{
  "parsed_id": "yeffai_readonly_discovery_parsed_evidence",
  "created_at": "2026-07-08T20:26:39.617009Z",
  "source_output": "/home/yeff/public_html/devon/canon/execution/state/yeffai_readonly_discovery_ssh_output_latest.txt",
  "source_result": "/home/yeff/public_html/devon/canon/execution/state/yeffai_readonly_discovery_ssh_result_latest.json",
  "source_groups": "/home/yeff/public_html/devon/canon/execution/state/ui_item_yeffai_evidence_source_groups_latest.json",
  "status": "PASS",
  "remote_yeffai_mutation": "NO",
  "yeffai_installation_command_executed": "NO",
  "installation_started": "NO",
  "host": {
    "hostname": "vmi2858754",
    "os": null,
    "kernel": "Linux vmi2858754 5.15.0-185-generic #195-Ubuntu SMP Fri Jun 19 17:11:50 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux",
    "docker_active": "YES",
    "containerd_active": "YES",
    "nginx_active": "YES",
    "ssh_active": "YES",
    "http_port_80_listening": "YES",
    "ssh_port_22_listening": "YES"
  },
  "security": {
    "ufw_status": "INACTIVE",
    "permit_root_login": "YES",
    "password_authentication_effective": "YES",
    "password_authentication_config_conflict": "YES",
    "fail2ban_available": "NO",
    "auditd_available": "NO",
    "inotify_tools_available": "NO",
    "ssh_config_sources": [
      "/etc/ssh/sshd_config:33:PermitRootLogin yes",
      "/etc/ssh/sshd_config.d/50-cloud-init.conf:1:PasswordAuthentication yes",
      "/etc/ssh/sshd_config.d/99-yeffai-root-key-auth.conf:1:PubkeyAuthentication yes",
      "/etc/ssh/sshd_config.d/99-yeffai-root-key-auth.conf:3:PermitRootLogin yes",
      "/etc/ssh/sshd_config.d/99-yeffai-root-key-auth.conf:4:PasswordAuthentication yes",
      "/etc/ssh/sshd_config.d/60-cloudimg-settings.conf:1:PasswordAuthentication no"
    ]
  },
  "runtime_observability": {
    "real_paths": [
      "/opt/yeffai/runtime",
      "/opt/yeffai/logs",
      "/opt/yeffai/evidence",
      "/opt/yeffai/state",
      "/var/log",
      "/var/log/auth.log",
      "/var/log/syslog",
      "/var/log/nginx/access.log",
      "/var/log/nginx/error.log",
      "/run/cloud-init/status.json"
    ],
    "service_evidence": [
      "docker.service active running",
      "containerd.service active running",
      "nginx.service active running",
      "ssh.service active running"
    ],
    "log_sources": [
      "/var/log/auth.log",
      "/var/log/syslog",
      "/var/log/nginx/access.log",
      "/var/log/nginx/error.log",
      "/var/log/journal"
    ],
    "runtime_state_candidates": [
      "/opt/yeffai/runtime",
      "/opt/yeffai/state",
      "/opt/yeffai/evidence/latest_state.json"
    ]
  },
  "backup_recovery": {
    "real_paths": [
      "/opt/yeffai/backup",
      "/opt/yeffai/backup/step001_20260701_213316/pre_state.txt",
      "/opt/yeffai/evidence/latest_state.json",
      "/var/backups",
      "/home/yeff/public_html/devon/_backup"
    ],
    "backup_root": "/opt/yeffai/backup",
    "latest_known_backup_file": "/opt/yeffai/backup/step001_20260701_213316/pre_state.txt",
    "latest_state_evidence": "/opt/yeffai/evidence/latest_state.json"
  },
  "commands": {
    "command_marker_count": 15,
    "command_exit_status_count": 15,
    "ssh_exec_status": "0"
  }
}