{
  "observed_at": "2026-09-14T00:52:49.599981+00:00",
  "status": "applied_verified",
  "scope": "public browser registration only; no tokens or approval entries issued by this tool",
  "client_id": "informed-decision-approver",
  "existing_registration": false,
  "before": {
    "status": 400,
    "error": "invalid_profile_usage",
    "description": "unknown client_id",
    "feature": "client_id"
  },
  "phase": "config_applied",
  "deployment": {
    "deployment_uid": "99ddd83c-cb3f-4847-bcf8-35f1aa87627f",
    "generation": 52,
    "pod_uid": "0da55639-8139-4119-95f5-7415ca2a3052",
    "single_ready_replica": true
  },
  "image_unchanged": "forgejo.coulomb.social/coulomb/key-cape@sha256:db2c5a13a47839049349e881c8d19bc39f720ee69d8518f9f2eba2b1f98af9d5",
  "unrelated_config_preserved": true,
  "checks": {
    "valid_pkce": {
      "status": 302,
      "redirect_host": "auth.coulomb.social"
    },
    "wrong_redirect": {
      "status": 400,
      "error": "invalid_profile_usage",
      "description": "redirect_uri does not match any registered URI",
      "feature": "redirect_uri"
    },
    "consume_scope": {
      "status": 400,
      "error": "invalid_profile_usage",
      "description": "requested scope is not allowed",
      "feature": "scope"
    },
    "missing_pkce": {
      "status": 400,
      "error": "invalid_profile_usage",
      "description": "Requests to /authorize must include a code_challenge (PKCE S256 required).",
      "feature": "missing_pkce"
    }
  },
  "review_site_login_chain": [
    {
      "status": 303,
      "redirect_host": "kc.coulomb.social"
    },
    {
      "status": 302,
      "redirect_host": "auth.coulomb.social"
    }
  ]
}