{
  "schemaVersion": "nodedc.device-edge-vps.tailscale-retirement.v1",
  "mode": "retire-superseded-vps-tailnet-after-accepted-core-channel",
  "status": "core-channel-only",
  "authority": "DCPLATFORM-21/DCPLATFORM-76/ADR-0001",
  "component": "device-edge-vps",
  "phase": "tailscale-retirement",
  "runtimeHost": "koffyvngij",
  "predecessorPatch": "device-edge-vps-core-channel-20260812-010",
  "predecessorArtifactSha256": "c8ef3c4bb45850cad32e881eba081bc4c891c2886e5500d02cb94616d82353f3",
  "runtimeAction": "stop-disable-remove-userspace-tailscale-runtime-state-and-superseded-trust",
  "publicIngress": "tcp/443-mtls-only",
  "trackerIngress": "disabled",
  "rawDeviceTcp9921": "closed",
  "commandTransport": "disabled",
  "gelios": "untouched",
  "preserved": [
    "management-ssh-key",
    "accepted-node-runtime",
    "accepted-core-channel-source-runtime-and-trust",
    "core-channel-registration",
    "foundation-source-for-audit-and-rollback",
    "gelios-production-path"
  ],
  "retired": [
    "nodedc-b2-tailscaled.service",
    "userspace-socks5-127.0.0.1:1055",
    "tailscale-local-state",
    "tailscale-runtime-binaries",
    "superseded-backhaul-private-key"
  ],
  "forbidden": [
    "tailscale-runtime",
    "tailnet-address",
    "vps-initiated-synology-connection",
    "generic-tcp-forwarding",
    "tailscale-ssh-backhaul",
    "docker",
    "public-health",
    "tracker-tcp/9921"
  ],
  "acceptance": [
    "exact-core-channel-010-predecessor",
    "core-channel-remains-accepted",
    "tailscale-service-absent-inactive-and-disabled",
    "tailscale-userspace-listeners-absent",
    "tailscale-local-state-and-runtime-binaries-absent",
    "superseded-backhaul-private-key-absent",
    "public-443-only-beside-management-ssh",
    "tracker-tcp-9921-closed",
    "command-transport-disabled"
  ],
  "externalRevocation": "delete-exact-nodedc-b2-vps-machine-in-tailnet-after-deploy-ok",
  "rollback": "before-external-tailnet-revocation-restore-backed-up-local-tailscale-runtime-state-unit-and-core-channel-predecessor"
}