{"status":"ready","ready":true,"degraded":false,"checks":{"policy_bundle_verifies":true,"policy_version_matches":true,"durable_issuer":true,"no_kill_clause_probes":true},"issuer_kid":"iss-prod-1","policy_version":"sha256:da542530997fd6fd64516e14a0fca74936502c7589362cd71712d8604ed3d784","ephemeral_issuer":false,"no_kill_audit":{"object_id":"NO_KILL_REFUSAL_SINK_V1","authority_effect":0,"ledger_path":"/data/no_kill_refusals.jsonl","recorded":0,"deduped":0,"dropped_rate":0,"dropped_full":0,"max_bytes":67108864,"rate_per_sec":20.0},"principal_auth":"open","transport_identity":"open","oidc_identity":"open","rate_limit":"enforced","log_format":"default","metrics_auth":"open","otel_export":"unavailable","idempotency":"in_memory","stewards_trusted":1,"steward_kids":["steward-dami"],"escrow_issuance":{"available":true,"discharge_quorum_threshold":1,"detail":"a discharge quorum is configured; an issued escrow can be ratified"},"bound_boundaries":["barycenters.ci.force_push","barycenters.ci.merge_to_main"],"namespaces":{"barycenters.ci":{"version":1,"proposals":"open","evidence":"asserted"},"barycenters.deploy":{"version":1,"proposals":"open","evidence":"asserted"}},"revoked_boundaries":[],"receipt_single_use":"durable","binding_posture":{"adjudicates":true,"binds":false,"authority_effect":0,"enforcement_observable_here":false,"detail":"This service issues signed admission decisions; it never blocks anything itself. Whether a REFUSE stops an action is the caller's posture (e.g. ADMIT_ENFORCE in the consuming CI job) and is NOT observable from this service. A healthy /readyz means 'can adjudicate', never 'is binding'."},"allowed_origins":["https://barycenters.ai","https://www.barycenters.ai","https://barycenters-live.vercel.app","https://barycenters-command.vercel.app","https://barycenters-web.vercel.app"],"build_rev":"2241569feae41dfae76f2c0c68e2993395c7ba9b","build_rev_source":"baked at image build"}