client-1pass decided 25 Oct 2026 14:17 UTCsample mode

Work queue Settings

record in zone host-525a57.com · cloudflare.dns

host-5c38db.com (CNAME)

in order locked by rule

Live
CNAME host-525a57.com proxied
Approved
a72f8cab0851 matches liveapproved 24 Oct 2026 19:57 UTC by operator
Recommended (template)
* · contenton drift rollback; no copy investigate_ticket; hold up to 4 h; alert always, P1
Lock
locked by rule rule-a3f26f34efab2ebb critical
Verdict
no finding: the latest pass found it in order
Last change
no record
Changed by
no record

Live against approved

FieldLiveApproved
contenthost-525a57.comthe same, 24 Oct 2026 19:57 UTC
namehost-5c38db.comthe same, 24 Oct 2026 19:57 UTC
proxied1the same, 24 Oct 2026 19:57 UTC
ttl1the same, 24 Oct 2026 19:57 UTC
typeCNAMEthe same, 24 Oct 2026 19:57 UTC

Restore proof

The copy at the vault's head:

  • vault commit e296d52f taken 25 Oct 2026 13:53 UTC · cf-schema ok, 0 gaps, validated 25 Oct 2026 13:54 UTC

What a restore would regress

A record restores from its vault JSON through the provider; no host backup applies.

References

  • content names dns_name host-525a57.comresolves in the latest DNS run to TXT "v=spf1 ip4:ip-71940c +a +mx +ip4:ip-52ca68 ~all", NS host-628385.com, NS host-f1df9f.com, MX ms29230297.msv1.invalid, TXT "google-site-verification=<secret:value:2a0f5650>", A ip-6fb86d proxied

Decisions

No finding on this object: the latest pass found it in order.

Action history

The agent took no action on this object.

Change window

No change window is open on this object: a drift is rolled back at the next cycle under the rule.