{
  "acl_delta": {
    "add_subnet": "10.250.101.0/24",
    "matcher_count": 5,
    "matchers": [
      "admin_http",
      "trusted_health",
      "trusted_root",
      "trusted_assets",
      "trusted_admin_api"
    ],
    "preserve_subnet": "10.250.100.0/24"
  },
  "activation_contract": "install candidate -> caddy validate -> systemctl restart caddy -> systemctl is-active -> focused exact postcheck",
  "admin_application_auth_intended_change": false,
  "baseline_commit": "4968bdb3c214986d0b4af32ccad09a0644619085",
  "baseline_file_count": 20,
  "baseline_file_sha256": {
    "etc/caddy/Caddyfile": "2ddfb80dc906d69457b51b958bb481b2d4b7853861f83ed41be85f39af367c31"
  },
  "baseline_tree": "5dd8b75c44dc3db711ce6324f25d1a9846f19751",
  "canonical_zip_required": true,
  "classification": "core",
  "continuation_from": {
    "change": "correct VM103 baseline tree SHA typo (remove spurious trailing b); preserve stdin-safe remote helper transport",
    "core_change_complete": false,
    "failure_phase": "preflight",
    "result": "STOP",
    "rollback_status": "not_required",
    "step_id": "STEP_050M07P28R3_R02_VM103_AWG_REMOTE_ADMIN_ACL"
  },
  "current_latest": "WG_PAID_MGTS_LATEST_20260915-082920.zip",
  "current_latest_sha256": "f35bc6ab8d391f9bfbd3653de9eb377e6ac81249d055ac65e85f59c604877b52",
  "exact_worker_fixture": "tests/exact-worker.sh",
  "expected_installer_sha256": "b95fcc5c0d3b2469bd798f28657e475a8889fdcb15c540d1a836c368f33c2e26",
  "firewall_uci_intended_change": false,
  "functional_stage": "awg_remote_vm103_admin_acl_parity",
  "machine_git_change_required": true,
  "mandatory_fixture_count": 5,
  "network_uci_intended_change": false,
  "path_ownership_manifest": "reference/path-ownership.tsv",
  "public_access_routes_intended_change": false,
  "remote_script_transport": "stdin-safe ssh -> sudo -n sh -s -- args; immutable target package only via scp",
  "revision": "R03",
  "rollback_contract": "restore exact baseline Caddyfile -> caddy validate -> systemctl restart caddy -> systemctl is-active",
  "runtime_impact": true,
  "same_class_skeleton": "STEP_050M07P27FW7_R04_VM103_REACT_ADMIN",
  "same_class_skeleton_sha256": "28734c9f952c4da5b543454558251ce5c1cfd3b1c9a4b588c62e87ed4cc43379",
  "schema": "router-step-release-v1",
  "source_of_truth": "current_latest_vm103_machine_git_plus_exact_P27FW7_R04_VM103_Caddy_skeleton",
  "step_class": "B",
  "step_id": "STEP_050M07P28R3_R03_VM103_AWG_REMOTE_ADMIN_ACL",
  "target_caddy_sha256": "d61054c2fd320eb67e2eea7c16a43ef13683230ee01666e7a7fe783353dbbacc",
  "target_environment_matrix": "reference/target-environment.tsv",
  "target_package_path": "payload/vm103-awg-remote-admin-acl-target-package.tar.gz",
  "target_package_sha256": "fa2ae1bd0dad32c7ba903e3254190b46246fb343d68fadd789410b835db8f06e",
  "touched_machines": [
    "VM103"
  ],
  "vm130_contract_commit": "fadde79bcc5756d478b8814f94ad16ad48fd25d2",
  "worker_entry": "scripts/worker.sh",
  "workflow_contract_version": 2
}