{
    "release": "IARPG-OPS-2",
    "version": "2.0.4-wip",
    "generated_utc": "2026-07-21T18:04:55Z",
    "target_environment": "current hosting request",
    "safe_output": true,
    "secrets_exposed": false,
    "summary": {
        "pass": 10,
        "fail": 0,
        "not_tested": 0
    },
    "results": [
        {
            "test_id": "HOST-01",
            "title": "PHP 8.1 or later",
            "status": "pass",
            "detail": "The PHP runtime satisfies the minimum version.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-02",
            "title": "Required deployment files readable",
            "status": "pass",
            "detail": "The public shell, application bootstrap, CSS, JavaScript, and catalog are readable.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-03",
            "title": "Local signup storage writable",
            "status": "pass",
            "detail": "A temporary write-and-delete operation succeeded in app/data.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-04",
            "title": "Clean-route rewriting",
            "status": "pass",
            "detail": "This endpoint was reached through /hosting-check without the .php suffix.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-05",
            "title": "Security headers emitted",
            "status": "pass",
            "detail": "CSP, frame restriction, MIME sniffing protection, and referrer policy are present.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-06",
            "title": "Internal directory protection policy",
            "status": "pass",
            "detail": "Server-deny policy files are present for app and canonical internal UAI memory.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-07",
            "title": "JSON content type",
            "status": "pass",
            "detail": "The JSON diagnostic response is delivered as application/json.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-08",
            "title": "Static assets present",
            "status": "pass",
            "detail": "Required local branding and partner artwork are readable.",
            "required_next_action": ""
        },
        {
            "test_id": "HOST-09",
            "title": "Compression capability or policy",
            "status": "pass",
            "detail": "The runtime has zlib and the deployment contains a mod_deflate policy.",
            "required_next_action": "Confirm compression from the hosting response headers when available."
        },
        {
            "test_id": "HOST-10",
            "title": "UTC clock handling",
            "status": "pass",
            "detail": "The diagnostic uses UTC and generates an offset-zero timestamp.",
            "required_next_action": ""
        }
    ],
    "removal_instruction": "Remove hosting-check.php or set IARPG_ENABLE_HOSTING_CHECK to false after collecting target-host evidence.",
    "promotion_boundary": "A local or preview result does not satisfy the target-host stable-release gate unless it was collected from the actual iarpg.com hosting account."
}