{
  "schema_version": 1,
  "status": "awaiting_live_oauth_callback",
  "captured_at_utc": "2026-08-29T07:05:31.681Z",
  "scope": "Google identity alias recovery for the canonical administrator account",
  "safety": {
    "raw_google_subjects_in_artifact": false,
    "email_auto_merge": false,
    "user_rows_deleted": 0,
    "learning_rows_deleted": 0,
    "source_preferences_deleted": 0,
    "manual_email_identity_untouched": true
  },
  "backup": {
    "path": "D:\\workspace\\vignette-backups\\vignette-dev-db-vignette-20260829-062958Z.dump",
    "sha256": "c472550091075e4b4e0cc52f7f45720fbcf2ccc11cacbebe4b61f0a7d2cef2e9",
    "pg_restore_list_verified": true
  },
  "implementation": {
    "git_commit": "dba9b75a388783b11d821257e2f91fbcc30bbe1a",
    "git_tree": "14cd4607b07f93e06cef8c912694ae1da8517b8c",
    "migration": "infra/db/init/19_auth_identity_alias.sql",
    "migration_sha256": "e61299acde3967ea8a0d0552bd08ea53821ff74477ad7fd2461af05c7ae4cae7",
    "alias_rows_for_canonical_user": 2,
    "runtime_role_alias_select_verified": true,
    "runtime_role_alias_write_policy_present": false
  },
  "transaction": {
    "isolation": "serializable",
    "first_backup_clone_attempt": "rolled_back_on_unexpected_source_user_preferences_reference",
    "foreign_key_references_scanned": 67,
    "allowed_source_references": [
      "app.auth_session.user_id",
      "app.user_preferences.user_id"
    ],
    "preference_merge": "source-only notification keys merged; canonical conflicts fail closed; source row preserved",
    "backup_clone_recovery_passed": true,
    "backup_clone_removed": true,
    "active_recovery_committed": true,
    "source_sessions_revoked": 1,
    "recovery_audit_events": 1
  },
  "postconditions": {
    "canonical_sessions": 21,
    "canonical_turns": 64,
    "canonical_evaluations": 6,
    "canonical_role": "admin",
    "canonical_admin_access": true,
    "source_sessions": 0,
    "source_turns": 0,
    "source_evaluations": 0,
    "source_active_auth_sessions": 0,
    "source_account_status": "suspended",
    "source_preferences_preserved": 1,
    "users": 1175,
    "sessions": 469,
    "evaluations": 65,
    "orphan_sessions": 0,
    "orphan_turns": 0,
    "orphan_evaluations": 0,
    "duplicate_external_ids": 0
  },
  "tests": {
    "ruff": "passed",
    "focused_auth_runtime": "78 passed, 1 warning",
    "api_and_gateway": "1111 passed, 1 skipped, 1 warning",
    "release_agent": "31 passed",
    "disposable_postgresql_migration": "passed including idempotent reapply and RLS write denial"
  },
  "public_runtime": {
    "release_root": "D:\\workspace\\vignette-public-runtime-dba9b75a3887",
    "clean_detached_head": true,
    "provenance_receipt": "D:\\workspace\\vignette-runtime-evidence\\dba9b75a388783b11d821257e2f91fbcc30bbe1a\\public-runtime-launch-provenance.json",
    "provenance_receipt_sha256": "186529bed76c96f2fd9a7ebcde7d81584253d130812e875782c3017bda23f7a4",
    "api_cwd_verified": true,
    "cloudflared_cwd_verified": true,
    "health": "ok",
    "db": true,
    "engine": true,
    "voice": true,
    "openapi_paths": 129,
    "unauthenticated_auth_status": 401,
    "boot_task_pinned": true,
    "watchdog_task_pinned": true,
    "watchdog_last_task_result": 0,
    "watchdog_failcount": 0
  },
  "public_web": {
    "cloudflare_pages_deployment_id": "ef48c0ae-374e-41fc-b6fd-03f69b26e946",
    "environment": "production",
    "source_commit": "dba9b75a388783b11d821257e2f91fbcc30bbe1a",
    "deployment_url": "https://ef48c0ae.vignette-b1q.pages.dev",
    "custom_domain_login_status": 200,
    "custom_domain_entry": "assets/index-B1rSWL_W.js",
    "custom_domain_entry_sha256": "f8411694ec12101b38aaef40c7804ba36a84030fc1818efc60e6f4db40a6b5bf",
    "login_chunk": "assets/Login-DNNQ624T.js",
    "login_chunk_sha256": "f010f764d64f4e4e2afdde637bbaffccdd630f9158657e5d6217bd3df47e9c1d",
    "single_google_login_cta": true,
    "legacy_google_account_selector_absent": true,
    "dev_login_absent": true,
    "custom_domain_console_warnings_or_errors": 0,
    "public_auth_e2e": "1 passed",
    "preserved_previous_entry": "assets/index-DJPgoeJy.js",
    "preserved_previous_entry_status": 200,
    "immutable_preview_static_assets_match": true,
    "immutable_preview_runtime_green": false,
    "immutable_preview_runtime_note": "The deployment-specific preview origin shows the fail-closed server connection diagnostic; the production custom domain is the accepted runtime origin"
  },
  "browser": {
    "revoked_source_session_redirected_to_login": true,
    "live_gmail_oauth_callback_verified": false,
    "remaining_gate": "User confirmation and Google account selection are required before transmitting the Gmail identity through OAuth"
  }
}