JPNS authenticated diagnostics

Administrator-only diagnostics. No credentials are displayed or stored. Health checks do not activate transport. Loopback creates a synthetic same-app receipt. Signed delivery requires separately configured server secrets and tests JD-to-Neural without granting execution authority.

Persisted synthetic receipt UUID

Neon migration and atomic-write controls are locked until independent development-branch attestation and separate write authorization. Read-only diagnostics remain available.

Atomic test also requires all nine schema checks in this session.

Receiver recovery evidence checklist

Separate read-only database requests establish persistence, not restart recovery. For a controlled recovery assessment, save the synthetic receipt ID and diagnostic, document a separately authorized receiver restart, then repeat targeted read-only verification and the synthetic duplicate retry. Compare receipt IDs and confirm no duplicate was created.

Restart recovery is unverified. This checklist performs no restart, deployment, data write, or production action.