{
  "code": "HOST-01",
  "slug": "target-hosting-smoke-evidence",
  "title": "Target Hosting Smoke Evidence",
  "category": "Governance",
  "status": "Current",
  "version": "2.0.4-wip",
  "summary": "Defines safe, removable evidence for PHP, rewrites, headers, protected paths, assets, JSON delivery, UTC, and writable local storage on the actual host.",
  "keywords": [
    "hosting",
    "Apache",
    "LiteSpeed",
    "smoke test",
    "security headers"
  ],
  "mission_phases": [
    "Deliver"
  ],
  "canonical": "https://iarpg.com/standard/target-hosting-smoke-evidence",
  "json": "https://iarpg.com/records/target-hosting-smoke-evidence.json",
  "requirements": [
    {
      "level": "MUST",
      "text": "The diagnostic endpoint disclose no secrets, environment variables, absolute paths, session contents, or private configuration."
    },
    {
      "level": "MUST",
      "text": "Stable promotion require evidence from the actual target hosting account."
    },
    {
      "level": "MUST",
      "text": "The documentation instruct operators to remove or disable the endpoint after testing."
    },
    {
      "level": "SHOULD",
      "text": "Each result include pass, fail, or not-tested with a non-sensitive explanation."
    }
  ],
  "research": [
    {
      "label": "Immutable records and UTC telemetry",
      "href": "/docs/report/monetary-architecture-genesis-allowance-and-economic-stabilization#ledger-schema-and-telemetry",
      "note": "Supports immutable records, reversals, and UTC event time."
    },
    {
      "label": "Evidence-based review and jurisdiction",
      "href": "/docs/report/justice-system-and-warrant-escalation-for-rogue-intelligence#recommended-warrant-architecture",
      "note": "Supports explainable evidence thresholds and reviewable decisions."
    }
  ],
  "related": [
    "tested-compatibility-matrix",
    "release-promotion-gates"
  ],
  "roles": [
    "Operative",
    "Handler",
    "Intelligence Analyst",
    "Technical Operator",
    "Counterintelligence Officer",
    "Liaison Officer",
    "Logistics Specialist",
    "Source Handler"
  ],
  "interaction_types": [
    "Review",
    "Validate",
    "Record",
    "Export",
    "Recover"
  ],
  "authority_types": [
    "Civil administration",
    "Military command",
    "Commercial intelligence service",
    "International verification body",
    "Scientific or infrastructure consortium",
    "Independent investigative network"
  ],
  "collection_disciplines": [],
  "conformance_level": "Level D — Simulatable",
  "implementation_maturity": "Published WIP",
  "release": "IARPG-OPS-2",
  "revised_utc": "2026-07-20T12:04:07Z",
  "purpose": "Defines safe, removable evidence for PHP, rewrites, headers, protected paths, assets, JSON delivery, UTC, and writable local storage on the actual host.",
  "rationale": "Portable intelligence-operation artifacts require inspectable boundaries, deterministic evidence, explicit recovery, and no silent loss or identity overclaim.",
  "game_interaction": [
    "Inspect artifact",
    "Compare evidence",
    "Record reason code",
    "Export local result"
  ],
  "inputs": [
    "Browser-local artifact",
    "Applicable standard",
    "Declared source context"
  ],
  "outputs": [
    "Reviewable result",
    "Reason code",
    "Local export",
    "Preserved original"
  ],
  "state_transitions": [
    {
      "from": "received",
      "event": "requirement evaluated",
      "to": "accepted, quarantined, or rejected-with-source-untouched"
    }
  ],
  "evidence_and_provenance": [
    "Record source artifact ID, canonical digest, UTC event time, responsible local role label, and reason code.",
    "Do not convert a digest, label, or generated statement into an identity or authoritative fact claim."
  ],
  "ui_requirements": [
    "Show the record code and requirement level at the point of use.",
    "Expose the reason for pass, fail, quarantine, recovery, or rejection.",
    "Provide direct links to canonical human and machine records."
  ],
  "accessibility_requirements": [
    "Essential information is available without reliance on color, audio, motion, or a graph alone.",
    "Keyboard, screen-reader, reduced-motion, high-zoom, mobile, and print equivalents are documented."
  ],
  "telemetry_events": [
    {
      "name": "standard.target-hosting-smoke-evidence.evaluated",
      "required_fields": [
        "event_id",
        "timestamp_utc",
        "artifact_id",
        "record_code",
        "result",
        "reason_code"
      ]
    }
  ],
  "abuse_and_exploit_cases": [
    "A participant attempts to remove unknown data during import or migration.",
    "A digest or declared label is presented as proof of human identity or approval.",
    "A consequential record is overwritten without a reason or preserved original."
  ],
  "failure_behavior": "Fail closed for irreversible publication or overwrite. Preserve original content, show the failing requirement, and allow export or non-destructive recovery.",
  "recovery_behavior": "Retain the original artifact and review event, clone any repaired draft, and require a new explicit validation event before continuing.",
  "example_implementation": "The local tool evaluates HOST-01, writes a UTC reason-coded result, and exposes both original and resulting artifacts for export.",
  "evidence_requirement": "Reviewable provenance and deterministic local evidence required",
  "related_examples": [
    "port-access-anomaly-investigation"
  ],
  "revision_history": [
    {
      "version": "2.0.4-wip",
      "date_utc": "2026-07-20T12:04:07Z",
      "note": "Initial HOST-01 publication for IARPG-OPS-2 release-candidate hardening."
    }
  ]
}