# Operation Atlas — Native RCON

Project Aegis uses `xpaw/php-source-query-class` version 6.0.0 under LGPL-2.1. It was selected because it is the maintained Composer implementation of Source Query/RCON, supports PHP 8.4, handles authentication and packet assembly internally, and provides deterministic disconnect behavior. All vendor usage is isolated to `App\Rcon\XpawRconClient` behind `App\Contracts\RconClient`.

The adapter reports packet count and multi-packet state conservatively because xPaw returns the assembled textual response without exposing its internal packet telemetry. Until observed during live ASA validation, diagnostics reports one logical response packet and does not claim multi-packet detection.

## Live validation checklist

1. Select an approved non-production server in Atlas Diagnostics.
2. Confirm host, RCON port, active state, and encrypted credential readiness.
3. Run **Test Connection** and confirm authentication, latency, disconnect, and Lincoln summary.
4. Run **List Players**, capture the exact raw ASA response, and compare the conservative parsed result.
5. Send an approved **Server Chat** test and confirm it appears in-game.
6. Confirm **Save World**, run it, and verify server behavior.
7. Export safe diagnostics and verify no password, ciphertext, APP_KEY, authentication packet, or raw player response is present.
8. Review Lincoln and confirm summarized events contain no credential or full raw response.
9. Confirm refreshing/changing server clears the in-memory raw result.

Stage 4 commands—including `DoExit`, restarts, cluster-wide execution, and arbitrary console input—remain prohibited.