{"status":"healthy","ready":true,"activeCount":0,"maxCount":50,"idleTimeoutMs":3600000,"servers":[],"kfdb":{"total":3553,"byRegistry":{"npm":2030,"pypi":491,"docker":105,"git":1364},"bySecurityScore":{"perfect":5,"safe":255,"moderate":78,"notScored":205},"byGatewaySecurityScore":{"excellent":1618,"good":284,"acceptable":0,"review":12,"notScored":1639},"byDeploymentType":{"localTool":267,"apiWrapper":2417,"hostedService":3,"remoteMcp":629,"unknown":237},"gatewayCompatible":2846,"gatewayIncompatible":707,"enriched":3549,"enrichedV3":0,"enrichedV4":29,"unenriched":4,"runnable":2732,"gatewaySafe":1909,"gatewayRejected":13,"packageMismatchDetected":57,"bySharingPolicy":{"isolated":3389,"poolable":134,"singleton":30},"lastSync":"2026-08-08T16:47:44.250Z","lastSyncDurationMs":5256,"startupComplete":true},"securityPosture":{"mode":"tee","tpm":{"pcrPolicyPreferred":true,"legacyFallbackAllowedUntil":"2026-06-30T23:59:59Z","legacyFallbackUsedCount":0,"legacyFallbackUsedKeys":[],"envFallbackUsedCount":0,"envFallbackUsedKeys":[],"envFallbackMismatchCount":0,"envFallbackMismatchKeys":[],"guardian":{"deviceAccessOk":true,"lastDeviceCheckAt":"2026-08-03T12:34:03Z","lastDeviceFixAt":null,"lastDeviceFixResult":"noop"},"recovery":{"needed":3,"fixed":3,"failed":0,"enabled":true,"lastAttemptAt":"2026-08-03T12:33:48Z","lastResult":"recovered","lastReason":"contexts_resealed","lastRecoverySource":"generated","lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-08-03T12:33:48Z","lastSigningKeyRotationReason":"continuity_material_unavailable"}},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"keySources":{"jwtSecret":"tpm_pcr","gatewaySecretKey":"tpm_pcr","proofSigningKey":"tpm_pcr","vaultEncryptionKey":"derived_from_gateway_key"},"crossGatewayTrust":{"mode":"strict","state":"trusted","attestationUrl":"https://agents.rickydata.org/api/attestation/report","challengeUrl":"https://agents.rickydata.org/api/attestation/challenge","expectedJwksHashTrunc16":"58106efdb479683a9481771d92631443","attestedJwksHashTrunc16":"58106efdb479683a9481771d92631443","lastCheckedAt":"2026-08-08T16:53:44.987Z","lastError":null,"reasonCode":"trusted","attestationAgeMs":358,"nonceBound":true,"counterRollbackDetected":false,"policyHashTrunc16":"5ac2f9045d27f69bdd119d330a360c04","counts":{"trusted":7560,"degraded_no_attestation":2,"degraded_hash_mismatch":1,"off":0,"unknown":0},"attestationModeRejectCount":0,"attestationModeDegradedCount":0,"strictShadowWouldRejectCount":0,"strictShadowLastWouldRejectState":null,"strictShadowLastWouldRejectReasonCode":null,"strictRejectNonTrustedEnabled":true,"lastTrustedAt":"2026-08-08T16:53:44.987Z","bootstrapCompleted":true,"trustRefreshFailuresConsecutive":0,"strictRejectBeforeFirstTrustedCount":0,"strictRejectWhileRefreshInFlightCount":0},"secretRelease":{"mode":"enforced","decisionsTotal":446,"trustedCount":446,"degradedCount":0,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":0,"wouldBlockDegradedCount":0,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-08-08T16:53:02.014Z","lastState":"trusted","lastReasonCode":"trusted","lastWouldBlock":false,"lastWouldBlockReasonCode":null},"degraded":false,"degradedReasons":[],"sandboxControl":{"enabled":true,"controlMode":"socket-fallback","configuredNetworkPolicy":"restricted","effectiveNetworkPolicy":"restricted","securityOptionsEnforced":{"readOnly":true,"noNewPrivileges":true,"capDropAll":true},"allowBareProcess":false,"bareProcessRejectedCount":0,"runtimeProfile":"session_permissive_isolated","egress":{"enforcementEnabled":true,"rulesApplied":132,"rulesFailed":0},"sandboxd":{"enabled":true,"mode":"enforced","version":"0.1.0","binaryPath":"/usr/local/bin/sandboxd","shadowMismatches":0,"fallbackCount":0,"lastError":null,"lastPlanAt":"2026-08-08T16:53:02.444Z","lastRunAt":"2026-08-08T16:53:02.444Z"}}},"securityMetrics":{"keySourceDistribution":{"tpm_pcr":3,"derived_from_gateway_key":1},"legacyTpmFallbackUsageCount":0,"envTpmFallbackUsageCount":0,"envTpmFallbackMismatchCount":0,"tpmRecovery":{"needed":3,"fixed":3,"failed":0,"enabled":true,"lastResult":"recovered","lastReason":"contexts_resealed","lastAttemptAt":"2026-08-03T12:33:48Z","lastRecoverySource":"generated","lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-08-03T12:33:48Z","lastSigningKeyRotationReason":"continuity_material_unavailable"},"tpmGuardian":{"deviceCheckTotal":0,"deviceFixTotal":0,"deviceFixFailed":0},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"crossGatewayTrust":{"state":"trusted","mode":"strict","strictShadowWouldRejectCount":0,"strictShadowLastWouldRejectState":null,"strictShadowLastWouldRejectReasonCode":null,"lastTrustedAt":"2026-08-08T16:53:44.987Z","bootstrapCompleted":true,"trustRefreshFailuresConsecutive":0,"strictRejectBeforeFirstTrustedCount":0,"strictRejectWhileRefreshInFlightCount":0},"degraded":{"active":false,"reasons":[]},"secretRelease":{"mode":"enforced","decisionsTotal":446,"trustedCount":446,"degradedCount":0,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":0,"wouldBlockDegradedCount":0,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-08-08T16:53:02.014Z","lastState":"trusted","lastReasonCode":"trusted","lastWouldBlock":false,"lastWouldBlockReasonCode":null},"authShadow":{"invalidBearerDowngradeTotal":0,"invalidBearerDowngradeByRoute":{}},"mcpIsolationShadow":{"policyComparisonTotal":212,"policyDivergenceTotal":0,"policyDivergenceBySharingPolicy":{},"anonymousNoSessionTotal":0,"sharedSafetyOverrideTotal":0,"sharedSafetyOverrideByReason":{},"sharedSafetyLastOverrideReason":null}},"secretEncryption":{"model":"hkdf+sign-to-derive","signToDeriveAvailable":true,"sessionCacheEntries":0,"description":"User secrets support HKDF (platform-managed) and Sign-to-Derive (wallet-authorized) encryption at rest; authorized runtimes can use plaintext during a session."},"secretMigration":{"generatedAt":"2026-08-08T16:54:21.402Z","persistenceEnabled":true,"hkdf":{"disk":{"walletBuckets":98,"secretFiles":59,"unreadableEntries":0},"memoryWallets":14,"memoryServers":4,"memorySecrets":7},"signToDerive":{"disk":{"walletBuckets":2,"serverFiles":6,"unreadableEntries":0},"memoryWallets":0,"memoryServers":0,"memorySecrets":0},"overlap":{"comparable":false,"dualPathWallets":null,"reason":"HKDF and sign-to-derive wallet bucket names use different derivation domains, so aggregate scans cannot safely infer wallet overlap without plaintext wallet context."},"scanErrors":[]},"warmup":{"phase":"idle","progress":"idle","errors":0},"discovery":{"working":344,"runtimeVerified":24,"listedOnly":320,"probeFailed":8,"failed":405,"total":749},"requestMetrics":{"success":841,"errors":0,"buckets":61,"userSuccess":833,"userErrors":0,"totalSuccess":127988,"totalErrors":10,"totalUserSuccess":127717,"totalUserErrors":7},"timestamp":"2026-08-08T16:54:21.404Z"}