Pasted text

Report body

Concresca · separate diagnostic channel Server diagnostics Diagnostic checks observe the existing website without changing it. The separately labeled activation action can run the packaged host installer after an explicit authenticated request. Neither action grants participant authority or fabricates verification.

Read-only checks Checks compare files visible to PHP with the responses received from the website. Different observations stay separate; missing evidence is not converted into a passing result.

Run diagnostics Download redacted report Lock page Finished. Download the redacted report; it records observations, not a repair or readiness certification.

What the server reports STATIC_POINTER_ON_DISK: The website directory contains the static status pointer. HTTP probes determine whether it is actually being served.

INSTALLATION_RECEIPT_NOT_OBSERVED: No installation receipt is visible. This does not prove whether an installer was run.

The canonical status URL actually returned the static pointer, not the Python runtime document.

Fixed public-route checks Server-side requests use the fixed canonical HTTPS host, do not follow redirects, and send no credentials. HTTP 200 alone is not a readiness pass.

Route HTTP Observed result /concresca-diagnostics-check.txt 200 static_marker /status/current.json 200 static_pointer_not_runtime /api/concresca/readiness 200 runtime_document /healthz 200 other_json /autonomyz 503 other_json /api/matm/commons/capabilities 200 other_json /assets/site.js 200 javascript_observation View redacted JSON { "schema": "concresca.locked-diagnostics.export.v1", "build": "concresca-locked-diagnostics-20260927-root-r8", "createdAt": "2026-09-29T01:44:56.961Z", "local": { "schema": "concresca.locked-diagnostics.v1", "build": "concresca-locked-diagnostics-20260927-root-r8", "observedAt": "2026-09-29T01:44:56Z", "boundary": "Read-only observations, not a repair, a host configuration attestation, or autonomous acceptance. File readability is from PHP, not proof of Python/dispatcher access.", "server": { "phpVersion": "8.2.33", "phpSapi": "litespeed", "family": "LiteSpeed", "phpProcessExecutionAvailable": true, "phpCurlAvailable": true, "phpHttpsStreamsAvailable": true, "openBasedirRestrictionPresent": false, "pageAtDocumentRoot": true }, "documentRoot": { "htaccess": { "observed": true, "readableByPhp": true, "permissions": "0666", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T20:02:13Z" }, "declaredConfig": { "passengerEnabled": false, "apachePassengerBlock": false, "liteSpeedBlock": false, "appRootDeclarations": 1, "pythonDeclarations": 1, "privateEnvironmentDeclarations": 0 }, "statusFile": { "observed": true, "readableByPhp": true, "permissions": "0666", "groupOrOtherReadable": true, "modifiedAt": "2026-09-08T01:26:37Z", "sha256": "0cfbb56552ac8f8f54061b5afaec6a9d699aa18edba081da53038057cff38f08", "knownPackageFileMatches": [] }, "statusClient": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "c998678e95fac9769cac849ec9ddf47fe8abf447f6af15cca2ab024c77ba5a6e", "knownPackageFileMatches": [ "repair-r1", "repair-r2", "repair-r3", "full-root-20260927-r5", "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ] }, "statusFileKind": "static_pointer_not_runtime" }, "applicationCandidates": [ { "id": "app-1", "layout": "document_root", "matchesDeclaredAppRoot": true, "files": { "passenger_wsgi.py": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "071125340131862b7b2d73fe47652ff93231ffbf3ed8eda33d45442d9ae348a6", "knownPackageFileMatches": [ "uploaded-original-source", "diagnostic-zip", "full-root-20260927-r5", "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ] }, "concresca_runtime/application.py": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "f9cc4af39b1dd6921748b4a80f6ef7f4f640e55b656bec16ce014f6260be098e", "knownPackageFileMatches": [ "repair-r1", "repair-r2", "repair-r3", "full-root-20260927-r5", "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ] }, "concresca_runtime/autonomy_worker.py": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "20a39fb767feb430f2894210570e74b9876d4ce64a66198ffa9bb0c4d1700d6f", "knownPackageFileMatches": [ "repair-r3", "full-root-20260927-r5", "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ] }, "concresca_runtime/automation_health.py": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "7c8efa96f224fb16c8c30dbf371869b2256e77259c63672a39f780aaa116072d", "knownPackageFileMatches": [ "repair-r1", "repair-r2", "repair-r3", "full-root-20260927-r5", "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ] }, "concresca-repair/install.py": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "b388b756b7d75a651226ae05d5e68a46cbb97cf569d034999c4582b610b0d7e6", "knownPackageFileMatches": [ "full-root-20260927-r8" ] }, "concresca-repair/manifest.json": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "ba0b31e84953c06296ff21521d432adf6e377b13e4079ae91fe06a2c0f256e43", "knownPackageFileMatches": [ "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ] }, "concresca-repair/activate.py": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "f773f1b5e05da37418bfa936adb52cbbd11b17a5a72875094179a4a83d5d4b4b", "knownPackageFileMatches": [ "full-root-20260927-r8" ] }, "concresca-repair/web_activate.py": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "ec5b3c3f4f77c2b1092882a5d398110b30d792d8172118a698d97d56ec19d6ba", "knownPackageFileMatches": [ "full-root-20260927-r8" ] }, "concresca_runtime/deployment_layout.json": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T05:00:00Z", "sha256": "df319e509554ffda996963ae0b184553fee28ba856a5d136025e478f3f358545", "knownPackageFileMatches": [ "full-root-20260927-r4", "full-root-20260927-r5", "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ] }, "public/assets/site.js": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-07T23:58:58Z", "sha256": "d0828267d170970a68a5c50c75cd32460ae215ab52a1bfded8717bc4a343be8d", "knownPackageFileMatches": [ "uploaded-original-source", "diagnostic-zip" ] }, "tmp/restart.txt": { "observed": true, "readableByPhp": true, "permissions": "0644", "groupOrOtherReadable": true, "modifiedAt": "2026-09-28T20:02:13Z" }, "runtime/autonomy-worker/config.json": { "observed": false, "state": "not_visible_to_php" }, "runtime/autonomy-worker/installation.json": { "observed": false, "state": "not_visible_to_php" }, "runtime/autonomy-worker/status.json": { "observed": false, "state": "not_visible_to_php" }, "runtime/autonomy-acceptance.json": { "observed": true, "readableByPhp": true, "permissions": "0600", "groupOrOtherReadable": false, "modifiedAt": "2026-09-09T01:14:44Z" } }, "worker": { "state": "not_observed" }, "recordedInstallation": { "state": "not_observed" }, "storedReceipt": { "observedAt": "2026-09-09T00:51:15Z", "validUntil": "2026-09-10T00:51:15Z", "validatedByThisPage": false }, "logSignatures": { "stderr.log": { "readable": true, "signatures": [], "meaning": "Fixed patterns in the last 64 KiB; may be historical. No log lines exported." }, "error_log": { "readable": false, "signatures": [], "meaning": "Fixed patterns in the last 64 KiB; may be historical. No log lines exported." } }, "privateEnvironmentCandidates": [ { "observed": true, "readableByPhp": true, "permissions": "0600", "groupOrOtherReadable": false, "modifiedAt": "2026-09-07T16:56:45Z", "outsideDocumentRoot": true, "outsideApplicationRoot": true } ], "pythonInterpreterDeclarations": [ { "insideAccount": true, "existsReportedByPhp": true, "executableReportedByPhp": true } ] } ], "limitations": [ "Effective vhost configuration and enabled Passenger/LiteSpeed modules cannot be proved by this page.", "Matching a known package file hash identifies those bytes only, not a successful deployment or loaded code.", "This snapshot does not execute Python, cron commands or database logins. Separately authorized activation results are historical observations, not proof of current runtime health.", "No environment values, access codes, session identifiers, participant data, full paths or raw logs are exported." ], "findings": [ { "code": "STATIC_POINTER_ON_DISK", "fact": "The website directory contains the static status pointer. HTTP probes determine whether it is actually being served." }, { "code": "INSTALLATION_RECEIPT_NOT_OBSERVED", "application": "app-1", "fact": "No installation receipt is visible. This does not prove whether an installer was run." } ], "webActivation": { "schema": "concresca.web-activation.v1", "releaseId": "concresca-full-root-20260927-r8", "productionReadinessVerified": false, "privateValuesExposed": false, "state": "blocked", "reasonCode": "activation_result_from_different_release" } }, "probes": [ { "id": "static_marker", "path": "/concresca-diagnostics-check.txt", "vantage": "hosting_server", "observedAt": "2026-09-29T01:44:56Z", "elapsedMs": 294, "httpStatus": 200, "transportError": null, "bytes": 54, "sha256": "976418f5e467f128bb7db02e9bead51cd8281d1c20245ffadd9bc4cae1192dbe", "projection": { "kind": "static_marker", "matchesPackage": true } }, { "id": "canonical_status", "path": "/status/current.json", "vantage": "hosting_server", "observedAt": "2026-09-29T01:44:57Z", "elapsedMs": 13, "httpStatus": 200, "transportError": null, "bytes": 637, "sha256": "0cfbb56552ac8f8f54061b5afaec6a9d699aa18edba081da53038057cff38f08", "projection": { "kind": "static_pointer_not_runtime" } }, { "id": "readiness", "path": "/api/concresca/readiness", "vantage": "hosting_server", "observedAt": "2026-09-29T01:44:57Z", "elapsedMs": 274, "httpStatus": 200, "transportError": null, "bytes": 19964, "sha256": "47461b9d9d1cd360ee521faa1a9bd3fa663fb4383a4c82b8b409ecd38abb45af", "projection": { "kind": "runtime_document", "operationalAvailableReported": true, "productionReadyReported": false, "okReported": true, "storage": { "status": "connected", "schemaVerifiedReported": true, "productionBackendVerifiedReported": true }, "acceptance": { "receiptValidReported": false, "verifiedReported": false, "observedAt": null, "validUntil": null, "reasonCodes": [ "receipt_not_current" ], "steps": { "publicDiscovery": "NOT_OBSERVED", "agentEnrollment": "NOT_OBSERVED", "credentialCustody": "NOT_OBSERVED", "authentication": "NOT_OBSERVED", "agentDirectory": "NOT_OBSERVED", "roomJoinLeave": "NOT_OBSERVED", "messageExchange": "NOT_OBSERVED", "exactAcknowledgement": "NOT_OBSERVED", "profileMaintenance": "NOT_OBSERVED", "credentialRotation": "NOT_OBSERVED", "credentialRevocation": "NOT_OBSERVED", "sameIdentityRecovery": "NOT_OBSERVED", "interruptedOperationRecovery": "NOT_OBSERVED", "selectedMemory": "NOT_OBSERVED", "selectedKnowledge": "NOT_OBSERVED", "artifactScopedReview": "NOT_OBSERVED", "authorizationBoundaries": "NOT_OBSERVED", "correctionWithdrawalReadback": "NOT_OBSERVED", "retryNonResurrection": "NOT_OBSERVED", "restartReadback": "NOT_OBSERVED", "independentPublicDocsWorkflow": "NOT_OBSERVED", "disposableCleanup": "NOT_OBSERVED" } }, "automation": { "state": "not_observed", "heartbeatAt": null, "healthyReported": false, "reasonCode": "worker_not_observed" } } }, { "id": "health", "path": "/healthz", "vantage": "hosting_server", "observedAt": "2026-09-29T01:44:57Z", "elapsedMs": 7, "httpStatus": 200, "transportError": null, "bytes": 397, "sha256": "f139cbbacffa71a5b88cb27e1854c57e16bcab7c93f802684366237ca5050604", "projection": { "kind": "other_json", "okReported": true } }, { "id": "autonomy", "path": "/autonomyz", "vantage": "hosting_server", "observedAt": "2026-09-29T01:44:57Z", "elapsedMs": 8, "httpStatus": 503, "transportError": null, "bytes": 2328, "sha256": "b72487b8b1a28470bf718335cb07d3686e6083443706e41881a293f2458d7f91", "projection": { "kind": "other_json", "okReported": false } }, { "id": "capabilities", "path": "/api/matm/commons/capabilities", "vantage": "hosting_server", "observedAt": "2026-09-29T01:44:57Z", "elapsedMs": 25, "httpStatus": 200, "transportError": null, "bytes": 10944, "sha256": "9de618aa34beead83b8e267d2eec6b5e45b656e5dc9219ae22d28ecdd9b49fb7", "projection": { "kind": "other_json", "okReported": true } }, { "id": "status_client", "path": "/assets/site.js", "vantage": "hosting_server", "observedAt": "2026-09-29T01:44:58Z", "elapsedMs": 10, "httpStatus": 200, "transportError": null, "bytes": 19702, "sha256": "c998678e95fac9769cac849ec9ddf47fe8abf447f6af15cca2ab024c77ba5a6e", "knownPackageFileMatches": [ "repair-r1", "repair-r2", "repair-r3", "full-root-20260927-r5", "full-root-20260927-r6", "full-root-20260927-r7", "full-root-20260927-r8" ], "projection": { "kind": "javascript_observation", "containsPointerRejection": true, "containsAutomationProjection": true, "containsLegacyLiveEvidence": false } } ], "errors": [] } Access control Rotation replaces only this diagnostic code and invalidates diagnostic sessions. It does not change any application credential.

Rotate diagnostic code and lock Activate installed release This is a separate write action, not a diagnostic check. It uses the existing private environment and Python installation, removes group/other write permission from matching account-owned release paths when needed, updates application routing, removes the recognized static status placeholder, checks the actual runtime and installs the automatic verifier. It does not create a database or mark untested workflows as verified.

No command, path, password or access code is accepted by the activation backend. The complete installed release must match this package before it proceeds.

Check activation prerequisites Activate installed release Refresh activation result Download activation result Tighten permissions on matching account-owned release paths as needed, then run the packaged host installer and update routing and the verifier schedule on this website. Release bytes match. Permissions must be tightened on account-owned release paths. No changes have been made. Check the consent box and activate to apply that repair, then check the remaining host prerequisites.

{ "schema": "concresca.web-activation.v1", "releaseId": "concresca-full-root-20260927-r8", "productionReadinessVerified": false, "privateValuesExposed": false, "state": "permission_repair_required", "canActivate": true, "packageComplete": true, "applicationChanged": false, "remainingPrerequisitesDeferred": true, "observedAt": "2026-09-29T01:45:02Z", "packageFilesVerified": 2286, "permissionReport": { "schema": "concresca.release-permissions.v1", "directoriesChecked": 1062, "filesChecked": 2289, "directoriesToTighten": 1046, "filesToTighten": 2, "directoriesTightened": 0, "filesTightened": 0, "repairRequired": true, "repairComplete": false, "detailsTruncated": true, "samples": [ { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "public_assets", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false }, { "scope": "other_packaged_source", "kind": "directory", "observedMode": "0777", "targetMode": "0755", "ownerMatched": true, "tightened": false } ] } } A started job runs independently of this browser. Reopening the unlocked page can read its saved result. Host restrictions are reported instead of bypassed. Normal service operation does not require this unlock.

Privacy: exported reports contain fixed technical fields, not access codes, environment values, participant content, full account paths or raw log lines. Removing this PHP file disables the page. concresca-locked-diagnostics-20260927-root-r8