docs: publish Phase 9 requalification decisions and evidence

2026-10-24 18:32:24 +02:00
parent 7092697cb3
commit 3727a723e8
22 changed files with 53642 additions and 42 deletions
@@ -29,3 +29,9 @@ Production-only gates do not automatically veto Phase9. Conditional Phase10 requ
 - Task2: complete safe workflow checkpoint `75cd04c`; fresh hosted847 explicitly BLOCKED at first isolation gate. Merged host socket/network are unknown infrastructure, not permission to execute Docker.
 - Ruling: live audits reproduced vulnerable Pkcs/Next/Zod locks; apply compatible narrow pins and refresh locked graphs, then supersede affected pre-pin results. No application flow/API/schema change or policy bypass.
 - Post-pin checkpoint: NuGet/npm audits clear, backend1123, frontend934/105suites, MariaDB32, types/lint/static build pass. Frozen1042 runtime inputs recorded before full browser lanes. Independent review found missing P9-V02 register row; repaired, with56 unique findings including3 new security items.
+- Source checkpoint `1a1b7c8`: register/manual/harness package published; later Python advisory review adds its independent open security gate. Hosted849 confirms the isolation blocker at this source checkpoint.
+- Harness findings: record schema ownership before diagnostic writes; make nested config server working directories explicit; compare canonical Career storage using its actual null-property omission, keeping exact before/after SQL equality. All failures and predecessor manifests retained; independent review confirms the narrow fixes.
+- Actual provider defect: sustained preflight `/documents` fails with mixed-collation UNION on MariaDB. Three real RED cases reproduce it; provider-only name-projection repair `2b26953` passes those cases and the full35-case provider suite. Backend1123 also passes; no schema or table-collation migration.
+- Hardened harness checkpoint `5ac1154` published. Fresh frontend934/105, backend1123, MariaDB35, sidecar56, types/lint/build and existing security helpers pass. Fresh static/API artifacts plus1043 runtime inputs and14 qualification-helper inputs are frozen before a new complete serial browser regression. Register now58 findings; all57 preservation groups/33 routes retained. Performance/Linux/final publication remain pending their actual results.
+
+- Final checkpoint: all runtime lanes completed; ordinary362, real MariaDB35 plus browser1/HTTP2/workload PASS. Linux producers5 PASS but unchanged PDF oracles13/24 PASS; Python advisory gate OPEN. Register59; Phase9/Phase10/production NO-GO, hosted BLOCKED, bounded RD21 RESOLVED. Final deliverables and publication receipt are indexed in README.md. No Phase10 work.