the-custodian/docs/evidence/2026-10-10-security-consolidation/user-readback-execution-preflight.json

{"strict_declared_candidate_valid": true, "checked_at": "2026-10-11T00:50:52.250609+00:00", "live_mutated": false, "raw_output_suppressed": true, "baseline_read_success": true, "baseline_declared_spec_match": true, "baseline_uids_match": true, "objects": [{"kind": "Deployment", "name": "user-engine", "namespace": "user-engine", "uid": "e1c4274a-4b6d-4ea2-b619-e09630b745b0", "resourceVersion": "72943378"}, {"kind": "NetworkPolicy", "name": "user-engine-runtime", "namespace": "user-engine", "uid": "69795547-76bf-4611-beb5-62b4f731099d", "resourceVersion": "70140546"}], "candidate_change_paths": {"Deployment": ["spec/template/spec/containers/portal/env/USER_ENGINE_READBACK_TIMEOUT", "spec/template/spec/containers/portal/env/USER_ENGINE_READBACK_TOKEN_FILE", "spec/template/spec/containers/portal/env/USER_ENGINE_READBACK_URL", "spec/template/spec/containers/portal/image", "spec/template/spec/containers/portal/volumeMounts/flex-auth-readback", "spec/template/spec/volumes/flex-auth-readback"], "NetworkPolicy": ["spec/egress"]}, "only_intended_source_changes": true, "server_dry_run_success": true, "strict_admitted_candidate_valid": true, "server_matches_exact_live_plus_change": true, "server_live_spec_change_paths": {"Deployment": ["spec/template/spec/containers/portal/env/USER_ENGINE_READBACK_TIMEOUT", "spec/template/spec/containers/portal/env/USER_ENGINE_READBACK_TOKEN_FILE", "spec/template/spec/containers/portal/env/USER_ENGINE_READBACK_URL", "spec/template/spec/containers/portal/image", "spec/template/spec/containers/portal/volumeMounts/flex-auth-readback", "spec/template/spec/volumes/flex-auth-readback"], "NetworkPolicy": ["spec/egress"]}, "server_only_intended_changes": true, "server_admitted_objects": [{"kind": "Deployment", "name": "user-engine", "namespace": "user-engine"}, {"kind": "NetworkPolicy", "name": "user-engine-runtime", "namespace": "user-engine"}], "client_diff_success": true, "client_diff_has_changes": true, "client_diff_object_headers": [], "all_checks_pass": true}