{"service": "helwa-bridge", "status": "ok", "mode": "read_only_safe", "version": "1.2.3", "public_surfaces": {"actions_schema": "/actions/schema", "openapi": "/openapi.json", "routes": "/routes", "health": "/health", "status": "/status", "monitor_summary": "/monitor/summary", "gates_status": "/gates/status", "gates_policy": "/gates/policy", "docs": "/docs", "diagnostics_console": "/diagnostics/"}, "authentication": {"scheme": "http bearer", "header": "Authorization: Bearer <token>", "applies_to": "every route not listed in public_surfaces", "note": "Public surfaces are read-only and grant no write, shell, maintenance or owner authority. Richer operational detail is returned to authenticated callers only."}, "authority_model": {"write_gate": "owner_approval_required", "mutation_from_http": "staging locations only", "canonical_targets": "maintenance session required", "autonomous_mutations": false}, "evidence_rule": "HTTP 200 is reachability, not proof. Source implemented is not runtime executed. A preview is not an execution.", "authenticated_view_available": true, "actions_schema": "/actions/schema", "docs": "/docs", "health": "/health", "status_route": "/status", "routes": "/routes", "openapi": "/openapi.json", "monitor": "/monitor/summary", "gates": "/gates/status", "upwork_app": "/upwork", "upwork_callback": "/upwork/oauth/callback"}