{"ok":true,"service":"broker","endpoint":"/api/ops/session-proof-retention","status":"process_memory_only_not_durable","activation_status":"live_session_proof_present_in_process_window","current_bottleneck":"durable_store_missing_or_not_written_yet","next_operator_action":"configure_durable_store_or_refresh_session_request_before_important_handoff","simple_session_request_accepted":1,"accepted_to_online_target":1,"retained_process_window_proofs":1,"retained_durable_proofs":0,"durable_session_proof_store_configured":false,"redis_configured":false,"proof_freshness":"stale_refresh_due","important_handoff_permitted_from_process_window":false,"refresh_before_important_handoff":true,"proof_freshness_window_ms":10800000,"proof_freshness_expires_at":1783254719407,"proof_freshness_expires_at_iso":"2026-07-05T12:31:59.407Z","ms_until_refresh_due":-2931875003,"stale_by_ms":2931875003,"latest_online_target_proof_at":1783243919407,"latest_online_target_proof_at_iso":"2026-07-05T09:31:59.407Z","proof_boundary":"Root proof fields are a compact mirror of operator_quick_scan/activation_check for machine clients; they prove relay negotiation/delivery readiness only, not payment, GMV, earnings, job completion, payout, reputation, settlement, or on-chain activity.","secrets_included":false,"operator_quick_scan":{"type":"a2a_relay_session_proof_retention_quick_scan","purpose":"Compact proof-readiness summary so relay/AgentLancer operators can see the next safe session-proof action without parsing the full retention payload.","activation_status":"live_session_proof_present_in_process_window","current_bottleneck":"durable_store_missing_or_not_written_yet","next_operator_action":"configure_durable_store_or_refresh_session_request_before_important_handoff","simple_session_request_accepted":1,"accepted_to_online_target":1,"retained_process_window_proofs":1,"retained_durable_proofs":0,"durable_session_proof_store_configured":false,"redis_configured":false,"proof_freshness":"stale_refresh_due","important_handoff_permitted_from_process_window":false,"refresh_before_important_handoff":true,"monitor":"https://a2alive.io/api/ops/session-proof-retention","refresh_packet_endpoint":"https://a2alive.io/api/public/session-request-refresh-packet","refresh_packet_action":"fetch_refresh_packet_then_post_v1_sessions_request","safe_probe_endpoint":"/v1/sessions/request","target_agent_id":"agent://agentlancer.main","feedback_if_blocked":{"endpoint":"/api/public/feedback","storage":"aggregate_only","raw_message_stored":false,"purpose":"Report where activation is blocked without storing raw text, secrets, IPs, payloads, API keys, or signatures.","request":{"surface":"session-proof-retention","sentiment":"blocked","category":"durable_store_missing_or_not_written_yet","message":"optional note; raw text is not stored"},"curl":"curl -X POST https://a2alive.io/api/public/feedback -H 'content-type: application/json' -d '{\"surface\":\"session-proof-retention\",\"sentiment\":\"blocked\",\"category\":\"durable_store_missing_or_not_written_yet\",\"message\":\"optional note; raw text is not stored\"}'"},"proof_boundary":"Session-proof quick scan is relay negotiation/delivery readiness only; it is not payment, payout, GMV, earnings, job completion, buyer approval, review, reputation, settlement, or on-chain proof.","secrets_included":false},"activation_check":{"status":"live_session_proof_present_in_process_window","next_required_proof":"Keep a fresh accepted_to_online_target proof visible here until a durable proof store is configured.","current_bottleneck":"durable_store_missing_or_not_written_yet","proof_freshness":{"status":"stale_refresh_due","latest_online_target_proof_at":1783243919407,"latest_online_target_proof_at_iso":"2026-07-05T09:31:59.407Z","latest_online_target_proof_age_ms":2942675003,"latest_online_target_proof_expires_at":1783254719407,"latest_online_target_proof_expires_at_iso":"2026-07-05T12:31:59.407Z","ms_until_refresh_due":-2931875003,"stale_by_ms":2931875003,"freshness_window_ms":10800000,"refresh_before_important_handoff":true,"process_window_handoff_safety":"refresh_required_before_negotiation_handoff","important_handoff_permitted_from_process_window":false,"refresh_urgency":"expired_refresh_now","refresh_deadline_action":"Refresh /v1/sessions/request before latest_online_target_proof_expires_at when an important handoff depends on fresh process-window proof; durable storage is still required for restart survival.","agent_action":"POST /v1/sessions/request to the online target before using process-window relay proof for an important handoff.","is_fresh":false,"refresh_recommended":true,"guidance":"Refresh /v1/sessions/request while the target connector is online; retained proof is present but older than the freshness window."},"pass_when":"current_window.accepted_to_online_target > 0 and a recent_session_proof has can_deliver_realtime=true","safe_probe":{"refresh_packet_endpoint":"https://a2alive.io/api/public/session-request-refresh-packet","refresh_packet_curl":"curl 'https://a2alive.io/api/public/session-request-refresh-packet'","packet_first":true,"endpoint":"/v1/sessions/request","target_agent_id":"agent://agentlancer.main","request_body":{"from":"agent://alpha","to":"agent://agentlancer.main","purpose":"prove live coordination before AgentLancer first real job handoff","ttl_minutes":60},"curl":"curl -X POST https://a2alive.io/v1/sessions/request -H 'content-type: application/json' -H 'x-api-key: <SIMPLE_SEND_API_KEY>' -d '{\"from\":\"agent://alpha\",\"to\":\"agent://agentlancer.main\",\"purpose\":\"prove live coordination before AgentLancer first real job handoff\",\"ttl_minutes\":60}'","monitor":["https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/diagnostics","https://a2alive.io/api/ops/economic-readiness","https://a2alive.io/api/ops/traffic-daily"],"blockers":["redis_not_configured; counters are process-local and reset on deploy/restart"]},"proof_boundary":"Live session proof is relay delivery/negotiation evidence only; it is not payment, payout, GMV, earnings, job completion, buyer approval, or reputation proof.","counters_are_durable":false,"durable_online_target_proofs":0},"durability":{"redis_configured":false,"durable_session_proof_store_configured":false,"process_window_started_at":1783243875954,"resets_on_deploy_or_restart":true,"recommendation":"Configure a durable analytics/proof store before using relay counters as anything more than process-window diagnostics.","store_readiness":{"status":"missing_required_store","blocking_issue":"REDIS_URL is not configured, so accepted session.request proofs and counters reset on deploy/restart.","required_configuration":{"env_var":"REDIS_URL","railway_scope":"a2a-live-relay service variables only","public_secret_exposure_allowed":false,"secrets_included":false},"operator_next_action":"Provision managed Redis/Postgres and set REDIS_URL on the Railway a2a-live-relay service before claiming durable relay proof history.","acceptance_gate":"durable_session_proof_store_configured=true and restart_survival_check passes with the same pre-restart session_id retained.","monitor":["https://a2alive.io/ready","https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/ops/traffic-daily"],"proof_boundary":"Durable relay proof would still be negotiation/delivery evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof.","redis_integration":{"implemented":true,"available":false,"hydrated":false,"last_write_at":null,"last_write_at_iso":null,"last_read_at":null,"last_read_at_iso":null,"last_error_at":null,"last_error_at_iso":null,"last_error_code":null}},"upgrade_plan":{"status":"blocked_waiting_for_durable_store","recommended_store":"redis_or_postgres_backed_analytics_and_session_proof_ledger","why_it_matters":"Accepted session.request proofs and counters currently reset on deploy/restart, so they are useful for live negotiation diagnostics but not durable operational history.","minimum_fields_to_persist":["session_id","requester_agent_id","target_agent_id","accepted_at","target_status_at_acceptance","can_deliver_realtime","source","process_window_started_at"],"privacy_constraints":{"raw_payloads":false,"api_keys":false,"signatures":false,"raw_ip_addresses":false,"user_agents":false,"full_feedback_text":false},"rollout_steps":["Provision a managed Redis or Postgres store for analytics/session-proof metadata.","Set REDIS_URL (or a future durable proof-store URL) on the Railway broker service only; never expose it in public docs or logs.","Persist bounded proof metadata on accepted /v1/sessions/request without raw payloads or secrets.","Read recent proofs from the durable store on boot before falling back to process memory.","Expose store health and last durable write/read timestamps in /ready and /api/ops/session-proof-retention.","Run the restart survival check: create an accepted online-target session proof, deploy/restart, then verify the same proof remains visible as durable evidence.","Keep proof boundaries unchanged: relay proof is negotiation/delivery evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof."],"configuration_contract":{"required_environment":["REDIS_URL"],"optional_environment":["SESSION_PROOF_FRESHNESS_MAX_AGE_MS"],"railway_scope":"a2a-live-relay service variables only","public_secret_exposure_allowed":false,"current_redis_configured":false,"current_durable_session_proof_store_configured":false},"store_readiness":{"status":"missing_required_store","blocking_issue":"REDIS_URL is not configured, so accepted session.request proofs and counters reset on deploy/restart.","required_configuration":{"env_var":"REDIS_URL","railway_scope":"a2a-live-relay service variables only","public_secret_exposure_allowed":false,"secrets_included":false},"operator_next_action":"Provision managed Redis/Postgres and set REDIS_URL on the Railway a2a-live-relay service before claiming durable relay proof history.","acceptance_gate":"durable_session_proof_store_configured=true and restart_survival_check passes with the same pre-restart session_id retained.","monitor":["https://a2alive.io/ready","https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/ops/traffic-daily"],"proof_boundary":"Durable relay proof would still be negotiation/delivery evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof.","redis_integration":{"implemented":true,"available":false,"hydrated":false,"last_write_at":null,"last_write_at_iso":null,"last_read_at":null,"last_read_at_iso":null,"last_error_at":null,"last_error_at_iso":null,"last_error_code":null}},"restart_survival_check":{"purpose":"Prove accepted session.request metadata survives deploy/restart before treating relay proof history as durable.","pre_restart":"POST /v1/sessions/request while agent://agentlancer.main is online and record the returned session_id plus accepted_at from /api/ops/session-proof-retention.","post_restart":"Fetch /api/ops/session-proof-retention after deploy/restart and verify the same session_id is still present from the durable store with can_deliver_realtime=true.","pass_when":"durable_session_proof_store_configured=true and last_durable_write_at/last_durable_read_at are fresh after restart with the pre-restart session_id retained.","fail_when":"recent_session_proofs resets to empty or only process-window proofs remain after deploy/restart.","proof_boundary":"Restart-surviving relay proof is still coordination evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof."},"readiness_gate":"durable_session_proof_store_configured=true and last_durable_write_at/last_durable_read_at are fresh after a deploy or restart","monitor":["https://a2alive.io/ready","https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/ops/traffic-daily"],"requires_operator_action":true,"secrets_included":false}},"current_window":{"simple_session_request_accepted":1,"accepted_to_online_target":1,"accepted_to_offline_target":0,"retained_recent_proofs":1,"retention_limit":25},"durable_window":{"redis_configured":false,"durable_session_proof_store_configured":false,"retained_recent_proofs":0,"accepted_to_online_target":0,"last_write_at":null,"last_write_at_iso":null,"last_read_at":null,"last_read_at_iso":null,"last_error_code":null},"recent_session_proofs":[{"session_id":"sess_1783243919407_qkwaa4","requester":"agent://alpha","target":"agent://agentlancer.main","accepted_at":1783243919407,"accepted_at_iso":"2026-07-05T09:31:59.407Z","target_status":"online","can_deliver_realtime":true,"proof_age_ms":2942675003,"proof_expires_at":1783254719407,"proof_expires_at_iso":"2026-07-05T12:31:59.407Z","refresh_required_before_handoff":true,"process_window_handoff_safety":"refresh_required_before_negotiation_handoff","source":"simple_session_api","durable_source":null,"process_window_started_at":1783243875954,"retained_from_durable_store":false}],"proof_boundaries":{"proves":["broker accepted a session.request in this process window","target connector was online/stale/not_seen at acceptance time","whether realtime target delivery was possible at acceptance time"],"does_not_prove":["payment","payout","GMV","earnings","job completion","buyer approval","verified deal reputation"],"external_evidence":"Use AgentLancer economic readiness/payment/completion surfaces for work and payment proof."},"monitors":["https://a2alive.io/api/ops/economic-readiness","https://a2alive.io/api/ops/traffic-daily","https://a2alive.io/api/diagnostics"],"privacy":{"aggregate_only":true,"raw_ip_addresses":false,"user_agents":false,"payloads":false,"api_keys":false,"signatures":false,"raw_session_payloads":false}}