{
    "contract_id": "execution_operational_scanner_contract",
    "version": "v1.0",
    "status": "PASS",
    "created_at": "2026-06-13T19:55:03+00:00",
    "updated_at": "2026-06-13T21:12:15+00:00",
    "scope": "waresites_source_server_observation_contract",
    "product_context": {
        "current_build_name": "Devon",
        "target_product_name": "YEFF AI",
        "desired_domain": "yeff.ai",
        "source_environment": "Waresites",
        "target_environment": "current Devon server clean install target"
    },
    "purpose": "Define the protected operational scanner that reads real Waresites server evidence and prepares the Execution and Monitoring Panel to observe server state before YEFF AI target installation.",
    "source_of_truth": {
        "root": "/home/yeff/public_html/devon",
        "canon": "/home/yeff/public_html/devon/canon",
        "execution_state": "/home/yeff/public_html/devon/canon/execution/state",
        "execution_ui": "/home/yeff/public_html/devon/canon/execution/ui",
        "panel_data": "/home/yeff/public_html/devon/canon/execution/state/dh_sources"
    },
    "target_server_policy": {
        "source_reset_allowed": false,
        "target_reset_allowed": true,
        "target_reset_requires_identity_audit": true,
        "target_install_name": "yeffai"
    },
    "security": {
        "auth_required": true,
        "allowed_methods": [
            "GET"
        ],
        "blocked_methods": [
            "POST",
            "PUT",
            "PATCH",
            "DELETE"
        ],
        "write_policy": "Scanner endpoint must not mutate project files during observation.",
        "raw_secret_output": false,
        "browser_shell_execution": false
    },
    "scanner_rules": {
        "read_only": true,
        "normalize_status_values": [
            "PASS",
            "FAIL",
            "MISSING"
        ],
        "emit_machine_readable_json": true,
        "append_summary_to_execution_ledger": true,
        "separate_source_observation_from_target_installation": true
    },
    "required_evidence": [
        "filesystem_presence",
        "php_lint",
        "json_validity",
        "state_contract_status",
        "ui_served_hash_match",
        "endpoint_auth_guard",
        "ledger_append_status",
        "waresites_source_identity",
        "target_server_identity_before_reset"
    ],
    "planned_endpoint": {
        "path": "/home/yeff/public_html/devon/canon/execution/ui/scanner.php",
        "public_route": "/canon/execution/ui/scanner.php",
        "status": "PASS",
        "next_action": "WIRED_TO_PANEL",
        "created_at": "2026-06-13T21:09:24+00:00"
    },
    "output_contract": {
        "contract_id": "execution_operational_scan",
        "version": "v1.0",
        "status": "PASS|FAIL|MISSING",
        "generated_at": "ISO-8601 UTC",
        "source_environment": "Waresites",
        "checks": [],
        "next_required_action": "string"
    },
    "panel_wiring": {
        "status": "PASS",
        "marker": "OPERATIONAL_SCANNER_PANEL_WIRE_V1",
        "target": "/home/yeff/public_html/devon/canon/execution/ui/index.html",
        "wired_at": "2026-06-13T21:12:15+00:00"
    }
}