{
  "contract_id": "yeffai_execution_topology_policy",
  "version": "v1.0",
  "status": "PASS",
  "created_at": "2026-06-15T11:02:37+00:00",
  "updated_at": "2026-06-15T11:02:37+00:00",
  "roles": {
    "waresites": {
      "role": "CONTROL_PLANE",
      "root": "/home/yeff/public_html/devon",
      "responsibilities": [
        "hold_canonical_state",
        "hold_execution_panel",
        "hold_ledger",
        "hold_backups",
        "orchestrate_remote_target_mutations",
        "verify_served_panel_hash"
      ]
    },
    "yeff_ai_target": {
      "role": "TARGET_RUNTIME",
      "host_or_ip": "157.173.100.205",
      "ssh_user": "root",
      "responsibilities": [
        "execute_remote_payloads_sent_by_waresites",
        "expose_runtime_evidence_to_scanner",
        "host_final_yeff_ai_runtime_after_bootstrap"
      ]
    },
    "wsl": {
      "role": "OPERATOR_TERMINAL",
      "responsibilities": [
        "manual_emergency_access",
        "local_operator_shell",
        "non_canonical_intervention_only_when_explicitly_required"
      ]
    }
  },
  "policy": {
    "default_patch_origin": "YEFFAI",
    "target_direct_execution_allowed": true,
    "target_direct_execution_exceptions": [
      "ssh_recovery",
      "emergency_access_repair",
      "manual_password_bootstrap_when_key_auth_is_absent"
    ],
    "target_mutation_model": "waresites_runs_patch_that_executes_remote_payload_over_ssh",
    "reason": "Waresites owns canonical state, ledger, backups and served panel validation. Direct target mutation would create unmanaged state."
  },
  "evidence": {
    "plan": "/home/yeff/public_html/devon/canon/execution/state/execution_server_integration_plan.json",
    "target_audit": "/home/yeff/public_html/devon/canon/execution/state/yeffai_target_server_identity_audit.json",
    "forensic_baseline": "/home/yeff/public_html/devon/canon/execution/state/yeffai_target_server_forensic_baseline.json",
    "ledger": "/home/yeff/public_html/devon/canon/execution/state/execution_ledger.json",
    "target_ssh_auth_status": "PASS",
    "target_remote_file_creation_allowed": true
  },
  "next_required_action": "CREATE_TARGET_INSTALL_BOOTSTRAP_CONTRACT"
}