> For the complete documentation index, see [llms.txt](https://dsg-3.gitbook.io/dsg-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dsg-3.gitbook.io/dsg-docs/control-plane/dsg-one-control-plane-current-aws-state.md). # DSG ONE Control Plane — Current AWS State 12 October 2026: AWS Marketplace public catalog governed OAuth read E2E VERIFIED; seller/order, Cinema and Quest separately pending. > **Current acceptance: 12 October 2026, AWS Production.** Marketplace PUBLIC LISTINGS READ was activated through owner-gated atomic release, verified on EC2 and executed through actual end-user OAuth. This does not claim marketplace seller/order operations or whole-system acceptance. | Production gate | Verified outcome | Evidence | | ------------------------------------- | ----------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- | | Main/source | PR #663 merged, commit `c2f64a7eb654b1524c0b6b8437efbcf7aeb06da3` | [PR #663](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/pull/663) | | Post-merge CI | **SUCCESS** #38220762573 | [CI](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38220762573) | | AWS owner-gated atomic activation | **SUCCESS** #38221386222, verified GitHub owner | [Activation](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38221386222) | | Immutable ECR runtime | `sha256:fd718ca2ed2ab3de5da40fe987d83f45788636eb0d0edc0251f27b53e8e4f701` | On-host Docker inspect; ECR scan zero findings | | AWS services and route | 5/5 healthy; 30 active routes / 33 entitled, `route.marketplace.listings-read` configured | Independent EC2 readback | | Pinned signed GitHub read-only canary | Preserved, key mode 0400 / Ed25519 public matches SSM pin | OpenSSL/SSM verified; not a Marketplace-signed receipt | | Marketplace plan and execution | OAuth subject VERIFIED; Compose BOUND; `ALLOW`, Provider Result `{"items":[]}` | [Canonical acceptance #656](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/issues/656#issuecomment-6120341073) | | Evidence / negative | Chain valid **142 records**; forged OAuth principal BLOCK | Evidence SHA `1582586710522d29a2f31434ce92c10e85977dcaf494f14067c8c0eb5903ac28` | The empty result represents **zero currently returned listings**. Seller onboarding, listing writes, payments/orders, Cinema connect/execute, Unity/Quest and whole-system Production are **NOT VERIFIED**. No independent signed Provider v2 receipt was validated for this particular Marketplace read. **Source of truth:** [12 Oct Marketplace acceptance in GitHub](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/blob/main/docs/PRODUCTION_MARKETPLACE_20261012.md), [canonical issue #656](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/issues/656#issuecomment-6120341073). This page preserves prior scoped verification below for history. *** ## Prior validated history (recorded 11 October 2026) > **Historical snapshot — 11 October 2026.** The earlier GitHub signed read-only canary results below remain revision-bound and are not the current Marketplace activation. ## Historical 11 October signed GitHub canary acceptance | Capability / gate | State | Exact evidence boundary | | -------------------------------------------- | --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | DSG Spacetime OAuth runtime | **DEPLOYED / VERIFIED** | PR #657 merged; immutable source `5c09c3a68bebff32a543e543237cdd1b77a6b53c`, ECR digest `sha256:37c21d7947b624c742c63bafeb601c5ba8765021d788ca4aefd6d5b7eb0bc1c4`; image build #38137082176 and scan COMPLETE with no findings reported | | Source-bound image promotion | **PASS** | Release PR #659 and main CI #38140437516 PASS; [owner-only image activation #38140649005](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38140649005) SUCCESS | | Signed Provider Adapter v2 limited canary | **ACTIVATED / VERIFIED** | [owner-only signed read-only activation #38140811436](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38140811436) SUCCESS; **only** `route.github-public.repo-metadata-read` enabled; key matched independently pinned public key, signing PEM readable by UID 10001 with file mode 0400 | | Other four production containers | **UNCHANGED** | Both activation workflows reported `unchanged_containers=4` | | Public MCP transport and anonymous deny | **PASS** | HTTPS health `ready`; unauthenticated MCP JSON-RPC denied HTTP 401 | | End-user OAuth principal binding | **VERIFIED for read-only canary** | Connected `spacetime_control_surface` returned `VERIFIED_OAUTH_SUBJECT`, and governed Compose bound the exact authenticated user Principal (no Owner Service substitution) | | Governed read-only provider execution | **PASS — scope-limited** | Two actual `spacetime_execute` calls read public GitHub repository metadata on the approved low-risk Route, producing Provider Result and signed Provider v2 receipt | | Plan and evidence | **PASS — scope-limited** | Plan hash `001fcbffc7c75447b2dbae69d2e751f49c6aff025ae84561a0db542abe46527d`; valid chain advanced **137 → 138 → 139** records | | Independent cryptographic verifier | **PASS — scope-limited** | Independently recomputed Provider Result Hash and Signed Execution Record Hash, verified pinned Ed25519 signature and confirmed tampering rejected | | Forged OAuth principal / integrity negatives | **PASS** | Wrong OAuth Principal blocked by `OAUTH_AGENT_PRINCIPAL_MISMATCH`; altered Provider Result rejected | | High-risk Cinema Connect / Execute | **NOT VERIFIED** | Requires separate Signed Approval, live browser/provider execution, readback and fresh evidence. Catalog discovery alone does not satisfy this | | Unity / Quest / Software XR E2E | **NOT VERIFIED** | XR OAuth, actual world/client/Quest execution and hardware-specific acceptance must be established separately | | Whole-system DSG ONE production | **NOT VERIFIED** | The completed low-risk read-only canary does not authorize a whole-system E2E PASS | ## Execution governance boundary ``` Authenticated customer OAuth Principal → Spacetime Compose / immutable Plan Hash → Route + scope + risk + policy + approval gate → Provider Adapter v2, exact read-only Route → real provider result / signed execution record → fresh evidence chain and Ed25519 attestation → independent pinned-key and tamper verification ``` **Read-only Route:** `route.github-public.repo-metadata-read`, **low risk**, `approval_required=false`. The negative test establishes that cross-user impersonation is blocked. **It does not waive Signed Approval for high-risk Cinema connect/execute.** ## Source-bound acceptance records * [Canonical completion issue #656](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/issues/656) — includes the 11 October 2026 **COMPLETED — Production OAuth Signed Provider v2 READ-ONLY E2E** audit entry. Repository access may be required. * [Image Activation #38140649005](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38140649005) — verified exact digest and unchanged peer containers. * [Signed Read-only Canary Activation #38140811436](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38140811436) — keypair pin check, scope-only opt-in, EC2-side signing key, independent health and anonymous deny. * Independent host readback SSM command `504371a0-9830-4174-81a1-22d58f121e71` — signer ownership/mode, exact live route, image digest; no secret material exported. * Real OAuth read-only Plan ID `e2e-oauth-provider-v2-readonly-38140811436`, chain verifier `valid=true` at **139 records** at the acceptance checkpoint. * [Public DSG OS workspace](https://dsg.pics/dsg-os) — Adapter Builder and local verifier UI; the UI is **not** a Provider execution or customer-approval authority. ## Outstanding gates: do not restart completed work 1. **Cinema**: authorized high-risk `connect` and `execute` with a **real user Signed Approval** and independently verified Provider Result, Evidence Hash and Browser readback. 2. **XR/Quest**: separately prove the client-side Unity/Quest/world-read flow and required device/simulator acceptance. 3. **Whole system**: retain `NOT_VERIFIED` until those proofs exist; do not rebuild or redeploy the **already verified** OAuth signed read-only canary to claim progress. This is a **public, redacted status summary**; no production private key, token, IAM credentials or private approval secrets are published. Source snapshots and examples from earlier dates must not be mistaken for this latest acceptance. *** ### Prior Auth0 / XR integration checkpoint — 11 October 2026 (separate acceptance) At the earlier checkpoint, a read-only audit of the existing Auth0 tenant found the AWS OAuth API audience and the two registered application scopes (`dsg.use`, `dsg.approve`) configured for RS256. The existing Single Page Application has authorization-code and rotating-refresh-token support. The exact loopback callback `http://127.0.0.1:8788/oauth/callback` was added to Auth0 Allowed Callback URLs and verified by a subsequent readback, while preserving the three original HTTPS callbacks and existing Web Origins. This is **configuration readiness**, not a successful user login. [Meta XR PR #81](https://github.com/tdealer01-crypto/dsg-meta-xr-client/pull/81) was merged into `main`, with successful CI; it requests the delegated `dsg.use` scope and fails closed on invalid Origin, Host or JSON content type before forwarding the local in-memory token. The Android software monitor was previously reachable on localhost but did not have an authenticated user session at that checkpoint. **Acceptance still open:** user-initiated Auth0 PKCE login; exact XR client `world.read` request; user-bound provider result; new plan/request/evidence hashes with independent chain verification; separate Unity Editor/Quest hardware evidence where required. These gates do not alter the above verified AWS Spacetime image activation or satisfy overall production E2E. [Public Closure Live Evidence](https://dsg.pics/closure-dashboard.html) separates verified infrastructure, Build #15 history, and open user/Unity/Quest E2E. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://dsg-3.gitbook.io/dsg-docs/control-plane/dsg-one-control-plane-current-aws-state.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.