# Plan 14 census ruling seeded-instances (Plan 14 controller, 2026-10-14): the seeded-instances branch's overlay (seeded instances, #260 and #261), loaded after carlos-run's. Code that runs only as the agent (carlos), the console (carlos-console) or the CLI on a person's machine, and makes no root decision, is accepted legacy; each basis names the executing identity. # The seeds floor's root readers (readLocalSeedsFloor, judgeSeedsPrev, rootJudgeSeedsPrev) are authority F,J4 like their moves-floor twins, and deny-only: Part 3 F2-F4 must cover the seeds floor alongside the moves floor. activationGuard and activationRule stay accepted legacy (J1); their seeds refusal is deny-only and the floor's authority is classified on readLocalSeedsFloor. normalizeRoute and routeArgs are E3, the family of Registry.Upsert, whose body they came from. # CONDITION: CollectCensusSeeds and Registry.ImportJournalHosts are authority G as deny-only activation inputs. G wires their caller and must keep it deny-only. If either ever feeds a decision that allows rather than refuses, it needs a new ruling. Earlier overlays are immutable. @legacy 9a30e593cef796b71b6fb7369aa4a62ff3bee6eaf343ba9dfa560af011ac6adf apimode.go apiSession.importUpload legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): streams the snapshot file to the console's import door and reads the answer; no box state file:ReadAll@455 9f7dbaadba38b287e054199091c63273fb7ec0afdecccfa599739f734233e709 apimode.go apiSession.importUpload legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): streams the snapshot file to the console's import door and reads the answer; no box state file:ReadAll@455 9f7dbaadba38b287e054199091c63273fb7ec0afdecccfa599739f734233e709 @legacy 7eca72b44008d86cab7644f639ae2480956ada0faabc998444c064ca229b9141 cli.go runInstances legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the carlos CLI: its API verbs on a person's machine as that person, its local listing by hand on a box as whoever runs it (no box unit): main's body with one more dispatch arm, import, which goes to the API-mode import verbs; read sites unchanged file:Open@1341,registry:App@3214,registry:Backing@3296,registry:Channel@3229,registry:Environment@3240,registry:Hibernate@3105,registry:Host@3206,registry:Kind@3221,registry:Replication@3281,registry:Status@3255,registry:Unit@3307,registry:Version@3265,whole:Route@3079 342c14b2ecd4100405e59eb5a13d7be893d625b70eaff4ca0e0074ae31908210 cli.go runInstances legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the carlos CLI: its API verbs on a person's machine as that person, its local listing by hand on a box as whoever runs it (no box unit): main's body with one more dispatch arm, import, which goes to the API-mode import verbs; read sites unchanged file:Open@1341,registry:App@3214,registry:Backing@3296,registry:Channel@3229,registry:Environment@3240,registry:Hibernate@3105,registry:Host@3206,registry:Kind@3221,registry:Replication@3281,registry:Status@3255,registry:Unit@3307,registry:Version@3265,whole:Route@3079 342c14b2ecd4100405e59eb5a13d7be893d625b70eaff4ca0e0074ae31908210 @legacy a8205944eb79595c5ff6c2686fe0237d806fa99eb5aeda0a763d1909576491c4 cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed data store opened, the scratch directory named beside CONSOLE_DB and the seeds sweep started beside the other claim workers; one more /data literal, the scratch path's default data-literal@3331,data-literal@4432,data-literal@4669 d251097a8e83707225fcbf8af44a2eeff8dcfdbe1ba52e2b1a9f22397ff7f58d cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed data store opened, the scratch directory named beside CONSOLE_DB and the seeds sweep started beside the other claim workers; one more /data literal, the scratch path's default data-literal@3331,data-literal@4432,data-literal@4669 d251097a8e83707225fcbf8af44a2eeff8dcfdbe1ba52e2b1a9f22397ff7f58d @legacy cc3892490991455d7f9b17f4de5f4112b71147908e994de4be106c214a9198a1 instances_import.go apiSession.runImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): opens and hashes the file to import, then drives the console's import door; no box state file:Open@97 d56fae6544ca06790d1d4f9c7187facddf8f2722eaaf1dfd677c1cce29233062 instances_import.go apiSession.runImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the carlos CLI on a person's machine, as that person (no box unit): opens and hashes the file to import, then drives the console's import door; no box state file:Open@97 d56fae6544ca06790d1d4f9c7187facddf8f2722eaaf1dfd677c1cce29233062 @legacy ef86ad92b0b3eadd2c0db51cca8e18c799e3e16a50223329ce192b50b0043cac internal/activator/backend_exec.go ExecBackend.Restore legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): now a dispatcher: it parses the row's seed column and hands a seed to place to seededRestore and every other row to restorePlain, which holds its former body registry:SeedSource@118,whole:Route@227,whole:Route@267 2b5994c3dedaf2550235db47939a2758c3ee837a0a64fe73b9cfa535aed6faa7 internal/activator/backend_exec.go ExecBackend.Restore legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): now a dispatcher: it parses the row's seed column and hands a seed to place to seededRestore and every other row to restorePlain, which holds its former body registry:SeedSource@118,whole:Route@227,whole:Route@267 2b5994c3dedaf2550235db47939a2758c3ee837a0a64fe73b9cfa535aed6faa7 @legacy 35ec1caef61944ea954c25b4b12d427c6a9fbb9de15e4aba3780e076dbf09e8f internal/activator/backend_exec.go ExecBackend.restorePlain legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): body of the frozen ExecBackend.Restore, which is now its dispatcher, with the seed marker reconciled before the warm-cache check; same staging fallback and replica restore file:Stat@540,registry:Host@108,whole:Route@128,whole:Route@397,whole:Route@477 a0c39966251e7a2e74b422fb4d53294c3cd63b73d31277d10d7d5a529b4a7cd7 internal/activator/backend_exec.go ExecBackend.restorePlain legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): body of the frozen ExecBackend.Restore, which is now its dispatcher, with the seed marker reconciled before the warm-cache check; same staging fallback and replica restore file:Stat@540,registry:Host@108,whole:Route@128,whole:Route@397,whole:Route@477 a0c39966251e7a2e74b422fb4d53294c3cd63b73d31277d10d7d5a529b4a7cd7 @legacy 78756fd611e1312ad48d5729716093cf7a5d97917bf3d31451844eb95c9114e5 internal/activator/backend_unit.go SplitBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): forwards the placed record to the exec half and does nothing for a unit-backed row; no root decision whole:Route@111,whole:Route@161 bb4e54eeeedb4671fdb7c8122c45e81b63ab0fd8f9ae6b6ed06bad97ef224634 internal/activator/backend_unit.go SplitBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): forwards the placed record to the exec half and does nothing for a unit-backed row; no root decision whole:Route@111,whole:Route@161 bb4e54eeeedb4671fdb7c8122c45e81b63ab0fd8f9ae6b6ed06bad97ef224634 @legacy 6a74a2cc5304c22d91d39be5c4a015f1bdc1b5b63161532d59b38c14b233953e internal/activator/seedkey.go RetireSeedKey legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's hook (provision.SeedHooks.RetireKey): it retires the instance key an import minted, by what the swap recorded in the journal, after the host is fenced and stopped; never follows a symlink file:Lstat@413 2bb357926110d6ed61e7d96e9536698b2b4f4eecfdce2f8d7bd91445bf777764 internal/activator/seedkey.go RetireSeedKey legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's hook (provision.SeedHooks.RetireKey): it retires the instance key an import minted, by what the swap recorded in the journal, after the host is fenced and stopped; never follows a symlink file:Lstat@413 2bb357926110d6ed61e7d96e9536698b2b4f4eecfdce2f8d7bd91445bf777764 @legacy 9761104e35a511798879fabf01af5bf67821d35f092cc6e91ff71a52e0c1784b internal/activator/seedkey.go readSeedEnv legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): helper of SeedEnvBefore and RetireSeedKey; refuses a symlink or a file that is not regular file:Lstat@88 5a70fccce5c7b5fec9ac2554ef72b929d39bd8e86033e182ee50eb5c777061a9 internal/activator/seedkey.go readSeedEnv legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): helper of SeedEnvBefore and RetireSeedKey; refuses a symlink or a file that is not regular file:Lstat@88 5a70fccce5c7b5fec9ac2554ef72b929d39bd8e86033e182ee50eb5c777061a9 @legacy 998acf60c274340260688905b913594593140096dca73d8a5ef47cb6d086fc8f internal/activator/seedplace.go ExecBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): waits for the host's replica to hold its first upload, then records the seed placed through the agent's own record CAS and deletes the snapshot; no root decision registry:Account@618,registry:App@630,registry:Host@388,registry:Host@490,registry:Host@638,registry:SeedSource@122 f2da6cd2ced41daca7cadffbf3dda6c8923e07b9353782d8632fdd119b27b63d internal/activator/seedplace.go ExecBackend.SeedPlaced legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): waits for the host's replica to hold its first upload, then records the seed placed through the agent's own record CAS and deletes the snapshot; no root decision registry:Account@618,registry:App@630,registry:Host@388,registry:Host@490,registry:Host@638,registry:SeedSource@122 f2da6cd2ced41daca7cadffbf3dda6c8923e07b9353782d8632fdd119b27b63d @legacy 8e314f887b88c4b0ab3b8fc2b08d7b25ded819782c22dbc86d4de8fcee9c1272 internal/activator/seedplace.go ExecBackend.fetchSeed legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): copies seeds///snapshot.db into the instance's own directory, checking length and sha256 against the row as it writes file:Open@138,file:Stat@539 2e1ed2a620477a1814537bf6af02f855d0b03a1f784e2dcb1becf6ea7f1e63f0 internal/activator/seedplace.go ExecBackend.fetchSeed legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): copies seeds///snapshot.db into the instance's own directory, checking length and sha256 against the row as it writes file:Open@138,file:Stat@539 2e1ed2a620477a1814537bf6af02f855d0b03a1f784e2dcb1becf6ea7f1e63f0 @legacy 341424acf337523287f00fa70e03416efc7806bc3162036801042cb8f8a1c904 internal/activator/seedplace.go ExecBackend.finishPlacement legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): records a seed placed on a later wake when the host's replica already exists; best effort, logged only registry:Account@171,registry:App@183,registry:Host@191,registry:Host@292 a0fa3bc1efb1372688cef6ab92ad331ce55a44fee78e0de6eb586033745b8483 internal/activator/seedplace.go ExecBackend.finishPlacement legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): records a seed placed on a later wake when the host's replica already exists; best effort, logged only registry:Account@171,registry:App@183,registry:Host@191,registry:Host@292 a0fa3bc1efb1372688cef6ab92ad331ce55a44fee78e0de6eb586033745b8483 @legacy 8fe1341534d5d3e20682bb65abb58144b6dac46c70f8a9a48cbdd14dbba19433 internal/activator/seedplace.go ExecBackend.seededRestore legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the seed fallback on the plain restore path: the host's own replica if it has one, else the file an earlier wake placed, else the snapshot; never reports fresh; every file through instancefs; fetches no snapshot under the claim flag registry:Host@121,whole:Route@1135,whole:Route@1315,whole:Route@2085,whole:Route@2966,whole:Route@3555 ea38e11e41609364b2f0ed4b2fb36fbeb529ccc5ccf700be09a59f3055fc15e9 internal/activator/seedplace.go ExecBackend.seededRestore legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the seed fallback on the plain restore path: the host's own replica if it has one, else the file an earlier wake placed, else the snapshot; never reports fresh; every file through instancefs; fetches no snapshot under the claim flag registry:Host@121,whole:Route@1135,whole:Route@1315,whole:Route@2085,whole:Route@2966,whole:Route@3555 ea38e11e41609364b2f0ed4b2fb36fbeb529ccc5ccf700be09a59f3055fc15e9 @legacy 4eb0d61347b7b49ebc7b6bcf071802d942dd3d52e82b0cc054fc543a90dcf772 internal/activator/seedplace.go PurgeSeedLocal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's local removal (provision.SeedHooks.RemoveLocal), run after the host is fenced and stopped; through instancefs file:Lstat@129 d035137b96012f0ae3efa3e8376ec8c9272e8aac0e6ae20ac0ee6dddd23eaf5d internal/activator/seedplace.go PurgeSeedLocal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback's local removal (provision.SeedHooks.RemoveLocal), run after the host is fenced and stopped; through instancefs file:Lstat@129 d035137b96012f0ae3efa3e8376ec8c9272e8aac0e6ae20ac0ee6dddd23eaf5d @legacy a5659b57e4c3e8030dcf522d6d17beaf70fad49367e22b66c998a64987fcf8e5 internal/activator/seedplace.go ReadSeedMarker legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): says which seed a database on disk was placed for; a symlink, an oversized file or anything not regular names no seed file:Lstat@143 32f77eafa1061b280e3a68f998b00efc6f1adcf73820e4aa39845520ad783afb internal/activator/seedplace.go ReadSeedMarker legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): says which seed a database on disk was placed for; a symlink, an oversized file or anything not regular names no seed file:Lstat@143 32f77eafa1061b280e3a68f998b00efc6f1adcf73820e4aa39845520ad783afb @legacy a724336418e103229842512de9ada84b940808a991d95cefbc475cfd45d3125b internal/activator/seedplace.go openSameFile legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reopens the file fetchSeed wrote and refuses it unless it is the same file file:Stat@185 66670d4b2256e26232f669f8b3d5d19b0861320f324c191e655fbf2664bd72c6 internal/activator/seedplace.go openSameFile legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reopens the file fetchSeed wrote and refuses it unless it is the same file file:Stat@185 66670d4b2256e26232f669f8b3d5d19b0861320f324c191e655fbf2664bd72c6 @legacy 089e682cc2861beec36ce1c32319f9e634fec162a5e671256a8ad3676cd8cf7f internal/activator/seedplace.go purgeSeedTarget legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes the database, its sidecars, the marker and seed temp files; helper of the seed fallback and of PurgeSeedLocal file:ReadDir@203 f50f68c2e1bce696aa6878c825f97b83245720462f373b1bdf8bda251d11cc56 internal/activator/seedplace.go purgeSeedTarget legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes the database, its sidecars, the marker and seed temp files; helper of the seed fallback and of PurgeSeedLocal file:ReadDir@203 f50f68c2e1bce696aa6878c825f97b83245720462f373b1bdf8bda251d11cc56 @legacy 1eac002e30054bb75af0258570019706e578c6d9b53a455a2f5d6fe736204f98 internal/activator/seedplace.go readErrs.Read legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): a reader wrapper that remembers the stream's read error for fetchSeed file:Read@19,file:Read@60 1eebd9de41ba7854f1ae0abcf54932ce620b630698c6848cf8a3c8b02feabbdb internal/activator/seedplace.go readErrs.Read legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): a reader wrapper that remembers the stream's read error for fetchSeed file:Read@19,file:Read@60 1eebd9de41ba7854f1ae0abcf54932ce620b630698c6848cf8a3c8b02feabbdb @legacy ceaaed382a70125c31db2dbc8375d0c21b4e14ad7a67ea307931b88684e3a053 internal/activator/seedplace.go reconcileSeedMarker legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): on the plain restore path, removes a database whose marker names a seed that is not the row's own, before it can count as a warm cache registry:Host@282,registry:Host@585,registry:Host@728,registry:SeedSource@325 177b646ed5c072efe523cf2795b0852a45d33eed102fb5b22ac3db9dc5e0a143 internal/activator/seedplace.go reconcileSeedMarker legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): on the plain restore path, removes a database whose marker names a seed that is not the row's own, before it can count as a warm cache registry:Host@282,registry:Host@585,registry:Host@728,registry:SeedSource@325 177b646ed5c072efe523cf2795b0852a45d33eed102fb5b22ac3db9dc5e0a143 @legacy d10ef4c12c64556ae4fb8bf91f9832c74c73dd6e013e5bf777e9e533dd5bd9ee internal/activator/seedplace.go type SeedObjects legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only; Open is the interface's method name, not a file open file:Open@30 9f602e4ddd3f19fb0d493606ee3ff5ae151389ae073a095f7b9d97b26de5ad14 internal/activator/seedplace.go type SeedObjects legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only; Open is the interface's method name, not a file open file:Open@30 9f602e4ddd3f19fb0d493606ee3ff5ae151389ae073a095f7b9d97b26de5ad14 @legacy e27c08927ab592b241fd15155268d864013c27eda02198817cb423420f87b20e internal/activator/wakeidentity.go stillWoken legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure comparison for wakeRouteChanged: whether the refreshed row is still one this wake may go on with registry:Backing@260,registry:Backing@277,registry:Hibernate@174,registry:Hibernate@193,registry:Kind@122,registry:Kind@148,registry:Kind@162,registry:Socket@213,registry:Socket@237,registry:Tunnel@292,registry:Tunnel@308,whole:Route@106,whole:Route@71 8dbcdeb2686874fa49d222e9177a8825d7804ee66e1958a4dbb92153026e2373 internal/activator/wakeidentity.go stillWoken legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure comparison for wakeRouteChanged: whether the refreshed row is still one this wake may go on with registry:Backing@260,registry:Backing@277,registry:Hibernate@174,registry:Hibernate@193,registry:Kind@122,registry:Kind@148,registry:Kind@162,registry:Socket@213,registry:Socket@237,registry:Tunnel@292,registry:Tunnel@308,whole:Route@106,whole:Route@71 8dbcdeb2686874fa49d222e9177a8825d7804ee66e1958a4dbb92153026e2373 @legacy b8b3dd88a92402d35b570a47cde6b71e93616f113d3dfd033932a33897128386 internal/activator/wakeidentity.go wakeRouteChanged legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): doWake's refusal when the registry row changed under a wake the edge admitted on its cached row; the agent refuses its own wake; no root decision registry:Account@367,registry:Account@384,registry:Account@528,registry:Account@550,registry:Addr@582,registry:Addr@596,registry:Addr@708,registry:Addr@718,registry:App@399,registry:App@412,registry:App@541,registry:App@565,registry:Host@1021,registry:Host@202,registry:Host@351,registry:Host@518,registry:Host@698,registry:Host@858,registry:ImportGate@736,registry:ImportGate@756,registry:SeedSource@1041,registry:SeedSource@1068,registry:SeedSource@884,registry:SeedSource@915,whole:Route@241,whole:Route@248 f3e4e6a664fcd0c207b321cc07416a0beccb58501efc189508050c0068817704 internal/activator/wakeidentity.go wakeRouteChanged legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): doWake's refusal when the registry row changed under a wake the edge admitted on its cached row; the agent refuses its own wake; no root decision registry:Account@367,registry:Account@384,registry:Account@528,registry:Account@550,registry:Addr@582,registry:Addr@596,registry:Addr@708,registry:Addr@718,registry:App@399,registry:App@412,registry:App@541,registry:App@565,registry:Host@1021,registry:Host@202,registry:Host@351,registry:Host@518,registry:Host@698,registry:Host@858,registry:ImportGate@736,registry:ImportGate@756,registry:SeedSource@1041,registry:SeedSource@1068,registry:SeedSource@884,registry:SeedSource@915,whole:Route@241,whole:Route@248 f3e4e6a664fcd0c207b321cc07416a0beccb58501efc189508050c0068817704 @legacy fe8cc45a09c75725558100e4b5cc76f65cb514aec735cfa4c5ffb2de20f9fb57 internal/console/apiinstanceimport.go Server.importGate legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): every import call's gate: the role, the claim console's refusal, the host, the record and the import's id file:Query@1796 3f4ac44f39cdc77f364cbda2a226ffe9c166ed2d087b4e49c1f42aa7eba28118 internal/console/apiinstanceimport.go Server.importGate legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): every import call's gate: the role, the claim console's refusal, the host, the record and the import's id file:Query@1796 3f4ac44f39cdc77f364cbda2a226ffe9c166ed2d087b4e49c1f42aa7eba28118 @legacy a42de3ae8ca094f1b609ee833cc3a8968bd4e18b1674db87098e069f99b782a6 internal/console/apiinstanceimport.go Server.spoolImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): spools an uploaded snapshot, never more than the declared length and one byte, hashing as it writes file:OpenFile@482 9c7fdbf2ff9b4ba3ae1cff009f96ec23e6a40673b06dccc58791d8cc56a59d8e internal/console/apiinstanceimport.go Server.spoolImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): spools an uploaded snapshot, never more than the declared length and one byte, hashing as it writes file:OpenFile@482 9c7fdbf2ff9b4ba3ae1cff009f96ec23e6a40673b06dccc58791d8cc56a59d8e @legacy 12b1d01560177a0b5024e33cd9c5b10ee124a049b306abfd1b7ee628efe53aee internal/console/apiinstanceimport.go putSnapshot legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): writes the spooled snapshot to the data bucket with one create-only put file:Open@95,file:Stat@171 685e888b76285bddaef6fd424cd5b37df381ebd86da4740400ac90d9a666135d internal/console/apiinstanceimport.go putSnapshot legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): writes the spooled snapshot to the data bucket with one create-only put file:Open@95,file:Stat@171 685e888b76285bddaef6fd424cd5b37df381ebd86da4740400ac90d9a666135d @legacy a55e98538b66f62b594764ca47cd5e329ca4bddc4a374de3f2c6fabe7b673765 internal/console/apiinstancemove.go Server.handleAPIInstanceMoveRequest legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with one more refusal before any write: a seed that may not move yet (refuseSeedMove); read sites unchanged, offsets moved file:Exec@7018,file:Exec@7106,file:Exec@8097,file:Exec@8274,file:Exec@8425,file:Exec@9425,file:Read@5504,file:Read@7816 d4350f8b160076e4e69a0e6fdb5da9a042f4445a7c768dee49be0f6281fc20f3 internal/console/apiinstancemove.go Server.handleAPIInstanceMoveRequest legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with one more refusal before any write: a seed that may not move yet (refuseSeedMove); read sites unchanged, offsets moved file:Exec@7018,file:Exec@7106,file:Exec@8097,file:Exec@8274,file:Exec@8425,file:Exec@9425,file:Read@5504,file:Read@7816 d4350f8b160076e4e69a0e6fdb5da9a042f4445a7c768dee49be0f6281fc20f3 @legacy 9e85156e8ee59dd7e3e1a52ec9b6370ab510805b23dd04afa423f77c62ada722 internal/console/apiinstanceseed.go Server.runFrom legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the detached half of the --from door: restore, upload, publish; every failure moves the record to aborted file:Stat@2986 79932f08e270bc802608ab8284b8ce2cb86fec8688803fbbe9bb523fa37d5e53 internal/console/apiinstanceseed.go Server.runFrom legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the detached half of the --from door: restore, upload, publish; every failure moves the record to aborted file:Stat@2986 79932f08e270bc802608ab8284b8ce2cb86fec8688803fbbe9bb523fa37d5e53 @legacy 09598cdad0178aa214a2bcbd7a1c3574200ad658d8dfb7ce6bb356620dd6dc75 internal/console/apiinstanceseed.go restoreScratchUse legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): measures a restore's disk use for the scratch budget file:WalkDir@60 845f6da4f131f611c2273ff7382b5910614b4f0433a375c7452cee1e2f96878e internal/console/apiinstanceseed.go restoreScratchUse legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): measures a restore's disk use for the scratch budget file:WalkDir@60 845f6da4f131f611c2273ff7382b5910614b4f0433a375c7452cee1e2f96878e @legacy 5c44a26ced27852dae923ff73675a9fe72841d12b0c4facb432f655048b19b52 internal/console/apiinstanceseed.go uploadSnapshot legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): hashes the restored database and writes it to the data bucket with one create-only put file:Open@128 bdbe065ac75e6d3b874f20ab4e2a3ecae72e282038e414126fa013e92b2e114e internal/console/apiinstanceseed.go uploadSnapshot legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): hashes the restored database and writes it to the data bucket with one create-only put file:Open@128 bdbe065ac75e6d3b874f20ab4e2a3ecae72e282038e414126fa013e92b2e114e @legacy b177d2dd7444db5b533be0a10ca5c504dfba17e50225a96b3c11e2dcdd92fb6c internal/console/fleets.go Server.placeAppTarget legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with a place refused, before any write, while one of the app's seeds may not move yet, and two refusals answered from named sentences; read sites unchanged registry:Account@1406,registry:Account@4257,registry:App@4284,registry:Host@4345,registry:Host@4455,whole:Fleet@1394,whole:Route@4243 4db293feeb0709c6c9c113e6bf438525f7d60a7d16849d8610c4db0c553f8dbf internal/console/fleets.go Server.placeAppTarget legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with a place refused, before any write, while one of the app's seeds may not move yet, and two refusals answered from named sentences; read sites unchanged registry:Account@1406,registry:Account@4257,registry:App@4284,registry:Host@4345,registry:Host@4455,whole:Fleet@1394,whole:Route@4243 4db293feeb0709c6c9c113e6bf438525f7d60a7d16849d8610c4db0c553f8dbf @legacy 81055832bcb4d87fd62b24ba7e11f49aa8a4c62da4d35b09491bfd20977cea3f internal/console/seedscratch.go clearSeedScratch legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): removes a crashed restore's or spool's leftovers at console start; only its own prefixed entries, never the directory file:ReadDir@530 76eeff3df3c8bcebb15b58580b62b0859b8d030d2d599222f0e7b607fb355007 internal/console/seedscratch.go clearSeedScratch legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): removes a crashed restore's or spool's leftovers at console start; only its own prefixed entries, never the directory file:ReadDir@530 76eeff3df3c8bcebb15b58580b62b0859b8d030d2d599222f0e7b607fb355007 @legacy 4ea4abcc295a6721b71d5e37017ace2b34c4951fdf44a4e827b40cd65ef2003f internal/console/seedscratch_unix.go scratchFree legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the bytes available for the scratch budget file:Statfs@82 8ee7ea579ded3b72811a1f649df7afd5adb9845175d0b538261b305097d99011 internal/console/seedscratch_unix.go scratchFree legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the bytes available for the scratch budget file:Statfs@82 8ee7ea579ded3b72811a1f649df7afd5adb9845175d0b538261b305097d99011 @legacy 399b3a6abd3073b7c86199e7ef912c168db59476aff3b4d161cb3a5c3522ecc2 internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed scratch pool started (startSeedScratch); read sites unchanged data-literal@8926 c4ce8eee8845435795d010af428d162c452186c1579330688e9adc40df695d31 internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): main's body with the seed scratch pool started (startSeedScratch); read sites unchanged data-literal@8926 c4ce8eee8845435795d010af428d162c452186c1579330688e9adc40df695d31 @legacy 9621564d0df92fe71681f83c67991761d992cc12052760c96e9d609cbf230379 internal/domains/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: main's body with a trashed app's route kept while an import on its host is journaled and deleted only if the row is still the one listed (DeleteIfUnchanged) registry:Account@5579,registry:Account@5775,registry:App@10380,registry:App@11716,registry:App@13955,registry:App@5380,registry:App@5528,registry:App@7191,registry:App@7248,registry:App@7449,registry:App@7662,registry:App@7900,registry:App@8090,registry:Canary@10324,registry:Canary@13002,registry:Canary@13846,registry:Channel@11771,registry:Channel@12979,registry:Channel@13877,registry:Channel@13964,registry:Channel@14267,registry:Host@10287,registry:Host@10966,registry:Host@14002,registry:Host@14087,registry:Host@14258,registry:Host@5650,registry:Host@5736,registry:Host@7298,registry:Host@7440,registry:Host@7653,registry:Host@7891,registry:Host@8081,registry:Kind@12645,registry:Platform@10308,registry:Platform@13831,whole:Route@10269,whole:Route@10375,whole:Route@10436,whole:Route@10642,whole:Route@10658,whole:Route@10784,whole:Route@10812,whole:Route@10978,whole:Route@10994,whole:Route@11002,whole:Route@11701,whole:Route@11754,whole:Route@11911,whole:Route@11927,whole:Route@12972,whole:Route@13042,whole:Route@13211,whole:Route@13227,whole:Route@13235,whole:Route@13786,whole:Route@13817,whole:Route@13950,whole:Route@14105,whole:Route@14119,whole:Route@14125,whole:Route@14297,whole:Route@14311,whole:Route@14317,whole:Route@14325,whole:Route@14334,whole:Route@5366,whole:Route@5380,whole:Route@5510,whole:Route@5528,whole:Route@5579,whole:Route@5650,whole:Route@5736,whole:Route@5775,whole:Route@7144,whole:Route@7176,whole:Route@7243,whole:Route@7469,whole:Route@7487,whole:Route@7497,whole:Route@7563,whole:Route@7680,whole:Route@7698,whole:Route@7708,whole:Route@7913,whole:Route@7931,whole:Route@7941,whole:Route@8119,whole:Route@8137,whole:Route@8147,whole:Route@8157,whole:Route@8166 671e0583250e1988a49682ec4e2e620c32ab3dcbee2ae29b3463fd31c05c9f91 internal/domains/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: main's body with a trashed app's route kept while an import on its host is journaled and deleted only if the row is still the one listed (DeleteIfUnchanged) registry:Account@5579,registry:Account@5775,registry:App@10380,registry:App@11716,registry:App@13955,registry:App@5380,registry:App@5528,registry:App@7191,registry:App@7248,registry:App@7449,registry:App@7662,registry:App@7900,registry:App@8090,registry:Canary@10324,registry:Canary@13002,registry:Canary@13846,registry:Channel@11771,registry:Channel@12979,registry:Channel@13877,registry:Channel@13964,registry:Channel@14267,registry:Host@10287,registry:Host@10966,registry:Host@14002,registry:Host@14087,registry:Host@14258,registry:Host@5650,registry:Host@5736,registry:Host@7298,registry:Host@7440,registry:Host@7653,registry:Host@7891,registry:Host@8081,registry:Kind@12645,registry:Platform@10308,registry:Platform@13831,whole:Route@10269,whole:Route@10375,whole:Route@10436,whole:Route@10642,whole:Route@10658,whole:Route@10784,whole:Route@10812,whole:Route@10978,whole:Route@10994,whole:Route@11002,whole:Route@11701,whole:Route@11754,whole:Route@11911,whole:Route@11927,whole:Route@12972,whole:Route@13042,whole:Route@13211,whole:Route@13227,whole:Route@13235,whole:Route@13786,whole:Route@13817,whole:Route@13950,whole:Route@14105,whole:Route@14119,whole:Route@14125,whole:Route@14297,whole:Route@14311,whole:Route@14317,whole:Route@14325,whole:Route@14334,whole:Route@5366,whole:Route@5380,whole:Route@5510,whole:Route@5528,whole:Route@5579,whole:Route@5650,whole:Route@5736,whole:Route@5775,whole:Route@7144,whole:Route@7176,whole:Route@7243,whole:Route@7469,whole:Route@7487,whole:Route@7497,whole:Route@7563,whole:Route@7680,whole:Route@7698,whole:Route@7708,whole:Route@7913,whole:Route@7931,whole:Route@7941,whole:Route@8119,whole:Route@8137,whole:Route@8147,whole:Route@8157,whole:Route@8166 671e0583250e1988a49682ec4e2e620c32ab3dcbee2ae29b3463fd31c05c9f91 @legacy 38a65d230496ca92ee072566e73c65f9f16a1f1c910a82cae4084e1a6cfb4e9e internal/domains/reconcile.go importJournalHosts legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: the set of hosts the import journal holds, for Reconcile's removal phase registry:Host@219,whole:ImportJournal@182,whole:ImportJournal@206 7071dbfa1f9fefd7c370d63afda0e6c7c15377d3c0bd44aa9ce66d582465e8b4 internal/domains/reconcile.go importJournalHosts legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: the set of hosts the import journal holds, for Reconcile's removal phase registry:Host@219,whole:ImportJournal@182,whole:ImportJournal@206 7071dbfa1f9fefd7c370d63afda0e6c7c15377d3c0bd44aa9ce66d582465e8b4 @legacy 3c9812ab6b5a29be200636eb9e87806583b62b93e2687950824149adc5ed96b0 internal/edge/edge.go Edge.ServeHTTP legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import gate checked after the door's scope and a gated row left out of the response cache; serving only registry:Gate@13482,registry:Gate@13542,registry:Gate@13600,registry:Host@13585,registry:ImportGate@16657,registry:Kind@11721,registry:Kind@16628,whole:Route@11724,whole:Route@12282,whole:Route@12377,whole:Route@12453,whole:Route@13485,whole:Route@13545,whole:Route@13588,whole:Route@13603,whole:Route@14416,whole:Route@16631,whole:Route@16660,whole:Route@17806,whole:Route@9739,whole:Route@9951 60872c023fee4d687076bd87284e0d057328d39900cf21eaefd73175ad9066f6 internal/edge/edge.go Edge.ServeHTTP legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import gate checked after the door's scope and a gated row left out of the response cache; serving only registry:Gate@13482,registry:Gate@13542,registry:Gate@13600,registry:Host@13585,registry:ImportGate@16657,registry:Kind@11721,registry:Kind@16628,whole:Route@11724,whole:Route@12282,whole:Route@12377,whole:Route@12453,whole:Route@13485,whole:Route@13545,whole:Route@13588,whole:Route@13603,whole:Route@14416,whole:Route@16631,whole:Route@16660,whole:Route@17806,whole:Route@9739,whole:Route@9951 60872c023fee4d687076bd87284e0d057328d39900cf21eaefd73175ad9066f6 @legacy 76469b84edfd84b4be3af6e425eafe1bea321dd211ac512dcc62ae00c62a3410 internal/edge/importgate.go Edge.importGateAdmit legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import gate: a gated row admits only a GET carrying the verify token; anything else is a 503; serving only registry:Host@343,registry:Host@357,registry:ImportGate@274,registry:ImportGate@297,registry:ImportGate@417,whole:Route@197,whole:Route@250,whole:Route@261 6fdd512a0ab93db09fe6277151a34c5798951f0536673501ea0de522c1d4673d internal/edge/importgate.go Edge.importGateAdmit legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the edge inside the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import gate: a gated row admits only a GET carrying the verify token; anything else is a 503; serving only registry:Host@343,registry:Host@357,registry:ImportGate@274,registry:ImportGate@297,registry:ImportGate@417,whole:Route@197,whole:Route@250,whole:Route@261 6fdd512a0ab93db09fe6277151a34c5798951f0536673501ea0de522c1d4673d internal/host/agent.go runAgent authority B,C,D,F rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with wireSeedPlacement called in the activator start's Configure step, before armMovesPass, and the startup sweep's result stored for the import rollback in Recover; read sites unchanged, offsets moved; main's B,C,D,F authority retained file:Exec@13674,file:Open@731,registry:App@10065,whole:Route@10057,whole:Route@22981 571e36a2207f4cb50b92c9d4296940418f5b90816f726e9053a543e08d1e2860 @legacy 7441345ff6b8701b78ae0516a937b0d14f6f3160919f25b09f7204e610397aef internal/host/edgesfile.go edgesFileLoop legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the box's seeds fields added to the edges file it publishes (withSeedsFields); a report, not a decision file:Read@2587 33e36a8d72d9b69790c3fc689205e3b2b4ed17d409abdd78ef736b8a0cdde5f1 internal/host/edgesfile.go edgesFileLoop legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the box's seeds fields added to the edges file it publishes (withSeedsFields); a report, not a decision file:Read@2587 33e36a8d72d9b69790c3fc689205e3b2b4ed17d409abdd78ef736b8a0cdde5f1 internal/host/movesfloor.go rootJudgeMovesPrev authority F,J4 rev3=census-ruling-seeded-instances;basis=the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root): body of main's rootJudgePrev (authority F,J4) under a new name, byte for byte; rootJudgePrev is now a wrapper that calls it and the seeds half; main's F,J4 authority carried with the body file:Stat@113,file:Stat@314 9465a8b384042e42a5df4eba86a3f5e568c35ebe3bf80c59bb459e47813ccfd8 internal/host/movesfloor.go rootJudgePrev authority F,J4 rev3=census-ruling-seeded-instances;basis=the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root): still declared, and reads nothing now: it joins rootJudgeMovesPrev, which holds its former two stats, and rootJudgeSeedsPrev. Kept as main's F,J4 row with no read site, pinned to the declaration 9771f604e5b8db6b6010c818eb8dca21273a1772d061bbe71bb5c029f0e7c55a @legacy c4725d3ca065c9d7884a06927fcdacd1e1a0ad59ed3f959c0f33aa960aec9652 internal/host/moveslandinstall.go installRun.restore legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), in its moves worker: main's body with a leftover .seed marker removed beside the database a landing installs; read sites unchanged file:Lstat@1980,file:Lstat@3200 87e110a47ac74745c4857971de4243f0568dd9539d498364e56b6057febf60da internal/host/moveslandinstall.go installRun.restore legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), in its moves worker: main's body with a leftover .seed marker removed beside the database a landing installs; read sites unchanged file:Lstat@1980,file:Lstat@3200 87e110a47ac74745c4857971de4243f0568dd9539d498364e56b6057febf60da internal/host/movespass.go armPhase1 authority B2,C rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the S1 probe hook refusing a row whose import gate is set; main's B2,C authority retained registry:ImportGate@8279,whole:Route@8266,whole:Route@8408,whole:Route@8750,whole:Route@8878 f43d59bf5ac12d18c9a7c71377fe6049172b4e40240206d93738e6ad061f94ac internal/host/seedsfloor.go judgeSeedsPrev authority F,J4 rev3=census-ruling-seeded-instances;basis=system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root) through notePrev, and the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root) through rootJudgeSeedsPrev: seeds twin of the moves floor (F,J4); deny-only; Part 3 F2-F4 must cover the seeds floor alongside the moves floor. file:Stat@286 5527bbb26794b8828798621a8be1669cc09a0cfcaad64fd475f04cb5ebba7eef internal/host/seedsfloor.go readLocalSeedsFloor authority F,J4 rev3=census-ruling-seeded-instances;basis=system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root) and the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root); also the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), for its hourly refresh and its edges file: seeds twin of the moves floor (F,J4); deny-only; Part 3 F2-F4 must cover the seeds floor alongside the moves floor. file:Stat@285 267922c15ad354f2302f8e53a85134f0826abff505597109df6f6f0a3d9dacc2 internal/host/seedsfloor.go rootJudgeSeedsPrev authority F,J4 rev3=census-ruling-seeded-instances;basis=the adopt pass (/opt/carlos/carlos adopt in every mode; carlos-adopt.service, carlos-config-sync.service, carlos-restart.service and carlos-stage.service; root): seeds twin of the moves floor (F,J4); deny-only; Part 3 F2-F4 must cover the seeds floor alongside the moves floor. file:Stat@119 b4716501adbd72975a3dbe0dc0ee63d96543e4b397610556012c1348d835b7f3 @legacy 27d367471787aa5f446ad8d07a4c69f383cfae7473797f56c7d3ed638ff6b05b internal/host/seedwiring.go storeSeedObjects.Open legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): streams seeds///snapshot.db for the seed fallback and refuses a store that cannot stream file:Open@26,file:Open@329 b50c37c146b553190e2923ed6ef09703869f8a56cc673776158205f407a6af08 internal/host/seedwiring.go storeSeedObjects.Open legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): streams seeds///snapshot.db for the seed fallback and refuses a store that cannot stream file:Open@26,file:Open@329 b50c37c146b553190e2923ed6ef09703869f8a56cc673776158205f407a6af08 @legacy 54793357f9c380be77c10eda4ec320ad4307ef59ffd1b2952dcc6b7317108935 internal/host/seedwiring.go wireSeedPlacement legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): arms seeded instances on the box at startup: the claim flag, the data bucket, the record store and the provision pass's hooks; called from runAgent's Configure step registry:DBPath@1105 3b369313717811428079ebb7e50aceb96dd6014a6d5fd2673e7d4410d00e4ec0 internal/host/seedwiring.go wireSeedPlacement legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): arms seeded instances on the box at startup: the claim flag, the data bucket, the record store and the provision pass's hooks; called from runAgent's Configure step registry:DBPath@1105 3b369313717811428079ebb7e50aceb96dd6014a6d5fd2673e7d4410d00e4ec0 @legacy 8a772d02938480751dce115cde26480b6a009dc6e29538d0c81bc69eec1b5a29 internal/host/systemapply.go systemApplier.activationGuard legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): main's body plus a deny-only seeds-floor refusal checked first; the floor's authority is classified on readLocalSeedsFloor (F,J4); J1 as on main whole:Route@761 9f87adc40d645ed37d0c63fa3f045ca12ec765d2a2826016d667294cd94972e6 internal/host/systemapply.go systemApplier.activationGuard legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): main's body plus a deny-only seeds-floor refusal checked first; the floor's authority is classified on readLocalSeedsFloor (F,J4); J1 as on main whole:Route@761 9f87adc40d645ed37d0c63fa3f045ca12ec765d2a2826016d667294cd94972e6 @legacy 1cc934e2764194863b9bf3df268a1843b9c8e56ccc4e6faed221cc189ce836fd internal/host/systemapply.go systemApplier.activationRule legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): main's body plus a deny-only seeds-floor refusal checked first; the floor's authority is classified on readLocalSeedsFloor (F,J4); J1 as on main whole:Route@778,whole:Route@785,whole:Route@987 44323c4af3e8fba1907a9b41c22dd982b419ab8e36a68d0fe56d1faa87bdaae5 internal/host/systemapply.go systemApplier.activationRule legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=system apply (/opt/carlos/carlos system apply, or carlos.prev system apply, with --recover at boot; carlos-system-update.service and carlos-system-recover.service; root): main's body plus a deny-only seeds-floor refusal checked first; the floor's authority is classified on readLocalSeedsFloor (F,J4); J1 as on main whole:Route@778,whole:Route@785,whole:Route@987 44323c4af3e8fba1907a9b41c22dd982b419ab8e36a68d0fe56d1faa87bdaae5 internal/host/units/carlos-system-recover.service external authority F,J4 rev3=census-ruling-seeded-instances;basis=systemd (PID 1) runs its /bin/sh ExecStart as root at boot; the shell execs carlos.prev system floor-allows-prev and then carlos or carlos.prev system apply --recover, all root: main's unit with a second clause in the choice of binary: once the seeds floor line is there and not empty, carlos.prev runs only when floor-allows-prev says its seeds verdict equals it. A new root read of a file in /data/.moves, which the agent (carlos) also writes; main's F,J4 authority retained file:external@0 30a521da765ab4ce9136f3a36497d081c2caaa38aba73c4f0377b0c428ae1d80 internal/host/units/carlos-system-update.service external authority F,J4 rev3=census-ruling-seeded-instances;basis=systemd (PID 1) runs its /bin/sh ExecStart as root when an update is requested; the shell execs carlos.prev system floor-allows-prev and then carlos or carlos.prev system apply, all root: main's unit with a second clause in the choice of binary: once the seeds floor line is there and not empty, carlos.prev runs only when floor-allows-prev says its seeds verdict equals it. A new root read of a file in /data/.moves, which the agent (carlos) also writes; main's F,J4 authority retained file:external@0 77d1b854d7f79e1874a59409eecb56df782fd7a3defc63cf791f7cc59c707195 internal/hostops/backfill_seeds.go CollectCensusSeeds authority G rev3=census-ruling-seeded-instances;basis=no caller in the tree yet; G wires the census collector that will call it: deny-only activation input; G wires its caller and must keep it deny-only. If it ever feeds a decision that allows rather than refuses, it needs a new ruling. registry:Host@384,registry:ImportGate@329,whole:Route@315 ce08b3b3bb50b4c9b6655713e02dad3f9ff87e133b99405beb928fb68d9c8b6a @legacy 4ee034dc3a96f4196e09f2ec922ff7eed3226d78142d273c5ab7adcf24baac4d internal/provision/provision.go MoveRequest legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@169 d2dcb74b965027a7a0d4c54a6b818cb6bb64e84bfeab0b9181863c98454f28f1 internal/provision/provision.go MoveRequest legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@169 d2dcb74b965027a7a0d4c54a6b818cb6bb64e84bfeab0b9181863c98454f28f1 @legacy c14e01123668ca260c254aede51d70d5ef7c27713bcacfa44b24a5fa0565215f internal/provision/provision.go MoveStartTransition legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs, directly and through hostops.StartClaimMoveRecord; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@164 a7d33b177b9de6830a113b63ddd4a0aab2d5ac685589a280440ffff17baa1986 internal/provision/provision.go MoveStartTransition legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): a record transition the console's move door runs, directly and through hostops.StartClaimMoveRecord; it now also refuses a seed that may not move yet (seedMoveRefusal) file:Open@164 a7d33b177b9de6830a113b63ddd4a0aab2d5ac685589a280440ffff17baa1986 @legacy 61c8b8c180898bc7a360b6895c0b1199a317751c8de72cae766a822764119211 internal/provision/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import journal read before the records are acted on (journalPass), seeded records dispatched first (seedAction), journaled hosts kept out of the removal phase and a row's seed column converged from its record; the agent's own pass registry:Account@19247,registry:Account@20339,registry:Account@33924,registry:Account@33970,registry:App@19220,registry:App@20312,registry:App@33944,registry:App@33982,registry:ClaimOwnership@19834,registry:DBPath@26035,registry:DBPath@26050,registry:DBPath@26296,registry:DBPath@26827,registry:DBPath@26840,registry:Gate@22975,registry:Gate@23115,registry:Gate@23380,registry:Hibernate@21953,registry:Hibernate@22271,registry:Hibernate@22622,registry:Hibernate@22910,registry:Host@13124,registry:Host@33902,registry:Host@34072,registry:Host@34169,registry:Host@34284,registry:Host@34629,registry:Host@34726,registry:Host@34862,registry:Host@35020,registry:Host@35122,registry:Kind@19976,registry:Kind@20239,registry:Kind@25953,registry:Kind@25966,registry:Kind@26076,registry:Kind@26089,registry:Kind@26738,registry:Kind@26749,registry:Kind@33138,registry:Kind@34853,registry:Kind@35011,registry:Kind@35113,registry:Pool@33230,registry:Provisioned@19196,registry:Provisioned@20288,registry:Provisioned@33188,registry:Region@33219,registry:Replication@22356,registry:Replication@22483,registry:Seed@24455,registry:SeedSource@23960,registry:Socket@26001,registry:Socket@26016,registry:Socket@26313,registry:Socket@26797,registry:Socket@26810,registry:Unit@25919,registry:Unit@25932,registry:Unit@26764,registry:Unit@26775,whole:ClaimOwnership@19837,whole:ClaimOwnership@19854,whole:Route@13106,whole:Route@13117,whole:Route@13135,whole:Route@14235,whole:Route@14535,whole:Route@14542,whole:Route@14582,whole:Route@14943,whole:Route@15261,whole:Route@16122,whole:Route@16478,whole:Route@16487,whole:Route@16533,whole:Route@18841,whole:Route@19312,whole:Route@19322,whole:Route@19679,whole:Route@19686,whole:Route@19754,whole:Route@20077,whole:Route@20720,whole:Route@22043,whole:Route@26145,whole:Route@27624,whole:Route@27669,whole:Route@27679,whole:Route@28542,whole:Route@29294,whole:Route@32586,whole:Route@33255,whole:Route@34933 4dbcb2300e2598da672bac77c37de9479ce04f7a29cfbe9ded8f36baed05abb6 internal/provision/reconcile.go Reconcile legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body with the import journal read before the records are acted on (journalPass), seeded records dispatched first (seedAction), journaled hosts kept out of the removal phase and a row's seed column converged from its record; the agent's own pass registry:Account@19247,registry:Account@20339,registry:Account@33924,registry:Account@33970,registry:App@19220,registry:App@20312,registry:App@33944,registry:App@33982,registry:ClaimOwnership@19834,registry:DBPath@26035,registry:DBPath@26050,registry:DBPath@26296,registry:DBPath@26827,registry:DBPath@26840,registry:Gate@22975,registry:Gate@23115,registry:Gate@23380,registry:Hibernate@21953,registry:Hibernate@22271,registry:Hibernate@22622,registry:Hibernate@22910,registry:Host@13124,registry:Host@33902,registry:Host@34072,registry:Host@34169,registry:Host@34284,registry:Host@34629,registry:Host@34726,registry:Host@34862,registry:Host@35020,registry:Host@35122,registry:Kind@19976,registry:Kind@20239,registry:Kind@25953,registry:Kind@25966,registry:Kind@26076,registry:Kind@26089,registry:Kind@26738,registry:Kind@26749,registry:Kind@33138,registry:Kind@34853,registry:Kind@35011,registry:Kind@35113,registry:Pool@33230,registry:Provisioned@19196,registry:Provisioned@20288,registry:Provisioned@33188,registry:Region@33219,registry:Replication@22356,registry:Replication@22483,registry:Seed@24455,registry:SeedSource@23960,registry:Socket@26001,registry:Socket@26016,registry:Socket@26313,registry:Socket@26797,registry:Socket@26810,registry:Unit@25919,registry:Unit@25932,registry:Unit@26764,registry:Unit@26775,whole:ClaimOwnership@19837,whole:ClaimOwnership@19854,whole:Route@13106,whole:Route@13117,whole:Route@13135,whole:Route@14235,whole:Route@14535,whole:Route@14542,whole:Route@14582,whole:Route@14943,whole:Route@15261,whole:Route@16122,whole:Route@16478,whole:Route@16487,whole:Route@16533,whole:Route@18841,whole:Route@19312,whole:Route@19322,whole:Route@19679,whole:Route@19686,whole:Route@19754,whole:Route@20077,whole:Route@20720,whole:Route@22043,whole:Route@26145,whole:Route@27624,whole:Route@27669,whole:Route@27679,whole:Route@28542,whole:Route@29294,whole:Route@32586,whole:Route@33255,whole:Route@34933 4dbcb2300e2598da672bac77c37de9479ce04f7a29cfbe9ded8f36baed05abb6 internal/provision/reconcile.go RouteFor authority C,E3 rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos); also root, in the claim root's landing registration (ClaimRootHTTP.rootLandingRoute) and the relocation install (relocationRecord): main's body with one more field: the row's seed column, derived from the record's seed (SeedColumn). Every caller gets it, the two root ones included, so a root-registered row for a seeded record now carries the seed the activator places from; main's C,E3 authority retained registry:Addr@1268,registry:Addrs@1277,registry:DBPath@1216,registry:DBPath@914,registry:Health@1287,registry:Hibernate@1160,registry:Socket@1178,registry:Socket@876,whole:Route@1325 606aab27963d08e9c8f465455489840ccf80a3d190d7aca1a67e19efa9fe3075 @legacy 6f52737082ba943fba6db3289feba9403f6e58e9cacbe66178ab11ae86d1f8f1 internal/provision/seed.go SeedAbortBecause legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the record transition the --from door aborts a seed with, recording its reason file:Open@432 94860f2e04f2f87802f7d120661f5965030d2ea041ad9bab1bb1cf83b7a2da39 internal/provision/seed.go SeedAbortBecause legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the console (cmd/console serve under console.service, user carlos-console): the record transition the --from door aborts a seed with, recording its reason file:Open@432 94860f2e04f2f87802f7d120661f5965030d2ea041ad9bab1bb1cf83b7a2da39 @legacy 376decec162578365bbe4c7073732afdb9a2289480d28869aecc8ee5e4e0648f internal/provision/seedreconcile.go journalPass legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the box's import journal before the records are acted on and drives each row's host; on a claim-armed box it only protects the hosts and acts on nothing registry:Host@1689,registry:Host@1915,registry:Host@2249,registry:Host@2624,registry:Host@3129,registry:Host@3323,registry:Host@3368,registry:Host@3459,registry:Host@3586,registry:Host@3620,registry:Host@3725,registry:Host@3918,registry:Host@533,registry:Host@558,registry:Host@765,registry:RecordKey@2143,registry:RecordKey@2271,registry:SeedID@1697,registry:SeedID@1923,registry:SeedID@2257,registry:SeedID@2632,registry:SeedID@2775,registry:SeedID@3137,registry:SeedID@3376,registry:SeedID@3594,registry:SeedID@3926,registry:SeedID@773,registry:State@1707,registry:State@2352,registry:State@2642,whole:ImportJournal@1778,whole:ImportJournal@2465,whole:ImportJournal@2820,whole:ImportJournal@2979,whole:ImportJournal@514 ef46f7c4ae634f472ac53b4754c030f0f24317aa3bd8a13598e80aa23269a528 internal/provision/seedreconcile.go journalPass legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the box's import journal before the records are acted on and drives each row's host; on a claim-armed box it only protects the hosts and acts on nothing registry:Host@1689,registry:Host@1915,registry:Host@2249,registry:Host@2624,registry:Host@3129,registry:Host@3323,registry:Host@3368,registry:Host@3459,registry:Host@3586,registry:Host@3620,registry:Host@3725,registry:Host@3918,registry:Host@533,registry:Host@558,registry:Host@765,registry:RecordKey@2143,registry:RecordKey@2271,registry:SeedID@1697,registry:SeedID@1923,registry:SeedID@2257,registry:SeedID@2632,registry:SeedID@2775,registry:SeedID@3137,registry:SeedID@3376,registry:SeedID@3594,registry:SeedID@3926,registry:SeedID@773,registry:State@1707,registry:State@2352,registry:State@2642,whole:ImportJournal@1778,whole:ImportJournal@2465,whole:ImportJournal@2820,whole:ImportJournal@2979,whole:ImportJournal@514 ef46f7c4ae634f472ac53b4754c030f0f24317aa3bd8a13598e80aa23269a528 @legacy 9b7e2442ed8dc02921237e7c2701d14de596533c9a06276621bfde5219f6bf41 internal/provision/seedreconcile.go journalRecord legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): finds the record a journal row belongs to, from the pass's set or the store registry:Host@198,registry:Host@277,registry:Host@565,registry:RecordKey@209,registry:RecordKey@331,registry:RecordKey@573,whole:ImportJournal@457 ed4f8cd033967157e6ba96cb84f95da7ed8a08898f18f8c66334eaeb62b97453 internal/provision/seedreconcile.go journalRecord legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): finds the record a journal row belongs to, from the pass's set or the store registry:Host@198,registry:Host@277,registry:Host@565,registry:RecordKey@209,registry:RecordKey@331,registry:RecordKey@573,whole:ImportJournal@457 ed4f8cd033967157e6ba96cb84f95da7ed8a08898f18f8c66334eaeb62b97453 @legacy 1def799ddf41ada004c04d74ec7566f78d54da07ff08b1ef602c1e4f5470a054 internal/provision/seedreconcile.go purgeAbortedFromLocal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes an aborted --from seed's local database through the activator's hooks, under its fence, when no row holds the host and the marker names the seed whole:Route@1742 f6833aede4951dd975c11c0735c52678f7b4eb1a0934588c428e477d6c78ca78 internal/provision/seedreconcile.go purgeAbortedFromLocal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): removes an aborted --from seed's local database through the activator's hooks, under its fence, when no row holds the host and the marker names the seed whole:Route@1742 f6833aede4951dd975c11c0735c52678f7b4eb1a0934588c428e477d6c78ca78 @legacy f8e3e16e47bba04c5027333150f7135484ba0567405d5b79ed6c42cd7cd10285 internal/provision/seedreconcile.go retireAbortedSeedRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): retires the row this box minted for a --from seed that was aborted after its publish landed, through the pass's ordinary retire, once it is shown to be the record's own provisioned row in scope registry:Account@233,registry:App@262,registry:Host@1066,registry:Host@479,registry:Host@743,registry:Host@917,registry:Kind@1057,registry:Kind@129,registry:Kind@734,registry:Kind@908,registry:Pool@198,registry:Provisioned@156,registry:Region@187,whole:Route@223,whole:Route@814 9913af31435d24752c4a39c540c0997439ea347fa066e298ca73d224f7961ae7 internal/provision/seedreconcile.go retireAbortedSeedRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): retires the row this box minted for a --from seed that was aborted after its publish landed, through the pass's ordinary retire, once it is shown to be the record's own provisioned row in scope registry:Account@233,registry:App@262,registry:Host@1066,registry:Host@479,registry:Host@743,registry:Host@917,registry:Kind@1057,registry:Kind@129,registry:Kind@734,registry:Kind@908,registry:Pool@198,registry:Provisioned@156,registry:Region@187,whole:Route@223,whole:Route@814 9913af31435d24752c4a39c540c0997439ea347fa066e298ca73d224f7961ae7 @legacy 5e2f4b4c8bffeb394e5572cadbf579fe6f989930dd94efd1230a1589ddb04ec6 internal/provision/seedreconcile.go seedAction legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the per-record dispatch for seeded records: handle as an ordinary record, swap, finish an abort, or skip registry:ImportGate@2223,whole:Route@415 b8f6347a59575b2d4c3865e8827e1381f9c8928f23f2cd87fbb640420c84ffcf internal/provision/seedreconcile.go seedAction legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the per-record dispatch for seeded records: handle as an ordinary record, swap, finish an abort, or skip registry:ImportGate@2223,whole:Route@415 b8f6347a59575b2d4c3865e8827e1381f9c8928f23f2cd87fbb640420c84ffcf @legacy fe8f58601909ddb328da2b264c94601dae56dcf2adac3da8132310c865928d8c internal/provision/seedreconcile.go startRollback legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands an abandoned import to its rollback; a dry run starts nothing registry:Host@227,registry:SeedID@235,whole:ImportJournal@291 c6afd408a1fe7b065596dbd62ce7d92d166b7a7bc74ea5a58fc95a0668f56933 internal/provision/seedreconcile.go startRollback legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands an abandoned import to its rollback; a dry run starts nothing registry:Host@227,registry:SeedID@235,whole:ImportJournal@291 c6afd408a1fe7b065596dbd62ce7d92d166b7a7bc74ea5a58fc95a0668f56933 @legacy 44d029c6025d518c39128e547d6d4498879591b15f4c1d85433ca855548533fb internal/provision/seedrollback.go cleanUpImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's bucket and journal cleanup, run from cleanup-pending; it fences and stops nothing registry:Host@1030,registry:Host@1157,registry:Host@1225,registry:Host@1321,registry:Host@1403,registry:Host@1504,registry:Host@1621,registry:Host@168,registry:Host@2159,registry:Host@316,registry:Host@389,registry:Host@523,registry:Host@834,registry:SeedID@1038,registry:SeedID@1165,registry:SeedID@1329,registry:SeedID@1411,registry:SeedID@1512,registry:SeedID@1629,registry:SeedID@176,registry:SeedID@1893,registry:SeedID@1999,registry:SeedID@2167,registry:SeedID@324,registry:SeedID@397,registry:SeedID@531,registry:SeedID@842,whole:ImportJournal@725,whole:ImportJournal@929 08c1f537f2bd62c3349958f742ec460f2741433aa09d66e31a4013ae193c5d42 internal/provision/seedrollback.go cleanUpImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's bucket and journal cleanup, run from cleanup-pending; it fences and stops nothing registry:Host@1030,registry:Host@1157,registry:Host@1225,registry:Host@1321,registry:Host@1403,registry:Host@1504,registry:Host@1621,registry:Host@168,registry:Host@2159,registry:Host@316,registry:Host@389,registry:Host@523,registry:Host@834,registry:SeedID@1038,registry:SeedID@1165,registry:SeedID@1329,registry:SeedID@1411,registry:SeedID@1512,registry:SeedID@1629,registry:SeedID@176,registry:SeedID@1893,registry:SeedID@1999,registry:SeedID@2167,registry:SeedID@324,registry:SeedID@397,registry:SeedID@531,registry:SeedID@842,whole:ImportJournal@725,whole:ImportJournal@929 08c1f537f2bd62c3349958f742ec460f2741433aa09d66e31a4013ae193c5d42 @legacy 0a601657508e4d5bd4923f9abed029e10364fdbdc882ac17ae5897263eb71f15 internal/provision/seedrollback.go importRowOf legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row is the import's own, at the nested path the swap gave it registry:DBPath@129,registry:Host@168,whole:ImportJournal@123,whole:Route@119 2aa2cd524d8d5da0a949194169af37ca9d1c5d0409acaa9fa73b53172d8d666a internal/provision/seedrollback.go importRowOf legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row is the import's own, at the nested path the swap gave it registry:DBPath@129,registry:Host@168,whole:ImportJournal@123,whole:Route@119 2aa2cd524d8d5da0a949194169af37ca9d1c5d0409acaa9fa73b53172d8d666a @legacy f5776a34ad4c5905e1c52a483f109ccc37c78057788c26a13b3fa5ffb3792956 internal/provision/seedrollback.go journalRecordByKey legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads and checks the record a journal row names registry:Host@324,registry:RecordKey@134,registry:RecordKey@373,registry:RecordKey@443 3424932d53adbfd085c8ae4fb8dab4b0619ac0e56946a69087c4561d1355178a internal/provision/seedrollback.go journalRecordByKey legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads and checks the record a journal row names registry:Host@324,registry:RecordKey@134,registry:RecordKey@373,registry:RecordKey@443 3424932d53adbfd085c8ae4fb8dab4b0619ac0e56946a69087c4561d1355178a @legacy 6f88606bfd1f30cb8a7e4deb112a0ab79fe5f92c1144b9363b3a946593d54afa internal/provision/seedrollback.go removeOrphanedLocal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's local removal for an import whose row something removed, under the activator's fence; it retires the import's instance key first registry:EnvBefore@1254,registry:FenceGen@234,registry:FenceGen@663,registry:FenceGen@912,registry:Host@1049,registry:Host@1246,registry:Host@1351,registry:Host@1438,registry:Host@1559,registry:Host@157,registry:Host@1717,registry:Host@226,registry:Host@351,registry:Host@552,registry:Host@616,registry:Host@655,registry:Host@767,registry:Host@904,registry:SeedID@1057,registry:SeedID@1359,registry:SeedID@1567,registry:SeedID@1725,registry:SeedID@359,registry:SeedID@406,registry:SeedID@560,registry:SeedID@775,whole:Route@812 2e3bce663237c84674ef3cf697e08a77b755a36be80d3fc65478ad725d0b06cf internal/provision/seedrollback.go removeOrphanedLocal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's local removal for an import whose row something removed, under the activator's fence; it retires the import's instance key first registry:EnvBefore@1254,registry:FenceGen@234,registry:FenceGen@663,registry:FenceGen@912,registry:Host@1049,registry:Host@1246,registry:Host@1351,registry:Host@1438,registry:Host@1559,registry:Host@157,registry:Host@1717,registry:Host@226,registry:Host@351,registry:Host@552,registry:Host@616,registry:Host@655,registry:Host@767,registry:Host@904,registry:SeedID@1057,registry:SeedID@1359,registry:SeedID@1567,registry:SeedID@1725,registry:SeedID@359,registry:SeedID@406,registry:SeedID@560,registry:SeedID@775,whole:Route@812 2e3bce663237c84674ef3cf697e08a77b755a36be80d3fc65478ad725d0b06cf @legacy e6f9b5310ea3c7f771db5fb463a16d58acabf84f305fb327a9fd074a960aeb72 internal/provision/seedrollback.go replicaIsTheImports legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decides whether the host's replica is the import's to delete registry:Host@1076,registry:RecordKey@1093,registry:SeedID@208 2b1925d38da3102d13d372a700a458379f0936b393a0e06449e05ab9cea929ed internal/provision/seedrollback.go replicaIsTheImports legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decides whether the host's replica is the import's to delete registry:Host@1076,registry:RecordKey@1093,registry:SeedID@208 2b1925d38da3102d13d372a700a458379f0936b393a0e06449e05ab9cea929ed @legacy 4dc6cf963e068f58c105885a53a1d55cb724a8f7a183a9e674b2a4c8f3de9a36 internal/provision/seedrollback.go rollBackRoute legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's route steps: close the gate, fence and stop through the activator, retire the import's key, remove the local database, restore the original route; each step resumes from the journal registry:DBPath@3201,registry:EnvBefore@3221,registry:FenceGen@2198,registry:FenceGen@2280,registry:FenceGen@2995,registry:FenceGen@3855,registry:FenceGen@828,registry:Host@1419,registry:Host@1497,registry:Host@1603,registry:Host@1681,registry:Host@1880,registry:Host@2190,registry:Host@2272,registry:Host@2444,registry:Host@2654,registry:Host@2756,registry:Host@2987,registry:Host@3131,registry:Host@3213,registry:Host@3319,registry:Host@3480,registry:Host@3685,registry:Host@3790,registry:Host@3847,registry:Host@4001,registry:Host@403,registry:Host@520,registry:Host@820,registry:Host@976,registry:ImportGate@2928,registry:SeedID@1427,registry:SeedID@1505,registry:SeedID@1611,registry:SeedID@1722,registry:SeedID@1736,registry:SeedID@1888,registry:SeedID@2452,registry:SeedID@2764,registry:SeedID@3139,registry:SeedID@3327,registry:SeedID@3488,registry:SeedID@3693,registry:SeedID@3798,registry:SeedID@4009,registry:SeedID@528,registry:SeedID@984,registry:State@1158,registry:State@1748,registry:State@3868,registry:State@764,whole:ImportJournal@1003,whole:ImportJournal@1452,whole:ImportJournal@1636,whole:ImportJournal@1708,whole:ImportJournal@1898,whole:ImportJournal@1918,whole:ImportJournal@1933,whole:ImportJournal@1938,whole:ImportJournal@2476,whole:ImportJournal@2788,whole:ImportJournal@2864,whole:ImportJournal@2879,whole:ImportJournal@2922,whole:ImportJournal@3158,whole:ImportJournal@3352,whole:ImportJournal@3513,whole:ImportJournal@3822,whole:ImportJournal@4030,whole:ImportJournal@552,whole:ImportJournal@606,whole:Route@2635,whole:Route@2816,whole:Route@2917,whole:Route@3392,whole:Route@3913,whole:Route@568,whole:Route@601 f95ea47fc49fc54387e06aba7d1797a3b561b267dc6453873896973db4d8bc69 internal/provision/seedrollback.go rollBackRoute legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's route steps: close the gate, fence and stop through the activator, retire the import's key, remove the local database, restore the original route; each step resumes from the journal registry:DBPath@3201,registry:EnvBefore@3221,registry:FenceGen@2198,registry:FenceGen@2280,registry:FenceGen@2995,registry:FenceGen@3855,registry:FenceGen@828,registry:Host@1419,registry:Host@1497,registry:Host@1603,registry:Host@1681,registry:Host@1880,registry:Host@2190,registry:Host@2272,registry:Host@2444,registry:Host@2654,registry:Host@2756,registry:Host@2987,registry:Host@3131,registry:Host@3213,registry:Host@3319,registry:Host@3480,registry:Host@3685,registry:Host@3790,registry:Host@3847,registry:Host@4001,registry:Host@403,registry:Host@520,registry:Host@820,registry:Host@976,registry:ImportGate@2928,registry:SeedID@1427,registry:SeedID@1505,registry:SeedID@1611,registry:SeedID@1722,registry:SeedID@1736,registry:SeedID@1888,registry:SeedID@2452,registry:SeedID@2764,registry:SeedID@3139,registry:SeedID@3327,registry:SeedID@3488,registry:SeedID@3693,registry:SeedID@3798,registry:SeedID@4009,registry:SeedID@528,registry:SeedID@984,registry:State@1158,registry:State@1748,registry:State@3868,registry:State@764,whole:ImportJournal@1003,whole:ImportJournal@1452,whole:ImportJournal@1636,whole:ImportJournal@1708,whole:ImportJournal@1898,whole:ImportJournal@1918,whole:ImportJournal@1933,whole:ImportJournal@1938,whole:ImportJournal@2476,whole:ImportJournal@2788,whole:ImportJournal@2864,whole:ImportJournal@2879,whole:ImportJournal@2922,whole:ImportJournal@3158,whole:ImportJournal@3352,whole:ImportJournal@3513,whole:ImportJournal@3822,whole:ImportJournal@4030,whole:ImportJournal@552,whole:ImportJournal@606,whole:Route@2635,whole:Route@2816,whole:Route@2917,whole:Route@3392,whole:Route@3913,whole:Route@568,whole:Route@601 f95ea47fc49fc54387e06aba7d1797a3b561b267dc6453873896973db4d8bc69 @legacy 8187f5bbd2bedd58843fa9a0ffe9d568fec12794a01aa5ac4cf001c86de1520d internal/provision/seedrollback.go rollbackImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback, driven by the journal; dispatches on the journal's state registry:Host@244,registry:Host@426,registry:Host@760,registry:SeedID@252,registry:SeedID@434,registry:SeedID@768,registry:State@464,registry:State@778,whole:ImportJournal@553,whole:ImportJournal@593,whole:ImportJournal@832 4ea6357fead354abe0b96cd21b590dc2fb0e1d8af5bed5c65dd7908ebeb437d0 internal/provision/seedrollback.go rollbackImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import rollback, driven by the journal; dispatches on the journal's state registry:Host@244,registry:Host@426,registry:Host@760,registry:SeedID@252,registry:SeedID@434,registry:SeedID@768,registry:State@464,registry:State@778,whole:ImportJournal@553,whole:ImportJournal@593,whole:ImportJournal@832 4ea6357fead354abe0b96cd21b590dc2fb0e1d8af5bed5c65dd7908ebeb437d0 @legacy d6960c4ac989d9e9ed34a3b02673f5dde3ede9b51293708079af8fb75275b4c0 internal/provision/seedswap.go importRefusal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's predicates in order; a refusal is recorded on the record registry:App@1095,registry:App@666,registry:App@744,registry:App@901,whole:Route@277,whole:Route@391,whole:Route@537,whole:Route@799,whole:Route@862 f30071bc66ecde38bc177b23d0ea6386c15b2494f8d9aaa4a90b1614422720fc internal/provision/seedswap.go importRefusal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's predicates in order; a refusal is recorded on the record registry:App@1095,registry:App@666,registry:App@744,registry:App@901,whole:Route@277,whole:Route@391,whole:Route@537,whole:Route@799,whole:Route@862 f30071bc66ecde38bc177b23d0ea6386c15b2494f8d9aaa4a90b1614422720fc @legacy 906e793b4fadde64d806d4590874bf7d090d442fa53d0da2fea14899ef56f5e8 internal/provision/seedswap.go importRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): builds the gated exec row the swap installs, from the record through RouteFor at the nested paths registry:ImportGate@218,whole:Route@264 c5824165d9e84b633b8783496158544a93505307bb3bcb8736cf06f588c8bdbc internal/provision/seedswap.go importRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): builds the gated exec row the swap installs, from the record through RouteFor at the nested paths registry:ImportGate@218,whole:Route@264 c5824165d9e84b633b8783496158544a93505307bb3bcb8736cf06f588c8bdbc @legacy 4b06aaeecac4cec0980d400743e02b9c6e89883445446278cdaf22c9969136c1 internal/provision/seedswap.go importShape legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether the legacy row is an addr-backed instance or service this import may take over registry:Addr@182,registry:Addrs@199,registry:Backing@288,registry:Canary@448,registry:Caps@372,registry:ClaimOwnership@595,registry:FleetBox@483,registry:Hibernate@554,registry:Kind@127,registry:Kind@529,registry:Kind@61,registry:Kind@86,registry:Platform@409,registry:Provisioned@243,registry:Region@711,registry:Socket@141,registry:Tunnel@331,whole:ClaimOwnership@598 4fac331384f5aec6baf7eaaebaebb81202f969dfc6f2e4ab9217df7030b4fcf2 internal/provision/seedswap.go importShape legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether the legacy row is an addr-backed instance or service this import may take over registry:Addr@182,registry:Addrs@199,registry:Backing@288,registry:Canary@448,registry:Caps@372,registry:ClaimOwnership@595,registry:FleetBox@483,registry:Hibernate@554,registry:Kind@127,registry:Kind@529,registry:Kind@61,registry:Kind@86,registry:Platform@409,registry:Provisioned@243,registry:Region@711,registry:Socket@141,registry:Tunnel@331,whole:ClaimOwnership@598 4fac331384f5aec6baf7eaaebaebb81202f969dfc6f2e4ab9217df7030b4fcf2 @legacy cf6fa5c4056e20a18aadc942f4defc94cc68d2a4d72371d7c4d91c4f2b6300d1 internal/provision/seedswap.go importUngateable legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): why a swap must not run at all: no verify hash, a bad host or seed id, or a row the activator would not manage registry:Hibernate@350,whole:Route@390 73f88d6afe9c79b434a71da1fbfd01159c33bf3cc78ff5c1de94ca9cbf75c212 internal/provision/seedswap.go importUngateable legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): why a swap must not run at all: no verify hash, a bad host or seed id, or a row the activator would not manage registry:Hibernate@350,whole:Route@390 73f88d6afe9c79b434a71da1fbfd01159c33bf3cc78ff5c1de94ca9cbf75c212 @legacy 0cb3993e072ed60a08923a90700dc3a9370965c13b865a8e4b0e19411041c8cc internal/provision/seedswap.go operatorFiled legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row may be taken only through the operator's assignment whole:Route@123,whole:Route@62 ced99f42334595b13ff5599e5e820ff0a9da5ca36abe83cf8ea81cef93c61259 internal/provision/seedswap.go operatorFiled legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): whether a row may be taken only through the operator's assignment whole:Route@123,whole:Route@62 ced99f42334595b13ff5599e5e820ff0a9da5ca36abe83cf8ea81cef93c61259 @legacy b5c37fb5f07ac44b8b589b07c86abaf5bc8f56f94fd11a824ff5e9978babb076 internal/provision/seedswap.go swapImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import's swap: the journal first, then the predicates, then one registry transaction, then the record's CAS to swapped registry:DBPath@4032,registry:HoldOp@2290,registry:HoldOp@2406,registry:RecordKey@1204,registry:SeedID@1139,registry:SeedID@1379,registry:State@1166,registry:State@1389,whole:ImportJournal@1123,whole:ImportJournal@4468,whole:Route@1530,whole:Route@2271,whole:Route@2645,whole:Route@3053,whole:Route@3480,whole:Route@4322,whole:Route@4333,whole:Route@4477 af87cf52f0588a695e273f6719c74ad9738db80cbb07282e0dac2a993e610016 internal/provision/seedswap.go swapImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the import's swap: the journal first, then the predicates, then one registry transaction, then the record's CAS to swapped registry:DBPath@4032,registry:HoldOp@2290,registry:HoldOp@2406,registry:RecordKey@1204,registry:SeedID@1139,registry:SeedID@1379,registry:State@1166,registry:State@1389,whole:ImportJournal@1123,whole:ImportJournal@4468,whole:Route@1530,whole:Route@2271,whole:Route@2645,whole:Route@3053,whole:Route@3480,whole:Route@4322,whole:Route@4333,whole:Route@4477 af87cf52f0588a695e273f6719c74ad9738db80cbb07282e0dac2a993e610016 @legacy 404f80ef64e22d9c149007d0557edd6a56360e5801c045dda360dd1ff19b48d6 internal/registry/coldhandover.go Registry.RestoreClaimRows legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); its caller is hostbox's cold handover: main's body with the route insert bound through routeArgs and placeholders, the helpers Upsert now uses, so a restored row carries every column including seed_source and import_gate; the remote arm is unchanged file:QueryRowContext@1520,file:QueryRowContext@1947,file:QueryRowContext@2222,file:QueryRowContext@2563,file:QueryRowContext@3666,registry:Attempts@4310,registry:ClaimIncarnation@1004,registry:ClaimIncarnation@1026,registry:ClaimIncarnation@4360,registry:ClaimIncarnation@442,registry:ClaimIncarnation@472,registry:ClaimOwner@1098,registry:ClaimOwner@1114,registry:ClaimOwner@4394,registry:ClaimOwnership@331,registry:ClaimOwnership@368,registry:ClaimOwnership@661,registry:ClaimOwnership@703,registry:ClaimOwnership@857,registry:ClaimOwnership@895,registry:ClaimOwnership@947,registry:ClaimRowID@3376,registry:ClaimRowID@3514,registry:ClaimRowID@4408,registry:ClaimStamp@1057,registry:ClaimStamp@1073,registry:ClaimStamp@4380,registry:ClaimStamp@503,registry:ClaimStamp@528,registry:Contents@2973,registry:CreatedAt@4322,registry:DueAt@4335,registry:Host@2020,registry:Host@2306,registry:Host@3356,registry:Host@3498,registry:Host@3786,registry:Host@3803,registry:Host@405,registry:Host@4226,registry:Host@423,registry:Host@975,registry:Host@985,registry:Kind@4242,registry:LastAt@4276,registry:LastMs@4300,registry:LastStatus@4286,registry:Name@2317,registry:Name@3506,registry:Name@4234,registry:NextAt@4266,registry:Path@4258,registry:Registration@3589,registry:Registration@4344,registry:Route@1026,registry:Route@1073,registry:Route@1114,registry:Route@2020,registry:Route@2116,registry:Route@331,registry:Route@3356,registry:Route@3376,registry:Route@3398,registry:Route@368,registry:Route@3786,registry:Route@3803,registry:Route@4032,registry:Route@405,registry:Route@423,registry:Route@442,registry:Route@472,registry:Route@503,registry:Route@528,registry:Route@638,registry:Route@649,registry:Route@985,registry:Spec@4250,registry:Timers@2185,registry:Timers@3458,registry:Timers@4097,registry:Timers@556,registry:Timers@575,registry:Timers@814,registry:Timers@838,registry:remote@121,registry:remote@151,registry:sql@1187,whole:ClaimOwnership@341,whole:ClaimOwnership@379,whole:ClaimOwnership@668,whole:ClaimOwnership@709,whole:ClaimOwnership@859,whole:ClaimOwnership@897,whole:ClaimOwnership@949,whole:ClaimRowArchive@2830,whole:ColdRows@1456,whole:ColdRows@244,whole:ColdRows@249,whole:ColdRows@254,whole:ColdRows@265,whole:Route@1031,whole:Route@1078,whole:Route@1119,whole:Route@2025,whole:Route@2082,whole:Route@2121,whole:Route@335,whole:Route@3360,whole:Route@3380,whole:Route@3402,whole:Route@373,whole:Route@3791,whole:Route@3808,whole:Route@4037,whole:Route@409,whole:Route@428,whole:Route@446,whole:Route@477,whole:Route@508,whole:Route@532,whole:Route@642,whole:Route@654,whole:Route@747,whole:Route@757,whole:Route@990,whole:Timer@2190,whole:Timer@2347,whole:Timer@2354,whole:Timer@3462,whole:Timer@3586,whole:Timer@4102,whole:Timer@560,whole:Timer@580,whole:Timer@819,whole:Timer@842,whole:Timer@853,whole:Timer@936,whole:Timer@941,whole:remoteClient@123,whole:remoteClient@153 c98ba5ddc177a5095e6b0cef51a9f2828b12277485916af134275a7bb87f01df internal/registry/coldhandover.go Registry.RestoreClaimRows legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); its caller is hostbox's cold handover: main's body with the route insert bound through routeArgs and placeholders, the helpers Upsert now uses, so a restored row carries every column including seed_source and import_gate; the remote arm is unchanged file:QueryRowContext@1520,file:QueryRowContext@1947,file:QueryRowContext@2222,file:QueryRowContext@2563,file:QueryRowContext@3666,registry:Attempts@4310,registry:ClaimIncarnation@1004,registry:ClaimIncarnation@1026,registry:ClaimIncarnation@4360,registry:ClaimIncarnation@442,registry:ClaimIncarnation@472,registry:ClaimOwner@1098,registry:ClaimOwner@1114,registry:ClaimOwner@4394,registry:ClaimOwnership@331,registry:ClaimOwnership@368,registry:ClaimOwnership@661,registry:ClaimOwnership@703,registry:ClaimOwnership@857,registry:ClaimOwnership@895,registry:ClaimOwnership@947,registry:ClaimRowID@3376,registry:ClaimRowID@3514,registry:ClaimRowID@4408,registry:ClaimStamp@1057,registry:ClaimStamp@1073,registry:ClaimStamp@4380,registry:ClaimStamp@503,registry:ClaimStamp@528,registry:Contents@2973,registry:CreatedAt@4322,registry:DueAt@4335,registry:Host@2020,registry:Host@2306,registry:Host@3356,registry:Host@3498,registry:Host@3786,registry:Host@3803,registry:Host@405,registry:Host@4226,registry:Host@423,registry:Host@975,registry:Host@985,registry:Kind@4242,registry:LastAt@4276,registry:LastMs@4300,registry:LastStatus@4286,registry:Name@2317,registry:Name@3506,registry:Name@4234,registry:NextAt@4266,registry:Path@4258,registry:Registration@3589,registry:Registration@4344,registry:Route@1026,registry:Route@1073,registry:Route@1114,registry:Route@2020,registry:Route@2116,registry:Route@331,registry:Route@3356,registry:Route@3376,registry:Route@3398,registry:Route@368,registry:Route@3786,registry:Route@3803,registry:Route@4032,registry:Route@405,registry:Route@423,registry:Route@442,registry:Route@472,registry:Route@503,registry:Route@528,registry:Route@638,registry:Route@649,registry:Route@985,registry:Spec@4250,registry:Timers@2185,registry:Timers@3458,registry:Timers@4097,registry:Timers@556,registry:Timers@575,registry:Timers@814,registry:Timers@838,registry:remote@121,registry:remote@151,registry:sql@1187,whole:ClaimOwnership@341,whole:ClaimOwnership@379,whole:ClaimOwnership@668,whole:ClaimOwnership@709,whole:ClaimOwnership@859,whole:ClaimOwnership@897,whole:ClaimOwnership@949,whole:ClaimRowArchive@2830,whole:ColdRows@1456,whole:ColdRows@244,whole:ColdRows@249,whole:ColdRows@254,whole:ColdRows@265,whole:Route@1031,whole:Route@1078,whole:Route@1119,whole:Route@2025,whole:Route@2082,whole:Route@2121,whole:Route@335,whole:Route@3360,whole:Route@3380,whole:Route@3402,whole:Route@373,whole:Route@3791,whole:Route@3808,whole:Route@4037,whole:Route@409,whole:Route@428,whole:Route@446,whole:Route@477,whole:Route@508,whole:Route@532,whole:Route@642,whole:Route@654,whole:Route@747,whole:Route@757,whole:Route@990,whole:Timer@2190,whole:Timer@2347,whole:Timer@2354,whole:Timer@3462,whole:Timer@3586,whole:Timer@4102,whole:Timer@560,whole:Timer@580,whole:Timer@819,whole:Timer@842,whole:Timer@853,whole:Timer@936,whole:Timer@941,whole:remoteClient@123,whole:remoteClient@153 c98ba5ddc177a5095e6b0cef51a9f2828b12277485916af134275a7bb87f01df @legacy 55b0ea7c5df525c7fd04833de179aebb2847d9b8146f5c19e2d58152e24f8bd9 internal/registry/fencegen.go Registry.NextFenceGeneration legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands out a fence generation above every earlier one, in one transaction (inTx refuses a remote handle); for the import rollback and the layout pass file:Exec@346,file:QueryRow@151 65f7ca3459cfb3a99fd59935ae2cfcf7c9fba6e92db5ffea842387235f04f03b internal/registry/fencegen.go Registry.NextFenceGeneration legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): hands out a fence generation above every earlier one, in one transaction (inTx refuses a remote handle); for the import rollback and the layout pass file:Exec@346,file:QueryRow@151 65f7ca3459cfb3a99fd59935ae2cfcf7c9fba6e92db5ffea842387235f04f03b @legacy 7a6d6784b08bb4d681b04593702da3a539bc0d7cc2b506cd2c3fd87598c79f88 internal/registry/fencegen.go Registry.migrateFenceGenerations legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the fence_generation table on open file:Exec@64,registry:sql@64 f79cf40868b257c295406963e7d1d8a97450e0f502671067c56495f35e556c74 internal/registry/fencegen.go Registry.migrateFenceGenerations legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the fence_generation table on open file:Exec@64,registry:sql@64 f79cf40868b257c295406963e7d1d8a97450e0f502671067c56495f35e556c74 @legacy 08e10c7f67b193c187a24209ab8a17b36f13248e7d8e52c3f3b5d18588c182d2 internal/registry/importjournal.go IsImportRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure test: whether a row is the one a journal row's swap put in place registry:Host@77,registry:Host@88,registry:ImportGate@143,registry:Kind@98,registry:Provisioned@123,registry:SeedID@197,registry:SeedID@59,registry:SeedSource@179 a1cb6f4a96f88e5be9abe54c58b6360e455b81b3b9f6eda42476f364af00f11c internal/registry/importjournal.go IsImportRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure test: whether a row is the one a journal row's swap put in place registry:Host@77,registry:Host@88,registry:ImportGate@143,registry:Kind@98,registry:Provisioned@123,registry:SeedID@197,registry:SeedID@59,registry:SeedSource@179 a1cb6f4a96f88e5be9abe54c58b6360e455b81b3b9f6eda42476f364af00f11c @legacy 6712d4fa4db9eb451bda85b8e6037e245a934d08a4195b66e0128db2b4ebb4d1 internal/registry/importjournal.go Registry.CloseImportGate legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's first step: journal to rolling-back with its fence generation and the gate closed; not served on a remote handle file:Exec@346,file:Exec@508,registry:State@302,whole:ImportJournal@262 382ee08a3a5560f880ef0d4d93a2f28b218bfa4bc7dcf75e33478994dfd9615f internal/registry/importjournal.go Registry.CloseImportGate legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's first step: journal to rolling-back with its fence generation and the gate closed; not served on a remote handle file:Exec@346,file:Exec@508,registry:State@302,whole:ImportJournal@262 382ee08a3a5560f880ef0d4d93a2f28b218bfa4bc7dcf75e33478994dfd9615f @legacy abf00c389e9798888fd285788cfa0849df194d38f0b836b832a7997434eebac3 internal/registry/importjournal.go Registry.CommitImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): clears the gate and retires the journal; not served on a remote handle file:Exec@205,file:Exec@316 849f2ee23f0df258efe6a6db4eba51d8396a2a2b0de6337b74b24cb4b97919e8 internal/registry/importjournal.go Registry.CommitImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): clears the gate and retires the journal; not served on a remote handle file:Exec@205,file:Exec@316 849f2ee23f0df258efe6a6db4eba51d8396a2a2b0de6337b74b24cb4b97919e8 @legacy 59299a57a04266a9bd5fa60579a9311070e5b6fc505e81f3c620e404a4e6597b internal/registry/importjournal.go Registry.DeleteImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's last journal step; not served on a remote handle file:Exec@216 688b65f68fe657cd9bc02f1ab79aeb634e52630948f273e47303b3996d9640a4 internal/registry/importjournal.go Registry.DeleteImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's last journal step; not served on a remote handle file:Exec@216 688b65f68fe657cd9bc02f1ab79aeb634e52630948f273e47303b3996d9640a4 @legacy 3f2711ecb13122c45197a8025f3344dd215e9036761b1259b59dca5fe08e1bfd internal/registry/importjournal.go Registry.ImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a host's journal row; answers errRemoteMethod on a remote handle, so no root pass reads the journal through it registry:remote@76,registry:sql@147,whole:remoteClient@78 a0bd66adfa8eb64d1694bcd63eb5c167f592dd71afa0877a624421d4abcb3b09 internal/registry/importjournal.go Registry.ImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a host's journal row; answers errRemoteMethod on a remote handle, so no root pass reads the journal through it registry:remote@76,registry:sql@147,whole:remoteClient@78 a0bd66adfa8eb64d1694bcd63eb5c167f592dd71afa0877a624421d4abcb3b09 internal/registry/importjournal.go Registry.ImportJournalHosts authority G rev3=census-ruling-seeded-instances;basis=its SQLite arm as carlos, in the agent or the registry child (carlos __registry-child); its remote arm in whichever process holds a remote handle, and a root pass does. No caller in the tree yet, outside the child's dispatch: deny-only activation input; G wires its caller and must keep it deny-only. If it ever feeds a decision that allows rather than refuses, it needs a new ruling. file:Query@339,registry:Hosts@303,registry:remote@64,registry:remote@96,registry:sql@339,whole:remoteClient@66,whole:remoteClient@98 05fd83dbf1582d6d8bebb59e2be373db87c1a56b0c99bc00dab926f17369c5ea @legacy d07ec59b7972b4ddc5849489c272fb0de758c7f0e7af370372c2dd9a8f912298 internal/registry/importjournal.go Registry.ImportJournals legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the import journal for the provision and domains passes; answers errRemoteMethod on a remote handle file:Query@132,registry:remote@67,registry:sql@132,whole:ImportJournal@391,whole:ImportJournal@404,whole:ImportJournal@409,whole:ImportJournal@423,whole:remoteClient@69 9cbbdfae62162812ab9aae0d647550f01cd4513279fb7cf035a0bc6b9873229c internal/registry/importjournal.go Registry.ImportJournals legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads the import journal for the provision and domains passes; answers errRemoteMethod on a remote handle file:Query@132,registry:remote@67,registry:sql@132,whole:ImportJournal@391,whole:ImportJournal@404,whole:ImportJournal@409,whole:ImportJournal@423,whole:remoteClient@69 9cbbdfae62162812ab9aae0d647550f01cd4513279fb7cf035a0bc6b9873229c @legacy 6edfa42dac4ffa878fa8cfb604bab358813b8aa61160243048a7f66a66dcced9 internal/registry/importjournal.go Registry.RestoreImportRoute legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's restore: the original route back exactly as stored, replacing only the import's own row; not served on a remote handle file:Exec@304,file:Exec@481,registry:Original@420,whole:ImportJournal@231,whole:Route@275,whole:Route@422 4d6a41685cb50575b1db3c0be43430a89c179d52cbe0419466618af6e781c368 internal/registry/importjournal.go Registry.RestoreImportRoute legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the rollback's restore: the original route back exactly as stored, replacing only the import's own row; not served on a remote handle file:Exec@304,file:Exec@481,registry:Original@420,whole:ImportJournal@231,whole:Route@275,whole:Route@422 4d6a41685cb50575b1db3c0be43430a89c179d52cbe0419466618af6e781c368 @legacy 11aa6bc30e75bea32d55f8fa59cbd58065f320cd207935ddabc504a0c84499e1 internal/registry/importjournal.go Registry.SwapForImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's transaction: with no journal row and the stored route still the original, replaces the route and writes the journal row; not served on a remote handle file:Exec@1462,file:Exec@1642,registry:At@1787,registry:ClaimOwnership@473,registry:EnvBefore@1793,registry:EnvBefore@297,registry:HoldOp@524,registry:Host@1032,registry:Host@1180,registry:Host@1236,registry:Host@129,registry:Host@1435,registry:Host@148,registry:Host@1507,registry:Host@1726,registry:Host@278,registry:Host@458,registry:Host@672,registry:Host@74,registry:Host@951,registry:ImportGate@551,registry:Original@129,registry:Original@1330,registry:Original@473,registry:Original@524,registry:Original@551,registry:Original@710,registry:Original@850,registry:RecordKey@108,registry:RecordKey@1758,registry:SeedID@1188,registry:SeedID@1734,registry:SeedID@90,whole:ClaimOwnership@484,whole:ImportJournal@1080,whole:ImportJournal@193,whole:Route@1285,whole:Route@131,whole:Route@1322,whole:Route@1332,whole:Route@1592,whole:Route@186,whole:Route@475,whole:Route@526,whole:Route@553,whole:Route@712,whole:Route@804,whole:Route@844,whole:Route@852 f55fae3ef3a731c6ea57d82573c214082316a2c7e01255b0e8f549a6d4f25474 internal/registry/importjournal.go Registry.SwapForImport legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the swap's transaction: with no journal row and the stored route still the original, replaces the route and writes the journal row; not served on a remote handle file:Exec@1462,file:Exec@1642,registry:At@1787,registry:ClaimOwnership@473,registry:EnvBefore@1793,registry:EnvBefore@297,registry:HoldOp@524,registry:Host@1032,registry:Host@1180,registry:Host@1236,registry:Host@129,registry:Host@1435,registry:Host@148,registry:Host@1507,registry:Host@1726,registry:Host@278,registry:Host@458,registry:Host@672,registry:Host@74,registry:Host@951,registry:ImportGate@551,registry:Original@129,registry:Original@1330,registry:Original@473,registry:Original@524,registry:Original@551,registry:Original@710,registry:Original@850,registry:RecordKey@108,registry:RecordKey@1758,registry:SeedID@1188,registry:SeedID@1734,registry:SeedID@90,whole:ClaimOwnership@484,whole:ImportJournal@1080,whole:ImportJournal@193,whole:Route@1285,whole:Route@131,whole:Route@1322,whole:Route@1332,whole:Route@1592,whole:Route@186,whole:Route@475,whole:Route@526,whole:Route@553,whole:Route@712,whole:Route@804,whole:Route@844,whole:Route@852 f55fae3ef3a731c6ea57d82573c214082316a2c7e01255b0e8f549a6d4f25474 @legacy 56d44fec5ce6080208f1b32a450066269a20e1ba824eb4963ace8d80683290e2 internal/registry/importjournal.go Registry.inTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): runs a function in one BEGIN IMMEDIATE transaction at synchronous=FULL; answers errRemoteMethod on a remote handle registry:remote@60,whole:claimTransaction@238,whole:remoteClient@62 34a76788f015f15a04d2d0f2ae444b4bd45c3972827e69e92f86dc0bf0401c24 internal/registry/importjournal.go Registry.inTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): runs a function in one BEGIN IMMEDIATE transaction at synchronous=FULL; answers errRemoteMethod on a remote handle registry:remote@60,whole:claimTransaction@238,whole:remoteClient@62 34a76788f015f15a04d2d0f2ae444b4bd45c3972827e69e92f86dc0bf0401c24 @legacy f4415fff464e975cf942625395bf5b1f89382c924c6858cfe1185094c29711e9 internal/registry/importjournal.go Registry.migrateImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the import_journal table and its env_before column on open file:Exec@514,file:Exec@64,registry:sql@514,registry:sql@64 7570de2ce1b6d9d9bb81f597397977d519ed347798d120c0ee8af228fa34ce11 internal/registry/importjournal.go Registry.migrateImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open as Registry.migrate does; a box CLI verb that opens the registry directly runs it as whoever runs the verb: creates the import_journal table and its env_before column on open file:Exec@514,file:Exec@64,registry:sql@514,registry:sql@64 7570de2ce1b6d9d9bb81f597397977d519ed347798d120c0ee8af228fa34ce11 @legacy 79d7da1205017fc37e0ac887b5928b8774ad131850e65f4ea1ed3b2b440dc0cd internal/registry/importjournal.go getRouteTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a route by host inside the journal's transaction file:QueryRow@77,whole:Route@256 bab612fb3b033817d5495a3869d84d9e5d2d464028df970b57646795540602bb internal/registry/importjournal.go getRouteTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads a route by host inside the journal's transaction file:QueryRow@77,whole:Route@256 bab612fb3b033817d5495a3869d84d9e5d2d464028df970b57646795540602bb @legacy fb0fff8de6b869076ec0b371937f25fa6e4e97144ebf20dc223265f131b38c27 internal/registry/importjournal.go hashImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), from SnapshotFingerprint: folds the import journal into the snapshot fingerprint, so a registry snapshot never restores a stale journal unnoticed file:Query@70 7c60d298ba3a000711feb49c5a2a6964d78c645ee5bbf0253a8d244f19920a46 internal/registry/importjournal.go hashImportJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), from SnapshotFingerprint: folds the import journal into the snapshot fingerprint, so a registry snapshot never restores a stale journal unnoticed file:Query@70 7c60d298ba3a000711feb49c5a2a6964d78c645ee5bbf0253a8d244f19920a46 @legacy 632f2e7f84e2d8b20692e51324b2b18afd7fd0520f5067d12a5a1473504d4fa9 internal/registry/importjournal.go importRowTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's row when it is the import's own; refuses any other row registry:Host@264,registry:Host@90,registry:SeedID@272,whole:ImportJournal@174,whole:Route@140,whole:Route@168,whole:Route@293 7345ae8a84da81610e353b46e85a00c9834d086b5f38e0ec6a5faa08d7ce2c89 internal/registry/importjournal.go importRowTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's row when it is the import's own; refuses any other row registry:Host@264,registry:Host@90,registry:SeedID@272,whole:ImportJournal@174,whole:Route@140,whole:Route@168,whole:Route@293 7345ae8a84da81610e353b46e85a00c9834d086b5f38e0ec6a5faa08d7ce2c89 @legacy 2be559d59979a105227a88600d8218eeea9e2eb79ce023fef6916b45451dc500 internal/registry/importjournal.go insertRouteTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): inserts a route exactly as given, for the swap and the restore file:Exec@56,whole:Route@153 9de96bc2387e027a476167f331013f136387da800c1884846d8545b7916f1c1f internal/registry/importjournal.go insertRouteTx legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): inserts a route exactly as given, for the swap and the restore file:Exec@56,whole:Route@153 9de96bc2387e027a476167f331013f136387da800c1884846d8545b7916f1c1f @legacy 30b4040274d746aafc1ea7ee48ec20aa4f40a6e11a06b7c805b9de7e55bee9e2 internal/registry/importjournal.go journalFor legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's journal row, which must name the seed and be in an expected state registry:SeedID@177,registry:State@328,registry:State@441,whole:ImportJournal@165,whole:ImportJournal@353 422efef58626a930d9aaba6f2d5bc9bb01ed7a3f1e4b04ff30a73b7dc0dd29a0 internal/registry/importjournal.go journalFor legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): the host's journal row, which must name the seed and be in an expected state registry:SeedID@177,registry:State@328,registry:State@441,whole:ImportJournal@165,whole:ImportJournal@353 422efef58626a930d9aaba6f2d5bc9bb01ed7a3f1e4b04ff30a73b7dc0dd29a0 @legacy 7d0cf1cd6efbfd60d5610513d0d7776a647af8d47698633e51fe4ead9358f94f internal/registry/importjournal.go scanJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads one journal row by host file:QueryRow@93,whole:ImportJournal@281 6bd3a5337b628469de13e0a718c7a75c43b1d67a6cde2109d0bb72565ec8ea08 internal/registry/importjournal.go scanJournal legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): reads one journal row by host file:QueryRow@93,whole:ImportJournal@281 6bd3a5337b628469de13e0a718c7a75c43b1d67a6cde2109d0bb72565ec8ea08 @legacy be23b511e31d7f86ed0a5b9b52c239af541d35e515f8e4dfabc162ec0c5abe05 internal/registry/importjournal.go scanJournalRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decodes a journal row, its stored original route included registry:At@189,registry:EnvBefore@196,registry:FenceGen@176,registry:Host@125,registry:Host@381,registry:Original@283,registry:RecordKey@152,registry:SeedID@134,registry:State@166,whole:ImportJournal@232,whole:ImportJournal@318,whole:ImportJournal@405,whole:Route@285 752a3b638a5580ea0a1d03f3b031b5669539d1cfc899f0a520c51e2c845da983 internal/registry/importjournal.go scanJournalRow legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): decodes a journal row, its stored original route included registry:At@189,registry:EnvBefore@196,registry:FenceGen@176,registry:Host@125,registry:Host@381,registry:Original@283,registry:RecordKey@152,registry:SeedID@134,registry:State@166,whole:ImportJournal@232,whole:ImportJournal@318,whole:ImportJournal@405,whole:Route@285 752a3b638a5580ea0a1d03f3b031b5669539d1cfc899f0a520c51e2c845da983 @legacy 7bf9ea1a2ef569492660b54c847e3f426d7749aea3eca22826601c791766edf8 internal/registry/importjournal.go seedColumnID legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure: the seed id a seed_source column names registry:ID@193 e56c15dc9a03ba6db62a462cbd16968db61be4873b6260c134669b5baccdbf6e internal/registry/importjournal.go seedColumnID legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): pure: the seed id a seed_source column names registry:ID@193 e56c15dc9a03ba6db62a462cbd16968db61be4873b6260c134669b5baccdbf6e @legacy ab17adc39b575b8958c31306a774cf6713f8b997b451bb6e1aa3f8d1b6ae0df8 internal/registry/importjournal.go type queryer legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the query half of a transaction file:QueryRow@26 9680462eb066e0897df8b01561c7d2503e7d2c533417c35d37701cf70041ee07 internal/registry/importjournal.go type queryer legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the query half of a transaction file:QueryRow@26 9680462eb066e0897df8b01561c7d2503e7d2c533417c35d37701cf70041ee07 @legacy 5a1b9839bf2ccbc70d51657f1d5067bdd94cc5aea02143a0c9f401df46a94523 internal/registry/importjournal.go type txer legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the transaction the journal's steps run in file:Exec@32 81fb9416633ed62206ee4c95744a8dc526c315e10ffa2abb9eaa8484ead0ad61 internal/registry/importjournal.go type txer legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): declaration only: the transaction the journal's steps run in file:Exec@32 81fb9416633ed62206ee4c95744a8dc526c315e10ffa2abb9eaa8484ead0ad61 @legacy a49a3c98dd70aa05221b4a7d0fa7b012955b963fa6dcef3d0adefb41910c4353 internal/registry/registry.go Registry.Fingerprint legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with the import gate folded into the edge's change poll when it is set, so an ungated registry digests as before file:Exec@284,file:Open@188,file:Query@2936,file:Query@3415,file:Query@368,file:Query@4401,file:Query@5097,file:Query@6009,registry:ClaimIncarnation@1116,registry:ClaimIncarnation@2218,registry:ClaimIncarnation@2295,registry:ClaimOwner@1160,registry:ClaimOwner@2419,registry:ClaimOwner@2484,registry:ClaimRowID@1179,registry:ClaimRowID@2511,registry:ClaimRowID@2577,registry:ClaimStamp@1141,registry:ClaimStamp@2328,registry:ClaimStamp@2392,registry:Text@158,registry:path@207,registry:remote@55,registry:remote@87,whole:remoteClient@57,whole:remoteClient@89 0f6015c65146fcc0d5867acb1150306d3a594fbe9e3e48bf9cbe0efa4fea09b0 internal/registry/registry.go Registry.Fingerprint legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with the import gate folded into the edge's change poll when it is set, so an ungated registry digests as before file:Exec@284,file:Open@188,file:Query@2936,file:Query@3415,file:Query@368,file:Query@4401,file:Query@5097,file:Query@6009,registry:ClaimIncarnation@1116,registry:ClaimIncarnation@2218,registry:ClaimIncarnation@2295,registry:ClaimOwner@1160,registry:ClaimOwner@2419,registry:ClaimOwner@2484,registry:ClaimRowID@1179,registry:ClaimRowID@2511,registry:ClaimRowID@2577,registry:ClaimStamp@1141,registry:ClaimStamp@2328,registry:ClaimStamp@2392,registry:Text@158,registry:path@207,registry:remote@55,registry:remote@87,whole:remoteClient@57,whole:remoteClient@89 0f6015c65146fcc0d5867acb1150306d3a594fbe9e3e48bf9cbe0efa4fea09b0 @legacy 7e25fd31d72d37a677be25627c1433d7d24c352bece9dbf3b324de329bdc38bf internal/registry/registry.go Registry.SetSeedSource legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): converges a row's seed column from its record, for the provision pass; answers errRemoteMethod on a remote handle file:Exec@120,registry:remote@61,registry:sql@120,whole:remoteClient@63 65020817ba9577503121dd23b01c0342450a289b2fcac6c4430f5b9978965a21 internal/registry/registry.go Registry.SetSeedSource legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): converges a row's seed column from its record, for the provision pass; answers errRemoteMethod on a remote handle file:Exec@120,registry:remote@61,registry:sql@120,whole:remoteClient@63 65020817ba9577503121dd23b01c0342450a289b2fcac6c4430f5b9978965a21 @legacy 4352d6a71e64d6e79e560830e3be3df5430ae22cb15cf0bc17e92db1fc2c1add internal/registry/registry.go Registry.SnapshotFingerprint legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with seed_source and import_gate hashed only when set and the import journal folded in (hashImportJournal) file:Exec@300,file:Open@204,file:Query@2681,file:Query@3100,file:Query@3579,file:Query@385,registry:Text@174,registry:path@223,registry:remote@63,registry:remote@95,whole:remoteClient@65,whole:remoteClient@97 3a68e72fa101c332114e4a8063d1084dbb22e1bd0b8e2e13f488e543342056a6 internal/registry/registry.go Registry.SnapshotFingerprint legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle: main's body with seed_source and import_gate hashed only when set and the import journal folded in (hashImportJournal) file:Exec@300,file:Open@204,file:Query@2681,file:Query@3100,file:Query@3579,file:Query@385,registry:Text@174,registry:path@223,registry:remote@63,registry:remote@95,whole:remoteClient@65,whole:remoteClient@97 3a68e72fa101c332114e4a8063d1084dbb22e1bd0b8e2e13f488e543342056a6 internal/registry/registry.go Registry.Upsert authority E3 rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user); the remote arm, unchanged, in the process that holds a remote handle, root passes included: main's body with its insert defaults moved to normalizeRoute and its bind list to routeArgs, and two columns added (seed_source, import_gate); the conflict clause, with the tenant-change rule E3 names, is unchanged; main's E3 authority retained file:Exec@175,registry:remote@47,registry:remote@77,registry:sql@175,whole:Route@128,whole:Route@136,whole:Route@2927,whole:remoteClient@49,whole:remoteClient@79 df5cb046e2243462e8a146826db4c62fcbf04c080ff07935f209b64f58a77b4e @legacy a24038e0dd1c9d2bd4b91a542cdeb0499874f97e28a9a7599edd5d6a481d100b internal/registry/registry.go Registry.migrate legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open; a box CLI verb that opens the registry directly runs it as whoever runs the verb: main's body with two columns added to routes (seed_source, import_gate) and the import journal's and fence counter's migrations called file:Exec@3474,file:Exec@3798,file:Exec@4529,file:Exec@51,file:Exec@5389,file:Exec@5668,file:Exec@6531,file:Exec@6707,registry:sql@3474,registry:sql@3798,registry:sql@4529,registry:sql@51,registry:sql@5389,registry:sql@5668,registry:sql@6531,registry:sql@6707 b3f8ac27ac435689acd6cf502fc0e8deb074b5bc3eadbf3791cfc17331f082cf internal/registry/registry.go Registry.migrate legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), on every registry open; a box CLI verb that opens the registry directly runs it as whoever runs the verb: main's body with two columns added to routes (seed_source, import_gate) and the import journal's and fence counter's migrations called file:Exec@3474,file:Exec@3798,file:Exec@4529,file:Exec@51,file:Exec@5389,file:Exec@5668,file:Exec@6531,file:Exec@6707,registry:sql@3474,registry:sql@3798,registry:sql@4529,registry:sql@51,registry:sql@5389,registry:sql@5668,registry:sql@6531,registry:sql@6707 b3f8ac27ac435689acd6cf502fc0e8deb074b5bc3eadbf3791cfc17331f082cf internal/registry/registry.go normalizeRoute authority E3 rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), wherever Upsert's SQLite arm and the import swap run: the insert defaults from Registry.Upsert's body; E3, the same family as Registry.Upsert, whose body they came from registry:CreatedAt@41,registry:CreatedAt@62,registry:Hibernate@691,registry:Kind@146,registry:Kind@163,registry:Replica@1038,registry:Replicas@1052,registry:Replication@707,registry:Status@101,registry:Status@120,whole:Route@1079 d2d955e8b393fdf5b5ef44896c8ce532bf9deaf0c1fba71990d0fe83a20e1135 internal/registry/registry.go routeArgs authority E3 rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user), wherever a route is inserted: Upsert, the cold handover restore and the import journal's inserts: the bind list from Registry.Upsert's body (and RestoreClaimRows'), with seed_source and import_gate added; E3, the same family as Registry.Upsert, whose body it came from registry:Account@355,registry:Addr@83,registry:Addrs@451,registry:App@152,registry:Args@505,registry:Backing@253,registry:BuildState@730,registry:Canary@216,registry:Caps@381,registry:CertExpiresAt@338,registry:Channel@177,registry:ClaimIncarnation@577,registry:ClaimOwner@611,registry:ClaimRowID@625,registry:ClaimStamp@597,registry:CreatedAt@492,registry:DBPath@116,registry:DNSCheckedAt@320,registry:DNSStatus@307,registry:Environment@366,registry:FleetBox@439,registry:Gate@484,registry:GoodDemand@680,registry:GoodDigest@666,registry:GoodVersion@651,registry:Health@460,registry:Hibernate@196,registry:HoldOp@639,registry:Host@49,registry:IdleSeconds@513,registry:ImportGate@760,registry:Kind@65,registry:LastError@101,registry:MaxRunSeconds@528,registry:NextDue@242,registry:Platform@294,registry:Pool@159,registry:PrevVersion@137,registry:Provisioned@407,registry:Region@167,registry:Replica@565,registry:Replicas@547,registry:Replication@227,registry:Seed@423,registry:SeedSource@746,registry:ServingVersion@694,registry:Slug@57,registry:Socket@73,registry:Status@91,registry:StatusNamed@272,registry:Steering@472,registry:Tunnel@389,registry:Unit@431,registry:UpdateSettings@712,registry:Version@126 04acfa081699432cded2a04a2c1d0cce5ffa33f86268698a7ab6718bc124497f @legacy deee82db6432e8e0d9250187f24aaea30865b71e7983ef353cd0b0e1e3d4e0cf internal/registry/registry.go scanRoute legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user): main's body with the two new columns scanned registry:Account@393,registry:Addr@161,registry:Addrs@483,registry:App@236,registry:Args@542,registry:Backing@318,registry:BuildState@767,registry:Canary@838,registry:Caps@423,registry:CertExpiresAt@375,registry:Channel@266,registry:ClaimIncarnation@604,registry:ClaimOwner@640,registry:ClaimRowID@655,registry:ClaimStamp@625,registry:CreatedAt@526,registry:DBPath@197,registry:DNSCheckedAt@358,registry:DNSStatus@344,registry:Environment@407,registry:FleetBox@468,registry:Gate@517,registry:GoodDemand@714,registry:GoodDigest@699,registry:GoodVersion@683,registry:Health@493,registry:Hibernate@814,registry:HoldOp@670,registry:Host@123,registry:IdleSeconds@551,registry:ImportGate@799,registry:Kind@141,registry:LastError@183,registry:MaxRunSeconds@567,registry:NextDue@306,registry:Platform@884,registry:Pool@244,registry:PrevVersion@220,registry:Provisioned@908,registry:Region@255,registry:Replica@935,registry:Replicas@585,registry:Replication@290,registry:Seed@450,registry:SeedSource@784,registry:ServingVersion@729,registry:Slug@132,registry:Socket@150,registry:Status@170,registry:StatusNamed@859,registry:Steering@504,registry:Tunnel@432,registry:Unit@459,registry:UpdateSettings@748,registry:Version@208,whole:Route@964 6cd466677cbe8e4c6373cadfcaa62052348cb479aa5aa2ec7567637a81b24c77 internal/registry/registry.go scanRoute legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry's SQLite side, as carlos: in the agent (/opt/carlos/carlos agent, carlos-edge.service) and in the registry child (carlos __registry-child, which a root pass forks as the service user): main's body with the two new columns scanned registry:Account@393,registry:Addr@161,registry:Addrs@483,registry:App@236,registry:Args@542,registry:Backing@318,registry:BuildState@767,registry:Canary@838,registry:Caps@423,registry:CertExpiresAt@375,registry:Channel@266,registry:ClaimIncarnation@604,registry:ClaimOwner@640,registry:ClaimRowID@655,registry:ClaimStamp@625,registry:CreatedAt@526,registry:DBPath@197,registry:DNSCheckedAt@358,registry:DNSStatus@344,registry:Environment@407,registry:FleetBox@468,registry:Gate@517,registry:GoodDemand@714,registry:GoodDigest@699,registry:GoodVersion@683,registry:Health@493,registry:Hibernate@814,registry:HoldOp@670,registry:Host@123,registry:IdleSeconds@551,registry:ImportGate@799,registry:Kind@141,registry:LastError@183,registry:MaxRunSeconds@567,registry:NextDue@306,registry:Platform@884,registry:Pool@244,registry:PrevVersion@220,registry:Provisioned@908,registry:Region@255,registry:Replica@935,registry:Replicas@585,registry:Replication@290,registry:Seed@450,registry:SeedSource@784,registry:ServingVersion@729,registry:Slug@132,registry:Socket@150,registry:Status@170,registry:StatusNamed@859,registry:Steering@504,registry:Tunnel@432,registry:Unit@459,registry:UpdateSettings@748,registry:Version@208,whole:Route@964 6cd466677cbe8e4c6373cadfcaa62052348cb479aa5aa2ec7567637a81b24c77 @legacy a1a7d92bc8cf6ee64eafa9a52907d925b2432de1ffef1da6cc9b312cdc3db1a7 internal/registry/remote_dispatch.go Registry.dispatchRemote legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry child (carlos __registry-child, which a root pass forks as the service user carlos): main's body with one more method served, ImportJournalHosts; every other journal method stays unserved registry:A@6080,registry:Account@3543,registry:Accounts@2556,registry:Addr@4120,registry:Addrs@4128,registry:Alias@6128,registry:Alias@6192,registry:Alias@6280,registry:Aliases@6002,registry:Alive@7822,registry:Args@5704,registry:At@5145,registry:At@6211,registry:At@6289,registry:At@7570,registry:Attempts@7592,registry:B@1941,registry:Backing@3939,registry:BuildState@4346,registry:Changed@1749,registry:Changed@2912,registry:Changed@2999,registry:Changed@3088,registry:Changed@3159,registry:Changed@3241,registry:Changed@7502,registry:Channel@3603,registry:Channel@4586,registry:Channel@4990,registry:CheckedAt@5071,registry:Class@4058,registry:DoneBefore@7831,registry:Due@5474,registry:Due@5538,registry:Due@7614,registry:Env@4654,registry:Env@4901,registry:Env@5001,registry:ExcludeHosts@7297,registry:ExcludeHosts@7392,registry:ExpectGood@5270,registry:ExpectOp@2967,registry:Expected@1003,registry:Expected@229,registry:Expected@692,registry:F@1721,registry:F@1782,registry:Fleet@1807,registry:Fleet@1999,registry:Fleet@2081,registry:Fleet@2162,registry:Fleet@2255,registry:FleetBoxes@2216,registry:Fleets@1865,registry:From@3714,registry:From@3775,registry:FromDB@3850,registry:FromOp@3055,registry:FromSock@3860,registry:Hash@4526,registry:Health@4137,registry:Host@212,registry:Host@2740,registry:Host@2781,registry:Host@2867,registry:Host@2943,registry:Host@3029,registry:Host@3121,registry:Host@3193,registry:Host@3285,registry:Host@3535,registry:Host@3595,registry:Host@3653,registry:Host@3706,registry:Host@3767,registry:Host@3842,registry:Host@3931,registry:Host@3985,registry:Host@4050,registry:Host@4112,registry:Host@4190,registry:Host@4265,registry:Host@4338,registry:Host@4403,registry:Host@4464,registry:Host@4518,registry:Host@4646,registry:Host@4700,registry:Host@4761,registry:Host@4823,registry:Host@5053,registry:Host@5137,registry:Host@5194,registry:Host@5262,registry:Host@5351,registry:Host@5411,registry:Host@5466,registry:Host@5530,registry:Host@5645,registry:Host@5696,registry:Host@5763,registry:Host@5838,registry:Host@5901,registry:Host@6498,registry:Host@6645,registry:Host@6933,registry:Host@6997,registry:Host@7056,registry:Host@7139,registry:Host@7222,registry:Host@7453,registry:Host@7538,registry:Host@7670,registry:Host@7751,registry:Host@777,registry:Host@7914,registry:Host@888,registry:Hosts@2619,registry:Hosts@4577,registry:Hosts@4892,registry:Hosts@4981,registry:Id@1308,registry:Id@1407,registry:Id@1487,registry:Id@1638,registry:Id@997,registry:IdValue@2375,registry:Idle@5771,registry:Journal@1015,registry:Journal@1314,registry:Journal@1493,registry:Journal@382,registry:Keep@7930,registry:Kind@7759,registry:Kind@7922,registry:Label@2008,registry:Label@2090,registry:Label@2171,registry:Label@4769,registry:Limit@7288,registry:Limit@7383,registry:MaxRun@5779,registry:Method@151,registry:Ms@7586,registry:Name@1835,registry:Name@2394,registry:Name@7005,registry:Name@7064,registry:Name@7147,registry:Name@7461,registry:Name@7546,registry:Name@7678,registry:Name@785,registry:Name@896,registry:Next@241,registry:NextAt@7604,registry:NextGood@5284,registry:NextValue@1567,registry:NextValue@1665,registry:Now@5972,registry:Now@7281,registry:Now@7376,registry:Now@7469,registry:Now@920,registry:Number64@2482,registry:Number@7719,registry:Number@7790,registry:Number@7875,registry:Observed@305,registry:ObservedValue@583,registry:Old@1560,registry:Old@1658,registry:On@5419,registry:On@5846,registry:On@5909,registry:Op@2885,registry:Op@2961,registry:Op@3129,registry:Op@3201,registry:Op@3293,registry:Owner@220,registry:Owner@317,registry:Owner@600,registry:P@6599,registry:Path@6830,registry:Paths@6527,registry:Prefix@6653,registry:Prev@5209,registry:Registration@7155,registry:Registration@7554,registry:Registration@793,registry:Registration@904,registry:Replica@4472,registry:Replicas@4411,registry:Retirement@1644,registry:Route@2717,registry:Routes@2675,registry:Routes@3319,registry:Routes@5572,registry:Routes@5939,registry:Rows@6941,registry:Seed@5653,registry:Sqid@2386,registry:Sqid@2449,registry:Sqid@2528,registry:Status@2180,registry:Status@2875,registry:Status@2951,registry:Status@3037,registry:Status@3661,registry:Status@5061,registry:Status@6201,registry:Status@7576,registry:Status@7686,registry:Status@809,registry:Steering@4198,registry:StringMap@2292,registry:T@687,registry:T@6881,registry:TValue@2822,registry:Tags@2099,registry:Target@4831,registry:Targets@393,registry:Text@1213,registry:Text@1360,registry:Text@2496,registry:Text@6686,registry:Text@6749,registry:Timer@644,registry:Timer@6969,registry:Timers@7192,registry:Timers@7251,registry:Timers@7340,registry:Times@7964,registry:To@3722,registry:To@3783,registry:ToDB@3872,registry:ToOp@3047,registry:ToSock@3880,registry:TokenHash@2017,registry:Tunnel@4708,registry:Unit@3993,registry:UpdateSettings@4273,registry:Ver@5202,registry:Ver@5359,registry:W@6432,registry:Wildcards@6326,whole:Account@2560,whole:ClaimOwnership@222,whole:ClaimOwnership@319,whole:ClaimOwnership@602,whole:ClaimRow@395,whole:ClaimRowArchive@501,whole:ClaimRowArchive@511,whole:ColdRows@1562,whole:ColdRows@1569,whole:ColdRows@1660,whole:ColdRows@1667,whole:Fleet@1723,whole:Fleet@1784,whole:Fleet@1811,whole:Fleet@1869,whole:FleetBox@1943,whole:FleetBox@2220,whole:GoodBuild@5272,whole:GoodBuild@5286,whole:Route@2679,whole:Route@2721,whole:Route@2824,whole:Route@307,whole:Route@3323,whole:Route@3478,whole:Route@3484,whole:Route@5576,whole:Route@5943,whole:RouteAlias@6006,whole:RouteAlias@6082,whole:RoutePath@6531,whole:RoutePath@6601,whole:Timer@585,whole:Timer@648,whole:Timer@6883,whole:Timer@689,whole:Timer@6943,whole:Timer@6973,whole:Timer@7196,whole:Timer@7255,whole:Timer@7344,whole:WildcardDomain@6330,whole:WildcardDomain@6434 1b1cd373ce1d8e05aaf697bbe97b85582d3227fd094b4bf9e555acf3e43c79ab internal/registry/remote_dispatch.go Registry.dispatchRemote legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the registry child (carlos __registry-child, which a root pass forks as the service user carlos): main's body with one more method served, ImportJournalHosts; every other journal method stays unserved registry:A@6080,registry:Account@3543,registry:Accounts@2556,registry:Addr@4120,registry:Addrs@4128,registry:Alias@6128,registry:Alias@6192,registry:Alias@6280,registry:Aliases@6002,registry:Alive@7822,registry:Args@5704,registry:At@5145,registry:At@6211,registry:At@6289,registry:At@7570,registry:Attempts@7592,registry:B@1941,registry:Backing@3939,registry:BuildState@4346,registry:Changed@1749,registry:Changed@2912,registry:Changed@2999,registry:Changed@3088,registry:Changed@3159,registry:Changed@3241,registry:Changed@7502,registry:Channel@3603,registry:Channel@4586,registry:Channel@4990,registry:CheckedAt@5071,registry:Class@4058,registry:DoneBefore@7831,registry:Due@5474,registry:Due@5538,registry:Due@7614,registry:Env@4654,registry:Env@4901,registry:Env@5001,registry:ExcludeHosts@7297,registry:ExcludeHosts@7392,registry:ExpectGood@5270,registry:ExpectOp@2967,registry:Expected@1003,registry:Expected@229,registry:Expected@692,registry:F@1721,registry:F@1782,registry:Fleet@1807,registry:Fleet@1999,registry:Fleet@2081,registry:Fleet@2162,registry:Fleet@2255,registry:FleetBoxes@2216,registry:Fleets@1865,registry:From@3714,registry:From@3775,registry:FromDB@3850,registry:FromOp@3055,registry:FromSock@3860,registry:Hash@4526,registry:Health@4137,registry:Host@212,registry:Host@2740,registry:Host@2781,registry:Host@2867,registry:Host@2943,registry:Host@3029,registry:Host@3121,registry:Host@3193,registry:Host@3285,registry:Host@3535,registry:Host@3595,registry:Host@3653,registry:Host@3706,registry:Host@3767,registry:Host@3842,registry:Host@3931,registry:Host@3985,registry:Host@4050,registry:Host@4112,registry:Host@4190,registry:Host@4265,registry:Host@4338,registry:Host@4403,registry:Host@4464,registry:Host@4518,registry:Host@4646,registry:Host@4700,registry:Host@4761,registry:Host@4823,registry:Host@5053,registry:Host@5137,registry:Host@5194,registry:Host@5262,registry:Host@5351,registry:Host@5411,registry:Host@5466,registry:Host@5530,registry:Host@5645,registry:Host@5696,registry:Host@5763,registry:Host@5838,registry:Host@5901,registry:Host@6498,registry:Host@6645,registry:Host@6933,registry:Host@6997,registry:Host@7056,registry:Host@7139,registry:Host@7222,registry:Host@7453,registry:Host@7538,registry:Host@7670,registry:Host@7751,registry:Host@777,registry:Host@7914,registry:Host@888,registry:Hosts@2619,registry:Hosts@4577,registry:Hosts@4892,registry:Hosts@4981,registry:Id@1308,registry:Id@1407,registry:Id@1487,registry:Id@1638,registry:Id@997,registry:IdValue@2375,registry:Idle@5771,registry:Journal@1015,registry:Journal@1314,registry:Journal@1493,registry:Journal@382,registry:Keep@7930,registry:Kind@7759,registry:Kind@7922,registry:Label@2008,registry:Label@2090,registry:Label@2171,registry:Label@4769,registry:Limit@7288,registry:Limit@7383,registry:MaxRun@5779,registry:Method@151,registry:Ms@7586,registry:Name@1835,registry:Name@2394,registry:Name@7005,registry:Name@7064,registry:Name@7147,registry:Name@7461,registry:Name@7546,registry:Name@7678,registry:Name@785,registry:Name@896,registry:Next@241,registry:NextAt@7604,registry:NextGood@5284,registry:NextValue@1567,registry:NextValue@1665,registry:Now@5972,registry:Now@7281,registry:Now@7376,registry:Now@7469,registry:Now@920,registry:Number64@2482,registry:Number@7719,registry:Number@7790,registry:Number@7875,registry:Observed@305,registry:ObservedValue@583,registry:Old@1560,registry:Old@1658,registry:On@5419,registry:On@5846,registry:On@5909,registry:Op@2885,registry:Op@2961,registry:Op@3129,registry:Op@3201,registry:Op@3293,registry:Owner@220,registry:Owner@317,registry:Owner@600,registry:P@6599,registry:Path@6830,registry:Paths@6527,registry:Prefix@6653,registry:Prev@5209,registry:Registration@7155,registry:Registration@7554,registry:Registration@793,registry:Registration@904,registry:Replica@4472,registry:Replicas@4411,registry:Retirement@1644,registry:Route@2717,registry:Routes@2675,registry:Routes@3319,registry:Routes@5572,registry:Routes@5939,registry:Rows@6941,registry:Seed@5653,registry:Sqid@2386,registry:Sqid@2449,registry:Sqid@2528,registry:Status@2180,registry:Status@2875,registry:Status@2951,registry:Status@3037,registry:Status@3661,registry:Status@5061,registry:Status@6201,registry:Status@7576,registry:Status@7686,registry:Status@809,registry:Steering@4198,registry:StringMap@2292,registry:T@687,registry:T@6881,registry:TValue@2822,registry:Tags@2099,registry:Target@4831,registry:Targets@393,registry:Text@1213,registry:Text@1360,registry:Text@2496,registry:Text@6686,registry:Text@6749,registry:Timer@644,registry:Timer@6969,registry:Timers@7192,registry:Timers@7251,registry:Timers@7340,registry:Times@7964,registry:To@3722,registry:To@3783,registry:ToDB@3872,registry:ToOp@3047,registry:ToSock@3880,registry:TokenHash@2017,registry:Tunnel@4708,registry:Unit@3993,registry:UpdateSettings@4273,registry:Ver@5202,registry:Ver@5359,registry:W@6432,registry:Wildcards@6326,whole:Account@2560,whole:ClaimOwnership@222,whole:ClaimOwnership@319,whole:ClaimOwnership@602,whole:ClaimRow@395,whole:ClaimRowArchive@501,whole:ClaimRowArchive@511,whole:ColdRows@1562,whole:ColdRows@1569,whole:ColdRows@1660,whole:ColdRows@1667,whole:Fleet@1723,whole:Fleet@1784,whole:Fleet@1811,whole:Fleet@1869,whole:FleetBox@1943,whole:FleetBox@2220,whole:GoodBuild@5272,whole:GoodBuild@5286,whole:Route@2679,whole:Route@2721,whole:Route@2824,whole:Route@307,whole:Route@3323,whole:Route@3478,whole:Route@3484,whole:Route@5576,whole:Route@5943,whole:RouteAlias@6006,whole:RouteAlias@6082,whole:RoutePath@6531,whole:RoutePath@6601,whole:Timer@585,whole:Timer@648,whole:Timer@6883,whole:Timer@689,whole:Timer@6943,whole:Timer@6973,whole:Timer@7196,whole:Timer@7255,whole:Timer@7344,whole:WildcardDomain@6330,whole:WildcardDomain@6434 1b1cd373ce1d8e05aaf697bbe97b85582d3227fd094b4bf9e555acf3e43c79ab @legacy 7c49aebc9add9738080a58f5b6830aec6aa86109a7b1ff8413df7e874aced541 internal/registry/routecas.go Registry.DeleteIfUnchanged legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: deletes a route only while the stored row still has the identity the caller listed it with; answers errRemoteMethod on a remote handle file:Exec@137,registry:Account@335,registry:App@351,registry:CreatedAt@430,registry:Host@309,registry:ImportGate@392,registry:Kind@322,registry:Provisioned@369,registry:SeedSource@411,registry:remote@71,registry:sql@137,whole:remoteClient@73 2e08c168b9d5b3bf22fbadb1ff60e8acfcedaba353fc0a67e858045c0441de4c internal/registry/routecas.go Registry.DeleteIfUnchanged legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its domains loop: deletes a route only while the stored row still has the identity the caller listed it with; answers errRemoteMethod on a remote handle file:Exec@137,registry:Account@335,registry:App@351,registry:CreatedAt@430,registry:Host@309,registry:ImportGate@392,registry:Kind@322,registry:Provisioned@369,registry:SeedSource@411,registry:remote@71,registry:sql@137,whole:remoteClient@73 2e08c168b9d5b3bf22fbadb1ff60e8acfcedaba353fc0a67e858045c0441de4c @legacy 3563f8d7d98783e05a102b6b83be5d260ffa42ccc6226c1e31139a3fae65613f internal/schedule/runner.go Runner.Tick legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its scheduler: main's body with an uncommitted import's row given no tick, at the pre-filter and again at the decision; no root decision registry:Host@1184,registry:Host@1226,registry:Host@1247,registry:Host@1271,registry:Host@5182,registry:ImportGate@2694,registry:ImportGate@3609,registry:Status@2487,registry:Status@3595,whole:Route@1653,whole:Route@1943,whole:Route@3375,whole:Route@3566,whole:Route@4699,whole:Route@5048,whole:Route@5223,whole:Route@5259,whole:Timer@1051,whole:Timer@1155,whole:Timer@1177,whole:Timer@1240,whole:Timer@1264,whole:Timer@1280,whole:Timer@4374,whole:Timer@4703,whole:Timer@5263,whole:Timer@820,whole:Timer@902 8dc7c12d55bce58cb399d7c6a15d62a145f3239cb3bb98833c78f58aa64826fc internal/schedule/runner.go Runner.Tick legacy accepted-legacy accepted-legacy;rev3=census-ruling-seeded-instances;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos), from its scheduler: main's body with an uncommitted import's row given no tick, at the pre-filter and again at the decision; no root decision registry:Host@1184,registry:Host@1226,registry:Host@1247,registry:Host@1271,registry:Host@5182,registry:ImportGate@2694,registry:ImportGate@3609,registry:Status@2487,registry:Status@3595,whole:Route@1653,whole:Route@1943,whole:Route@3375,whole:Route@3566,whole:Route@4699,whole:Route@5048,whole:Route@5223,whole:Route@5259,whole:Timer@1051,whole:Timer@1155,whole:Timer@1177,whole:Timer@1240,whole:Timer@1264,whole:Timer@1280,whole:Timer@4374,whole:Timer@4703,whole:Timer@5263,whole:Timer@820,whole:Timer@902 8dc7c12d55bce58cb399d7c6a15d62a145f3239cb3bb98833c78f58aa64826fc @fields A,Account,Accounts,AddedAt,Addr,Addrs,Alias,Aliases,Alive,App,Archives,Args,At,Attempts,B,Backing,Bucket,BuildState,Callback,CallbackError,CallbackFailed,Canary,Caps,CertExpiresAt,Changed,Channel,CheckedAt,ClaimIncarnation,ClaimOwner,ClaimOwnership,ClaimRowID,ClaimStamp,Class,Contents,CreatedAt,DBPath,DNSCheckedAt,DNSStatus,Deadline,Demand,Digest,DoneBefore,Due,DueAt,Env,EnvBefore,Environment,Error,ErrorKind,ExcludeHosts,ExpectGood,ExpectOp,Expected,F,Failed,FenceGen,Fleet,FleetBox,FleetBoxes,Fleets,From,FromDB,FromOp,FromSock,Gate,GoodDemand,GoodDigest,GoodVersion,Hash,Health,Held,Hibernate,HoldOp,Host,Hosts,ID,Id,IdValue,Idle,IdleSeconds,ImportGate,Journal,Keep,Kind,Label,LastAt,LastError,LastMs,LastStatus,Limit,MaxRun,MaxRunSeconds,Method,Ms,Name,Next,NextAt,NextDue,NextGood,NextValue,Now,Number,Number64,Observed,ObservedValue,Old,On,Op,Original,Owner,Ownership,P,Path,Paths,Platform,Pool,Prefix,Prev,PrevVersion,Provisioned,RecordKey,Region,Registration,Replica,Replicas,Replication,Retirement,Route,Routes,Row,Rows,Seed,SeedID,SeedSource,ServingVersion,Slug,Socket,Spec,Sqid,State,Status,StatusNamed,Steering,StringMap,T,TValue,Tags,Target,Targets,Text,Timer,Timers,Times,To,ToDB,ToOp,ToSock,TokenHash,Tunnel,Unit,UpdateSettings,Ver,Version,W,WakeIncarnation,Wildcards,closed,conn,connect,ctx,d,dec,done,enc,full,input,mu,output,path,remote,sql,wait @coverage . 1e94e1644297311bfaeec977a479d454eb39c6ab51e7cdd57f2dbc452cd92033 @coverage cmd/console 0554957d7bc31eb4553b6a98c7481738d11bfd4fb809277bf7e0cc723422ad2e @coverage internal/activator d78d3443831bd65eddf6f498ba046db27b836208f3237426322ed71188183636 @coverage internal/console 2e39e3ffb055cf7c230c7d231e7d8adcf0f8543222eac015f610e920f91c217b @coverage internal/dbdoor 0109cd1cd4f0ca14d57bc6562166424273f770d8261e60b738c61f9a6d080dd9 @coverage internal/domains 3c7159e24bbb66faec61bc32d56019501fb19c072f10eacca9fd920c3cb7c0d6 @coverage internal/edge 5af78864d912f3b747c6150e083813cd1ea26cde09c3b35e58b9553b89e52c4e @coverage internal/edgesfile c862243226bf37d4ce1a064310189b83e7e493ed4104612a9e1c59817587f18c @coverage internal/host 1cad350344c698e6c402eb7c819b96a5e362557eefd04fd342f815a8ef07cb2a @coverage internal/host/units d5cb4f1dbfb14212e7d032e47b2c078f2e34cb5edfad2d41afa5e00618a4e8e8 @coverage internal/hostbox c280e0c7a8c572aa3ebfd6dd9c26930f0066a1dd0d044197621fe2e7bc5be98f @coverage internal/hostops c8359a1002567bf29bd1950674fb51fc398c74f4d55df52d04aab152c3be23fb @coverage internal/lease 01ef8dae034663ae44eed54ef86c4475a7aeaf03509fa001d3370f1e95c4721e @coverage internal/objstore 1090e9de29388fe1a90553d2bd529bba355ba9997aa3f139011e638de18db414 @coverage internal/provision 23d7dcec8048b5d76a4bfac0191994c10b873a8d554341f5638a54767118b1fe @coverage internal/registry 00bbadaf906eac94af2c466161d57ef9da8ff09241de8bdf5b7ea62c4849cba3 @coverage internal/release 55c36a3e2a1b32a8736c3f0404a8e6442d747cd5ecbde68a0e8b3364e6fe3324 @coverage internal/schedule 295d28a90ab322dd05781d30bde48bffcf8e8eb49884460c02a1b559bf72259b @coverage internal/seeds 433f3cc6c1b885bf7b95c4530fc1af78e5d3b64b578a7dee919797afbdc09967 # Census ruling 292fix (Plan 14 controller, 2026-10-15): an extension of census ruling 292 (#292, fix-shutdown-lease-292) for the seeded pre-land review's P2 (Astra: a failed import wake's stop kept uncertain after it is known, which blocked the import rollback). The fix changes three units main rows under census ruling 292 and census ruling owed; each stays accepted legacy, as on main. Service.doWake's row moved here from the seeded rows above, since its body now carries both changes. The not-started record is conditional on the wake having started nothing (wakeStartedNothing: no process, replica or sidecar of its own). A refusal before the wake's lease (step 1) is known-no-start evidence too, and like a pre-exec refusal it leaves any stop history the host already has, its obligations and their owner, exactly as it was (Astra's re-review, P2). @legacy f916bf7129687212adcc3a169e2db3b8bea19ed882d689654aea6df34de45a91 internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-292fix;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body (census ruling 292's legacy start mark and lease give-back; census ruling owed's pending record) with the seeded change ruled under census-ruling-seeded-instances (the refreshed row checked against the row the wake began from, twice; the seed's first upload recorded after the wake), and now one more line on a failed start: a start its pre-exec gate refused (launchNotStarted: the exec gate, the pending record or its recheck answered no before root was asked) is recorded as known not started (stopObservation.notStarted) instead of uncertain, only when the wake has started nothing else (wakeStartedNothing); otherwise it goes through cleanupFailedWake and its proofs. A refusal before its lease (step 1), which has started nothing, is recorded the same way. Read sites unchanged; no new read and no root decision registry:DBPath@1276,registry:DBPath@1292,registry:DBPath@1419,registry:DBPath@1430,registry:DBPath@21825,registry:Host@1105,registry:Host@1180,registry:Host@1258,registry:Host@1410,registry:Host@174,registry:Host@1744,registry:Host@2604,registry:Host@4579,registry:Replication@21860,registry:Seed@11964,registry:Socket@1305,registry:Socket@1321,registry:Socket@1444,registry:Socket@1455,whole:Route@10125,whole:Route@10815,whole:Route@1203,whole:Route@12065,whole:Route@12136,whole:Route@14520,whole:Route@159,whole:Route@16378,whole:Route@1639,whole:Route@1644,whole:Route@1698,whole:Route@17024,whole:Route@1704,whole:Route@1770,whole:Route@1778,whole:Route@18331,whole:Route@18485,whole:Route@18841,whole:Route@18935,whole:Route@19619,whole:Route@20274,whole:Route@21273,whole:Route@21421,whole:Route@21934,whole:Route@22293,whole:Route@23229,whole:Route@23324,whole:Route@2494,whole:Route@3948,whole:Route@4207,whole:Route@4469,whole:Route@4474,whole:Route@4531,whole:Route@4537,whole:Route@4606,whole:Route@4614,whole:Route@5402,whole:Route@6437,whole:Route@7470,whole:Route@8351,whole:Route@9933 ebb22bf8c55e14ea92c0127ff116fca0f0e5df23938b82c6a77cac491451e156 internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-292fix;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): main's body (census ruling 292's legacy start mark and lease give-back; census ruling owed's pending record) with the seeded change ruled under census-ruling-seeded-instances (the refreshed row checked against the row the wake began from, twice; the seed's first upload recorded after the wake), and now one more line on a failed start: a start its pre-exec gate refused (launchNotStarted: the exec gate, the pending record or its recheck answered no before root was asked) is recorded as known not started (stopObservation.notStarted) instead of uncertain, only when the wake has started nothing else (wakeStartedNothing); otherwise it goes through cleanupFailedWake and its proofs. A refusal before its lease (step 1), which has started nothing, is recorded the same way. Read sites unchanged; no new read and no root decision registry:DBPath@1276,registry:DBPath@1292,registry:DBPath@1419,registry:DBPath@1430,registry:DBPath@21825,registry:Host@1105,registry:Host@1180,registry:Host@1258,registry:Host@1410,registry:Host@174,registry:Host@1744,registry:Host@2604,registry:Host@4579,registry:Replication@21860,registry:Seed@11964,registry:Socket@1305,registry:Socket@1321,registry:Socket@1444,registry:Socket@1455,whole:Route@10125,whole:Route@10815,whole:Route@1203,whole:Route@12065,whole:Route@12136,whole:Route@14520,whole:Route@159,whole:Route@16378,whole:Route@1639,whole:Route@1644,whole:Route@1698,whole:Route@17024,whole:Route@1704,whole:Route@1770,whole:Route@1778,whole:Route@18331,whole:Route@18485,whole:Route@18841,whole:Route@18935,whole:Route@19619,whole:Route@20274,whole:Route@21273,whole:Route@21421,whole:Route@21934,whole:Route@22293,whole:Route@23229,whole:Route@23324,whole:Route@2494,whole:Route@3948,whole:Route@4207,whole:Route@4469,whole:Route@4474,whole:Route@4531,whole:Route@4537,whole:Route@4606,whole:Route@4614,whole:Route@5402,whole:Route@6437,whole:Route@7470,whole:Route@8351,whole:Route@9933 ebb22bf8c55e14ea92c0127ff116fca0f0e5df23938b82c6a77cac491451e156 @legacy 805b8d79fa8b7a4350536968730c899bbbcdb6788a0ce4ef76bcef2f13a163bb internal/activator/maintenance.go Service.cleanupFailedWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-292fix;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): census ruling 292's body; when #292's whole proof holds for an aborted legacy start (legacyRunGone: the unit stopped and its cgroup empty) this wake's uncertainty is discharged and the stages it never reached (no sidecar, no replica) are recorded as held; when the proof fails the start is retained exactly as before, now named as the owner of this wake's uncertainty (owedBy). Read sites unchanged; the proof still only decides release-or-keep; no new read and no root decision registry:Host@1824,registry:Host@2337,registry:Host@3288,registry:Host@3628,registry:Host@4240,whole:Route@1691,whole:Route@1930,whole:Route@1934,whole:Route@2970,whole:Route@3653,whole:Route@3657 f59321652db8dc67a25ffabf3589b727b12b25d1136b2b18c48f97d6929d93b0 internal/activator/maintenance.go Service.cleanupFailedWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-292fix;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): census ruling 292's body; when #292's whole proof holds for an aborted legacy start (legacyRunGone: the unit stopped and its cgroup empty) this wake's uncertainty is discharged and the stages it never reached (no sidecar, no replica) are recorded as held; when the proof fails the start is retained exactly as before, now named as the owner of this wake's uncertainty (owedBy). Read sites unchanged; the proof still only decides release-or-keep; no new read and no root decision registry:Host@1824,registry:Host@2337,registry:Host@3288,registry:Host@3628,registry:Host@4240,whole:Route@1691,whole:Route@1930,whole:Route@1934,whole:Route@2970,whole:Route@3653,whole:Route@3657 f59321652db8dc67a25ffabf3589b727b12b25d1136b2b18c48f97d6929d93b0 @legacy baa6de3e5faac90eac3fa5055386fddfc15e433cfb00f94089bdb69e0d27f263 internal/activator/opset.go Service.reapUnprovenWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-292fix;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): census ruling 292's body; when the retried proof holds for a retained legacy start and the host's stop history is uncertain only because of that start (owedBy), the uncertainty is discharged and the stages the failed wake never reached are recorded as held; any other uncertainty is kept through rememberStopLocked as before. Read sites unchanged; no new read and no root decision whole:Route@439,whole:Route@493 7484890de454d363b9e191d28b1c70f8ea6339492169931c2f47e0dfb02db852 internal/activator/opset.go Service.reapUnprovenWake legacy accepted-legacy accepted-legacy;rev3=census-ruling-292fix;basis=the agent (/opt/carlos/carlos agent, carlos-edge.service, user carlos): census ruling 292's body; when the retried proof holds for a retained legacy start and the host's stop history is uncertain only because of that start (owedBy), the uncertainty is discharged and the stages the failed wake never reached are recorded as held; any other uncertainty is kept through rememberStopLocked as before. Read sites unchanged; no new read and no root decision whole:Route@439,whole:Route@493 7484890de454d363b9e191d28b1c70f8ea6339492169931c2f47e0dfb02db852