client-1pass decided 25 Oct 2026 14:17 UTCsample mode

Work queue Settings

record in zone host-4c795e.quest · cloudflare.dns

host-524b42.quest (CNAME)

needs you locked by rule

Live
CNAME host-4c795e.quest proxied
Approved
7dce9c5851ec matches liveapproved 24 Oct 2026 19:57 UTC by operator
Recommended (template)
* · contenton drift rollback; no copy investigate_ticket; hold up to 4 h; alert always, P1
Lock
locked by rule rule-a3f26f34efab2ebb critical
Verdict
needs you name and its www treated differently by the proxyhold under rule rule-8e75e1d767980665 expired 25 Oct 2026 03:21 UTC; the finding stands
Last change
No record of who changed it: the audit log window of 18 h holds 0 events for the record.
Changed by
not recorded

Live against approved

FieldLiveApproved
contenthost-4c795e.questthe same, 24 Oct 2026 19:57 UTC
namehost-524b42.questthe same, 24 Oct 2026 19:57 UTC
proxied1the same, 24 Oct 2026 19:57 UTC
ttl1the same, 24 Oct 2026 19:57 UTC
typeCNAMEthe same, 24 Oct 2026 19:57 UTC

Restore proof

The copy at the vault's head:

  • vault commit e296d52f taken 25 Oct 2026 13:53 UTC · cf-schema ok, 0 gaps, validated 25 Oct 2026 13:54 UTC

What a restore would regress

A record restores from its vault JSON through the provider; no host backup applies.

References

  • content names dns_name host-4c795e.questresolves in the latest DNS run to A ip-6fb86d

Decisions

  • ESCALATEname and its www treated differently by the proxy · proxiedhold under rule rule-8e75e1d767980665 expired 25 Oct 2026 03:21 UTC; the finding standsdecided 25 Oct 2026 14:17 UTC by policy under rule-8e75e1d767980665 · fnd-b4a40091cdb4f906

Action history

The agent took no action on this object.

Change window

No change window is open on this object: a drift is rolled back at the next cycle under the rule.