{
  "schema": "concresca.passenger-staging-contract.v027",
  "site_version": "0.28.0-wip",
  "target": {
    "origin": "https://concresca.com",
    "application_root_example": "apps/concresca",
    "application_url_path": "",
    "startup_file": "passenger_wsgi.py",
    "entry_point": "application"
  },
  "required_evidence": [
    "temporary or operator-authorized staging hostname",
    "real HTTP and HTTPS request evidence through Passenger",
    "trusted-proxy and canonical-host behavior",
    "multiple process/worker behavior",
    "shared MySQL idempotency and rate-limit behavior",
    "private directory permission checks",
    "server-log redaction checks",
    "static and delegated route ownership checks",
    "controlled application restart",
    "byte-exact backup",
    "rollback rehearsal",
    "fail-closed behavior after removing one required activation receipt"
  ],
  "actual_environment": null,
  "actual_http": null,
  "actual_multiprocess": null,
  "actual_permissions": null,
  "actual_log_redaction": null,
  "actual_rollback": null,
  "activation_receipt": null,
  "status": "NOT_RUN_NO_AUTHORIZED_HOSTING_MUTATION",
  "actual_result": null,
  "truth_boundary": "Direct WSGI calls are not Passenger evidence. No cPanel application, DNS record, filesystem root, process, proxy, log, or live route was changed."
}