363 lines
24 KiB
JSON
363 lines
24 KiB
JSON
{
|
|
"schema_version": "multiscene-remaining-closure-register.v2",
|
|
"captured_at": "2026-09-20T01:47:00+08:00",
|
|
"last_updated_at": "2026-09-20T06:52:00+08:00",
|
|
"scope": {
|
|
"assets": 60,
|
|
"core_assets": 8,
|
|
"prompt_modules": 14,
|
|
"c_batch_in_scope": false,
|
|
"public_registration_must_remain_closed": true
|
|
},
|
|
"current_release_decision": {
|
|
"internal_controlled_pilot": "NO_GO",
|
|
"public_release": "NO_GO",
|
|
"reasons": [
|
|
"RC-04 immutable installable candidate is absent",
|
|
"RC-05 current-candidate real-model matrix is absent",
|
|
"RC-06 target deployment and member UAT are absent",
|
|
"RC-07 current-candidate recovery rehearsal is absent",
|
|
"RC-08 external production prerequisites are incomplete"
|
|
]
|
|
},
|
|
"source_state": {
|
|
"observed_at": "2026-09-20T05:54:57+08:00",
|
|
"git_head": "af091cdc4ff1751038b845bb0f3277b6d645f8f3",
|
|
"branch": "codex/v2-rc-20260712",
|
|
"tracked_status_entries": 168,
|
|
"untracked_status_entries": 389,
|
|
"untracked_files_observed": 9190,
|
|
"total_expanded_worktree_entries": 9358,
|
|
"counts_are_observational_and_must_be_recomputed_before_freeze": true,
|
|
"immutable_release_candidate": false
|
|
},
|
|
"reusable_evidence": [
|
|
{
|
|
"id": "rc03-current-candidate-evidence-index-v3",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc03-current-candidate-evidence-index-v3.json",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc03-current-candidate-evidence-index-v3.md",
|
|
"sha256": "678b39d3b57918436c87304b44de4e9f81bf022ef5820abcfc0d27cc77205225",
|
|
"result": "self-contained inventory of 54 files: 50 accepted and 4 explicitly excluded; missing, size mismatch, SHA256 mismatch and JSON parse errors are all zero; Linux symlink rejection is 3/3 passed and 452 source pins remain missing 0 and mismatch 0",
|
|
"boundary": "RC-03 current-byte deterministic cross-platform closure; not immutable release, Linux application image, real-model, legal, deployment, UAT or online publication evidence"
|
|
},
|
|
{
|
|
"id": "synthetic-multiscene-current-v5",
|
|
"path": "docs/qa/multiscene-closeout-20260910/multiscene-synthetic-rc03-current-candidate-v5/summary-d7e8270dc8154552b23387b6a1b45656.json",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc03-multiscene-synthetic-v5.md",
|
|
"result": "144/144 completed and passed; 264 attempted and terminal synthetic calls; 0 unknown; 452 source pins mismatch 0 before and after",
|
|
"boundary": "real_provider=false and live service/database calls=0; not legal, member or real-model acceptance"
|
|
},
|
|
{
|
|
"id": "product-golden-current-v4",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc03-golden-fresh-v4.json",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc03-golden-fresh-v4.md",
|
|
"result": "31/31 technical; related tests 32/32; 23 in-memory readiness/publication/generation; 8 clause recommendation; 447 input hashes unchanged; 0 legal approvals",
|
|
"boundary": "not HTTP, SQL, online publication or legal approval evidence"
|
|
},
|
|
{
|
|
"id": "web-current-v4",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc03-web-fresh-v4-results.json",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc03-web-fresh-v4.md",
|
|
"result": "611 input hashes unchanged; 37 canonical and discovered test files; 192/192 passed; typecheck passed; production build 183/183; dependency audit 0",
|
|
"boundary": "Windows clean isolated build only; not browser UAT or Linux image evidence"
|
|
},
|
|
{
|
|
"id": "python-combined-current-v4",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc03-python-deterministic-combined-v4.xml",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc03-python-deterministic-combined-v4.md",
|
|
"result": "54 files; 1213 tests; 1210 passed; 0 failure/error; 3 Windows symlink skips; input aggregate unchanged",
|
|
"boundary": "current Windows candidate only; Linux must execute the output, ledger and attempts symlink-rejection cases"
|
|
},
|
|
{
|
|
"id": "contract-sdk-openapi-permission-current-v4",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc03-contract-sdk-openapi-permission-recovery-v4.xml",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc03-contract-sdk-openapi-permission-recovery-v4.md",
|
|
"result": "26 files; 319/319 passed; 0 failure/error/skip; input aggregate unchanged",
|
|
"boundary": "Windows current-candidate extension gate; Linux image import/startup remains RC-04"
|
|
},
|
|
{
|
|
"id": "openapi-current-v4",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc03-openapi-source-freshness-v4.json",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc03-openapi-tool-tests-v4.md",
|
|
"result": "AI 85 and Contract 342 runtime operations aligned with canonical checks; 25 test methods plus 11 passed subtests; JUnit reported total 36 and serialized 25 testcase nodes; 0 failure/error/skip",
|
|
"boundary": "subtests are explicitly accounted and are not claimed as 36 independent methods; not deployed runtime evidence"
|
|
},
|
|
{
|
|
"id": "authenticated-actor-binding-current-v4",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc01-authenticated-actor-and-report-resource-regression-v4.xml",
|
|
"report_path": "docs/qa/multiscene-closeout-20260910/rc01-authenticated-actor-binding-v1.md",
|
|
"result": "30/30 actor/report/server authorization and 26/26 identity management/security; relevant files included in the 54-file current-candidate combination",
|
|
"boundary": "Memory and SQLite scoped evidence; target PostgreSQL and deployed proxy context remain RC-06"
|
|
},
|
|
{
|
|
"id": "python-dependency-lock-v3",
|
|
"path": "docs/qa/multiscene-closeout-20260910/rc04-python-dependency-lock-v3.md",
|
|
"result": "Contract 38/38 and AI 41 locked packages; target downloads and hashes verified; fixed pip-audit OSV scan reports 0 known vulnerabilities",
|
|
"boundary": "host-side target download, offline staging and audit evidence; no Linux image, SBOM, scan, digest or health acceptance"
|
|
},
|
|
{
|
|
"id": "worktree-ownership-pre-freeze-v2",
|
|
"path": "external release package: rc04-worktree-ownership-reviewed-v2.json",
|
|
"report_path": "external release package: rc04-worktree-ownership-reviewed-v2.md",
|
|
"result": "the full pre-freeze review covered 9358 paths: source 325, tests 165, compact evidence 10, generated retain/exclude 8853 and local exclude 5; secret/runtime 0, manual review 0, include gaps 0, missing anchors 0 and ownership blockers 0; the first immutable attempt was rejected by a manifest path false positive and a minimal v3 rule fix is pending a new review",
|
|
"boundary": "the reviewed snapshot is regenerated outside the repository after all RC-04 edits and immediately before exact path staging; it is not itself an immutable candidate"
|
|
},
|
|
{
|
|
"id": "real-draft-diagnostic-v1-historical",
|
|
"path": "docs/qa/multiscene-closeout-20260910/draft-timeout-diagnostic-real-v1/summary.json",
|
|
"result": "historical provider completion in 286.916 seconds and offline reassessment 5/5",
|
|
"boundary": "one historical real call and one of two already-counted attempts; not current-candidate journey or stability proof"
|
|
}
|
|
],
|
|
"invalidated_current_candidate_runs": [
|
|
{
|
|
"id": "current-candidate-v1",
|
|
"reason": "subsequent source and security changes",
|
|
"final_acceptance_eligible": false
|
|
},
|
|
{
|
|
"id": "current-candidate-v2",
|
|
"reason": "review-report markup injection P0",
|
|
"final_acceptance_eligible": false
|
|
},
|
|
{
|
|
"id": "current-candidate-v3",
|
|
"reason": "systemic authenticated actor spoofing P0",
|
|
"completed_cases": 29,
|
|
"unknown_cases": 1,
|
|
"not_started_cases": 114,
|
|
"synthetic_calls": 58,
|
|
"resumable": false,
|
|
"final_acceptance_eligible": false
|
|
},
|
|
{
|
|
"id": "synthetic-current-candidate-v4-invalid-c-temp",
|
|
"reason": "Windows system TEMP on C: ran out of space before a valid candidate run; zero provider calls; no resume or splice into v5",
|
|
"evidence": "docs/qa/multiscene-closeout-20260910/rc03-multiscene-synthetic-v4.md",
|
|
"resumable": false,
|
|
"final_acceptance_eligible": false
|
|
},
|
|
{
|
|
"id": "python-combined-v4-invalid-c-temp",
|
|
"reason": "C: TEMP exhaustion invalidated the attempt; the formal result was rerun from zero with TEMP/TMP/TMPDIR on D:",
|
|
"evidence": "docs/qa/multiscene-closeout-20260910/rc03-python-deterministic-combined-v4-invalid-c-temp.xml",
|
|
"resumable": false,
|
|
"final_acceptance_eligible": false
|
|
},
|
|
{
|
|
"id": "extension-v4-invalid-c-temp",
|
|
"reason": "C: TEMP exhaustion invalidated the attempt; the formal extension result was rerun from zero with TEMP/TMP/TMPDIR on D:",
|
|
"evidence": "docs/qa/multiscene-closeout-20260910/rc03-contract-sdk-openapi-permission-recovery-v4-invalid-c-temp.xml",
|
|
"resumable": false,
|
|
"final_acceptance_eligible": false
|
|
},
|
|
{
|
|
"id": "rc04-source-candidate-1",
|
|
"commit": "2770d738185589c399c5740c4fc6cc25a4d65c2f",
|
|
"tag": "v2-multiscene-rc04-20260920.1",
|
|
"reason": "The source freeze itself is immutable, but the manifest failed closed because five legitimate secret-domain source paths were classified as secret material. No source manifest, image build, installation or deployment claim is accepted for this tag.",
|
|
"resumable": false,
|
|
"final_acceptance_eligible": false
|
|
},
|
|
{
|
|
"id": "rc04-source-candidate-2",
|
|
"commit": "62d7d4476c08c8d72419665c3c0e1a6b3ef1c0f9",
|
|
"tag": "v2-multiscene-rc04-20260920.2",
|
|
"reason": "The source manifest and deterministic archive were generated, but the mandatory post-freeze clean-checkout regression exposed one failure: the test incorrectly required raw QA evidence that ownership intentionally excludes from release source. The dirty development worktree had masked this dependency. No image build, installation or deployment claim is accepted for this tag.",
|
|
"evidence": "external release package: rc04-release-manifest-tools-postfreeze-v2.xml (43 tests, 1 failure)",
|
|
"resumable": false,
|
|
"final_acceptance_eligible": false
|
|
}
|
|
],
|
|
"items": [
|
|
{
|
|
"id": "RC-01",
|
|
"priority": "P0",
|
|
"title": "Close known code and release-safety defects",
|
|
"status": "local_same_candidate_closed_pending_rc06_target_reverification",
|
|
"dependencies": [],
|
|
"completed": [
|
|
"production/staging Prompt seed is draft and disabled",
|
|
"demand-letter optional prose is complete",
|
|
"SDK zero-width change evidence is repaired",
|
|
"Contract 0079 and AI 0028 migration CI is current",
|
|
"internal Codex UAT and future production Provider contracts are separated",
|
|
"review-report dynamic Paragraph content is escaped",
|
|
"review-report generation has pre-build and post-build resource limits with atomic failure",
|
|
"authenticated Contract API action identities are server-bound across contract, approval, publication, file, archive, download, review, Playbook and identity-admin writes",
|
|
"proxy-auth rejects the compatibility client download-event writer",
|
|
"identity management/security regression is 26/26 and actor/report/server-authorization regression is 30/30"
|
|
],
|
|
"open_findings": [],
|
|
"exit": "The scoped source fix, direct regressions and inclusion in the 54-file current-candidate combination are complete. RC-06 must verify target PostgreSQL and deployed proxy context before release.",
|
|
"evidence": [
|
|
"docs/qa/multiscene-closeout-20260910/sdk-change-evidence-gate-a-v2.xml",
|
|
"docs/qa/multiscene-closeout-20260910/demand-letter-gate-a-v1.xml",
|
|
"docs/qa/multiscene-closeout-20260910/prompt-seed-and-lifecycle-regression-v2.xml",
|
|
"docs/qa/multiscene-closeout-20260910/ci-migration-quality-gate-v1.xml",
|
|
"docs/qa/multiscene-closeout-20260910/rc04-review-report-resource-guard-v1.xml",
|
|
"docs/qa/multiscene-closeout-20260910/rc01-authenticated-actor-binding-v1.md",
|
|
"docs/qa/multiscene-closeout-20260910/rc01-identity-admin-provenance-regression-v1.xml",
|
|
"docs/qa/multiscene-closeout-20260910/rc01-authenticated-actor-and-report-resource-regression-v4.xml"
|
|
],
|
|
"boundaries": [
|
|
"Real-model validation belongs to RC-05, not RC-01.",
|
|
"Target PostgreSQL migration rehearsal belongs to RC-06.",
|
|
"Current Windows same-candidate combined regression is recorded in RC-03; its three platform skips are closed by the separate Linux 3/3 JUnit and are not spliced into the Windows report.",
|
|
"AI Platform uses an internal service-key trust contract in which only trusted BFF, Contract API and worker callers may assert X-User-Id; if untrusted direct clients are introduced, signed user context becomes a prerequisite."
|
|
]
|
|
},
|
|
{
|
|
"id": "RC-02",
|
|
"priority": "P0",
|
|
"title": "Make the deterministic product Golden gate green",
|
|
"status": "technical_closed_current_source_pending_rc06_legal_publication",
|
|
"dependencies": [],
|
|
"current": "Fresh current-source v4 is 31/31 technical with related tests 32/32, 0 unexplained skips, 0 missing required values, 23 in-memory technical publication records, 8 clause recommendations and 0 legal approvals; 447 input hashes are unchanged before and after.",
|
|
"exit": "Reuse fresh v4 only when its complete input and asset manifest hashes match the immutable candidate; otherwise rerun affected cases. Legal review, persistent publication and online hash verification remain RC-06.",
|
|
"evidence": [
|
|
"docs/qa/multiscene-closeout-20260910/rc03-golden-fresh-v4.json",
|
|
"docs/qa/multiscene-closeout-20260910/rc03-golden-fresh-v4.xml",
|
|
"docs/qa/multiscene-closeout-20260910/rc03-golden-fresh-v4.md",
|
|
"docs/qa/multiscene-closeout-20260910/product-release-golden-rc03-v4/contract-product-golden-summary.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "RC-03",
|
|
"priority": "P0",
|
|
"title": "Run final-candidate deterministic quality and production Web build",
|
|
"status": "closed_current_candidate",
|
|
"dependencies": ["RC-01", "RC-02"],
|
|
"current_candidate": "synthetic_v5_plus_v4_component_gates_and_linux_symlink_v1_bound_by_self_contained_rc03_current_candidate_evidence_index_v3",
|
|
"current_findings": [
|
|
"Windows current-candidate synthetic is 144/144 with 264 terminal calls and zero unknown",
|
|
"The 54-file Python combination is 1210 passed with three Windows platform skips and no failures or errors",
|
|
"The 26-file Contract, SDK, OpenAPI, permission and recovery extension is 319/319",
|
|
"Web is 192/192 with typecheck, production build 183/183 and audit 0",
|
|
"Golden is 31/31 technical plus 32/32 related tests; OpenAPI fresh runtime and canonical checks pass",
|
|
"The output, ledger and attempts symlink rejection cases passed 3/3 with zero skips in an isolated Linux x86_64 container",
|
|
"After the Linux run all 452 frozen source pins still have zero missing and zero mismatch"
|
|
],
|
|
"evidence_index": "docs/qa/multiscene-closeout-20260910/rc03-current-candidate-evidence-index-v3.json",
|
|
"exit": "Satisfied for the current bytes. Preserve the separate Windows and Linux JUnits. Any related source, security, test or frozen-input change invalidates and reruns only the affected gates before a new immutable candidate can proceed."
|
|
},
|
|
{
|
|
"id": "RC-04",
|
|
"priority": "P0",
|
|
"title": "Freeze one immutable installable release candidate",
|
|
"status": "rc04_1_and_rc04_2_rejected_rc04_3_clean_checkout_fix_pending",
|
|
"dependencies": ["RC-03"],
|
|
"completed": [
|
|
"Contract and AI Python hash locks",
|
|
"Pillow 12.3.0 security floor and glibc 2.28 install guard",
|
|
"Contract 38/38 target wheels downloaded, byte-hash verified and staged with no-index outside the repository",
|
|
"Contract 38 and AI 41 dependency locks have zero currently known vulnerabilities in the pinned pip-audit 2.10.1 OSV scan",
|
|
"Dockerfiles use only-binary and require-hashes, and their default Linux amd64 base images are pinned by manifest digest",
|
|
"the root .dockerignore excludes local caches, dependency/build output, evidence documents, non-template environment files and runtime data from build contexts",
|
|
"the full .1 candidate was frozen at commit 2770d738185589c399c5740c4fc6cc25a4d65c2f and tag v2-multiscene-rc04-20260920.1, then correctly rejected when the manifest path validator produced five false positives",
|
|
"the .2 candidate was frozen at commit 62d7d4476c08c8d72419665c3c0e1a6b3ef1c0f9 and tag v2-multiscene-rc04-20260920.2; its manifest and archive were deterministic, but it was correctly rejected after a clean-checkout regression exposed one raw-evidence dependency hidden by the dirty development worktree",
|
|
"the path validator now permits only explicit code suffixes under src/tests/migrations for secret-domain source names while continuing to reject secret material paths",
|
|
"the v6 regression aligns the evidence test with the ownership boundary: included source/test files remain mandatory and bind the immutable Git blob with only exact LF/CRLF renderings accepted, while generated evidence retained outside release source is optional and is hash-checked only when present",
|
|
"the v6 working-tree and six-file clean-checkout simulation both pass 43/43 with zero failure, error or skip; final acceptance still requires a post-freeze .3 clean detached run",
|
|
"the repaired pre-freeze draft closes secret/runtime blockers, manual review, include gaps and missing required anchors to zero while preserving exclusions rather than deleting user files"
|
|
],
|
|
"open_findings": [
|
|
"run and independently review the minimal .3 clean-checkout regression fix",
|
|
"freeze a reviewed unique .3 commit/tag, then rerun the 43-test suite from a clean detached checkout before accepting any source manifest or archive; .1 and .2 remain immutable but invalid",
|
|
"Linux image builds, SBOM, image scans, health checks and immutable digests on a builder that does not write the database host's existing /var/lib/docker",
|
|
"install, upgrade and rollback package bound to the exact candidate"
|
|
],
|
|
"evidence": [
|
|
"docs/qa/multiscene-closeout-20260910/rc04-python-dependency-lock-v3.md",
|
|
"docs/qa/multiscene-closeout-20260910/rc04-python-dependency-lock-v3.json",
|
|
"docs/qa/multiscene-closeout-20260910/rc03-current-candidate-evidence-index-v3.json",
|
|
"docs/qa/multiscene-closeout-20260910/rc04-immutable-manifest-tool-v6.md",
|
|
"docs/qa/multiscene-closeout-20260910/rc04-release-manifest-tools-v6.xml",
|
|
"external release package: rc04-release-manifest-tools-postfreeze-v2.xml (invalid candidate evidence)",
|
|
"external release package: rc04-worktree-ownership-reviewed-v2.json/.md"
|
|
],
|
|
"exit": "A reviewed clean commit/tag and deterministic path/mode/size/SHA256 manifest close the dependency, OpenAPI, migration, config, runtime, 60-asset and 14-Prompt graph; a Linux x86_64 builder produces Web plus three Python images with base/image digests, SBOM, scans and health checks; install and rollback instructions are executable."
|
|
},
|
|
{
|
|
"id": "RC-05",
|
|
"priority": "P0",
|
|
"title": "Complete W4 real-model quality and latency validation",
|
|
"status": "blocked_by_rc04_not_started_full_real_matrix",
|
|
"dependencies": ["RC-04"],
|
|
"runtime_contract": {
|
|
"provider": "codex_cli",
|
|
"model": "gpt-5.6-sol",
|
|
"reasoning_effort": "medium",
|
|
"timeout_seconds": 300,
|
|
"fallback": false
|
|
},
|
|
"real_attempts_already_counted": 2,
|
|
"maximum_remaining_adapter_calls": 278,
|
|
"exit": "Freeze 144 tasks; representative probes are the first matrix tasks rather than extra calls; base operations consume 264 calls and at most 14 repair calls remain; record zero unknown and keep failures, cancellation, fallback and handoff in the denominator; report p50, p95 and timeout by operation; no silent loss of party, amount, date or key fact and no unresolved schema or terminal-state blocker on a normal path."
|
|
},
|
|
{
|
|
"id": "RC-06",
|
|
"priority": "P0",
|
|
"title": "Deploy, explicitly publish and complete two-workspace member UAT",
|
|
"status": "waiting_for_rc04_rc05_and_external_uat_inputs",
|
|
"dependencies": ["RC-04", "RC-05"],
|
|
"exit": "Back up the target before migration; record both database heads; deploy exact RC image digests; explicitly approve, preview, apply and verify the 60-asset and 14-Prompt hashes; each of the 31 Golden assets has either named legal approval or a named, scoped, expiring internal-pilot risk acceptance with compensating controls and use limits, and unresolved assets cannot enter the RC-07 internal Go decision; admin plus two ordinary members in two workspaces cover each asset's applicable normal API flow and the eight core UI flows, tenant isolation, cancellation, idempotency, page continuation, worker restart, handoff and original-version preservation."
|
|
},
|
|
{
|
|
"id": "RC-07",
|
|
"priority": "P0",
|
|
"title": "Rehearse recovery and issue the internal release decision",
|
|
"status": "waiting_for_rc06",
|
|
"dependencies": ["RC-06"],
|
|
"exit": "Restore the exact candidate into an isolated namespace; measure RPO and RTO; verify version, hashes and critical records; complete rollback and forward recovery; deliver install, upgrade, operations, rollback, release, known-limit and evidence-index documents; issue an independent internal controlled-use Go/No-Go."
|
|
},
|
|
{
|
|
"id": "RC-08",
|
|
"priority": "P1",
|
|
"public_release_blocker": true,
|
|
"title": "Satisfy external production-release prerequisites",
|
|
"status": "waiting_external_materials_and_production_validation",
|
|
"dependencies": ["RC-07"],
|
|
"exit": "Named owners approve and activate policies and consent; make an applicability decision for AI filing and labels and provide real effective identifiers where applicable; accept the production Provider and exact release; pass production preflight, TLS, secrets, monitoring, alerts, anti-abuse and fresh-backup checks; public blockers equal zero; the release owner authorizes traffic change."
|
|
}
|
|
],
|
|
"execution_order": ["RC-01", "RC-02", "RC-03", "RC-04", "RC-05", "RC-06", "RC-07", "RC-08"],
|
|
"remaining_execution_order": [
|
|
"RC-04-REVIEWED-IMMUTABLE-CANDIDATE",
|
|
"RC-05-REAL-MODEL-MATRIX",
|
|
"RC-06-TARGET-DEPLOYMENT-PUBLICATION-UAT",
|
|
"RC-07-RECOVERY-AND-INTERNAL-DECISION",
|
|
"RC-08-PUBLIC-RELEASE-PREREQUISITES"
|
|
],
|
|
"next_action": "Review the regenerated 9352-path ownership draft, then create the reviewed immutable commit, tag and source manifest before any RC-05 real-model calls.",
|
|
"decision_rules": [
|
|
"Authenticated action identity always comes from server context; client actor-like fields are ignored outside explicit local/test auth-off fixtures.",
|
|
"The compatibility download-events endpoint is disabled when proxy authentication is required; successful server download is the only source of a download audit event.",
|
|
"Any source or security fix invalidates current-candidate summaries; invalidated matrix output is never resumed or spliced.",
|
|
"Component evidence is reusable only when its complete input manifest hash equals the final candidate; otherwise rerun the affected gate.",
|
|
"A vulnerability exception may permit only a named time-bounded internal pilot and never authorizes public release.",
|
|
"No immutable RC means no final acceptance claim.",
|
|
"No backup means no target migration.",
|
|
"No explicit approval means no template or Prompt publication.",
|
|
"No same-candidate member UAT means no traffic cutover.",
|
|
"Public registration remains fail-closed until all public blockers are approved and cleared.",
|
|
"AI Platform service keys are server-only credentials; only trusted BFF, Contract API and worker callers may assert X-User-Id, otherwise signed user context is required before public release."
|
|
],
|
|
"external_dependencies": [
|
|
"Linux x86_64 image builder",
|
|
"authenticated gpt-5.6-sol/Codex Provider quota for evaluation using synthetic or deidentified fixtures",
|
|
"target UAT host and backup, migration and deployment authority",
|
|
"release owner and explicit asset and Prompt batch approval",
|
|
"two ordinary member accounts in two workspaces",
|
|
"effective policy, consent and compliance materials",
|
|
"production Provider, domain, TLS, secrets, monitoring and traffic authorization"
|
|
],
|
|
"deferred": [
|
|
"C-batch 30 scenes",
|
|
"10-participant user research",
|
|
"dual-cloud KMS and external witnessing",
|
|
"very-large relationship graph and new operations features",
|
|
"anonymous self-service registration"
|
|
]
|
|
}
|