koji-gc Not Deleting Builds after Trashcan?

[Dustin C. Hatch]

I noticed today that I've been getting the same "build is about to be
deleted" email from koji-gc in my local Koji environment for several
weeks. When I investigated, I found that koji-gc has been tagging it
into the trashcan, but after the grace period, instead of deleting it,
it just untags it. Then, after the next delay, it puts it back in the
trashcan and the process repeats.

Anyone have any idea why this would be happening?

% koji list-history --build=firemon-wf-server-8.1.1-2.fmos.el7
Wed Apr 29 16:57:03 2015 firemon-wf-server-8.1.1-2.fmos.el7 tagged into
fmos-803-testing by dhatch
Fri May  8 22:13:21 2015 firemon-wf-server-8.1.1-2.fmos.el7 untagged
from fmos-803-testing by kojiadmin
Sat May  9 22:32:34 2015 firemon-wf-server-8.1.1-2.fmos.el7 tagged into
trashcan by kojiadmin
Sat May 16 22:41:18 2015 firemon-wf-server-8.1.1-2.fmos.el7 untagged
from trashcan by kojiadmin
Sun May 17 22:44:55 2015 firemon-wf-server-8.1.1-2.fmos.el7 tagged into
trashcan by kojiadmin
Sun May 24 22:26:06 2015 firemon-wf-server-8.1.1-2.fmos.el7 untagged
from trashcan by kojiadmin
Mon May 25 22:23:12 2015 firemon-wf-server-8.1.1-2.fmos.el7 tagged into
trashcan by kojiadmin
Mon Jun  1 22:12:04 2015 firemon-wf-server-8.1.1-2.fmos.el7 untagged
from trashcan by kojiadmin
Tue Jun  2 22:22:52 2015 firemon-wf-server-8.1.1-2.fmos.el7 tagged into
trashcan by kojiadmin
Tue Jun  9 22:37:15 2015 firemon-wf-server-8.1.1-2.fmos.el7 untagged
from trashcan by kojiadmin
Wed Jun 10 22:26:38 2015 firemon-wf-server-8.1.1-2.fmos.el7 tagged into
trashcan by kojiadmin
Wed Jun 17 22:19:34 2015 firemon-wf-server-8.1.1-2.fmos.el7 untagged
from trashcan by kojiadmin
Thu Jun 18 22:34:38 2015 firemon-wf-server-8.1.1-2.fmos.el7 tagged into
trashcan by kojiadmin [still active]

$ rpm -qa 'koji*'
koji-hub-1.9.0-10.el7.gitcd45e886.noarch
koji-hub-plugin-mash-1.3.3-1.el7.centos.noarch
koji-web-1.9.0-10.el7.gitcd45e886.noarch
koji-builder-1.9.0-10.el7.gitcd45e886.noarch
koji-utils-1.9.0-10.el7.gitcd45e886.noarch
koji-1.9.0-10.el7.gitcd45e886.noarch

koji-gc.conf is attached

Thanks in advance for any insight,

-- 
♫Dustin
-------------- next part --------------
#test policy file
#earlier = higher precedence!

[main]
key_aliases =
    30C9ECF8    fedora-test
    4F2A6FD2    fedora-gold
    897DA07A    redhat-beta
    1AC70CE6    fedora-extras
    527E5D3A    fmos-release

unprotected_keys =
    fedora-test
    fedora-extras
    redhat-beta

delay = 1 day
grace_period = 1 week

server = https://koji.securepassage.com/kojihub
weburl = https://koji.securepassage.com/koji

# The service name of the principal being used by the hub
#krbservice = host

cert = /etc/koji-gc/client.pem
ca = /etc/koji-gc/clientca.crt
serverca = /etc/koji-gc/serverca.crt

# The domain name that will be appended to Koji usernames
# when creating email notifications
email_domain = koji.securepassage.com
email_from = koji at securepassage.com

[prune]
policy =
    #stuff to protect
    #note that tags with master lock engaged are already protected
    tag *-updates :: keep
    age < 1 day :: skip
    sig fedora-gold :: skip
    sig fmos-release :: skip
    sig fedora-test && age < 12 weeks :: keep

    #stuff to chuck semi-rapidly
    tag *-testing *-candidate :: {  # nested rules
        order >= 2 :: untag
        order > 0 && age > 6 weeks :: untag
    }  #closing braces must be on a line by themselves (modulo comments/whitespace)
    tag *-candidate && age > 60 weeks :: untag

    #default: keep the last 3
    order > 2 :: untag