S15: pfc-repl loopback health; public /health replication 200

PFC_REPL_URL=http://127.0.0.1:18784. Ingest replicas do not bind HTTP.

Historical-Information.MD

@@ -79,7 +79,7 @@ Update checkboxes in `TODO.md` as each is done.
 - Local review: PFC 25/25, SM 5/5, Go leaf OK, catalog subjects OK (twice).
 - Host: `pfc-py-admin`, `pfc-sm-leaf`, `pfc-connector`, `pfc-peergos-bridge` active.
 - `GET http://127.0.0.1:18783/health` → `{"ok":true,"service":"sm-leaf"}`
-- `GET https://pfc.georgelambert.org/health` → 200 (ipfs 200, replication 503 pre-existing)
+- `GET https://pfc.georgelambert.org/health` → 200 (ipfs 200, replication 200 `pfc-repl-go`)
 - `GET /v1/admin/config` unauthenticated → 401
 - Signed wrapper `crypto.mode=lab-xor` `routing.mode=passthrough` verifies on host
 - Admin-history seq 0 actor `deploy-ns1` has prev + new + unified diff
@@ -88,7 +88,9 @@ Update checkboxes in `TODO.md` as each is done.
 - Promoted SHAs: secure-messaging `f4da7ff`, peergos-for-compliance `2c45603`,
   admin `c46d494`, nats-service-endpoints `1d01768`, system-git-sync `c570dc1`/`d9bd1fd`
 
-**S15 closed.** Remaining UserReview only: NPE cutover, HSM custody, optional `sync.pfc` hostname, website deep-links, replication :8782 503.
+**S15 closed.** Remaining UserReview only: NPE cutover, HSM custody, optional `sync.pfc` hostname, website deep-links.
+
+Go `pfc-repl` now serves loopback `GET 127.0.0.1:18784/health`; admin `PFC_REPL_URL` points there. Ingest replicas a/b do not bind HTTP.
 
 ## Do not
 

System-Git-Sync.MD

@@ -159,6 +159,7 @@ Append-only. Newest at the bottom.
 - 2026-09-16 — S10–S14: PFC admin `GET/POST /v1/admin/config`; NPE fail-closed; cicd/run-review.sh **REVIEW PASS (no deploy)**; Forgejo CI on pfc, admin, docs, endpoints, hub.
 - 2026-09-16 — S15: `cicd/deploy-ns1.sh` (tests required), sm-leaf health + `verae.sm.*`, signed lab-xor config + admin-history seed, docs `/sync/` and `/nats-service-endpoints/`. `PFC_REQUIRE_NPE=1` still unset. Websites org untouched.
 - 2026-09-16 — S15 closed on ns1: units active, signed_ok, history seq 0, public pfc/docs 200. Replication 503 remains UserReview.
+- 2026-09-16 — pfc-repl loopback HTTP health on :18784; public `/health` backends ipfs+replication both 200.
 
 ---
 

UserReview.MD

@@ -8,4 +8,4 @@ Decisions to confirm later. Work continued with guesses in `TODO-With-User.MD`.
 4. **verae org** is empty — leave empty unless you want it as the canonical NATS catalog owner instead of `marchon`.
 5. **Website org** — no NATS changes. Confirm if any site should deep-link the endpoint catalog.
 6. **Admin console that re-signs config** — PFC console vs peergos-compliance-config TUI. Guess: both may call the same Python `signed_config.sign`; PFC console first. `POST /v1/admin/config` is live; lab login still requires TOTP.
-7. **Replication backend** on ns1 `:18782`/`:8782` still 503 connection refused (pre-existing; not part of sm-leaf). Confirm whether pfc-repl should be restarted or retired.
+7. **Replication HTTP** — resolved: Go `pfc-repl` coordinator loopback `:18784/health`; ingest replicas stay NATS-only. Old Python `:8782` is unused.

cicd/GATE.md

@@ -24,6 +24,7 @@ without operator interruption.
 | c46d494 | peergos-for-compliance-admin | agent | 2026-09-16 | deployed |
 | 1d01768 | nats-service-endpoints | agent | 2026-09-16 | deployed |
 | c570dc10fb50973a022fd5eb361c9928cdb8d8f6 | system-git-sync | agent | 2026-09-16 | deployed |
+| f0b2624 | peergos-compliance-go (pfc-repl health) | agent | 2026-09-16 | deployed |
 
 ## Local review
 

cicd/deploy-ns1.sh

@@ -45,6 +45,7 @@ sudo tee /etc/systemd/system/pfc-py-admin.service.d/sm.conf >/dev/null << 'UNIT'
 Environment=PYTHONPATH=/opt/pfc/python/lib:/opt/pfc/python/admin:/opt/pfc/python
 Environment=PFC_SIGNED_CONFIG=/opt/pfc/etc/secure-messaging.signed.json
 Environment=PFC_CONFIG_KEY_PEM=/opt/pfc/etc/sm-keys/config.ed25519.pem
+Environment=PFC_REPL_URL=http://127.0.0.1:18784
 UNIT
 # lab keys on host only — never overwrite an existing private key
 sudo mkdir -p /opt/pfc/etc/sm-keys