{
  "activation_contract": "exact current VM103 Machine-Git/library/sshd baseline -> private metadata/source backup -> create locked library user/group -> chroot bind mount -> install sshd Match policy + mount unit + managed-source profile -> validate sshd -> reload ssh -> verify locked account/filesystem/http/ingress -> Machine-Git close; password set only later by operator interactively",
  "baseline_commit": "8ef55ea24f8368e9ae0f128109d9709e596d1290",
  "baseline_file_count": 21,
  "baseline_file_sha256": {
    "etc/caddy/Caddyfile": "1f066c28afebfc9d384164aa0561aa8b5bd2c9926a19ee1628ab710a59b8fe44",
    "etc/router-machine-git-source.conf": "67aff2d1d283ba63837284a85b8d797883f3afab197fcdd98b90d34ccea82bfe",
    "etc/systemd/system/secret-studio-sample-library.service": "9738cecc4c45b65fb4d7f14e1d5f086092d3023395aa779afef644e1453e24b8"
  },
  "baseline_tree": "bfdc013d6ad554ae03de84f1f32e46536423a65a",
  "canonical_zip_required": true,
  "classification": "core",
  "current_latest": "WG_PAID_MGTS_LATEST_20260930-165820.zip",
  "current_latest_sha256": "c1aa1942841c092d07911610860b0de2095c4c835c9b37199e8320cb76444e51",
  "exact_worker_fixture": "tests/exact-worker.sh",
  "expected_installer_sha256": "53b1fc407fd4b9b2908da0af75aaf2ad01f475d056999dc32c9e1217e988b8b7",
  "firewall_uci_intended_change": false,
  "functional_stage": "yookassa_review_vm103_owner_sftp_upload",
  "machine_git_change_required": true,
  "mandatory_fixture_count": 5,
  "network_uci_intended_change": false,
  "path_ownership_manifest": "reference/path-ownership.tsv",
  "public_access_routes_intended_change": false,
  "remote_script_transport": "stdin-safe ssh -> sudo -n sh -s -- args; immutable target package via scp",
  "revision": "R01",
  "rollback_contract": "before accepted core: disable/unmount bind mount, remove managed sshd/mount files and exact created user/group/chroot, restore source profile and library ops:ops 0700, validate/reload ssh; preserve library data contents",
  "runtime_impact": true,
  "same_class_skeleton": "STEP_050M07P32D_R03_VM103_SAMPLE_LIBRARY (closest accepted VM103 library/filesystem mechanics; P32I establishes a new host-SFTP-account change class)",
  "schema": "router-step-release-v1",
  "sftp": {
    "chroot": "/srv/sftp",
    "force_command": "internal-sftp -d /library -u 0002",
    "forwarding": false,
    "group": "secretstudio-library",
    "password_auth": true,
    "password_secret_in_step": false,
    "password_state_after_step": "locked_pending_operator_set",
    "pubkey_auth": false,
    "real_library_root": "/srv/secret-studio-library",
    "shell": "/usr/sbin/nologin",
    "start_dir": "/library",
    "user": "library"
  },
  "source_of_truth": "current Latest VM103 8ef55ea24f83 + exact P32D R03 retained library STEP + current Working Rules",
  "step_class": "B",
  "step_id": "STEP_050M07P32I_R01_VM103_LIBRARY_SFTP",
  "target_caddy_sha256": "1f066c28afebfc9d384164aa0561aa8b5bd2c9926a19ee1628ab710a59b8fe44",
  "target_environment_matrix": "reference/target-environment.tsv",
  "target_file_count": 23,
  "target_file_sha256": {
    "etc/router-machine-git-source.conf": "3716d87690e142a6abd938f3328f5ffdfcf9039c7e55e3a51ed88acf3ecb7a80",
    "etc/ssh/sshd_config.d/90-secret-studio-library-sftp.conf": "8ed75d292eb6d7d03150d063e032e990469018e10c9a2345e1db28552c3cfba5",
    "etc/systemd/system/srv-sftp-library.mount": "e7f21deacd35516c9600be81f9f810e8b1e3baecb6684853489a2c84fd73dcd1"
  },
  "target_package_path": "payload/vm103-library-sftp-target-package.tar.gz",
  "target_package_sha256": "12c34ebda6d1d917fb3f90e74641a57ce8ce4b675adb5cb0a4356a497ecf6b54",
  "target_tree": "fd1e4443e11bb5b5794d446373e608411fa6bcd6",
  "touched_machines": [
    "VM103"
  ],
  "vm130_contract_commit": "fadde79bcc5756d478b8814f94ad16ad48fd25d2",
  "worker_entry": "scripts/worker.sh",
  "workflow_contract_version": 2
}