{
  "schema": "icerti.ssh-service-preflight.v1",
  "status": "STOPPED_AT_REBOOT_BOUNDARY",
  "capability_state": "InstallPending",
  "cbs_reboot_pending": true,
  "cbs_packages_pending": true,
  "windows_update_reboot_required": true,
  "inbox_sshd_binary_present": false,
  "standard_sshd_service_present": false,
  "temporary_ssh_retained": true,
  "service_transition_performed": false,
  "runtime_or_security_configuration_writes": 0,
  "checks": {
    "read_only_admin_ssh_succeeded": true,
    "host_key_matches_pinned_identity": true,
    "expected_temporary_ssh_listener": true,
    "password_authentication_disabled": true,
    "public_key_authentication_required": true,
    "forwarding_disabled": true,
    "single_existing_source_restriction": true,
    "preserved_nine_files_unchanged": true,
    "chrome_pid_start_unchanged": true,
    "nginx_pid_start_unchanged": true,
    "containers_identity_image_start_unchanged": true,
    "os_boot_time_unchanged": true,
    "same_media_process": true,
    "2026-11-01_icerti-web-media-analysis_r01_manifest_unchanged": true,
    "2026-11-01_icerti-web-media-recovery_r01_manifest_unchanged": true
  },
  "not_tested": [
    "service automatic startup",
    "service restart and fresh connection",
    "before-login/reboot behavior"
  ],
  "next": "User-authorized maintenance reboot and follow-up actual installation/service/firewall check; do not force-clear pending state or silently promote Preview."
}