{
  "schema" : "agentix.satellite.manifest.v1",
  "domain" : "sub6010.wrapster.xyz",
  "primordialDomain" : "sub6010.wrapster.xyz",
  "profile" : "minimal-orbit",
  "profiles" : [ "minimal-orbit", "marketing-funnel", "web-research", "mcp", "llm-agent-piloted" ],
  "gav" : "com.ajaxa.weave.talent.sat:q-hi-hi-satellite-top-bread:0.0.1-SNAPSHOT",
  "buildHash" : "A3F23C8389FE91D4E460C6B28E215F9DAAA72A0297C5CEC3FC76F8BA1581C84E",
  "provisionedAt" : "2026-06-22T02:32:25.316679Z",
  "schemaVersions" : {
    "manifest" : "agentix.satellite.manifest.v1",
    "orbitEventBus" : "agentix.satellite.orbit.eventbus.v1",
    "topologyManifest" : "agentix.satellite.topology.manifest.v1",
    "telemetry" : "agentix.satellite.orbit.telemetryBuffer.v1",
    "identity" : "agentix.satellite.orbit.identity.v1",
    "certificateArtifacts" : "agentix.satellite.certificateArtifactRegistry.v1"
  },
  "capabilityIds" : [ "public.root-html", "public.health-json", "public.manifest-json", "orbit.mtls", "orbit.eventbus.request-reply", "orbit.cdi-probe", "topology.admission", "certificate.artifact.lifecycle", "telemetry.buffer" ],
  "routeRegistry" : {
    "schema" : "agentix.satellite.routeRegistry.v1",
    "routes" : [ {
      "path" : "/",
      "method" : "GET",
      "handler" : "root-html"
    }, {
      "path" : "/health",
      "method" : "GET",
      "handler" : "health-json"
    }, {
      "path" : "/manifest",
      "method" : "GET",
      "handler" : "manifest-json"
    }, {
      "path" : "/topology/status",
      "method" : "GET",
      "handler" : "topology-status"
    }, {
      "path" : "/orbit/mtls",
      "method" : "GET",
      "handler" : "mtls-json"
    }, {
      "path" : "/orbit/eventbus",
      "method" : "WEBSOCKET",
      "handler" : "orbit-eventbus"
    }, {
      "path" : "/orbit/telemetry",
      "method" : "GET",
      "handler" : "telemetry-json"
    }, {
      "path" : "/debug/tls",
      "method" : "GET",
      "handler" : "tls-debug-json"
    } ]
  },
  "certificateRegistry" : {
    "schema" : "agentix.satellite.certificateRegistry.v1",
    "baseStationOnlyAcme" : true,
    "satelliteObtainsCertificatesDirectly" : false,
    "publicServerIdentity" : {
      "domain" : "sub6010.wrapster.xyz",
      "provisionedAt" : "2026-06-22T02:32:25.316679Z",
      "certificateFingerprint" : "A3F23C8389FE91D4E460C6B28E215F9DAAA72A0297C5CEC3FC76F8BA1581C84E"
    },
    "orbitControlIdentity" : {
      "schema" : "agentix.satellite.orbit.identity.v1",
      "roles" : [ "basestation", "satellite", "operator", "repair", "telemetry" ],
      "subjectPattern" : "CN={role}.{satelliteDomain},OU=MANU Orbit,O=Agentix",
      "rotation" : {
        "currentCaAlias" : "manu-orbit-ca-current",
        "nextCaAlias" : "manu-orbit-ca-next",
        "stagedTrustWindowSeconds" : 604800
      },
      "auditEvents" : [ "orbit.mtls.accepted", "orbit.mtls.rejected", "orbit.mtls.channel.closed" ]
    },
    "postOrbitProvisioning" : {
      "schema" : "agentix.satellite.certificateArtifactRegistry.v1",
      "storage" : "file-backed-json",
      "path" : "/tmp/agentix-locosy-satellite/certificate-artifacts.json",
      "baseStationOnlyAcme" : true,
      "satelliteObtainsCertificatesDirectly" : false,
      "supportsReceive" : true,
      "supportsInstallDryRun" : true,
      "supportsActivation" : true,
      "activationValidationRequired" : true,
      "activationValidationChecks" : [ "certificate-chain-parses", "private-key-parses", "private-key-matches-leaf-certificate", "san-covers-requested-hostname", "certificate-validity-window", "server-auth-key-usage" ],
      "supportsVerify" : true,
      "supportsRollback" : true,
      "supportsRetire" : true,
      "supportsPurgeExpired" : true,
      "supportsListActive" : true,
      "supportsRuntimeTlsInventory" : true,
      "supportsRuntimeInstallValidation" : true,
      "supportsExpiredActiveSelectionGuard" : true,
      "lifecycleActions" : [ "receive", "dry-run", "activate", "verify", "supersede", "rollback", "retire", "purge-expired", "list-active", "runtime-tls-inventory" ],
      "sniSelectionInvariant" : "Satellite TLS certificate selection is by SNI hostname; the Satellite certificate registry is the source of truth.",
      "sniMaterialKeystorePath" : "/home/jelastic/ssl/quarkus-satellite/sni-keystore.p12",
      "satelliteIdentityDomain" : "sub6010.wrapster.xyz",
      "tlsRoutingHostnameVocabulary" : "Host requested by TLS SNI; not necessarily the Satellite identity/orbit domain.",
      "customerHostedHostnameVocabulary" : "Customer/site hostname admitted by BaseStation policy and served by this Satellite.",
      "unknownSniPolicy" : {
        "unknownSniPresentsRandomCustomerCert" : false,
        "fallbackCertificate" : "primordial-orbit",
        "fallbackHostname" : "sub6010.wrapster.xyz",
        "message" : "Unknown SNI may use only the primordial/orbit fallback, never an unrelated customer cert."
      },
      "renewalPolicy" : {
        "renewBeforeDangerDays" : 30,
        "expiredActiveArtifactsSelectable" : false,
        "selectionGuard" : "active SNI selection excludes artifacts whose activeUntil or certificate notAfter is in the past",
        "nextStep" : "BaseStation renewal scheduler should replace NEAR_EXPIRY artifacts before danger and retire superseded material."
      },
      "noSniPolicy" : {
        "accepted" : false,
        "behavior" : "reject-or-fallback-only",
        "message" : "No-SNI clients are not a supported customer path; use SNI going forward."
      },
      "sniProofEvidenceSchema" : {
        "requestedSni" : "hostname from TLS client hello",
        "connectedIp" : "IP address used by the proof client",
        "presentedSans" : "DNS SANs from presented certificate",
        "selectedArtifactId" : "registry artifact selected for this SNI, or null on fallback",
        "matchType" : "exact, wildcard, fallback, no-sni, invalid-host",
        "passFailReason" : "human-readable proof outcome"
      },
      "sniMatchingSemantics" : {
        "exactBeatsWildcard" : true,
        "longestWildcardSuffixBeatsShorter" : true,
        "generatedProofHostsDoNotOverrideCustomerHosts" : true,
        "fallbackOnlyWhenNoRegistryMatchExists" : true
      },
      "runtimeTlsRoutingMode" : "quarkus-p12-sni-multi-alias",
      "runtimeTlsInventoryValidation" : "After activation, the live runtime PKCS12 and registry-backed SNI material store must expose a loadable key alias whose certificate SAN covers the expected SNI hostname.",
      "activeSniRoutes" : [ {
        "artifactId" : "acme-live-exact-2-sub5356-wtopia-net",
        "tlsRoutingHostname" : "live-exact-2.sub5356.wtopia.net",
        "customerHostedHostname" : "live-exact-2.sub5356.wtopia.net",
        "certificateSubject" : "live-exact-2.sub5356.wtopia.net",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "3E4yqo-gxW-2F2uuasY1OOyyaDR44XnWDCAga4Yvo5g",
        "sanList" : [ "live-exact-2.sub5356.wtopia.net" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-25T23:21:00.255201206Z"
      }, {
        "artifactId" : "acme-live-exact-2-sub6148-zens8ion-com",
        "tlsRoutingHostname" : "live-exact-2.sub6148.zens8ion.com",
        "customerHostedHostname" : "live-exact-2.sub6148.zens8ion.com",
        "certificateSubject" : "live-exact-2.sub6148.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "PtZt_FHV_e85m84H9bBTWJJk0PhuCywqV-8GAzk-9g0",
        "sanList" : [ "live-exact-2.sub6148.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-24T23:07:11.353532318Z"
      }, {
        "artifactId" : "acme-live-exact-2-sub9690-wrapster-xyz",
        "tlsRoutingHostname" : "live-exact-2.sub9690.wrapster.xyz",
        "customerHostedHostname" : "live-exact-2.sub9690.wrapster.xyz",
        "certificateSubject" : "live-exact-2.sub9690.wrapster.xyz",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "pHLHlr03kb3tW2hG05KPoi9IkuNTbaXNaTW0UAA7e7c",
        "sanList" : [ "live-exact-2.sub9690.wrapster.xyz" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-21T19:58:45.019660588Z"
      }, {
        "artifactId" : "acme-live-exact-3-sub6148-zens8ion-com",
        "tlsRoutingHostname" : "live-exact-3.sub6148.zens8ion.com",
        "customerHostedHostname" : "live-exact-3.sub6148.zens8ion.com",
        "certificateSubject" : "live-exact-3.sub6148.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "z7rfyunjlvlcW3-m9nVCV-srSeC_b4WEKifYUKmBFHs",
        "sanList" : [ "live-exact-3.sub6148.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-24T23:07:13.273161272Z"
      }, {
        "artifactId" : "acme-live-exact-4-sub6148-zens8ion-com",
        "tlsRoutingHostname" : "live-exact-4.sub6148.zens8ion.com",
        "customerHostedHostname" : "live-exact-4.sub6148.zens8ion.com",
        "certificateSubject" : "live-exact-4.sub6148.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "zAkhVH36_YhCJgD-pMmeUuU61qvJSJdMdE3EzIy8g4I",
        "sanList" : [ "live-exact-4.sub6148.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-24T23:07:15.124350436Z"
      }, {
        "artifactId" : "acme-live-exact-5-sub5356-wtopia-net",
        "tlsRoutingHostname" : "live-exact-5.sub5356.wtopia.net",
        "customerHostedHostname" : "live-exact-5.sub5356.wtopia.net",
        "certificateSubject" : "live-exact-5.sub5356.wtopia.net",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "vUt3Ob500bxRL1H_rqCNoczEjiIdW31KkoJjF1CQMjM",
        "sanList" : [ "live-exact-5.sub5356.wtopia.net" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-25T23:21:02.176112690Z"
      }, {
        "artifactId" : "acme-live-exact-5-sub6148-zens8ion-com",
        "tlsRoutingHostname" : "live-exact-5.sub6148.zens8ion.com",
        "customerHostedHostname" : "live-exact-5.sub6148.zens8ion.com",
        "certificateSubject" : "live-exact-5.sub6148.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "EDW_yHkS_d_eA-PIe0fvMkwQig-IaP_3nVBUilECFIo",
        "sanList" : [ "live-exact-5.sub6148.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-24T23:07:17.072079567Z"
      }, {
        "artifactId" : "acme-live-exact-5-sub9690-wrapster-xyz",
        "tlsRoutingHostname" : "live-exact-5.sub9690.wrapster.xyz",
        "customerHostedHostname" : "live-exact-5.sub9690.wrapster.xyz",
        "certificateSubject" : "live-exact-5.sub9690.wrapster.xyz",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "H1PRhhuyyKbPoNWDj9dNyztmzDtgj54qyKH4ARBs-n8",
        "sanList" : [ "live-exact-5.sub9690.wrapster.xyz" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-20T20:19:07.662880446Z"
      }, {
        "artifactId" : "acme-live-exact-sub1695-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub1695.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub1695.zens8ion.com",
        "certificateSubject" : "live-exact.sub1695.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "mbsDkFdtdry5716n1bfmlQctLxtfORmrQZ1gmS5i7lg",
        "sanList" : [ "live-exact.sub1695.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-22T00:19:54.988276749Z"
      }, {
        "artifactId" : "acme-live-exact-sub2683-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub2683.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub2683.zens8ion.com",
        "certificateSubject" : "live-exact.sub2683.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "tJ2EPo_LMs_4IORWatZn883HPdjlddWONpWZ6FlMUQo",
        "sanList" : [ "live-exact.sub2683.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-22T00:19:57.714542485Z"
      }, {
        "artifactId" : "acme-live-exact-sub4064-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub4064.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub4064.zens8ion.com",
        "certificateSubject" : "live-exact.sub4064.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "9Tiea5ED18Mr_rlaNtjU5RP_Zs0_kuMHm_ac4Qn8E2Q",
        "sanList" : [ "live-exact.sub4064.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-22T00:19:51.871797013Z"
      }, {
        "artifactId" : "acme-live-exact-sub5356-wtopia-net",
        "tlsRoutingHostname" : "live-exact.sub5356.wtopia.net",
        "customerHostedHostname" : "live-exact.sub5356.wtopia.net",
        "certificateSubject" : "live-exact.sub5356.wtopia.net",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "HHG0lffjT2JRepvTlK-fTyrgh3pAoKNZVsc5uHjiDUY",
        "sanList" : [ "live-exact.sub5356.wtopia.net" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-25T23:20:58.190199814Z"
      }, {
        "artifactId" : "acme-live-exact-sub6148-zens8ion-com",
        "tlsRoutingHostname" : "live-exact.sub6148.zens8ion.com",
        "customerHostedHostname" : "live-exact.sub6148.zens8ion.com",
        "certificateSubject" : "live-exact.sub6148.zens8ion.com",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "rkhBDW6tTaaqqEgdIGY9kMDX4CEV8BNRgEs80kSKgTM",
        "sanList" : [ "live-exact.sub6148.zens8ion.com" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-05-24T23:07:09.426979202Z"
      }, {
        "artifactId" : "acme-live-exact-sub9690-wrapster-xyz",
        "tlsRoutingHostname" : "live-exact.sub9690.wrapster.xyz",
        "customerHostedHostname" : "live-exact.sub9690.wrapster.xyz",
        "certificateSubject" : "live-exact.sub9690.wrapster.xyz",
        "wildcard" : false,
        "routingPriority" : 50,
        "hostClass" : null,
        "certificateSha256" : "-Tz_ucyg2MTOXhgiIk535_Q2MGT8FGjqTgAv9XLRaFE",
        "sanList" : [ "live-exact.sub9690.wrapster.xyz" ],
        "expiry" : {
          "expiresAt" : null,
          "expiredSelectable" : false,
          "status" : "UNKNOWN"
        },
        "lastPresentedAt" : "2026-06-21T19:54:36.847962982Z"
      } ],
      "artifactCount" : 14,
      "activeCount" : 14,
      "receiveAddress" : "agentix.satellite.certificates.receive",
      "dryRunAddress" : "agentix.satellite.certificates.dryRun",
      "activateAddress" : "agentix.satellite.certificates.activate",
      "rollbackAddress" : "agentix.satellite.certificates.rollback",
      "statusAddress" : "agentix.satellite.certificates.status"
    }
  },
  "certificateArtifactRegistry" : {
    "schema" : "agentix.satellite.certificateArtifactRegistry.v1",
    "storage" : "file-backed-json",
    "path" : "/tmp/agentix-locosy-satellite/certificate-artifacts.json",
    "baseStationOnlyAcme" : true,
    "satelliteObtainsCertificatesDirectly" : false,
    "supportsReceive" : true,
    "supportsInstallDryRun" : true,
    "supportsActivation" : true,
    "activationValidationRequired" : true,
    "activationValidationChecks" : [ "certificate-chain-parses", "private-key-parses", "private-key-matches-leaf-certificate", "san-covers-requested-hostname", "certificate-validity-window", "server-auth-key-usage" ],
    "supportsVerify" : true,
    "supportsRollback" : true,
    "supportsRetire" : true,
    "supportsPurgeExpired" : true,
    "supportsListActive" : true,
    "supportsRuntimeTlsInventory" : true,
    "supportsRuntimeInstallValidation" : true,
    "supportsExpiredActiveSelectionGuard" : true,
    "lifecycleActions" : [ "receive", "dry-run", "activate", "verify", "supersede", "rollback", "retire", "purge-expired", "list-active", "runtime-tls-inventory" ],
    "sniSelectionInvariant" : "Satellite TLS certificate selection is by SNI hostname; the Satellite certificate registry is the source of truth.",
    "sniMaterialKeystorePath" : "/home/jelastic/ssl/quarkus-satellite/sni-keystore.p12",
    "satelliteIdentityDomain" : "sub6010.wrapster.xyz",
    "tlsRoutingHostnameVocabulary" : "Host requested by TLS SNI; not necessarily the Satellite identity/orbit domain.",
    "customerHostedHostnameVocabulary" : "Customer/site hostname admitted by BaseStation policy and served by this Satellite.",
    "unknownSniPolicy" : {
      "unknownSniPresentsRandomCustomerCert" : false,
      "fallbackCertificate" : "primordial-orbit",
      "fallbackHostname" : "sub6010.wrapster.xyz",
      "message" : "Unknown SNI may use only the primordial/orbit fallback, never an unrelated customer cert."
    },
    "renewalPolicy" : {
      "renewBeforeDangerDays" : 30,
      "expiredActiveArtifactsSelectable" : false,
      "selectionGuard" : "active SNI selection excludes artifacts whose activeUntil or certificate notAfter is in the past",
      "nextStep" : "BaseStation renewal scheduler should replace NEAR_EXPIRY artifacts before danger and retire superseded material."
    },
    "noSniPolicy" : {
      "accepted" : false,
      "behavior" : "reject-or-fallback-only",
      "message" : "No-SNI clients are not a supported customer path; use SNI going forward."
    },
    "sniProofEvidenceSchema" : {
      "requestedSni" : "hostname from TLS client hello",
      "connectedIp" : "IP address used by the proof client",
      "presentedSans" : "DNS SANs from presented certificate",
      "selectedArtifactId" : "registry artifact selected for this SNI, or null on fallback",
      "matchType" : "exact, wildcard, fallback, no-sni, invalid-host",
      "passFailReason" : "human-readable proof outcome"
    },
    "sniMatchingSemantics" : {
      "exactBeatsWildcard" : true,
      "longestWildcardSuffixBeatsShorter" : true,
      "generatedProofHostsDoNotOverrideCustomerHosts" : true,
      "fallbackOnlyWhenNoRegistryMatchExists" : true
    },
    "runtimeTlsRoutingMode" : "quarkus-p12-sni-multi-alias",
    "runtimeTlsInventoryValidation" : "After activation, the live runtime PKCS12 and registry-backed SNI material store must expose a loadable key alias whose certificate SAN covers the expected SNI hostname.",
    "activeSniRoutes" : [ {
      "artifactId" : "acme-live-exact-2-sub5356-wtopia-net",
      "tlsRoutingHostname" : "live-exact-2.sub5356.wtopia.net",
      "customerHostedHostname" : "live-exact-2.sub5356.wtopia.net",
      "certificateSubject" : "live-exact-2.sub5356.wtopia.net",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "3E4yqo-gxW-2F2uuasY1OOyyaDR44XnWDCAga4Yvo5g",
      "sanList" : [ "live-exact-2.sub5356.wtopia.net" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-25T23:21:00.255201206Z"
    }, {
      "artifactId" : "acme-live-exact-2-sub6148-zens8ion-com",
      "tlsRoutingHostname" : "live-exact-2.sub6148.zens8ion.com",
      "customerHostedHostname" : "live-exact-2.sub6148.zens8ion.com",
      "certificateSubject" : "live-exact-2.sub6148.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "PtZt_FHV_e85m84H9bBTWJJk0PhuCywqV-8GAzk-9g0",
      "sanList" : [ "live-exact-2.sub6148.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-24T23:07:11.353532318Z"
    }, {
      "artifactId" : "acme-live-exact-2-sub9690-wrapster-xyz",
      "tlsRoutingHostname" : "live-exact-2.sub9690.wrapster.xyz",
      "customerHostedHostname" : "live-exact-2.sub9690.wrapster.xyz",
      "certificateSubject" : "live-exact-2.sub9690.wrapster.xyz",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "pHLHlr03kb3tW2hG05KPoi9IkuNTbaXNaTW0UAA7e7c",
      "sanList" : [ "live-exact-2.sub9690.wrapster.xyz" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-21T19:58:45.019660588Z"
    }, {
      "artifactId" : "acme-live-exact-3-sub6148-zens8ion-com",
      "tlsRoutingHostname" : "live-exact-3.sub6148.zens8ion.com",
      "customerHostedHostname" : "live-exact-3.sub6148.zens8ion.com",
      "certificateSubject" : "live-exact-3.sub6148.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "z7rfyunjlvlcW3-m9nVCV-srSeC_b4WEKifYUKmBFHs",
      "sanList" : [ "live-exact-3.sub6148.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-24T23:07:13.273161272Z"
    }, {
      "artifactId" : "acme-live-exact-4-sub6148-zens8ion-com",
      "tlsRoutingHostname" : "live-exact-4.sub6148.zens8ion.com",
      "customerHostedHostname" : "live-exact-4.sub6148.zens8ion.com",
      "certificateSubject" : "live-exact-4.sub6148.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "zAkhVH36_YhCJgD-pMmeUuU61qvJSJdMdE3EzIy8g4I",
      "sanList" : [ "live-exact-4.sub6148.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-24T23:07:15.124350436Z"
    }, {
      "artifactId" : "acme-live-exact-5-sub5356-wtopia-net",
      "tlsRoutingHostname" : "live-exact-5.sub5356.wtopia.net",
      "customerHostedHostname" : "live-exact-5.sub5356.wtopia.net",
      "certificateSubject" : "live-exact-5.sub5356.wtopia.net",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "vUt3Ob500bxRL1H_rqCNoczEjiIdW31KkoJjF1CQMjM",
      "sanList" : [ "live-exact-5.sub5356.wtopia.net" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-25T23:21:02.176112690Z"
    }, {
      "artifactId" : "acme-live-exact-5-sub6148-zens8ion-com",
      "tlsRoutingHostname" : "live-exact-5.sub6148.zens8ion.com",
      "customerHostedHostname" : "live-exact-5.sub6148.zens8ion.com",
      "certificateSubject" : "live-exact-5.sub6148.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "EDW_yHkS_d_eA-PIe0fvMkwQig-IaP_3nVBUilECFIo",
      "sanList" : [ "live-exact-5.sub6148.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-24T23:07:17.072079567Z"
    }, {
      "artifactId" : "acme-live-exact-5-sub9690-wrapster-xyz",
      "tlsRoutingHostname" : "live-exact-5.sub9690.wrapster.xyz",
      "customerHostedHostname" : "live-exact-5.sub9690.wrapster.xyz",
      "certificateSubject" : "live-exact-5.sub9690.wrapster.xyz",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "H1PRhhuyyKbPoNWDj9dNyztmzDtgj54qyKH4ARBs-n8",
      "sanList" : [ "live-exact-5.sub9690.wrapster.xyz" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-20T20:19:07.662880446Z"
    }, {
      "artifactId" : "acme-live-exact-sub1695-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub1695.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub1695.zens8ion.com",
      "certificateSubject" : "live-exact.sub1695.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "mbsDkFdtdry5716n1bfmlQctLxtfORmrQZ1gmS5i7lg",
      "sanList" : [ "live-exact.sub1695.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-22T00:19:54.988276749Z"
    }, {
      "artifactId" : "acme-live-exact-sub2683-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub2683.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub2683.zens8ion.com",
      "certificateSubject" : "live-exact.sub2683.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "tJ2EPo_LMs_4IORWatZn883HPdjlddWONpWZ6FlMUQo",
      "sanList" : [ "live-exact.sub2683.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-22T00:19:57.714542485Z"
    }, {
      "artifactId" : "acme-live-exact-sub4064-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub4064.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub4064.zens8ion.com",
      "certificateSubject" : "live-exact.sub4064.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "9Tiea5ED18Mr_rlaNtjU5RP_Zs0_kuMHm_ac4Qn8E2Q",
      "sanList" : [ "live-exact.sub4064.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-22T00:19:51.871797013Z"
    }, {
      "artifactId" : "acme-live-exact-sub5356-wtopia-net",
      "tlsRoutingHostname" : "live-exact.sub5356.wtopia.net",
      "customerHostedHostname" : "live-exact.sub5356.wtopia.net",
      "certificateSubject" : "live-exact.sub5356.wtopia.net",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "HHG0lffjT2JRepvTlK-fTyrgh3pAoKNZVsc5uHjiDUY",
      "sanList" : [ "live-exact.sub5356.wtopia.net" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-25T23:20:58.190199814Z"
    }, {
      "artifactId" : "acme-live-exact-sub6148-zens8ion-com",
      "tlsRoutingHostname" : "live-exact.sub6148.zens8ion.com",
      "customerHostedHostname" : "live-exact.sub6148.zens8ion.com",
      "certificateSubject" : "live-exact.sub6148.zens8ion.com",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "rkhBDW6tTaaqqEgdIGY9kMDX4CEV8BNRgEs80kSKgTM",
      "sanList" : [ "live-exact.sub6148.zens8ion.com" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-05-24T23:07:09.426979202Z"
    }, {
      "artifactId" : "acme-live-exact-sub9690-wrapster-xyz",
      "tlsRoutingHostname" : "live-exact.sub9690.wrapster.xyz",
      "customerHostedHostname" : "live-exact.sub9690.wrapster.xyz",
      "certificateSubject" : "live-exact.sub9690.wrapster.xyz",
      "wildcard" : false,
      "routingPriority" : 50,
      "hostClass" : null,
      "certificateSha256" : "-Tz_ucyg2MTOXhgiIk535_Q2MGT8FGjqTgAv9XLRaFE",
      "sanList" : [ "live-exact.sub9690.wrapster.xyz" ],
      "expiry" : {
        "expiresAt" : null,
        "expiredSelectable" : false,
        "status" : "UNKNOWN"
      },
      "lastPresentedAt" : "2026-06-21T19:54:36.847962982Z"
    } ],
    "artifactCount" : 14,
    "activeCount" : 14
  },
  "topologyRegistry" : {
    "schema" : "agentix.satellite.topology.registry.v1",
    "storage" : "in-memory-first-slice",
    "futureOaktreePath" : "/ajyl/greenfield/byArch/oaktree/byService/satellite/topology",
    "supportsDryRun" : true,
    "supportsAtomicActivation" : true,
    "supportsRollback" : true,
    "supportsCollisionDetection" : true,
    "admittedCount" : 2,
    "current" : {
      "accepted" : true,
      "count" : 2,
      "topologies" : [ {
        "schema" : "agentix.satellite.topology.manifest.v1",
        "topologyId" : "primordial-orbit-sub6010-wrapster-xyz",
        "version" : "0.1.0",
        "kind" : "minimal-orbit-static-response",
        "owningBaseStationId" : "manu-basestation",
        "satelliteDomain" : "sub6010.wrapster.xyz",
        "admissionMode" : "dry-run-ready",
        "bindings" : [ {
          "kind" : "exact-host-root",
          "host" : "sub6010.wrapster.xyz",
          "path" : "/",
          "handler" : "satellite-root",
          "eventBusAddress" : "agentix.satellite.route.satellite-root"
        } ],
        "experimentId" : "primordial-orbit-smoke",
        "telemetryProfileId" : "orbit-default-telemetry",
        "softFirewallPolicyId" : "orbit-soft-firewall-observe",
        "admissionStatus" : "admitted",
        "installState" : "atomic-activated",
        "dryRunStatus" : "passed",
        "healthVerificationStatus" : "passed",
        "rollbackState" : "rollback-ready",
        "admittedAt" : "2026-06-22T02:35:41.858424820Z",
        "journal" : [ {
          "status" : "inactive",
          "at" : "2026-06-22T02:35:41.858424820Z",
          "message" : "Topology record created inactive before validation"
        }, {
          "status" : "dry-run",
          "at" : "2026-06-22T02:35:41.858424820Z",
          "message" : "Exact host/path bindings passed dry-run validation"
        }, {
          "status" : "validated",
          "at" : "2026-06-22T02:35:41.858424820Z",
          "message" : "Manifest accepted by satellite topology registry"
        }, {
          "status" : "health-verified",
          "at" : "2026-06-22T02:35:41.858424820Z",
          "message" : "Minimal topology registry health check passed"
        }, {
          "status" : "admitted",
          "at" : "2026-06-22T02:35:41.858424820Z",
          "message" : "Topology is available to the satellite runtime"
        }, {
          "status" : "rollback-ready",
          "at" : "2026-06-22T02:35:41.858424820Z",
          "message" : "Previous topology state can be disabled by rollback"
        } ]
      }, {
        "schema" : "agentix.satellite.topology.manifest.v1",
        "topologyId" : "base-sat-orbit-proof-1782095760894",
        "version" : "0.1.0",
        "kind" : "base-sat-orbit-proof-static-response",
        "owningBaseStationId" : "gvq-maven-plugin-base-sat-orbit",
        "satelliteDomain" : "sub6010.wrapster.xyz",
        "admissionMode" : "dry-run-ready",
        "bindings" : [ {
          "kind" : "exact-host-root",
          "host" : "sub6010.wrapster.xyz",
          "path" : "/",
          "handler" : "satellite-root",
          "eventBusAddress" : "agentix.satellite.route.satellite-root"
        } ],
        "experimentId" : "primordial-orbit-smoke",
        "telemetryProfileId" : "orbit-default-telemetry",
        "softFirewallPolicyId" : "orbit-soft-firewall-observe",
        "admissionStatus" : "admitted",
        "installState" : "atomic-activated",
        "dryRunStatus" : "passed",
        "healthVerificationStatus" : "passed",
        "rollbackState" : "rollback-ready",
        "admittedAt" : "2026-06-22T02:36:01.277982206Z",
        "journal" : [ {
          "status" : "inactive",
          "at" : "2026-06-22T02:36:01.277982206Z",
          "message" : "Topology record created inactive before validation"
        }, {
          "status" : "dry-run",
          "at" : "2026-06-22T02:36:01.277982206Z",
          "message" : "Exact host/path bindings passed dry-run validation"
        }, {
          "status" : "validated",
          "at" : "2026-06-22T02:36:01.277982206Z",
          "message" : "Manifest accepted by satellite topology registry"
        }, {
          "status" : "health-verified",
          "at" : "2026-06-22T02:36:01.277982206Z",
          "message" : "Minimal topology registry health check passed"
        }, {
          "status" : "admitted",
          "at" : "2026-06-22T02:36:01.277982206Z",
          "message" : "Topology is available to the satellite runtime"
        }, {
          "status" : "rollback-ready",
          "at" : "2026-06-22T02:36:01.277982206Z",
          "message" : "Previous topology state can be disabled by rollback"
        } ]
      } ]
    }
  },
  "orbitIdentity" : {
    "schema" : "agentix.satellite.orbit.identity.v1",
    "roles" : [ "basestation", "satellite", "operator", "repair", "telemetry" ],
    "subjectPattern" : "CN={role}.{satelliteDomain},OU=MANU Orbit,O=Agentix",
    "rotation" : {
      "currentCaAlias" : "manu-orbit-ca-current",
      "nextCaAlias" : "manu-orbit-ca-next",
      "stagedTrustWindowSeconds" : 604800
    },
    "auditEvents" : [ "orbit.mtls.accepted", "orbit.mtls.rejected", "orbit.mtls.channel.closed" ]
  },
  "telemetry" : {
    "schema" : "agentix.satellite.orbit.telemetryBuffer.v1",
    "count" : 6,
    "events" : [ {
      "family" : "orbit.eventbus.echo",
      "at" : "2026-06-22T02:35:41.233125861Z",
      "body" : {
        "ping" : "eventbus",
        "domain" : "sub6010.wrapster.xyz",
        "messageId" : "manu-338343228827958",
        "clientSubject" : "CN=basestation.manu,OU=MANU Orbit,O=Agentix",
        "clientIssuer" : "CN=MANU Orbit CA for sub6010.wrapster.xyz,OU=MANU Orbit,O=Agentix",
        "channelId" : "orbit-3358938231257473"
      }
    }, {
      "family" : "orbit.cdi.probe",
      "at" : "2026-06-22T02:35:41.548308943Z",
      "body" : {
        "messageId" : "manu-338343551241541",
        "observerId" : "agentix-locosy-satellite.orbit-cdi-probe",
        "observed" : true
      }
    }, {
      "family" : "orbit.topology.admit",
      "at" : "2026-06-22T02:35:41.859793425Z",
      "body" : {
        "accepted" : true,
        "topologyId" : "primordial-orbit-sub6010-wrapster-xyz",
        "topologyAdmissionStatus" : "admitted",
        "installState" : "atomic-activated",
        "rollbackState" : "rollback-ready",
        "satelliteDomain" : "sub6010.wrapster.xyz",
        "admittedAt" : "2026-06-22T02:35:41.858424820Z",
        "requestMessageId" : "manu-338343856921041",
        "manifest" : {
          "schema" : "agentix.satellite.topology.manifest.v1",
          "topologyId" : "primordial-orbit-sub6010-wrapster-xyz",
          "version" : "0.1.0",
          "kind" : "minimal-orbit-static-response",
          "owningBaseStationId" : "manu-basestation",
          "satelliteDomain" : "sub6010.wrapster.xyz",
          "admissionMode" : "dry-run-ready",
          "bindings" : [ {
            "kind" : "exact-host-root",
            "host" : "sub6010.wrapster.xyz",
            "path" : "/",
            "handler" : "satellite-root",
            "eventBusAddress" : "agentix.satellite.route.satellite-root"
          } ],
          "experimentId" : "primordial-orbit-smoke",
          "telemetryProfileId" : "orbit-default-telemetry",
          "softFirewallPolicyId" : "orbit-soft-firewall-observe",
          "admissionStatus" : "admitted",
          "installState" : "atomic-activated",
          "dryRunStatus" : "passed",
          "healthVerificationStatus" : "passed",
          "rollbackState" : "rollback-ready",
          "admittedAt" : "2026-06-22T02:35:41.858424820Z",
          "journal" : [ {
            "status" : "inactive",
            "at" : "2026-06-22T02:35:41.858424820Z",
            "message" : "Topology record created inactive before validation"
          }, {
            "status" : "dry-run",
            "at" : "2026-06-22T02:35:41.858424820Z",
            "message" : "Exact host/path bindings passed dry-run validation"
          }, {
            "status" : "validated",
            "at" : "2026-06-22T02:35:41.858424820Z",
            "message" : "Manifest accepted by satellite topology registry"
          }, {
            "status" : "health-verified",
            "at" : "2026-06-22T02:35:41.858424820Z",
            "message" : "Minimal topology registry health check passed"
          }, {
            "status" : "admitted",
            "at" : "2026-06-22T02:35:41.858424820Z",
            "message" : "Topology is available to the satellite runtime"
          }, {
            "status" : "rollback-ready",
            "at" : "2026-06-22T02:35:41.858424820Z",
            "message" : "Previous topology state can be disabled by rollback"
          } ]
        }
      }
    }, {
      "family" : "orbit.eventbus.echo",
      "at" : "2026-06-22T02:36:00.597053142Z",
      "body" : {
        "probe" : "base-sat-orbit-proof",
        "sentAt" : "2026-06-22T02:36:00.477100Z",
        "messageId" : "proof-3b778682-a810-42f6-9712-676cd5c03c82",
        "clientSubject" : "CN=basestation.manu,OU=MANU Orbit,O=Agentix",
        "clientIssuer" : "CN=MANU Orbit CA for sub6010.wrapster.xyz,OU=MANU Orbit,O=Agentix",
        "channelId" : "orbit-3358957590907840"
      }
    }, {
      "family" : "orbit.cdi.probe",
      "at" : "2026-06-22T02:36:00.941325593Z",
      "body" : {
        "messageId" : "proof-3c7bdc29-0750-492d-a565-385f9b450d50",
        "observerId" : "agentix-locosy-satellite.orbit-cdi-probe",
        "observed" : true
      }
    }, {
      "family" : "orbit.topology.admit",
      "at" : "2026-06-22T02:36:01.278078008Z",
      "body" : {
        "accepted" : true,
        "topologyId" : "base-sat-orbit-proof-1782095760894",
        "topologyAdmissionStatus" : "admitted",
        "installState" : "atomic-activated",
        "rollbackState" : "rollback-ready",
        "satelliteDomain" : "sub6010.wrapster.xyz",
        "admittedAt" : "2026-06-22T02:36:01.277982206Z",
        "requestMessageId" : "proof-c5dda07c-0f8c-4086-bde9-2e428ca8dbce",
        "manifest" : {
          "schema" : "agentix.satellite.topology.manifest.v1",
          "topologyId" : "base-sat-orbit-proof-1782095760894",
          "version" : "0.1.0",
          "kind" : "base-sat-orbit-proof-static-response",
          "owningBaseStationId" : "gvq-maven-plugin-base-sat-orbit",
          "satelliteDomain" : "sub6010.wrapster.xyz",
          "admissionMode" : "dry-run-ready",
          "bindings" : [ {
            "kind" : "exact-host-root",
            "host" : "sub6010.wrapster.xyz",
            "path" : "/",
            "handler" : "satellite-root",
            "eventBusAddress" : "agentix.satellite.route.satellite-root"
          } ],
          "experimentId" : "primordial-orbit-smoke",
          "telemetryProfileId" : "orbit-default-telemetry",
          "softFirewallPolicyId" : "orbit-soft-firewall-observe",
          "admissionStatus" : "admitted",
          "installState" : "atomic-activated",
          "dryRunStatus" : "passed",
          "healthVerificationStatus" : "passed",
          "rollbackState" : "rollback-ready",
          "admittedAt" : "2026-06-22T02:36:01.277982206Z",
          "journal" : [ {
            "status" : "inactive",
            "at" : "2026-06-22T02:36:01.277982206Z",
            "message" : "Topology record created inactive before validation"
          }, {
            "status" : "dry-run",
            "at" : "2026-06-22T02:36:01.277982206Z",
            "message" : "Exact host/path bindings passed dry-run validation"
          }, {
            "status" : "validated",
            "at" : "2026-06-22T02:36:01.277982206Z",
            "message" : "Manifest accepted by satellite topology registry"
          }, {
            "status" : "health-verified",
            "at" : "2026-06-22T02:36:01.277982206Z",
            "message" : "Minimal topology registry health check passed"
          }, {
            "status" : "admitted",
            "at" : "2026-06-22T02:36:01.277982206Z",
            "message" : "Topology is available to the satellite runtime"
          }, {
            "status" : "rollback-ready",
            "at" : "2026-06-22T02:36:01.277982206Z",
            "message" : "Previous topology state can be disabled by rollback"
          } ]
        }
      }
    } ]
  }
}