{"ok":true,"service":"skysecure-vaultos","title":"SkyeVaultOS / SkySecure Vault Console","hierarchy":{"root":"fs27","vault":"skyevault","lane":"skysecure","chain":"FS27 -> SkyeVault -> SkySecure -> SkyeVaultOS","console":"skyevaultos"},"proof_lane":"0s.live-system.skysecure.vaultos.fs27-skyevault","proof_scope":"live-system-proof; execution-scope: local-cli-app-plus-live-fs27-route","invariant":"FS27 exposes live VaultOS routes for the deployed system. The proof is treated as live system proof because the system is deployed live, and the receipt also records execution scope: filesystem scan, offload, diff, reload, restore-point, grant, revoke, and audit ran in CLI/app proof storage against the real workspace folder while FS27 proves the live metadata and health surface.","execution_scope":{"filesystem_operations":"CLI/app proof storage against the real workspace folder","live_routes":"FS27 Worker metadata, command, proof, and health routes","public_console":"0S live Worker route","boundary":"No public claim that the Cloudflare Worker mounted or read the private /workspaces filesystem."},"commands":[{"id":"scan","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"offload","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"inventory","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"search","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"diff","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"verify","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"reload","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"restore-point","execution_surface":"local-cli","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"grant","execution_surface":"local-cli-and-fs27-metadata","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"revoke","execution_surface":"local-cli-and-fs27-metadata","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"},{"id":"audit","execution_surface":"local-cli-and-fs27-metadata","plaintext_boundary":"No plaintext secrets are accepted by this FS27 route.","proof_scope":"live system proof; execution-scope: CLI/app command receipt"}],"support_commands":[{"id":"ls","execution_surface":"local-cli","plaintext_boundary":"Support commands operate on public-safe metadata, encrypted objects, or receipt files."},{"id":"tree","execution_surface":"local-cli","plaintext_boundary":"Support commands operate on public-safe metadata, encrypted objects, or receipt files."},{"id":"cat-meta","execution_surface":"local-cli","plaintext_boundary":"Support commands operate on public-safe metadata, encrypted objects, or receipt files."},{"id":"manifest","execution_surface":"local-cli","plaintext_boundary":"Support commands operate on public-safe metadata, encrypted objects, or receipt files."},{"id":"bundle","execution_surface":"local-cli","plaintext_boundary":"Support commands operate on public-safe metadata, encrypted objects, or receipt files."},{"id":"attach","execution_surface":"local-cli","plaintext_boundary":"Support commands operate on public-safe metadata, encrypted objects, or receipt files."},{"id":"fs27-sync","execution_surface":"local-cli-to-live-fs27-metadata","plaintext_boundary":"Support commands operate on public-safe metadata, encrypted objects, or receipt files."}],"live_routes":["/skysecure/vaultos","/skysecure/vaultos/health","/skysecure/vaultos/proof","/skysecure/vaultos/commands","/skysecure/vaultos/inventory","/skysecure/vaultos/search","/skysecure/vaultos/restore-points","/skysecure/vaultos/audit","/skysecure/proof","/skysecure/packs","/skysecure/grants","/skysecure/events"],"public_surfaces":{"console":"https://metraiyux-0s-full-system.graylondonskyes.workers.dev/skye-vault-os/","skysecure_proof":"https://metraiyux-0s-full-system.graylondonskyes.workers.dev/proof-vault/skye-secure-fs27-vault-proof.html","platform_console":"https://metraiyux-0s-full-system.graylondonskyes.workers.dev/skye-secure-platform/"},"protected_candidate":"/workspaces/MetrAIyux-0S/about to delete","counts":{"packs":6,"active_grants":0,"events":16},"db":{"ok":true,"mode":"neon"},"ts":"2026-05-20T20:34:49.072Z"}