{
  "schema" : "agentix.satellite.manifest.v1",
  "domain" : "sub5893.wrapster.xyz",
  "primordialDomain" : "sub5893.wrapster.xyz",
  "profile" : "minimal-orbit + satellite-sandwich-kitchen-sink-diagnostic-v0",
  "baseProfile" : "minimal-orbit",
  "profiles" : [ "minimal-orbit", "marketing-funnel", "web-research", "mcp", "llm-agent-piloted" ],
  "gav" : "com.ajaxa.weave.talent.sat:q-hi-hi-satellite-top-bread:0.0.1-SNAPSHOT",
  "buildHash" : "CD2F091723AF7F2782B565BFD3A87FB592138D61CE4779493451A2094AC6E1F6",
  "provisionedAt" : "2026-06-24T17:43:52.804391Z",
  "schemaVersions" : {
    "manifest" : "agentix.satellite.manifest.v1",
    "orbitEventBus" : "agentix.satellite.orbit.eventbus.v1",
    "topologyManifest" : "agentix.satellite.topology.manifest.v1",
    "telemetry" : "agentix.satellite.orbit.telemetryBuffer.v1",
    "identity" : "agentix.satellite.orbit.identity.v1",
    "certificateArtifacts" : "agentix.satellite.certificateArtifactRegistry.v1",
    "assemblyManifestFragment" : "agentix.satellite.topBread.assemblyManifestFragment.v1",
    "assemblyProof" : "agentix.satellite.topBread.assemblyProof.v1"
  },
  "capabilityIds" : [ "public.root-html", "public.health-json", "public.manifest-json", "orbit.mtls", "orbit.eventbus.request-reply", "orbit.cdi-probe", "recipe.filling.probe", "topology.admission", "certificate.artifact.lifecycle", "telemetry.buffer" ],
  "orbitFeatures" : [ "https", "mtls", "websocket", "vertx-eventbus-request-reply", "cdi-probe", "topology-admission" ],
  "topologyAdmissionSupport" : {
    "supportsDryRun" : true,
    "supportsAtomicActivation" : true,
    "supportsRollback" : true,
    "statusRoute" : "/topology/status",
    "eventBusAddress" : "agentix.satellite.topology.admit"
  },
  "routeRegistry" : {
    "schema" : "agentix.satellite.routeRegistry.v1",
    "routes" : [ {
      "path" : "/",
      "method" : "GET",
      "handler" : "root-html"
    }, {
      "path" : "/health",
      "method" : "GET",
      "handler" : "health-json"
    }, {
      "path" : "/manifest",
      "method" : "GET",
      "handler" : "manifest-json"
    }, {
      "path" : "/topology/status",
      "method" : "GET",
      "handler" : "topology-status"
    }, {
      "path" : "/orbit/mtls",
      "method" : "GET",
      "handler" : "mtls-json"
    }, {
      "path" : "/orbit/eventbus",
      "method" : "WEBSOCKET",
      "handler" : "orbit-eventbus"
    }, {
      "path" : "agentix.satellite.recipe.filling.probe",
      "method" : "EVENTBUS",
      "handler" : "recipe-filling-probe"
    }, {
      "path" : "/orbit/telemetry",
      "method" : "GET",
      "handler" : "telemetry-json"
    }, {
      "path" : "/debug/tls",
      "method" : "GET",
      "handler" : "tls-debug-json"
    } ]
  },
  "assemblyArtifacts" : {
    "schema" : "agentix.satellite.topBread.assemblyArtifacts.v1",
    "packagedInRunner" : true,
    "manifestFragment" : {
      "schema" : "agentix.satellite.topBread.assemblyManifestFragment.v1",
      "classpathPath" : "META-INF/satellite-sandwich/manifest-fragment.json"
    },
    "assemblyProof" : {
      "schema" : "agentix.satellite.topBread.assemblyProof.v1",
      "classpathPath" : "META-INF/satellite-sandwich/assembly-proof.json"
    }
  },
  "certificateRegistry" : {
    "schema" : "agentix.satellite.certificateRegistry.v1",
    "baseStationOnlyAcme" : true,
    "satelliteObtainsCertificatesDirectly" : false,
    "publicServerIdentity" : {
      "domain" : "sub5893.wrapster.xyz",
      "provisionedAt" : "2026-06-24T17:43:52.804391Z",
      "certificateFingerprint" : "CD2F091723AF7F2782B565BFD3A87FB592138D61CE4779493451A2094AC6E1F6"
    },
    "orbitControlIdentity" : {
      "schema" : "agentix.satellite.orbit.identity.v1",
      "roles" : [ "basestation", "satellite", "operator", "repair", "telemetry" ],
      "subjectPattern" : "CN={role}.{satelliteDomain},OU=MANU Orbit,O=Agentix",
      "rotation" : {
        "currentCaAlias" : "manu-orbit-ca-current",
        "nextCaAlias" : "manu-orbit-ca-next",
        "stagedTrustWindowSeconds" : 604800
      },
      "auditEvents" : [ "orbit.mtls.accepted", "orbit.mtls.rejected", "orbit.mtls.channel.closed" ]
    },
    "postOrbitProvisioning" : {
      "schema" : "agentix.satellite.certificateArtifactRegistry.v1",
      "storage" : "file-backed-json",
      "path" : "/tmp/agentix-locosy-satellite/certificate-artifacts.json",
      "baseStationOnlyAcme" : true,
      "satelliteObtainsCertificatesDirectly" : false,
      "supportsReceive" : true,
      "supportsInstallDryRun" : true,
      "supportsActivation" : true,
      "activationValidationRequired" : true,
      "activationValidationChecks" : [ "certificate-chain-parses", "private-key-parses", "private-key-matches-leaf-certificate", "san-covers-requested-hostname", "certificate-validity-window", "server-auth-key-usage" ],
      "supportsVerify" : true,
      "supportsRollback" : true,
      "supportsRetire" : true,
      "supportsPurgeExpired" : true,
      "supportsListActive" : true,
      "supportsRuntimeTlsInventory" : true,
      "supportsRuntimeInstallValidation" : true,
      "supportsExpiredActiveSelectionGuard" : true,
      "lifecycleActions" : [ "receive", "dry-run", "activate", "verify", "supersede", "rollback", "retire", "purge-expired", "list-active", "runtime-tls-inventory" ],
      "sniSelectionInvariant" : "Satellite TLS certificate selection is by SNI hostname; the Satellite certificate registry is the source of truth.",
      "sniMaterialKeystorePath" : "/opt/satellite/runtime/tls/sni-keystore.p12",
      "satelliteIdentityDomain" : "sub5893.wrapster.xyz",
      "tlsRoutingHostnameVocabulary" : "Host requested by TLS SNI; not necessarily the Satellite identity/orbit domain.",
      "customerHostedHostnameVocabulary" : "Customer/site hostname admitted by BaseStation policy and served by this Satellite.",
      "unknownSniPolicy" : {
        "unknownSniPresentsRandomCustomerCert" : false,
        "fallbackCertificate" : "primordial-orbit",
        "fallbackHostname" : "sub5893.wrapster.xyz",
        "message" : "Unknown SNI may use only the primordial/orbit fallback, never an unrelated customer cert."
      },
      "renewalPolicy" : {
        "renewBeforeDangerDays" : 30,
        "expiredActiveArtifactsSelectable" : false,
        "selectionGuard" : "active SNI selection excludes artifacts whose activeUntil or certificate notAfter is in the past",
        "nextStep" : "BaseStation renewal scheduler should replace NEAR_EXPIRY artifacts before danger and retire superseded material."
      },
      "noSniPolicy" : {
        "accepted" : false,
        "behavior" : "reject-or-fallback-only",
        "message" : "No-SNI clients are not a supported customer path; use SNI going forward."
      },
      "sniProofEvidenceSchema" : {
        "requestedSni" : "hostname from TLS client hello",
        "connectedIp" : "IP address used by the proof client",
        "presentedSans" : "DNS SANs from presented certificate",
        "selectedArtifactId" : "registry artifact selected for this SNI, or null on fallback",
        "matchType" : "exact, wildcard, fallback, no-sni, invalid-host",
        "passFailReason" : "human-readable proof outcome"
      },
      "sniMatchingSemantics" : {
        "exactBeatsWildcard" : true,
        "longestWildcardSuffixBeatsShorter" : true,
        "generatedProofHostsDoNotOverrideCustomerHosts" : true,
        "fallbackOnlyWhenNoRegistryMatchExists" : true
      },
      "runtimeTlsRoutingMode" : "quarkus-p12-sni-multi-alias",
      "runtimeTlsInventoryValidation" : "After activation, the live runtime PKCS12 and registry-backed SNI material store must expose a loadable key alias whose certificate SAN covers the expected SNI hostname.",
      "activeSniRoutes" : [ {
        "artifactId" : "acme-live-exact-2-sub3161-wrapster-xyz",
        "tlsRoutingHostname" : "live-exact-2.sub3161.wrapster.xyz",
        "customerHostedHostname" : "live-exact-2.sub3161.wrapster.xyz",
        "certificateSubject" : "live-exact-2.sub3161.wrapster.xyz",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "TUA-7Aw_Jt63LlSCVRSsP9xYXJylKL6Cf9hcb7FvvAk",
        "sanList" : [ "live-exact-2.sub3161.wrapster.xyz" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T18:58:20.007615646Z"
      }, {
        "artifactId" : "acme-live-exact-3-sub3300-wtopia-net",
        "tlsRoutingHostname" : "live-exact-3.sub3300.wtopia.net",
        "customerHostedHostname" : "live-exact-3.sub3300.wtopia.net",
        "certificateSubject" : "live-exact-3.sub3300.wtopia.net",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "Hq3R5VfSiVZnYWXbYqB2YLltAU-1K8xZDJ9DybmbGqI",
        "sanList" : [ "live-exact-3.sub3300.wtopia.net" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T06:48:33.942344096Z"
      }, {
        "artifactId" : "acme-live-exact-5-sub3161-wrapster-xyz",
        "tlsRoutingHostname" : "live-exact-5.sub3161.wrapster.xyz",
        "customerHostedHostname" : "live-exact-5.sub3161.wrapster.xyz",
        "certificateSubject" : "live-exact-5.sub3161.wrapster.xyz",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "LsqHB-p_cIwXx934jqgVuegSvSZBYlt0DLfjk15oN_g",
        "sanList" : [ "live-exact-5.sub3161.wrapster.xyz" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T18:58:33.273369805Z"
      }, {
        "artifactId" : "acme-live-exact-sub2300-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub2300.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub2300.zens8ion.com",
        "certificateSubject" : "live-exact.sub2300.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "F1jgl9eCWWF9Zgt8gCb617-muY4ozs606y2qphtGjgs",
        "sanList" : [ "live-exact.sub2300.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T07:10:56.910148125Z"
      }, {
        "artifactId" : "acme-live-exact-sub3161-wrapster-xyz",
        "tlsRoutingHostname" : "live-exact.sub3161.wrapster.xyz",
        "customerHostedHostname" : "live-exact.sub3161.wrapster.xyz",
        "certificateSubject" : "live-exact.sub3161.wrapster.xyz",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "UtBm5XfgY1Kgj9cSVwsq0H01oLRdRfd3jhTdsFJ8OgQ",
        "sanList" : [ "live-exact.sub3161.wrapster.xyz" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T18:58:11.601882576Z"
      }, {
        "artifactId" : "acme-live-exact-sub3300-wtopia-net",
        "tlsRoutingHostname" : "live-exact.sub3300.wtopia.net",
        "customerHostedHostname" : "live-exact.sub3300.wtopia.net",
        "certificateSubject" : "live-exact.sub3300.wtopia.net",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "Y3iO2oJch37FN6sTe8Het4Ol7mg-fAY2lrdq9YOdw1Y",
        "sanList" : [ "live-exact.sub3300.wtopia.net" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T18:41:40.154876100Z"
      }, {
        "artifactId" : "acme-live-exact-sub4190-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub4190.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub4190.zens8ion.com",
        "certificateSubject" : "live-exact.sub4190.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "DoxfFZ-Akg98p_noqAJcKWIleDQQ_WnQfA2diFWLLTg",
        "sanList" : [ "live-exact.sub4190.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T02:09:21.426207988Z"
      }, {
        "artifactId" : "acme-live-exact-sub6654-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub6654.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub6654.zens8ion.com",
        "certificateSubject" : "live-exact.sub6654.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 0,
        "hostClass" : null,
        "certificateSha256" : "GqZNwGFlHGBSWVgIXaDAiTd23qa5qInWAjuzyZg-yn0",
        "sanList" : [ ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T04:10:08.329562962Z"
      }, {
        "artifactId" : "acme-live-exact-sub9279-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub9279.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub9279.zens8ion.com",
        "certificateSubject" : "live-exact.sub9279.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 0,
        "hostClass" : null,
        "certificateSha256" : "eXBhrQwzgiPRoAzl31Isrnni6EwF2ppEOdHl_dDw7S8",
        "sanList" : [ ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : null
      }, {
        "artifactId" : "acme-live-exact-sub9368-wrapster-xyz",
        "tlsRoutingHostname" : "live-exact.sub9368.wrapster.xyz",
        "customerHostedHostname" : "live-exact.sub9368.wrapster.xyz",
        "certificateSubject" : "live-exact.sub9368.wrapster.xyz",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "Ec4aIc8p8uIz_n43ZInIEmj3iWONbGVCRONKW-kZl5E",
        "sanList" : [ "live-exact.sub9368.wrapster.xyz" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-24T07:50:19.340845978Z"
      } ],
      "artifactCount" : 10,
      "activeCount" : 10,
      "receiveAddress" : "agentix.satellite.certificates.receive",
      "dryRunAddress" : "agentix.satellite.certificates.dryRun",
      "activateAddress" : "agentix.satellite.certificates.activate",
      "rollbackAddress" : "agentix.satellite.certificates.rollback",
      "statusAddress" : "agentix.satellite.certificates.status"
    }
  },
  "certificateArtifactRegistry" : {
    "schema" : "agentix.satellite.certificateArtifactRegistry.v1",
    "storage" : "file-backed-json",
    "path" : "/tmp/agentix-locosy-satellite/certificate-artifacts.json",
    "baseStationOnlyAcme" : true,
    "satelliteObtainsCertificatesDirectly" : false,
    "supportsReceive" : true,
    "supportsInstallDryRun" : true,
    "supportsActivation" : true,
    "activationValidationRequired" : true,
    "activationValidationChecks" : [ "certificate-chain-parses", "private-key-parses", "private-key-matches-leaf-certificate", "san-covers-requested-hostname", "certificate-validity-window", "server-auth-key-usage" ],
    "supportsVerify" : true,
    "supportsRollback" : true,
    "supportsRetire" : true,
    "supportsPurgeExpired" : true,
    "supportsListActive" : true,
    "supportsRuntimeTlsInventory" : true,
    "supportsRuntimeInstallValidation" : true,
    "supportsExpiredActiveSelectionGuard" : true,
    "lifecycleActions" : [ "receive", "dry-run", "activate", "verify", "supersede", "rollback", "retire", "purge-expired", "list-active", "runtime-tls-inventory" ],
    "sniSelectionInvariant" : "Satellite TLS certificate selection is by SNI hostname; the Satellite certificate registry is the source of truth.",
    "sniMaterialKeystorePath" : "/opt/satellite/runtime/tls/sni-keystore.p12",
    "satelliteIdentityDomain" : "sub5893.wrapster.xyz",
    "tlsRoutingHostnameVocabulary" : "Host requested by TLS SNI; not necessarily the Satellite identity/orbit domain.",
    "customerHostedHostnameVocabulary" : "Customer/site hostname admitted by BaseStation policy and served by this Satellite.",
    "unknownSniPolicy" : {
      "unknownSniPresentsRandomCustomerCert" : false,
      "fallbackCertificate" : "primordial-orbit",
      "fallbackHostname" : "sub5893.wrapster.xyz",
      "message" : "Unknown SNI may use only the primordial/orbit fallback, never an unrelated customer cert."
    },
    "renewalPolicy" : {
      "renewBeforeDangerDays" : 30,
      "expiredActiveArtifactsSelectable" : false,
      "selectionGuard" : "active SNI selection excludes artifacts whose activeUntil or certificate notAfter is in the past",
      "nextStep" : "BaseStation renewal scheduler should replace NEAR_EXPIRY artifacts before danger and retire superseded material."
    },
    "noSniPolicy" : {
      "accepted" : false,
      "behavior" : "reject-or-fallback-only",
      "message" : "No-SNI clients are not a supported customer path; use SNI going forward."
    },
    "sniProofEvidenceSchema" : {
      "requestedSni" : "hostname from TLS client hello",
      "connectedIp" : "IP address used by the proof client",
      "presentedSans" : "DNS SANs from presented certificate",
      "selectedArtifactId" : "registry artifact selected for this SNI, or null on fallback",
      "matchType" : "exact, wildcard, fallback, no-sni, invalid-host",
      "passFailReason" : "human-readable proof outcome"
    },
    "sniMatchingSemantics" : {
      "exactBeatsWildcard" : true,
      "longestWildcardSuffixBeatsShorter" : true,
      "generatedProofHostsDoNotOverrideCustomerHosts" : true,
      "fallbackOnlyWhenNoRegistryMatchExists" : true
    },
    "runtimeTlsRoutingMode" : "quarkus-p12-sni-multi-alias",
    "runtimeTlsInventoryValidation" : "After activation, the live runtime PKCS12 and registry-backed SNI material store must expose a loadable key alias whose certificate SAN covers the expected SNI hostname.",
    "activeSniRoutes" : [ {
      "artifactId" : "acme-live-exact-2-sub3161-wrapster-xyz",
      "tlsRoutingHostname" : "live-exact-2.sub3161.wrapster.xyz",
      "customerHostedHostname" : "live-exact-2.sub3161.wrapster.xyz",
      "certificateSubject" : "live-exact-2.sub3161.wrapster.xyz",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "TUA-7Aw_Jt63LlSCVRSsP9xYXJylKL6Cf9hcb7FvvAk",
      "sanList" : [ "live-exact-2.sub3161.wrapster.xyz" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T18:58:20.007615646Z"
    }, {
      "artifactId" : "acme-live-exact-3-sub3300-wtopia-net",
      "tlsRoutingHostname" : "live-exact-3.sub3300.wtopia.net",
      "customerHostedHostname" : "live-exact-3.sub3300.wtopia.net",
      "certificateSubject" : "live-exact-3.sub3300.wtopia.net",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "Hq3R5VfSiVZnYWXbYqB2YLltAU-1K8xZDJ9DybmbGqI",
      "sanList" : [ "live-exact-3.sub3300.wtopia.net" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T06:48:33.942344096Z"
    }, {
      "artifactId" : "acme-live-exact-5-sub3161-wrapster-xyz",
      "tlsRoutingHostname" : "live-exact-5.sub3161.wrapster.xyz",
      "customerHostedHostname" : "live-exact-5.sub3161.wrapster.xyz",
      "certificateSubject" : "live-exact-5.sub3161.wrapster.xyz",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "LsqHB-p_cIwXx934jqgVuegSvSZBYlt0DLfjk15oN_g",
      "sanList" : [ "live-exact-5.sub3161.wrapster.xyz" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T18:58:33.273369805Z"
    }, {
      "artifactId" : "acme-live-exact-sub2300-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub2300.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub2300.zens8ion.com",
      "certificateSubject" : "live-exact.sub2300.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "F1jgl9eCWWF9Zgt8gCb617-muY4ozs606y2qphtGjgs",
      "sanList" : [ "live-exact.sub2300.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T07:10:56.910148125Z"
    }, {
      "artifactId" : "acme-live-exact-sub3161-wrapster-xyz",
      "tlsRoutingHostname" : "live-exact.sub3161.wrapster.xyz",
      "customerHostedHostname" : "live-exact.sub3161.wrapster.xyz",
      "certificateSubject" : "live-exact.sub3161.wrapster.xyz",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "UtBm5XfgY1Kgj9cSVwsq0H01oLRdRfd3jhTdsFJ8OgQ",
      "sanList" : [ "live-exact.sub3161.wrapster.xyz" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T18:58:11.601882576Z"
    }, {
      "artifactId" : "acme-live-exact-sub3300-wtopia-net",
      "tlsRoutingHostname" : "live-exact.sub3300.wtopia.net",
      "customerHostedHostname" : "live-exact.sub3300.wtopia.net",
      "certificateSubject" : "live-exact.sub3300.wtopia.net",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "Y3iO2oJch37FN6sTe8Het4Ol7mg-fAY2lrdq9YOdw1Y",
      "sanList" : [ "live-exact.sub3300.wtopia.net" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T18:41:40.154876100Z"
    }, {
      "artifactId" : "acme-live-exact-sub4190-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub4190.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub4190.zens8ion.com",
      "certificateSubject" : "live-exact.sub4190.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "DoxfFZ-Akg98p_noqAJcKWIleDQQ_WnQfA2diFWLLTg",
      "sanList" : [ "live-exact.sub4190.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T02:09:21.426207988Z"
    }, {
      "artifactId" : "acme-live-exact-sub6654-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub6654.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub6654.zens8ion.com",
      "certificateSubject" : "live-exact.sub6654.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 0,
      "hostClass" : null,
      "certificateSha256" : "GqZNwGFlHGBSWVgIXaDAiTd23qa5qInWAjuzyZg-yn0",
      "sanList" : [ ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T04:10:08.329562962Z"
    }, {
      "artifactId" : "acme-live-exact-sub9279-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub9279.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub9279.zens8ion.com",
      "certificateSubject" : "live-exact.sub9279.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 0,
      "hostClass" : null,
      "certificateSha256" : "eXBhrQwzgiPRoAzl31Isrnni6EwF2ppEOdHl_dDw7S8",
      "sanList" : [ ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : null
    }, {
      "artifactId" : "acme-live-exact-sub9368-wrapster-xyz",
      "tlsRoutingHostname" : "live-exact.sub9368.wrapster.xyz",
      "customerHostedHostname" : "live-exact.sub9368.wrapster.xyz",
      "certificateSubject" : "live-exact.sub9368.wrapster.xyz",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "Ec4aIc8p8uIz_n43ZInIEmj3iWONbGVCRONKW-kZl5E",
      "sanList" : [ "live-exact.sub9368.wrapster.xyz" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-24T07:50:19.340845978Z"
    } ],
    "artifactCount" : 10,
    "activeCount" : 10
  },
  "satelliteSandwichRecipe" : {
    "schema" : "agentix.satellite.filling.recipeMarker.v1",
    "recipeId" : "satellite-sandwich-kitchen-sink-diagnostic-v0",
    "recipeVersion" : "0.0.1",
    "moduleGav" : "com.ajaxa.weave.talent.sat:q-in-in-satellite-mid-filling:0.0.1-SNAPSHOT",
    "classification" : "recipe-rollup",
    "defaultFloorStatus" : "recipe-bearing-floor",
    "capabilities" : [ {
      "capabilityId" : "recipe-filling-probe",
      "kind" : "eventbus-proof",
      "classification" : "recipe-bound-proof-marker",
      "proofGate" : "Orbit EventBus request/reply reaches mid filling"
    } ],
    "routes" : [ ],
    "eventBusAddresses" : [ {
      "address" : "agentix.satellite.recipe.filling.probe",
      "direction" : "request-reply",
      "handler" : "SatelliteFillingRecipeMarker.probe",
      "proofRole" : "recipe-filling-live-conversation"
    } ],
    "proofGates" : [ {
      "gateId" : "recipe-filling-live-conversation",
      "category" : "recipe",
      "description" : "Probe agentix.satellite.recipe.filling.probe over Orbit EventBus mTLS and verify the mid filling replies.",
      "required" : true
    } ],
    "topologyBindings" : [ ],
    "telemetryContributors" : [ ],
    "sideEffectDeclarations" : [ ],
    "midFillingPresent" : true,
    "recipeEvidenceSource" : "classpath-descriptor-inference",
    "detectedRecipeSignals" : {
      "allSatalentsStressDescriptorPresent" : true,
      "oaktreeStressDescriptorPresent" : true
    },
    "selectedIngredients" : [ {
      "ingredientId" : "recipe-filling-probe",
      "kind" : "eventbus-proof",
      "address" : "agentix.satellite.recipe.filling.probe",
      "classification" : "recipe-bound-proof-marker",
      "proofGate" : "Orbit EventBus request/reply reaches mid filling"
    } ],
    "repositoryMounts" : [ ],
    "carPayloads" : [ ],
    "nextProof" : "probe agentix.satellite.recipe.filling.probe over Orbit EventBus mTLS"
  },
  "topologyRegistry" : {
    "schema" : "agentix.satellite.topology.registry.v1",
    "storage" : "in-memory-first-slice",
    "futureOaktreePath" : "/ajyl/greenfield/byArch/oaktree/byService/satellite/topology",
    "supportsDryRun" : true,
    "supportsAtomicActivation" : true,
    "supportsRollback" : true,
    "supportsCollisionDetection" : true,
    "admittedCount" : 0,
    "current" : {
      "accepted" : true,
      "count" : 0,
      "topologies" : [ ]
    }
  },
  "orbitIdentity" : {
    "schema" : "agentix.satellite.orbit.identity.v1",
    "roles" : [ "basestation", "satellite", "operator", "repair", "telemetry" ],
    "subjectPattern" : "CN={role}.{satelliteDomain},OU=MANU Orbit,O=Agentix",
    "rotation" : {
      "currentCaAlias" : "manu-orbit-ca-current",
      "nextCaAlias" : "manu-orbit-ca-next",
      "stagedTrustWindowSeconds" : 604800
    },
    "auditEvents" : [ "orbit.mtls.accepted", "orbit.mtls.rejected", "orbit.mtls.channel.closed" ]
  },
  "telemetry" : {
    "schema" : "agentix.satellite.orbit.telemetryBuffer.v1",
    "count" : 2,
    "events" : [ {
      "family" : "orbit.eventbus.echo",
      "at" : "2026-06-24T19:42:57.211764937Z",
      "body" : {
        "probe" : "orbit-live-conversation-probe",
        "domain" : "sub5893.wrapster.xyz",
        "sentAt" : "2026-06-24T19:42:57.054123Z",
        "messageId" : "orbit-live-ba8de81d-12e2-4264-b7c1-171d51416497",
        "clientSubject" : "CN=basestation.manu,OU=MANU Orbit,O=Agentix",
        "clientIssuer" : "CN=MANU Orbit CA for sub5893.wrapster.xyz,OU=MANU Orbit,O=Agentix",
        "channelId" : "orbit-2815651387459075"
      }
    }, {
      "family" : "orbit.cdi.probe",
      "at" : "2026-06-24T19:42:57.599545070Z",
      "body" : {
        "messageId" : "orbit-live-afd20113-49b7-4e1e-8fdb-f869df4806c5",
        "observerId" : "agentix-locosy-satellite.orbit-cdi-probe",
        "observed" : true
      }
    } ]
  }
}