CHAT_OUTPUT_BEGIN
COMMAND_ID=HOMELAB-CLUSTER-KB-V1-READER-V3-EXACT-AUTH-ROUTE-CONTRACT-READ-ONLY-20260805T083200Z
STATUS=OK
RC=0
HOST=pve01
MODE=verify
COMPONENT=cluster-knowledge-base-error-system
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
COMMAND_SHA256=d3dd61bab9f4949e7f749d3d6f8efa5dcafd3b09abf96bcbf3119c1aee127bc9
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=9c385a174b858d468f1366d42c1b90cb713b245cb1e7ebcff39242de9d3439b3
SANITIZED_OUTPUT_SHA256=9c385a174b858d468f1366d42c1b90cb713b245cb1e7ebcff39242de9d3439b3
OUTPUT_BEGIN
HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-EXACT-AUTH-ROUTE-CONTRACT-READ-ONLY-20260805T083200Z","command_rc":0,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
{"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-EXACT-AUTH-ROUTE-CONTRACT-READ-ONLY-20260805T083200Z","command_rc":0,"correction_of_previous_logic_gaps":[{"exact_fix":"parse the exact Python AST, resolve environment-backed constants, derive path/header/query comparisons and probe only source-supported contracts","proven_gap":"the exact Reader listener answered GET / with 404 and no JSON while the prior scanner found no auth candidates","regression_test":"f-string capability routes, header aliases and compare_digest contracts must be resolved without exposing capability values"}],"error_fingerprint":"dd4ebd816db1715f38801e549b40d82b48b543981dc18cf6c6345157419ecd90","latest_exact_result_basis":{"capsule_sha256":"c8a9a1a97b0b67593ce23bdf79a25d14552b86594c5aae3ec7d2fd71a560de51","changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-PROTOCOL-SPECIFIC-READ-ONLY-20260805T082100Z","command_rc":0,"control_plane_error":null,"error_fingerprint":"820f5c9a664dd86192521678e7c5790c5c6adcb442b513f49dadf4f23286d5eb","mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBE","output_complete":true,"output_sha256":"ae1cb3bb2f5fe11da04b061be5e8c386bbebdff5242cb20eb9bcdbc1fe2d7291","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_HTTP_ENDPOINT_REACHED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE","runner_document_rc":0,"runner_json_sha256":"e4eff0a71258655d38624da74dc180cd89946620ab94f2ac222d2b04764aff70","runner_rc":0,"runner_text_sha256":"631196a81a5d56751a14c7fa5001092d3421c0b0d3f88fdafdc528653db49e5f","runner_wrapper_matches_document":true,"status":"OK"},"mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_HANDLER_CONTROL_FLOW_TRACE","output_truncated_in_json":false,"owned_listeners":[{"address_class":"private","address_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9","family":"ipv4","inode":"24795","port":18788}],"pre_command_known_error_gate":{"checked":true,"items":[{"id":"candidate-scan-limit-20260805","prevention":"exact files only; hard source, response, route, probe and output limits"},{"id":"runner-wrapper-mismatch-20260805","prevention":"single compact JSON below 42000 bytes; no raw sources or response bodies"},{"id":"gitea-owner-hardcoded-20260805","prevention":"no repository owner or repository URL is assumed"},{"id":"gitea-git-auth-unavailable-20260805","prevention":"no Git or Gitea authentication retry in this command"},{"id":"pvesh-adapter-context-unreadable-20260805","prevention":"pvesh is not called"},{"id":"gitea-process-self-match-20260805","prevention":"Reader identity is bound to exact systemd ControlGroup"},{"id":"sanitize-non-string-attributeerror-20260805","prevention":"sanitize converts Any to str; embedded bool regression test"},{"id":"reader-v3-skipped-on-nonauthoritative-inventory-20260805","prevention":"this command directly probes Reader V3"},{"id":"reader-path-env-misclassified-as-route-20260805","prevention":"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes"},{"id":"reader-loopback-only-probe-20260805","prevention":"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed"},{"id":"reader-capability-not-secret-20260805","prevention":"all capability values are secret; values and concrete secret-bearing routes are never output"},{"id":"reader-v3-root-404-no-json-20260805","prevention":"derive auth and route only from exact AST comparisons, source literals and process environment before probing"}]},"prevention_test":{"must_run_before_future_cluster_or_gitea_commands":true,"name":"reader_v3_exact_auth_route_contract_preflight","requirements":["verify exact Reader source SHA","bind process and socket to exact systemd ControlGroup","resolve auth and route from exact AST and process environment","never output capability values or private addresses","probe only source-supported request contracts","accept inventory only from successful JSON with normalized guest rows"]},"process_environment":{"capability_name_present":true,"names":["HOME","HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT","INVOCATION_ID","JOURNAL_STREAM","LANG","LOGNAME","MEMORY_PRESSURE_WATCH","MEMORY_PRESSURE_WRITE","PATH","SHELL","SYSTEMD_EXEC_PID","USER"],"secret_name_count":1},"protocol_probe":{"auth_candidate_count":0,"gitea_candidates":[],"guest_count":0,"probes":[],"request_contract_count":0,"successful_inventory_routes":[]},"rc":0,"read_only":true,"ready_for_guest_probe":false,"result_projection":{"bytes_before_projection":6744,"compacted":false,"max_bytes":36000},"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_LISTENER_FOUND_BUT_AST_AUTH_ROUTE_CONTRACT_NOT_DERIVED","schema":1,"source_files":[{"actual_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","bytes":580,"expected_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","matches_expected":true,"path":"/etc/systemd/system/homelab-reader-v3.service"},{"actual_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","bytes":3539,"expected_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","matches_expected":true,"path":"/usr/local/sbin/homelab-reader-server-v3"}],"source_semantics":{"ast_parse_ok":false,"auth_variants":[{"basis":"control","header_names":[],"label":"none"}],"handler_count":2,"header_contract_count":0,"header_names":[],"parse_errors":[{"error":"invalid decimal literal (homelab-reader-v3.service, line 8)","path_sha256":"af7ae852500810b83c8d7bad0284356de382714a71c8f64ba13778dbce5bf354"}],"protocol_markers":["basehttprequesthandler","content-type","do_get","http.server","send_response"],"query_contract_count":0,"query_keys":[],"resolved_scope_names":["CAPABILITY","PORT","allow_reuse_address","server_version"],"route_template_count":0,"route_templates":[],"source_environment_references":["HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT"]},"source_state":"MATCH","status":"OK","systemd_identity":{"identity_valid":true,"pid_count":1,"probe":{"duration_seconds":0.005,"rc":0,"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stderr_truncated":false,"stdout_bytes":375,"stdout_sha256":"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9","stdout_truncated":false},"properties":{"ActiveState":"active","ControlGroup":"/system.slice/homelab-reader-v3.service","ExecStart_present":true,"ExecStart_sha256":"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379","FragmentPath":"/etc/systemd/system/homelab-reader-v3.service","LoadState":"loaded","MainPID":"1282","SubState":"running"}}}

OUTPUT_END
CHAT_OUTPUT_END