Plan and reconcile¶
| Operation | Writes Git? | Writes EVE? |
|---|---|---|
| validate | no | no |
| plan | no | no (GET/read only) |
| deploy | sidecars | creates managed lab |
reconcile to_eve |
sidecars | yes |
reconcile from_eve |
yes (CLI commit_pulled) |
no mutating writes |
| destroy | no | deletes managed lab |
| inspect | no | observation only |
Plan¶
Dry-run of the same semantic diff as reconcile. Omitted direction is to_eve. Never use plan as proof of running NOS configuration.
Deploy¶
Create the managed lab. Existing lab without replace → 409 lab_exists. replace is stop/wipe/delete then recreate and needs confirmation.
Reconcile¶
Apply the plan. to_eve mutates EVE (lab lock fail-closed). from_eve updates Local from SnapshotLive of managed_lab.
prune¶
to_eve only: delete extra live objects. Requires --yes / IDE confirm / MCP confirm=true. Invalid with from_eve (a vanished live object is delete-local, not prune).
Destructive actions¶
Destroy, wipe, replace, and prune are explicit. Omitted wipe on destroy still means wipe nodes on the agent; --no-wipe sends wipe=false.
Presentation is restored after full IMPORT deploy/recreate only. Ordinary reconcile does not replay visuals.