{
  "ok": true,
  "code": "MG-EGRESS-CITE",
  "verdict": "yes",
  "yes": true,
  "message": "Cap-7 control plane is LIVE. geo-target records a region label. session-stick binds a mesh node and a factory land for a TTL. egress-rotate moves that land among the seven sites. None of these allocate a public egress IP or a Cloudflare geo-exit pool.",
  "spec": "MG-EGRESS-1.0",
  "author": "Aziel Eliab",
  "identity": "Aziel Eliab",
  "residential": false,
  "egress_ip": null,
  "public_egress_ip": false,
  "sticky_public_ip": false,
  "sticky_ip": false,
  "cf_geo_exit_pool": false,
  "geo_pool": false,
  "ip_exit": false,
  "ip_rotated": false,
  "vpn_hosted_live": false,
  "packet_forwarding": false,
  "hosted_vpn": false,
  "anonymity_network": false,
  "azvpn_separate": true,
  "azvpn_merged": false,
  "wireguard": false,
  "openvpn": false,
  "l3_exit": false,
  "public_icann": false,
  "public_icann_registrar": false,
  "typed_on_icann_dns": false,
  "fraggate_stub_ops": [
    "vpn-hop",
    "hop",
    "tunnel",
    "mesh"
  ],
  "worker_live_ops": [
    "geo-target",
    "session-stick",
    "egress-rotate"
  ],
  "softwares_catalog_live": true,
  "softwares_note": "CLEARED: Softwares companion on aziel-runtime (tip be1c7990452094536b122645103d41f595c03c76, version_id 1c2de0ef-f315-4444-86aa-aec03f730a58) lists geo-target, session-stick, and egress-rotate in public_door_ops (MirageGrid 0.3.0). Cap-7 control-plane LIVE only — not a public egress IP, not residential, not AZVPN. Softwares desk layout unchanged; Softwares count stays 42.",
  "cite": true,
  "control_plane": "live",
  "live": {
    "geo_target": "POST /v1/egress/geo or POST /v1/geo-target — region label on a mesh node and a Cap-7 land. ip_exit false.",
    "session_stick": "POST /v1/session/sticky or POST /v1/session-stick or POST /v1/egress/sticky — same sticky_key, same node id and Cap-7 site. TTL is a time-bucket hash. Not a public IP.",
    "egress_rotate": "POST /v1/egress/rotate or POST /v1/egress-rotate — next Cap-7 factory land. Not packet egress.",
    "assign": "POST /v1/assign — session circuit. A region label, sticky_key, or land rotate stamps the Cap-7 plane. Not an egress IP."
  },
  "not_hosted": {
    "public_egress_ip": "MG-NO-IP-EXIT. No sticky public address and no Cloudflare geo-exit pool.",
    "packet_hop": "FragGate vpn-hop, hop, tunnel, and mesh stay FG-STUB. They are not Cap-7 land hops.",
    "painted_endpoints": "MG-NO-EGRESS-PAINT. Callers cannot write listen addresses onto the pool."
  },
  "not": [
    "residential IP network",
    "anonymity network",
    "hosted packet VPN",
    "Cloudflare geo-exit pool",
    "sticky public IP",
    "AZVPN (separate Softwares product)",
    "public ICANN registrar"
  ],
  "azvpn": false,
  "sticky_ip_means": "On MirageGrid, the sticky path is a Cap-7 session/land stick: one mesh node id and one factory site for the key (and for a TTL window when ttl_seconds is set). sticky_public_ip stays false. A public egress address is not allocated.",
  "vector": {
    "sticky_key": "booth-1",
    "sha256": "97f92cd52d11c560baf28f1e6b93cd6d996a3b2aa5d5a33a0335dfe10af62490",
    "index": 20,
    "node_id": "node-21"
  },
  "communication_plane": true,
  "channel_plane_is_vpn": false,
  "pairing_is_tunnel": false,
  "second_door": false,
  "open_proxy": false,
  "fraggate_single_door": true,
  "this_worker_is_node_gate": false,
  "node_gate_exit": "node-gate-front",
  "radio_phy": false,
  "factory_honesty": "LIVE",
  "hosted_endpoints": "LIVE",
  "hosted_update": "LIVE",
  "hosted_mcp": "LIVE",
  "public_shuffle_land_exec": "LIVE",
  "anchored_by_live_nodes": true,
  "domain_anchor": "live-nodes",
  "internet_reaches": "az-domains",
  "cap7_typed_on_icann_dns": false,
  "cap7_internet_reachable": false,
  "aznet_payload_host": false,
  "payload_host": "stub",
  "is_live_door": false,
  "public_hostname_resurrection": false,
  "hash_receipt": {
    "worker_session_hash": true,
    "second_receipt_door": false,
    "fraggate_slug": "miragegrid",
    "fraggate_ops": [
      "verify-receipt"
    ],
    "aznet_verify": [
      "stamp",
      "verify_hash",
      "receipt_verify"
    ],
    "door": "fraggate_call",
    "continuity": "aznet-verify-via-fraggate",
    "note": "Worker receipt is SHA-256 of session fields. Ban-survival hash continuity is AZNet verify via FragGate, not a second Worker door."
  },
  "planned": {
    "status": "live",
    "live": true,
    "hosted": true,
    "executable": true,
    "hosted_vpn": false,
    "packet_forwarding": false,
    "packet_hop": false,
    "public_icann": false,
    "typed_on_icann_dns": false,
    "icann_publish": false,
    "anonymity_network": false,
    "azvpn_softwares": false,
    "not_azvpn": true,
    "ip_exit": false,
    "public_egress_ip": false,
    "sticky_public_ip": false,
    "cf_geo_exit_pool": false,
    "wireguard": false,
    "openvpn": false,
    "l3_exit": false,
    "fraggate_stubs": [
      "vpn-hop",
      "hop",
      "tunnel",
      "mesh"
    ],
    "worker_live_ops": [
      "geo-target",
      "session-stick",
      "egress-rotate"
    ],
    "softwares_catalog_live": true,
    "softwares_count": 42,
    "softwares_desk_frozen": true,
    "softwares_companion_tip": "be1c7990452094536b122645103d41f595c03c76",
    "softwares_companion_version_id": "1c2de0ef-f315-4444-86aa-aec03f730a58",
    "softwares_note": "CLEARED: Softwares companion on aziel-runtime (tip be1c7990452094536b122645103d41f595c03c76, version_id 1c2de0ef-f315-4444-86aa-aec03f730a58) lists geo-target, session-stick, and egress-rotate in public_door_ops (MirageGrid 0.3.0). Cap-7 control-plane LIVE only — not a public egress IP, not residential, not AZVPN. Softwares desk layout unchanged; Softwares count stays 42.",
    "fraggate_stub_code": "FG-STUB",
    "fraggate_stub_executable": false,
    "control_plane_executable": true,
    "mesh_op_is_qnm_suite_mesh": false,
    "mesh_op_note": "FragGate op mesh stays non-executable (runtime FG-STUB). It is not QNM suite mesh_* and it is not GET /v1/mesh status. Cap-7 geo-target, session-stick, and egress-rotate are control-plane LIVE (region label, sticky mesh, land rotate). They are not packet hops.",
    "sticky_ip_means": "session/land stick on the Cap-7 plane. sticky_public_ip is false. MirageGrid does not host a sticky public egress address or a Cloudflare geo-exit pool.",
    "geo_target": {
      "name": "geo-target",
      "status": "live",
      "live": true,
      "hosted": true,
      "executable": true,
      "packet_forwarding": false,
      "packet_hop": false,
      "public_icann": false,
      "typed_on_icann_dns": false,
      "icann_publish": false,
      "ip_exit": false,
      "public_egress_ip": false,
      "sticky_public_ip": false,
      "cf_geo_exit_pool": false,
      "azvpn": false,
      "hosted_vpn": false,
      "note": "Optional region label on assign or shuffle land. Metadata only. No IP geo-exit. No Cloudflare geo-exit pool."
    },
    "session_stick": {
      "name": "session-stick",
      "status": "live",
      "live": true,
      "hosted": true,
      "executable": true,
      "packet_forwarding": false,
      "packet_hop": false,
      "public_icann": false,
      "typed_on_icann_dns": false,
      "icann_publish": false,
      "ip_exit": false,
      "public_egress_ip": false,
      "sticky_public_ip": false,
      "cf_geo_exit_pool": false,
      "azvpn": false,
      "hosted_vpn": false,
      "note": "Bind a session or land to the same Cap-7 site and node id for a TTL. Sticky mesh label, not a public IP. TTL is a time-bucket hash."
    },
    "egress_rotate": {
      "name": "egress-rotate",
      "status": "live",
      "live": true,
      "hosted": true,
      "executable": true,
      "packet_forwarding": false,
      "packet_hop": false,
      "public_icann": false,
      "typed_on_icann_dns": false,
      "icann_publish": false,
      "ip_exit": false,
      "public_egress_ip": false,
      "sticky_public_ip": false,
      "cf_geo_exit_pool": false,
      "azvpn": false,
      "hosted_vpn": false,
      "note": "Rotate the hosted update land among Cap-7 sites. Not ICANN publish. Not a packet hop. Not a public egress IP."
    }
  }
}