{
  "schemaVersion": "nodedc.device-edge-vps.command-transport.v1",
  "mode": "provider-neutral-typed-command-transport-over-accepted-core-channel",
  "status": "active-typed-command-transport",
  "authority": "DCPLATFORM-21/DCPLATFORM-76/ADR-0001",
  "component": "device-edge-vps",
  "phase": "command-transport",
  "runtimeHost": "koffyvngij",
  "predecessorPatch": "device-edge-vps-tracker-ingress-20260812-012",
  "predecessorArtifactSha256": "290acef118839c6b0c31aac864c47da1832a289537366af9322d4624a1dd81ec",
  "runtimeUser": "nodedc-channel",
  "runtimeService": "nodedc-device-edge-channel.service",
  "runtimeComposition": "single-process-core-channel-plus-universal-device-gateway",
  "publicIngress": "tcp/443-mtls-core-channel+tcp/9921-bidirectional-tracker-session",
  "trackerIngress": "preserved:allowlisted-adapters-only",
  "initialAdapterProfile": "arusnavi.b2.internal.v1",
  "commandTransport": "typed-service-ping-v1",
  "commandCatalog": "allowlisted-adapter-typed-commands-only",
  "allowedCommands": [
    "service.ping"
  ],
  "credentialBoundary": "transient-over-pinned-mtls-in-memory-until-single-tracker-write-never-stored-never-logged-never-returned",
  "responseBoundary": "exact-adapter-parser-serv-ok-only",
  "health": "127.0.0.1:18222",
  "adapterHealth": "127.0.0.1:18221",
  "rawDeviceTcp9921": "public-bidirectional-tracker-session-no-generic-forwarding",
  "gelios": "untouched-legacy-only",
  "tailscale": "absent",
  "dataBoundary": "no-vps-database-no-business-logic-no-synology-route",
  "resourceCeilings": {
    "memory": "192M",
    "swap": "0",
    "cpu": "75%",
    "tasks": 128,
    "openFiles": 1024,
    "sessions": 128,
    "sessionsPerAddress": 16,
    "connectionsPerMinutePerAddress": 60,
    "sessionBufferBytes": 65536,
    "aggregateBufferBytes": 33554432
  },
  "preserved": [
    "management-ssh-key",
    "accepted-node-runtime",
    "accepted-core-channel-trust-and-registration",
    "accepted-tracker-ingress",
    "retired-tailnet-boundary",
    "gelios-production-path"
  ],
  "forbidden": [
    "vps-initiated-synology-connection",
    "generic-tcp-forwarding",
    "tailscale-runtime",
    "docker",
    "public-health",
    "vps-database",
    "vps-business-logic",
    "unregistered-adapter",
    "raw-command",
    "firmware-command",
    "reboot-command",
    "persistent-command-credential"
  ],
  "acceptance": [
    "exact-tracker-ingress-012-predecessor",
    "single-non-root-edge-process",
    "core-channel-remains-accepted",
    "public-tracker-tcp-9921-listening",
    "adapter-profile-allowlisted",
    "typed-service-ping-only",
    "exact-serv-ok-response-parser",
    "bounded-session-and-buffer-limits",
    "tailscale-remains-absent",
    "no-vps-to-synology-route",
    "gelios-untouched"
  ],
  "rollback": "restore-exact-tracker-ingress-012-source-and-existing-runtime"
}