# GCP DB Parity Current Probe

Generated UTC: `2026-07-10T02:20:00.883398+00:00`
Status: `blocked_on_network_dns_before_auth_refresh`
Ready for GCP read-only parity: `False`
Mutates GCP: `False`
Mutates DB: `False`
Current canary: gcloud account can read teleo-501523 project metadata plus target VM/Cloud SQL metadata

## Active Config

- Account: `billy@livingip.xyz`
- Project: `teleo-501523`
- Temporary writable config copy: `True`
- Temporary config removed after probe: `True`

## Account Checks

- `billy@livingip.xyz`: `ok=False`, `returncode=1`, `stdout_redacted=True`
  - stderr: `ERROR: (gcloud.auth.print-access-token) HTTPSConnectionPool(host='oauth2.googleapis.com', port=443): Max retries exceeded with url: /token (Caused by NameResolutionError("<urllib3.connection.HTTPSConnection object at 0x107996710>: Failed to resolve 'oauth2.googleapis.com' ([Errno 8] nodename nor servname provided, or not known)"))`
- `billyattnmarket@gmail.com`: `ok=False`, `returncode=1`, `stdout_redacted=True`
  - stderr: `ERROR: (gcloud.auth.print-access-token) HTTPSConnectionPool(host='oauth2.googleapis.com', port=443): Max retries exceeded with url: /token (Caused by NameResolutionError("<urllib3.connection.HTTPSConnection object at 0x10733e710>: Failed to resolve 'oauth2.googleapis.com' ([Errno 8] nodename nor servname provided, or not known)"))`
- `contact@attn.markets`: `ok=False`, `returncode=1`, `stdout_redacted=True`
  - stderr: `ERROR: (gcloud.auth.print-access-token) HTTPSConnectionPool(host='oauth2.googleapis.com', port=443): Max retries exceeded with url: /token (Caused by NameResolutionError("<urllib3.connection.HTTPSConnection object at 0x10789a710>: Failed to resolve 'oauth2.googleapis.com' ([Errno 8] nodename nor servname provided, or not known)"))`
- `valentin.meylan68@gmail.com`: `ok=False`, `returncode=1`, `stdout_redacted=True`
  - stderr: `ERROR: (gcloud.auth.print-access-token) HTTPSConnectionPool(host='oauth2.googleapis.com', port=443): Max retries exceeded with url: /token (Caused by NameResolutionError("<urllib3.connection.HTTPSConnection object at 0x10a1d2710>: Failed to resolve 'oauth2.googleapis.com' ([Errno 8] nodename nor servname provided, or not known)"))`

## Project Readback

- `ok=False`, `returncode=1`
- stderr: `ERROR: (gcloud.projects.describe) There was a problem refreshing your current auth tokens: HTTPSConnectionPool(host='oauth2.googleapis.com', port=443): Max retries exceeded with url: /token (Caused by NameResolutionError("<urllib3.connection.HTTPSConnection object at 0x107ac0550>: Failed to resolve 'oauth2.googleapis.com' ([Errno 8] nodename nor servname provided, or not known)"))
Please run:

  $ gcloud auth login

to obtain new credentials.

If you have already logged in with a different account, run:

  $ gcloud config set account ACCOUNT

to select an already authenticated account to use.`

## Gate

- Exact gate: `blocked_on_network_dns_before_auth_refresh`
- Clear CTA: Run this probe from a network-enabled shell where oauth2.googleapis.com resolves, with `billy@livingip.xyz` authenticated for project `teleo-501523`. Then rerun `python3 scripts/probe_gcp_db_parity.py` and proceed only if it reports `ready_for_gcp_readonly_parity`.

## Next Non-User Action

- Run this same probe again and require ready_for_gcp_readonly_parity=true.
- SSH into teleo-prod-1 or use Cloud SQL read-only access for DB/runtime parity proof.
- Run the Working Leo benchmark against GCP only after read-only GCP metadata is proven current.

## Claim Ceiling

This probe proves only current local gcloud/GCP read-only parity readiness. It does not prove VPS behavior, Telegram-visible behavior, production DB mutation, or GCP-hosted Leo correctness.