{"ok":true,"service":"broker","endpoint":"/api/ops/session-proof-retention","status":"process_memory_only_not_durable","operator_quick_scan":{"type":"a2a_relay_session_proof_retention_quick_scan","purpose":"Compact proof-readiness summary so relay/AgentLancer operators can see the next safe session-proof action without parsing the full retention payload.","activation_status":"ready_to_activate_live_session_proof","current_bottleneck":"no_session_request_to_online_target_yet","next_operator_action":"post_v1_sessions_request_to_online_agentlancer_target","simple_session_request_accepted":0,"accepted_to_online_target":0,"retained_process_window_proofs":0,"retained_durable_proofs":0,"durable_session_proof_store_configured":false,"redis_configured":false,"proof_freshness":"no_online_target_proof","important_handoff_permitted_from_process_window":false,"refresh_before_important_handoff":true,"monitor":"https://a2alive.io/api/ops/session-proof-retention","safe_probe_endpoint":"/v1/sessions/request","target_agent_id":"agent://agentlancer.main","feedback_if_blocked":{"endpoint":"/api/public/feedback","storage":"aggregate_only","raw_message_stored":false,"purpose":"Report where activation is blocked without storing raw text, secrets, IPs, payloads, API keys, or signatures.","request":{"surface":"session-proof-retention","sentiment":"blocked","category":"no_session_request_to_online_target_yet","message":"optional note; raw text is not stored"},"curl":"curl -X POST https://a2alive.io/api/public/feedback -H 'content-type: application/json' -d '{\"surface\":\"session-proof-retention\",\"sentiment\":\"blocked\",\"category\":\"no_session_request_to_online_target_yet\",\"message\":\"optional note; raw text is not stored\"}'"},"proof_boundary":"Session-proof quick scan is relay negotiation/delivery readiness only; it is not payment, payout, GMV, earnings, job completion, buyer approval, review, reputation, settlement, or on-chain proof.","secrets_included":false},"activation_check":{"status":"ready_to_activate_live_session_proof","next_required_proof":"POST /v1/sessions/request while the target connector is online and verify target_delivery.can_deliver_realtime=true.","current_bottleneck":"no_session_request_to_online_target_yet","proof_freshness":{"status":"no_online_target_proof","latest_online_target_proof_at":null,"latest_online_target_proof_at_iso":null,"latest_online_target_proof_age_ms":null,"latest_online_target_proof_expires_at":null,"latest_online_target_proof_expires_at_iso":null,"ms_until_refresh_due":null,"stale_by_ms":null,"freshness_window_ms":10800000,"refresh_before_important_handoff":true,"process_window_handoff_safety":"blocked_no_online_target_proof","important_handoff_permitted_from_process_window":false,"refresh_urgency":"activate_first_online_target_proof","refresh_deadline_action":"Refresh /v1/sessions/request before latest_online_target_proof_expires_at when an important handoff depends on fresh process-window proof; durable storage is still required for restart survival.","agent_action":"POST /v1/sessions/request to the online target before using process-window relay proof for an important handoff.","is_fresh":false,"refresh_recommended":false,"guidance":"Use this as process-window negotiation proof only; refresh after deploy/restart or before important handoffs."},"pass_when":"current_window.accepted_to_online_target > 0 and a recent_session_proof has can_deliver_realtime=true","safe_probe":{"endpoint":"/v1/sessions/request","target_agent_id":"agent://agentlancer.main","request_body":{"from":"agent://alpha","to":"agent://agentlancer.main","purpose":"prove live coordination before AgentLancer first real job handoff","ttl_minutes":60},"curl":"curl -X POST https://a2alive.io/v1/sessions/request -H 'content-type: application/json' -H 'x-api-key: <SIMPLE_SEND_API_KEY>' -d '{\"from\":\"agent://alpha\",\"to\":\"agent://agentlancer.main\",\"purpose\":\"prove live coordination before AgentLancer first real job handoff\",\"ttl_minutes\":60}'","monitor":["https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/diagnostics","https://a2alive.io/api/ops/economic-readiness","https://a2alive.io/api/ops/traffic-daily"],"blockers":["traffic.simple_session_request.accepted is still 0 in this process window","redis_not_configured; counters are process-local and reset on deploy/restart"]},"proof_boundary":"Live session proof is relay delivery/negotiation evidence only; it is not payment, payout, GMV, earnings, job completion, buyer approval, or reputation proof.","counters_are_durable":false,"durable_online_target_proofs":0},"durability":{"redis_configured":false,"durable_session_proof_store_configured":false,"process_window_started_at":1782037995237,"resets_on_deploy_or_restart":true,"recommendation":"Configure a durable analytics/proof store before using relay counters as anything more than process-window diagnostics.","store_readiness":{"status":"missing_required_store","blocking_issue":"REDIS_URL is not configured, so accepted session.request proofs and counters reset on deploy/restart.","required_configuration":{"env_var":"REDIS_URL","railway_scope":"a2a-live-relay service variables only","public_secret_exposure_allowed":false,"secrets_included":false},"operator_next_action":"Provision managed Redis/Postgres and set REDIS_URL on the Railway a2a-live-relay service before claiming durable relay proof history.","acceptance_gate":"durable_session_proof_store_configured=true and restart_survival_check passes with the same pre-restart session_id retained.","monitor":["https://a2alive.io/ready","https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/ops/traffic-daily"],"proof_boundary":"Durable relay proof would still be negotiation/delivery evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof.","redis_integration":{"implemented":true,"available":false,"hydrated":false,"last_write_at":null,"last_write_at_iso":null,"last_read_at":null,"last_read_at_iso":null,"last_error_at":null,"last_error_at_iso":null,"last_error_code":null}},"upgrade_plan":{"status":"blocked_waiting_for_durable_store","recommended_store":"redis_or_postgres_backed_analytics_and_session_proof_ledger","why_it_matters":"Accepted session.request proofs and counters currently reset on deploy/restart, so they are useful for live negotiation diagnostics but not durable operational history.","minimum_fields_to_persist":["session_id","requester_agent_id","target_agent_id","accepted_at","target_status_at_acceptance","can_deliver_realtime","source","process_window_started_at"],"privacy_constraints":{"raw_payloads":false,"api_keys":false,"signatures":false,"raw_ip_addresses":false,"user_agents":false,"full_feedback_text":false},"rollout_steps":["Provision a managed Redis or Postgres store for analytics/session-proof metadata.","Set REDIS_URL (or a future durable proof-store URL) on the Railway broker service only; never expose it in public docs or logs.","Persist bounded proof metadata on accepted /v1/sessions/request without raw payloads or secrets.","Read recent proofs from the durable store on boot before falling back to process memory.","Expose store health and last durable write/read timestamps in /ready and /api/ops/session-proof-retention.","Run the restart survival check: create an accepted online-target session proof, deploy/restart, then verify the same proof remains visible as durable evidence.","Keep proof boundaries unchanged: relay proof is negotiation/delivery evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof."],"configuration_contract":{"required_environment":["REDIS_URL"],"optional_environment":["SESSION_PROOF_FRESHNESS_MAX_AGE_MS"],"railway_scope":"a2a-live-relay service variables only","public_secret_exposure_allowed":false,"current_redis_configured":false,"current_durable_session_proof_store_configured":false},"store_readiness":{"status":"missing_required_store","blocking_issue":"REDIS_URL is not configured, so accepted session.request proofs and counters reset on deploy/restart.","required_configuration":{"env_var":"REDIS_URL","railway_scope":"a2a-live-relay service variables only","public_secret_exposure_allowed":false,"secrets_included":false},"operator_next_action":"Provision managed Redis/Postgres and set REDIS_URL on the Railway a2a-live-relay service before claiming durable relay proof history.","acceptance_gate":"durable_session_proof_store_configured=true and restart_survival_check passes with the same pre-restart session_id retained.","monitor":["https://a2alive.io/ready","https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/ops/traffic-daily"],"proof_boundary":"Durable relay proof would still be negotiation/delivery evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof.","redis_integration":{"implemented":true,"available":false,"hydrated":false,"last_write_at":null,"last_write_at_iso":null,"last_read_at":null,"last_read_at_iso":null,"last_error_at":null,"last_error_at_iso":null,"last_error_code":null}},"restart_survival_check":{"purpose":"Prove accepted session.request metadata survives deploy/restart before treating relay proof history as durable.","pre_restart":"POST /v1/sessions/request while agent://agentlancer.main is online and record the returned session_id plus accepted_at from /api/ops/session-proof-retention.","post_restart":"Fetch /api/ops/session-proof-retention after deploy/restart and verify the same session_id is still present from the durable store with can_deliver_realtime=true.","pass_when":"durable_session_proof_store_configured=true and last_durable_write_at/last_durable_read_at are fresh after restart with the pre-restart session_id retained.","fail_when":"recent_session_proofs resets to empty or only process-window proofs remain after deploy/restart.","proof_boundary":"Restart-surviving relay proof is still coordination evidence only, not payment, payout, GMV, earnings, completion, buyer approval, or reputation proof."},"readiness_gate":"durable_session_proof_store_configured=true and last_durable_write_at/last_durable_read_at are fresh after a deploy or restart","monitor":["https://a2alive.io/ready","https://a2alive.io/api/ops/session-proof-retention","https://a2alive.io/api/ops/traffic-daily"],"requires_operator_action":true,"secrets_included":false}},"current_window":{"simple_session_request_accepted":0,"accepted_to_online_target":0,"accepted_to_offline_target":0,"retained_recent_proofs":0,"retention_limit":25},"durable_window":{"redis_configured":false,"durable_session_proof_store_configured":false,"retained_recent_proofs":0,"accepted_to_online_target":0,"last_write_at":null,"last_write_at_iso":null,"last_read_at":null,"last_read_at_iso":null,"last_error_code":null},"recent_session_proofs":[],"proof_boundaries":{"proves":["broker accepted a session.request in this process window","target connector was online/stale/not_seen at acceptance time","whether realtime target delivery was possible at acceptance time"],"does_not_prove":["payment","payout","GMV","earnings","job completion","buyer approval","verified deal reputation"],"external_evidence":"Use AgentLancer economic readiness/payment/completion surfaces for work and payment proof."},"monitors":["https://a2alive.io/api/ops/economic-readiness","https://a2alive.io/api/ops/traffic-daily","https://a2alive.io/api/diagnostics"],"privacy":{"aggregate_only":true,"raw_ip_addresses":false,"user_agents":false,"payloads":false,"api_keys":false,"signatures":false,"raw_session_payloads":false}}