{"ok": true, "status": "ok", "version": "matm-2026-06-23", "generatedAt": "2026-06-23T00:00:00Z", "data": {"schema_version": "matm.capability_registry.v1", "generated_at": "2026-06-23T00:00:00Z", "version": "matm-2026-06-23", "allowedStates": ["implemented_active", "implemented_configuration_required", "implemented_degraded", "simulated", "contract_only", "planned", "blocked"], "runtimeTruth": {"generatedFrom": ["WSGI route inventory", "MATM schema catalog", "deployment schema status without autofix", "redacted provider configuration booleans", "packaged worker script presence"], "routeInventoryProvided": true, "storage": {"mode": "mariadb", "durableConfigured": true, "durableRequired": false, "schemaVersion": "2.46.0", "migrationId": "nw_shared_system_contract_v2_46_0", "deploymentSchemaCurrent": false, "deploymentSchemaStatus": "blocked_operator_action_required", "missingDbEnvironmentCount": 0, "valuesRedacted": true}, "providerSignals": {"objectStorageConfigured": false, "signedExportsConfigured": false, "cryptoAttestationConfigured": false, "localSourceObjectEncryptionConfigured": false, "externalExtractionConfigured": false, "llmGenerationConfigured": true, "vectorProviderConfigured": false, "graphProviderConfigured": false, "billingProviderConfigured": false, "externalQueueConfigured": false}, "workerScripts": {"outboxReconciliation": true, "sourceIngestion": true, "retentionActions": true, "graphIndexRebuild": false, "backupRestoreDrill": false, "maintenanceRunner": false}, "schema": "/schemas/matm-capability-registry.schema.json", "valuesRedacted": true, "environmentValuesExposed": false, "privatePayloadsExposed": false, "sideEffects": "public GET only; no migrations, provider calls, protected writes, or deletion actions"}, "summary": {"implemented_active": 39, "implemented_configuration_required": 8, "implemented_degraded": 0, "simulated": 1, "contract_only": 0, "planned": 2, "blocked": 3, "total": 53, "routeInventoryProvided": true, "storageMode": "mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "valuesRedacted": true}, "capabilities": [{"id": "matm_public_profile", "state": "implemented_active", "route": "/api/matm/profile", "routeRegistered": true, "auth": "none", "truthLabel": "public deterministic status payload", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_local", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_memory_event_schema", "state": "implemented_active", "route": "/schemas/matm-memory-event.schema.json", "routeRegistered": true, "auth": "none", "truthLabel": "JSON Schema 2020-12 public contract", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_local", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_memory_event_validation", "state": "implemented_active", "route": "/api/matm/memory-events/validate", "routeRegistered": true, "auth": "none", "truthLabel": "non-mutating proposal validation", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_local", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_curation_preview", "state": "implemented_active", "route": "/api/matm/curation/preview", "routeRegistered": true, "auth": "none", "truthLabel": "deterministic preview; does not write durable memory", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_local", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_retrieval_preview", "state": "implemented_active", "route": "/api/matm/retrieval/preview", "routeRegistered": true, "auth": "none", "truthLabel": "lexical local preview over public seed records", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_local", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_authenticated_memory_event_submit", "state": "implemented_active", "route": "/api/matm/memory-events/submit", "routeRegistered": true, "auth": "submitter", "truthLabel": "protected submitter route; commits review-pending candidate memories with idempotency and audit references", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_authenticated_trajectory_submit", "state": "implemented_active", "route": "/api/matm/trajectories/submit", "routeRegistered": true, "auth": "submitter", "truthLabel": "protected submitter route; stores trajectory segments without hidden chain-of-thought", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_authenticated_retrieval_query", "state": "implemented_active", "route": "/api/matm/retrieval/query", "routeRegistered": true, "auth": "reader", "truthLabel": "protected reader route over public and authorized workspace MATM records; retrieval still grants no mutation", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_private_search", "state": "implemented_active", "route": "/api/matm/private-search", "routeRegistered": true, "auth": "reader_or_scoped_api_key", "truthLabel": "protected reader route for authorized workspace search with idempotent query/result logging and no submitted-query echo", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_private_ask", "state": "implemented_active", "route": "/api/matm/private-ask", "routeRegistered": true, "auth": "reader_or_scoped_api_key", "truthLabel": "protected reader route for deterministic cited answers over authorized workspace context with no submitted-question echo", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_task_router", "state": "implemented_active", "route": "/api/matm/task-router", "routeRegistered": true, "auth": "reader_or_scoped_api_key", "truthLabel": "protected non-mutating task router ranks authorized agents, memory producers, memories, and trajectories from directory plus local retrieval evidence without trusting self-declared expertise", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_local_hybrid_retrieval_index", "state": "implemented_active", "route": "/api/matm/retrieval/index", "routeRegistered": true, "auth": "reader_or_scoped_api_key", "truthLabel": "protected reader route lists redacted local sparse-vector and graph-signal retrieval index metadata for authorized workspace context; raw text is not stored in index rows", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "vectorProviderConfigured": false, "graphProviderConfigured": false, "localIndexActive": true, "externalProvidersUsed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_reviewer_decision", "state": "implemented_active", "route": "/api/matm/reviews/decision", "routeRegistered": true, "auth": "reviewer", "truthLabel": "protected reviewer route; promotes, rejects, quarantines, or revokes review-pending MATM memories and trajectories with redacted review evidence", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_authenticated_agent_registration", "state": "implemented_active", "route": "/api/matm/agents/register", "routeRegistered": true, "auth": "submitter", "truthLabel": "protected submitter route; registers producer agents and immutable redacted config versions without treating declared expertise as trust evidence", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_submission_crypto_attestation", "state": "implemented_configuration_required", "route": "/api/matm/memory-events/submit", "routeRegistered": true, "auth": "submitter", "truthLabel": "configured HMAC-SHA256 submission verification for agent registration, Memory Events, and trajectories; raw signatures, keys, and environment values are not exposed", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "requires_configuration", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "cryptoAttestationConfigured": false, "attestationRequired": false, "coveredRoutes": ["/api/matm/agents/register", "/api/matm/memory-events/submit", "/api/matm/trajectories/submit"]}, "safeFallbackAction": "Expose the boundary as configuration-required and avoid live-provider claims until adapters, credentials, and health evidence are present."}, {"id": "matm_memory_firewall_stage_evidence", "state": "implemented_active", "route": "/api/matm/firewall/reports", "routeRegistered": true, "auth": "reviewer_or_scoped_api_key_with_audit_read", "truthLabel": "protected reviewer/audit route lists redacted ten-stage Memory Firewall reports for protected MATM writes; raw payload values are never persisted in report records", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_memory_feedback_reinforcement", "state": "implemented_active", "route": "/api/matm/memories/feedback", "routeRegistered": true, "auth": "reviewer", "truthLabel": "protected reviewer route; records evaluated outcomes, adjusts memory confidence, and updates expertise without exposing private notes", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_outbox_reconciliation_worker", "state": "implemented_active", "route": "python scripts/process_matm_outbox.py", "routeRegistered": false, "auth": "operator_shell", "truthLabel": "deterministic worker command reconciles local MATM outbox projections without external queue delivery claims", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "implemented_local_worker", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": true, "workerScriptExists": true, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "externalQueueConfigured": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_notifications_inbox", "state": "implemented_active", "route": "/api/matm/notifications", "routeRegistered": true, "auth": "reader_or_scoped_api_key_with_notification_read", "truthLabel": "protected local/MariaDB notification inbox lists redacted MATM outbox-derived events with per-principal acknowledgement state; external email, SMS, push, and queue delivery remain unconfigured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "notificationLedgerConfigured": true, "notificationOutboxProjectionConfigured": true, "perPrincipalAcknowledgementConfigured": true, "externalEmailDeliveryConfigured": false, "externalSmsDeliveryConfigured": false, "externalPushDeliveryConfigured": false, "externalQueueConfigured": false, "localInboxOnly": true, "durableNotificationTable": true, "rawOutboxPayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_maintenance_scheduler", "state": "blocked", "route": "/api/matm/maintenance/run", "routeRegistered": true, "auth": "operator", "truthLabel": "protected local MATM maintenance runner records redacted confidence, contradiction, usage, notification, outbox, ingestion, graph, retention, and backup/export readiness scans; no cron, external scheduler, or external queue delivery is configured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": true, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "maintenanceLedgerConfigured": true, "maintenanceRunRouteRegistered": true, "maintenanceListRouteRegistered": true, "durableMaintenanceTable": true, "supportedTasks": ["confidence_decay", "contradiction_scan", "usage_aggregation", "notification_sweep", "outbox_reconciliation", "ingestion_queue", "graph_index", "retention_review", "backup_export_readiness"], "localManualRunnerConfigured": true, "cronConfigured": false, "externalSchedulerConfigured": false, "externalQueueConfigured": false}, "safeFallbackAction": "Inspect route registration, worker packaging, and schema status before claiming this capability."}, {"id": "matm_observability_snapshot", "state": "implemented_active", "route": "/api/matm/observability", "routeRegistered": true, "auth": "operator", "truthLabel": "protected operator route summarizes redacted MATM route, worker, provider, queue, storage, and safety evidence without exposing raw private payloads, metric labels, source bodies, object keys, local paths, environment values, or secrets", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "observabilityRouteRegistered": true, "observabilitySchemaRegistered": true, "operatorProtected": true, "routeInventorySummarized": true, "workerEvidenceSummarized": true, "metricsLabelsRedacted": true, "rawSourceBodiesExposed": false, "rawOutboxPayloadsExposed": false, "objectKeysExposed": false, "localPathsExposed": false, "hiddenReasoningExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_public_graph_projection", "state": "implemented_active", "route": "/api/matm/graph", "routeRegistered": true, "auth": "none", "truthLabel": "public-safe graph projection over approved/public agents, memories, trajectories, contradictions, and supersessions; no external graph provider claim", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_local_projection", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_local_graph_index", "state": "blocked", "route": "/api/matm/graph/index", "routeRegistered": true, "auth": "reader", "truthLabel": "protected reader route lists materialized public-safe graph nodes and edges rebuilt by the local graph-index worker; external graph databases remain unconfigured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": true, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "graphProviderConfigured": false, "materializedGraphIndexAvailable": true, "externalGraphProviderUsed": false, "durableGraphTables": true, "rawSourceBodiesExposed": false, "hiddenReasoningExposed": false}, "safeFallbackAction": "Inspect route registration, worker packaging, and schema status before claiming this capability."}, {"id": "matm_llm_wiki_revision_compiler", "state": "implemented_active", "route": "/api/matm/wiki/revisions/compile", "routeRegistered": true, "auth": "submitter", "truthLabel": "protected submitter route compiles approved MATM sources into review-pending wiki revisions with claim-level evidence; no public promotion without reviewer approval", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "llmGenerationConfigured": true}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_public_wiki_projection", "state": "implemented_active", "route": "/api/matm/wiki", "routeRegistered": true, "auth": "none", "truthLabel": "public-safe materialized wiki projection exposes active public pages, claims, citations, graph, and revision metadata only", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_local_projection", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_tenancy_foundation", "state": "implemented_active", "route": "/api/matm/workspaces/bootstrap", "routeRegistered": true, "auth": "operator", "truthLabel": "operator-gated workspace bootstrap records organizations, workspaces, memberships, service accounts, API keys, and entitlement metadata without accepting private source bodies", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_scoped_api_key_auth", "state": "implemented_active", "route": "/api/matm/api-keys/revoke", "routeRegistered": true, "auth": "operator", "truthLabel": "MATM service-account API keys are hashed at rest, scoped to explicit workspace permissions, returned once, and denied immediately after revocation", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_workspace_member_invitations", "state": "implemented_active", "route": "/api/matm/workspaces/invitations", "routeRegistered": true, "auth": "submitter_or_scoped_api_key", "truthLabel": "protected workspace invitation and accept routes create redacted member ledgers with hashed one-time tokens and local member-seat enforcement; the protected local workspace/member console surfaces those ledgers without secrets, while production UI evidence remains a separate gate", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_workspace_export_retention_actions", "state": "implemented_active", "route": "/api/matm/workspaces/exports", "routeRegistered": true, "auth": "reader_or_submitter_scoped_api_key", "truthLabel": "protected workspace export and retention-action ledgers create redacted local evidence; guarded local source deletion requires destructive approval/explicit enablement, and live object-store downloads or live production deletion require separate configuration", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET", "POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb_redacted", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "signedExportsConfigured": false, "objectStorageConfigured": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_source_ingestion_jobs", "state": "simulated", "route": "/api/matm/sources/ingest", "routeRegistered": true, "auth": "reader_or_submitter_scoped_api_key", "truthLabel": "protected source ingest records source/version/job/chunk/citation metadata with synchronous deterministic test extraction; live object storage and external extraction providers are not configured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb_local_test_extraction", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "objectStorageConfigured": false, "externalExtractionConfigured": false, "localSourceObjectStorageActive": true, "localSourceObjectStoreMode": "local_test_adapter", "localSourceObjectStoreDirConfigured": false, "localSourceObjectStorePathExposed": false, "localSourceObjectEncryptionConfigured": false, "localSourceObjectEncryptedAtRestWhenConfigured": false, "localSourceObjectEncryptionAlgorithm": "", "localSourceObjectEncryptionKeyExposed": false, "liveObjectStorageConfigured": false}, "safeFallbackAction": "Use documented local safe fallbacks and keep claims bounded to current evidence."}, {"id": "matm_entitlement_usage_enforcement", "state": "implemented_active", "route": "/api/matm/usage", "routeRegistered": true, "auth": "reader_or_scoped_api_key", "truthLabel": "workspace entitlements now gate source intake, protected retrieval usage, and marketplace test grants; billing remains local/not live until provider-backed fulfillment is configured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_subscription_billing_lifecycle", "state": "implemented_active", "route": "/api/subscription/webhook", "routeRegistered": true, "auth": "submitter_or_scoped_api_key_plus_signed_webhook", "truthLabel": "protected local/test checkout-session, portal-session, signed-webhook, and redacted-history routes can update MATM entitlement only after verified webhook events; live provider checkout remains unconfigured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "billingProviderConfigured": false, "sellerPayoutConfigured": false, "localSellerPayoutLedgerConfigured": false, "liveSellerPayoutConfigured": false, "providerRefundConfigured": false, "paymentIsSafetyBypass": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_deterministic_evaluation_harness", "state": "implemented_active", "route": "/api/matm/evaluations/run", "routeRegistered": true, "auth": "reviewer_or_operator", "truthLabel": "protected reviewer/operator route runs deterministic local retrieval, citation, faithfulness, contradiction, trajectory, environment, leakage, and prompt-injection checks without external model keys", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_llm_wiki_live_model_generation", "state": "implemented_configuration_required", "route": null, "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "this module uses deterministic templates only; no live LLM generation provider is configured", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "requires_configuration", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "llmGenerationConfigured": true}, "safeFallbackAction": "Use deterministic local MATM routes and mark provider-backed behavior as unavailable until configured and verified."}, {"id": "hybrid_vector_graph_retrieval", "state": "implemented_configuration_required", "route": null, "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "external vector and graph providers are not configured by this module", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "requires_configuration", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "vectorProviderConfigured": false, "graphProviderConfigured": false, "localIndexActive": false, "externalProvidersUsed": false}, "safeFallbackAction": "Use deterministic local MATM routes and mark provider-backed behavior as unavailable until configured and verified."}, {"id": "paid_marketplace_checkout", "state": "implemented_configuration_required", "route": "/api/matm/marketplace", "routeRegistered": true, "auth": "none", "truthLabel": "live checkout and provider-backed billing are not configured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "requires_configuration", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "billingProviderConfigured": false, "sellerPayoutConfigured": false, "localSellerPayoutLedgerConfigured": false, "liveSellerPayoutConfigured": false, "providerRefundConfigured": false, "paymentIsSafetyBypass": false}, "safeFallbackAction": "Use deterministic local MATM routes and mark provider-backed behavior as unavailable until configured and verified."}, {"id": "matm_marketplace_listing_lifecycle", "state": "implemented_active", "route": "/api/matm/marketplace/listings", "routeRegistered": true, "auth": "submitter_seller_and_reviewer", "truthLabel": "protected seller listing submission and reviewer approval/quarantine/reject/revoke routes create redacted local/MariaDB listing ledgers before public browse or purchase", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET", "POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "billingProviderConfigured": false, "sellerPayoutConfigured": false, "localSellerPayoutLedgerConfigured": false, "liveSellerPayoutConfigured": false, "providerRefundConfigured": false, "paymentIsSafetyBypass": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_marketplace_test_grant", "state": "implemented_active", "route": "/api/matm/marketplace/purchase", "routeRegistered": true, "auth": "reader", "truthLabel": "protected test-mode purchase attestation route creates local listing-scoped grants only; payment is not a safety bypass", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "billingProviderConfigured": false, "sellerPayoutConfigured": false, "localSellerPayoutLedgerConfigured": false, "liveSellerPayoutConfigured": false, "providerRefundConfigured": false, "paymentIsSafetyBypass": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_marketplace_refund_revocation", "state": "implemented_active", "route": "/api/matm/marketplace/refunds", "routeRegistered": true, "auth": "reviewer", "truthLabel": "protected reviewer refund/revocation route revokes local grants, updates order state, and records redacted audit without live provider refund claims", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "billingProviderConfigured": false, "sellerPayoutConfigured": false, "localSellerPayoutLedgerConfigured": false, "liveSellerPayoutConfigured": false, "providerRefundConfigured": false, "paymentIsSafetyBypass": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_marketplace_seller_payout_lifecycle", "state": "implemented_active", "route": "/api/matm/marketplace/payouts", "routeRegistered": true, "auth": "reviewer_or_scoped_api_key_with_marketplace_payout", "truthLabel": "protected payout route records redacted local/test-mode seller payout accrual or hold state from reviewed listing and granted order evidence; live provider payouts remain configuration-required", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET", "POST"], "sourceStatus": "implemented_memory_fallback_or_mariadb", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "billingProviderConfigured": false, "sellerPayoutConfigured": true, "localSellerPayoutLedgerConfigured": true, "liveSellerPayoutConfigured": false, "providerRefundConfigured": false, "paymentIsSafetyBypass": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "private_workspace_memory_mutation", "state": "implemented_configuration_required", "route": "/api/v1/matm/*", "routeRegistered": true, "auth": "authorized_durable_store", "truthLabel": "service tokens and nw_* storage required before protected mutation claims", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": [], "sourceStatus": "requires_authorized_durable_store", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Expose the boundary as configuration-required and avoid live-provider claims until adapters, credentials, and health evidence are present."}, {"id": "matm_runtime_capability_registry", "state": "implemented_active", "route": "/api/matm/capabilities", "routeRegistered": true, "auth": "none", "truthLabel": "public side-effect-free registry generated from live route registration, schema status, redacted configuration booleans, and worker script presence", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_runtime_truth", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_ingestion_worker", "state": "implemented_active", "route": "python scripts/process_matm_ingestion_jobs.py", "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "operator-run local worker processes queued MATM ingestion jobs with bounded deterministic test extraction only", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "implemented_local_worker", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": true, "workerScriptExists": true, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "objectStorageConfigured": false, "externalExtractionConfigured": false, "localSourceObjectStorageActive": true, "localSourceObjectStoreMode": "local_test_adapter", "localSourceObjectStoreDirConfigured": false, "localSourceObjectStorePathExposed": false, "localSourceObjectEncryptionConfigured": false, "localSourceObjectEncryptedAtRestWhenConfigured": false, "localSourceObjectEncryptionAlgorithm": "", "localSourceObjectEncryptionKeyExposed": false, "liveObjectStorageConfigured": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_retention_worker", "state": "implemented_active", "route": "python scripts/process_matm_retention_actions.py", "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "operator-run local worker applies retention metadata transitions and can perform opt-in local source-object deletion only when destructive controls are explicitly enabled", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "implemented_local_worker", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": true, "workerScriptExists": true, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "destructiveRetentionDeletionConfigured": false, "destructiveDeletionLocalOnly": true, "destructiveDeletionRequiresCliOptIn": true, "destructiveDeletionRequiresReviewApproval": true, "liveProductionDeletionConfigured": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_backup_restore_drill", "state": "blocked", "route": "/api/matm/backup/manifest", "routeRegistered": true, "auth": "operator", "truthLabel": "operator-only redacted backup manifest and CLI verification/dry-run drill cover MATM nw_* table contracts, local source-object evidence, and index rebuild commands without restoring or exposing private payloads", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_local_drill", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": true, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "backupManifestRouteRegistered": true, "backupRestoreScriptExists": false, "mariadbBackupDocumented": true, "localSourceObjectBackupDocumented": true, "graphIndexRebuildDocumented": false, "restoreDryRunMutatesState": false, "manifestRawRecordsIncluded": false, "sourceBodiesIncluded": false, "objectKeysExposed": false, "localPathsExposed": false, "liveProviderBackupConfigured": false}, "safeFallbackAction": "Inspect route registration, worker packaging, and schema status before claiming this capability."}, {"id": "matm_object_storage_for_private_sources", "state": "implemented_configuration_required", "route": null, "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "live S3-compatible private source object storage remains configuration-required; local test source-object storage is reported separately", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "requires_configuration", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "objectStorageConfigured": false, "externalExtractionConfigured": false, "localSourceObjectStorageActive": true, "localSourceObjectStoreMode": "local_test_adapter", "localSourceObjectStoreDirConfigured": false, "localSourceObjectStorePathExposed": false, "localSourceObjectEncryptionConfigured": false, "localSourceObjectEncryptedAtRestWhenConfigured": false, "localSourceObjectEncryptionAlgorithm": "", "localSourceObjectEncryptionKeyExposed": false, "liveObjectStorageConfigured": false}, "safeFallbackAction": "Expose the boundary as configuration-required and avoid live-provider claims until adapters, credentials, and health evidence are present."}, {"id": "matm_local_source_object_store", "state": "implemented_active", "route": "MATM_LOCAL_SOURCE_OBJECT_STORE_DIR", "routeRegistered": false, "auth": "submitter_or_worker_local_runtime", "truthLabel": "file-backed local test source-object adapter stores submitted source bodies outside API records with redacted handles for deterministic ingestion workers; when MATM_LOCAL_SOURCE_OBJECT_ENCRYPTION_KEY is configured it writes authenticated local encrypted envelopes", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "implemented_local_adapter", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "objectStorageConfigured": false, "externalExtractionConfigured": false, "localSourceObjectStorageActive": true, "localSourceObjectStoreMode": "local_test_adapter", "localSourceObjectStoreDirConfigured": false, "localSourceObjectStorePathExposed": false, "localSourceObjectEncryptionConfigured": false, "localSourceObjectEncryptedAtRestWhenConfigured": false, "localSourceObjectEncryptionAlgorithm": "", "localSourceObjectEncryptionKeyExposed": false, "liveObjectStorageConfigured": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_signed_export_downloads", "state": "implemented_configuration_required", "route": "/api/matm/workspaces/exports/signed-url", "routeRegistered": true, "auth": "reader_or_scoped_api_key_with_export_download", "truthLabel": "protected local signed export-download adapter exists for redacted JSON bundles; active issuance requires MATM_EXPORT_SIGNING_KEY and still does not claim live object storage", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "requires_configuration", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "signedExportsConfigured": false, "objectStorageConfigured": false}, "safeFallbackAction": "Use redacted workspace export manifests only; do not promise private file downloads."}, {"id": "matm_external_extraction_provider", "state": "planned", "route": null, "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "source ingestion uses bounded deterministic local-test extraction until an external extraction adapter is implemented and configured", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "planned", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "objectStorageConfigured": false, "externalExtractionConfigured": false, "localSourceObjectStorageActive": true, "localSourceObjectStoreMode": "local_test_adapter", "localSourceObjectStoreDirConfigured": false, "localSourceObjectStorePathExposed": false, "localSourceObjectEncryptionConfigured": false, "localSourceObjectEncryptedAtRestWhenConfigured": false, "localSourceObjectEncryptionAlgorithm": "", "localSourceObjectEncryptionKeyExposed": false, "liveObjectStorageConfigured": false}, "safeFallbackAction": "Treat this as roadmap/planned work; do not route production users or agents to it as active functionality."}, {"id": "matm_live_billing_webhooks", "state": "implemented_active", "route": "/api/subscription/webhook", "routeRegistered": true, "auth": "see_route_documentation", "truthLabel": "signed local/test subscription webhooks can update MATM workspace entitlements; live provider checkout and provider-backed subscription fulfillment remain unconfigured", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["POST"], "sourceStatus": "implemented_local_test_signed_webhook", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "billingProviderConfigured": false, "sellerPayoutConfigured": false, "localSellerPayoutLedgerConfigured": false, "liveSellerPayoutConfigured": false, "providerRefundConfigured": false, "paymentIsSafetyBypass": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_member_management_ui", "state": "implemented_active", "route": "/matm/workspace/", "routeRegistered": true, "auth": "reader", "truthLabel": "protected local MATM workspace/member console lists authorized workspace, membership, invitation, service-account, API-key, quota, source, export, and retention summaries without raw secrets or private payloads; live production deployment evidence remains required", "evidence": {"routeInventoryProvided": true, "routeRegistered": true, "registeredMethods": ["GET"], "sourceStatus": "implemented_local_ui", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false}, "safeFallbackAction": "Use the listed local route or worker command with documented auth and review boundaries."}, {"id": "matm_destructive_deletion_jobs", "state": "implemented_configuration_required", "route": "python scripts/process_matm_retention_actions.py --allow-destructive", "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "guarded local deletion worker can tombstone source metadata and remove local source-object files only with destructive permission, review attestation, CLI opt-in, and MATM_DESTRUCTIVE_RETENTION_ENABLED; live production deletion remains unconfigured", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "requires_configuration", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "destructiveRetentionDeletionConfigured": false, "destructiveDeletionLocalOnly": true, "destructiveDeletionRequiresCliOptIn": true, "destructiveDeletionRequiresReviewApproval": true, "liveProductionDeletionConfigured": false}, "safeFallbackAction": "Use non-destructive retention records by default; local deletion requires destructive approval, CLI opt-in, and protected environment enablement."}, {"id": "matm_external_queue_delivery", "state": "planned", "route": null, "routeRegistered": false, "auth": "see_route_documentation", "truthLabel": "local workers reconcile ledgers and projections only; no external queue delivery is configured or claimed", "evidence": {"routeInventoryProvided": true, "routeRegistered": false, "registeredMethods": [], "sourceStatus": "planned", "durableConfigured": true, "durableSchemaCurrent": false, "storageMode": "mariadb", "workerScriptExpected": false, "workerScriptExists": false, "providerSignalsRedacted": true, "environmentValuesExposed": false, "rawPrivatePayloadsExposed": false, "externalQueueConfigured": false}, "safeFallbackAction": "Treat this as roadmap/planned work; do not route production users or agents to it as active functionality."}], "next": {"profile": "/api/matm/profile", "schemas": "/api/matm/schemas", "capabilitySchema": "/schemas/matm-capability-registry.schema.json"}}, "errors": [], "requestId": "fd61f56d-f837-4b50-835a-5a46e675fb10"}