{"ok":true,"mode":"snapshot","readOnly":true,"schemaVersion":1,"generatedAt":"2026-07-28T00:51:17.341Z","enhancements":{"generatedAt":"2026-07-28T00:51:17.320Z","consoleDepth":4,"rows":[{"feature":"health.states","expectedState":{"ok":true,"states":["MA","NJ"]},"actualState":{"ok":true,"states":["MA","NJ"]},"match":true,"notes":"GET /health lists regulated states"},{"feature":"check.ma_licensed_nba_totals","expectedState":{"allowed":true,"status":200},"actualState":{"allowed":true,"status":200},"match":true,"notes":"demo-ma-licensed straight NBA/totals"},{"feature":"check.nj_unlicensed_block","expectedState":{"allowed":false,"status":403},"actualState":{"allowed":false,"status":403},"match":true,"notes":"demo-unlicensed soccer blocked in NJ"},{"feature":"status.ma_licensed_shape","expectedState":{"ok":true,"state":"MA","licenseStatus":"active","hasLimits":true},"actualState":{"ok":true,"state":"MA","licenseStatus":"active","hasLimits":true},"match":true,"notes":"GET /api/compliance/status panel"},{"feature":"identity.agent_key_prefix","expectedState":{"method":"prefix_lookup","timing":"constant","prefixLen":5},"actualState":{"method":"prefix_lookup","timing":"constant","prefixLen":5},"match":true,"notes":"agent API keys use fixed prefix for O(1) lookup shape"},{"feature":"runtime.deepEquals.strict_vs_loose","expectedState":{"loose":true,"strict":false,"diverges":true},"actualState":{"loose":true,"strict":false,"diverges":true},"match":true,"notes":"Bun.deepEquals(a,b) true; Bun.deepEquals(a,b,true) false — same as toStrictEqual"},{"feature":"runtime.deepEquals.docs_matrix","expectedState":{"ok":true,"cases":6},"actualState":{"ok":true,"cases":6},"match":true,"notes":"docs strict-inequality matrix (undefined, sparse, class vs plain)"},{"feature":"runtime.escapeHTML","expectedState":{"hasLt":true,"hasAmp":true,"hasQuot":true,"rawUnsafe":false},"actualState":{"hasLt":true,"hasAmp":true,"hasQuot":true,"rawUnsafe":false},"match":true,"notes":"Bun.escapeHTML for safe HTML report cells"}],"passed":8,"total":8,"signature":"f3aa87d1eb017f4dfc27c2e4bb6325a8ab39bdc464852057f3fd83c84259554e"},"shadow":{"generatedAt":"2026-07-28T00:51:17.341Z","base":"http://127.0.0.1:62225/","rows":[{"state":"MA","partner":"demo-ma-licensed","licenseStatus":"active","realAllowed":true,"shadowAllowed":true,"match":true},{"state":"NJ","partner":"demo-ma-licensed","licenseStatus":null,"realAllowed":false,"shadowAllowed":false,"match":true,"reason":"Partner not licensed in NJ"},{"state":"MA","partner":"demo-nj-licensed","licenseStatus":null,"realAllowed":false,"shadowAllowed":false,"match":true,"reason":"Partner not licensed in MA"},{"state":"NJ","partner":"demo-nj-licensed","licenseStatus":"active","realAllowed":true,"shadowAllowed":true,"match":true},{"state":"MA","partner":"demo-dual-licensed","licenseStatus":"active","realAllowed":true,"shadowAllowed":true,"match":true},{"state":"NJ","partner":"demo-dual-licensed","licenseStatus":"active","realAllowed":true,"shadowAllowed":true,"match":true},{"state":"MA","partner":"demo-unlicensed","licenseStatus":null,"realAllowed":false,"shadowAllowed":false,"match":true,"reason":"Partner not licensed in MA"},{"state":"NJ","partner":"demo-unlicensed","licenseStatus":null,"realAllowed":false,"shadowAllowed":false,"match":true,"reason":"Partner not licensed in NJ"}],"summary":{"allow":4,"block":4,"mismatches":0},"signature":"0e81169ff971a71fc009ba747e673cf1de5e1472fd8fc11d30b8bda1912ee48e","proof":{"algorithm":"sha3-256","digest":"0e81169ff971a71fc009ba747e673cf1de5e1472fd8fc11d30b8bda1912ee48e","bunVersion":"1.4.0","generatedAt":"2026-07-28T00:51:17.341Z","hmac":"cab811d1cd812a7d6f820a206ed84e672273d873f1281843a84ee248e9aabb2c"}},"geo":{"partners":[{"nodeId":"demo-ma-licensed","stateCode":"MA","age":28,"location":"Boston","zipCode":"02108"},{"nodeId":"demo-nj-licensed","stateCode":"NJ","age":32,"location":"Atlantic City","zipCode":"08401"},{"nodeId":"demo-dual-licensed","stateCode":"MA","age":40,"location":"Cambridge","zipCode":"02139"},{"nodeId":"demo-unlicensed","stateCode":"MA","age":22,"location":"Worcester","zipCode":"01608"}]},"integrity":{"scoreHint":"integrity+hmac","proof":{"algorithm":"sha3-256","digest":"c6a3e96437897d2634b45e4f0cdc39c734f558ee7e0c30dc55cec00a81ca584c","bunVersion":"1.4.0","generatedAt":"2026-07-28T00:51:17.346Z","hmac":"b4ce58a81cfd13016d0223f6312bf08c789aa53298b2130baa9fa5523c683b95"},"checks":[{"id":"enhancements","ok":true,"label":"Enhancements 8/8"},{"id":"shadow","ok":true,"label":"Shadow mismatches 0"},{"id":"sha3","ok":true,"label":"Board integrity sha3-256"},{"id":"hmac","ok":true,"label":"HMAC (REPORT_SIGNING_SECRET from vault/mint)"},{"id":"geo","ok":true,"label":"Geo profiles discrete (state/age/location/zip)"}]},"links":{"portal":"/portal/compliance/","registryEnhancements":"/registry/compliance-enhancements.json","registryShadow":"/registry/compliance-shadow.json","api":"/api/compliance","deepAudit":"bun run ops:audit:deep"},"proton":{"note":"Bake is offline-safe. Deploy uses vault-injected CLOUDFLARE_API_TOKEN. Report HMAC uses REPORT_SIGNING_SECRET (mintable or pass://factorywager/Report Signing Secret/password when vaulted).","inject":"bun run proton:inject:factorywager:reasonix","bakeVault":"bun run compliance:bake:vault","reportSigning":"bun run vault:gap:mint-local  # REPORT_SIGNING_SECRET · or pass://factorywager/Report Signing Secret/password","vaultMap":"docs/harness/tenants/proton-integration.md"}}