{
  "binding_id": "ui_item_evidence_group_real_sources",
  "created_at": "2026-07-08T20:26:39.617009Z",
  "status": "MISSING",
  "cause": "Real YEFF AI evidence sources were discovered at group level; item-level binding is still required for 220 UI items.",
  "source_parsed_evidence": "/home/yeff/public_html/devon/canon/execution/state/yeffai_readonly_discovery_parsed_evidence_latest.json",
  "source_groups": "/home/yeff/public_html/devon/canon/execution/state/ui_item_yeffai_evidence_source_groups_latest.json",
  "remote_yeffai_mutation": "NO",
  "yeffai_installation_command_executed": "NO",
  "installation_started": "NO",
  "totals": {
    "groups_mapped": 3,
    "items_requiring_item_level_binding": 220,
    "commands_parsed": 15
  },
  "groups": [
    {
      "group_id": "RUNTIME_OBSERVABILITY",
      "human_name": "Runtime, logs, auditoria e observabilidade",
      "item_count": 172,
      "evidence_source_status": "EVIDENCE_SOURCES_DISCOVERED",
      "source_type": "YEFFAI_RUNTIME_STATE_AND_LOG_CHECK",
      "real_evidence_sources": [
        "/opt/yeffai/runtime",
        "/opt/yeffai/logs",
        "/opt/yeffai/evidence",
        "/opt/yeffai/state",
        "/var/log",
        "/var/log/auth.log",
        "/var/log/syslog",
        "/var/log/nginx/access.log",
        "/var/log/nginx/error.log",
        "/run/cloud-init/status.json"
      ],
      "recommended_runtime_fields": [
        "yeffai_runtime_paths_status",
        "yeffai_service_status",
        "yeffai_log_sources_status",
        "yeffai_latest_state_status"
      ],
      "baixa_rule_PASS": "PASS when mapped item evidence exists under /opt/yeffai/runtime, /opt/yeffai/state, /opt/yeffai/evidence/latest_state.json, active service status, or expected log source.",
      "baixa_rule_FAIL": "FAIL when evidence exists and contradicts expected runtime/service/log state.",
      "baixa_rule_MISSING": "MISSING when no mapped evidence path, service status, or log source exists for the item.",
      "next_item_mapping_action": "PATCH_ASSIGN_REAL_EVIDENCE_SOURCES_TO_UI_ITEMS_BY_GROUP"
    },
    {
      "group_id": "SECURITY_BASELINE",
      "human_name": "Segurança, acesso e hardening",
      "item_count": 29,
      "evidence_source_status": "EVIDENCE_SOURCES_DISCOVERED_WITH_SECURITY_GAPS",
      "source_type": "YEFFAI_SECURITY_BASELINE",
      "real_evidence_sources": [
        "ufw status verbose",
        "sshd -T",
        "/etc/ssh/sshd_config",
        "/etc/ssh/sshd_config.d",
        "dpkg package status",
        "systemctl status fail2ban auditd",
        "/etc/ssh permissions"
      ],
      "recommended_runtime_fields": [
        "yeffai_ufw_status",
        "yeffai_ssh_root_login_status",
        "yeffai_ssh_password_auth_status",
        "yeffai_fail2ban_status",
        "yeffai_auditd_status",
        "yeffai_inotify_tools_status"
      ],
      "baixa_rule_PASS": "PASS only after item-specific security expectation is satisfied. Current baseline contains gaps and must not be globally marked PASS.",
      "baixa_rule_FAIL": "FAIL when expected hardening is absent, insecure SSH is detected, firewall is inactive, or required security package/service is missing.",
      "baixa_rule_MISSING": "MISSING when item-specific security evidence is not mapped yet.",
      "next_item_mapping_action": "PATCH_ASSIGN_REAL_EVIDENCE_SOURCES_TO_UI_ITEMS_BY_GROUP"
    },
    {
      "group_id": "BACKUP_RECOVERY",
      "human_name": "Backup, restauração e recuperação",
      "item_count": 19,
      "evidence_source_status": "EVIDENCE_SOURCES_DISCOVERED",
      "source_type": "YEFFAI_BACKUP_RECOVERY_FILE_CHECK",
      "real_evidence_sources": [
        "/opt/yeffai/backup",
        "/opt/yeffai/backup/step001_20260701_213316/pre_state.txt",
        "/opt/yeffai/evidence/latest_state.json",
        "/var/backups",
        "/home/yeff/public_html/devon/_backup"
      ],
      "recommended_runtime_fields": [
        "yeffai_backup_root_status",
        "yeffai_backup_pre_state_status",
        "yeffai_latest_state_evidence_status"
      ],
      "baixa_rule_PASS": "PASS when mapped item evidence exists in /opt/yeffai/backup or /opt/yeffai/evidence/latest_state.json and matches expected backup/recovery contract.",
      "baixa_rule_FAIL": "FAIL when backup/recovery evidence exists but is stale, contradictory, unreadable, or violates the item contract.",
      "baixa_rule_MISSING": "MISSING when no mapped backup/recovery evidence exists for the item.",
      "next_item_mapping_action": "PATCH_ASSIGN_REAL_EVIDENCE_SOURCES_TO_UI_ITEMS_BY_GROUP"
    }
  ],
  "security_blockers_confirmed": {
    "ufw_inactive": true,
    "root_login_permitted": true,
    "password_authentication_enabled": true,
    "fail2ban_missing": true,
    "auditd_missing": true,
    "inotify_tools_missing": true
  },
  "next_required_action": "PATCH_ASSIGN_REAL_EVIDENCE_SOURCES_TO_UI_ITEMS_BY_GROUP"
}