{
  "apiVersion": "v1",
  "kind": "ConfigMap",
  "metadata": {
    "name": "hwlab-v03-health-contract",
    "namespace": "hwlab-v03",
    "labels": {
      "app.kubernetes.io/name": "hwlab-v03-health-contract",
      "hwlab.pikastech.local/profile": "v03",
      "hwlab.pikastech.local/gitops-target": "v03",
      "hwlab.pikastech.local/source-commit": "d0174c25bbb9d744fe5a9b555174684af0146089",
      "hwlab.pikastech.local/environment": "v03"
    },
    "annotations": {
      "hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
    }
  },
  "data": {
    "endpoint": "https://lab-dev.hwpod.com",
    "cloud-api": "GET /health/live through https://lab-dev.hwpod.com",
    "cloud-api-db": "DEV DB config gate requires HWLAB_CLOUD_DB_URL from Secret hwlab-cloud-api-dev-db/database-url and HWLAB_CLOUD_DB_SSL_MODE=disable. Runtime readiness dials the redacted host parsed from the Secret URL and reports endpointSource=secret-url-host. cloud-api-db is an optional desired alias only until this repo owns Service plus Endpoint or EndpointSlice manifests and rollout/apply contract; health reports env presence, env injection, redacted connection attempt/result, and liveConnected without exposing secret values",
    "cloud-web": "GET /health/live on https://lab-dev.hwpod.com; consumes cloud-api only",
    "agent": "hwlab-cloud-api authorizes Code Agent sessions and dispatches execution to AgentRun v0.1; no HWLAB-owned agent manager/worker service is deployed",
    "edge-proxy": "hwlab-edge-proxy:6667 exposes /health/live and proxies DEV endpoint traffic to hwlab-cloud-api",
    "runtime-substitute-policy": "Do not replace HWLAB runtime with UniDesk backend, provider-gateway, or microservice proxy"
  }
}