{"ok":true,"module":"Deriox Guard Mini PC Secure Update Plan","version":"m8.14","plan":{"id":1,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","plan_title":"M8.14 Gateway Agent Secure Update Plan","phase_code":"M8.14","plan_status":"secure_update_plan_active_metadata_only","channel_count":3,"manifest_count":1,"check_count":8,"ready_check_count":8,"secure_update_score":100,"executive_summary":"M8.14 defines the secure update model for the mini PC gateway agent: update channels, signed manifests, SHA256 checksum, manual approval, rollout percentage and rollback. It is plan-only: no real update, no auto-update and no download\/install is enabled.","secure_update_plan_only":1,"real_update_enabled":0,"auto_update_enabled":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"outbound_only_required":1,"plain_token_included":0,"camera_password_included":0,"stream_link_included":0,"media_included":0,"billing_enabled":0,"does_not_execute_camera_actions":1,"metadata_only_control":1,"created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},"channels":[{"id":1,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","channel_key":"M814-CHANNEL-stable","channel_title":"Stable channel","channel_status":"planned_metadata_only","sort_order":10,"rollout_percent":0,"manual_approval_required":1,"auto_update_allowed_later":0,"rollback_required":1,"checksum_required":1,"signature_required":1,"metadata_only":1,"description":"For approved production gateway agents.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":2,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","channel_key":"M814-CHANNEL-pilot","channel_title":"Pilot channel","channel_status":"planned_metadata_only","sort_order":20,"rollout_percent":0,"manual_approval_required":1,"auto_update_allowed_later":0,"rollback_required":1,"checksum_required":1,"signature_required":1,"metadata_only":1,"description":"For controlled pilot deployments before stable.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":3,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","channel_key":"M814-CHANNEL-lab","channel_title":"Lab channel","channel_status":"planned_metadata_only","sort_order":30,"rollout_percent":0,"manual_approval_required":1,"auto_update_allowed_later":0,"rollback_required":1,"checksum_required":1,"signature_required":1,"metadata_only":1,"description":"For internal lab testing only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"}],"manifests":[{"id":1,"manifest_uuid":"M814-DEMO-MANIFEST-METADATA-ONLY","plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","channel_key":"M814-CHANNEL-lab","agent_version":"m8.14-demo","manifest_status":"planned_metadata_only","package_url":null,"package_sha256":"985b87427595a03dd0af704c81db3b80d6fad3b736f709b08501ee2cedf03f57","signature_status":"signature_required_later","rollout_percent":0,"download_enabled":0,"install_enabled":0,"auto_update_enabled":0,"rollback_available":1,"manual_approval_required":1,"plain_token_included":0,"camera_password_included":0,"stream_link_included":0,"media_included":0,"billing_enabled":0,"does_not_execute_camera_actions":1,"metadata_only":1,"release_notes":"Demo metadata-only manifest. No real package URL and no install enabled.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"}],"checks":[{"id":1,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-manual_approval","check_title":"Manual Admin Deriox approval required","check_group":"governance","check_status":"ready_metadata_only","severity":"info","sort_order":10,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":2,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-sha256","check_title":"SHA256 checksum required","check_group":"integrity","check_status":"ready_metadata_only","severity":"info","sort_order":20,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":3,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-signature","check_title":"Package signature required","check_group":"integrity","check_status":"ready_metadata_only","severity":"info","sort_order":30,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":4,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-rollback","check_title":"Rollback path required before rollout","check_group":"rollback","check_status":"ready_metadata_only","severity":"info","sort_order":40,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":5,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-no_auto_update","check_title":"Auto-update disabled until explicit future activation","check_group":"safety","check_status":"ready_metadata_only","severity":"info","sort_order":50,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":6,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-no_secrets","check_title":"Update manifest must not contain secrets\/plain tokens","check_group":"secrets","check_status":"ready_metadata_only","severity":"info","sort_order":60,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":7,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-no_camera_payload","check_title":"Update manifest must not contain camera passwords\/streams\/media","check_group":"camera","check_status":"ready_metadata_only","severity":"info","sort_order":70,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"},{"id":8,"plan_uuid":"M814-GATEWAY-AGENT-SECURE-UPDATE-PLAN","check_key":"M814-CHECK-no_camera_actions","check_title":"Update package must not execute camera actions by manifest","check_group":"execution","check_status":"ready_metadata_only","severity":"info","sort_order":80,"required":1,"blocks_update":0,"manual_approval_required":1,"checksum_required":1,"signature_required":1,"rollback_required":1,"plain_token_allowed":0,"camera_password_allowed":0,"stream_link_allowed":0,"media_allowed":0,"billing_enabled":0,"does_not_execute":1,"metadata_only":1,"details":"M8.14 secure update safety check. Plan-only.","created_at":"2026-05-29 21:21:48","updated_at":"2026-05-29 21:21:48"}],"security":{"secure_update_plan_only":true,"real_update_enabled":false,"auto_update_enabled":false,"manual_approval_required":true,"checksum_required":true,"signature_required":true,"rollback_required":true,"outbound_only_required":true,"plain_token_included":false,"camera_password_included":false,"camera_password_in_cloud_allowed":false,"real_camera_access_enabled":false,"stream_links_allowed":false,"media_links_allowed":false,"billing_enabled":false,"does_not_execute_camera_actions":true,"metadata_only_control":true},"message":"Secure update is plan-only in M8.14. No real update, auto-update, download or install is enabled."}