# Census overlay moves-offline (the offline operator move: docs/superpowers/plans/2026-10-20-offline-operator-move.md), loaded LAST, after bootstrap-carlos-follows-316. RULED (census-ruling-moves-offline, platform-1c, 2026-10-20), accepted as proposed; every row is rev3=census-ruling-moves-offline, and the ruling is asked of the census owner (platform-1c). The proposal, with each unit's executing identity: docs/superpowers/notes/census-proposal-moves-offline.md.
# Every new root-read unit runs as the agent (carlos-edge.service, user carlos), the console (user carlos-console) or the carlos CLI on a person's machine, and makes no root decision, so each is proposed accepted legacy on census-ruling-carlos-run's footing, at the disposition main gives its moves siblings (J1 root-route for registry and route reads, J4 root-input for file reads). In a root process the armed moves worker is nil, so reconcileSerializedWith adds no offline hook there.
# Four changed legacy units are re-frozen at main's disposition with the change named in their basis (edgesFileLoop, NewS3Server, archive.walk, mover.roundTrip). Two authority units (fastConvergeLoop B3, armMovesPass B,C) are re-pinned at main's class and task. The accepted-legacy rows add 43 frozen declarations, so the seal moves. Ten source envelopes are re-pinned.
# Extension of the ruling (platform-1c, for 8dc2a544's release item): landRun.release is re-frozen at its disposition with its new digest; landRun.liveNotSealed is accepted legacy on the condition that it compares the live link's Readlink target string and follows nothing beyond the link (44 frozen declarations); the internal/host envelope is re-pinned.
# OfflineStart and the internal/provision envelope: re-pinned for a text-only helper extraction (copy gate), 2026-10-20; no read, class or behaviour change. OfflineStart is re-frozen at its disposition with its new digest; its site (file:Open@184) is unchanged.
@coverage	.	1d5649fef5f08e01c5b974b164e2aae3c5178f281601f6ffcb2df89fb1ab5fc2
@coverage	internal/cgroup	59eaf7077de51aad79f5370fd21972e2b8782ffc76f7223f95e3efab4e47c0ed
@coverage	internal/console	f500b73a74639435526caee7592de07ce79936a3b09870203c379dc70255c999
@coverage	internal/host	87f132ee6b10faa94c53fc1c7959d4c730bead49fc4fc643868fa8d673226e11
@coverage	internal/layout	ad22438dbe7560e52e57fa201f94cebab357cfc0627965c9aae89fdfcf52043a
@coverage	internal/lease	6b6e9501d36079f0efbfc3a3739b09ff0e40837f2cb986a1ce6638dc3cd1bd87
@coverage	internal/lease/leasetest	36f174cae2871a12582d804ac8887ca43ae51ad4421bd645eaabbbac4c5387fd
@coverage	internal/moves	3c7de98d4a1783d542039d050b0ebee0c159f416b89cb3cae2461d7560b7867b
@coverage	internal/moves/archive	5ca2e60aedefb3ef43fb7a334e2e8c659e3ef504ede415a93521e32540e00014
@coverage	internal/provision	1d6ac220427a88a68786ae5fc59fe5d053394ffa4e3918db7075ace230340374
@legacy	2412dae990f2a0de699c37ceab1fbb8c25f23d88d4eb024975e1df6b1dc17b55	internal/host/edgesfile.go	edgesFileLoop	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body (census-ruling-seeded-instances) with offline-move-1 joining the published capabilities each pass while the armed moves worker is capable (withOfflineCapability), and headroom asked of region HA's capability alone; read site unchanged, offset moved; a report, not a decision	file:Read@2741	a764d80b75c3cf046ba499363f278c3411c5cb0c2b528322525e4dce292fb8b5
internal/host/edgesfile.go	edgesFileLoop	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body (census-ruling-seeded-instances) with offline-move-1 joining the published capabilities each pass while the armed moves worker is capable (withOfflineCapability), and headroom asked of region HA's capability alone; read site unchanged, offset moved; a report, not a decision	file:Read@2741	a764d80b75c3cf046ba499363f278c3411c5cb0c2b528322525e4dce292fb8b5
@legacy	7d09db1a70c36e9efdd523a370152ab8f938b00f668d312becc634245ed824db	internal/lease/leasetest/s3server.go	NewS3Server	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=tests only (internal/lease/leasetest, imported by no production package): main's fixture (census-ruling-FS-R10) with ListObjectsV2 and If-Match on DeleteObject added, as S3 answers them; simulated ETags and conditional writes grant no production root authority	file:Query@479	8a28a1d7654bd91cfa9af1396293ec4c872b0f549852240cb3f4a1a4c0a336f0
internal/lease/leasetest/s3server.go	NewS3Server	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=tests only (internal/lease/leasetest, imported by no production package): main's fixture (census-ruling-FS-R10) with ListObjectsV2 and If-Match on DeleteObject added, as S3 answers them; simulated ETags and conditional writes grant no production root authority	file:Query@479	8a28a1d7654bd91cfa9af1396293ec4c872b0f549852240cb3f4a1a4c0a336f0
@legacy	da4c0f9840cd0b2d364b8ad9872039f661a9fe5eecba364e8231f3736d653a08	internal/moves/archive/archive.go	walk	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body (census-ruling-moves-overcap-cut-236, root-input J4) with a skip filter that only leaves paths out (nil from every caller today); reads stay on the os.Root, and its binding condition holds: no read falls back to a path-based open	file:Lstat@1263,file:Lstat@842,file:WalkDir@270	0bead43f30e65920959de7ddd56f0de2a5648a8eb1d2647a264f7fd333a6d8ec
internal/moves/archive/archive.go	walk	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body (census-ruling-moves-overcap-cut-236, root-input J4) with a skip filter that only leaves paths out (nil from every caller today); reads stay on the os.Root, and its binding condition holds: no read falls back to a path-based open	file:Lstat@1263,file:Lstat@842,file:WalkDir@270	0bead43f30e65920959de7ddd56f0de2a5648a8eb1d2647a264f7fd333a6d8ec
@legacy	a3d706afea0a3fbd5f7333b89740d33febcbe68a8c60a8d212c13687b01ab250	move.go	mover.roundTrip	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=the carlos CLI on a person's machine, as that person (no box unit): main's body with the offline status view's waiting sentence read from the reply (WireWaiting); read site unchanged, offset moved	file:ReadAll@881	9c212d3401dd41bb1e7fa849f5f7b9a648ffc94d6e1c7cb8ea14cff1e97633e4
move.go	mover.roundTrip	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=the carlos CLI on a person's machine, as that person (no box unit): main's body with the offline status view's waiting sentence read from the reply (WireWaiting); read site unchanged, offset moved	file:ReadAll@881	9c212d3401dd41bb1e7fa849f5f7b9a648ffc94d6e1c7cb8ea14cff1e97633e4
@legacy	bc0cfd868692856af9906a8f18c8897c58be1e93132416ed040b35e6d67a8b2d	internal/cgroup/hostprocs_linux.go	countProcs	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, through moveCfg.Procs (armOffline): counts the pids in the host's exec cgroup and nested slice in cgroupfs, never following a link; the count goes in the source report (-1 when unknown) and never starts, stops or kills anything	file:Lstat@194,file:ReadDir@500	2588e00f3fd1b0d29268040153dbfb62419d45fe10efd7bbe1ceed787879c0e3
internal/cgroup/hostprocs_linux.go	countProcs	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, through moveCfg.Procs (armOffline): counts the pids in the host's exec cgroup and nested slice in cgroupfs, never following a link; the count goes in the source report (-1 when unknown) and never starts, stops or kills anything	file:Lstat@194,file:ReadDir@500	2588e00f3fd1b0d29268040153dbfb62419d45fe10efd7bbe1ceed787879c0e3
@legacy	7657f503e335161627c9c5e817eef736fe5a9e25b41db153e740927dc05fe901	internal/cgroup/hostprocs_linux.go	readProcsFile	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, counts the lines of one cgroup.procs for countProcs; a file gone mid-listing lists nothing	file:Open@58,file:Stat@398	3799fc0eef74c36cd1a9eb5612fc917ee9c3cb08fff90d3ccec34f415183fa5c
internal/cgroup/hostprocs_linux.go	readProcsFile	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, counts the lines of one cgroup.procs for countProcs; a file gone mid-listing lists nothing	file:Open@58,file:Stat@398	3799fc0eef74c36cd1a9eb5612fc917ee9c3cb08fff90d3ccec34f415183fa5c
@legacy	a260977799815034564b22fd632c6704858860b1340c933f23b72736585065cb	internal/console/apiinstancemove_offline.go	Server.offlineClaimEvidence	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the console (cmd/console serve under console.service, user carlos-console): new, reads the host claim, the record's acquisition, a domains claim and the app's admission only to refuse an offline start (MV-O29, MV-O20); a failed read refuses with a 502, never reads as absence; deny-only	file:Read@399	9c860bffcf6550244fde8c514d903ae77f234dccb8b3799975b129aacfcacce5
internal/console/apiinstancemove_offline.go	Server.offlineClaimEvidence	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the console (cmd/console serve under console.service, user carlos-console): new, reads the host claim, the record's acquisition, a domains claim and the app's admission only to refuse an offline start (MV-O29, MV-O20); a failed read refuses with a 502, never reads as absence; deny-only	file:Read@399	9c860bffcf6550244fde8c514d903ae77f234dccb8b3799975b129aacfcacce5
@legacy	343d94569de013f5341ce202ee4f75ca7bf8327afbf6359305cf6374f1c3857d	internal/host/movesoffline.go	heldBy	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads a registry row's hold op and status to answer whether this move holds it; an absent row counts as held, since nothing can serve a host with no row	registry:HoldOp@72,registry:Status@107,whole:Route@58	bc3114ddfde2ee4a2875def845c48c439eba66203973c8e3d81de56a5dc187d3
internal/host/movesoffline.go	heldBy	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads a registry row's hold op and status to answer whether this move holds it; an absent row counts as held, since nothing can serve a host with no row	registry:HoldOp@72,registry:Status@107,whole:Route@58	bc3114ddfde2ee4a2875def845c48c439eba66203973c8e3d81de56a5dc187d3
@legacy	915f722ed24ac9c738de9ab1a49113de6ea17302c33720a1fb314e718f4b22de	internal/host/movesoffline.go	isDir	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, an Lstat that never follows a link, for the source's local-state report and retire	file:Lstat@40	5291be5379e83303efde4927bbff8520eeb56e062f138861992b92ddfa69140e
internal/host/movesoffline.go	isDir	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, an Lstat that never follows a link, for the source's local-state report and retire	file:Lstat@40	5291be5379e83303efde4927bbff8520eeb56e062f138861992b92ddfa69140e
@legacy	15ad18fac5e6c65e06dc32e26fb28e9cf8f00827b60ae17b22870b9389bd4ca0	internal/host/movesoffline.go	lexists	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, an Lstat that never follows a link, for the source's local-state report and retire	file:Lstat@41	ea07329ff26308b5957066177d25a36a3db3d7ea2c236268d76e2fc26e4cef9f
internal/host/movesoffline.go	lexists	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, an Lstat that never follows a link, for the source's local-state report and retire	file:Lstat@41	ea07329ff26308b5957066177d25a36a3db3d7ea2c236268d76e2fc26e4cef9f
@legacy	4886f46c6af3e466463cb9fb2dacabadf08d7e00462fd38cb70d64f858524d85	internal/host/movesoffline.go	moveCfg.flatDBPath	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, a flat row's database path from its registry row, else the default	registry:DBPath@156,registry:DBPath@87,whole:Route@141,whole:Route@74	46ac1df2068f8793e86c76df552699b7bd27a661b155ebee13e07fc92e9bef46
internal/host/movesoffline.go	moveCfg.flatDBPath	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, a flat row's database path from its registry row, else the default	registry:DBPath@156,registry:DBPath@87,whole:Route@141,whole:Route@74	46ac1df2068f8793e86c76df552699b7bd27a661b155ebee13e07fc92e9bef46
@legacy	a1139a97a4922dabae8615d296e6f0c3d26b87f8227436c53baec3851e596a49	internal/host/movesoffline.go	movesWorker.localState	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads what this box keeps for the host (database, litestream meta, files directory, env files) under both layouts, for the source report; reads only	file:ReadDir@1126,registry:DBPath@1363,registry:DBPath@1393,whole:Route@140,whole:Route@189,whole:Route@293	21ee0b7667faa1c3adda2a9271118916d12002b6aebf60dc2402cb49bc079049
internal/host/movesoffline.go	movesWorker.localState	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads what this box keeps for the host (database, litestream meta, files directory, env files) under both layouts, for the source report; reads only	file:ReadDir@1126,registry:DBPath@1363,registry:DBPath@1393,whole:Route@140,whole:Route@189,whole:Route@293	21ee0b7667faa1c3adda2a9271118916d12002b6aebf60dc2402cb49bc079049
@legacy	aa1ffc1efa5bcbd8ca9c3ba2c62feb8ccba82f26e748c4bae95bdda20e2fbcb9	internal/host/movesoffline.go	movesWorker.offlineSourceGone	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row at offline-finishing and reports gone once reconcile has removed it; lifts this move's own fence	whole:Route@236	9a21409d0df7f38c59fc2fbe8b963b020f52fc7ecf66761f1479daec143f3b7a
internal/host/movesoffline.go	movesWorker.offlineSourceGone	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row at offline-finishing and reports gone once reconcile has removed it; lifts this move's own fence	whole:Route@236	9a21409d0df7f38c59fc2fbe8b963b020f52fc7ecf66761f1479daec143f3b7a
@legacy	0efa244763e57e238ce7ea9a2cb7541f59d3185ee59a8767661d3c62738a6ce4	internal/host/movesoffline.go	movesWorker.offlineSourcePark	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row, then renames the host's local paths into the move's park directory under the fence; deletes nothing	whole:Route@1150,whole:Route@1700,whole:Route@466,whole:Route@943	45684e221106d3f30425a466892e58c0206a1dbcc508d5d6ae2ed1b54cb3d478
internal/host/movesoffline.go	movesWorker.offlineSourcePark	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row, then renames the host's local paths into the move's park directory under the fence; deletes nothing	whole:Route@1150,whole:Route@1700,whole:Route@466,whole:Route@943	45684e221106d3f30425a466892e58c0206a1dbcc508d5d6ae2ed1b54cb3d478
@legacy	2414dafdf4e61a5d0ed6bf45a2f9908239ddf5bac4ca19b81f3b1f7021fb04ee	internal/host/movesoffline.go	movesWorker.offlineSourceRevert	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row's hold and releases only this move's hold, under reconcileMu, on abort	registry:HoldOp@562,whole:Route@549,whole:Route@701	102e6dab35e4c35c76ef0fa327166e6563f3128b9f504612831fc287bd5a5997
internal/host/movesoffline.go	movesWorker.offlineSourceRevert	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row's hold and releases only this move's hold, under reconcileMu, on abort	registry:HoldOp@562,whole:Route@549,whole:Route@701	102e6dab35e4c35c76ef0fa327166e6563f3128b9f504612831fc287bd5a5997
@legacy	07e718e4a240ef3ff665bb4657689affc0b3e583d32e28ca22ed3ce64ed7f3cf	internal/host/movesoffline.go	movesWorker.offlineSourceStop	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, installs this move's fence, reads the row and rewrites the source report every pass	whole:Route@274	750f72b0466febf4861d4dc74133b7d5d16d5f140d17518ed3ce90e197a72de3
internal/host/movesoffline.go	movesWorker.offlineSourceStop	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, installs this move's fence, reads the row and rewrites the source report every pass	whole:Route@274	750f72b0466febf4861d4dc74133b7d5d16d5f140d17518ed3ce90e197a72de3
@legacy	a04b4bd576ae2e32be9be703e8495ea8cae3f0fa299c8db991b4f366e7a515bf	internal/host/movesoffline.go	movesWorker.retirePaths	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, lists the paths the source retire parks, from the row's layout and the nested instance directory's entries	file:ReadDir@1688,whole:Route@128,whole:Route@177,whole:Route@417	a1531c5c3ee2d451010f3bdde1161aa90f918d6ca538c7cfac7c7fa9c32f7702
internal/host/movesoffline.go	movesWorker.retirePaths	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, lists the paths the source retire parks, from the row's layout and the nested instance directory's entries	file:ReadDir@1688,whole:Route@128,whole:Route@177,whole:Route@417	a1531c5c3ee2d451010f3bdde1161aa90f918d6ca538c7cfac7c7fa9c32f7702
@legacy	396f77ac9e9e9c3365e2170d983ce403ecac6df546bda7dea3de750c5b891480	internal/host/movesoffline.go	movesWorker.sourceReport	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row for the source report's evidence	whole:Route@198,whole:Route@461,whole:Route@520	13bdb087ef507d0e7fdb9df9741702eea6ed71be7b92cee42ee97a709a590f10
internal/host/movesoffline.go	movesWorker.sourceReport	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row for the source report's evidence	whole:Route@198,whole:Route@461,whole:Route@520	13bdb087ef507d0e7fdb9df9741702eea6ed71be7b92cee42ee97a709a590f10
@legacy	d4beec911228ef015b1d3bc5b24ab9b7b5d8bffef93a7dec1b21c7996b307dc9	internal/host/movesoffline_land.go	extractSealed	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, opens the sealed archive the landing staged and extracts it as Phase 1's openAndExtract does	file:Open@181	76b3a5287b4407112f3512c02bbdbad84fc6fba9cf3fb570936ddbec9aa10837
internal/host/movesoffline_land.go	extractSealed	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, opens the sealed archive the landing staged and extracts it as Phase 1's openAndExtract does	file:Open@181	76b3a5287b4407112f3512c02bbdbad84fc6fba9cf3fb570936ddbec9aa10837
@legacy	744b20348c2938df8aa7c407c2f0d3cfe0a1ae0c9acd80c7084a0fbb2762eeda	internal/host/movesoffline_land.go	hexFileSHA256	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, the sha256 of a landed file for a seal check; empty when unreadable, which fails the check	file:ReadFile@49	2a077cd00e7df24679ce320dc7a73b80a35e261698834e9414cbc3d9ba3ad3b3
internal/host/movesoffline_land.go	hexFileSHA256	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, the sha256 of a landed file for a seal check; empty when unreadable, which fails the check	file:ReadFile@49	2a077cd00e7df24679ce320dc7a73b80a35e261698834e9414cbc3d9ba3ad3b3
@legacy	952ee5286d0afcf9ac0d336129666d5932f2a9061f3070db199be626d3bc60ce	internal/host/movesoffline_land.go	landRun.config	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row to render its configuration through RenderHeld, which admits only a row held by this move	whole:Route@198	68b981f301c53a6eaaa8bdabb62a3cc4a2f432af6a3e5613ffab08f8f5fef687
internal/host/movesoffline_land.go	landRun.config	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row to render its configuration through RenderHeld, which admits only a row held by this move	whole:Route@198	68b981f301c53a6eaaa8bdabb62a3cc4a2f432af6a3e5613ffab08f8f5fef687
@legacy	bddcc9fa6ca7628ebdb599c60d09a0e05c3e01b34bd9defaf4e276dd7516c2bd	internal/host/movesoffline_land.go	landRun.env	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the landed env file and rendered configuration to compare with the seal's sha256s	file:ReadFile@122,file:ReadFile@720	8c26fe55bec8d23180f0819b77d49b1a73f0ab0156f238f230d770cecc1e4da4
internal/host/movesoffline_land.go	landRun.env	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the landed env file and rendered configuration to compare with the seal's sha256s	file:ReadFile@122,file:ReadFile@720	8c26fe55bec8d23180f0819b77d49b1a73f0ab0156f238f230d770cecc1e4da4
@legacy	ab73461b3e38dfeac1ab0a0640da8f016bd5bd42e222e46f35e269aea93c0e23	internal/host/movesoffline_land.go	landRun.envPin	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row for LaunchLayers' composed environment, compared with the seal's portable digest	whole:Route@699	1033516d233bafb55febb2c02331e3afe5a9fd63a3bad540cc6ae712c56ac3d3
internal/host/movesoffline_land.go	landRun.envPin	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row for LaunchLayers' composed environment, compared with the seal's portable digest	whole:Route@699	1033516d233bafb55febb2c02331e3afe5a9fd63a3bad540cc6ae712c56ac3d3
@legacy	196a35eaec4c55a0214e245b9c93b0dd60f9d0f69fc031075604ba223f259204	internal/host/movesoffline_land.go	landRun.liveNotSealed	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, the release item's second half; reads only the target's live link for the host (Lstat, then Readlink, never following it to stat or open its target) and compares the target string with the sealed build's path from the held row; read-only, it changes nothing, and any other target, a non-link or an error fails the item closed	file:Lstat@172,file:Readlink@404,registry:App@537,whole:Route@516,whole:Route@539	0242dbc6c3bbeddf0c17a6b1e04aa3d81236ff4485a707ec558978382a578c0f
internal/host/movesoffline_land.go	landRun.liveNotSealed	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, the release item's second half; reads only the target's live link for the host (Lstat, then Readlink, never following it to stat or open its target) and compares the target string with the sealed build's path from the held row; read-only, it changes nothing, and any other target, a non-link or an error fails the item closed	file:Lstat@172,file:Readlink@404,registry:App@537,whole:Route@516,whole:Route@539	0242dbc6c3bbeddf0c17a6b1e04aa3d81236ff4485a707ec558978382a578c0f
@legacy	73d2a509d08e9d1af690e37bfd16d9b4fed62e4eb5af3c2946686de892bff983	internal/host/movesoffline_land.go	landRun.nextDue	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, sets the held row's NextDue to the seal's and reads it back	registry:NextDue@34,registry:NextDue@386,whole:Route@36,whole:Route@388	169ab1633a7a87651c56a87c7e419d263038fbb35185beb478c330824b0c7115
internal/host/movesoffline_land.go	landRun.nextDue	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, sets the held row's NextDue to the seal's and reads it back	registry:NextDue@34,registry:NextDue@386,whole:Route@36,whole:Route@388	169ab1633a7a87651c56a87c7e419d263038fbb35185beb478c330824b0c7115
@legacy	9fd7b9828d639ca270968c0849e9fabfc2dd26cdde62512b5a2064651176320d	internal/host/movesoffline_land.go	landRun.release	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row's channel to compare its build with the seal's	whole:Route@368	d589aea52cc3810373426d2e6e95041eeeacceb7e872c017b86cfb2ee982c597
internal/host/movesoffline_land.go	landRun.release	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row's channel to compare its build with the seal's	whole:Route@368	d589aea52cc3810373426d2e6e95041eeeacceb7e872c017b86cfb2ee982c597
@legacy	59f3a72885a0b6031a82f9110bad2dec8d8cae109c01642ff3069de3bf1b7460	internal/host/movesoffline_land.go	landRun.replication	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, sets the held row's replication rung to the seal's and reads it back	registry:Replication@38,registry:Replication@430,whole:Route@40,whole:Route@432	0a01d500ad7df33b758fa029db808e15083e8fc0de6533f56ecdecddc2cddb6a
internal/host/movesoffline_land.go	landRun.replication	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, sets the held row's replication rung to the seal's and reads it back	registry:Replication@38,registry:Replication@430,whole:Route@40,whole:Route@432	0a01d500ad7df33b758fa029db808e15083e8fc0de6533f56ecdecddc2cddb6a
@legacy	d1b0cc18dd42253f9190bad0d98f8ab482351f282849f8187d0740365b61c410	internal/host/movesoffline_land.go	landRun.reread	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, re-reads the row after a column write	whole:Route@246,whole:Route@251,whole:Route@96	ebb86b70b728cfefc2c6962c1ed6d582e8259a6527e40e580196fd3cae807c57
internal/host/movesoffline_land.go	landRun.reread	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, re-reads the row after a column write	whole:Route@246,whole:Route@251,whole:Route@96	ebb86b70b728cfefc2c6962c1ed6d582e8259a6527e40e580196fd3cae807c57
@legacy	d19a1ff04015bc2f54be91adbdb732cd6e0c56c3600e9ee4bbe4e0e3e8ae1f50	internal/host/movesoffline_land.go	landRun.row	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the reconciled row, its hold and status, and requires it held landing by this move at flat paths	registry:HoldOp@130,registry:HoldOp@149,registry:HoldOp@236,registry:Status@259,whole:Route@35,whole:Route@397,whole:Route@54	08d3b3951fedf3765fb39cae164185021352e87f4226b640f6582f66f70f114c
internal/host/movesoffline_land.go	landRun.row	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the reconciled row, its hold and status, and requires it held landing by this move at flat paths	registry:HoldOp@130,registry:HoldOp@149,registry:HoldOp@236,registry:Status@259,whole:Route@35,whole:Route@397,whole:Route@54	08d3b3951fedf3765fb39cae164185021352e87f4226b640f6582f66f70f114c
@legacy	a2039c463eb9e511de59567977f79a90ad6976155c10973f9793273d3818180f	internal/host/movesoffline_land.go	landRun.timers	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row's timer rows and replaces them from the digest-checked snapshot	whole:Timer@1051,whole:Timer@1197,whole:Timer@473,whole:Timer@787,whole:Timer@948	c9e1defc12ad0e51868c0944a84b370c786a0d06f0094bba7bca3d4aac83e5ca
internal/host/movesoffline_land.go	landRun.timers	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the held row's timer rows and replaces them from the digest-checked snapshot	whole:Timer@1051,whole:Timer@1197,whole:Timer@473,whole:Timer@787,whole:Timer@948	c9e1defc12ad0e51868c0944a84b370c786a0d06f0094bba7bca3d4aac83e5ca
@legacy	ff05baa71818a2e043bf2a5558c88c76a339a976969a18fff812fae3b07a05cd	internal/host/movesoffline_land.go	landRun.warmPaths	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, the row's database artifact paths, checked as a possible warm cache before extract	registry:DBPath@127,registry:DBPath@148,registry:DBPath@192,whole:Route@114,whole:Route@129,whole:Route@150,whole:Route@194	482a8c60b9c7f357e972bef1fa4eaa3a5ab5f03aa1d96e56fa331652ddc52337
internal/host/movesoffline_land.go	landRun.warmPaths	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, the row's database artifact paths, checked as a possible warm cache before extract	registry:DBPath@127,registry:DBPath@148,registry:DBPath@192,whole:Route@114,whole:Route@129,whole:Route@150,whole:Route@194	482a8c60b9c7f357e972bef1fa4eaa3a5ab5f03aa1d96e56fa331652ddc52337
@legacy	555bda2ac1b5a68c2285bd689bdb7c6ff88acf4eec40b30664d854e430e36ea7	internal/host/movesoffline_land.go	movesWorker.landReport	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, ensures each landing item against the held row and returns the target report	registry:HoldOp@1755,registry:NextDue@1986,registry:Replication@2000,registry:Status@1796,whole:Route@1742,whole:Route@1757,whole:Route@1798,whole:Route@1824,whole:Route@1941,whole:Route@1988,whole:Route@2002,whole:Route@395,whole:Route@400	cb7d8cd3372bd844e26e32dae853edf60332a5d9abf2822185a3cf43aa9b917a
internal/host/movesoffline_land.go	movesWorker.landReport	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, ensures each landing item against the held row and returns the target report	registry:HoldOp@1755,registry:NextDue@1986,registry:Replication@2000,registry:Status@1796,whole:Route@1742,whole:Route@1757,whole:Route@1798,whole:Route@1824,whole:Route@1941,whole:Route@1988,whole:Route@2002,whole:Route@395,whole:Route@400	cb7d8cd3372bd844e26e32dae853edf60332a5d9abf2822185a3cf43aa9b917a
@legacy	c9c1c948264b97b6bc6a7f9728222f8bd3fa588a1b938bc44ab4576c7be094cd	internal/host/movesoffline_land.go	movesWorker.offlineTargetOpen	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, releases this move's hold on the landed row only from this box's own all-OK report	registry:HoldOp@1641,registry:HoldOp@1789,registry:HoldOp@417,registry:Status@1356,registry:Status@1676,registry:Status@1778,registry:Status@454,whole:Route@1261,whole:Route@1327,whole:Route@2958,whole:Route@315	9220f09e0f06db3712ce05ae14f1f8dcd71ee4323ef0f43e105174d8f108bf1c
internal/host/movesoffline_land.go	movesWorker.offlineTargetOpen	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, releases this move's hold on the landed row only from this box's own all-OK report	registry:HoldOp@1641,registry:HoldOp@1789,registry:HoldOp@417,registry:Status@1356,registry:Status@1676,registry:Status@1778,registry:Status@454,whole:Route@1261,whole:Route@1327,whole:Route@2958,whole:Route@315	9220f09e0f06db3712ce05ae14f1f8dcd71ee4323ef0f43e105174d8f108bf1c
@legacy	5a79695335b9949365a7bd83e54b53e768b9023d41f52b1e3e305ec047182961	internal/host/movesoffline_land.go	movesWorker.offlineTargetRevert	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, parks what the move extracted and deletes only a row this move holds	registry:HoldOp@1572,registry:HoldOp@289,registry:HoldOp@627,registry:Status@326,registry:Status@616,whole:Route@1493,whole:Route@1559,whole:Route@1965,whole:Route@276,whole:Route@341	dd5f2df83b48c782ee4d369b5b84e3eb42ed3b1504be7f74f7182fac3ed158a2
internal/host/movesoffline_land.go	movesWorker.offlineTargetRevert	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, parks what the move extracted and deletes only a row this move holds	registry:HoldOp@1572,registry:HoldOp@289,registry:HoldOp@627,registry:Status@326,registry:Status@616,whole:Route@1493,whole:Route@1559,whole:Route@1965,whole:Route@276,whole:Route@341	dd5f2df83b48c782ee4d369b5b84e3eb42ed3b1504be7f74f7182fac3ed158a2
@legacy	9c04d56b8d18d7bf66ce4f4c9d3e2747b6f26702e69365646f6498925cb20306	internal/host/movesoffline_land.go	nonEmptyOrNotDir	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, an Lstat and ReadDir of the files directory, refusing a non-empty one before extract	file:Lstat@51,file:ReadDir@147	f81a1542575058327d8e7304d7d48eed4f73218c5ae017ae4e4c0a310e25d676
internal/host/movesoffline_land.go	nonEmptyOrNotDir	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, an Lstat and ReadDir of the files directory, refusing a non-empty one before extract	file:Lstat@51,file:ReadDir@147	f81a1542575058327d8e7304d7d48eed4f73218c5ae017ae4e4c0a310e25d676
@legacy	74da1e559ccf978bc4c3c4f194caf4ef8988d10f7e82384ef10ec50a68dc0460	internal/host/movesoffline_seal.go	movesWorker.offlineArchive	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, builds the sealed archive of the files directory and env file in temporary files and puts it in the target bucket	file:Create@1227,file:Create@741,file:ReadFile@1805	58b241315fc036eb41593a7685fba1dcc091960d0583bfaabd3833917d5f27ef
internal/host/movesoffline_seal.go	movesWorker.offlineArchive	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, builds the sealed archive of the files directory and env file in temporary files and puts it in the target bucket	file:Create@1227,file:Create@741,file:ReadFile@1805	58b241315fc036eb41593a7685fba1dcc091960d0583bfaabd3833917d5f27ef
@legacy	bac8f9a4ecaf08bc02420a1d191efb9b83655a5add417ea672e524160923d20f	internal/host/movesoffline_seal.go	movesWorker.offlineFilesOf	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row and lists the nested instance directory for the files, env and config paths; an app entry beside the files directory refuses the seal	file:ReadDir@349,registry:Host@905,whole:Route@247,whole:Route@287,whole:Route@873	7a235dfad329b1c541032ce1c8e90d3687b6d00e6b6b45ef6695bfbd943bf6e7
internal/host/movesoffline_seal.go	movesWorker.offlineFilesOf	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=route-and-input (J1,J4, as main's sourceFinal.run); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads the row and lists the nested instance directory for the files, env and config paths; an app entry beside the files directory refuses the seal	file:ReadDir@349,registry:Host@905,whole:Route@247,whole:Route@287,whole:Route@873	7a235dfad329b1c541032ce1c8e90d3687b6d00e6b6b45ef6695bfbd943bf6e7
@legacy	a378056bbcf8b70609992a346504d7ca6ddad9371269a1b77fa8c5175f49fefd	internal/host/movesoffline_seal.go	movesWorker.offlineTakeSeal	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, seal steps 1 to 9 from the row: database path, next due, replication rung and timer rows, read for the seal	registry:DBPath@2134,registry:NextDue@11563,registry:NextDue@12475,registry:Replication@11468,registry:Replication@12450,whole:Route@10203,whole:Route@1713,whole:Route@2195,whole:Route@2976,whole:Route@4965,whole:Route@7739,whole:Timer@8890,whole:Timer@8955,whole:Timer@8961,whole:Timer@9220,whole:Timer@9319	efe8259f5e704fbc7c1aed79c8d6934ae9d74de8aae2e88dd169736e98a67dad
internal/host/movesoffline_seal.go	movesWorker.offlineTakeSeal	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, seal steps 1 to 9 from the row: database path, next due, replication rung and timer rows, read for the seal	registry:DBPath@2134,registry:NextDue@11563,registry:NextDue@12475,registry:Replication@11468,registry:Replication@12450,whole:Route@10203,whole:Route@1713,whole:Route@2195,whole:Route@2976,whole:Route@4965,whole:Route@7739,whole:Timer@8890,whole:Timer@8955,whole:Timer@8961,whole:Timer@9220,whole:Timer@9319	efe8259f5e704fbc7c1aed79c8d6934ae9d74de8aae2e88dd169736e98a67dad
@legacy	19016730fa78ce18f418eecc6442144f8be9e1abfb6a56dd6ceac89bcbfa77c3	internal/host/movesoffline_seal.go	readOwnFile	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads a regular file without following a link, as the agent reads every file a nested tenant can write	file:Lstat@84,file:Open@319,file:ReadAll@575,file:Stat@407	9346c8327195aebd2b8c5bf810eaeeba53a255963aed42a2b313f5b0637eeedd
internal/host/movesoffline_seal.go	readOwnFile	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, reads a regular file without following a link, as the agent reads every file a nested tenant can write	file:Lstat@84,file:Open@319,file:ReadAll@575,file:Stat@407	9346c8327195aebd2b8c5bf810eaeeba53a255963aed42a2b313f5b0637eeedd
@legacy	457e2dae4e6876a0b5c4f3626c831497aa847b3e4d35dedb136dd72b82e99a14	internal/host/movespass.go	armOffline	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, arms the offline fields of the moves worker's config at agent start; closes over the registry and reads nothing itself	whole:Route@1930	4129af3990fe73d3496e31a4e54f1af56eb2964011faa1929d7dadef755e5d6f
internal/host/movespass.go	armOffline	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, arms the offline fields of the moves worker's config at agent start; closes over the registry and reads nothing itself	whole:Route@1930	4129af3990fe73d3496e31a4e54f1af56eb2964011faa1929d7dadef755e5d6f
@legacy	888d19025e20dd3e7ceae184cf7f59c8463acc403355af7113d7178831cc40a1	internal/host/movespass.go	channelVersion	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, resolves the row's channel pointer under the release key for the landing's release check; reads only	registry:App@253,registry:Channel@130,whole:Route@248	072eaf78814ed5e9c1dacb58a41479c694dacd08d6e90193fecee55ee1927b92
internal/host/movespass.go	channelVersion	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-route (J1, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, resolves the row's channel pointer under the release key for the landing's release check; reads only	registry:App@253,registry:Channel@130,whole:Route@248	072eaf78814ed5e9c1dacb58a41479c694dacd08d6e90193fecee55ee1927b92
@legacy	6ecb78ce16649eeac3d6fbaddbf543ae9a282dc006fc6d08f0e88d6bbb3704d6	internal/layout/plan.go	NestedPlatformNames	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, called only from the agent's offline sealer and source retire (IsNestedPlatformName): a fixed list of names, reads nothing	data-literal@84	79a4b08c26c1fa95f6bb6b5a177a9ff50059eb0e68fbe605c0a663047b0557af
internal/layout/plan.go	NestedPlatformNames	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, called only from the agent's offline sealer and source retire (IsNestedPlatformName): a fixed list of names, reads nothing	data-literal@84	79a4b08c26c1fa95f6bb6b5a177a9ff50059eb0e68fbe605c0a663047b0557af
@legacy	f0bcde3a56332265adccfcb5c693748c6e1c5cb532bfbbe39c945f37127ec1c0	internal/lease/tombstone.go	readLock	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, through lease.Tombstone, Reassert and LiftTombstone (the offline sealer and landing): reads the litestream lock object with its ETag; a garbled or expiry-less lock is an error, never free	file:ReadAll@417	19def7e4df0da9f3a14f687447397e4c211e1182a0a76995fef5439181f82a35
internal/lease/tombstone.go	readLock	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): new, through lease.Tombstone, Reassert and LiftTombstone (the offline sealer and landing): reads the litestream lock object with its ETag; a garbled or expiry-less lock is an error, never free	file:ReadAll@417	19def7e4df0da9f3a14f687447397e4c211e1182a0a76995fef5439181f82a35
@legacy	ff49265904909d14a2b264fd7d2b328bed2c151338eb299a4af09f04c5462e0a	internal/provision/offline_move.go	OfflineStart	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the console (cmd/console serve under console.service, user carlos-console): new, the record transition the start door applies through SetRecordMove; its one site is rec.ActiveRun.Open(), a method, not a file read	file:Open@184	a5097e64c5393c6d1ccea7affbc09b35c1e1c8b084f839658b379dc184aef6e0
internal/provision/offline_move.go	OfflineStart	legacy	accepted-legacy	accepted-legacy;rev3=census-ruling-moves-offline;basis=root-input (J4, as main's moves units); the console (cmd/console serve under console.service, user carlos-console): new, the record transition the start door applies through SetRecordMove; its one site is rec.ActiveRun.Open(), a method, not a file read	file:Open@184	a5097e64c5393c6d1ccea7affbc09b35c1e1c8b084f839658b379dc184aef6e0
internal/host/agent.go	fastConvergeLoop	authority	B3	rev3=census-ruling-moves-offline;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body (census-ruling-carlos-run) with the offline keep view read before the first reconcile pass (refreshOfflineView); read sites unchanged, offsets moved; main's B3 authority retained	whole:Route@8896,whole:Route@9459	dac141dfbb9e82bf99cb8e9334418db792af872d72e954e4e43c2dbc7958bbb7
internal/host/movespass.go	armMovesPass	authority	B,C	rev3=census-ruling-moves-offline;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's construction with newMovesWorker, the box label and version store set whatever the switch says, and armOffline called after armPhase1; read sites unchanged, offsets moved; main's B,C authority retained	file:Read@2973,registry:Provisioned@1749,whole:Route@1736	40c56169ae583a8bb24ffff424090cab82a214c2fbb34520a45284267fc19523