{
  "date": "2026-10-11",
  "block": "12.5.131",
  "runtime": {
    "backend": "ux-crl127",
    "frontend": "ux-ike124"
  },
  "native": {
    "date": "2026-10-11",
    "block": "12.5.131",
    "name": "mm-ipsec131-1791663939546",
    "linux": [
      {
        "index": 0,
        "vip": "198.18.131.249",
        "initiated": true,
        "ping3of3": true
      }
    ],
    "cleanup": [
      {
        "serverId": 1,
        "/system/logging": true,
        "/ip/ipsec/identity": true,
        "/ip/ipsec/peer": true,
        "/ip/ipsec/policy": true,
        "/ip/ipsec/policy/group": true,
        "/ip/ipsec/mode-config": true,
        "/ip/ipsec/proposal": true,
        "/ip/ipsec/profile": true,
        "/certificate": true,
        "/file": true,
        "/ip/address": true,
        "/ip/route": true,
        "/ip/firewall/nat": true,
        "/ip/pool": true,
        "/interface/bridge": true,
        "/ipv6/address": true
      },
      {
        "serverId": 2,
        "/system/logging": true,
        "/ip/ipsec/identity": true,
        "/ip/ipsec/peer": true,
        "/ip/ipsec/policy": true,
        "/ip/ipsec/policy/group": true,
        "/ip/ipsec/mode-config": true,
        "/ip/ipsec/proposal": true,
        "/ip/ipsec/profile": true,
        "/certificate": true,
        "/file": true,
        "/ip/address": true,
        "/ip/route": true,
        "/ip/firewall/nat": true,
        "/ip/pool": true,
        "/interface/bridge": true,
        "/ipv6/address": true
      }
    ],
    "clientImage": "sha256:c9d01c801de88b2349f685c1cb631e67a8b1c697439a00148d4045c23a584054",
    "native": [
      {
        ".id": "*1",
        "id": "CN=mm-ipsec131-1791663939546-client",
        "state": "established",
        "dynamic-address": "198.18.131.249",
        "remote-address": "161.104.46.222",
        "uptime": "2s"
      }
    ],
    "catalog": {
      "name": "mm-ipsec131-1791663939546",
      "online": true,
      "activeAddress": "198.18.131.249",
      "activeSince": "2s"
    },
    "summary": {
      "clientsTotal": 1,
      "clientsOnline": 1
    },
    "clientKey": {
      "type": "ec",
      "curve": "prime256v1"
    },
    "applicationExport": {
      "status": 200,
      "archiveReceived": true,
      "persisted": false
    },
    "dockerCleanup": true,
    "credentialFilesRemoved": true
  },
  "finalInventory": {
    "checks": [
      {
        "serverId": 1,
        "collections": {
          "/system/logging/action": {
            "owned": 0
          },
          "/system/logging": {
            "owned": 0
          },
          "/ip/ipsec/identity": {
            "owned": 0
          },
          "/ip/ipsec/peer": {
            "owned": 0
          },
          "/ip/ipsec/policy": {
            "owned": 0
          },
          "/ip/ipsec/policy/group": {
            "owned": 0
          },
          "/ip/ipsec/mode-config": {
            "owned": 0
          },
          "/ip/ipsec/proposal": {
            "owned": 0
          },
          "/ip/ipsec/profile": {
            "owned": 0
          },
          "/certificate": {
            "owned": 0
          },
          "/file": {
            "owned": 0
          },
          "/ip/address": {
            "owned": 0
          },
          "/ip/route": {
            "owned": 0
          },
          "/ip/firewall/nat": {
            "owned": 0
          },
          "/ip/pool": {
            "owned": 0
          },
          "/interface/bridge": {
            "owned": 0
          },
          "/ipv6/address": {
            "owned": 0
          },
          "/certificate/crl": {
            "owned": 0
          }
        },
        "crlSettingsRestored": true,
        "established": 0
      },
      {
        "serverId": 2,
        "collections": {
          "/system/logging/action": {
            "owned": 0
          },
          "/system/logging": {
            "owned": 0
          },
          "/ip/ipsec/identity": {
            "owned": 0
          },
          "/ip/ipsec/peer": {
            "owned": 0
          },
          "/ip/ipsec/policy": {
            "owned": 0
          },
          "/ip/ipsec/policy/group": {
            "owned": 0
          },
          "/ip/ipsec/mode-config": {
            "owned": 0
          },
          "/ip/ipsec/proposal": {
            "owned": 0
          },
          "/ip/ipsec/profile": {
            "owned": 0
          },
          "/certificate": {
            "owned": 0
          },
          "/file": {
            "owned": 0
          },
          "/ip/address": {
            "owned": 0
          },
          "/ip/route": {
            "owned": 0
          },
          "/ip/firewall/nat": {
            "owned": 0
          },
          "/ip/pool": {
            "owned": 0
          },
          "/interface/bridge": {
            "owned": 0
          },
          "/ipv6/address": {
            "owned": 0
          },
          "/certificate/crl": {
            "owned": 0
          }
        },
        "crlSettingsRestored": true,
        "established": 0
      }
    ],
    "privateDirectories": []
  },
  "dockerAcceptanceContainersAndNetworks": 0,
  "application": {
    "backendHealthy": true,
    "postgresHealthy": true,
    "frontendRunning": true,
    "frontendHttpUiVerified124": true
  },
  "bounds": [
    "Own all-ECDSA P-256 chain, one Linux strongSwan client, one WAN/NAT",
    "Public EC key type/curve confirmed; IKE/Ping3of3/API catalog and certificate export200 observed",
    "Encrypted export archive/passphrase only in memory/private fixture, not persisted to evidence",
    "Final18 collections per CHR checked for own120–131 residues; default/public/metadata/195 route and flash directory preserved",
    "No max throughput/rekey scale/other OS/custom/intermediate PKI/full CRL distribution acceptance",
    "Diagnostic GET buffer query still has mixed historical messages; POST print query needs separate validation"
  ]
}