{
  "contract": "production-paas-alpha",
  "controls": [
    {
      "id": "identity",
      "status": "met",
      "summary": "Provider-neutral token identity adapter is configured"
    },
    {
      "id": "kms",
      "status": "met",
      "summary": "AWS KMS signs Source Graph cloud tokens and wraps data keys"
    },
    {
      "id": "server-policy",
      "status": "met",
      "summary": "Provider-neutral local policy adapter is configured"
    },
    {
      "id": "durable-storage",
      "status": "met",
      "summary": "AWS S3 storage adapter is configured for Source Graph cloud metadata, archives, objects, and conditional refs"
    },
    {
      "id": "audit",
      "status": "met",
      "summary": "AWS CloudWatch Logs audit sink is configured"
    }
  ],
  "auth": {
    "bearerSource": "missing",
    "tokenEnv": "B8X_SOURCE_GRAPH_CLOUD_TOKEN",
    "tokenPresent": false,
    "identity": {
      "actorId": null,
      "actorKind": null,
      "authenticated": false,
      "errorStatus": null,
      "issuer": null,
      "keyId": null,
      "membershipRole": null,
      "productionSession": false,
      "projectId": null,
      "projectScoped": false,
      "requiredScope": "source:read",
      "scopes": [],
      "sessionId": null,
      "sessionPresent": false,
      "tenantId": null,
      "tenantScoped": false,
      "tokenIdPresent": false
    }
  },
  "demoOnly": true,
  "generatedAt": "2026-06-05T21:25:36.450Z",
  "generalAvailability": false,
  "nextActions": [
    "Set B8X_SOURCE_GRAPH_CLOUD_TOKEN in the Lambda environment or pass a bearer token for protected project probes.",
    "Keep public launch behind the dedicated GA/public-launch evidence gate."
  ],
  "probes": {
    "archive": {
      "fileCount": 0,
      "httpStatus": 401,
      "ok": false,
      "schemaVersion": null
    },
    "audit": {
      "httpStatus": 401,
      "ok": false,
      "productionReadiness": null,
      "recordCount": null,
      "source": null
    },
    "inventory": {
      "archiveFileCount": null,
      "httpStatus": 401,
      "ok": false,
      "objectCount": null,
      "pushCount": null
    },
    "object": {
      "httpStatus": null,
      "objectId": null,
      "ok": false
    },
    "policy": {
      "decision": null,
      "httpStatus": 401,
      "ok": false
    },
    "remoteRef": {
      "hasRef": false,
      "head": null,
      "httpStatus": 401,
      "ok": false,
      "schemaVersion": null
    },
    "verify": {
      "archiveFileCount": null,
      "httpStatus": 401,
      "ok": false,
      "verified": false
    }
  },
  "productionBoundary": {
    "current": "production-paas-alpha",
    "gaApproved": false,
    "gaGateRequired": true,
    "generalAvailability": false,
    "publicLaunchApproved": false,
    "publicLaunchGateRequired": true
  },
  "projectId": "source-graph-alpha",
  "readiness": {
    "contract": "production-paas-alpha",
    "generalAvailability": false,
    "httpStatus": 200,
    "ok": true,
    "ready": true,
    "state": "ready"
  },
  "service": "source-graph-cloud-web-shell",
  "tenantId": "bn"
}