HSX_E_LINK_PROBE_FAILED

01 · Meaning

What this error means

After the tenant KV owner prefix and local pointer were rewritten, the pre-commit probe (token-key custody canary + INSTALL_KV read) failed, so both were rolled back to the pre-link owner. No control-plane commit and no custody re-key happened. Link is re-runnable.

When this error stops a command, hs-x exits with code 10. With --json, the failure is reported as a structured error whose code field is HSX_E_LINK_PROBE_FAILED — stable to match on in scripts and agents.

02 · Causes

Likely causes

• The escrowed token key no longer opens the binding’s canary (custody drifted between the preflight and the probe)
• The exact INSTALL_KV namespace stopped responding mid-migration

03 · Fix

How to fix it

• Re-run hs-x link — the pre-link owner state was restored, so it starts clean
• If it recurs, run hs-x link from the machine whose custody store holds the escrowed key (see docs/token-key-custody.md)

Still stuck? Re-run the command with --debug for the wire-level detail, or hs-x doctor to check accounts, link state, and connectivity in one pass.