{"ok":true,"service":"recovery-routing-simulation","mode":"simulation","simulationMode":"healthy","timestamp":"2026-08-27T04:21:44.261Z","alertStatus":"clear","severity":"info","status":"clear","activeIncident":false,"criticalIncident":false,"summary":{"total":9,"healthy":9,"degraded":0,"down":0,"overall":"healthy"},"affectedProviders":[],"routePath":["Unified Dashboard","Operational Command Center","Provider Health Polling"],"stages":[{"stage":"Alert Detection","owner":"Provider Health Polling","purpose":"Detect degraded or down provider state.","safeModeImpact":"None","order":1,"active":true,"required":true},{"stage":"Command Escalation","owner":"Operational Command Center","purpose":"Surface founder-visible warning or critical incident.","safeModeImpact":"Visibility","order":2,"active":false,"required":false},{"stage":"Founder Decision","owner":"Founder Decision Gate","purpose":"Approve review, recovery routing, pause, or safe-mode consideration.","safeModeImpact":"Human control","order":3,"active":false,"required":false},{"stage":"Recovery Simulation","owner":"Recovery Simulator","purpose":"Model corrective path before changing production state.","safeModeImpact":"Preflight","order":4,"active":false,"required":false},{"stage":"Safe Mode Consideration","owner":"Safe Mode Status","purpose":"Decide whether degraded, paused, recovery, or normal mode is appropriate.","safeModeImpact":"Conditional","order":5,"active":false,"required":false},{"stage":"Return To Normal","owner":"Provider Health Polling","purpose":"Verify provider returns to healthy status and clear escalation.","safeModeImpact":"Normal","order":6,"active":true,"required":true}],"recommendedRecovery":["Continue monitoring.","No recovery action required.","Keep simulation available for fire drills."],"safeModeRecommendation":"not-required","returnToNormalCriteria":["Affected provider returns HTTP 200 where applicable.","Provider health status returns to healthy.","Degraded and down counts return to zero.","Escalation severity returns to info.","Founder/operator confirms no active recovery work remains."],"safeguard":"Recovery routing simulation is non-destructive. It does not mutate production provider health, safe mode, credentials, secrets, tokens, databases, queues, or private logs."}