{
  "schema": "platform.statehub-preflight-activation.v1",
  "date": "2026-09-05",
  "task": "RPF-WP-0035-T04",
  "cluster_uid": "a553c742-0115-43d4-99a4-a5ca56fe0786",
  "helm_revision": 59,
  "chart_commit": "49e3182332cd46bd66ea51d77c97a97f65c48001",
  "image": "main-cdff3b7",
  "final_kv_version": 2,
  "repository_rename_performed": false,
  "receipts": {
    "provision": {
      "schema": "platform.statehub-preflight-custody.v1",
      "status": "custody_verified_pending_eso_and_api_acceptance",
      "action": "provision",
      "kv_version": 1,
      "key_generation": "CSPRNG-32-bytes-CAS",
      "exact_read_and_scope_denials": true,
      "wrong_sa": true,
      "wrong_namespace": true,
      "wrong_audience": true,
      "coding_agent_deny_wins": true
    },
    "eso_policy_repair": {
      "schema": "platform.statehub-preflight-custody.v1",
      "status": "custody_verified_pending_eso_and_api_acceptance",
      "action": "repair-policy",
      "exact_read_and_scope_denials": true,
      "wrong_sa": true,
      "wrong_namespace": true,
      "wrong_audience": true,
      "coding_agent_deny_wins": true
    },
    "before_rotation": {
      "schema": "platform.statehub-preflight-api-acceptance.v1",
      "status": "passed",
      "api_only": true,
      "replicas": 1,
      "secret_resource_version": "57218196",
      "results": [
        {
          "key_matches": true,
          "signed_preflight_valid": true,
          "old_token_rejected": null,
          "blockers": [],
          "health": true
        }
      ]
    },
    "rotation": {
      "schema": "platform.statehub-preflight-custody.v1",
      "status": "custody_verified_pending_eso_and_api_acceptance",
      "action": "rotate",
      "kv_version": 2,
      "key_generation": "CSPRNG-32-bytes-CAS",
      "exact_read_and_scope_denials": true,
      "wrong_sa": true,
      "wrong_namespace": true,
      "wrong_audience": true,
      "coding_agent_deny_wins": true
    },
    "after_rotation": {
      "schema": "platform.statehub-preflight-api-acceptance.v1",
      "status": "passed",
      "api_only": true,
      "replicas": 1,
      "secret_resource_version": "57239554",
      "results": [
        {
          "key_matches": true,
          "signed_preflight_valid": true,
          "old_token_rejected": true,
          "blockers": [],
          "health": true
        }
      ]
    }
  }
}