docs(acceptance): publish verified pre-phase10 evidence handoff

docs/automation/handoffs/pre-phase10/BLOCKERS.json

@@ -41,14 +41,16 @@
     },
     {
       "id": "AUTO-RUNTIME-01",
-      "description": "The separate orchestrator reports an unqualified native Codex sandbox and missing isolated runner/signing boundary.",
+      "description": "Current single-user controller reports real MXC canary PASS, but no actual owner key or ChatGPT sign-in, operator-controlled policy and disabled real execution; current-context qualification/activation remains incomplete.",
       "evidence": [
-        "AUTHORITY.md",
-        "ROADMAP.md"
+        "CONTROLLER_ADDENDUM.md",
+        "READY_TO_RUN.md",
+        "controller-current-native-qualification-json",
+        "controller-current-setup-results-json"
       ],
       "severity": "HIGH",
       "acceptanceCriterion": "Independent qualified execution boundary",
-      "requiredAction": "Qualify the sandbox/isolated account or VM, protected approval/state ACLs, process/CPU/memory/tool/read/egress/secret boundaries and actual worker execution. This workstream must not modify that runtime.",
+      "requiredAction": "Operator must sign into dedicated auth-only profile, configure the actual protected owner key and qualify its host-positive/worker-negative boundary and fresh current-context controls, then independently approve runtime/queue/entry policy. Existing same-user MXC mode does not require a new account or VM; its finite canaries do not qualify actual owner credentials or roadmap execution. This handoff must not operate that runtime.",
       "blockingPhase": [
         "AUTOMATIC_PHASE-10_EXECUTION"
       ],
@@ -263,11 +265,17 @@
     {
       "id": "AI-CONTEXT-01",
       "description": "Generic strategy admission still requires legacy ProfileCvText; successful reviewed structured import alone does not establish that precondition.",
-      "evidence": ["AI_RESULTS.md", "JobTrackerApi/Services/StrategySnapshotService.cs", "JobTrackerApi/Controllers/ProfileCvController.Import.cs"],
+      "evidence": [
+        "AI_RESULTS.md",
+        "JobTrackerApi/Services/StrategySnapshotService.cs",
+        "JobTrackerApi/Controllers/ProfileCvController.Import.cs"
+      ],
       "severity": "MODERATE",
       "acceptanceCriterion": "Do not claim canonical-only import to generic AI compatibility without exercising it",
       "requiredAction": "Assess canonical-only generic-AI source compatibility during Product Review. Preserve existing consent/source contracts; never silently fill legacy text from unreviewed uploads. The current successful smoke explicitly supplies separately authored fictional CV text.",
-      "blockingPhase": ["GENERIC_AI_FROM_CANONICAL_ONLY_PROFILE_CLAIM"],
+      "blockingPhase": [
+        "GENERIC_AI_FROM_CANONICAL_ONLY_PROFILE_CLAIM"
+      ],
       "responsibleParty": "Product / AI integration owner",
       "deferralAuthority": null,
       "classification": "FUTURE_FEATURE",
@@ -276,11 +284,17 @@
     {
       "id": "AUTO-SCOPE-01",
       "description": "The committed controller policy has stage entry/review approvals but no explicit protected candidate-scope checkpoint after an assessment-only Phase10 entry.",
-      "evidence": ["CONTRACT.md", "GATES.json", "CLEANUP_INVENTORY.md"],
+      "evidence": [
+        "CONTRACT.md",
+        "GATES.json",
+        "CLEANUP_INVENTORY.md"
+      ],
       "severity": "HIGH",
       "acceptanceCriterion": "Concrete owner-approved candidate scope before cleanup implementation",
       "requiredAction": "Bind a full entry approval to already-proven exact candidates, or use the controller's signed policy update to stop after assessment and require a protected candidate-specific-cleanup-scope decision before removal. Do not treat assessment-only approval or worker-written evidence as deletion authority.",
-      "blockingPhase": ["AUTOMATIC_PHASE-10_CLEANUP_IMPLEMENTATION"],
+      "blockingPhase": [
+        "AUTOMATIC_PHASE-10_CLEANUP_IMPLEMENTATION"
+      ],
       "responsibleParty": "Owner / AUTONOMOUS-ROADMAP-01 policy maintainer",
       "deferralAuthority": null,
       "classification": "MANDATORY_ENTRY",