{
  "date": "2026-10-04",
  "scope": "Local Go gateway/application deployment configuration; documentation-only publication",
  "productionFiles": [
    "internal/app/consumer_client_ip.go",
    "internal/app/consumer_platform.go",
    "internal/app/config_defaults.go",
    "internal/app/ui_server.go",
    "services/application.mjs"
  ],
  "configuration": {
    "importableGoOptions": "ConsumerProxyOptions.TrustedProxyCIDRs",
    "importableApplicationOptions": "web.trustedProxyCIDRs",
    "standaloneEnvironment": "DRAMIVIO_TRUSTED_PROXY_CIDRS",
    "defaultTrustedCIDRs": [],
    "trustedHeader": "X-Forwarded-For",
    "recognition": "Walk socket-to-client through explicitly trusted hops, stop at first untrusted address"
  },
  "tests": {
    "proxyPaths": 14,
    "goConsumerRace": {
      "passedIncludingSubtests": 50,
      "passedTopLevel": 32,
      "skippedIncludingSubtests": 5,
      "raceDetected": false,
      "packagePassed": true,
      "log": "work/existing-project/trusted-proxy-go-consumer-race.log"
    },
    "applicationStartup": {
      "passed": 6,
      "failed": 0,
      "log": "work/existing-project/trusted-proxy-startup-tests.log"
    },
    "adminFull": {
      "passed": 88,
      "failed": 0,
      "log": "work/existing-project/trusted-proxy-admin-full.log"
    },
    "goBuild": {
      "passed": true,
      "log": "work/existing-project/trusted-proxy-go-build.log"
    },
    "platformPriorFull": {
      "passed": 263,
      "reused": true,
      "businessBehaviorUnchangedThisPhase": true
    },
    "appPriorFull": {
      "passed": 356,
      "reused": true,
      "sourceUnchangedThisPhase": true
    }
  },
  "joint": {
    "actualProxyHops": 2,
    "actualBoundClientIPs": 2,
    "verifiedAccounts": 3,
    "profilesUseActualClientIP": true,
    "frameworkSessionsUseActualClientIP": true,
    "differentIPHasNoSharedSignal": true,
    "sameIPSignalRetained": true,
    "invitationRelations": 2,
    "rewardRows": 0,
    "otpSameIPFourthRequestRejected": true,
    "forgedHeaderRetriesRejected": 3,
    "otherClientStillAccepted": true,
    "sourceRequestsForbidden": true,
    "scope": "Actual Linux TCP proxies/Go/Better Auth/RAM PG; cookie jars and captured OTP; no real CDN, SMTP, installation or credible watching",
    "goExitCode": 0,
    "goLog": "work/existing-project/trusted-proxy-joint-go.log",
    "clientRuntime": "node:22.22.1-alpine; temporary container, no published ports or host network aliases"
  },
  "review": {
    "actor": "root",
    "freshIndependentReview": false,
    "checks": [
      "One resolver for auth and business commands",
      "Default ignores forwarded headers",
      "Only deployment-selected proxies can supply chain",
      "Untrusted client prefix cannot replace last untrusted hop",
      "Malformed trusted hops fall back to socket",
      "Forwarded/CF/real-IP and internal identity headers removed before auth forwarding",
      "Bad options do not replace prior platform; 0/0 startup refused",
      "Explicit composition overrides ambient proxy trust",
      "Official session/IP and quota/invitation domain unchanged"
    ]
  },
  "remaining": [
    "Actual Nginx/Cloudflare/production ingress acceptance",
    "Real SMTP",
    "Credible viewing/installation proof",
    "Full remaining product acceptance"
  ],
  "unchanged": [
    "No schema migration or production dependency",
    "No App, native build, APK or OTA change",
    "No live system/proxy configuration edited",
    "Media outbound proxy/relay remains existing functionality"
  ],
  "sources": [
    "https://nginx.org/en/docs/http/ngx_http_realip_module.html",
    "https://developers.cloudflare.com/fundamentals/reference/http-headers/",
    "https://www.cloudflare.com/ips/"
  ]
}