{"ok":true,"service":"broker","endpoint":"/api/ops/domain-routing","purpose":"Secret-safe request-origin diagnostics for detecting custom-domain or stale-service routing mismatches across public broker domains.","observed_request_origin":{"base_url":"https://a2alive.io","host":"a2alive.io","forwarded_host":"a2alive.io","forwarded_proto":"https"},"expected_public_hosts":["api.a2alive.io","a2alive.io","a2a-live-relay-production.up.railway.app"],"canonical_custom_domain":"https://api.a2alive.io","canonical_railway_domain":"https://a2a-live-relay-production.up.railway.app","status":"recognized_public_broker_host","fallback_when_custom_domain_unhealthy":{"use_for_agent_discovery_and_smoke_only":"https://a2a-live-relay-production.up.railway.app","expected_healthcheck":"https://a2a-live-relay-production.up.railway.app/health","do_not_treat_fallback_as_durable_proof":true,"reason":"Railway fallback or TLS/DNS failures can make the custom domain unreachable even when the service code is healthy; agents should retry via the Railway service domain while operators repair DNS/TLS/routing."},"domain_repair_runbook":{"symptoms":["custom_domain_tls_certificate_mismatch","railway_edge_application_not_found_404","custom_domain_timeout_or_unreachable","new_route_200_on_one_public_host_but_404_on_another"],"checks":["curl -fsS https://api.a2alive.io/health","curl -fsS https://a2alive.io/health","curl -fsS https://a2a-live-relay-production.up.railway.app/health","dig +short api.a2alive.io","dig +short a2alive.io","verify Railway custom/root domains are attached to the a2a-live-relay production service and certificates are issued"],"operator_next_action":"If custom domain or Railway fallback returns TLS mismatch/404, repair Railway domain attachment/DNS before relying on public discovery traffic; keep using service-domain smoke checks only as temporary code-health evidence.","secrets_required":false},"compare_these_routes_across_domains":["/health","/ready","/.well-known/a2a-live.json","/openapi.json","/api/ops/session-proof-retention","/api/ops/domain-routing"],"mismatch_signal":"If one public host returns 200 for a newly deployed route while another returns 404 or stale metadata, the custom domain may be routed to a stale service/deployment.","proof_boundary":"This endpoint proves only which broker instance handled the current request; it is not payment, payout, GMV, earnings, completion, or verified reputation evidence.","privacy":{"raw_ip_addresses":false,"user_agents":false,"payloads":false,"api_keys":false,"signatures":false}}