=== ROUTER STEP FACTS CONTRACT VALIDATION ===
step=STEP_046I4_CLIENT_CONFIG_LOCATOR_READONLY
decision=PASS
all_ok=True
structure_ok=True
success_ok=True
expected_absence_ok=True
blockers_ok=True
success_checks_count=16
expected_absence_count=5

warnings:
  - This is a read-only locator; it does not generate or publish client configs.
  - PrivateKey/PresharedKey values are masked and should not appear in artifacts.
  - If no direct config exists, next step should inspect backend config generation path, not repeat traffic proof.