{
  "date": "2026-10-13",
  "block": "12.5.203",
  "database": "mm_accept_166_1791883862303",
  "scope": "Actual compiled buildApp/auth/GET handlers and own restricted PostgreSQL with nonempty synthetic credentials; isolated signed test JWT, not real Portal login",
  "cases": [
    {
      "role": "reader",
      "path": "/api/backups/storage",
      "status": 200,
      "syntheticSecretExposed": false,
      "configuredFlag": true
    },
    {
      "role": "reader",
      "path": "/api/evobgp/settings",
      "status": 403,
      "syntheticSecretExposed": false,
      "configuredFlag": false
    },
    {
      "role": "reader",
      "path": "/api/alerts",
      "status": 200,
      "syntheticSecretExposed": false,
      "configuredFlag": true
    },
    {
      "role": "admin",
      "path": "/api/backups/storage",
      "status": 200,
      "syntheticSecretExposed": false,
      "configuredFlag": true
    },
    {
      "role": "admin",
      "path": "/api/evobgp/settings",
      "status": 200,
      "syntheticSecretExposed": false,
      "configuredFlag": true
    },
    {
      "role": "admin",
      "path": "/api/alerts",
      "status": 200,
      "syntheticSecretExposed": false,
      "configuredFlag": true
    },
    {
      "role": "unauthenticated",
      "path": "/api/backups/storage",
      "status": 401
    },
    {
      "role": "unauthenticated",
      "path": "/api/evobgp/settings",
      "status": 401
    },
    {
      "role": "unauthenticated",
      "path": "/api/alerts",
      "status": 401
    }
  ],
  "passed": true,
  "externalRequests": 0,
  "storedSyntheticSecretsUnchanged": true,
  "cleanup": {
    "ownedDatabaseRoleContainerRemoved": true
  },
  "bounds": [
    "No S3/EvoBGP connection or Telegram send tested",
    "Known DTO fields only; binary backups/exports and arbitrary embedded error credentials not audited"
  ]
}