> For the complete documentation index, see [llms.txt](https://dsg-3.gitbook.io/dsg-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dsg-3.gitbook.io/dsg-docs/control-plane/dsg-one-control-plane-current-aws-state/dsg-marketplace-verified-oauth-read-e2e-12-october-2026.md).

# DSG Marketplace — Verified OAuth Read E2E (12 October 2026)

**Production activated and independently checked.** PR #663 merge `c2f64a7`; CI #38220762573 SUCCESS; owner AWS atomic workflow #38221386222 SUCCESS. ECR source `04454822790162fce9b355797a6c52c9d1a5ff46`, image digest `sha256:fd718ca2ed2ab3de5da40fe987d83f45788636eb0d0edc0251f27b53e8e4f701`. Five AWS services healthy, 30 active routes and 33 licensed routes.

* **OAuth principal**: verified end-user identity, not Owner Service substitution.
* **Governed Route**: `route.marketplace.listings-read`, low-risk, payload `{}`.
* **Plan**: `marketplace-floot-read-prod-38221386222`, hash `7af6315520bc644fb2c10f1579979db07bc6d824f19a3726d228b0a4e65831f2`.
* **Provider**: executed `ALLOW`, result `{"items":[]}` (empty real catalog).
* **Evidence**: SHA `1582586710522d29a2f31434ce92c10e85977dcaf494f14067c8c0eb5903ac28`; chain valid at **142 records**.
* **Security**: forged OAuth principal `BLOCK/OAUTH_AGENT_PRINCIPAL_MISMATCH`; old pinned Ed25519 GitHub canary retained.

**Boundary:** Not seller publishing, listing creation, order/payment/fulfillment, Marketplace-specific Ed25519 execution attestation, Cinema signed connect/execute, Quest/Unity or whole-system certification.

[Owner activation run](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38221386222) · [Canonical verification](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/issues/656#issuecomment-6120341073)