nas-topology check asserts port 8731 absent on the coordinator's wlp192s0, but the coordinator opens it: flake check is red on main #458

Finding (MEASURED, overnight run 2026-09-23, item 28, receipt /home/tom/overnight-tuesday/receipts/dotfiles-flake-check-fix/RECEIPT.md)

In a fresh clone of origin/main at f8e27b43, nix flake check --no-build exits rc 1 at checks.x86_64-linux.nas-topology (flake.nix:1559), on the assertion at flake.nix:1694:

error: assertion '(! ((builtins).elem 8731 (coordinator).networking.firewall.interfaces.wlp192s0.allowedTCPPorts))' failed

while

$ nix eval --json .#nixosConfigurations.coordinator.config.networking.firewall.interfaces.wlp192s0.allowedTCPPorts
[80,443,8731]

The assertion's comment reads "The coordinator serves no model: no inference door on its LAN leg." The coordinator's configuration opens 8731 on wlp192s0. Either the port or the assertion is wrong.

Why it was not fixed

Deciding which side is wrong is a configuration ruling (does the coordinator front an inference door on its LAN leg, given its Halogen is declared but not resident). Silencing the assertion to reach rc 0 would be symptom suppression. The unattended session stopped and this issue records it.

Related

• nix flake check aborts at nixosConfigurations.client, so the checks output is never reached #455 (the nixosConfigurations.client abort): item 28 found it does not reproduce in a fresh clone; the earlier cause was a missing fetchFromGitHub source derivation for pkgs/zenbook-duo-daemon.nix, now valid in the store. The client abort and this assertion are separate.

Filed by the orchestrating Claude session (3ed62a58) on Tom's standing instruction to file dotfiles issues so fixes become durable.