Production identity / read-only convergence board
One release. Every route. No mixed generation.
The board compares immutable candidate identity, bounded public route evidence, static assets, runtime integrity, active-root byte convergence, security headers, cache behavior, and protected-memory separation. Every disagreement remains visible until reviewed evidence closes it.
candidate identity
Immutable candidate identity
PASS
Evidence
- 0a7eefb370c8784d60961fb2030237a44036b0e7e09af55f848f569fd6cb6abf
critical routes
Critical route availability and content contract
FAIL
Evidence
- 6 of 12 routes observed
Blockers
- full critical route estate has not converged
release headers
Release/build/digest header convergence
FAIL
Blockers
- release headers are missing, stale, or inconsistent
configured version
Configured-version drift
FAIL
Blockers
- configured-version drift is unresolved
database catalog
Database reachability and ten-record simulation catalog
PASS
Evidence
- reachable
- 10
static assets
Static-asset byte identity
NOT COMPLETED
Evidence
- 0 assets observed
Blockers
- same-origin static assets require digest comparison
security headers
TLS and security-header convergence
FAIL
Evidence
- Content-Security-Policy
- Strict-Transport-Security
- Referrer-Policy
- Permissions-Policy
- X-Content-Type-Options
Blockers
- complete live security-header evidence is unavailable or failing
cache compression
Cache and compression behavior
FAIL
Evidence
- compression observed: False
Blockers
- cache/compression behavior is incomplete or unverified
runtime integrity
Runtime-integrity status
FAIL
Evidence
- None
Blockers
- live runtime-integrity match is not established
active root
Active-root exact candidate-tree match
NOT COMPLETED
Evidence
- None
Blockers
- active-root byte convergence is not established
stale file absence
Missing, changed, and unexpected file absence
NOT COMPLETED
Blockers
- stale-file absence requires active-root comparison
passenger wrapper
cPanel wrapper recursion absence
NOT COMPLETED
Blockers
- cPanel wrapper must be inspected on the actual host
protected boundary
Protected-route absence and memory separation
NOT COMPLETED
Evidence
- package protected-memory proofs remain separate
Blockers
- live protected-route absence requires bounded verification
| Route | State | HTTP | Release | Build | Drift | Bytes | Rendered markers | Blockers |
|---|---|---|---|---|---|---|---|---|
/livez |
NOT_COMPLETED | — | — |
— |
— | — | — | route not present in bounded live observation |
/readyz |
NOT_COMPLETED | — | — |
— |
— | — | — | route not present in bounded live observation |
/healthz |
FAIL | 200 | — |
— |
— | — | — | bounded response-size contract not established; release header disagrees with candidate; build header disagrees with candidate; build-info digest header disagrees with candidate; configured-version drift remains or is not established |
/ |
FAIL | 200 | — |
— |
— | — | 2.0.0-rc.29-WIP | bounded response-size contract not established; release header disagrees with candidate; build header disagrees with candidate; build-info digest header disagrees with candidate; configured-version drift remains or is not established; rendered page exposes a different release generation |
/simulations/ |
FAIL | 200 | — |
— |
— | — | 2.0.0-rc.29-WIP | bounded response-size contract not established; release header disagrees with candidate; build header disagrees with candidate; build-info digest header disagrees with candidate; configured-version drift remains or is not established; rendered page exposes a different release generation |
/simulations/autonomous-drone-control |
FAIL | 200 | — |
— |
— | — | 2.0.0-rc.29-WIP | bounded response-size contract not established; release header disagrees with candidate; build header disagrees with candidate; build-info digest header disagrees with candidate; configured-version drift remains or is not established; rendered page exposes a different release generation |
/company/defense-systems |
FAIL | 200 | — |
— |
— | — | 2.0.0-rc.29-WIP | bounded response-size contract not established; release header disagrees with candidate; build header disagrees with candidate; build-info digest header disagrees with candidate; configured-version drift remains or is not established; rendered page exposes a different release generation |
/company/defense-posture |
FAIL | 200 | — |
— |
— | — | 2.0.0-rc.29-WIP | bounded response-size contract not established; release header disagrees with candidate; build header disagrees with candidate; build-info digest header disagrees with candidate; configured-version drift remains or is not established; rendered page exposes a different release generation |
/docs/acceptance/production-convergence |
NOT_COMPLETED | — | — |
— |
— | — | — | route not present in bounded live observation |
/api/v2/status |
NOT_COMPLETED | — | — |
— |
— | — | — | route not present in bounded live observation |
/api/v2/release-identity |
NOT_COMPLETED | — | — |
— |
— | — | — | route not present in bounded live observation |
/api/v2/production-route-inventory |
NOT_COMPLETED | — | — |
— |
— | — | — | route not present in bounded live observation |
Named convergence blockers
- active-root byte convergence is not established
- cPanel wrapper must be inspected on the actual host
- cache/compression behavior is incomplete or unverified
- complete live security-header evidence is unavailable or failing
- configured-version drift is unresolved
- full critical route estate has not converged
- live protected-route absence requires bounded verification
- live runtime-integrity match is not established
- release headers are missing, stale, or inconsistent
- same-origin static assets require digest comparison
- stale-file absence requires active-root comparison
Deterministic board proof — 32 checks
LRC-01 · PASS
Unclosed production acceptance remains visibly WIP.
Unclosed production acceptance remains visibly WIP.
LRC-02 · PASS
The immutable candidate identity is hash-addressed.
The immutable candidate identity is hash-addressed.
LRC-03 · PASS
Every critical route has an explicit result, including NOT_COMPLETED.
Every critical route has an explicit result, including NOT_COMPLETED.
LRC-04 · PASS
Only the bounded critical route set is represented.
Only the bounded critical route set is represented.
LRC-05 · PASS
Complete response bodies are never retained.
Complete response bodies are never retained.
LRC-06 · PASS
Credentials are never collected.
Credentials are never collected.
LRC-07 · PASS
Cookies are never collected.
Cookies are never collected.
LRC-08 · PASS
Evidence collection never changes the server.
Evidence collection never changes the server.
LRC-09 · PASS
Customer content is never collected.
Customer content is never collected.
LRC-10 · PASS
Per-route records retain no response body.
Per-route records retain no response body.
LRC-11 · PASS
Independent gates are not collapsed into a universal score.
Independent gates are not collapsed into a universal score.
LRC-12 · PASS
The board cannot perform a production cutover.
The board cannot perform a production cutover.
LRC-13 · PASS
The board cannot run database migrations.
The board cannot run database migrations.
LRC-14 · PASS
The board cannot restart Passenger.
The board cannot restart Passenger.
LRC-15 · PASS
The board cannot trigger rollback.
The board cannot trigger rollback.
LRC-16 · PASS
The board cannot activate a baseline.
The board cannot activate a baseline.
LRC-17 · PASS
The board cannot promote a release.
The board cannot promote a release.
LRC-18 · PASS
Evidence remains subject to operator and independent review.
Evidence remains subject to operator and independent review.
LRC-19 · PASS
Repository-controlled candidate identity is coherent.
Repository-controlled candidate identity is coherent.
LRC-20 · PASS
Every acceptance dimension remains an independent gate.
Every acceptance dimension remains an independent gate.
LRC-21 · PASS
No protected document or raw .uai route is probed.
No protected document or raw .uai route is probed.
LRC-22 · PASS
The controlled public boundary remains explicit.
The controlled public boundary remains explicit.
LRC-23 · PASS
The decision remains bounded and non-promoting.
The decision remains bounded and non-promoting.
LRC-24 · PASS
Unclosed convergence is represented by named blockers.
Unclosed convergence is represented by named blockers.
LRC-25 · PASS
A mixed-release observation can never be accepted as converged.
A mixed-release observation can never be accepted as converged.
LRC-26 · PASS
Candidate convergence requires exact active-root identity.
Candidate convergence requires exact active-root identity.
LRC-27 · PASS
Candidate convergence requires static-asset byte identity.
Candidate convergence requires static-asset byte identity.
LRC-28 · PASS
Candidate convergence requires database reachability.
Candidate convergence requires database reachability.
LRC-29 · PASS
Candidate convergence requires the ten-record simulation catalog.
Candidate convergence requires the ten-record simulation catalog.
LRC-30 · PASS
Candidate convergence requires a live runtime-integrity match.
Candidate convergence requires a live runtime-integrity match.
LRC-31 · PASS
Candidate convergence requires live protected-route absence.
Candidate convergence requires live protected-route absence.
LRC-32 · PASS
Candidate convergence requires a non-recursive cPanel wrapper.
Candidate convergence requires a non-recursive cPanel wrapper.
Proof SHA-256: 264753f8e15625d70d7600b3dc547fe7f704dcf3a676384c1fdc9853a1b64701