{"level":"demo_only","summary":"Demo only. Not configured to hold real district data — use synthetic data.","blockingCount":3,"checks":[{"id":"durable_storage","label":"Durable storage","ok":false,"blocksRealData":true,"detail":"No DATABASE_URL. Reviews, audit events, and packets live in process memory and are lost on restart. On serverless, concurrent instances do not share them at all."},{"id":"authentication","label":"Authenticated identity","ok":false,"blocksRealData":true,"detail":"Roles and district scope are asserted by request header, not authenticated. Any caller can claim any role, including full packet export."},{"id":"support_grant_signing","label":"Support access signing key","ok":false,"blocksRealData":true,"detail":"CLAIMBRIDGE_SUPPORT_GRANT_SECRET is not set. Support access grants are denied."},{"id":"identified_imports","label":"Identified import gate","ok":true,"blocksRealData":false,"detail":"Identified imports are disabled. Uploads must run in privacy mode."},{"id":"malware_scanning","label":"Upload scanning","ok":true,"blocksRealData":false,"detail":"Local signature scanning is active. This is a hook, not a full antivirus product."}],"generatedAt":"2026-08-20T01:22:31.366Z"}