carve-v6 vr1-dc0 --commit -- AS-EXECUTED, 2026-07-28T06:26:20Z Operator-gated single mutation. Run from voffice1 (D-128 Plane-2 host). NOTE: no run-logged.sh window was opened (P0-4 class); this capture + the changelog are the as-executed record. PRE: 18 subnets, 1 v6 (Office1's 2602:f3e2:f01:100::/64 only) dc-plane-ipam check vr1-dc0 = 6 pass / 18 fail pre-apply re-verify in the SAME session: planned=6 skipped=1 errors=0 (unchanged) == dc-plane-ipam check vr1-dc0 == apex record: netbox/draft/vr1-office1-current-20260725.json -- v4 planes (from lib-net) -- [ok] v4 provider-public 10.12.4.0/22 present (fabric=vr1-dc0-provider-public) [ok] v4 metal-admin 10.12.8.0/22 present (fabric=fabric-4) [ok] v4 metal-internal 10.12.12.0/22 present (fabric=vr1-dc0-metal-internal) [ok] v4 data-tenant 10.12.16.0/22 present (fabric=vr1-dc0-data-tenant) [ok] v4 storage 10.12.32.0/22 present (fabric=vr1-dc0-storage) [ok] v4 replication 10.12.36.0/22 present (fabric=vr1-dc0-replication) -- v6 planes (from the apex) -- [ok] v6 data-tenant fd50:840e:74e2:230::/64 present [ok] v6 metal-admin fd50:840e:74e2:220::/64 present [ok] v6 metal-internal fd50:840e:74e2:221::/64 present [ok] v6 provider-public 2602:f3e2:f02:10::/64 present [note] provider-public 2602:f3e2:f02:11::/64 provider VIP block, MAAS subnet=no (not asserted) [ok] v6 replication fd50:840e:74e2:250::/64 present [ok] v6 storage fd50:840e:74e2:240::/64 present -- D-134 reserved bands (v4) -- [FAIL] provider-public util band 10.12.4.4-10.12.4.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] provider-public vip band 10.12.4.50-10.12.4.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] metal-admin util band 10.12.8.4-10.12.8.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] metal-admin vip band 10.12.8.50-10.12.8.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] metal-internal util band 10.12.12.4-10.12.12.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] metal-internal vip band 10.12.12.50-10.12.12.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] data-tenant util band 10.12.16.4-10.12.16.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] data-tenant vip band 10.12.16.50-10.12.16.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] storage util band 10.12.32.4-10.12.32.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] storage vip band 10.12.32.50-10.12.32.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] replication util band 10.12.36.4-10.12.36.49 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) [FAIL] replication vip band 10.12.36.50-10.12.36.99 NOT reserved (D-134 is RULED; MAAS may hand these out mid-deploy) RESULT: pass=12 fail=12 FAIL: dc-plane-ipam check vr1-dc0 -- 12 assertion(s) failed POST-STATE: subnets 18 -> 24 v6 1 -> 7 duplicate cidrs: NONE 2602:f3e2:f01:100::/64 id=3 vlan=5001 fabric=fabric-0 2602:f3e2:f02:10::/64 id=23 vlan=5189 fabric=vr1-dc0-provider-public fd50:840e:74e2:220::/64 id=21 vlan=5005 fabric=fabric-4 fd50:840e:74e2:221::/64 id=22 vlan=5190 fabric=vr1-dc0-metal-internal fd50:840e:74e2:230::/64 id=20 vlan=5191 fabric=vr1-dc0-data-tenant fd50:840e:74e2:240::/64 id=25 vlan=5192 fabric=vr1-dc0-storage fd50:840e:74e2:250::/64 id=24 vlan=5193 fabric=vr1-dc0-replication machines: 18 Ready + 2 Deployed (office1 guests) -- UNCHANGED, no node touched dc1: still 6 v6 planes ABSENT -- correctly untouched, dc0 only was authorised IDEMPOTENCY PROVEN LIVE: --commit ran TWICE (second time to read the true exit code rather than a pipeline's). Zero duplicate CIDRs afterwards.