{
  "title": "Restore approved npm registry connectivity for the OMEMO2 backend investigation",
  "reason": "All ten live npm metadata queries fail with EAI_AGAIN resolving the configured proxy, including the known libsignal-client control. Required release and artifact verification for S00-022 cannot proceed; failures are not E404 evidence.",
  "reproduction": "npm view libomemo.js version license dist-tags --json --fetch-retries=0 --fetch-timeout=15000 --cache=/tmp/luma-s00-022-npm-cache -> exit 1 EAI_AGAIN; same failure for @signalapp/libsignal-client. See state/evidence/S00-022-auto-crypto-316a193d6c3e.md.",
  "role": "ci-cd",
  "reviewer_role": "security",
  "scope": [
    "docs/decisions/0003-registry-connectivity.md"
  ],
  "outcome": "One independently reviewed connectivity record proving that the fresh project agent can retrieve real libomemo.js and libsignal-client metadata and a pinned candidate artifact through approved HTTPS registry access.",
  "steps": [
    "Obtain environment-owner confirmation that approved proxy/DNS/registry access is restored for the agent sandbox; never record credentials.",
    "Reproduce the two npm metadata queries using a temporary cache and normal certificate validation.",
    "Verify a pinned candidate artifact can be downloaded and integrity checked in a temporary directory without executing package scripts.",
    "Record exact commands, exit codes, versions and integrity result in the bounded connectivity document; submit for independent review."
  ],
  "acceptance": [
    "Both known-control and candidate npm metadata queries return actual registry responses without EAI_AGAIN.",
    "A pinned candidate artifact download and integrity check succeed over normal HTTPS.",
    "No TLS/proxy-policy bypass, secrets, crypto implementation or backend acceptance; remediation only restores network access."
  ],
  "checks": [
    "npm view @signalapp/libsignal-client version --json --fetch-retries=0 --fetch-timeout=15000 with a temporary cache",
    "npm view libomemo.js version license dist.integrity dist.tarball --json --fetch-retries=0 --fetch-timeout=15000 with a temporary cache",
    "Pinned artifact retrieval and registry integrity verification without install scripts"
  ],
  "depends_on": [],
  "requires_user_input": true
}