diff --git a/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z.json b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z.json new file mode 100644 index 0000000..60339e9 --- /dev/null +++ b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "verify", + "component": "cluster-knowledge-base-error-system", + "started_at_utc": "2026-08-05T08:32:12Z", + "finished_at_utc": "2026-08-05T08:32:12Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "5adfe75e793018f15e1799e207029a4a5159643047a5c99a07d18f56b088784d", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291", + "sanitized_output_sha256": "ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z\",\"command_rc\":0,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z\",\"command_rc\":0,\"correction_of_previous_logic_gaps\":[{\"exact_fix\":\"PATH-like names and colon-separated filesystem values are rejected before route construction\",\"proven_gap\":\"PATH was accepted as an HTTP route because its environment name matched a broad path regex\",\"regression_test\":\"PATH cannot pass is_route_value or appear in route templates\"},{\"exact_fix\":\"connect to the exact listener address obtained from the Reader process network table\",\"proven_gap\":\"the previous probe assumed 127.0.0.1 although the owned listener was bound to a specific non-loopback address\",\"regression_test\":\"specific listeners are probed at their exact internal address; the address is never output\"},{\"exact_fix\":\"capability names and values are secret and are replaced by in all output\",\"proven_gap\":\"HOMELAB_READER_CAPABILITY was not classified as secret\",\"regression_test\":\"secret value cannot appear in route templates or output\"}],\"error_fingerprint\":\"820f5c9a664dd86192521678e7c5790c5c6adcb442b513f49dadf4f23286d5eb\",\"latest_exact_result_basis\":{\"capsule_sha256\":\"4d3ddb435f7ab3c7211374d080966c708764dccd4c1a8158e752348838f89e8a\",\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-EXACT-ROUTE-READ-ONLY-20260805T080500Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_PROTOCOL_SPECIFIC_PROBE\",\"output_complete\":true,\"output_sha256\":\"1c712519eb2e1171ae0066e849d3ca2c71c460342f5aa3f8733a75b3360d358b\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_RUNTIME_AND_INTERFACE_PARTIALLY_DISCOVERED_BUT_NO_AUTHORITATIVE_INVENTORY_RESPONSE\",\"runner_document_rc\":0,\"runner_json_sha256\":\"778267e8222f26022de07e4364043f110da28905d238b6d91ce87407e8a5ccd5\",\"runner_rc\":0,\"runner_text_sha256\":\"52fb0b4883655abe8a39c62f94da8ce34fa0e6711dff5ef468fb0802557931f9\",\"runner_wrapper_matches_document\":true,\"status\":\"OK\"},\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBE\",\"output_truncated_in_json\":false,\"owned_listeners\":[{\"address_class\":\"private\",\"address_sha256\":\"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\",\"family\":\"ipv4\",\"inode\":\"24795\",\"port\":18788}],\"pre_command_known_error_gate\":{\"checked\":true,\"items\":[{\"id\":\"candidate-scan-limit-20260805\",\"prevention\":\"exact files only; hard source, response, route, probe and output limits\"},{\"id\":\"runner-wrapper-mismatch-20260805\",\"prevention\":\"single compact JSON below 42000 bytes; no raw sources or response bodies\"},{\"id\":\"gitea-owner-hardcoded-20260805\",\"prevention\":\"no repository owner or repository URL is assumed\"},{\"id\":\"gitea-git-auth-unavailable-20260805\",\"prevention\":\"no Git or Gitea authentication retry in this command\"},{\"id\":\"pvesh-adapter-context-unreadable-20260805\",\"prevention\":\"pvesh is not called\"},{\"id\":\"gitea-process-self-match-20260805\",\"prevention\":\"Reader identity is bound to exact systemd ControlGroup\"},{\"id\":\"sanitize-non-string-attributeerror-20260805\",\"prevention\":\"sanitize converts Any to str; embedded bool regression test\"},{\"id\":\"reader-v3-skipped-on-nonauthoritative-inventory-20260805\",\"prevention\":\"this command directly probes Reader V3\"},{\"id\":\"reader-path-env-misclassified-as-route-20260805\",\"prevention\":\"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes\"},{\"id\":\"reader-loopback-only-probe-20260805\",\"prevention\":\"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed\"},{\"id\":\"reader-capability-not-secret-20260805\",\"prevention\":\"all capability values are secret; values and concrete secret-bearing routes are never output\"}]},\"prevention_test\":{\"must_run_before_future_cluster_or_gitea_commands\":true,\"name\":\"reader_v3_protocol_specific_preflight\",\"requirements\":[\"verify exact Reader unit and server source SHA\",\"bind process and sockets to exact ControlGroup\",\"treat capability as secret\",\"reject PATH-like values as routes\",\"connect only to exact owned listener endpoints\",\"derive routes only from source, exact environment, or protocol-standard root\",\"accept inventory only from successful JSON with normalized guest rows\"]},\"process_environment\":{\"capability_name_present\":true,\"names\":[\"HOME\",\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\",\"INVOCATION_ID\",\"JOURNAL_STREAM\",\"LANG\",\"LOGNAME\",\"MEMORY_PRESSURE_WATCH\",\"MEMORY_PRESSURE_WRITE\",\"PATH\",\"SHELL\",\"SYSTEMD_EXEC_PID\",\"USER\"],\"secret_name_count\":1},\"protocol_probe\":{\"auth_candidate_count\":0,\"gitea_candidates\":[],\"guest_count\":0,\"header_names\":[],\"probes\":[{\"auth\":\"none\",\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"exact_source_literal\",\"route_template\":\"/\",\"status\":404}],\"successful_inventory_routes\":[]},\"rc\":0,\"read_only\":true,\"ready_for_guest_probe\":false,\"result_projection\":{\"bytes\":7162,\"compacted\":false,\"max_bytes\":42000},\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_HTTP_ENDPOINT_REACHED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE\",\"schema\":1,\"source_files\":[{\"actual_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"bytes\":580,\"expected_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"matches_expected\":true,\"path\":\"/etc/systemd/system/homelab-reader-v3.service\"},{\"actual_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"bytes\":3539,\"expected_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"matches_expected\":true,\"path\":\"/usr/local/sbin/homelab-reader-server-v3\"}],\"source_semantics\":{\"http_detected\":true,\"protocol_markers\":[\"basehttprequesthandler\",\"content-type\",\"do_get\",\"http.server\"],\"route_template_count\":1,\"route_templates\":[{\"method\":\"GET\",\"secret_bearing\":false,\"source\":\"exact_source_literal\",\"source_file_sha256\":\"6222c97692545e54270df7e5b953d64a1764681ddb375f3c3855402285eae36b\",\"template\":\"/\"}],\"source_environment_references\":[\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\"]},\"source_state\":\"MATCH\",\"status\":\"OK\",\"systemd_identity\":{\"identity_valid\":true,\"pid_count\":1,\"probe\":{\"duration_seconds\":0.005,\"rc\":0,\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stderr_truncated\":false,\"stdout_bytes\":375,\"stdout_sha256\":\"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9\",\"stdout_truncated\":false},\"properties\":{\"ActiveState\":\"active\",\"ControlGroup\":\"/system.slice/homelab-reader-v3.service\",\"ExecStart_present\":true,\"ExecStart_sha256\":\"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379\",\"FragmentPath\":\"/etc/systemd/system/homelab-reader-v3.service\",\"LoadState\":\"loaded\",\"MainPID\":\"1282\",\"SubState\":\"running\"}}}\n" +} diff --git a/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z.txt b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z.txt new file mode 100644 index 0000000..3362aba --- /dev/null +++ b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z.txt @@ -0,0 +1,34 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z +STATUS=OK +RC=0 +HOST=pve01 +MODE=verify +COMPONENT=cluster-knowledge-base-error-system +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=5adfe75e793018f15e1799e207029a4a5159643047a5c99a07d18f56b088784d +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291 +SANITIZED_OUTPUT_SHA256=ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291 +OUTPUT_BEGIN +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z","command_rc":0,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1} +{"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z","command_rc":0,"correction_of_previous_logic_gaps":[{"exact_fix":"PATH-like names and colon-separated filesystem values are rejected before route construction","proven_gap":"PATH was accepted as an HTTP route because its environment name matched a broad path regex","regression_test":"PATH cannot pass is_route_value or appear in route templates"},{"exact_fix":"connect to the exact listener address obtained from the Reader process network table","proven_gap":"the previous probe assumed 127.0.0.1 although the owned listener was bound to a specific non-loopback address","regression_test":"specific listeners are probed at their exact internal address; the address is never output"},{"exact_fix":"capability names and values are secret and are replaced by in all output","proven_gap":"HOMELAB_READER_CAPABILITY was not classified as secret","regression_test":"secret value cannot appear in route templates or output"}],"error_fingerprint":"820f5c9a664dd86192521678e7c5790c5c6adcb442b513f49dadf4f23286d5eb","latest_exact_result_basis":{"capsule_sha256":"4d3ddb435f7ab3c7211374d080966c708764dccd4c1a8158e752348838f89e8a","changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-EXACT-ROUTE-READ-ONLY-20260805T080500Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_PROTOCOL_SPECIFIC_PROBE","output_complete":true,"output_sha256":"1c712519eb2e1171ae0066e849d3ca2c71c460342f5aa3f8733a75b3360d358b","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_RUNTIME_AND_INTERFACE_PARTIALLY_DISCOVERED_BUT_NO_AUTHORITATIVE_INVENTORY_RESPONSE","runner_document_rc":0,"runner_json_sha256":"778267e8222f26022de07e4364043f110da28905d238b6d91ce87407e8a5ccd5","runner_rc":0,"runner_text_sha256":"52fb0b4883655abe8a39c62f94da8ce34fa0e6711dff5ef468fb0802557931f9","runner_wrapper_matches_document":true,"status":"OK"},"mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBE","output_truncated_in_json":false,"owned_listeners":[{"address_class":"private","address_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9","family":"ipv4","inode":"24795","port":18788}],"pre_command_known_error_gate":{"checked":true,"items":[{"id":"candidate-scan-limit-20260805","prevention":"exact files only; hard source, response, route, probe and output limits"},{"id":"runner-wrapper-mismatch-20260805","prevention":"single compact JSON below 42000 bytes; no raw sources or response bodies"},{"id":"gitea-owner-hardcoded-20260805","prevention":"no repository owner or repository URL is assumed"},{"id":"gitea-git-auth-unavailable-20260805","prevention":"no Git or Gitea authentication retry in this command"},{"id":"pvesh-adapter-context-unreadable-20260805","prevention":"pvesh is not called"},{"id":"gitea-process-self-match-20260805","prevention":"Reader identity is bound to exact systemd ControlGroup"},{"id":"sanitize-non-string-attributeerror-20260805","prevention":"sanitize converts Any to str; embedded bool regression test"},{"id":"reader-v3-skipped-on-nonauthoritative-inventory-20260805","prevention":"this command directly probes Reader V3"},{"id":"reader-path-env-misclassified-as-route-20260805","prevention":"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes"},{"id":"reader-loopback-only-probe-20260805","prevention":"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed"},{"id":"reader-capability-not-secret-20260805","prevention":"all capability values are secret; values and concrete secret-bearing routes are never output"}]},"prevention_test":{"must_run_before_future_cluster_or_gitea_commands":true,"name":"reader_v3_protocol_specific_preflight","requirements":["verify exact Reader unit and server source SHA","bind process and sockets to exact ControlGroup","treat capability as secret","reject PATH-like values as routes","connect only to exact owned listener endpoints","derive routes only from source, exact environment, or protocol-standard root","accept inventory only from successful JSON with normalized guest rows"]},"process_environment":{"capability_name_present":true,"names":["HOME","HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT","INVOCATION_ID","JOURNAL_STREAM","LANG","LOGNAME","MEMORY_PRESSURE_WATCH","MEMORY_PRESSURE_WRITE","PATH","SHELL","SYSTEMD_EXEC_PID","USER"],"secret_name_count":1},"protocol_probe":{"auth_candidate_count":0,"gitea_candidates":[],"guest_count":0,"header_names":[],"probes":[{"auth":"none","body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"exact_source_literal","route_template":"/","status":404}],"successful_inventory_routes":[]},"rc":0,"read_only":true,"ready_for_guest_probe":false,"result_projection":{"bytes":7162,"compacted":false,"max_bytes":42000},"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_HTTP_ENDPOINT_REACHED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE","schema":1,"source_files":[{"actual_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","bytes":580,"expected_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","matches_expected":true,"path":"/etc/systemd/system/homelab-reader-v3.service"},{"actual_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","bytes":3539,"expected_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","matches_expected":true,"path":"/usr/local/sbin/homelab-reader-server-v3"}],"source_semantics":{"http_detected":true,"protocol_markers":["basehttprequesthandler","content-type","do_get","http.server"],"route_template_count":1,"route_templates":[{"method":"GET","secret_bearing":false,"source":"exact_source_literal","source_file_sha256":"6222c97692545e54270df7e5b953d64a1764681ddb375f3c3855402285eae36b","template":"/"}],"source_environment_references":["HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT"]},"source_state":"MATCH","status":"OK","systemd_identity":{"identity_valid":true,"pid_count":1,"probe":{"duration_seconds":0.005,"rc":0,"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stderr_truncated":false,"stdout_bytes":375,"stdout_sha256":"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9","stdout_truncated":false},"properties":{"ActiveState":"active","ControlGroup":"/system.slice/homelab-reader-v3.service","ExecStart_present":true,"ExecStart_sha256":"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379","FragmentPath":"/etc/systemd/system/homelab-reader-v3.service","LoadState":"loaded","MainPID":"1282","SubState":"running"}}} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 292c94f..60339e9 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1 +1,38 @@ -{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20260805T081701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-08-05T08:17:01Z","finished_at_utc":"2026-08-05T08:17:02Z","reference_register_checked":true,"reference_sha256":"5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e","error_register_checked":true,"error_register_sha256":"24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"} +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "verify", + "component": "cluster-knowledge-base-error-system", + "started_at_utc": "2026-08-05T08:32:12Z", + "finished_at_utc": "2026-08-05T08:32:12Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "5adfe75e793018f15e1799e207029a4a5159643047a5c99a07d18f56b088784d", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291", + "sanitized_output_sha256": "ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z\",\"command_rc\":0,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z\",\"command_rc\":0,\"correction_of_previous_logic_gaps\":[{\"exact_fix\":\"PATH-like names and colon-separated filesystem values are rejected before route construction\",\"proven_gap\":\"PATH was accepted as an HTTP route because its environment name matched a broad path regex\",\"regression_test\":\"PATH cannot pass is_route_value or appear in route templates\"},{\"exact_fix\":\"connect to the exact listener address obtained from the Reader process network table\",\"proven_gap\":\"the previous probe assumed 127.0.0.1 although the owned listener was bound to a specific non-loopback address\",\"regression_test\":\"specific listeners are probed at their exact internal address; the address is never output\"},{\"exact_fix\":\"capability names and values are secret and are replaced by in all output\",\"proven_gap\":\"HOMELAB_READER_CAPABILITY was not classified as secret\",\"regression_test\":\"secret value cannot appear in route templates or output\"}],\"error_fingerprint\":\"820f5c9a664dd86192521678e7c5790c5c6adcb442b513f49dadf4f23286d5eb\",\"latest_exact_result_basis\":{\"capsule_sha256\":\"4d3ddb435f7ab3c7211374d080966c708764dccd4c1a8158e752348838f89e8a\",\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-EXACT-ROUTE-READ-ONLY-20260805T080500Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_PROTOCOL_SPECIFIC_PROBE\",\"output_complete\":true,\"output_sha256\":\"1c712519eb2e1171ae0066e849d3ca2c71c460342f5aa3f8733a75b3360d358b\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_RUNTIME_AND_INTERFACE_PARTIALLY_DISCOVERED_BUT_NO_AUTHORITATIVE_INVENTORY_RESPONSE\",\"runner_document_rc\":0,\"runner_json_sha256\":\"778267e8222f26022de07e4364043f110da28905d238b6d91ce87407e8a5ccd5\",\"runner_rc\":0,\"runner_text_sha256\":\"52fb0b4883655abe8a39c62f94da8ce34fa0e6711dff5ef468fb0802557931f9\",\"runner_wrapper_matches_document\":true,\"status\":\"OK\"},\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBE\",\"output_truncated_in_json\":false,\"owned_listeners\":[{\"address_class\":\"private\",\"address_sha256\":\"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\",\"family\":\"ipv4\",\"inode\":\"24795\",\"port\":18788}],\"pre_command_known_error_gate\":{\"checked\":true,\"items\":[{\"id\":\"candidate-scan-limit-20260805\",\"prevention\":\"exact files only; hard source, response, route, probe and output limits\"},{\"id\":\"runner-wrapper-mismatch-20260805\",\"prevention\":\"single compact JSON below 42000 bytes; no raw sources or response bodies\"},{\"id\":\"gitea-owner-hardcoded-20260805\",\"prevention\":\"no repository owner or repository URL is assumed\"},{\"id\":\"gitea-git-auth-unavailable-20260805\",\"prevention\":\"no Git or Gitea authentication retry in this command\"},{\"id\":\"pvesh-adapter-context-unreadable-20260805\",\"prevention\":\"pvesh is not called\"},{\"id\":\"gitea-process-self-match-20260805\",\"prevention\":\"Reader identity is bound to exact systemd ControlGroup\"},{\"id\":\"sanitize-non-string-attributeerror-20260805\",\"prevention\":\"sanitize converts Any to str; embedded bool regression test\"},{\"id\":\"reader-v3-skipped-on-nonauthoritative-inventory-20260805\",\"prevention\":\"this command directly probes Reader V3\"},{\"id\":\"reader-path-env-misclassified-as-route-20260805\",\"prevention\":\"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes\"},{\"id\":\"reader-loopback-only-probe-20260805\",\"prevention\":\"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed\"},{\"id\":\"reader-capability-not-secret-20260805\",\"prevention\":\"all capability values are secret; values and concrete secret-bearing routes are never output\"}]},\"prevention_test\":{\"must_run_before_future_cluster_or_gitea_commands\":true,\"name\":\"reader_v3_protocol_specific_preflight\",\"requirements\":[\"verify exact Reader unit and server source SHA\",\"bind process and sockets to exact ControlGroup\",\"treat capability as secret\",\"reject PATH-like values as routes\",\"connect only to exact owned listener endpoints\",\"derive routes only from source, exact environment, or protocol-standard root\",\"accept inventory only from successful JSON with normalized guest rows\"]},\"process_environment\":{\"capability_name_present\":true,\"names\":[\"HOME\",\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\",\"INVOCATION_ID\",\"JOURNAL_STREAM\",\"LANG\",\"LOGNAME\",\"MEMORY_PRESSURE_WATCH\",\"MEMORY_PRESSURE_WRITE\",\"PATH\",\"SHELL\",\"SYSTEMD_EXEC_PID\",\"USER\"],\"secret_name_count\":1},\"protocol_probe\":{\"auth_candidate_count\":0,\"gitea_candidates\":[],\"guest_count\":0,\"header_names\":[],\"probes\":[{\"auth\":\"none\",\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"exact_source_literal\",\"route_template\":\"/\",\"status\":404}],\"successful_inventory_routes\":[]},\"rc\":0,\"read_only\":true,\"ready_for_guest_probe\":false,\"result_projection\":{\"bytes\":7162,\"compacted\":false,\"max_bytes\":42000},\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_HTTP_ENDPOINT_REACHED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE\",\"schema\":1,\"source_files\":[{\"actual_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"bytes\":580,\"expected_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"matches_expected\":true,\"path\":\"/etc/systemd/system/homelab-reader-v3.service\"},{\"actual_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"bytes\":3539,\"expected_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"matches_expected\":true,\"path\":\"/usr/local/sbin/homelab-reader-server-v3\"}],\"source_semantics\":{\"http_detected\":true,\"protocol_markers\":[\"basehttprequesthandler\",\"content-type\",\"do_get\",\"http.server\"],\"route_template_count\":1,\"route_templates\":[{\"method\":\"GET\",\"secret_bearing\":false,\"source\":\"exact_source_literal\",\"source_file_sha256\":\"6222c97692545e54270df7e5b953d64a1764681ddb375f3c3855402285eae36b\",\"template\":\"/\"}],\"source_environment_references\":[\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\"]},\"source_state\":\"MATCH\",\"status\":\"OK\",\"systemd_identity\":{\"identity_valid\":true,\"pid_count\":1,\"probe\":{\"duration_seconds\":0.005,\"rc\":0,\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stderr_truncated\":false,\"stdout_bytes\":375,\"stdout_sha256\":\"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9\",\"stdout_truncated\":false},\"properties\":{\"ActiveState\":\"active\",\"ControlGroup\":\"/system.slice/homelab-reader-v3.service\",\"ExecStart_present\":true,\"ExecStart_sha256\":\"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379\",\"FragmentPath\":\"/etc/systemd/system/homelab-reader-v3.service\",\"LoadState\":\"loaded\",\"MainPID\":\"1282\",\"SubState\":\"running\"}}}\n" +} diff --git a/runtime/latest.txt b/runtime/latest.txt index 95c7e79..3362aba 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,164 +1,34 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=CONTEXT-AUTO-[PRIVATE_IP]701Z +COMMAND_ID=HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z STATUS=OK RC=0 HOST=pve01 -COMPONENT=cluster-context -REFERENCE_SHA[PRIVATE_IP]f8edc75fcf[PRIVATE_IP]c[PRIVATE_IP]cc112ceccb6cf[PRIVATE_IP]a4deb8e -ERROR_REGISTER_SHA[PRIVATE_IP]c7fa[PRIVATE_IP]583c4aefac[PRIVATE_IP]1736ed[PRIVATE_IP]ab83 +MODE=verify +COMPONENT=cluster-knowledge-base-error-system +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=5adfe75e793018f15e1799e207029a4a5159643047a5c99a07d18f56b088784d +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291 +SANITIZED_OUTPUT_SHA256=ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291 OUTPUT_BEGIN -GENERATED_AT_UTC=[PRIVATE_IP]T08:17:01Z -Cluster information -------------------- -Name: homelab -Config Version: 3 -Transport: knet -Secure auth: on +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z","command_rc":0,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1} +{"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z","command_rc":0,"correction_of_previous_logic_gaps":[{"exact_fix":"PATH-like names and colon-separated filesystem values are rejected before route construction","proven_gap":"PATH was accepted as an HTTP route because its environment name matched a broad path regex","regression_test":"PATH cannot pass is_route_value or appear in route templates"},{"exact_fix":"connect to the exact listener address obtained from the Reader process network table","proven_gap":"the previous probe assumed 127.0.0.1 although the owned listener was bound to a specific non-loopback address","regression_test":"specific listeners are probed at their exact internal address; the address is never output"},{"exact_fix":"capability names and values are secret and are replaced by in all output","proven_gap":"HOMELAB_READER_CAPABILITY was not classified as secret","regression_test":"secret value cannot appear in route templates or output"}],"error_fingerprint":"820f5c9a664dd86192521678e7c5790c5c6adcb442b513f49dadf4f23286d5eb","latest_exact_result_basis":{"capsule_sha256":"4d3ddb435f7ab3c7211374d080966c708764dccd4c1a8158e752348838f89e8a","changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-EXACT-ROUTE-READ-ONLY-20260805T080500Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_PROTOCOL_SPECIFIC_PROBE","output_complete":true,"output_sha256":"1c712519eb2e1171ae0066e849d3ca2c71c460342f5aa3f8733a75b3360d358b","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_RUNTIME_AND_INTERFACE_PARTIALLY_DISCOVERED_BUT_NO_AUTHORITATIVE_INVENTORY_RESPONSE","runner_document_rc":0,"runner_json_sha256":"778267e8222f26022de07e4364043f110da28905d238b6d91ce87407e8a5ccd5","runner_rc":0,"runner_text_sha256":"52fb0b4883655abe8a39c62f94da8ce34fa0e6711dff5ef468fb0802557931f9","runner_wrapper_matches_document":true,"status":"OK"},"mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBE","output_truncated_in_json":false,"owned_listeners":[{"address_class":"private","address_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9","family":"ipv4","inode":"24795","port":18788}],"pre_command_known_error_gate":{"checked":true,"items":[{"id":"candidate-scan-limit-20260805","prevention":"exact files only; hard source, response, route, probe and output limits"},{"id":"runner-wrapper-mismatch-20260805","prevention":"single compact JSON below 42000 bytes; no raw sources or response bodies"},{"id":"gitea-owner-hardcoded-20260805","prevention":"no repository owner or repository URL is assumed"},{"id":"gitea-git-auth-unavailable-20260805","prevention":"no Git or Gitea authentication retry in this command"},{"id":"pvesh-adapter-context-unreadable-20260805","prevention":"pvesh is not called"},{"id":"gitea-process-self-match-20260805","prevention":"Reader identity is bound to exact systemd ControlGroup"},{"id":"sanitize-non-string-attributeerror-20260805","prevention":"sanitize converts Any to str; embedded bool regression test"},{"id":"reader-v3-skipped-on-nonauthoritative-inventory-20260805","prevention":"this command directly probes Reader V3"},{"id":"reader-path-env-misclassified-as-route-20260805","prevention":"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes"},{"id":"reader-loopback-only-probe-20260805","prevention":"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed"},{"id":"reader-capability-not-secret-20260805","prevention":"all capability values are secret; values and concrete secret-bearing routes are never output"}]},"prevention_test":{"must_run_before_future_cluster_or_gitea_commands":true,"name":"reader_v3_protocol_specific_preflight","requirements":["verify exact Reader unit and server source SHA","bind process and sockets to exact ControlGroup","treat capability as secret","reject PATH-like values as routes","connect only to exact owned listener endpoints","derive routes only from source, exact environment, or protocol-standard root","accept inventory only from successful JSON with normalized guest rows"]},"process_environment":{"capability_name_present":true,"names":["HOME","HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT","INVOCATION_ID","JOURNAL_STREAM","LANG","LOGNAME","MEMORY_PRESSURE_WATCH","MEMORY_PRESSURE_WRITE","PATH","SHELL","SYSTEMD_EXEC_PID","USER"],"secret_name_count":1},"protocol_probe":{"auth_candidate_count":0,"gitea_candidates":[],"guest_count":0,"header_names":[],"probes":[{"auth":"none","body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"exact_source_literal","route_template":"/","status":404}],"successful_inventory_routes":[]},"rc":0,"read_only":true,"ready_for_guest_probe":false,"result_projection":{"bytes":7162,"compacted":false,"max_bytes":42000},"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_HTTP_ENDPOINT_REACHED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE","schema":1,"source_files":[{"actual_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","bytes":580,"expected_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","matches_expected":true,"path":"/etc/systemd/system/homelab-reader-v3.service"},{"actual_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","bytes":3539,"expected_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","matches_expected":true,"path":"/usr/local/sbin/homelab-reader-server-v3"}],"source_semantics":{"http_detected":true,"protocol_markers":["basehttprequesthandler","content-type","do_get","http.server"],"route_template_count":1,"route_templates":[{"method":"GET","secret_bearing":false,"source":"exact_source_literal","source_file_sha256":"6222c97692545e54270df7e5b953d64a1764681ddb375f3c3855402285eae36b","template":"/"}],"source_environment_references":["HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT"]},"source_state":"MATCH","status":"OK","systemd_identity":{"identity_valid":true,"pid_count":1,"probe":{"duration_seconds":0.005,"rc":0,"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stderr_truncated":false,"stdout_bytes":375,"stdout_sha256":"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9","stdout_truncated":false},"properties":{"ActiveState":"active","ControlGroup":"/system.slice/homelab-reader-v3.service","ExecStart_present":true,"ExecStart_sha256":"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379","FragmentPath":"/etc/systemd/system/homelab-reader-v3.service","LoadState":"loaded","MainPID":"1282","SubState":"running"}}} -Quorum information ------------------- -Date: Wed Aug [PRIVATE_IP] 2026 -Quorum provider: corosync_votequorum -Nodes: 3 -Node ID: [PRIVATE_IP] -Ring ID: 1.db -Quorate: Yes - -Votequorum information ----------------------- -Expected votes: 3 -Highest expected: 3 -Total votes: 3 -Quorum: 2 -Flags: Quorate - -Membership information ----------------------- - Nodeid Votes Name -[PRIVATE_IP] [PRIVATE_IP].11 (local) -[PRIVATE_IP] [PRIVATE_IP].13 -[PRIVATE_IP] [PRIVATE_IP].12 - -Membership information ----------------------- - Nodeid Votes Name - 1 1 pve01 (local) - 2 1 pve03 - 3 1 pve02 -[{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/110","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":681002,"vmid":110},{"cpu":[PRIVATE_IP]696625,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/111","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":681087,"vmid":111},{"cpu":[PRIVATE_IP]222e-05,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/112","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":681047,"vmid":112},{"cpu":0,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/113","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":681090,"vmid":113},{"cpu":[PRIVATE_IP]11811,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"edge-vm","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":681026,"vmid":130},{"cpu":[PRIVATE_IP]66227,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/150","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"nextcloud","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":680999,"vmid":150},{"cpu":[PRIVATE_IP]815437,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/160","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"forum-prod","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"qemu","uptime":681083,"vmid":160},{"cpu":[PRIVATE_IP]73318,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/170","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"core-apps","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":680995,"vmid":170},{"cpu":[PRIVATE_IP]28763,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/171","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"monitoring","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":680992,"vmid":171},{"cpu":[PRIVATE_IP]52349,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/180","maxcpu":2,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"cluster-admin","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"qemu","uptime":681080,"vmid":180},{"cpu":[PRIVATE_IP]164958,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/190","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"homelab-ops-worker","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":681022,"vmid":190},{"cpu":0,"disk":0,"diskread":0,"diskwrite":0,"id":"qemu/9130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":0,"memhost":0,"name":"edge-cold-standby","netin":0,"netout":0,"node":"pve02","status":"stopped","template":0,"type":"qemu","uptime":0,"vmid":9130},{"cgroup-mode":2,"cpu":[PRIVATE_IP]63648,"disk":[PRIVATE_IP],"id":"node/pve01","level":"","maxcpu":24,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve01","status":"online","type":"node","uptime":681104},{"cgroup-mode":2,"cpu":[PRIVATE_IP]54832,"disk":[PRIVATE_IP],"id":"node/pve02","level":"","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve02","status":"online","type":"node","uptime":681123},{"cgroup-mode":2,"cpu":[PRIVATE_IP]02443,"disk":[PRIVATE_IP],"id":"node/pve03","level":"","maxcpu":8,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve03","status":"online","type":"node","uptime":681044},{"content":"import,iso,vztmpl,backup","disk":[PRIVATE_IP],"id":"storage/pve01/local","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"import,iso,vztmpl,backup","disk":[PRIVATE_IP],"id":"storage/pve02/local","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"import,iso,vztmpl,backup","disk":[PRIVATE_IP],"id":"storage/pve03/local","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve01/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve02/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve03/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"id":"network/pve01/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve01","status":"ok","type":"network"},{"id":"network/pve02/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve02","status":"ok","type":"network"},{"id":"network/pve03/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve03","status":"ok","type":"network"}] -Name Type Status Total (KiB) Used (KiB) Available (KiB) % -local dir active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 14.33% -local-lvm lvmthin active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 27.38% - UNIT LOAD ACTIVE SUB DESCRIPTION -● homelab-backup-matrix-refresh.service loaded failed failed Generate unified homelab backup matrix state -● homelab-crypto-portfolio-chart-health.service loaded failed failed Crypto portfolio chart health check -● skladchik-reports-monitor-supervisor.service loaded failed failed Skladchik reports monitor full supervisor - -Legend: LOAD → Reflects whether the unit definition was properly loaded. - ACTIVE → The high-level unit activation state, i.e. generalization of SUB. - SUB → The low-level unit activation state, values depend on unit type. - -3 loaded units listed. -NEXT LEFT LAST PASSED UNIT ACTIVATES -Wed [PRIVATE_IP] 11:17:18 MSK 16s Wed [PRIVATE_IP] 11:16:17 MSK 45s ago homelab-router-watchdog.timer homelab-router-watchdog.service -Wed [PRIVATE_IP] 11:17:23 MSK 21s Wed [PRIVATE_IP] 11:11:57 MSK 5min ago homelab-crypto-portfolio-chart-health.timer homelab-crypto-portfolio-chart-health.service -Wed [PRIVATE_IP] 11:17:28 MSK 25s Wed [PRIVATE_IP] 11:16:28 MSK 34s ago homelab-cluster-admin-webpanel-sync.timer homelab-cluster-admin-webpanel-sync.service -Wed [PRIVATE_IP] 11:17:28 MSK 25s Wed [PRIVATE_IP] 11:16:28 MSK 34s ago homelab-private-vpn-hosts-health.timer homelab-private-vpn-hosts-health.service -Wed [PRIVATE_IP] 11:17:31 MSK 28s Wed [PRIVATE_IP] 11:15:26 MSK 1min 35s ago homelab-cluster-admin-inventory-sync.timer homelab-cluster-admin-inventory-sync.service -Wed [PRIVATE_IP] 11:18:26 MSK 1min 24s Wed [PRIVATE_IP] 11:13:26 MSK 3min 35s ago homelab-smartctl-textfile.timer homelab-smartctl-textfile.service -Wed [PRIVATE_IP] 11:18:26 MSK 1min 24s Wed [PRIVATE_IP] 11:13:26 MSK 3min 35s ago netbird-peers-health.timer netbird-peers-health.service -Wed [PRIVATE_IP] 11:19:36 MSK 2min 34s Wed [PRIVATE_IP] 11:14:07 MSK 2min 55s ago homelab-health-metrics.timer homelab-health-metrics.service -Wed [PRIVATE_IP] 11:20:07 MSK 3min 4s Wed [PRIVATE_IP] 11:05:07 MSK 11min ago prometheus-node-exporter-apt.timer prometheus-node-exporter-apt.service -Wed [PRIVATE_IP] 11:22:26 MSK 5min Wed [PRIVATE_IP] 11:07:26 MSK 9min ago homelab-disk-space-health.timer homelab-disk-space-health.service -Wed [PRIVATE_IP] 11:24:26 MSK 7min Wed [PRIVATE_IP] 11:09:26 MSK 7min ago homelab-pve03-staging-capacity-health.timer homelab-pve03-staging-capacity-health.service -Wed [PRIVATE_IP] 11:25:26 MSK 8min Wed [PRIVATE_IP] 11:10:26 MSK 6min ago prometheus-node-exporter-nvme.timer prometheus-node-exporter-nvme.service -Wed [PRIVATE_IP] 11:26:14 MSK 9min Wed [PRIVATE_IP] 11:16:14 MSK 47s ago skladchik-reports-monitor-supervisor.timer skladchik-reports-monitor-supervisor.service -Wed [PRIVATE_IP] 11:30:00 MSK 12min Wed [PRIVATE_IP] 11:15:14 MSK 1min 47s ago homelab-incident-journal.timer homelab-incident-journal.service -Wed [PRIVATE_IP] 11:30:10 MSK 13min Wed [PRIVATE_IP] 11:15:50 MSK 1min 12s ago homelab-duty-admin-v2.timer homelab-duty-admin-v2.service -Wed [PRIVATE_IP] 11:31:00 MSK 13min Wed [PRIVATE_IP] 11:16:28 MSK 34s ago homelab-external-probe-vps-health.timer homelab-external-probe-vps-health.service -Wed [PRIVATE_IP] 11:31:23 MSK 14min Wed [PRIVATE_IP] 11:16:26 MSK 35s ago homelab-forum-snuffleupagus-health.timer homelab-forum-snuffleupagus-health.service -Wed [PRIVATE_IP] 11:31:59 MSK 14min Wed [PRIVATE_IP] 11:01:47 MSK 15min ago homelab-mkdocs-auto-refresh.timer homelab-mkdocs-auto-refresh.service -Wed [PRIVATE_IP] 11:42:50 MSK 25min Wed [PRIVATE_IP] 11:09:14 MSK 7min ago homelab-reference-refresh.timer homelab-reference-refresh.service -Wed [PRIVATE_IP] 14:08:26 MSK 2h 51min Wed [PRIVATE_IP] 08:08:26 MSK 3h 8min ago homelab-vps-identity-audit.timer homelab-vps-identity-audit.service -Wed [PRIVATE_IP] 14:20:26 MSK 3h 3min Tue [PRIVATE_IP] 14:20:26 MSK 20h ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service -Wed [PRIVATE_IP] 20:41:26 MSK 9h Wed [PRIVATE_IP] 08:05:14 MSK 3h 11min ago apt-daily.timer apt-daily.service -Thu [PRIVATE_IP] 00:00:00 MSK 12h Wed [PRIVATE_IP] 00:00:07 MSK 11h ago dpkg-db-backup.timer dpkg-db-backup.service -Thu [PRIVATE_IP] 00:03:40 MSK 12h Wed [PRIVATE_IP] 00:51:17 MSK 10h ago logrotate.timer logrotate.service -Thu [PRIVATE_IP] 00:10:46 MSK 12h Wed [PRIVATE_IP] 00:13:26 MSK 11h ago homelab-docker-health.timer homelab-docker-health.service -Thu [PRIVATE_IP] 00:12:36 MSK 12h Wed [PRIVATE_IP] 00:18:58 MSK 10h ago homelab-quality-gate.timer homelab-quality-gate.service -Thu [PRIVATE_IP] 00:18:11 MSK 13h Wed [PRIVATE_IP] 00:08:47 MSK 11h ago homelab-evidence-catalog.timer homelab-evidence-catalog.service -Thu [PRIVATE_IP] 00:19:51 MSK 13h Wed [PRIVATE_IP] 00:08:07 MSK 11h ago homelab-storage-capacity.timer homelab-storage-capacity.service -Thu [PRIVATE_IP] 02:45:12 MSK 15h Wed [PRIVATE_IP] 04:06:07 MSK 7h ago pve-daily-update.timer pve-daily-update.service -Thu [PRIVATE_IP] 03:50:00 MSK 16h Wed [PRIVATE_IP] 03:50:07 MSK 7h ago filebrowser-offhost-sync.timer filebrowser-offhost-sync.service -Thu [PRIVATE_IP] 04:35:40 MSK 17h Wed [PRIVATE_IP] 04:48:14 MSK 6h ago homelab-edge-vm-offhost-freshness.timer homelab-edge-vm-offhost-freshness.service -Thu [PRIVATE_IP] 04:52:05 MSK 17h Wed [PRIVATE_IP] 04:58:26 MSK 6h ago homelab-sops-edge-secret-coverage.timer homelab-sops-edge-secret-coverage.service -Thu [PRIVATE_IP] 06:51:28 MSK 19h Wed [PRIVATE_IP] 06:01:14 MSK 5h 15min ago apt-daily-upgrade.timer apt-daily-upgrade.service -Thu [PRIVATE_IP] 07:03:41 MSK 19h Wed [PRIVATE_IP] 07:17:02 MSK 4h 0min ago homelab-drift-check.timer homelab-drift-check.service -Thu [PRIVATE_IP] 07:28:22 MSK 20h Wed [PRIVATE_IP] 07:32:07 MSK 3h 44min ago homelab-service-registry-check.timer homelab-service-registry-check.service -Thu [PRIVATE_IP] 07:48:33 MSK 20h Wed [PRIVATE_IP] 07:56:50 MSK 3h 20min ago homelab-dependency-map-check.timer homelab-dependency-map-check.service -Thu [PRIVATE_IP] 07:54:57 MSK 20h Wed [PRIVATE_IP] 07:54:04 MSK 3h 22min ago homelab-alerting-health.timer homelab-alerting-health.service -Thu [PRIVATE_IP] 08:00:12 MSK 20h Wed [PRIVATE_IP] 07:56:59 MSK 3h 20min ago homelab-runbook-generate.timer homelab-runbook-generate.service -Thu [PRIVATE_IP] 08:04:28 MSK 20h Wed [PRIVATE_IP] 08:06:26 MSK 3h 10min ago homelab-duty-admin-report.timer homelab-duty-admin-report.service -Thu [PRIVATE_IP] 08:06:16 MSK 20h Wed [PRIVATE_IP] 07:48:26 MSK 3h 28min ago homelab-desired-state-sync.timer homelab-desired-state-sync.service -Thu [PRIVATE_IP] 08:06:43 MSK 20h Wed [PRIVATE_IP] 08:17:02 MSK 2h 59min ago homelab-kuma-monitor-policy.timer homelab-kuma-monitor-policy.service -Thu [PRIVATE_IP] 08:12:34 MSK 20h Wed [PRIVATE_IP] 08:11:14 MSK 3h 5min ago homelab-overall-health.timer homelab-overall-health.service -Thu [PRIVATE_IP] 08:29:02 MSK 21h Wed [PRIVATE_IP] 08:21:50 MSK 2h 55min ago homelab-final-readiness-gate.timer homelab-final-readiness-gate.service -Thu [PRIVATE_IP] 08:29:18 MSK 21h Wed [PRIVATE_IP] 08:30:14 MSK 2h 46min ago homelab-capacity-risk.timer homelab-capacity-risk.service -Thu [PRIVATE_IP] 08:44:24 MSK 21h Wed [PRIVATE_IP] 01:56:14 MSK 9h ago man-db.timer man-db.service -Thu [PRIVATE_IP] 08:45:56 MSK 21h Wed [PRIVATE_IP] 08:40:50 MSK 2h 36min ago homelab-secret-exposure-guard.timer homelab-secret-exposure-guard.service -Thu [PRIVATE_IP] 08:47:53 MSK 21h Wed [PRIVATE_IP] 08:55:14 MSK 2h 21min ago homelab-golden-state-index.timer homelab-golden-state-index.service -Thu [PRIVATE_IP] 08:51:13 MSK 21h Wed [PRIVATE_IP] 08:37:07 MSK 2h 39min ago homelab-cluster-passport.timer homelab-cluster-passport.service -Thu [PRIVATE_IP] 08:53:10 MSK 21h Wed [PRIVATE_IP] 08:47:07 MSK 2h 29min ago immich-media-offhost-sync.timer immich-media-offhost-sync.service -Thu [PRIVATE_IP] 09:07:43 MSK 21h Wed [PRIVATE_IP] 09:21:07 MSK 1h 55min ago memos-offhost-sync.timer memos-offhost-sync.service -Thu [PRIVATE_IP] 10:15:00 MSK 22h Wed [PRIVATE_IP] 10:15:07 MSK 1h 1min ago skladchik-reports-monitor-monthly-selftest-watch.timer skladchik-reports-monitor-monthly-selftest-watch.service -Sun [PRIVATE_IP] 03:10:38 MSK 3 days Sun [PRIVATE_IP] 03:10:25 MSK 3 days ago xfs_scrub_all.timer xfs_scrub_all.service -Sun [PRIVATE_IP] 03:10:48 MSK 3 days Sun [PRIVATE_IP] 03:10:50 MSK 3 days ago e2scrub_all.timer e2scrub_all.service -Mon [PRIVATE_IP] 00:03:56 MSK 4 days Mon [PRIVATE_IP] 00:11:50 MSK 2 days ago homelab-secret-sanity.timer homelab-secret-sanity.service -Mon [PRIVATE_IP] 01:11:21 MSK 4 days Mon [PRIVATE_IP] 01:17:56 MSK 2 days ago fstrim.timer fstrim.service -- - - - prometheus-node-exporter-ipmitool-sensor.timer prometheus-node-exporter-ipmitool-sensor.service -- - - - prometheus-node-exporter-mellanox-hca-temp.timer prometheus-node-exporter-mellanox-hca-temp.service -- - - - prometheus-node-exporter-smartmon.timer prometheus-node-exporter-smartmon.service - -58 timers listed. -- Обрезанная, повреждённая или частично вставленная команда считается невыполненной; сначала проводится side-effect audit. -- Хвост parse-ошибки закрывается только после доказательства отсутствия изменений и временных артефактов. -- Proof: /var/lib/homelab-change-sets/operator-command-size-guard-v[PRIVATE_IP]T182653Z/report.txt - -## HOMELAB_ADMIN_CLI_CONTRACT_[PRIVATE_IP] -- Поддерживаемые команды: version, status, lint TASK_DIR, validate TASK_DIR, run TASK_DIR PHASE. -- Отдельная команда --help отсутствует. Неизвестный аргумент печатает usage и штатно возвращает RC=64. -- Нельзя трактовать RC=64 от --help как неисправность runner. -- Для проверки доступности runner использовать homelab-admin version; для структуры CLI использовать зафиксированную usage-строку. -- Proof: /var/lib/homelab-change-sets/homelab-admin-cli-contract-fix-v[PRIVATE_IP]T183338Z/report.txt - -AUTOMATIC_CLUSTER_CONTEXT_REFRESH_[PRIVATE_IP] -Collector: /usr/local/sbin/homelab-context-collect -Scheduler: hourly at minute 17 via /etc/cron.d/homelab-context-refresh -Destination: immutable Gitea runtime history with CONTEXT-AUTO UTC command IDs. - -AUTOMATIC_CLUSTER_CONTEXT_REFRESH_DIRECT_[PRIVATE_IP] -Publisher: /usr/local/sbin/homelab-context-refresh-direct -Schedule: hourly at minute 17. -Destination: immutable assistant-runtime history with CONTEXT-AUTO UTC IDs. -ANTI_REGRESSION_TOKEN=HOMELAB_VM_2CLOUD_444_OUTER_LAUNCHER_BOUNDARY_REQUIRED -- Anti-regression: validate the complete outer launcher with a shell syntax check and verify the wrapper argument boundary before issuing it. -- Infrastructure action executed: none. -- Backup payload impact: none. -- Production impact: none. -- Status: CLOSED; UNRESOLVED_TAIL_COUNT=0. -- Registered at: [PRIVATE_IP]T11:20:32Z - -## ERROR_[PRIVATE_IP]_HOMELAB_VM_2CLOUD_DRAIN_CLOSURE_PREFLIGHT_446 -COMMAND_ID=HOMELAB-VM-2CLOUD-DRAIN-CLOSURE-PREFLIGHT-446 -- Symptom: homelab-chat-run-linked printed Usage and skipped result-feed publication as invalid input. -- Root cause: the diagnostic script was piped to wrapper stdin and the mandatory double-dash command separator was omitted. -- Correction: invoke homelab-chat-run-linked as COMMAND_ID MODE COMPONENT -- command arguments; stdin is not its command interface. -ANTI_REGRESSION_TOKEN=HOMELAB_CHAT_RUN_COMMAND_REQUIRES_DOUBLE_DASH -- Anti-regression: treat wrapper Usage as the authoritative CLI contract and syntax-check the complete launcher, not only its inner payload. -- Infrastructure action executed: none. -- Backup payload impact: none. -- Production impact: none. -- Status: CLOSED; UNRESOLVED_TAIL_COUNT=0. -- Registered at: [PRIVATE_IP]T11:20:32Z OUTPUT_END CHAT_OUTPUT_END