From 31671beb465a7193cc45ddb63cb5e8317e4f7ae5 Mon Sep 17 00:00:00 2001 From: sax3l Date: Tue, 15 Sep 2026 03:13:28 +0200 Subject: [PATCH] =?UTF-8?q?docs(evidence):=20f=C3=A4rska=20prober=202026-0?= =?UTF-8?q?9-15=20=E2=80=94=20runtime=20healthy=20i=20SIAX=20Cloud=20(heal?= =?UTF-8?q?th=20ok/ready=20200/headers=20live,=20edge-DB=2060=20tabeller),?= =?UTF-8?q?=200pt.app=20fortfarande=20Vercel=20402=20(DNS-cutover=20=3D=20?= =?UTF-8?q?Simon-punkt);=20operationalState=20f=C3=B6rblir=20=C3=A4rligt?= =?UTF-8?q?=20'down'?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- evidence/operational-state.json | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/evidence/operational-state.json b/evidence/operational-state.json index 5d4574f..7d4f599 100644 --- a/evidence/operational-state.json +++ b/evidence/operational-state.json @@ -17,7 +17,7 @@ ], "control": "GOV-06", "operationalState": "down", - "checkedAt": "2026-09-07T18:24:24Z", + "checkedAt": "2026-09-15T01:13:00Z", "method": "curl -sS -o /dev/null -D - --max-time 20 , from the public internet (not the tailnet)", "probes": [ { @@ -26,7 +26,7 @@ "url": "https://0pt.app/api/health", "httpStatus": 402, "ok": false, - "note": "server: Vercel; x-vercel-error: DEPLOYMENT_DISABLED. The Vercel deployment is disabled and no Coolify app is serving this hostname yet." + "note": "server: Vercel; x-vercel-error: DEPLOYMENT_DISABLED. DNS pekar fortfarande pa Vercel (216.150.1.1/216.150.1.129) - appen kor friskt i SIAX Cloud (Coolify app shxd6lepxuxfsjsp0ath3z1g pa server6: /api/health ok=true + db=ok, /api/ready 200, security headers live) men publikt hostnam ar fortfarande Vercel-resten. DNS-cutover 0pt.app -> 65.109.19.146 ar SIMON-PUNKT (stoppunkt enligt AGENTS.md)." }, { "fqdn": "api.0pt.app", @@ -34,16 +34,19 @@ "url": "https://api.0pt.app/api/health", "httpStatus": 404, "ok": false, - "note": "server: Vercel; x-vercel-error: DEPLOYMENT_NOT_FOUND. Contract-first target host (contracts/openapi.yaml servers), never deployed. Both / and /api/health return the same 404." + "note": "server: Vercel; x-vercel-error: DEPLOYMENT_NOT_FOUND. Contract-first target host (contracts/openapi.yaml servers), aldrig deployad. Samma 404 pa / och /api/health." } ], "securityHeadersObserved": { - "$comment": "Observed on the 402/404 responses above, i.e. served by Vercel's edge, NOT by this app. This is the evidence for BACKLOG P0-13: everything except Vercel's own HSTS default is absent, and that default does not survive a move to Coolify/Traefik.", + "$comment": "Observed on the 402/404 responses above, i.e. served by Vercel's edge, NOT by this app. Sedan 2026-09-15 satter APPEN sjalv fulla security headers (next.config.mjs headers(), regression-gated) - verifierade live inuti Coolify-containern pa server6: HSTS max-age=63072000 + X-Frame-Options DENY + CSP + ingen X-Powered-By. Publica svaret nar DNS-cutovern skett kommer att servera appens egna headers, inte Vercels.", "strict-transport-security": "max-age=63072000", "content-security-policy": null, "x-frame-options": null, "x-content-type-options": null, "referrer-policy": null, "permissions-policy": null + }, + "runtimeEvidence": { + "$comment": "Runtime-state 2026-09-15 (inuti SIAX Cloud, ej publikt routat): Coolify-app 54 shxd6lepxuxfsjsp0ath3z1g pa server6; container healthy; /api/health {ok:true, db:ok}; /api/ready HTTP 200 {ready:true}; security headers (HSTS/XFO/CSP) observerade; egen Postgres (0pt-edge-postgres, uuid xh70k0qa0cyju840zsvsgoze, migrations 001-013 = 60 tabeller, icke-superuser-roll 0pt_app NOBYPASSRLS); backup-cron 03:15 motor + 03:05 edge-DB; 0pt.app-DNS-cutover kvar hos Simon." } -} +} \ No newline at end of file -- 2.54.0