{"evidence":{"base_url":"https://web-production-17a265.up.railway.app","checks":[{"detail":"healthz returned HTTP 200","evidence":["health response"],"expected":"HTTP 200","metrics":{"single_request_ms":937.3903},"name":"process_liveness","status":"PASS"},{"detail":"readyz returned HTTP 503; checks are boolean only","evidence":["readiness response","boolean configuration checks"],"expected":"HTTP 200 with ok=true","metrics":{"single_request_ms":608.7461},"name":"deployment_readiness","status":"PENDING_ENVIRONMENT_CONFIG"},{"detail":"EvidencePack returned HTTP 200; report status=PASS","evidence":["enterprise validation EvidencePack","scenario matrix"],"expected":"20 scenarios, zero failures and zero critical failures","metrics":{"single_request_ms":660.2186},"name":"published_validation_evidence","status":"PASS"},{"detail":"OpenAPI contract returned HTTP 200","evidence":["OpenAPI contract"],"expected":"HTTP 200","metrics":{"single_request_ms":534.1258},"name":"integration_contract_available","status":"PASS"},{"detail":"Run the browser/security-header scan in the customer environment; this read-only runner does not infer headers.","evidence":["header scan required"],"expected":"CSP, HSTS (HTTPS), frame, referrer and content-type protections","metrics":{},"name":"security_headers","status":"PENDING_OPERATOR_HEADER_SCAN"},{"detail":"Repeated liveness timing; not an application SLO","evidence":["latency sample set"],"expected":"20/20 successful responses","metrics":{"completed":20,"errors":0,"iterations":20,"p50_ms":541.5868,"p95_ms":736.7182,"p99_ms":736.7182,"throughput_per_sec":1.77},"name":"liveness_latency","status":"PASS"},{"detail":"No admin credential supplied; no request was attempted.","evidence":["operator credential required"],"expected":"Authenticated operator response","metrics":{},"name":"operator_audit_access","status":"PENDING_OPERATOR_CREDENTIAL"},{"detail":"No admin credential supplied; no request was attempted.","evidence":["operator credential required"],"expected":"Authenticated operator response","metrics":{},"name":"tenant_catalog_access","status":"PENDING_OPERATOR_CREDENTIAL"},{"detail":"Requires two customer tenants and approved test identities; not run by this read-only pass.","evidence":["cross-tenant negative test","database isolation result"],"expected":"Cross-tenant read/write denied in customer database","metrics":{},"name":"customer_tenant_isolation","status":"PENDING_MUTATING_PILOT"},{"detail":"Requires the deployed application identity and customer KMS/object store; operator identity must not be substituted.","evidence":["runtime-role storage smoke","KMS verification"],"expected":"Customer runtime role can put/get/verify an EvidencePack","metrics":{},"name":"runtime_kms_storage_smoke","status":"PENDING_RUNTIME_IDENTITY"},{"detail":"Requires customer backup policy, restore rehearsal and written objectives.","evidence":["restore log","RTO/RPO measurement"],"expected":"Restore meets customer-approved RTO/RPO","metrics":{},"name":"backup_restore_rto_rpo","status":"PENDING_CUSTOMER_DRILL"},{"detail":"Requires customer workflow owner, controls, reviewers, data boundary and signing key.","evidence":["pilot brief","change event","signed EvidencePack","go/no-go"],"expected":"One named workflow completes shadow \u2192 change \u2192 replay/review \u2192 signed EvidencePack","metrics":{},"name":"bounded_shadow_pilot","status":"PENDING_CUSTOMER_PILOT"}],"claim_boundary":["Read-only acceptance probe; it does not create tenants or mutate customer state.","A green read-only probe is necessary, not sufficient, for production approval.","Performance values are diagnostic and are not a customer SLO.","Customer tenant isolation, runtime KMS storage, restore objectives and pilot evidence remain explicit gates."],"failed":0,"failures":[],"generated_at_utc":"2026-08-29T12:19:24Z","passed":4,"pending":8,"pending_gates":["deployment_readiness","security_headers","operator_audit_access","tenant_catalog_access","customer_tenant_isolation","runtime_kms_storage_smoke","backup_restore_rto_rpo","bounded_shadow_pilot"],"report_type":"EcoKure customer staging acceptance report","status":"REVIEW_REQUIRED","verification_state":"READ_ONLY_DEPLOYED_RUNTIME_PROBE"},"limitations":["Read-only acceptance probe; it does not create tenants or mutate customer state.","A green read-only probe is necessary, not sufficient, for production approval.","Performance values are diagnostic and are not a customer SLO.","Customer tenant isolation, runtime KMS storage, restore objectives and pilot evidence remain explicit gates."],"pack_type":"EcoKure read-only deployed-runtime acceptance EvidencePack","verification_state":"READ_ONLY_DEPLOYED_RUNTIME_PROBE"}