{
 "phase": "L3 phase 2 (Npontu-owned host validation, read-only)",
 "executed": "2026-08-10",
 "gate": "operator 'го' on phase 2",
 "results": [
  {"vector": "SSH F1 SBX key -> npontucontrl@148.251.89.119:22", "result": "CLOSED", "detail": "Connection refused on 22; 2304/2222 filtered. sshd not exposed. CI cred stale."},
  {"vector": "SSH F1 LIVE key -> npontucontrl@138.201.221.144:2304", "result": "BLOCKED", "detail": "No route to host (REJECT firewall) on 22/2304/2222. Host alive via ICMP."},
  {"vector": "MySQL hellio server6user@95.216.10.33:3327", "result": "INVALID", "detail": "1045 access denied (current IP not in grant or pw rotated). Port OPEN, MySQL 5.7.32-log."},
  {"vector": "MySQL hellio kafkauser@144.76.195.8:3117", "result": "VALID", "detail": "CURRENT_USER kafkauser@%, MySQL 5.7.35-log. DBs: hellio, sender_api_db, test_hellio. hellio.logs_* tables to 67M rows (SMS traffic logs), users 2932, subscribers 235665."},
  {"vector": "MySQL ticketingtool/payments kafkauser|matrix@95.216.48.142:3117", "result": "UNREACHABLE", "detail": "Timeout / 2003 (110). Host down or firewalled."},
  {"vector": "Postgres creditscoring kafkauser@148.251.89.119:5442", "result": "VALID", "detail": "PG 15.18 (RHEL). db=creditscoring. Tables: consent_records 1041, applications 31, customers 17, transaction_history 14, loan_history 12. Credit-scoring prod DB."},
  {"vector": "Postgres snwolley_alpha kafkauser@65.109.51.221:5542", "result": "VALID", "detail": "PG 12.22 (Ubuntu). db=snwolley_alpha. Tables: chat_history 2101, applicants 1709, upload_sessions 1066, users 7, payments 2, wallets 7."},
  {"vector": "MySQL Kannel adgonaa@88.198.26.111:3327", "result": "INVALID", "detail": "1045 denied. Port OPEN MariaDB 5.5.56."},
  {"vector": "Kafka Connect overlord@static.66.8.9.5...:8083", "result": "VALID", "detail": "GET /connectors 200: 8 CDC connectors. Cascade creds -> hellio, ticketingtool, npontupay, snwolley, creditscoring DBs. See L3_kafka_connectors.json."},
  {"vector": "contentshare API contentshare_user@api-contentshare.snwolley.com", "result": "UNREACHABLE", "detail": "Connection refused on 443/80."},
  {"vector": "esme kannel mtnuser@esme.npontutechnologies.com:13014", "result": "NO-ANON-SURFACE", "detail": "Port open, all status paths 404 'Unknown request.' Admin servlet not on guessed paths."}
 ]
}