{
  "schema": "guanghu.zhulan-remote-development-cell-deployment-receipt/v1",
  "receipt_id": "DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813",
  "development_id": "DEV-20260813-005",
  "persona": {
    "persona_id": "ICE-GL-ZL-001",
    "name": "Zhulan",
    "role": "mobile_restricted_remote_development",
    "separate_from": "ICE-GL-ZY001_ZHUYUAN_LOCAL_REVIEW_AND_PUBLICATION"
  },
  "result": "PASS_DEPLOYED_WITH_OWNER_AND_DEVICE_ACCEPTANCE_PENDING",
  "recorded_at": "2026-08-13T10:03:44Z",
  "source": {
    "repository": "REPO-012",
    "baseline": "5f9e83e1b716fd50ee2880b24ea47f83b75d1f8f",
    "deployed_source_commit": "366b8911e416828038b4344353cc22f5fec7b7cf",
    "deployed_source_tree_hash": "d284e9c58a887db06c8f12a10d40f1dea20cacaf2382e22830498c0a23377e13",
    "scope": "server-tools/zhulan-remote-cell",
    "changed_files": 22,
    "source_publication": "TO_BE_BOUND_BY_FINALIZATION_RECEIPT"
  },
  "topology": {
    "front_node": {
      "node_id": "BS-GZ-006",
      "role": "DOMAIN_TLS_AND_REVERSE_PROXY_ONLY",
      "public_entry": "https://guanghulab.com/zhulan/",
      "state_or_source_ownership": false,
      "upstream_listener": "LOOPBACK_ONLY",
      "nginx_configuration_sha256": "4e9961952a3aafdef5687d0d76795cce40429fe81e4a577bac71d6d543f41a9a"
    },
    "runtime_node": {
      "node_id": "BS-SG-003",
      "role": "UI_APPROVAL_OAUTH_MCP_STATE_SANDBOX_GATES_RECEIPTS",
      "runtime_listener": "LOOPBACK_ONLY",
      "runtime_service": "zhulan-remote-cell.service",
      "validation_service": "zhulan-validation-executor.service",
      "front_tunnel_service": "zhulan-front-tunnel.service"
    }
  },
  "runtime_readback": {
    "runtime_service_active": true,
    "validation_service_active": true,
    "front_tunnel_active": true,
    "nginx_active": true,
    "nginx_configuration_test": "PASS",
    "public_ui": "HTTP_200",
    "public_health": "PASS",
    "public_health_runtime_node": "BS-SG-003",
    "owner_endpoint_without_session": "HTTP_401",
    "private_runtime_endpoint_publicly_routed": false,
    "installed_source_commit_readback": "366b8911e416828038b4344353cc22f5fec7b7cf",
    "server_install_receipt_sha256": "62dc2a162c17d714caf1296a2f73f3f52e5eb9491b9f7b71218e8bec311c3857"
  },
  "approval_and_execution_gates": {
    "approval_binding": [
      "persona_id",
      "development_id",
      "repository",
      "base_sha",
      "candidate_branch",
      "paths",
      "actions",
      "expiry"
    ],
    "owner_decision_required": true,
    "owner_can_revoke": true,
    "remote_session_has_central_repository_write_credential": false,
    "candidate_destination": "BS-SG-003_INTERNAL_REVIEW_ONLY",
    "central_publication_requires_zhuyuan_review": true,
    "arbitrary_shell_exposed": false,
    "mcp_tool_count": 11,
    "registered_validation_commands_only": true,
    "pending_request_execution": "DENIED_validation_approval_not_active",
    "arbitrary_command_execution": "DENIED_validation_command_not_registered_for_broker",
    "unexpected_broker_field": "DENIED_validation_request_fields_invalid"
  },
  "sandbox_readback": {
    "public_runtime_no_new_privileges": true,
    "validation_executor_public_listener": false,
    "validation_executor_private_network": true,
    "validation_subprocess_network_routes": 0,
    "workspace_projection": "READ_ONLY",
    "state_projection": "READ_ONLY",
    "secret_projection": "INACCESSIBLE_EMPTY_VIEW",
    "candidate_projection": "INACCESSIBLE_EMPTY_VIEW",
    "system_bwrap_setuid": false,
    "private_bwrap_scope": "ROOT_OWNED_ZHULAN_RUNTIME_GROUP_EXECUTABLE",
    "host_unprivileged_user_namespace_restriction_kept_enabled": true,
    "apparmor_exception_scope": "PRIVATE_BWRAP_PATH_ONLY"
  },
  "validation": {
    "current_source_tests": "PASS_22_OF_22",
    "isolated_server_validation_tests": "PASS_21_OF_21",
    "git_diff_check": "PASS",
    "mcp_tools_list": "PASS_EXACT_11_CONTROLLED_TOOLS",
    "mcp_protected_call_without_oauth": "DENIED_WITH_OAUTH_CHALLENGE",
    "oauth_metadata": "PASS",
    "preexisting_public_routes_unchanged": true,
    "preexisting_fifth_domain_route_status": "HTTP_502_UNCHANGED_NOT_CAUSED_BY_THIS_DEPLOYMENT",
    "preexisting_authz_route_status": "HTTP_404_UNCHANGED_NOT_CAUSED_BY_THIS_DEPLOYMENT"
  },
  "acceptance_boundary": {
    "mobile_layout_source_and_responsive_gate": "PASS",
    "actual_mobile_codex_connection": "NOT_RUN_USER_DEVICE_REQUIRED",
    "actual_mobile_browser_interaction": "NOT_RUN_USER_DEVICE_REQUIRED",
    "owner_approved_positive_end_to_end_execution": "NOT_RUN_REQUIRES_OWNER_APPROVAL",
    "owner_approval_was_forged_for_testing": false,
    "smoke_request_state": "PENDING_UNAPPROVED_NON_EXECUTING"
  },
  "truth_boundary": {
    "source_implementation": true,
    "server_installation": true,
    "runtime_health": true,
    "negative_gate_enforcement": true,
    "mechanical_sandbox_execution": true,
    "mobile_codex_acceptance": false,
    "owner_approved_positive_acceptance": false,
    "central_source_publication_at_receipt_creation": false
  }
}