{
  "probe": {
    "app": "papra",
    "containers": [
      {
        "diff_added": 173,
        "diff_benign_db_touches": [],
        "diff_data_dirs": [
          {
            "added": [
              "db.sqlite"
            ],
            "changed_count": 0,
            "db_signature": true,
            "dir": "/app/app-data/db",
            "files": [
              "db.sqlite"
            ]
          }
        ],
        "diff_other_dirs": [
          {
            "added": [],
            "changed_count": 1,
            "db_signature": false,
            "dir": "/",
            "files": [
              "app"
            ]
          },
          {
            "added": [
              "data"
            ],
            "changed_count": 1,
            "db_signature": false,
            "dir": "/app",
            "files": [
              "data"
            ]
          },
          {
            "added": [],
            "changed_count": 1,
            "db_signature": false,
            "dir": "/app/app-data",
            "files": [
              "db"
            ]
          }
        ],
        "diff_token_dirs": [],
        "diff_total": 177,
        "diff_unresolved": [],
        "exit": 0,
        "gid": 999,
        "health": "healthy",
        "image": "ghcr.io/papra-hq/papra:26.6.1-rootless",
        "mounts": [
          {
            "class": "named-declared",
            "files": 0,
            "name": "volgate-papra_papra_data",
            "sample": [],
            "source": "/var/lib/docker/volumes/volgate-papra_papra_data/_data",
            "target": "/app/data",
            "writable_by_app": "NO"
          }
        ],
        "name": "papra",
        "restarts": null,
        "status": "running",
        "uid": 999
      }
    ],
    "declared_volumes": [
      "papra_data"
    ],
    "env_keys": [
      "AUTH_SECRET",
      "DOMAIN",
      "HDD_PATH",
      "IMPORT_PATH",
      "SUBDOMAIN",
      "TZ",
      "USERDATA_PATH"
    ],
    "exercise": [],
    "ports": []
  },
  "reasons": [
    "papra: mount /app/data is NOT writable by the app's own uid=999 gid=999",
    "papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g. ['db.sqlite'])",
    "NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/app']. Needs adjudication.",
    "papra: this container's mounts are all empty while it created entries in ['/app'] \u2014 benign when a sibling container holds the state, worth a look when none does",
    "papra: declared volume /app/data is EMPTY"
  ],
  "verdict": "BROKEN"
}