Version 0.14 Verification & Recovery

Compare signed receiver callbacks with explicitly configured read-only vendor ticket lookups. A match is evidence, not vendor certification.

Optional API access token (or use an authenticated SSO session)

Ready.

Configured lookup connectors

Disabled until an administrator reviews and enables it. Connector host must match an already approved ITSM delivery host. Secrets are referenced by alias.

Host	Status	Control

Register lookup connector

Approved ITSM endpoint IDTicket lookup URL prefixRead-only bearer secret alias

Configure ATLAS_DELIVERY_KEY_<ALIAS>_FILE as a root/operator-protected secret file. Required GET response: JSON with string id and state.

Signed ticket receipts

Verification makes an explicit network request to the preapproved read-only connector. Only administrators can trigger it.

Ticket	Callback state	Verify

Verification history

Time	Ticket	Callback	Vendor lookup	Outcome

Deployment requirements

A successful read-only query is not a complete live ServiceNow integration test. Complete independent PostgreSQL recovery, IdP browser acceptance, egress firewall controls and on-site rack engineering signoff before production use. The original prototype page retains a weaker legacy CSP.