carve-v6 vr1-dc0 --commit -- AS-EXECUTED, 2026-07-28T06:26:20Z
Operator-gated single mutation. Run from voffice1 (D-128 Plane-2 host).
NOTE: no run-logged.sh window was opened (P0-4 class); this capture + the
changelog are the as-executed record.
PRE: 18 subnets, 1 v6 (Office1's 2602:f3e2:f01:100::/64 only)
dc-plane-ipam check vr1-dc0 = 6 pass / 18 fail
pre-apply re-verify in the SAME session: planned=6 skipped=1 errors=0 (unchanged)
== dc-plane-ipam check vr1-dc0 ==
apex record: netbox/draft/vr1-office1-current-20260725.json
-- v4 planes (from lib-net) --
[ok] v4 provider-public 10.12.4.0/22 present (fabric=vr1-dc0-provider-public)
[ok] v4 metal-admin 10.12.8.0/22 present (fabric=fabric-4)
[ok] v4 metal-internal 10.12.12.0/22 present (fabric=vr1-dc0-metal-internal)
[ok] v4 data-tenant 10.12.16.0/22 present (fabric=vr1-dc0-data-tenant)
[ok] v4 storage 10.12.32.0/22 present (fabric=vr1-dc0-storage)
[ok] v4 replication 10.12.36.0/22 present (fabric=vr1-dc0-replication)
-- v6 planes (from the apex) --
[ok] v6 data-tenant fd50:840e:74e2:230::/64 present
[ok] v6 metal-admin fd50:840e:74e2:220::/64 present
[ok] v6 metal-internal fd50:840e:74e2:221::/64 present
[ok] v6 provider-public 2602:f3e2:f02:10::/64 present
[note] provider-public 2602:f3e2:f02:11::/64 provider VIP block, MAAS subnet=no (not asserted)
[ok] v6 replication fd50:840e:74e2:250::/64 present
[ok] v6 storage fd50:840e:74e2:240::/64 present
-- D-134 reserved bands (v4) --
[FAIL] provider-public util band 10.12.4.4-10.12.4.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] provider-public vip band 10.12.4.50-10.12.4.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] metal-admin util band 10.12.8.4-10.12.8.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] metal-admin vip band 10.12.8.50-10.12.8.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] metal-internal util band 10.12.12.4-10.12.12.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] metal-internal vip band 10.12.12.50-10.12.12.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] data-tenant util band 10.12.16.4-10.12.16.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] data-tenant vip band 10.12.16.50-10.12.16.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] storage util band 10.12.32.4-10.12.32.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] storage vip band 10.12.32.50-10.12.32.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] replication util band 10.12.36.4-10.12.36.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
[FAIL] replication vip band 10.12.36.50-10.12.36.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy)
RESULT: pass=12 fail=12
FAIL: dc-plane-ipam check vr1-dc0 -- 12 assertion(s) failed
POST-STATE:
subnets 18 -> 24 v6 1 -> 7 duplicate cidrs: NONE
2602:f3e2:f01:100::/64 id=3 vlan=5001 fabric=fabric-0
2602:f3e2:f02:10::/64 id=23 vlan=5189 fabric=vr1-dc0-provider-public
fd50:840e:74e2:220::/64 id=21 vlan=5005 fabric=fabric-4
fd50:840e:74e2:221::/64 id=22 vlan=5190 fabric=vr1-dc0-metal-internal
fd50:840e:74e2:230::/64 id=20 vlan=5191 fabric=vr1-dc0-data-tenant
fd50:840e:74e2:240::/64 id=25 vlan=5192 fabric=vr1-dc0-storage
fd50:840e:74e2:250::/64 id=24 vlan=5193 fabric=vr1-dc0-replication
machines: 18 Ready + 2 Deployed (office1 guests) -- UNCHANGED, no node touched
dc1: still 6 v6 planes ABSENT -- correctly untouched, dc0 only was authorised
IDEMPOTENCY PROVEN LIVE: --commit ran TWICE (second time to read the true
exit code rather than a pipeline's). Zero duplicate CIDRs afterwards.
