{
  "tools" : [ {
    "id" : "cntb",
    "name" : "cntb",
    "kind" : "Contabo API / CLI",
    "tier" : "T0 · authoritative",
    "can" : "instance specs, lifecycle, snapshots, history",
    "cannot" : "live CPU, RAM, disk, or application health",
    "next" : "use SSH when a data-plane diagnosis is needed",
    "href" : "/api/state"
  }, {
    "id" : "subdom",
    "name" : "subdom",
    "kind" : "Porkbun DNS",
    "tier" : "T0 · authoritative",
    "can" : "list, add, verify, and remove DNS records",
    "cannot" : "serve content or issue certificates",
    "next" : "add the A record, then let Caddy answer the name",
    "href" : "/api/state"
  }, {
    "id" : "caddy",
    "name" : "Caddy",
    "kind" : "apps-box ingress",
    "tier" : "T0 · live edge",
    "can" : "route HTTP, issue and renew ACME certificates",
    "cannot" : "repair a dead upstream or invent application content",
    "next" : "install one isolated site fragment and reload",
    "href" : "/certs"
  }, {
    "id" : "probe",
    "name" : "audit + live TLS probe",
    "kind" : "outside-in observer",
    "tier" : "T0 · observed",
    "can" : "report DNS target, HTTP code, presented certificate, and mismatch",
    "cannot" : "explain the daemon or filesystem cause",
    "next" : "follow the result to Action Center, then SSH if blocked",
    "href" : "/attention"
  }, {
    "id" : "ssh",
    "name" : "SSH",
    "kind" : "data-plane bridge",
    "tier" : "T2 · per-box gate",
    "can" : "inspect processes, logs, files, load, and deploy repairs",
    "cannot" : "replace a rollback plan or prove public DNS propagation alone",
    "next" : "connect only to the named box; verify from outside afterward",
    "href" : "/accountability"
  } ]
}