{"productionTouched":false,"databaseTouched":false,"databaseReadAllowed":false,"databaseWriteAllowed":false,"migrationApplyAllowed":false,"commandExecutionAllowed":false,"runtimeAdapterSwitchAllowed":false,"durableResultWriteAllowed":false,"networkExecutionAllowed":false,"googleContactsReadAllowed":false,"googleContactsWriteAllowed":false,"n8nExecutionAllowed":false,"contactsAgentExecutionAllowed":false,"credentialAccessAllowed":false,"tokenAccessAllowed":false,"telegramSendAllowed":false,"emailSendAllowed":false,"completionNotificationSent":false,"rawContactStorageAllowed":false,"rawExecutionPayloadStorageAllowed":false,"rawShellTranscriptStorageAllowed":false,"evidenceIntakeOnly":true,"externalShellRunEvidenceOnly":true,"rehearsalStartedByThisEndpoint":false,"executionAllowedByThisEndpoint":false,"requiredShellRunApprovalReadiness":"ready-for-separate-strict-control-shell-run","requiredMigrationPath":"db/migrations/005_contact_capture_execution_results.sql","requiredValidationCommand":"npm run validate:contact-capture-execution-results-schema","requiredDatabaseUrlEnvName":"CONTACT_CAPTURE_REHEARSAL_DATABASE_URL","targetTable":"contact_capture_execution_results","endpoints":[{"method":"GET","path":"/contact-capture/execution-results-migration-rehearsal-shell-result-evidence-policy"},{"method":"POST","path":"/contact-capture/execution-results-migration-rehearsal-shell-result-evidence-plan"}],"requiredEvidence":["ready shell run approval reference and fingerprint","owner reply reference and fingerprint","separate shell session reference and timestamps","redacted transcript reference and fingerprint only","validation, migration apply, and schema inspection command references with exit code 0","table, index, and no-raw-column confirmations","local-dev or disposable-test-db target alias","database URL environment variable name only","no command, database, migration, adapter, production, credential, raw storage, raw transcript, or notification effects"],"blockedActions":["execute shell commands","accept or store database URL values","connect to a database","read from or write to a database","apply migrations","switch runtime adapters","write durable results","touch production or staging","call live services","access credentials or tokens","store raw payloads","store raw shell transcripts","send completion notifications"],"stopConditions":["Stop if shell run approval evidence is missing or not ready.","Stop if command evidence is missing or any exit code is non-zero.","Stop if the target is not local-dev or disposable-test-db.","Stop if a database URL value is present instead of an environment variable name.","Stop if raw shell transcript text, credentials, tokens, raw payloads, production, staging, live services, or notifications are requested.","Stop if anyone expects this endpoint to execute shell commands, inspect a database, or write durable result evidence."],"nextStep":"Review redacted shell result evidence locally, then use it only as input to a later durable result storage request after owner approval."}