Bioness Medical Pilot

Scheduler uses postgres_schedule_registry with bullmq_redis; 7/7 automations are active-ready and raw server cron is blocked.

Stable Lightsail origin is protected by the origin verification header and direct-origin denial.

PostgreSQL, Redis, artifacts, and parser are local to the single Lightsail host for this pilot profile.

This pilot records cold rebuild evidence and no-restore risk acceptance instead of snapshots or managed backups.

Lightsail pilot limits are 3 sync runs, 10 async runs, and 1 browser or sandbox run before upgrade review.

Runtime egress trace detail returned metadata-only trace detail for trace:bioness:runtime:tool-egress-denial; customer data, raw payloads, external calls, and paid provider calls are blocked.

Miranda uses the shared platform Entra app and Teams bot; Bioness tenant consent and group mapping remain onboarding gates.

Audit-critical mutation paths fail closed when local audit storage is unavailable; Object Lock exports require an upgrade.

5 support action previews returned preview-only controls; commits, raw-payload access, customer notification delivery, compliance export, external calls, and paid provider calls remain blocked.

OpenAI, Anthropic, and OpenRouter paid inference remains blocked without bounded approval evidence.

Scheduler create/edit/action controls return draft-only or preview-only records with confirmation, approval, readiness, and rollback gates before activation.

Current c15ddf8c78c6; rollback none.

Feature flags, environment pins, soak gates, and rollback manifests are Miranda-native records; second-customer rollout is blocked until soak evidence exists.