{
  "schema": "guanghu.ops-experience-receipt/v1",
  "receipt_id": "EXP-20260726-007-AUTHENTICATED-ROUTE-IS-NOT-HEALTH",
  "intent": "Start and health-check the isolated enterprise code-channel candidate.",
  "scope": "service-health-verification",
  "input": "The start script checked /api/v1/version while REQUIRE_SIGNIN_VIEW was enabled.",
  "evidence": [
    "Forgejo started and remained alive.",
    "The version route returned HTTP 403.",
    "The error trap stopped the candidate cleanly.",
    "The public /api/healthz route later returned status pass."
  ],
  "decision": "A protected functional route must not be used as an unauthenticated liveness probe.",
  "action": "Changed the candidate health probe to /api/healthz and repeated the full one-time Agent unlock.",
  "observed_result": "Cache and database checks passed, the process stayed running, and a deployment receipt was written.",
  "correction": "Separate liveness, readiness, authenticated functionality, and owner-login checks in every deployment plan.",
  "invariant_id": "INV-HEALTH-PROBE-AUTH-SEPARATION",
  "invariant": "A 401 or 403 from an authenticated product route does not prove service failure; health must use a designated probe.",
  "verification": [
    "Check the designated health endpoint.",
    "Confirm the process and loopback listener.",
    "Test authenticated product functionality as a separate proof."
  ],
  "receipt_path": "deployment/AW-HLCC-DEPLOYMENT-CHECKPOINT-20260726.hdlp",
  "promotion_state": "CANDIDATE_ONLY",
  "recorded_at": "2026-07-26T22:15:00+08:00"
}