> [vm121 05] Run v2 high-confidence guard
HIGH_CONFIDENCE_SECRET_MATCHES=0

>>> [vm121 06] Install validated index and commit
[main (root-commit) 93e0e5a] vm121: baseline WG Access control-plane source
 41 files changed, 3765 insertions(+)
 create mode 100644 etc/router-machine-git-source.conf
 create mode 100644 etc/systemd/system/wg-access-agent.path
 create mode 100644 etc/systemd/system/wg-access-agent.service
 create mode 100644 etc/systemd/system/wg-access-agent.timer
 create mode 100644 etc/systemd/system/wg-access-expire-subscriptions.service
 create mode 100644 etc/systemd/system/wg-access-expire-subscriptions.timer
 create mode 100644 etc/systemd/system/wg-access-reconcile.service
 create mode 100644 etc/systemd/system/wg-access-reconcile.timer
 create mode 100644 etc/systemd/system/wg-access-trigger-watch.service
 create mode 100644 opt/wg-access/.env.example
 create mode 100644 opt/wg-access/DEFERRED_TASKS.md
 create mode 100644 opt/wg-access/agent/agent.env.example
 create mode 100755 opt/wg-access/agent/wg_access_agent.py
 create mode 100755 opt/wg-access/agent/wg_access_peer_egress_reassign_dryrun.py
 create mode 100644 opt/wg-access/backend/alembic.ini
 create mode 100644 opt/wg-access/backend/alembic/env.py
 create mode 100644 opt/wg-access/backend/alembic/versions/0001_initial_schema.py
 create mode 100644 opt/wg-access/backend/app/agent_trigger.py
 create mode 100644 opt/wg-access/backend/app/api/admin.py
 create mode 100644 opt/wg-access/backend/app/api/agent.py
 create mode 100644 opt/wg-access/backend/app/api/dev.py
 create mode 100644 opt/wg-access/backend/app/config.py
 create mode 100644 opt/wg-access/backend/app/db/base.py
 create mode 100644 opt/wg-access/backend/app/db/session.py
 create mode 100644 opt/wg-access/backend/app/main.py
 create mode 100644 opt/wg-access/backend/app/models/__init__.py
 create mode 100644 opt/wg-access/backend/app/models/core.py
 create mode 100644 opt/wg-access/backend/app/services/__init__.py
 create mode 100644 opt/wg-access/backend/app/services/wireguard.py
 create mode 100644 opt/wg-access/docker-compose.override.yml
 create mode 100644 opt/wg-access/docker-compose.yml
 create mode 100755 usr/local/sbin/router-machine-git-publish.sh
 create mode 100755 usr/local/sbin/router-vm121-git-publish.sh
 create mode 100755 usr/local/sbin/wg-access-agent-job-selector-plan.py
 create mode 100755 usr/local/sbin/wg-access-agent-selector-apply.py
 create mode 100755 usr/local/sbin/wg-access-agent-selector-contract-dry-run.py
 create mode 100755 usr/local/sbin/wg-access-agent-selector-remote-plan.py
 create mode 100755 usr/local/sbin/wg-access-expire-subscriptions.sh
 create mode 100755 usr/local/sbin/wg-access-reconcile-now.sh
 create mode 100755 usr/local/sbin/wg-access-slot-allocator-dry-run.py
 create mode 100755 usr/local/sbin/wg-access-trigger-watch.py
BASELINE_COMMIT=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0
BASELINE_TREE=b6fb72951eedc96decf445b71e7d9d6e77ec5ee3
BASELINE_FILE_COUNT=41

>>> [vm121 07] Push and verify
To github.com:DChuvelev/wg-paid-vm121.git
 * [new branch]      main -> main
branch 'main' set up to track 'origin/main'.
LOCAL_COMMIT=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0
REMOTE_COMMIT=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0
LOCAL_REMOTE_MATCH=true

>>> [vm121 08] Common engine clean check
>>> [vm121-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=119996c097d5302e4911488ac542dd0b5105ea64c4775f476181bafa21eab60a
MACHINE_ID=vm121
GIT_DIR=/root/.vm121-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm121.git
LOCAL_HEAD=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0
>>> [vm121-git] verify remote branch
REMOTE_HEAD=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0
>>> [vm121-git] build current project allowlist
>>> [vm121-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=41
TRACKED_COUNT=41
MANAGED_UNION_COUNT=41
>>> [vm121-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm121-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm121-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm121-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=b6fb72951eedc96decf445b71e7d9d6e77ec5ee3
SIMULATED_TREE_FILE_COUNT=41
>>> [vm121-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm121-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE

RESULT=PASS_VM121_GIT_PUBLISH_CHECK
MACHINE_ID=vm121
GIT_COMMIT=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0
GIT_TREE=b6fb72951eedc96decf445b71e7d9d6e77ec5ee3
GIT_FILE_COUNT=41
COMMIT_CREATED=false
PUSH_PERFORMED=false

RESULT=PASS_VM121_FIXED_GIT_BASELINE
GIT_COMMIT=93e0e5a31f0900a498b77d22e6a7f2ca5fd7fee0
GIT_TREE=b6fb72951eedc96decf445b71e7d9d6e77ec5ee3
GIT_FILE_COUNT=41
COMMIT_CREATED=true
PUSH_PERFORMED=true
LOCAL_REMOTE_MATCH=true