{
  "auth_packet_path": "docs/reports/leo-working-state-20260709/working-leo-production-apply-authorization-packet-current.json",
  "checks": {
    "auth_packet_not_authorized": true,
    "auth_packet_not_executed": true,
    "auth_packet_ready": true,
    "authorization_text_matches_expected": false,
    "authorization_text_present": false,
    "deployed_sha_shape": false,
    "operator_identity_present": false,
    "telegram_visible_post_not_authorized": true
  },
  "claim_ceiling": "This verifier only checks whether an authorization string is valid for the current deployed SHA. It does not run SQL, does not mutate production, and does not prove canonical rows were changed.",
  "deployed_sha": "",
  "expected_authorization_text": "I authorize production DB apply for the integrated Working Leo packet set on VPS using deployed commit <DEPLOYED_SHA_READBACK> in this order: mapped-rich-base, cross-surface-anchor, rio-strategy-context, governance-concept-schema, helmer-7powers. Run preflight immediately before each phase, run the authorized apply SQL, run every postflight, run the non-posting direct-claim regression and scorer, capture service and cleanup readbacks, validate the production receipt, and do not post Telegram-visible messages unless separately authorized.",
  "fresh_deployed_sha_required": true,
  "generated_at_utc": "2026-07-13T03:34:29.515119+00:00",
  "mode": "authorization_verification_only",
  "next_action_if_verified": [
    "Re-run production preflight immediately before each packet phase.",
    "Run apply and postflight SQL in the retained manifest order.",
    "Capture apply/postflight/regression/service/cleanup logs in the session-plan paths.",
    "Write and validate the production receipt before claiming canonical rows changed."
  ],
  "operator_identity": "",
  "production_apply_authorization_present": false,
  "production_apply_executed": false,
  "provided_authorization_text_hashable_length": 0,
  "safe_to_enter_apply_window": false,
  "status": "missing_fresh_deployed_sha"
}
