{
  "schemaVersion": 1,
  "capturedAt": "2026-07-28T17:36:09.897Z",
  "scope": "blueprint/integrator_api/surface_qc@mastery_gate",
  "overallVerdict": "api-pass-publication-gated",
  "liveEqualsApproved": {
    "architecture": {"status":200,"sha256":"0417714ed33349774744d34f7aac9ab7526b907e39f03a77b98ecb873321d7de","equal":true},
    "dataDictionary": {"status":200,"sha256":"3cd29442014cb347230aac55ff78ceebd051e586c93abc2b9240b0f08e145795","equal":true},
    "customerWebsite": {"status":200,"sha256":"0362d6a97b228bda8499114672fbf209a21be42dccb94201fa8f787a6b19a988","equal":true}
  },
  "decisionAxes": [
    {"axis":"write_granularity","pinnedBy":["ITD-006","ITD-026","ITD-045"]},
    {"axis":"read_shape","pinnedBy":["ITD-027","ITD-037","ITD-044","ITD-045"]},
    {"axis":"query_model","pinnedBy":["ITD-038"]},
    {"axis":"concurrency","pinnedBy":["ITD-009","ITD-045"]},
    {"axis":"idempotency","pinnedBy":["ITD-010","ITD-026","ITD-045","ITD-046"]},
    {"axis":"auth_shape","pinnedBy":["ITD-028","ITD-045","ITD-047","ITD-056"]},
    {"axis":"eventing","pinnedBy":["ITD-012"]},
    {"axis":"error_envelope","pinnedBy":["ITD-013"]},
    {"axis":"tenant_routing","pinnedBy":["ITD-014"]},
    {"axis":"conformance_evidence","pinnedBy":["ITD-015","ITD-031","ITD-035","ITD-044","ITD-045","ITD-046","ITD-054","ITD-056"]},
    {"axis":"privacy_retention","pinnedBy":["ITD-016"]},
    {"axis":"list_endpoints","pinnedBy":["ITD-037"]}
  ],
  "upstreamReality": {
    "case": {"level":"live-wire-proven","flow":"Current canonical and immutable exact Grade 5 creates","host":"platform3-andymontgomery-9773s-projects.vercel.app","responseClass":"2xx","callsPerCreate":12},
    "content": {"level":"live-wire-proven","flow":"Current list, create, and readback flows","host":"platform3-andymontgomery-9773s-projects.vercel.app","responseClass":"2xx","callsPerCreate":8},
    "supabase": {"level":"live-boundary-proven","flow":"Unauthenticated direct REST request","status":401},
    "localMocksCredited": false,
    "historicalSmokeCreditedAsCurrentWireProof": false
  },
  "security": {
    "model":"api_fronted_datastore",
    "anonymousApiRejected":true,
    "crossTenantOperationReadHidden":true,
    "crossTenantBlueprintReadHidden":true,
    "crossTenantCreateFailsBeforeWrite":true,
    "directAnonymousDatastoreRejected":true,
    "secretMaterialPublished":false
  },
  "publicationIdentity": {
    "verdict":"fail-publication-engine",
    "observedAt":"2026-07-28T17:35:54.786Z",
    "verificationCommand":"node verify-hosting.mjs",
    "downloadOrigin":"https://alphatest-blueprint-qc.vercel.app",
    "downloadOriginStatus":200,
    "downloadResourcesChecked":8,
    "downloadResourcesStatus":200,
    "urlOverridesPermitted":false,
    "verifierExit":1,
    "shippedTitlePreconditionPassed":true,
    "primaryAliasExpectedKind":"mastery_gate",
    "primaryAliasObservedKind":"mastery_gate",
    "primaryAliasObservedAuditScope":"blueprint/integrator_api/surface_qc@mastery_gate",
    "primaryAliasContentMatchesAttempt8":true,
    "masteryGateExpectedKind":"mastery_gate",
    "masteryGateObservedKind":"mastery_gate",
    "masteryGateObservedAuditScope":"blueprint/integrator_api/surface_qc@mastery_gate",
    "masteryGateContentMatchesAttempt8":false,
    "adaptiveDiagnosticExpectedKind":"adaptive_diagnostic",
    "adaptiveDiagnosticObservedKind":"mastery_gate",
    "adaptiveDiagnosticObservedAuditScope":"blueprint/integrator_api/surface_qc@mastery_gate",
    "adaptiveDiagnosticContentMatchesAttempt8":true,
    "rerunnerPackaging":"single-file with embedded expected report, matrix, and audit hashes"
  },
  "findings": [
    {
      "severity":"P0",
      "classification":"BUG",
      "category":"publication_engine_302_blind",
      "evidence":"Credential-free verifier exit 1 at 2026-07-28T17:35:54.786Z: the shared primary alias served attempt-8 mastery bytes; the dedicated and master mastery origins served stale attempt-7 mastery bytes; and the adaptive fan served the attempt-8 mastery report title, matrix kind, and audit scope. This proves publication cannot preserve the sibling identities simultaneously. Watchdog evidence contains exactly 21 unique mastery-gate HTTP 302 failures in the bounded 2026-07-28T06:58:31Z–15:44:10Z window; the reviewer recorded the 23rd during attempt 6's driver deploy at 2026-07-28T16:19:18Z and the 24th during attempt 7's driver deploy at 2026-07-28T17:03:39Z.",
      "rootCause":"The fan deploy succeeds, but the post-deploy check targets a Deployment-Protected hash URL that responds with a Vercel SSO 302. ensure_vercel_public_if_401 remediates only 401, so deploy_to_vercel rejects the non-200 before summary/state promotion or master rewrite regeneration.",
      "fixAction":"Treat Vercel SSO 302/303 as deployment protection and disable it before recheck, or verify the public stable project alias; then promote state, regenerate master rewrites, and require the default verifier to exit 0. Notify, escalate, and park this publication path under the livelock guard.",
      "blocking":true
    }
  ],
  "repairRouting": {
    "grid": null,
    "engine": {
      "layer":"loop publication engine",
      "gridDeliverable":null,
      "reason":"The canonical-identity flaw is outside the architecture-to-integration grid; rebuilding any artifact cell cannot change the 302-blind helper.",
      "customerImpact":"The mastery_gate report is reachable now, but publishing it overwrote adaptive_diagnostic; the product cannot maintain both promised fan identities.",
      "downstreamTaint":"Any integration or QC check consuming either Blueprint QC fan can evaluate the wrong artifact after the next redeploy.",
      "schedulerAction":"Escalate and park this publication path now; guard other publication-dependent work until the engine probe is repaired."
    }
  },
  "benchmark": {"name":"Qualys SSL Labs analyze API","url":"https://api.ssllabs.com/api/v3/analyze?host=www.ssllabs.com","fetchedAt":"2026-07-28T17:34:58Z","httpStatus":200,"status":"READY","endpointGrade":"A+","engineVersion":"2.4.2","criteriaVersion":"2009q"}
}