carve-v6 vr1-dc0 --commit -- AS-EXECUTED, 2026-07-28T06:26:20Z
Operator-gated single mutation. Run from voffice1 (D-128 Plane-2 host).
NOTE: no run-logged.sh window was opened (P0-4 class); this capture + the
changelog are the as-executed record.

PRE:  18 subnets, 1 v6 (Office1's 2602:f3e2:f01:100::/64 only)
      dc-plane-ipam check vr1-dc0 = 6 pass / 18 fail
      pre-apply re-verify in the SAME session: planned=6 skipped=1 errors=0 (unchanged)

== dc-plane-ipam check vr1-dc0 ==
   apex record: netbox/draft/vr1-office1-current-20260725.json

-- v4 planes (from lib-net) --
  [ok]   v4 provider-public 10.12.4.0/22 present (fabric=vr1-dc0-provider-public)
  [ok]   v4 metal-admin 10.12.8.0/22 present (fabric=fabric-4)
  [ok]   v4 metal-internal 10.12.12.0/22 present (fabric=vr1-dc0-metal-internal)
  [ok]   v4 data-tenant 10.12.16.0/22 present (fabric=vr1-dc0-data-tenant)
  [ok]   v4 storage 10.12.32.0/22 present (fabric=vr1-dc0-storage)
  [ok]   v4 replication 10.12.36.0/22 present (fabric=vr1-dc0-replication)

-- v6 planes (from the apex) --
  [ok]   v6 data-tenant fd50:840e:74e2:230::/64 present
  [ok]   v6 metal-admin fd50:840e:74e2:220::/64 present
  [ok]   v6 metal-internal fd50:840e:74e2:221::/64 present
  [ok]   v6 provider-public 2602:f3e2:f02:10::/64 present
  [note] provider-public  2602:f3e2:f02:11::/64          provider VIP block, MAAS subnet=no (not asserted)
  [ok]   v6 replication fd50:840e:74e2:250::/64 present
  [ok]   v6 storage fd50:840e:74e2:240::/64 present

-- D-134 reserved bands (v4) --
  [FAIL] provider-public util band 10.12.4.4-10.12.4.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] provider-public vip band 10.12.4.50-10.12.4.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] metal-admin util band 10.12.8.4-10.12.8.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] metal-admin vip band 10.12.8.50-10.12.8.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] metal-internal util band 10.12.12.4-10.12.12.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] metal-internal vip band 10.12.12.50-10.12.12.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] data-tenant util band 10.12.16.4-10.12.16.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] data-tenant vip band 10.12.16.50-10.12.16.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] storage util band 10.12.32.4-10.12.32.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] storage vip band 10.12.32.50-10.12.32.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] replication util band 10.12.36.4-10.12.36.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
  [FAIL] replication vip band 10.12.36.50-10.12.36.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)

RESULT: pass=12 fail=12
FAIL: dc-plane-ipam check vr1-dc0 -- 12 assertion(s) failed

POST-STATE:
  subnets 18 -> 24   v6 1 -> 7   duplicate cidrs: NONE
    2602:f3e2:f01:100::/64     id=3    vlan=5001 fabric=fabric-0
    2602:f3e2:f02:10::/64      id=23   vlan=5189 fabric=vr1-dc0-provider-public
    fd50:840e:74e2:220::/64    id=21   vlan=5005 fabric=fabric-4
    fd50:840e:74e2:221::/64    id=22   vlan=5190 fabric=vr1-dc0-metal-internal
    fd50:840e:74e2:230::/64    id=20   vlan=5191 fabric=vr1-dc0-data-tenant
    fd50:840e:74e2:240::/64    id=25   vlan=5192 fabric=vr1-dc0-storage
    fd50:840e:74e2:250::/64    id=24   vlan=5193 fabric=vr1-dc0-replication

  machines: 18 Ready + 2 Deployed (office1 guests) -- UNCHANGED, no node touched
  dc1: still 6 v6 planes ABSENT -- correctly untouched, dc0 only was authorised

IDEMPOTENCY PROVEN LIVE: --commit ran TWICE (second time to read the true
exit code rather than a pipeline's). Zero duplicate CIDRs afterwards.
