>>> [router-machine-close] machine=vm100 mode=--publish
>>> [vm100-source] precheck
MODE=--publish
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm100.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm100
>>> [vm100-source] run VM100 git publisher through approved nested SSH
>>> [vm100-git] precheck
MODE=--publish
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=68d6eb550e193b2022a3dba273d29a11e27a7cadc53952fb1b7ca15c539a72c2
MACHINE_ID=vm100
GIT_DIR=/root/.vm100-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm100.git
LOCAL_HEAD=1923d6a191395c6ad90e486cb4d36cff1f83b33e
>>> [vm100-git] verify remote branch
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
REMOTE_HEAD=1923d6a191395c6ad90e486cb4d36cff1f83b33e
>>> [vm100-git] build current project allowlist
>>> [vm100-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=34
TRACKED_COUNT=34
MANAGED_UNION_COUNT=34
>>> [vm100-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm100-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm100-git] build simulated git index
STAGED_CHANGE_COUNT=3
=== STAGED PATHS ===
etc/config/firewall
etc/nftables.d/91-wg-remote-default-selector.nft
etc/pbr.d/default_lan_to_vpn.sh
>>> [vm100-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=4f640945f3b3adc9b7f3ee481b6958cbab19f19a
SIMULATED_TREE_FILE_COUNT=34
>>> [vm100-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm100-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE
>>> [vm100-git] verify real git index has no pre-staged changes
>>> [vm100-git] install validated simulated index
>>> [vm100-git] create commit
[main ec764de] vm100: publish managed source 2026-09-15T06:41:03Z
 3 files changed, 18 insertions(+), 2 deletions(-)
NEW_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
NEW_TREE=4f640945f3b3adc9b7f3ee481b6958cbab19f19a
>>> [vm100-git] push branch to remote
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
To github.com:DChuvelev/wg-paid-vm100.git
   1923d6a..ec764de  main -> main
>>> [vm100-git] verify remote commit
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
LOCAL_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
REMOTE_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b

RESULT=PASS_vm100_GIT_PUBLISH
MACHINE_ID=vm100
GIT_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
GIT_TREE=4f640945f3b3adc9b7f3ee481b6958cbab19f19a
GIT_FILE_COUNT=34
COMMIT_CREATED=true
PUSH_PERFORMED=true
REPOSITORY=https://github.com/DChuvelev/wg-paid-vm100

VM100_RESULT=PASS_vm100_GIT_PUBLISH
VM100_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
VM100_REMOTE_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
>>> [vm100-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm100.git
From https://github.com/DChuvelev/wg-paid-vm100
 * branch            main       -> FETCH_HEAD
   1923d6a..ec764de  main       -> origin/main
Reset branch 'main'
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at ec764de vm100: publish managed source 2026-09-15T06:41:03Z

VM130_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
VM130_TREE=4f640945f3b3adc9b7f3ee481b6958cbab19f19a
VM130_FILE_COUNT=34
VM130_STATUS=CLEAN
>>> [vm100-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm100-git-publish.sh
>>> [vm100-source] create archive and metadata from exact Git commit
ARCHIVE=/tmp/vm100-git-source-publish.qFBnIf/wg-paid-vm100-ec764de39b54.tar.gz
ARCHIVE_SHA256=765aa0909e021ed9d6512c79c44ee8555a9d473a42c72f53aa0e6e8c660bb12c
ARCHIVE_BASE64=/tmp/vm100-git-source-publish.qFBnIf/wg-paid-vm100-ec764de39b54.tar.gz.b64.txt
MANIFEST=/tmp/vm100-git-source-publish.qFBnIf/git-tree-manifest.txt
PATHS=/tmp/vm100-git-source-publish.qFBnIf/managed-paths.txt
FACTS=/tmp/vm100-git-source-publish.qFBnIf/facts.json
>>> [vm100-source] publish atomically into latest/ and archive prior version into old/
PUBLISHED_DIR=/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260915-064107_vm100_git_source_ec764de39b54
PUBLISHED_RELATIVE_PATH=latest/20260915-064107_vm100_git_source_ec764de39b54
PUBLIC_OBJECT_KIND=vm100
PREVIOUS_MOVED_COUNT=1
COLLISION_DEDUPLICATED_COUNT=0
PUBLICATION_REUSED=false
PUBLICATION_TRANSACTION_ID=20260915-064107_2170178_9032
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
LOCAL_INDEX=http://192.168.30.84:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260915-064107_vm100_git_source_ec764de39b54/
LATEST_ROOT_URL=https://reports.secret-studio.ru/latest/
OLD_ROOT_URL=https://reports.secret-studio.ru/old/
PUBLIC_INDEX=https://reports.secret-studio.ru/latest/
PUBLIC_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/
VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/
TRYCF_INDEX=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/
TRYCF_REPORT=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260915-064107_vm100_git_source_ec764de39b54/
VM103_REPORT_MIRROR=PASS
RESULT=PASS_ROUTER_PUBLISH_REPORT
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=cf0b61fed0af4433517fd6a9478f480f5c36715b3878934cc89c138c28e08859
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=cf0b61fed0af4433517fd6a9478f480f5c36715b3878934cc89c138c28e08859
HTTP_OUTPUT=/tmp/vm100-git-source-publish.qFBnIf/http-index.html
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=765aa0909e021ed9d6512c79c44ee8555a9d473a42c72f53aa0e6e8c660bb12c
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/wg-paid-vm100-ec764de39b54.tar.gz
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=765aa0909e021ed9d6512c79c44ee8555a9d473a42c72f53aa0e6e8c660bb12c
HTTP_OUTPUT=/tmp/vm100-git-source-publish.qFBnIf/http-archive.tar.gz
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=a9fbc6f8bf367d9fe6e0314f8f20c14e3bcb19adc5f848a88b96e29544787654
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/facts.json
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=a9fbc6f8bf367d9fe6e0314f8f20c14e3bcb19adc5f848a88b96e29544787654
HTTP_OUTPUT=/tmp/vm100-git-source-publish.qFBnIf/http-facts.json
ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=ce4bbd314a89aa861b1921dfa3d7873936d87e901f270c35dd191ac2c444f342
RESULT=PASS_ROUTER_HTTP_VERIFY
HTTP_POSTCHECK=PASS
HTTP_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/git-tree-manifest.txt
HTTP_CODE=200
HTTP_ATTEMPTS=1
HTTP_SHA256=ce4bbd314a89aa861b1921dfa3d7873936d87e901f270c35dd191ac2c444f342
HTTP_OUTPUT=/tmp/vm100-git-source-publish.qFBnIf/http-manifest.txt
>>> [vm100-source] save current source archive state

RESULT=PASS_VM130_VM100_GIT_SOURCE_PUBLISH
VM100_GIT_SOURCE_COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
VM100_GIT_SOURCE_TREE=4f640945f3b3adc9b7f3ee481b6958cbab19f19a
VM100_GIT_SOURCE_FILE_COUNT=34
VM100_GIT_SOURCE_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/
VM100_GIT_SOURCE_ARCHIVE_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/wg-paid-vm100-ec764de39b54.tar.gz
VM100_GIT_SOURCE_ARCHIVE_B64_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/wg-paid-vm100-ec764de39b54.tar.gz.b64.txt
VM100_GIT_SOURCE_FACTS_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/facts.json
VM100_GIT_SOURCE_MANIFEST_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/git-tree-manifest.txt
VM100_GIT_SOURCE_ARCHIVE_SHA256=765aa0909e021ed9d6512c79c44ee8555a9d473a42c72f53aa0e6e8c660bb12c
VM100_PUSH_PERFORMED=true
ARCHIVE_CREATED=true
PUBLISHER_RESULT=PASS_ROUTER_PUBLISH_REPORT
PUBLISHER_RC=0
PUBLISHER_RC_NONZERO_SALVAGED=false
PUBLICATION_COMMITTED=true
LOCAL_POSTCHECK=PASS
LATEST_INDEX_CONTAINS_FOLDER=true
HTTP_POSTCHECK=PASS
SOURCE_STATE_UPDATED=true
PERMANENT_HTTPS_PUBLISHED=true
RESULT=PASS_ROUTER_MACHINE_CLOSE
MACHINE=vm100
DESCRIPTION=STEP_050M07P28R1_R01_VM100_AWG_REMOTE_FOUNDATION add awg_remote management foundation 10.250.101/24 fixed cs4 and PBR/firewall parity; network secrets remain untracked
COMMIT=ec764de39b54883f709e00f27b0cc83c1f233c9b
TREE=4f640945f3b3adc9b7f3ee481b6958cbab19f19a
GIT_FILE_COUNT=34
SOURCE_PUBLISH_BACKEND=/opt/router-ops/bin/router-vm100-git-source-publish
BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20260915-064101_vm100_2170134/backend.txt
BACKEND_RC=0
BACKEND_RC_NONZERO_SALVAGED=false
CLASSIFICATION=PASS_AUTHORITATIVE_BACKEND_AND_PUBLICATION
VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260915-064107_vm100_git_source_ec764de39b54/