fa doctor

fa doctor --profile local
fa doctor --profile production --json

Doctor checks Node generation, store selection and binding shape, authorization directory, evidence registry, Ed25519 signer/verifier configuration, Databricks Apps identity gates, Lakebridge job configuration, Temporal selection, and the client-effector boundary. It also checks the observation-only Runway API binding and the Experiments case-module/evidence-store binding used by release qualification.

Production profile fails when durable store, authorization, identity, signing, live Lakebridge, Runway observation, or Experiments validation structure is missing. Temporal absence and the composition-injected cutover effector remain explicit warnings because connectivity and client certification cannot be proven from environment shape.

Doctor prints variable names, key IDs, counts, and dispositions. It does not print connection strings, private keys, tokens, authorization-directory contents, or other secret values. A passing shape check is not deployment or client certification evidence.