{"status":"healthy","ready":true,"activeCount":0,"maxCount":50,"idleTimeoutMs":3600000,"servers":[],"kfdb":{"total":3554,"byRegistry":{"npm":2031,"pypi":491,"docker":105,"git":1364},"bySecurityScore":{"perfect":5,"safe":256,"moderate":78,"notScored":205},"byGatewaySecurityScore":{"excellent":1619,"good":284,"acceptable":0,"review":12,"notScored":1639},"byDeploymentType":{"localTool":267,"apiWrapper":2418,"hostedService":3,"remoteMcp":629,"unknown":237},"gatewayCompatible":2847,"gatewayIncompatible":707,"enriched":3550,"enrichedV3":0,"enrichedV4":29,"unenriched":4,"runnable":2733,"gatewaySafe":1910,"gatewayRejected":13,"packageMismatchDetected":57,"bySharingPolicy":{"isolated":3390,"poolable":134,"singleton":30},"lastSync":"2026-09-09T21:42:57.119Z","lastSyncDurationMs":7060,"startupComplete":true},"securityPosture":{"mode":"tee","tpm":{"pcrPolicyPreferred":true,"legacyFallbackAllowedUntil":"2026-06-30T23:59:59Z","legacyFallbackUsedCount":0,"legacyFallbackUsedKeys":[],"envFallbackUsedCount":0,"envFallbackUsedKeys":[],"envFallbackMismatchCount":0,"envFallbackMismatchKeys":[],"guardian":{"deviceAccessOk":true,"lastDeviceCheckAt":"2026-09-06T13:39:47Z","lastDeviceFixAt":null,"lastDeviceFixResult":"noop"},"recovery":{"needed":1,"fixed":1,"failed":0,"enabled":true,"lastAttemptAt":"2026-09-06T13:39:39Z","lastResult":"recovered","lastReason":"contexts_resealed","lastRecoverySource":"env","lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-09-06T13:19:23Z","lastSigningKeyRotationReason":"continuity_material_unavailable"}},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"keySources":{"jwtSecret":"tpm_pcr","gatewaySecretKey":"tpm_pcr","proofSigningKey":"tpm_pcr","vaultEncryptionKey":"derived_from_gateway_key"},"crossGatewayTrust":{"mode":"strict","state":"degraded_no_attestation","attestationUrl":"https://agents.rickydata.org/api/attestation/report","challengeUrl":"https://agents.rickydata.org/api/attestation/challenge","expectedJwksHashTrunc16":"a5837daa5427894f9861b6891717f11d","attestedJwksHashTrunc16":"a5837daa5427894f9861b6891717f11d","lastCheckedAt":"2026-09-09T21:44:53.199Z","lastError":"challenge payload REPORT_DATA binding mismatch","reasonCode":"custom_data_binding_failed","attestationAgeMs":222,"nonceBound":true,"counterRollbackDetected":false,"policyHashTrunc16":"a38529171ebc885d60e1828dfd7df3b6","counts":{"trusted":0,"degraded_no_attestation":323,"degraded_hash_mismatch":0,"off":0,"unknown":0},"attestationModeRejectCount":235,"attestationModeDegradedCount":235,"strictShadowWouldRejectCount":235,"strictShadowLastWouldRejectState":"degraded_no_attestation","strictShadowLastWouldRejectReasonCode":"custom_data_binding_failed","strictRejectNonTrustedEnabled":true,"lastTrustedAt":null,"bootstrapCompleted":false,"trustRefreshFailuresConsecutive":323,"strictRejectBeforeFirstTrustedCount":235,"strictRejectWhileRefreshInFlightCount":0},"secretRelease":{"mode":"enforced","decisionsTotal":61,"trustedCount":0,"degradedCount":61,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":61,"wouldBlockDegradedCount":61,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-09-09T21:46:31.242Z","lastState":"degraded","lastReasonCode":"custom_data_binding_failed","lastWouldBlock":true,"lastWouldBlockReasonCode":"custom_data_binding_failed"},"degraded":false,"degradedReasons":[],"sandboxControl":{"enabled":true,"controlMode":"socket-fallback","configuredNetworkPolicy":"restricted","effectiveNetworkPolicy":"restricted","securityOptionsEnforced":{"readOnly":true,"noNewPrivileges":true,"capDropAll":true},"allowBareProcess":false,"bareProcessRejectedCount":0,"runtimeProfile":"session_permissive_isolated","egress":{"enforcementEnabled":true,"rulesApplied":1,"rulesFailed":0},"sandboxd":{"enabled":true,"mode":"enforced","version":"0.1.0","binaryPath":"/usr/local/bin/sandboxd","shadowMismatches":0,"fallbackCount":0,"lastError":null,"lastPlanAt":"2026-09-06T13:46:37.960Z","lastRunAt":"2026-09-06T13:46:37.960Z"}}},"securityMetrics":{"keySourceDistribution":{"tpm_pcr":3,"derived_from_gateway_key":1},"legacyTpmFallbackUsageCount":0,"envTpmFallbackUsageCount":0,"envTpmFallbackMismatchCount":0,"tpmRecovery":{"needed":1,"fixed":1,"failed":0,"enabled":true,"lastResult":"recovered","lastReason":"contexts_resealed","lastAttemptAt":"2026-09-06T13:39:39Z","lastRecoverySource":"env","lastSigningKeyRotated":true,"lastSigningKeyRotationAt":"2026-09-06T13:19:23Z","lastSigningKeyRotationReason":"continuity_material_unavailable"},"tpmGuardian":{"deviceCheckTotal":0,"deviceFixTotal":0,"deviceFixFailed":0},"attestationAvailability":{"teeEnabled":true,"canGenerateReports":true,"reportReasonCode":null,"reportConsecutiveFailures":0,"reportRetryAttempts":1},"crossGatewayTrust":{"state":"degraded_no_attestation","mode":"strict","strictShadowWouldRejectCount":235,"strictShadowLastWouldRejectState":"degraded_no_attestation","strictShadowLastWouldRejectReasonCode":"custom_data_binding_failed","lastTrustedAt":null,"bootstrapCompleted":false,"trustRefreshFailuresConsecutive":323,"strictRejectBeforeFirstTrustedCount":235,"strictRejectWhileRefreshInFlightCount":0},"degraded":{"active":false,"reasons":[]},"secretRelease":{"mode":"enforced","decisionsTotal":61,"trustedCount":0,"degradedCount":61,"unavailableCount":0,"guardErrorCount":0,"wouldBlockTotal":61,"wouldBlockDegradedCount":61,"wouldBlockUnavailableCount":0,"lastDecisionAt":"2026-09-09T21:46:31.242Z","lastState":"degraded","lastReasonCode":"custom_data_binding_failed","lastWouldBlock":true,"lastWouldBlockReasonCode":"custom_data_binding_failed"},"authShadow":{"invalidBearerDowngradeTotal":0,"invalidBearerDowngradeByRoute":{}},"mcpIsolationShadow":{"policyComparisonTotal":0,"policyDivergenceTotal":0,"policyDivergenceBySharingPolicy":{},"anonymousNoSessionTotal":0,"sharedSafetyOverrideTotal":0,"sharedSafetyOverrideByReason":{},"sharedSafetyLastOverrideReason":null}},"secretEncryption":{"model":"hkdf+sign-to-derive","signToDeriveAvailable":true,"sessionCacheEntries":0,"description":"User secrets support HKDF (platform-managed) and Sign-to-Derive (wallet-authorized) encryption at rest; authorized runtimes can use plaintext during a session."},"secretMigration":{"generatedAt":"2026-09-09T21:46:41.849Z","persistenceEnabled":true,"hkdf":{"disk":{"walletBuckets":98,"secretFiles":59,"unreadableEntries":0},"memoryWallets":2,"memoryServers":1,"memorySecrets":1},"signToDerive":{"disk":{"walletBuckets":2,"serverFiles":6,"unreadableEntries":0},"memoryWallets":0,"memoryServers":0,"memorySecrets":0},"overlap":{"comparable":false,"dualPathWallets":null,"reason":"HKDF and sign-to-derive wallet bucket names use different derivation domains, so aggregate scans cannot safely infer wallet overlap without plaintext wallet context."},"scanErrors":[]},"warmup":{"phase":"idle","progress":"idle","errors":0},"discovery":{"working":344,"runtimeVerified":24,"listedOnly":320,"probeFailed":8,"failed":407,"total":751},"requestMetrics":{"success":800,"errors":0,"buckets":61,"userSuccess":798,"userErrors":0,"totalSuccess":71053,"totalErrors":0,"totalUserSuccess":70933,"totalUserErrors":0},"timestamp":"2026-09-09T21:46:41.852Z"}