{
  "contract_version": "1.1.0",
  "source_contract": "devon-panel-host-runtime",
  "observed_at_utc": "2026-04-19T21:14:36Z",
  "host_snapshot": {
    "host_id": "devon-control-plane",
    "hostname": "Devon",
    "overall_status": "PASS",
    "cpu": {
      "status": "PASS",
      "usage_pct": 0.0,
      "core_count": 6
    },
    "memory": {
      "status": "PASS",
      "used_mb": 586.83,
      "total_mb": 11956.82,
      "usage_pct": 4.91
    },
    "disk": {
      "status": "PASS",
      "used_gb": 4.72,
      "total_gb": 96.73,
      "usage_pct": 4.88
    },
    "load": {
      "status": "PASS",
      "load_1m": 0.0,
      "load_5m": 0.03,
      "load_15m": 0.0
    },
    "network": {
      "status": "PASS",
      "rx_bytes": 1597782461,
      "tx_bytes": 866474225
    },
    "services": [
      {
        "name": "docker",
        "status": "PASS",
        "active": true
      },
      {
        "name": "nginx",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "apache2",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "httpd",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "php-fpm",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "mysql",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "mariadb",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "redis-server",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "redis",
        "status": "FAIL",
        "active": false
      },
      {
        "name": "ssh",
        "status": "PASS",
        "active": true
      },
      {
        "name": "fail2ban",
        "status": "PASS",
        "active": true
      }
    ],
    "ports": [
      {
        "port": 22,
        "status": "PASS"
      },
      {
        "port": 53,
        "status": "PASS"
      }
    ],
    "mounts": [
      {
        "target": "/",
        "usage_pct": "5%",
        "size": "97G",
        "used": "4.8G",
        "status": "PASS"
      }
    ],
    "security": {
      "status": "PASS",
      "ufw": {
        "status": "PASS",
        "installed": true,
        "active": true,
        "ssh_rule_present": true,
        "raw_status": "Status: active\nLogging: on (low)\nDefault: deny (incoming), allow (outgoing), deny (routed)\nNew profiles: skip\n\nTo                         Action      From\n--                         ------      ----\n22/tcp                     ALLOW IN    Anywhere                   # Devon SSH\n22/tcp (v6)                ALLOW IN    Anywhere (v6)              # Devon SSH"
      },
      "fail2ban": {
        "status": "PASS",
        "installed": true,
        "active": true,
        "sshd_jail_present": true,
        "sshd_jail_ok": true
      },
      "ssh_hardening": {
        "status": "PASS",
        "port": 22,
        "permitrootlogin": "without-password",
        "passwordauthentication": "no",
        "pubkeyauthentication": "yes",
        "x11forwarding": "no",
        "allowtcpforwarding": "no"
      }
    }
  },
  "status_rules": {
    "PASS": "observable host evidence exists and validation passes",
    "FAIL": "observable host evidence exists and validation fails",
    "MISSING": "host evidence does not exist observably"
  }
}