> For the complete documentation index, see [llms.txt](https://dsg-3.gitbook.io/dsg-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dsg-3.gitbook.io/dsg-docs/control-plane/dsg-one-control-plane-current-aws-state/dsg-spacetime-signed-read-only-oauth-e2e-evidence-2026-10-11.md).

# DSG Spacetime — Signed Read-only OAuth E2E Evidence (2026-10-11)

**Status: COMPLETE / VERIFIED for the single approved low-risk Provider v2 route.** **NOT VERIFIED for Cinema Connect/Execute, Unity/Quest or whole-system production.**

This document is the acceptance snapshot behind [Current AWS State](/dsg-docs/control-plane/dsg-one-control-plane-current-aws-state.md). It is a record of production proof, not a template, synthetic demonstration or permission grant.

## Scope

* **Environment:** DSG Spacetime AWS production on existing EC2.
* **Provider route:** `route.github-public.repo-metadata-read` only; low risk; `approval_required=false`.
* **Principal:** `VERIFIED_OAUTH_SUBJECT` from the active customer's OAuth session. Do not replace it with static owner/admin credentials.
* **Production source:** `5c09c3a68bebff32a543e543237cdd1b77a6b53c`.
* **Container image digest:** `sha256:37c21d7947b624c742c63bafeb601c5ba8765021d788ca4aefd6d5b7eb0bc1c4`.
* **Image-only activation:** [run #38140649005](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38140649005) SUCCESS.
* **Signed read-only Canary activation:** [run #38140811436](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/actions/runs/38140811436) SUCCESS.

## What actually passed

| Acceptance assertion            | Result and evidence                                                                                                                                                                           |
| ------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Owner-gated rollout             | **PASS**: exact Release Manifest/source/digest, scanned image and owner workflow; four other containers unchanged                                                                             |
| Signing key protection          | **PASS**: private PEM stayed on EC2, retrieved locally from SSM SecureString; public key derived and compared with independent pinned SSM public key; file UID:GID `10001:10001`, mode `0400` |
| Authenticated caller            | **PASS**: `spacetime_control_surface` returned verified OAuth Principal; Compose used that Principal                                                                                          |
| Immutable governed plan         | **PASS**: `spacetime_compose=BOUND`, Plan ID `e2e-oauth-provider-v2-readonly-38140811436`                                                                                                     |
| Live provider effect            | **PASS for read-only metadata**: two real executions returned GitHub public repository metadata and additive `_dsg_provider_v2` signed envelope                                               |
| Evidence integrity              | **PASS**: tamper-evident chain 137 → 138 → 139; `spacetime_verify_evidence.valid=true` at 139 records                                                                                         |
| Independent cryptographic proof | **PASS**: JS/Node verifier recomputed hashes, bound the record, matched independently obtained public key and verified Ed25519 signature                                                      |
| Negative tests                  | **PASS**: forged OAuth Principal blocked before execution; altered Provider Result rejected                                                                                                   |
| Transport and confidentiality   | **PASS**: HTTPS health ready; anonymous MCP 401; no plaintext private key in published receipts                                                                                               |
| High-risk Cinema                | **OPEN**: no Signed Approval / actual Browser Connect+Execute receipt                                                                                                                         |
| Unity/Quest                     | **OPEN**: separate client and device E2E required                                                                                                                                             |

## Artifact identifiers (public-safe)

* Plan Hash: `001fcbffc7c75447b2dbae69d2e751f49c6aff025ae84561a0db542abe46527d`
* Signed Execution Record Hash: `a38db675165c5f5cb3ea6aaed31afd471e200f84a4a3064b025d9db1c483a2d8`
* Provider Result Hash: `a6108fa91c03853aafe75c03812441da63c231356cfa3ec19c4f9539c35f1fdb`
* Public Key ID: `2f031ac2bc1ecf01`
* Post-E2E read-only SSM proof ID: `504371a0-9830-4174-81a1-22d58f121e71`
* Canonical [Issue #656, 12:59 UTC acceptance entry](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/issues/656) (repository access required)

These digests and fingerprints are evidence identifiers, **not private-key material**. Verification of a read-only provider operation does not prove high-risk approval, arbitrary actions, game-world control, ISO certification or hardware E2E.

## Closure decision

**Close only the Signed Read-only Provider v2 E2E subtask.** Keep [Issue #656](https://github.com/tdealer01-crypto/DSG-Private-Production-Runtime/issues/656) open for Cinema Signed Approval + live Connect/Execute + fresh evidence and Unity/Quest client acceptance. Do **not** silently update `whole_system_production` to VERIFIED.