{
  "authorized_keys_mutated": false,
  "automatic_watcher_detection_expected": true,
  "bundle_revision": "R08_FULL_INTERFACE_REAPPLY_AND_RESTORE_PROOF",
  "classification": "runtime_proof",
  "controlled_failure_interface": "vpn2",
  "controlled_failure_selector": "cs5",
  "controlled_failure_slot": "egress2",
  "controlled_failure_tunnel_ip": "10.253.1.14",
  "direct_failopen_allowed": false,
  "endpoint_restore_policy": "uci_endpoint_restore_then_ifdown_ifup_slot_reapply_strict_ping_and_fresh_handshake",
  "expected_installer_sha256": "b23e0cd9793bd87191b399a8111401e882090d62120989aec8f8e08eea996fb8",
  "functional_stage": "controlled_one_slot_failure_end_to_end",
  "live_slot_failure_injected": true,
  "managed_source_change_expected": true,
  "mutated_machines": [
    "vm100",
    "vm101"
  ],
  "next_step": "R20Q-I_RESTORATION_NO_MASS_RETURN_AND_GRADUAL_REBALANCE",
  "private_key_material_exported": false,
  "r03_failure_analysis": "R03 stopped on watcher detection timeout after an unproven asynchronous service restart; R04 proves stop, new process start and one completed prime cycle before endpoint mutation, and emits stage diagnostics on any timeout.",
  "r04_failure_analysis": "R04 proved watcher start and failure detection. Bridge start/confirm repeatedly failed rc 75 because watcher topology sync held the fallback lock and invoked the mapper without its controlled lock-bypass environment, so the mapper attempted to reacquire the same lock and returned STOP_FALLBACK_MAPPER_LOCKED.",
  "r05_failure_analysis": "R05 stopped before live failure injection because the unquoted VM101 heredoc expanded the remote literal $MAPPER_APPLY in the local set -u shell. The inherited ERR trap then finalized the same STOP once in the pipeline subshell and once in the parent shell.",
  "r06_failure_analysis": "R06 proved watcher detection and local bridge activation, but generation 000000000002 remained pending because Dropbear refused the first SSH connection to VM100: host 10.71.100.1 was not in the trusted hosts file.",
  "r07_failure_analysis": "R07 proved watcher detection, local fallback, degraded generation delivery and VM100 evacuation. It stopped during endpoint restoration because the endpoint-only live reapply did not produce the required fresh vpn2 handshake within 90 seconds.",
  "runtime_impact": "controlled_vpn2_failure_generations_000000000002_and_000000000003_acked_vm100_selector_evacuated_vm101_lock_reentry_transport_hostkey_and_full_interface_restore_proven_allocator_paused_for_r20qi",
  "snapshot_names": [
    "r20qh100-pre-e2e",
    "r20qh101-pre-e2e"
  ],
  "source_of_truth": "machine_git",
  "step_id": "STEP_050M07R20QH_CONTROLLED_ONE_SLOT_FAILURE_END_TO_END",
  "target_egress_preflight_proof_expected": true,
  "target_package_sha256": "f1b20911b0edcfd6a609d9a50424a734eed5a2fcbec06a4615519a0873d7d015",
  "title": "Prove controlled one-slot bridge-first continuity with full vpn2 restoration reapply",
  "topology_transport_hostkey_policy": "single_dropbear_y_accept_unknown_reject_mismatch",
  "vm100_baseline_commit": "8746d2803c61070f4c8e04f89b993a8d9725206c",
  "vm100_baseline_file_count": 27,
  "vm100_baseline_tree": "0dc733135177b75065497437e270777019c5337d",
  "vm100_public_url": "https://reports.secret-studio.ru/latest/20260726-191301_vm100_git_source_8746d2803c61/",
  "vm100_selector_source_update_expected": true,
  "vm101_baseline_commit": "567413db2a9ba33e1d25cd4812af2c92e0f5378f",
  "vm101_baseline_file_count": 48,
  "vm101_baseline_tree": "d352213e2943081e83d5b73bde529ce3d99d155c",
  "vm101_changed_paths": [
    "usr/local/sbin/router-wgpay-topology-transport.sh",
    "usr/local/sbin/router-wgpay-watcher-topology-sync.sh"
  ],
  "vm101_public_url": "https://reports.secret-studio.ru/latest/20260727-054606_vm101_git_source_567413db2a9b/",
  "vm101_source_change_expected": true,
  "vm101_topology_transport_sha256": "afd01c4d0d00cd8281330ac073a25f995ef1923d2bb28662e2ce0d67385f1c39",
  "vm101_watcher_sync_sha256": "4c884dcf90cbfa03d46445a7451379d86ae5cb915ccf6e963b0ad85fb006e142"
}