docs(redesign): accept Phase 6 review and prepare Phase 7 handoff

docs/redesign/phase-6/COMMITS.md

@@ -11,6 +11,7 @@ Every completed logical unit is pushed to `codex/ui-redesign-phase4`, without fo
 | P6-02 cross-application save/retry and localisation corrections | `c135d03602fd273658cfa1c087491c7442060c6a` | Company/language native4/4 with persistence after retry/reload; final521 units; normal push, HEAD=origin |
 | P6-02 companion: replace historical hidden-error assertion with accessible dialog contract | `81e30e3da9e36e4cb0271122711fddc7b28b75e3` | Four affected theme/locale/width workflows pass; strengthened alert/draft/no-write/focus assertions; normal push, HEAD=origin, main unchanged |
 | P6-03 responsive/accessibility/localisation review and bounded Career label correction | `bd47214bdcd74336788dca0f294b8ddb9403cac1` | Fresh521/85 units, types/lint/build, native label2/2 and combined panel/label6/6;18 inspected baseline/before-after images; normal push, live remote=HEAD, main unchanged |
+| P6-04 measured performance and shared-consumer reuse review | `badfb19d907e7d17d0f253c180eceef851f465f2` | Fresh native diagnostic1/1, exact complete200/1,000 Board/query membership and four-page CV; actual-provider no-toast-refetch case in521/85; normal push, live remote=HEAD, main unchanged |
 
 ## Current execution evidence
 

docs/redesign/phase-6/EXECUTION_PLAN.md

@@ -13,9 +13,9 @@ Fetched development HEAD/remote: `9d6d29dba4733778e478909d4ff74a25409b3115`, `co
 - [x] **P6-00:** Review Phase 3/4/5 records, all 57 original PRES contracts and actual source; record surface/state coverage, prioritized findings, preserved dirty intake and baseline. Audit pushed at `7da083c`, remote=HEAD.
 - [x] **P6-01:** Shared semantic/contrast/tab associations verified; final521 unit cases and4 native panel cases pass. Pushed `a94ea0a`, remote=HEAD; full native cross-route acceptance follows in P6-05.
 - [x] **P6-02:** Navigation/query/history/source/override and AI boundaries reviewed; company dialog and account-language failures retain drafts/local choice and translated retry. Native4/4 passes including real persistence/reload. Pushed `c135d03`, remote=HEAD.
-- [x] **P6-03:** Recorded attributed EN/Bokmål, theme, responsive, keyboard, zoom and axe baseline with all incomplete categories retained; inspected fourteen baseline and four label before/after images. Bounded mobile label repair has native RED→GREEN2/2 and final Settings/label6/6. Fresh521 units/types/lint/build pass; integrated acceptance follows in P6-05. Human M01–M13 and physical-device acceptance remain unverified. Push receipt follows in the ledger.
-- [x] **P6-04:** Fresh post-CSS native diagnostic1/1 records bundle/source provenance, route/client/query/search/long-CV observations and complete200/1,000 Board membership. Actual-provider regression in521-unit corpus disproves toast-induced company refetch; no speculative memoization. Reuse/source/fetch audit and finite scaling limits recorded. Push receipt follows in the ledger; integrated evidence follows in P6-05.
-- [ ] **P6-05:** Run fresh full frontend/backend/browser/sidecar/security/HTTP/rendering lanes, explain count changes, reconcile 57 groups, record secret/link/whitespace/build evidence and every commit/push. Report independent Phase 6, production and Phase 7 decisions; prepare migration order and mandatory dependencies. Commit/push final acceptance.
+- [x] **P6-03:** Recorded attributed EN/Bokmål, theme, responsive, keyboard, zoom and axe baseline with all incomplete categories retained; inspected fourteen baseline and four label before/after images. Bounded mobile label repair has native RED→GREEN2/2 and final Settings/label6/6. Fresh521 units/types/lint/build pass; final159/159 ordinary regression passes. Human M01–M13 and physical-device acceptance remain unverified. Pushed `bd47214`, live remote=HEAD; conditional integrated acceptance follows in P6-05.
+- [x] **P6-04:** Fresh post-CSS native diagnostic1/1 records bundle/source provenance, route/client/query/search/long-CV observations and complete200/1,000 Board membership; the extended case also passes within final159/159 ordinary regression. Actual-provider regression in521-unit corpus disproves toast-induced company refetch; no speculative memoization. Reuse/source/fetch audit and finite scaling limits recorded. Pushed `badfb19`, live remote=HEAD; conditional integrated acceptance follows in P6-05.
+- [x] **P6-05:** Fresh full frontend521/backend1,033/browser159/sidecar49 plus separate security/HTTP/diagnostics and original16/36+8/24 rendering comparisons pass. Counts,57 groups,32 routes and all319 mixed-scope axe snapshots are reconciled; secret/link/whitespace checks pass with their stated limits. Final decisions: Phase6 CONDITIONAL GO, production NO-GO, Phase7 CONDITIONAL GO with mandatory dependencies. Phase7 plan only; final commit/push receipt follows in the ledger.
 
 ## Review focus
 

docs/redesign/phase-6/README.md

@@ -7,13 +7,15 @@ The owner's current **P6-00–P6-05** instruction supersedes the seven-checkpoin
 | Current checkpoint | Deliverable |
 |---|---|
 | [P6-00](p6-00/README.md) | Baseline, all requested surfaces and prioritized design consistency register; pushed `7da083c` |
-| [P6-01](p6-01/CORRECTIONS.md) | Shared semantic, contrast and Settings panel corrections |
-| [P6-02](p6-02/README.md) | Workflow/error/retry review and approved [AI patterns](p6-02/AI_REVIEW.md) |
-| [P6-03](p6-03/README.md) | Fresh locale/theme/responsive/keyboard evidence and axe triage |
-| [P6-04](p6-04/README.md) | Native performance and component reuse review |
+| [P6-01](p6-01/CORRECTIONS.md) | Shared semantic, contrast and Settings panel corrections; pushed `a94ea0a` |
+| [P6-02](p6-02/README.md) | Workflow/error/retry review and approved [AI patterns](p6-02/AI_REVIEW.md); pushed `c135d03`, companion `81e30e3` |
+| [P6-03](p6-03/README.md) | Locale/theme/responsive/keyboard evidence, axe triage and bounded Career label repair; pushed `bd47214` |
+| [P6-04](p6-04/README.md) | Native performance and component reuse review; pushed `badfb19` |
 | [P6-05](p6-05/README.md) | Integrated acceptance, [57-group preservation](p6-05/PRESERVATION.md) and [Phase 7 plan](p6-05/PHASE7_HANDOFF.md) |
 
-Final decisions and today's fresh counts are in P6-05; inherited results below are attributed history. Production remains **NO-GO**, main unchanged. P5-13, P5-05/followMode, human reader/physical-device and production qualification remain deferred or unverified. No Phase 7/8 implementation or deployment is authorized by this review.
+Current decisions: **Phase 6 Design/UX Review — CONDITIONAL GO; Production Release — NO-GO; Phase 7 Readiness — CONDITIONAL GO.** The [final report](p6-05/README.md) records the specific mandatory qualifications, complete preservation matrix and reconciled migration plan. Fresh regression: **1,033 backend /521 frontend (85 suites) /159 ordinary browser /49 sidecar**, separate HTTP/security/diagnostics2/9/6/1/3, and original fidelity16/36 plus Settings8/24. Counts refer to independent lanes or explicitly marked subsets, not one summed total.
+
+Inherited results below are attributed history. Production remains **NO-GO**, main unchanged. P5-13, P5-05/followMode, human reader/physical-device and production qualification remain deferred or unverified. No Phase 7/8 implementation or deployment is authorized by this review. Checkpoint and final receipt hashes are recorded in [COMMITS.md](COMMITS.md).
 
 ## Historical transition/planning record
 

docs/redesign/phase-6/p6-04/README.md

@@ -8,7 +8,7 @@ Fresh native measurement is owned by the [responsive audit performance case](../
 
 The performance case covers initial Jobs, Dashboard, Analytics6/24months, job details, long-CV initial settled preview, CV-only edit including existing800ms autosave, Board API/render at200/1,000, corresponding Table navigation and filtered Board. A heading-only ready milestone measures route presentation, not complete report/list data settling; CV and Board milestones wait for the stated actual preview/count. Hard navigation includes boot/auth and is distinct from client route transitions, search debounce and React rendering counts. Single-run CDP heap samples cannot establish a memory leak or physical-device capacity.
 
-The extended diagnostic measures actual client Board→Table→Board activation while retaining994 matches, typed search through the existing debounce to exactly one result, and Jobs→Dashboard navigation to the real1,000 tracked-job value. An unchanged document `performance.timeOrigin` proves these are client transitions. Request paths include query strings for these interactions. The retained first153/157 ordinary attempt loaded an earlier diagnostic before that test-only extension. The fresh post-CSS standalone run includes the extension; the final159-case full run is now executing with the same extended case. Extension adds evidence within the existing browser case, not an application change or another case count. Final integrated acceptance remains separate until its actual result is recorded.
+The extended diagnostic measures actual client Board→Table→Board activation while retaining994 matches, typed search through the existing debounce to exactly one result, and Jobs→Dashboard navigation to the real1,000 tracked-job value. An unchanged document `performance.timeOrigin` proves these are client transitions. Request paths include query strings for these interactions. The retained first153/157 ordinary attempt loaded an earlier diagnostic before that test-only extension. The fresh post-CSS standalone run includes the extension; the final159/159 ordinary run also passes with the same extended case and zero skips/retries/flaky results. Extension adds evidence within the existing browser case, not an application change or another case count. Separate native/security/fidelity evidence and conditional integrated acceptance are recorded in P6-05.
 
 Two preliminary diagnostic failures are retained: the Dashboard's determinate onboarding progress indicator was incorrectly treated as a loading indicator, and identical profile bullets normalized to a one-page document. The fixture now supplies eight distinct roles with four uniquely identified bullets each and asserts actual multi-page readiness. These were diagnostic milestone/fixture corrections, not product defects, renderer changes or relaxed pagination assertions.
 

docs/redesign/phase-6/p6-05/PHASE7_HANDOFF.md

@@ -0,0 +1,71 @@
+# Phase 7 — Remaining migration handoff
+
+**Phase 7 readiness: CONDITIONAL GO for bounded development migration.** This is a plan, not implementation or production authorization. It follows the [original approved Phase 7 list](../../IMPLEMENTATION_PLAN.md#phase-7--full-migration), [Phase 3 architecture](../../phase-3/README.md), retained [Phase 4 MUI foundations](../../phase-4/p4-06/README.md), [final Phase 5 handoff](../../phase-5/p5-15/p5-15-06/README.md) and [57-contract reconciliation](PRESERVATION.md). The owner's current P6-00 through P6-05 labels supersede the historical seven-checkpoint review proposal without rewriting its evidence.
+
+No mandatory human/device result is invented. Before accepting a migrated workflow completely, obtain its applicable [M01–M13 reader/device results](../../phase-5/p5-15/p5-15-02/MANUAL_ACCEPTANCE.md) or retain explicit conditional status. A newly demonstrated severe shared naming/focus/contrast/data-security failure blocks dependent propagation until a bounded repair proves it fixed. Independent, unaffected development can continue. Production infrastructure evidence is a release prerequisite, not permission to halt every independent presentation slice.
+
+## Already completed: retain rather than repeat
+
+| Area in original migration list | Actual completed scope | Remaining Phase 7 scope |
+|---|---|---|
+| Shell/navigation | [P5-01/02](../../phase-5/p5-02/README.md): grouped parent/child, rail/mobile, route focus, six commands/search/bell; five acceptance repairs retained | Add only supported new destinations after meaningful content exists; complete remaining operator/long-tail evidence; no new IA/sidebar rewrite |
+| Jobs/Board/Trash | [P5-03/04](../../phase-5/p5-04b/README.md): single query owner/view switch, Table/cards/Board, mutations/Back/aliases | Discovery, Companies, Offers, Reminders and remaining legacy dialogs/forms; measured scaling debt separately scoped |
+| Dashboard/Analytics | [P5-06/07](../../phase-5/p5-07/README.md): Dashboard and all eight existing report families in `/analytics`, exact values/period/source links | Audit and migrate only any remaining legacy control/state; do not schedule a second Analytics page. No new metrics |
+| Job Application/Documents/cover letter/interview | [P5-08a/b](../../phase-5/p5-08b/README.md): seven sections, Application CV/Letter/Answers/Submission and Timeline Activity/Correspondence | Remaining embedded legacy forms/state presentation and global mail workflows; existing sections are already migrated |
+| CV builder | [P5-09–12/14](../../phase-5/p5-14/README.md): frame/source scope/content/preview/advanced controls/history/responsive ownership; unchanged native pagination | Retain editor/renderer. Library/public entry and outstanding manual/output evidence; withheld P5-13 is a separate qualified workstream |
+| CV library/template gallery | Gallery is reused and touched by [P5-12](../../phase-5/p5-12/README.md); library CRUD/publication remains | Migrate library layout/actions/publication states without duplicating gallery/editor/save owner |
+| Settings/account/admin | P4 page/section/layout/density foundations, P5 feedback/shell entries/metadata; Rules draft repair and P6 scoped feedback improvements | Remaining Settings/security/provider/data/plan/admin page presentation; retain current save scopes and guards |
+| Notifications/onboarding | Existing bell/operations links and five owner-local Dashboard flags/checklist retained | Finish onboarding guidance and existing activity surfaces; full centre only after store/route need is established |
+| Career Profile | Canonical owner/section routes retained; CV source navigation and native upload fixed | Overview/profile/evidence/import/history UX remains a complete Phase 7 migration, not a new data model |
+
+Legacy presentation explicitly scheduled here is **approved Phase 7 migration work**, not a Phase 6 defect merely because its appearance differs. Any reproducible accessibility/usability/data bug still gets an owned defect and proof.
+
+## Common constraints for every slice
+
+- Use existing `theme.ts` semantic roles, `PageHeader`/`PageSection`, current width/gutter/density tokens, MUI forms/dialogs/drawers, `ViewStateNotice`/`useViewResource`, toast/confirm/prompt, safe API error extraction and current i18n infrastructure. Read existing callers before sharing presentation; a new wrapper requires real consumers.
+- Preserve React Router paths/aliases/search/hash/history/state, active parent/child, dirty Cancel/Discard and meaningful heading/trigger focus. Keep private-tree/session cancellation and resource ownership; presentation components do not acquire competing fetch/save/history/send owners.
+- Test populated/empty/loading/error/retry/locked/dirty/missing/foreign-resource cases. Link each behavioral assertion to original PRES sub-workflows, role/owned fixture and request/no-write/readback proof. Automated acceptance is necessary and never substitutes for unavailable human/device/provider evidence.
+- Exercise EN and Bokmål, light/dark and both appropriate density settings at 320,360–390,768,1024,1280,1440 and1920, plus 767/768 and899/900 where relevant, portrait/landscape and 200%/400% actual browser zoom. Ordinary app actions must reflow without root horizontal overflow; named table/Board/document-canvas scrolling remains legitimate.
+- Follow [project accessibility targets](../../phase-3/ACCESSIBILITY_PLAN.md): ordinary text4.5:1, large text3:1, essential control/focus3:1, visible keyboard focus, names/labels/errors/required-state, sensible h1/main/heading order, modal trap/return, keyboard alternatives to drag, polite non-repeating status and reduced motion. Aim44px physical-touch hit areas; preserve established fine-pointer target rules. Triage axe incomplete/all-enabled findings with context rather than disabling rules.
+- No hard-coded new user-facing strings. Compare natural Bokmål wording, long labels/tooltips/error/save/retry states, source versus CV versus account vocabulary, and UI locale versus document locale. Recorded server text/timezone limitations remain owned.
+- Commit one bounded reproducer/repair or migration workflow with focused tests and evidence, push the development branch and verify remote=HEAD. Separate unrelated backend-contract prerequisites and cross-consumer foundation corrections; no force push/main deployment. Keep the chronological Phase 7 commit ledger when execution starts.
+
+## Migration order and commit boundaries
+
+The order reduces shared interaction risk before data-heavy/delivery-sensitive workflows. These are proposed implementation boundaries for a later authorized Phase 7 task, not a request to execute them in Phase 6.
+
+| Order / bounded slice | Dependencies and existing owners | Preservation risk / backend constraint | Required additions and acceptance exit |
+|---|---|---|---|
+| **P7-00 — Fresh scope inventory and fixture baseline** | Final Phase6 source/manifest/commits, 57 contracts/32 current patterns, actual TODO/debt register | Do not equate conditional acceptance with missing functionality or reset intervening work | Record source/remote and route/state fixtures; classify each unchanged/already-migrated/remaining area. Keep ordinary P2-D01 and all count deltas. Documentation commit/push before page edits |
+| **P7-01 — Authentication and account-security presentation** | Existing Login/Register/reset/verify/relink/Profile/TwoFactor/Sessions owners; current auth-return helper, PageLayout/MUI/error presentation | E01–E06/E09: challenge/token/origin/state, remember-me, recent-auth and remote revoke; no identity/provider protocol edits in a visual diff | Add native label/error/focus/token-state and complete deep-link expiry/logout/return regressions, account identity versus career distinction, long NB/320 forms. Provider/mail/authenticator qualification separately requires actual sandbox/human evidence. Split public auth and Profile/security into separate reviewable commits |
+| **P7-02 — Onboarding and Career overview/evidence** | OnboardingChecklist/CareerWorkspacePage/CareerEvidenceBank; existing source link and operation entry | S02/C02/C04/E09: no forced onboarding, no invented facts/completeness score, no new preferences schema | Native dismissal/owner/reload, overview/raw-copy/evidence CRUD/source/history links, long/many-item and error/keyboard cases. One onboarding-guidance commit, then one Career overview/evidence commit |
+| **P7-03 — Career structured editing and import review** | CareerProfilePage/career sections/RichTextField/date/tag components; complete P7-02 fixtures | C01–C04: all long-tail/custom fields, canonical singleton and inherited-CV consequences; profile/job stale-save debt is separate from CV revision | Before any save/history owner change, separately resolve or explicitly bound concurrency contract with native stale-write/recovery tests. Presentation-only migration retains save behavior and guards. Prove low-confidence select/deselect/accept/discard/retry/cancel/no-provider, canonical/sibling/frozen readback and long phone forms. Separate structured editor and import/history commits; no silent extraction acceptance |
+| **P7-04 — CV library and public entry** | CvBuilderPage/CvTemplateGallery/PublicCvPage/current editor; P7-03 source language | C05/C12/E09: numeric private ID vs public slug, delete/association/entitlement/public revoke/private PDF admission; no second editor/history/renderer | Native create/copy/delete/gallery/locked template/publish/unpublish/old-link rejection/download and missing/foreign cases. Both themes keep white print pages. Run unchanged16/36+8/24 fidelity if preview/output is touched. Separate library and public-entry commits |
+| **P7-05 — Discovery, Companies, Offers and Reminders** | Existing domain pages/current Jobs return context; shared table/cards/state presentation | J01/J02/J08/J09/W11: real NAV/service states, no standalone company-create assumption, offer currency/sample/source, calendar DST debt | Keep saved-search repair and P6 durable company error. Add native contact/date/source/failed-save focus; saved-run/delete/pause/alerts; many offers/long labels; all reminder reasons/count/actions. Four domain commits; no backend scaling/calendar-semantic change hidden in styling |
+| **P7-06 — Remaining Application forms and global correspondence** | Existing seven-section Application workspace/child owners; CorrespondenceInboxPage/GmailReviewPage/EmailProviderConnections | W05–W10/M01–M06: immutable packages/attachments, CV cardinality, draft revisions, explicit confirmed send/idempotency/uncertain delivery, legacy review alias | First identify legacy child forms not already migrated. Preserve native P2-D01/archive-byte proof. Add long letter/answers/history/dirty Cancel; inbox list/detail/back/filter/page/error and draft conflict/uncertain new-attempt tests. Separate embedded forms, inbox/read review and compose/send presentation commits. Do not restructure mail persistence with generic Documents work |
+| **P7-06F — Deferred `followMode` reviewed composer** | Explicit mail-phase design decision, existing metadata/helper producers and P7-06 draft owner | RD19/W01/W10/M04: metadata preservation is not consumer completion; never auto-send or auto-resend | Define exact mode→draft/review action and fallback before implementation. Native deep-link/back/reload/source-context/no-write entry/stale draft/explicit review tests, EN/NB names and focus. Separate optional mail commit; remain DEFERRED if its mandatory product decision is unavailable |
+| **P7-07 — Documents owner-scoped index** | [Documents architecture](../../phase-3/DOCUMENTS_UX.md), completed source-editor destinations from P7-04/06 | C05–C12/W05–W08/M04/S05/E09: no generic Document persistence, file relocation, browser crawl or search snippets containing private bodies | First contract commit: bounded authenticated metadata-only paginated projection with supported sort/search/types and A/B denial. Then UI commit: honest current/draft/frozen/public labels, source/open/download, stale entry/refetch, mobile cards. Prove no PDF/AI generation on listing; immutable archives after current-source change/delete; preserve one-job CV association/detach rules. Until projection exists, honest owner links only; no fake All documents result |
+| **P7-08 — Existing notifications and operations** | NotificationsPopover/UserNotification/OperationsPage and existing store; P7-06/07 actual destinations | S02/W11/W12: read/dismiss ≠ task completion, stable operation/result/retry/cancel IDs, no invented event producer or scheduled-interview facts | Native read/dismiss/unread/reload/result links, failure/retry/cancel/disconnect/reconnect and no duplicate starts. Full `/notifications` only if meaningful existing-store content/need is proved; separate route/store contract and presentation commits. F20 recovery is a prerequisite before new enabled producers, not a hidden UI task |
+| **P7-09 — Remaining Settings, Connections and data lifecycle** | Existing Settings tabs/mobile selector, Rules draft lifetime, Profile/security links, independent subcards/save owners | S03–S05/M06/J10: UI/server/local preferences distinct, privacy/entitlements/recent-auth, backup/restore/delete and real mailbox grants | Add panel/control/error association and dirty retry/discard tests, native JSON import/export counts/bytes, owner-change state disposal, conditional plan/deletion availability. Prove locale failure feedback without claiming RD11 root-cause repair. Keep RD11/RD12/RD13 separately diagnosed. Split preference/Connections and data/privacy/plan/backup commits; no billing/deletion/restore activation |
+| **P7-10 — Admin operational presentation** | Existing distinct Users/Audit/System routes and MUI X grid/system owners; shared page/table/state foundations | A01–A03: server roles, last-admin/self/recent-auth, supported undo only, sensitive config/output; aggregate Admin dashboard has no data contract | Native crafted non-admin denial/mounted role revoke, supported persisted undo/restore, safe reset/diagnostic errors and long narrow tables. One Users, one Audit, one System commit; actual SMTP/model/probe/maintenance and production writes need separate authority/evidence. No empty aggregate dashboard |
+| **P7-11 — Remaining Analytics/error/empty/dialog integration** | Implemented DashboardView report owner/AnalyticsPage and migration inventory; shared feedback/state controls | S01/E08 plus affected PRES: no duplicate report owner, denominator/statistic change, fake empty state or renderer modification | Only unresolved legacy presentation/loaded-state findings: exact period/cohort/source links; not-found/denied/retry/empty with heading/focus/localised action. Each shared dialog change gets all-consumer regression. Commit by responsible shared component or page family, not a repository-wide visual sweep |
+| **P7-12 — Integrated full-migration acceptance** | Every executed slice has pushed source/finite evidence and all remaining debt dispositions | All57/route contracts; conditional reader/device/provider/rendering and production gates cannot disappear | Fresh applicable full frontend/backend/browser/HTTP/sidecar/auth/tenant/AI/revision/fidelity/security/build/hygiene lanes, reconciled counts, screenshots and true task journeys; reader/device results or explicit conditions. Produce separate migration acceptance/production readiness/Phase8 readiness decisions. No obsolete code removed before route/consumer proof |
+
+## Withheld and independently gated work
+
+| Retained item | Mandatory dependency / permitted boundary |
+|---|---|
+| **P5-13 / PRES-C11** | Remains DEFERRED/UNQUALIFIED/Production-withheld; exact deployed model/runtime identity, frozen32-case/366-call qualification, independent human semantics and redesigned review UI must all meet [return conditions](../../phase-5/OPEN_BLOCKERS.md#p5-13-deferred-debt-and-return-conditions--2026-10-08). Zero configured-target calls/zero human reviews currently; candidate model is not approved. No automatic qualification or activation. Eventual review reuses named current/proposed/source, progress/error/retry, explicit scope/Accept/Reject and stale-state protection |
+| **P5-05 / NEW-10 quick preview** | Deferred optional read-only host; full job page is preserved. Decide justified need and prove parity/Back/focus/query/dirty/no-write before a separate slice; no second full editor |
+| **Human reader/device/contrast** | M01–M13 remain mandatory where relevant. Settled AX-name/heading/panel/contrast/incomplete triage and physical touch/software keyboard/mobile AT must be resolved by actual operators before complete affected acceptance |
+| **Production output** | Actual Linux/fonts/portrait/crop/native-print/other-browser qualification with unchanged oracle; local synthetic photo/fidelity success is finite |
+| **Reliability** | Keep language/notification/Rules500 roots, focus timing, CV section expansion/Unsaved incidents and O(N) Board separately owned; successful reruns are not diagnosis. New changes to risky owners require native reproducer and recovery proof |
+| **Backend/domain** | Profile/job stale-save and creation-intent idempotency, worker F20, calendar F21, billing/deletion/provider cleanup and legacy cutover retain their original contracts; no implicit B07 or schema contraction |
+| **Production** | F04, current complete backup/isolated restore, effective configuration/provider/schema/secrets, rollback, protected CI/deployed identity and smoke/monitoring remain [NO-GO gates](../../phase-5/p5-15/p5-15-05/README.md). Development migration neither supplies operator evidence nor authorizes a main push |
+| **Phase 8** | Dashboard order/resize/reset/cross-device persistence and widget framework remain separate. Existing five visibility flags stay. Unsupported new metrics/goals/preferences/tasks/admin aggregation require explicit NEW/OD/data contracts |
+
+## Handoff exit and implementation entry
+
+The Phase 6 [fresh validation](evidence/validation.json), [commit ledger](../COMMITS.md), [preservation matrix](PRESERVATION.md) and final report define the actual source and bounded decision. Before Phase 7 execution, fetch/reconcile intervening development state, retain the existing branch unless a verified handoff establishes a successor, and update P7-00 scope rather than redo completed work. A source/remote mismatch is resolved without discarding changes.
+
+**Readiness stays CONDITIONAL GO:** bounded migration can use proven shared patterns; complete affected acceptance requires human/device/operator results and any severe shared defect to be resolved before propagation. C11 qualification is mandatory only before its withheld review capability can return, not permission to activate it while migrating unrelated pages. Provider writes and destructive/production work remain separately authorized. **Production release: NO-GO. Phase 7 implementation performed in Phase 6: none.**

docs/redesign/phase-6/p6-05/PRESERVATION.md

@@ -0,0 +1,99 @@
+# P6-05 — Preservation reconciliation
+
+All **57 original protected groups remain in scope**. The contract is the [full functionality ledger](../../audit/FUNCTIONALITY_INVENTORY.md), with its [Phase 2 executable anchors](../../phase-2/PRESERVATION_MATRIX.md), [Phase 3 impact](../../phase-3/PRESERVATION_IMPACT_MATRIX.md), [Phase 4 foundation acceptance](../../phase-4/p4-06/PRESERVATION_ACCEPTANCE.md) and [current Phase 5 reconciliation](../../phase-5/p5-15/PRESERVATION_ACCEPTANCE.md). A shorter row below never replaces an original sub-capability.
+
+## Authority and evidence scope
+
+The [P5-15-06 final handoff](../../phase-5/p5-15/p5-15-06/README.md) establishes implemented-scope **CONDITIONAL GO**, original full Phase 5 **NOT COMPLETE**, and **PRODUCTION NO-GO**. The authoritative handoff is `9528504866054da10e20d5196e65de536c4c9499`, following last Phase 5 application change `22455bba0a016f0cefabde46c539df588f789667`; historical Phase 2/4/P5-14 totals are superseded for baseline accounting.
+
+| Executed Phase 5 baseline | Result and scope |
+|---|---|
+| Backend | 1,033 passing; authorization/tenant/integrity suites included |
+| Frontend | 498 passing in 83 suites |
+| Ordinary browser / separate diagnostics | 148 / 3 passing; separate lanes, no skips/retries/expected failures |
+| Sidecar / focused AI / revision / real HTTP | 49 / 108 / 5 / 2; AI and revision are backend subsets |
+| Rate-limit / ingress / PDF admission / configuration | 9 / 6 / 1 / 3; local evidence, no F04 deployed qualification |
+| Original render corpus / Settings exports | 16 cases, 36 preview=36 PDF pages / 8 cases, 24=24 pages; original tolerances |
+| Full-group / route acceptance | 56 PARTIAL +1 DEFERRED =57; 32 route patterns PARTIAL |
+
+Fresh Phase 6 execution belongs to the [P6-05 aggregate manifest](evidence/validation.json) and [backend manifest](evidence/backend-validation.json), with checkpoint-specific behavioral proof linked from the [Phase 6 report](../README.md). Those records, rather than this inherited table, determine fresh counts, source, commands and observed failures. A suite total does not certify an unexecuted sub-workflow. Focused subsets are never added to complete-suite totals.
+
+**Full-original-group disposition remains 0 PASS /56 PARTIAL /0 FAIL /1 DEFERRED =57**, unless a fresh demonstrated failure is explicitly recorded in the final manifest. PARTIAL means retained behavior plus finite scoped evidence and unmet mandatory whole-workflow/human/provider/deployed obligations; it does not mean 56 proven defects. C11 remains explicitly deferred. Current scoped repairs may close their exact feedback defect without upgrading a whole group to PASS or diagnosing an older server exception.
+
+The table's evidence column links the applicable implementation/native acceptance records. The source-linked [Phase 5 matrix](../../phase-5/p5-15/PRESERVATION_ACCEPTANCE.md#reconciled-matrix) supplies every individual frontend/backend executable anchor; all are reconciled against the original ledger. P6 fresh execution is additionally governed by the manifests above. Manual checks remain [M01–M13](../../phase-5/p5-15/p5-15-02/MANUAL_ACCEPTANCE.md), not agent or emulator substitutes.
+
+## All 57 contracts
+
+| Contract / preserved boundary | Implementation and behavioral evidence | Full-group status | Mandatory limitation / remaining acceptance |
+|---|---|---|---|
+| **PRES-E01** Public product, Free/Pro comparison and honest unavailable billing | [Retained public route census](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), ledger/planCatalog tests in original matrix | PARTIAL | Public-page complete mobile/keyboard review and actual billing availability; no invented prices |
+| **PRES-E02** Local login/register/remember, Turnstile, resend/reset/verify | [AUTH-01 native repair](../../phase-5/p5-15/p5-15-01/analytics-auth-repair/README.md); complete return URL/security proof | PARTIAL | Real mail/reset submit/Turnstile and token expiry/used-token cases; query loss is repaired for its tested scope |
+| **PRES-E03** Google/Microsoft sign-in/link/relink, popup state/origin | [Shared return-boundary proof](../../phase-5/p5-15/p5-15-01/analytics-auth-repair/README.md), retained provider owners | PARTIAL | Actual consent/popups/revoked grants/relink; mailbox grants remain separate from sign-in |
+| **PRES-E04** 2FA/recovery/setup/disable/trusted-device revocation | [Retained identity census](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), TwoFactor/Sessions tests | PARTIAL | Real authenticator/recovery and reader/trusted-device traversal; sensitive confirmations retained |
+| **PRES-E05** Sessions/current-device/revoke/logout | [Shell/private lifecycle](../../phase-5/p5-02/README.md), Sessions/account-scoped tests | PARTIAL | Native session-card refresh after remote revocation and complete device/AT acceptance |
+| **PRES-E06** Avatar/account identity/email/password | [Retained `/profile` and confirmation route](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md) | PARTIAL | Complete avatar/remove/password/email-change native flow; account identity remains distinct from career facts |
+| **PRES-E07** Expanded/rail/mobile navigation, active route, commands | [Grouped shell](../../phase-5/p5-01/README.md), [utilities](../../phase-5/p5-02/README.md), [drawer repair](../../phase-5/p5-15/p5-15-04/mobile-drawer/README.md) | PARTIAL | Spoken names/live state, settled drawer AX-name triage and historical command/dialog timing; no route silently hidden |
+| **PRES-E08** Themes, EN/NB hydration, shared toast/confirm/prompt/errors | [Semantic foundations](../../phase-4/p4-06/README.md), [shared readiness](../../phase-5/p5-00/README.md), [P6 corrections](../p6-01/README.md) | PARTIAL | Full OS/locale/state cross-product, contrast/incomplete axe, reader/reflow; save feedback is distinct from server500 root-cause repair |
+| **PRES-E09** Account switch/stale read-write/BFCache/revalidation | [Native owned-resource protection](../../phase-5/p5-13-readiness/README.md), [auth expiry/logout proof](../../phase-5/p5-15/p5-15-01/analytics-auth-repair/README.md) | PARTIAL | Broader BFCache/offline/old-bundle/deployed cases; presentation never becomes authorization |
+| **PRES-J01** NAV search/filter/sort/source/freshness/details | [Retained Discover owner](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md) | PARTIAL | Live NAV availability/freshness and long-result keyboard/narrow traversal |
+| **PRES-J02** Named saved searches/run/delete/alerts/results/dismiss | [Native saved-search repair](../../phase-5/p5-15/p5-15-01/saved-search-repair/README.md) | PARTIAL | Actual scheduler-to-owned-notification delivery, human/mobile delete acceptance and intended-provider qualification; deterministic runner is not live NAV |
+| **PRES-J03** Reviewed manual/URL/paste creation/company/tags/dates/duplicates | [Jobs/Add](../../phase-5/p5-03/README.md), shared AddJobModal; transport boundary tests | PARTIAL | Duplicate/company/date/interrupted creation and distinct creation-intent idempotency debt; preview/open is no-write |
+| **PRES-J04** Extension/bookmarklet/share capture and optional post-create artifacts | [Capture retained](../../phase-5/p5-03/README.md), captureUrl/extension contracts | PARTIAL | Installed extension/share/no-replay and attachment failure recovery; keep payload and safe-return contracts |
+| **PRES-J05** Search/filter/sort/pages/columns/saved views/row-card actions | [Jobs presentation](../../phase-5/p5-03/README.md), [shared Table/Board query](../../phase-5/p5-04b/README.md) | PARTIAL | Full saved-view CRUD/dirty page-size/history combinations and supported capacity; server query semantics unchanged |
+| **PRES-J06** Bulk status/delete/restore, soft-delete/Trash, edit | [Native Jobs/Trash](../../phase-5/p5-03/README.md), [selection/view integration](../../phase-5/p5-04b/README.md) | PARTIAL | Complete selected-scope/partial-failure/dirty/manual combinations; no hard-delete substitution |
+| **PRES-J07** Board groups/custom statuses/pointer-keyboard move/cancel/menu | [Board](../../phase-5/p5-04a/README.md), [query parity](../../phase-5/p5-04b-readiness/README.md), [200/1,000 exact membership](../../phase-5/p5-15/p5-15-06/README.md) | PARTIAL | Physical drag/touch/browser variants and O(N) full-array capacity; no capped hidden results or pipeline redefinition |
+| **PRES-J08** Company/contact/source/pipeline-date/history editing | [Retained Companies owner](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), [P6 shared feedback checkpoint](../p6-01/README.md) | PARTIAL | Scoped in-modal failure proof follows P6 manifest; complete contact/date/source-link and human acceptance remain |
+| **PRES-J09** Recorded offer compensation/deadline/notes/source | [Offer/report source acceptance](../../phase-5/p5-07/README.md), retained OfferComparisonPage | PARTIAL | Many-offer mobile/currency/date acceptance; no invented salary normalization |
+| **PRES-J10** CSV/JSON export/import/conversion/counts | [Retained Settings Data](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), CSV/blob/formula-safety tests | PARTIAL | Complete native roundtrip and target spreadsheet compatibility; job import is not account restore |
+| **PRES-W01** Full job workspace/legacy links/optional overlay | [Seven-section native workspace](../../phase-5/p5-08b/README.md), [route/readiness proof](../../phase-5/p5-08b-readiness/README.md) | PARTIAL | `followMode` metadata retained; compose consumer deferred. P5-05 optional preview lacks production host; full page remains |
+| **PRES-W02** Details/status/next action/dates/contact/timeline | [Overview/header](../../phase-5/p5-08a/README.md), [section composition](../../phase-5/p5-08b/README.md) | PARTIAL | Stored-event localisation/timezones/status-reload combinations and separate job revision debt |
+| **PRES-W03** Analysis/match/gaps/strategy/reviewed status suggestions | [Contextual existing owners](../../phase-5/p5-08b/README.md), workflow/AI tests | PARTIAL | Real-model truthfulness/freshness/cancel quality; route entry never auto-generates; unrelated AI survives C11 withholding |
+| **PRES-W04** Checklist CRUD/completion/order/next action | [Retained checklist composition](../../phase-5/p5-08b/README.md), checklist tests | PARTIAL | Mobile interruption/edit/delete/reader; item identity and keyboard alternatives retained; no invented due-date schema |
+| **PRES-W05** Select/attach/create/tailor CV and source context | [Native attach/tailor/package readiness](../../phase-5/p5-08b-readiness/README.md), [Application section](../../phase-5/p5-08b/README.md) | PARTIAL | **P2-D01 remains ordinary passing**; broader attach-render/model/deployed combinations remain; owner/job association unchanged |
+| **PRES-W06** Manual/AI letter review/reject/apply/history/dirty guard | [Native Application/Letter](../../phase-5/p5-08b/README.md), [readiness](../../phase-5/p5-08b-readiness/README.md) | PARTIAL | Complete native history/reject/reader/model combinations; no canonical mutation or auto-send |
+| **PRES-W07** Drafts/frozen package versions/archived binaries | [Native SQLite/source-mutation/archive ZIP proof](../../phase-5/p5-08b-readiness/README.md) | PARTIAL | Actual production restore/rollback/all-storage combinations; current edits/delete cannot mutate frozen bytes; capture is not delivery |
+| **PRES-W08** Upload/drop/category/name/consent/preview/download/delete | [Documents section](../../phase-5/p5-08b/README.md), [native keyboard picker repair](../../phase-5/p5-15/p5-15-04/file-picker/README.md) | PARTIAL | Physical drop, full rename/download/reader and deployed storage; AI inclusion remains explicit |
+| **PRES-W09** Interview categories/questions/answers/manual removal/AI review | [Interview section](../../phase-5/p5-08b/README.md), interview persistence/context tests | PARTIAL | Real-model and physical software-keyboard/reload/reader; preparation is not a scheduled interview |
+| **PRES-W10** Debrief/follow-up content/date/readiness | [Retained interview/follow-up](../../phase-5/p5-08b/README.md) | PARTIAL | Timezones/provider delivery; `followMode` reviewed compose UI remains deferred, no automatic send |
+| **PRES-W11** Reminders/rules/notifications/ICS/Google-Outlook events | [Rules draft/error/retry repair](../../phase-5/p5-15/p5-15-01/rules-draft-repair/README.md), retained calendar contracts | PARTIAL | F21 DST/date-only/offsets, real provider events/scheduler delivery and historical unconfirmed Rules500 cause |
+| **PRES-W12** Async progress/failure/retry/cancel/notifications | [Operation and bell entries](../../phase-5/p5-02/README.md), operation/worker tests | PARTIAL | Disconnect/reconnect and F20 enabled-worker fault recovery; stable operation IDs/no duplicate starts |
+| **PRES-C01** All canonical structured/long-tail/custom career fields | [Source isolation](../../phase-5/p5-10/README.md), canonical service/controller tests | PARTIAL | Full long-tail mobile save and profile concurrency; singleton source distinct from identified variants |
+| **PRES-C02** Overview/completeness/import/raw copy/avatar/history restore | [Retained Career owner](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), overview/profile/history tests | PARTIAL | Complete native historical restore/clipboard/avatar/reader; live inherited CVs may reflect later source changes |
+| **PRES-C03** Upload/extract/reprocess/diff/low-confidence select/accept/discard/retry | [Native picker repair](../../phase-5/p5-15/p5-15-04/file-picker/README.md), extraction/diff tests | PARTIAL | Scanned/OCR corpus and complete low-confidence/discard/native-reader flow; extracted proposal is not canonical truth |
+| **PRES-C04** Evidence sources/categories/tags/add/list/delete | [Retained evidence owner](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), evidence frontend/API tests | PARTIAL | Many-item/delete/keyboard acceptance; evidence stays sourced and owner-bound |
+| **PRES-C05** Library CRUD/gallery/share/publication/PDF | [Gallery/control reuse](../../phase-5/p5-12/README.md), library/publication tests | PARTIAL | Library migration not complete; publish/unpublish/old-slug revocation and every template combination required |
+| **PRES-C06** Studio tabs/save states/debounce/pages/fit/mobile panes | [Frame](../../phase-5/p5-09/README.md), [preview](../../phase-5/p5-11/README.md), [hidden-initial repair](../../phase-5/p5-15/p5-15-04/mobile-preview/README.md) | PARTIAL | Physical keyboard/touch/AT and broader short-height/wrapped/deployed cases; one editor/save/preview owner |
+| **PRES-C07** Visibility/order/custom sections/item-document overrides/reset | [Source/override editing](../../phase-5/p5-10/README.md), [nested ownership proof](../../phase-5/p5-14/README.md) | PARTIAL | Physical selection/drop/all-browser and exhaustive reset/inheritance combinations; sibling/canonical/frozen separation retained |
+| **PRES-C08** Capability-aware typography/color/header/skills/sidebar/photo | [Nine-template control matrix](../../phase-5/p5-12/README.md) | PARTIAL | Production fonts/portraits/wrapped lines/custom color/reader; schematic gallery is not final-photo qualification |
+| **PRES-C09** A4/Letter/density/margins/dates/document locale/section layout | [Advanced controls](../../phase-5/p5-12/README.md), [native pagination repair](../../phase-5/p5-09-pagination-readiness/README.md) | PARTIAL | Advanced cross-product/manual print/deployed fonts; UI locale distinct from document locale; no print geometry styling change |
+| **PRES-C10** Undo/redo/save queue/dirty/history/conflict/preview lifecycle | [Expected-version/recoverable draft protocol](../../phase-5/p5-09-readiness/README.md), [responsive held-PUT proof](../../phase-5/p5-14/README.md) | PARTIAL | Long offline/history and IF-CV-UNSAVED-01 trace; settings history is not immutable historical profile/PDF; profile/job saves remain separate |
+| **PRES-C11** Section/document AI improve/translate/instruction/grammar review | [Deterministic grounding/stale/owner guards](../../phase-5/p5-13-readiness/README.md), [Production no-write HTTP proof](../../phase-5/release-readiness/README.md) | **DEFERRED** | **0/366 configured-target calls;0 human semantic reviews;review UI absent.** Production503 `cv_ai_unavailable`/no provider/no write remains; safe withholding is not generation acceptance |
+| **PRES-C12** Private PDF/public slug preview-PDF/long searchable output | [Unchanged 16/36 and8/24 corpora](../../phase-5/p5-15/p5-15-03/README.md), private/public/admission tests | PARTIAL | Deployed Linux/font/photo/browser/manual-print qualification and complete revoke/busy-recovery cases; white print pages retained |
+| **PRES-M01** Job manual correspondence log/search/delete/paste | [Timeline/Correspondence composition](../../phase-5/p5-08b/README.md), correspondence owner tests | PARTIAL | Full edit/delete/paste/reader native combinations; logging is not sending |
+| **PRES-M02** Gmail candidates/thread import/sync/unlink/relink/move | [Retained job Gmail tools](../../phase-5/p5-08b/README.md), ownership/import tests | PARTIAL | Actual provider threads/multi-account revoke/reconnect/sync failures; cross-job changes owner-bound |
+| **PRES-M03** Global inbox filters/page/provider/link/direction/detail/attachments | [Retained inbox route](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), Email ownership tests | PARTIAL | Large mailbox/native attachments/complete reader acceptance; global inbox remains Phase7 migration |
+| **PRES-M04** Compose/reply/draft revisions/confirmed send/uncertain attempt | [Retained draft/send owner](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), draft revision/send tests | PARTIAL | Sandbox delivery/reconnect/dirty interruption; no automatic uncertain resend; reviewed `followMode` UI deferred |
+| **PRES-M05** Gmail reviewed job/link/reject/keep/notes/sync/create | [Review alias/native route](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), review controller/page tests | PARTIAL | Real provider and complete proposed-job create flow; route opening is no-write |
+| **PRES-M06** Gmail/Graph/IMAP connect/status/disconnect | [Retained Connections](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), connection/controller tests | PARTIAL | Real grants/revoke/token expiry/reconnect/IMAP safety; keep sign-in identity separate |
+| **PRES-S01** Personal counts/activity/funnel/company/skills/stage/salary/next action | [Dashboard](../../phase-5/p5-06/README.md), [implemented Analytics](../../phase-5/p5-07/README.md), [target correction](../../phase-5/p5-15/p5-15-04/report-targets/README.md) | PARTIAL | Exact cohort/timezone/sample/unsupported metrics and whole reader acceptance; no fabricated statistics or Analytics rebuild |
+| **PRES-S02** Five owner-local flags/onboarding/bell read-dismiss | [Dashboard flags](../../phase-5/p5-06/README.md), [bell](../../phase-5/p5-02/README.md), [12 concurrent rounds](../../phase-5/p5-15/p5-15-06/README.md) | PARTIAL | Historical500 causes unproved; full onboarding/notification acceptance; order/resize/reset/cross-device design remains Phase8 |
+| **PRES-S03** Rules/notification/table/theme/language/account preferences | [Settings primitives](../../phase-4/p4-04/README.md), [Rules retention](../../phase-5/p5-15/p5-15-01/rules-draft-repair/README.md), [P6 feedback](../p6-01/README.md) | PARTIAL | Language failure visibility is separate from RD11 server cause; RD12 notification locking/RD13 Rules500 and human/provider acceptance retained |
+| **PRES-S04** Privacy/AI usage/limits/server entitlement/billing availability | [AI protocol/privacy/metering](../../phase-5/p5-13-readiness/README.md), plan/usage tests | PARTIAL | Checkout/webhook/portal and provider delivery; temporary C11 withholding cannot disable unrelated AI or imply successful review |
+| **PRES-S05** Account ZIP/encrypted backup/lifecycle/deliberate delete | [Native package/ZIP relationships](../../phase-5/p5-08b-readiness/README.md), [release recovery gate](../../phase-5/p5-15/p5-15-05/README.md) | PARTIAL | Current complete backup/restore/keys/tombstones/rollback and deletion/provider policy; downloading backup is not restore proof |
+| **PRES-A01** Admin users/create/roles/reset/delete/last-admin/self guard | [Retained admin census](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), Users/authorization tests | PARTIAL | Mounted-role revoke/full persisted mutations/reset delivery; hiding navigation never authorizes API calls |
+| **PRES-A02** Audit detail/supported undo/job restore | [Retained audit census](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md), audit/authorization tests | PARTIAL | Native successful persisted undo/restore and unsupported-action denial; no generic undo semantics |
+| **PRES-A03** System/build/DB/AI/mail/SMTP/probe/benchmark/maintenance | [Metadata disclosure](../../phase-5/p5-00/README.md), [admin route census](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md) | PARTIAL | Actual guarded diagnostic/SMTP/model/maintenance and sensitive-output qualification; no production jobs launched |
+
+## Routes and critical invariants
+
+The [32-pattern route acceptance](../../phase-5/p5-15/ROUTE_ACCEPTANCE.md) records 31 original patterns plus meaningful `/analytics`, with 192 role/entry-refresh observations and 98 selected API reads in Phase 5. They are behavioral census evidence, not HTTP200-only acceptance and not complete long-tail route certification. Preserve `/kanban`→Jobs Board, `/applications/:id`→job workspace, correspondence review aliases, section/sub query priorities, numeric navigation-helper outputs, safe internal `from`, `focusJobId`, capture consumption and provider/token routes. No new Documents/Notifications/aggregate Admin route is inferred from an illustrative navigation tree.
+
+Fresh regression must retain account/role/object denial, source/override/sibling isolation, CV expected-version/history/draft recovery, original rendering tolerances, public slug revocation/private export admission, immutable package/source/binary relationships, proposal grounding/invalid-block/stale-state protections and Production withholding. **P2-D01 is an ordinary passing test; no skip, expected-failure marker or weaker assertion is acceptable.** No Phase 6 presentation change authorizes schema cutover, destructive restore, billing/deletion/provider activation or production release.
+
+## Open acceptance and release gates
+
+The [complete RD01–RD28 register](../../phase-5/p5-15/READINESS_DEBT.md) and [successor dispositions](../../phase-5/p5-15/p5-15-04/DEBT_DISPOSITION.md) remain linked obligations, not erased by passing CV/tenant tests. Human screen-reader work is NOT COMPLETE/NOT VERIFIED; physical touch/software keyboard/mobile AT remain NOT VERIFIED. Axe incomplete nodes and all-enabled findings require contextual triage; finite zoom/emulation/root-overflow checks do not supply spoken-name or device evidence. Production fonts/portraits/alternate browser/print qualification remain open.
+
+Keep language/notification/Rules exception causes, command/dialog focus timing, CV section expansion and Unsaved intermittence, Board full-array scaling, profile/job stale-save and creation idempotency, F20 worker durability, F21 timezones, provider/billing/deletion policy and legacy cutover individually owned. P6 feedback repairs close only their demonstrated UI failure behavior. P5-13, P5-05 and `followMode` UI remain deferred.
+
+**Production remains NO-GO** until [F04/current complete backup/isolated restore/configuration/schema/secrets/rollback/deployed smoke/monitoring](../../phase-5/p5-15/p5-15-05/README.md) have actual operator evidence and a separate release decision. This reconciliation supplies neither complete human sign-off nor production GO. Phase 7 may only use the [conditional migration handoff](PHASE7_HANDOFF.md); no Phase 7 implementation is included.

docs/redesign/phase-6/p6-05/README.md

@@ -0,0 +1,110 @@
+# P6-05 — Final Phase 6 acceptance and Phase 7 handoff
+
+**Phase 6 review is validated with the qualifications below.** The complete rebuilt-source regression, separate native security/HTTP/diagnostic packs, regenerated document fidelity and finite repository hygiene checks pass. The [aggregate manifest](evidence/validation.json) records exact commands, ordinary result guards, source/export identity and contextual accessibility qualifications. The checkpoint's commit and direct remote identity are recorded in the [chronological ledger](../COMMITS.md) when it is pushed normally to development.
+
+## Separate acceptance decisions
+
+| Decision | Outcome | Meaning and mandatory qualifications |
+|---|---|---|
+| **Phase 6 Design/UX Review** | **CONDITIONAL GO** | Bounded design/feedback corrections and finite review evidence support continued development. All 57 preservation groups retain 56 PARTIAL /1 DEFERRED; actual reader/device/production-output acceptance, retained axe findings and recorded reliability roots remain open. This does not complete the original withheld Phase 5 requirements or every remaining migration. |
+| **Production Release** | **NO-GO** | F04 real ingress, current complete backup/isolated restore, effective schema/configuration/provider/secrets, rollback and deployed smoke/identity/monitoring evidence remain missing. No main push or deployment is authorised or performed. |
+| **Phase 7 Readiness** | **CONDITIONAL GO** | The reconciled [migration plan](PHASE7_HANDOFF.md) can guide bounded development after a fresh state inventory. Actual human/device/operator acceptance, contextual axe disposition and severe shared regressions must be resolved before affected complete acceptance/propagation. P5-13 qualification is mandatory before its withheld capability returns; unrelated migrations do not activate it. Phase 7 implementation in this task: none. |
+
+## Original objectives and execution authority
+
+The owner's 2026-10-11 request requires P6-00–P6-05: review the approved Scandinavian design system, improve cross-page usability/accessibility/localisation, measure representative performance, retain every capability and produce concrete Phase 7 boundaries. This six-checkpoint sequence supersedes the older P6-00–P6-06 proposal while retaining its historical evidence. [Original implementation plan](../../IMPLEMENTATION_PLAN.md), [Phase 3 architecture](../../phase-3/INFORMATION_ARCHITECTURE.md), [Phase 4 design system](../../phase-4/README.md), [Phase 5 final handoff](../../phase-5/p5-15/p5-15-06/README.md) and all 57 original contracts govern the review.
+
+Development remains `codex/ui-redesign-phase4`. Execution fetched/reconciled HEAD=origin at `9d6d29dba4733778e478909d4ff74a25409b3115` and preserved the seven intervening modified files. Phase 5 handoff `9528504866054da10e20d5196e65de536c4c9499` establishes implemented-scope **CONDITIONAL GO**, full original Phase 5 **NOT COMPLETE**, production **NO-GO**. Its last application commit is `22455bba0a016f0cefabde46c539df588f789667`. Production main remains `27657f31131cd95d42f0e1290853ec9c9b3959a4`.
+
+Earlier application/export evidence uses `c135d03602fd273658cfa1c087491c7442060c6a`. Visual review then confirmed a clipped Career workspace selector label; its narrow shared CSS repair is frozen at `bd47214bdcd74336788dca0f294b8ddb9403cac1`, with source fingerprint/export `2LDblja_XnSBWSuY6ys_V`. Fresh 521-unit, type/lint/build, focused and complete 159-case native runs pass, followed by separate security/HTTP/diagnostic packs and regenerated original-oracle fidelity. The source checkpoint is pushed and live development remote=HEAD verified. Locale-fetch additions, extended performance measurements and corrected modal assertions are test changes; two new label-visibility browser cases are separate additions. The backend 440-file fingerprint remains unchanged from its fresh serial Release run. The first full browser run loaded an earlier performance variant; the final run uses the extended client-navigation/search case without increasing its count. Commit hashes, checkpoint validation and immediate remote=HEAD verification belong to the [chronological ledger](../COMMITS.md).
+
+## Work completed
+
+| Checkpoint | Recorded baseline, findings and bounded result | Evidence / remaining scope |
+|---|---|---|
+| [P6-00](../p6-00/README.md) | Audited shell, redesigned Dashboard/Analytics, Jobs Table/Board/workspace, CV editor and remaining page/form owners. Prioritised genuine functional/accessibility/locale concerns versus intentional variation and approved Phase 7 work. | [Findings register](../p6-00/FINDINGS.md), original route/contracts and preserved dirty-work inventory. Legacy presentation alone is not a Phase 6 defect. |
+| [P6-01](../p6-01/CORRECTIONS.md) | Existing theme contrast pair for identity initials; explicit contextual Login/Career/Account/CV/Admin heading hierarchy; named Settings tab/panel relationships. Retained font/visual variants, density, MUI/Emotion and page/save owners. | Test-first semantic/contrast proof and final all-consumer regression. Native company failures also proved a shared Axios error-helper localisation defect; existing 126 callers now retain structured server explanations while using translated caller fallback for ordinary transport errors. |
+| [P6-02](../p6-02/README.md) | Company failed-save alert remains in its dialog, retains draft and retries to native persisted state. Language failure explains local versus account scope and offers deliberate translated Retry. Latest-choice/request guards prevent obsolete failure/Retry reverting newer choice. | Four native EN/NB error/retry/readback/reload cases; [workflow/AI review](../p6-02/AI_REVIEW.md). No save endpoint/protocol, canonical data, routing or model activation change. |
+| [P6-03](../p6-03/README.md) | Native themes/locales, viewport/zoom, semantic names/panels, keyboard/focus and all-enabled axe triage. Company card/list dates share UI locale; two company-filter loading labels reuse existing translation. Shared CSS gives the clipped Career selector floating label clearance. | Two label cases are RED→repair→2/2 fresh GREEN with original geometry/overflow assertions; six Settings/label focus cases and complete 159-case regression pass on rebuilt source. [Label proof](../p6-03/evidence/career-selector-label-proof.json) retains RED/intermediate/GREEN and inspected images. Current 52-scan findings and incomplete axe/reader/device gaps remain visible. |
+| [P6-04](../p6-04/README.md) | Reproducible production-export route/request/long-task/layout/heap observations, 200/1,000 complete Board comparison, long CV pagination/editing and client interactions. Reviewed reuse/lazy loading/read ownership without speculative rewriting. | [Performance measurements](../p6-04/evidence/performance.json). Actual Toast/I18n company consumer proves feedback adds 0 reads and locale change adds 1; hypothesised toast-refetch defect is disproved. Board full-result scaling remains qualified. |
+| P6-05 | Fresh integrated regression, count reconciliation, all 57 preservation matrix, separate release/readiness decisions, chronological pushed checkpoints and Phase 7-only migration plan. | [Manifest](evidence/validation.json), [preservation](PRESERVATION.md), [handoff](PHASE7_HANDOFF.md); runtime, regenerated fidelity and finite hygiene verified. Commit/push identity belongs to the ledger receipt. |
+
+Shared corrections preserve approved typography/spacing/density and contextual patterns instead of adding a second presentation framework. Existing notification infrastructure remains the only toast owner. Print-oriented CV paper stays white inside themed chrome; physical renderer/pagination and frozen documents are unchanged. Existing source versus CV override labels, review/apply versus explicit save/send, table density versus readable editor text and distinct navigation/editor breakpoints remain intentional variation.
+
+## Fresh regression and count reconciliation
+
+All values below come from actual Phase 5 final evidence and current execution artifacts, not obsolete planned counts. AI/revision subsets and focused native reruns are not added to their complete-suite totals. The aggregate manifest preserves the applied native/build environment values and exact ignored browser TypeScript configuration contents/hashes, including the inherited application configuration, for reproducible commands.
+
+Portable repository JSON identities use SHA256 of canonical UTF-8 LF text (CRLF converted to LF) so they match staged Git blobs; measured runtime report, log, attachment and source hashes retain their original raw bytes.
+
+| Lane | Phase 5 final | Current observed result | Count explanation / proof |
+|---|---:|---|---|
+| Backend full |1,033|1,033 passing; 0 failed/not executed|Unchanged backend source/tests; [backend manifest](evidence/backend-validation.json) includes exact commands, hashes, auth/tenant/domain classes and source fingerprint. |
+| Frontend |498 /83 suites|Fresh post-CSS521 passing /85 suites;0 failed/pending/todo|+23:9 semantic/initials/panel,4 company retry/date-locale,4 language feedback/race,5 real error-helper,1 locale-fetch stability. +2 suites: API-error localisation and locale-fetch stability. Two label browser cases do not add Jest cases. |
+| Sidecar |49|49 passing; 0 failures/errors/skips|Unchanged deterministic offline suite; no live model qualification. |
+| Grounding/proposal protections |108|108 passing; 0 not executed|Backend-full subset; authoritative source/version/scope/tamper/privacy safeguards retained. |
+| CV revisions |5|5 passing; 0 not executed|Backend-full subset; version/collision/restore and draft ownership retained. |
+| Ordinary native browser |148|159 passing; 0 unexpected/skipped/flaky, every case passed once with retry0|+11: 4 feedback +4 Settings +1 performance +2 Career labels. Existing modal expectations and extended performance assertions add no cases. Final complete invocation 08:47:46.517–09:19:00.539 UTC; [portable results](evidence/main-results.json) retain exact source report SHA and case membership. |
+| Focused feedback / semantic-label / named controls / performance |Included in ordinary corpus|Feedback4/4, named controls4/4, semantic-label6/6, label2/2 and performance1/1 passing|Label2 is a subset of semantic-label6. Focused lanes are not added to ordinary159; all affected cases also pass in the final rebuilt-source complete run. Interrupted execution is not acceptance. |
+| Native diagnostics |3|3 passing; 0 skipped/flaky/retries|Separate retained diagnostic pack ends 09:20:21.189 UTC; historical failures stay tracked. |
+| Real HTTP / rate limits / ingress / PDF admission |2 /9 /6 /1|2 /9 /6 /1 passing; 0 skipped/flaky/retries|Separate native process/configuration contracts, including production CV-AI withholding; local topology is not real production F04 proof. |
+| Configuration / supply chain / offline evaluation / extension |3 /3 /5 /3|3 /3 /5 /3 passing|Evaluation parser/scoring helpers are not configured-target or human semantic qualification. |
+| Standard rendering fidelity |16 cases;36 preview=36PDF pages|Fresh regenerated16/16;36 preview=36PDF pages|[Finite verifier](evidence/fidelity-results.json) runs 09:19:10.753–09:19:19.105 UTC after the complete repaired-source native run regenerates the corpus; original physical dimension/position/font/colour tolerances and exact page membership remain. |
+| Settings export fidelity |8 cases;24 preview=24PDF pages|Fresh regenerated8/8;24 preview=24PDF pages|Fresh verifier 09:19:19.106–09:19:25.005 UTC; same finite settings corpus and original oracle, generated by the final rebuilt-source native run. |
+| TypeScript / browser TypeScript / lint / frontend production build |Passing|Fresh post-CSS commands exit0; export `2LDblja_XnSBWSuY6ys_V`|Backend API/test-project Release `--no-restore -warnaserror` builds exit0 and remain applicable to unchanged backend source. |
+| Secret scan / docs / whitespace / source-remote synchronization |Passing finite checks|Secret scan, strict docs/matrix/route checks and all whitespace lanes passing; development badfb19=origin, main unchanged|[Static checks](evidence/backend-static-checks.json) retain exact commands, output hashes, strict link totals,57 matching group statuses and32 route patterns. Secret pattern scope includes configured nonbinary files up to2MiB, with no historical Git or production-secret claim. Final checkpoint synchronization is the separate commit/ledger receipt. |
+
+`P2-D01` is an ordinary passing native case in the complete report: [the frozen-workspace contract](../../../../job-tracker-ui/e2e/redesign-preservation.spec.ts#L73), identified by its source comment at line102, passes exactly once with retry0. Native capture returns200, current-source mutation does not mutate the frozen readback, archived attachment bytes survive and sibling state remains unchanged. Playwright `expected` statistics mean tests met their declared ordinary `passed` status; the aggregate independently verifies all159 declared expected statuses are `passed`, all results passed exactly once and no skips/retries/expected failures exist. The same guard passes all separately configured native packs. Backend tests ran before final frontend changes; unchanged backend fingerprint establishes applicability, rather than claiming a later nonexistent rerun.
+
+Intermediate attempts retain exact command/report/log failures under `.artifacts/phase6/current/` with hashes. The early runner reused lane output folders, so some old failure screenshot/trace/error-context attachment paths no longer resolve; complete old failure traces are not claimed. The runner now archives the previous whole output folder before subsequent reruns, including the first full run. Current successful screenshots and exported manifests have exact provenance. An early 516-test integrated run exposed two real language race failures and two semantic test-setup errors; later 516 then 521 runs pass. Initial native company cases exposed English Axios500 text despite correctly retained dialog drafts; shared helper localisation repairs both. Company host-locale tests first failed then passed using the UI locale. Performance attempt1 mistakenly treated Dashboard's determinate onboarding progress as loading; attempt2 reused normalised identical CV bullets yielding one page. Corrected test-only fixture uses eight distinct roles/four unique bullets each, yielding four actual pages; app/renderer source did not change or weaken the page assertion. The extended performance attempt's final Dashboard locator expected `1000` while the actual named link correctly formats `1,000`; retained snapshot confirms the exact 1000 metric, source link and preceding client-query assertions. Test-only locator now matches existing English number formatting. The first full ordinary run ended 153 passing/4 failing because all four named-controls theme/locale cases still asserted the historical bug (`aria-hidden=true`). They now scope the error to `companyDialog.getByRole('alert')`, require no aria-hidden ancestor and retain the draft-value assertion; focused4/4 passes, with fresh full regression required. This strengthens the accessible repaired contract without app-source change, skips, expected failures or relaxed product requirements. These attempts are retained execution history, not retries hidden in a final result.
+
+## Design, accessibility, localisation and performance result
+
+The next owned full run was interrupted at `2026-10-11T08:38:00.6103367Z` to make the visually confirmed Career label repair; `ui/main-interruption.json` records the exact verified descendant process tree and reason. Its partial execution is **NOT acceptance evidence**. Both new label cases first fail at 320px NB/dark and390px EN/light: the floating label begins at200px while its clipping navigation begins at208px. Their original geometry/overflow assertions now pass after the bounded repair, both focused and in the complete rebuilt-source159-case run. The first post-fix fixture incorrectly expected `section=overview` for the approved default destination; actual existing navigation removes the default query. Test-only exact `/career` and Overview selector-text assertions correct that setup, without a route change. This genuine responsive defect is separate from the obsolete modal test expectations.
+
+Confirmed scoped consistency problems are repaired at their existing owners; the label clipping correction has focused and complete integrated proof. Main/section semantics, readable meaningful initials, named panels and localised actionable error/save states have affected-route evidence. Both EN and natural Bokmål use the translation catalog, including translated new feedback copy; no new hard-coded user-facing strings outside that catalog, frameworks or fonts were introduced. The established project acceptance target is WCAG 2.2 AA, with the Phase 3 44×44 touch aim distinct from the AA24×24/spacing criterion; this report is not a conformance certification. Document/Board two-dimensional content and cross-frame findings are distinguished from app-chrome reflow.
+
+[P6-03 evidence](../p6-03/README.md) retains49 detailed pre-CSS scans from passing cases in the first153-pass/4-fail attempt:11 violation-node and342 incomplete occurrences. Its source scope/hash is preserved and is not a whole-suite PASS. The [fresh repaired-source aggregate](evidence/validation.json) separately records52 detailed scans from the final159/159 passing run:11 violation-node and435 incomplete occurrences, with every captured state/route/target and category triage. Occurrences repeat across snapshots; they are not counts of unique controls. All49 common scan states retain the same category/node counts. The extra93 incompletes arise in three added states: two Career label scans each retain44 contrast incompletes; settled touch adds4 contrast and1 hidden-focus incomplete. No new rule category appears, and none is suppressed. These finite detailed scans differ from the historical312-scan aggregation.
+
+Remaining violation contexts are specific: five CV editor/preview samples identify the parent `#app-main-content` with document frames present; two keyboard samples identify the Add Job/Job workspace `.MuiTypography-subtitle2` heading hierarchy; and the first emulated-touch drawer sample records four unnamed nested links. The settled drawer asserts focused named Dashboard, visible Discover/Companies/Offers/Trash and Escape focus restoration, then reports zero `aria-command-name` violations. The first four findings remain recorded; this establishes different sampled states, without proving a transition root cause or acceptable spoken experience. Settled touch still retains the separate `#root` hidden-focus incomplete and four contrast incompletes.
+
+| Retained incomplete category | Final occurrences | Captured context and required disposition |
+|---|---:|---|
+| `aria-prohibited-attr` |28|MUI/generic/chip wrappers, CV disabled Undo/Redo label spans and Admin DataGrid sort wrapper. Inspect actual role/attribute and disabled-wrapper semantics; keyboard proof does not replace reader acceptance. |
+| `color-contrast` |394|Badges, selects/tabs, Career form controls, report captions and CV paper/frame content. These incomplete targets do not supply passing contrast ratios. M11 must measure visible foreground/background and distinguish justified hidden/disabled exceptions. |
+| `aria-hidden-focus` |10|Menus, command/drawer/dialog background `#root` and an underlying dialog, including settled touch. Verify actual modal/inert/background focusability and operator traversal; zero settled command-name findings do not clear this category. |
+| `aria-valid-attr-value` |2|Open/empty command dialog paper. Validate actual references/value lifetime and reader behavior in those states. |
+| `target-size` |1|Admin desktop DataGrid actions cell. Measure actual hit area/spacing and AA24px criterion exceptions, separately from the44px design aim and physical-touch qualification. |
+
+These findings remain contextual acceptance work for the affected owners and actual reader/device operators. Agent-inspected screenshots and native assertions support the bounded repairs; they do not clear unresolved contrast, landmark, hierarchy or focus findings. The [manual packet](../../phase-5/p5-15/p5-15-02/MANUAL_ACCEPTANCE.md) requires applicable M01–M12 results, including M09 spoken names/state and M11 contextual contrast. M13 is the separate deferred AI return obligation and must not execute while P5-13 is withheld.
+
+### Retained-rule inventory and combined scope
+
+The final report also contains **267 separate retained-rule scans** using inherited WCAG2A/2AA/2.1A/2.1AA tags and existing domain/dialog/preview include scopes. They record **0 violation-node occurrences and 2,038 incomplete occurrences**: `color-contrast` 1,766, `aria-prohibited-attr`209, `aria-hidden-focus`41, `aria-valid-attr-value`18 and `th-has-data-cells`4. The aggregate retains every attachment identity/hash and category/node count, representative deduplicated target/check contexts and the four exact table-error entries, separately from the52 detailed all-enabled scans. Complete node vectors remain in the raw final main report, identified by its SHA256 and decoded attachment hashes; the compact aggregate does not claim to serialize every repeated node. Their zero violations do not certify omitted rules or complete WCAG2.2 acceptance.
+
+Contrast checks report1,380 overlapping-background,193 partially-obscured,189 short-text and4 partially-obscuring node contexts; an incomplete ratio0 is not a measured failure or pass. Hidden-focus findings target `#menu-`24 times, `#root`12, popovers4 and a drawer1, asking whether focusable descendants are tabbable in the captured state. Prohibited-attribute findings cover204 spans/5 divs, including disabled CV labels/checklist wrappers;18 invalid-value findings retain command-dialog missing-label-ID/lifetime context. These require the same M09/M11 state/name/isolation and measured-context review, rather than a global waiver.
+
+The sixth incomplete category, **`th-has-data-cells`4**, occurs in `list-error-light-en-axe`, `list-error-light-nb-axe`, `list-error-dark-en-axe` and `list-error-dark-nb-axe`. Each targets `table` and reports “Table data cells are missing or empty.” This is an error-state empty-data capture, with no established application defect from the incomplete alone. M11 must review that exact error/header/data context and M09 reader recovery; loaded Table associations have separate evidence.
+
+The first153-pass/4-fail attempt captured251 of these retained-rule snapshots. Correcting the obsolete modal expectation restores16 previously unreached checkpoints across the four cases; the extra157 incomplete occurrences are exactly145 contrast,8 prohibited-attribute and4 hidden-focus. This is a same-attempt scope reconciliation, not an improvement claim. The complete inventory is **319 mixed-scope snapshots,11 violation-node and2,473 incomplete occurrences**:52 all-enabled plus267 retained-tag/domain scans. Repeated occurrences are not unique defects; this combined count is not all-enabled and must not be compared as a like-for-like Phase5 baseline.
+
+Performance establishes a **local baseline**, not a budget or production claim. The final repaired-source export has53 JS files,3,234,867 raw bytes and940,065 bytes summed per-file gzip; these include lazy chunks and do not equal initial-route transfer. Native Windows Chromium151/1280×720/Release API/isolated SQLite observations record requests, ready milestones, long tasks, layout shifts and finite CDP heap samples. API ResourceTiming `transferSize=0` is unavailable cross-origin timing information, not evidence of zero network bytes; explicit complete-Board payload lengths are separately measured. CDP document/node/heap snapshots can retain prior navigation or CV iframe documents and do not establish memory growth/leak. The final standalone1,000-result Board payload is1,181,982 bytes with render long tasks397/264ms versus200-result237,273 bytes and92/96ms. This proves scaling cost worth separate bounded capacity work; it does not justify a cap, feature removal or speculative renderer/backend rewrite. Query-preserving client Board→Table319ms, Table→Board695ms, exact one-result search including debounce1,490ms and Jobs→Dashboard184ms retain the same document `timeOrigin`; these are finite diagnostic observations, not performance budgets. Dashboard duplicate source reads and layout shifts remain measured follow-up candidates with distinct shell/onboarding/report owners. Single observations are not comparative improvement, leak diagnosis, React rerender counts or physical-device qualification. Original and final runs are independent diagnostics, without an asserted timing improvement.
+
+## Preservation and remaining debt
+
+The [57-group matrix](PRESERVATION.md) retains **0 PASS /56 PARTIAL /1 DEFERRED (PRES-C11)**. Finite regression does not erase missing manual/provider/production evidence. The32 existing route groups remain scoped PARTIAL; no intended route/capability removal, authorisation weakening, canonical-profile corruption, CV override merge, frozen document mutation or pagination change is introduced. The matrix links original contract-specific evidence and remaining limits rather than manufacturing whole-group PASS.
+
+| Retained qualification | Required disposition |
+|---|---|
+| Actual reader/device acceptance | Applicable M01–M12 operator/version/device results remain NOT VERIFIED, including M09 actual spoken names/state and M11 contextual contrast/forced colours/motion. M13 remains separately deferred AI return/do-not-execute. Physical touch/native drag/software keyboard/mobile AT, supported alternate browser/text-only zoom and production font/photo/crop/print qualification require their actual environments. Automated scans/snapshots and emulation do not substitute. |
+| P5-13 / C11 | Deferred, unqualified and Production-withheld. Frozen 32-case/366-call packet has 0 actual configured-target calls and 0 human reviews. No qualification run or AI review UI is activated. Existing unrelated AI and authoritative proposal protection remain. |
+| Deferred features | P5-05 quick preview and reviewed `followMode` consumer remain deferred; existing full-job route/metadata/helpers are preserved. Phase 8 dashboard drag/resize/order/reset/cross-device persistence stays separate. |
+| Reliability incidents | RD11 preference500 root, RD12 notification SQLite locking, RD13 unconfirmed Rules500, historical focus/section-expansion/unsaved incidents and Board capacity remain tracked. Scoped feedback fixes and clean reruns are not proof these roots were repaired. |
+| Domain/provider/operation debt | Canonical Profile/job stale-save/creation-intent concurrency, F20 enabled-worker recovery, F21 calendar offset/DST/date-only, billing/deletion retention/provider cleanup/tombstone policy, real OAuth/Turnstile/mail/calendar/model and legacy cutover retain separate dependencies. No implicit backend/schema migration is performed. |
+| Production operations | [Existing release gate](../../phase-5/p5-15/p5-15-05/README.md) and [fresh boundary check](evidence/backend-production-boundary.json) retain F04 actual ingress/topology/peer identity, complete off-host backup/restore, effective configuration/schema/secrets/provider/F19 fallback, isolated Linux rollback, protected CI/deployed revision and smoke/monitoring requirements. Main push deploys and remains unauthorised. |
+
+## Phase 7 handoff and checkpoint completion
+
+[PHASE7_HANDOFF.md](PHASE7_HANDOFF.md) reconciles actual completed Phase 5 shell/Jobs/workspace/Dashboard/Analytics/CV-editor/Settings foundations before scheduling authentication/onboarding/Career/CV library/Documents/Application correspondence/notifications/remaining Settings/Admin/error/dialog migrations. It specifies migration order, owner dependencies, all 57 preservation risks, contract constraints, shared components, responsive/localisation/accessibility tests, reviewable commit boundaries and acceptance. Each slice first inventories remaining presentation; completed migrations are not repeated. P5-13, `followMode`, optional preview and operational return conditions retain explicit gates.
+
+All completed checkpoints are committed/pushed normally to development and remote=HEAD is checked immediately after each push, as recorded in [COMMITS.md](../COMMITS.md). Known completed current units: P6-00 `7da083c374abcb6b34600f3c6667830d47b14760`, P6-01 `a94ea0a4a4695d1c196366ac39793a901485e919`, P6-02 `c135d03602fd273658cfa1c087491c7442060c6a`, accessible-dialog test companion `81e30e3da9e36e4cb0271122711fddc7b28b75e3`, P6-03 `bd47214bdcd74336788dca0f294b8ddb9403cac1`, P6-04 `badfb19d907e7d17d0f253c180eceef851f465f2`; final checkpoint hash and push verification follow the owner's finalisation. App source stays at P6-03 while P6-04 records tests/evidence. No force push, main push, production deployment, Phase 7 implementation or Phase 8 customization occurs.

docs/redesign/phase-6/p6-05/evidence/backend-production-boundary.json

@@ -0,0 +1,32 @@
+{
+  "checkedUtc": "2026-10-11T00:51:39.465539+00:00",
+  "observedLocalRefs": {
+    "main": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "originMain": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
+    "head": "7da083c374abcb6b34600f3c6667830d47b14760"
+  },
+  "executionStart": "9d6d29d",
+  "phase6BackendConfigDeploymentChangedPaths": [],
+  "cvAiProductionWithholding": "Existing CvAiSuggestionService registration remains guarded outside Production; fresh focused backend tests pass; real-HTTP proof is recorded by the parent.",
+  "deploymentBoundary": "Verified workflow deploy job follows successful test and a push to refs/heads/main.",
+  "releaseDecision": "NO-GO",
+  "gateRecord": "docs/redesign/phase-5/p5-15/p5-15-05/README.md",
+  "productionBlockers": [
+    "F04 real deployed ingress/topology/identity",
+    "Current complete off-host backup and isolated restore",
+    "Actual configuration/secrets/provider/schema; F19 fallback risk",
+    "Tested rollback on isolated Linux topology",
+    "Deployed smoke/monitoring and revision evidence",
+    "Mandatory human reader/device and production font/portrait acceptance"
+  ],
+  "sourceFingerprints": {
+    "JobTrackerApi\\Program.cs": "74de01e586055e4b125a1929500bbdae54cad30a5d46e8c657217f22c2706d9b",
+    ".gitea\\workflows\\ci-deploy.yml": "6ea9d9c94fdece313d17fac87f4d9188e4214be7ae70ff4bf6ab1dfda5f6f567",
+    "docs\\redesign\\phase-5\\p5-15\\p5-15-05\\README.md": "d923a89b082e755779d2a1aad8058fee304946131e043a9a90eea7c812582047"
+  },
+  "limits": [
+    "Local fetched refs are observed; the coordinating parent records fetch/push verification.",
+    "No production host, endpoint, live config, database, backup, deployment or model was contacted by this check.",
+    "Production withholding is a candidate source/test fact and is not proof of the remote running service."
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/backend-static-checks.json

@@ -0,0 +1,122 @@
+{
+  "checkedUtc": "2026-10-11T13:39:34.190981+00:00",
+  "commands": [
+    {
+      "name": "secret-scan",
+      "command": [
+        "rtk",
+        "proxy",
+        "python",
+        "-X",
+        "utf8",
+        "scripts/supply-chain.py",
+        "scan-secrets"
+      ],
+      "startedUtc": "2026-10-11T13:39:30.750910+00:00",
+      "finishedUtc": "2026-10-11T13:39:33.529263+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-static/20261011T133930Z/secret-scan.log",
+      "logSha256": "c5a88d5ebdc042adba125c1eaacbe44f9f4a5c19898c0f195573c00d511aa28d"
+    },
+    {
+      "name": "working-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check"
+      ],
+      "startedUtc": "2026-10-11T13:39:33.529776+00:00",
+      "finishedUtc": "2026-10-11T13:39:33.615901+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-static/20261011T133930Z/working-whitespace.log",
+      "logSha256": "d2993bc68ad9a63f711c8f5473155e2ba00fdcd461220cc3849185f2f9ad93e6"
+    },
+    {
+      "name": "staged-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--cached",
+        "--check"
+      ],
+      "startedUtc": "2026-10-11T13:39:33.616399+00:00",
+      "finishedUtc": "2026-10-11T13:39:33.706512+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-static/20261011T133930Z/staged-whitespace.log",
+      "logSha256": "d2993bc68ad9a63f711c8f5473155e2ba00fdcd461220cc3849185f2f9ad93e6"
+    },
+    {
+      "name": "phase6-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check",
+        "9d6d29dba4733778e478909d4ff74a25409b3115"
+      ],
+      "startedUtc": "2026-10-11T13:39:33.707025+00:00",
+      "finishedUtc": "2026-10-11T13:39:33.835746+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-static/20261011T133930Z/phase6-whitespace.log",
+      "logSha256": "d2993bc68ad9a63f711c8f5473155e2ba00fdcd461220cc3849185f2f9ad93e6"
+    },
+    {
+      "name": "phase5-handoff-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check",
+        "9528504866054da10e20d5196e65de536c4c9499"
+      ],
+      "startedUtc": "2026-10-11T13:39:33.836245+00:00",
+      "finishedUtc": "2026-10-11T13:39:33.964078+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-static/20261011T133930Z/phase5-handoff-whitespace.log",
+      "logSha256": "d2993bc68ad9a63f711c8f5473155e2ba00fdcd461220cc3849185f2f9ad93e6"
+    }
+  ],
+  "untrackedSecretScan": {
+    "files": 0,
+    "findings": 0
+  },
+  "documentation": {
+    "checkedUtc": "2026-10-11T13:39:34.190981+00:00",
+    "status": "PASS",
+    "documents": 18,
+    "relativeLinks": 315,
+    "preservationGroups": 57,
+    "groupStatuses": {
+      "PARTIAL": 56,
+      "DEFERRED": 1
+    },
+    "originalRoutePatterns": 32,
+    "aggregateMatrixIdsAndStatuses": "MATCH",
+    "errors": [],
+    "selfOutputBootstrap": {
+      "required": false,
+      "path": "docs/redesign/phase-6/p6-05/evidence/backend-static-checks.json",
+      "policy": "Only this generated result path may be created; every link is checked again after writing. No other missing target is accepted.",
+      "postWriteVerified": true
+    }
+  },
+  "priorRunnerIncident": {
+    "log": ".artifacts/phase6/current/backend-static/phase6-whitespace.log",
+    "result": "Exit2: inherited docs/roadmap/todo.md EOF blank line across Phase5 handoff delta; retained and corrected before final checks"
+  },
+  "limits": [
+    "Repository secret scan covers configured token/private-key patterns in nonbinary files up to 2 MiB; it is not a historical Git scan or proof of production secret configuration.",
+    "Documentation links are checked for local target existence; anchor correctness and human prose acceptance require separate review.",
+    "Static checks do not provide deployed ingress/backup/rollback acceptance or human accessibility evidence."
+  ],
+  "priorDocumentationAttempt": {
+    "run": ".artifacts/phase6/current/backend-static/20261011T092451Z",
+    "result": "Strict link scan rejected README source filename ending in :73; writer corrected repository link before final verification. Secret and whitespace lanes passed in that attempt."
+  }
+}

docs/redesign/phase-6/p6-05/evidence/backend-validation.json

@@ -0,0 +1,620 @@
+{
+  "checkedUtc": "2026-10-11T00:49:36.563878+00:00",
+  "baseline": "docs/redesign/phase-5/p5-15/p5-15-06/evidence/validation.json",
+  "observedHead": "7da083c374abcb6b34600f3c6667830d47b14760",
+  "observedBranch": "codex/ui-redesign-phase4",
+  "environment": {
+    "platform": "Windows-11-10.0.26200-SP0",
+    "dotnet": "9.0.317",
+    "node": "v24.19.0",
+    "python": "3.12.10",
+    "execution": "Native Windows; serial Release builds before no-build tests; deterministic offline sidecar/helpers; xUnit collections serial; fresh synthetic TestHost databases"
+  },
+  "commands": [
+    {
+      "name": "api-release-build",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.dotnet/dotnet.exe",
+        "build",
+        "JobTrackerApi/JobTrackerApi.csproj",
+        "--configuration",
+        "Release",
+        "--no-restore",
+        "-warnaserror"
+      ],
+      "startedUtc": "2026-10-11T00:47:45.080689+00:00",
+      "finishedUtc": "2026-10-11T00:47:53.873750+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/api-release-build.log",
+      "logSha256": "b4ab5f50caf2a0c9c075aec0e62f2caad9fe26c0ca00477d82d09fee035bd205"
+    },
+    {
+      "name": "backend-test-project-release-build",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.dotnet/dotnet.exe",
+        "build",
+        "JobTrackerApi.Tests/JobTrackerApi.Tests.csproj",
+        "--configuration",
+        "Release",
+        "--no-restore",
+        "-warnaserror"
+      ],
+      "startedUtc": "2026-10-11T00:47:53.874755+00:00",
+      "finishedUtc": "2026-10-11T00:47:59.557854+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/backend-test-project-release-build.log",
+      "logSha256": "1bd8cbed374afcf1b8654018cf648b4711920fb27a27aae0fbb306ff6dc4e2fb"
+    },
+    {
+      "name": "backend-full",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.dotnet/dotnet.exe",
+        "test",
+        "JobTrackerApi.Tests/JobTrackerApi.Tests.csproj",
+        "--configuration",
+        "Release",
+        "--no-build",
+        "--logger",
+        "trx;LogFileName=backend-full.trx",
+        "--results-directory",
+        ".artifacts/phase6/current/backend-validation",
+        "--",
+        "xUnit.parallelizeTestCollections=false",
+        "xUnit.maxParallelThreads=1"
+      ],
+      "startedUtc": "2026-10-11T00:47:59.558879+00:00",
+      "finishedUtc": "2026-10-11T00:48:16.499042+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/backend-full.log",
+      "logSha256": "d2455fac74f64c79616ffc49a885abf94ae4aed13993eb8e2d82c0e22057677b",
+      "total": 1033,
+      "passed": 1033,
+      "failed": 0,
+      "notExecuted": 0,
+      "resultSha256": "f443a092a849f3786662365af0e950bea3e3fdeb54fb44bdc7356361a707ab95"
+    },
+    {
+      "name": "cv-revision",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.dotnet/dotnet.exe",
+        "test",
+        "JobTrackerApi.Tests/JobTrackerApi.Tests.csproj",
+        "--configuration",
+        "Release",
+        "--no-build",
+        "--filter",
+        "FullyQualifiedName~CvRevisionReadinessTests",
+        "--logger",
+        "trx;LogFileName=cv-revision.trx",
+        "--results-directory",
+        ".artifacts/phase6/current/backend-validation",
+        "--",
+        "xUnit.parallelizeTestCollections=false",
+        "xUnit.maxParallelThreads=1"
+      ],
+      "startedUtc": "2026-10-11T00:48:16.516404+00:00",
+      "finishedUtc": "2026-10-11T00:48:19.867452+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/cv-revision.log",
+      "logSha256": "d288b8029f30d705fa76b2735281ba9bc5e6ef3b3afd80aad835182b6ab6b8e2",
+      "total": 5,
+      "passed": 5,
+      "failed": 0,
+      "notExecuted": 0,
+      "resultSha256": "6be6b7c6116ec057be834100e840f9b05ce293cc714b238579de323d68ce292d"
+    },
+    {
+      "name": "focused-ai",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.dotnet/dotnet.exe",
+        "test",
+        "JobTrackerApi.Tests/JobTrackerApi.Tests.csproj",
+        "--configuration",
+        "Release",
+        "--no-build",
+        "--filter",
+        "FullyQualifiedName~CvAi|FullyQualifiedName~AiWorkspace|FullyQualifiedName~AiPrivacyPolicy|FullyQualifiedName~MeteredSummarizerService",
+        "--logger",
+        "trx;LogFileName=focused-ai.trx",
+        "--results-directory",
+        ".artifacts/phase6/current/backend-validation",
+        "--",
+        "xUnit.parallelizeTestCollections=false",
+        "xUnit.maxParallelThreads=1"
+      ],
+      "startedUtc": "2026-10-11T00:48:19.868456+00:00",
+      "finishedUtc": "2026-10-11T00:48:24.601218+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/focused-ai.log",
+      "logSha256": "22278b552e93c6e820c32766e1945db0c8f1ce69683b3144df4a7cc260845e99",
+      "total": 108,
+      "passed": 108,
+      "failed": 0,
+      "notExecuted": 0,
+      "resultSha256": "7ede3bb8a5da41cccce1c661706757cdfa5a25e0a7189d59c2276df8f003d62e"
+    },
+    {
+      "name": "sidecar",
+      "command": [
+        "rtk",
+        "proxy",
+        "tools/summarizer/.venv/Scripts/python.exe",
+        "-m",
+        "pytest",
+        "tools/summarizer/tests",
+        "-q",
+        "-o",
+        "cache_dir=E:/Storage/Projects/Active/Job tracker/.artifacts/phase6/current/backend-validation/helpers/pytest-cache",
+        "--basetemp=E:/Storage/Projects/Active/Job tracker/.artifacts/phase6/current/backend-validation/helpers/pytest-tmp",
+        "--junitxml=E:/Storage/Projects/Active/Job tracker/.artifacts/phase6/current/backend-validation/helpers/sidecar.xml"
+      ],
+      "startedUtc": "2026-10-11T00:48:24.604243+00:00",
+      "finishedUtc": "2026-10-11T00:48:34.251683+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/sidecar.log",
+      "logSha256": "fda904e05644ad68dd80e115c71a5b117dcebea9a4653f83710c0bcf77aa13ab",
+      "tests": 49,
+      "errors": 0,
+      "failures": 0,
+      "skipped": 0,
+      "baselineExpectedPassed": 49
+    },
+    {
+      "name": "configuration-tests",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.cache/codex-runtimes/codex-primary-runtime/dependencies/python/python.exe",
+        "-X",
+        "utf8",
+        "scripts/test-ingress.py"
+      ],
+      "startedUtc": "2026-10-11T00:48:34.253179+00:00",
+      "finishedUtc": "2026-10-11T00:48:35.281030+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/configuration-tests.log",
+      "logSha256": "8796d610fbb00e95e42a37300a72059753c0cb944bd511090e965c06b5167db4",
+      "baselineExpectedPassed": 3,
+      "total": 3,
+      "passed": 3,
+      "failed": 0
+    },
+    {
+      "name": "supply-chain-tests",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.cache/codex-runtimes/codex-primary-runtime/dependencies/python/python.exe",
+        "-X",
+        "utf8",
+        "scripts/test-supply-chain.py"
+      ],
+      "startedUtc": "2026-10-11T00:48:35.282528+00:00",
+      "finishedUtc": "2026-10-11T00:48:35.543429+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/supply-chain-tests.log",
+      "logSha256": "a3e442c48171d1f76063ba47529e1627f3d8fe35ecb2c459a87d540c2a31f5d6",
+      "baselineExpectedPassed": 3,
+      "total": 3,
+      "passed": 3,
+      "failed": 0
+    },
+    {
+      "name": "offline-evaluation-tests",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:/Users/Connor/.cache/codex-runtimes/codex-primary-runtime/dependencies/python/python.exe",
+        "-X",
+        "utf8",
+        "scripts/test-ollama-evaluation.py"
+      ],
+      "startedUtc": "2026-10-11T00:48:35.544436+00:00",
+      "finishedUtc": "2026-10-11T00:48:35.931481+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/offline-evaluation-tests.log",
+      "logSha256": "8e1e0e3a833edc690663a5069707ddfecb2d31183a45adbb0f0032a6fcbc3c10",
+      "baselineExpectedPassed": 5,
+      "total": 5,
+      "passed": 5,
+      "failed": 0
+    },
+    {
+      "name": "extension-tests",
+      "command": [
+        "rtk",
+        "proxy",
+        "node",
+        "--test",
+        "browser-extension/tests/capture-url.test.mjs"
+      ],
+      "startedUtc": "2026-10-11T00:48:35.933492+00:00",
+      "finishedUtc": "2026-10-11T00:48:36.098420+00:00",
+      "exitCode": 0,
+      "logPath": ".artifacts/phase6/current/backend-validation/extension-tests.log",
+      "logSha256": "9233596d6478f930960b988bcd4e2aa46d18c07e699c9a312a6e9136401dd132",
+      "baselineExpectedPassed": 3,
+      "tests": 3,
+      "pass": 3,
+      "fail": 0,
+      "skipped": 0,
+      "cancelled": 0,
+      "todo": 0
+    }
+  ],
+  "fullBackendClassResults": {
+    "AccountDataExportTests": {
+      "Passed": 3
+    },
+    "AccountDeletionTests": {
+      "Passed": 6
+    },
+    "AccountPlansTests": {
+      "Passed": 7
+    },
+    "AiEvaluationFixtureTests": {
+      "Passed": 1
+    },
+    "AiOperationQueueTests": {
+      "Passed": 5
+    },
+    "AiPrivacyPolicyTests": {
+      "Passed": 9
+    },
+    "AiUsageMeterTests": {
+      "Passed": 3
+    },
+    "AiWorkspaceNotePersistenceTests": {
+      "Passed": 3
+    },
+    "AiWorkspaceTests": {
+      "Passed": 9
+    },
+    "AnalyticsSalaryTests": {
+      "Passed": 1
+    },
+    "ApiAuthorizationPostureTests": {
+      "Passed": 5
+    },
+    "ApplicationAssetsTests": {
+      "Passed": 15
+    },
+    "ApplicationCalendarControllerTests": {
+      "Passed": 4
+    },
+    "ApplicationChecklistTests": {
+      "Passed": 15
+    },
+    "ApplicationIntelligenceTests": {
+      "Passed": 19
+    },
+    "ApplicationWorkspaceTests": {
+      "Passed": 10
+    },
+    "AttachmentConsistencyTests": {
+      "Passed": 14
+    },
+    "AttachmentFlagsRecomputeTests": {
+      "Passed": 3
+    },
+    "AttachmentsControllerTests": {
+      "Passed": 3
+    },
+    "AuthAndSystemControllerTests": {
+      "Passed": 38
+    },
+    "AuthSessionRevocationTests": {
+      "Passed": 8
+    },
+    "AvatarStorageTests": {
+      "Passed": 1
+    },
+    "BackgroundWorkerTenantTests": {
+      "Passed": 10
+    },
+    "BackupControllerTests": {
+      "Passed": 3
+    },
+    "BillingControllerTests": {
+      "Passed": 4
+    },
+    "BuildMetadataTests": {
+      "Passed": 8
+    },
+    "CareerEvidenceControllerTests": {
+      "Passed": 1
+    },
+    "CareerProfileControllerTests": {
+      "Passed": 6
+    },
+    "CareerProfileServiceTests": {
+      "Passed": 21
+    },
+    "ClientErrorsControllerTests": {
+      "Passed": 2
+    },
+    "CompanyRelationshipTests": {
+      "Passed": 2
+    },
+    "ConcurrentInitializationTests": {
+      "Passed": 2
+    },
+    "CorrespondenceControllerTests": {
+      "Passed": 3
+    },
+    "CsvExportTests": {
+      "Passed": 25
+    },
+    "CurrentUserIdLiveEvaluationTests": {
+      "Passed": 2
+    },
+    "CvAiEvaluationTests": {
+      "Passed": 5
+    },
+    "CvAiGroundingTests": {
+      "Passed": 45
+    },
+    "CvAiReadinessTests": {
+      "Passed": 29
+    },
+    "CvBuilderTests": {
+      "Passed": 35
+    },
+    "CvCorpusHarnessTests": {
+      "Passed": 1
+    },
+    "CvExportRetentionTests": {
+      "Passed": 1
+    },
+    "CvExtractionCoverageTests": {
+      "Passed": 15
+    },
+    "CvProcessingOperationTests": {
+      "Passed": 4
+    },
+    "CvProfileDiffServiceTests": {
+      "Passed": 11
+    },
+    "CvRevisionReadinessTests": {
+      "Passed": 5
+    },
+    "DatabaseBackupRunnerTests": {
+      "Passed": 3
+    },
+    "EmailControllerTests": {
+      "Passed": 3
+    },
+    "EmailDraftPersistenceTests": {
+      "Passed": 1
+    },
+    "EmailDraftsControllerTests": {
+      "Passed": 5
+    },
+    "EmailOwnershipIntegrationTests": {
+      "Passed": 3
+    },
+    "EmailProviderDeliveryTests": {
+      "Passed": 4
+    },
+    "EmailSendAttemptStoreTests": {
+      "Passed": 5
+    },
+    "EmailSendControllerTests": {
+      "Passed": 7
+    },
+    "EmailStatusClassifierTests": {
+      "Passed": 7
+    },
+    "ExternalOriginTests": {
+      "Passed": 14
+    },
+    "ForwardedIngressTests": {
+      "Passed": 13
+    },
+    "GmailControllerTests": {
+      "Passed": 19
+    },
+    "GoogleTokenValidatorTests": {
+      "Passed": 1
+    },
+    "HumanLanguageCatalogTests": {
+      "Passed": 20
+    },
+    "ImapControllerTests": {
+      "Passed": 9
+    },
+    "ImapProviderTests": {
+      "Passed": 5
+    },
+    "ImapServiceSsrfGuardTests": {
+      "Passed": 7
+    },
+    "InterviewAiContextTests": {
+      "Passed": 8
+    },
+    "InterviewPrepPersistenceTests": {
+      "Passed": 3
+    },
+    "InterviewPrepTests": {
+      "Passed": 11
+    },
+    "JobApplicationsApplicationPackageTests": {
+      "Passed": 11
+    },
+    "JobApplicationsAppliedDateHistoryTests": {
+      "Passed": 4
+    },
+    "JobApplicationsAuthorizationTests": {
+      "Passed": 4
+    },
+    "JobApplicationsControllerTests": {
+      "Passed": 2
+    },
+    "JobApplicationsEndpointBehaviorTests": {
+      "Passed": 9
+    },
+    "JobApplicationsFollowUpDraftTests": {
+      "Passed": 2
+    },
+    "JobApplicationsMariaDraftTests": {
+      "Passed": 1
+    },
+    "JobApplicationsWorkflowSignalsTests": {
+      "Passed": 2
+    },
+    "JobCvMatchServiceTests": {
+      "Passed": 16
+    },
+    "JobDiscoveryControllerTests": {
+      "Passed": 3
+    },
+    "JobImportHttpTransportTests": {
+      "Passed": 76
+    },
+    "JobImportServiceTests": {
+      "Passed": 16
+    },
+    "JobLifecycleEventTests": {
+      "Passed": 9
+    },
+    "JobOpportunitySyncTests": {
+      "Passed": 1
+    },
+    "JobPipelineTests": {
+      "Passed": 46
+    },
+    "JobQueryParityTests": {
+      "Passed": 16
+    },
+    "LocalAuthIdentityTests": {
+      "Passed": 3
+    },
+    "MaintenanceJobDispatcherTests": {
+      "Passed": 3
+    },
+    "MeteredSummarizerServiceTests": {
+      "Passed": 8
+    },
+    "MicrosoftGraphControllerTests": {
+      "Passed": 7
+    },
+    "MicrosoftGraphProviderTests": {
+      "Passed": 6
+    },
+    "MicrosoftTokenValidatorTests": {
+      "Passed": 17
+    },
+    "MigrationChainTests": {
+      "Passed": 18
+    },
+    "NotificationSettingsControllerTests": {
+      "Passed": 3
+    },
+    "OperationsControllerTests": {
+      "Passed": 3
+    },
+    "OwnershipGuardTests": {
+      "Passed": 3
+    },
+    "PdfRenderAdmissionTests": {
+      "Passed": 22
+    },
+    "ProEntitlementAuthorizationTests": {
+      "Passed": 23
+    },
+    "ProductionConfigTests": {
+      "Passed": 3
+    },
+    "ProfileCvControllerTests": {
+      "Passed": 32
+    },
+    "PublicCvControllerTests": {
+      "Passed": 3
+    },
+    "RateLimitPartitionKeysTests": {
+      "Passed": 3
+    },
+    "RouteUniquenessTests": {
+      "Passed": 1
+    },
+    "RulesEngineProspectTests": {
+      "Passed": 5
+    },
+    "SavedJobSearchAlertTests": {
+      "Passed": 1
+    },
+    "SavedJobSearchSqliteTests": {
+      "Passed": 10
+    },
+    "SessionContextMiddlewareTests": {
+      "Passed": 13
+    },
+    "SessionsControllerTests": {
+      "Passed": 8
+    },
+    "SqliteDateTimeOffsetCompatibilityTests": {
+      "Passed": 5
+    },
+    "SqliteMigrationHelperTests": {
+      "Passed": 1
+    },
+    "StageAnalyticsTests": {
+      "Passed": 4
+    },
+    "StartupSchemaOwnershipTests": {
+      "Passed": 2
+    },
+    "StrategySnapshotOperationTests": {
+      "Passed": 4
+    },
+    "SubmittedApplicationPackageTests": {
+      "Passed": 4
+    },
+    "SummarizerServiceTests": {
+      "Passed": 4
+    },
+    "TwoFactorControllerTests": {
+      "Passed": 9
+    },
+    "UserOperationStoreTests": {
+      "Passed": 10
+    },
+    "UsersControllerTests": {
+      "Passed": 7
+    }
+  },
+  "sourceFingerprint": {
+    "files": 440,
+    "sha256": "91800d847398484a8de4f379edac4d8f56995e49043643fd1e0a382cc937ccf8"
+  },
+  "countReconciliation": {
+    "backend": "1033 -> 1033; no backend application/test changes",
+    "ai": "108 -> 108; subset of backend full, not additive",
+    "revisions": "5 -> 5; subset of backend full, not additive",
+    "sidecar": "49 -> 49",
+    "configuration": "3 -> 3",
+    "supplyChain": "3 -> 3",
+    "offlineEvaluation": "5 -> 5; parser/scoring helper tests, not configured-model qualification",
+    "extension": "3 -> 3"
+  },
+  "preservationScope": [
+    "PRES-E01/E02/E03/E04/E05/E06/E09 retained auth/account/role middleware",
+    "PRES-C01-C12 authoritative profile/CV/AI/export/revision ownership and proposal safeguards; C11 deferred capability remains unaccepted",
+    "PRES-J/W/S groups only for covered backend methods, not whole-group acceptance"
+  ],
+  "limits": [
+    "Backend and helper tests do not replace representative native browser journeys, human screen-reader evaluation, physical devices, production font/photo qualification or deployed infrastructure evidence.",
+    "No model qualification, new AI review UI, production migration, deployment or external provider calls were run.",
+    "Native real-HTTP, rate limits, ingress, PDF admission, browser fidelity and settings export lanes are owned by the coordinating parent agent and are not claimed in this manifest."
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/diagnostics-results.json

@@ -0,0 +1,75 @@
+{
+  "command": {
+    "name": "diagnostics",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "--config=../docs/redesign/phase-5/p5-15/p5-15-01/diagnostics/playwright.config.ts",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\diagnostics-results"
+    ],
+    "startedUtc": "2026-10-11T09:19:41.085602+00:00",
+    "finishedUtc": "2026-10-11T09:20:21.188783+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T09:19:41.608Z",
+      "duration": 39549.564,
+      "expected": 3,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "bf081ca168e7638180a4c00fdc7098eff73a570c5048d1c26228b031fb085127",
+  "logSha256": "bfee9b0eb6c54e58bc594e2d542e613d18b0e775cf5fa99f6531dd02f6dbb5ba",
+  "stats": {
+    "startTime": "2026-10-11T09:19:41.608Z",
+    "duration": 39549.564,
+    "expected": 3,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "[P5-15-01 diagnostic] an unsaved Rules draft survives switching to Notifications and back",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 1829
+        }
+      ]
+    },
+    {
+      "title": "[P5-15-01 diagnostic] native language and notification saves persist during concurrent report reads",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 9554
+        }
+      ]
+    },
+    {
+      "title": "[P5-15-04 PRES-J07 J05] native full-result Board retains membership at 200 and 1000 owned jobs",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 20903
+        }
+      ]
+    }
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/http-results.json

@@ -0,0 +1,63 @@
+{
+  "command": {
+    "name": "http",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "--config=playwright.cv-ai.config.ts",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\http-results"
+    ],
+    "startedUtc": "2026-10-11T09:19:00.575883+00:00",
+    "finishedUtc": "2026-10-11T09:19:14.671440+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T09:19:01.135Z",
+      "duration": 13502.293,
+      "expected": 2,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "4b5c793a5d13d4572d98253e53b7475c5d4e42431f1ba088c1964335903ade38",
+  "logSha256": "e2648b7f4c88bc88322b3e2d593c8ac78924c637ef6680a6c1bd6706bd393622",
+  "stats": {
+    "startTime": "2026-10-11T09:19:01.135Z",
+    "duration": 13502.293,
+    "expected": 2,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "bound CV proposals use real owned saves and reject fabricated or stale output without source/history mutation",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 1602
+        }
+      ]
+    },
+    {
+      "title": "Production withholds CV review before provider calls or content writes while existing AI remains available",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 779
+        }
+      ]
+    }
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/ingress-results.json

@@ -0,0 +1,111 @@
+{
+  "command": {
+    "name": "ingress",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "--config=playwright.ingress.config.ts",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\ingress-results"
+    ],
+    "startedUtc": "2026-10-11T09:19:25.696411+00:00",
+    "finishedUtc": "2026-10-11T09:19:32.673527+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T09:19:26.256Z",
+      "duration": 6375.89,
+      "expected": 6,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "7cd85a5aad945f8dc0cea5cd42cd90ed4bc72d83be9b32835e64b93e8196216b",
+  "logSha256": "b1ac46bc04db2b242314a0a8a6457383c0b7349cfc48e04ac42da4fe8c401b34",
+  "stats": {
+    "startTime": "2026-10-11T09:19:26.256Z",
+    "duration": 6375.89,
+    "expected": 6,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "unsafe production CORS overrides fail before the API starts listening",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 328
+        }
+      ]
+    },
+    {
+      "title": "production CORS defaults to the canonical origin, never localhost or arbitrary origins",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 58
+        }
+      ]
+    },
+    {
+      "title": "forwarded host cannot replace Host and internal liveness does not expose other routes",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 20
+        }
+      ]
+    },
+    {
+      "title": "forged forwarding scheme cannot downgrade canonical HTTPS cookie security",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 25
+        }
+      ]
+    },
+    {
+      "title": "untrusted direct source cannot reset its IP allowance using IP, scheme or host forwarding",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 77
+        }
+      ]
+    },
+    {
+      "title": "trusted proxy gives two real clients independent IP allowances and ignores leftmost extra hops",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 46
+        }
+      ]
+    }
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/label-results.json

@@ -0,0 +1,65 @@
+{
+  "command": {
+    "name": "label",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "e2e/responsive-accessibility-audit.spec.ts",
+      "--grep",
+      "Career selector floating label",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\label-results"
+    ],
+    "startedUtc": "2026-10-11T08:44:29.971158+00:00",
+    "finishedUtc": "2026-10-11T08:45:09.907678+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T08:44:30.468Z",
+      "duration": 39406.638,
+      "expected": 2,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "81b73323d902b63812d36228deae29a559767f209ce4a0f4885632d6e644b84a",
+  "logSha256": "54e17aba61643bc105390f57a2edf838360643a8d9e24578f06c5bac884b04af",
+  "stats": {
+    "startTime": "2026-10-11T08:44:30.468Z",
+    "duration": 39406.638,
+    "expected": 2,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "[P6-03] nb/dark Career selector floating label is not clipped at 320px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 16630
+        }
+      ]
+    },
+    {
+      "title": "[P6-03] en/light Career selector floating label is not clipped at 390px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 15675
+        }
+      ]
+    }
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/pdf-admission-results.json

@@ -0,0 +1,51 @@
+{
+  "command": {
+    "name": "pdf-admission",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "--config=playwright.pdf.config.ts",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\pdf-admission-results"
+    ],
+    "startedUtc": "2026-10-11T09:19:32.675065+00:00",
+    "finishedUtc": "2026-10-11T09:19:41.083620+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T09:19:33.284Z",
+      "duration": 7762.471,
+      "expected": 1,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "4213547d2e2e4475ed96adc152dde6053560234ac83c6d240b179e4bbc19723c",
+  "logSha256": "3cda9a59df2565065067d8f19478a34d99d499af6d8912d1e4c9cb13714e6a32",
+  "stats": {
+    "startTime": "2026-10-11T09:19:33.284Z",
+    "duration": 7762.471,
+    "expected": 1,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "authenticated bursts across variant, job and public routes share actual render capacity and recover",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 1942
+        }
+      ]
+    }
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/rate-limit-results.json

@@ -0,0 +1,147 @@
+{
+  "command": {
+    "name": "rate-limit",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "--config=playwright.rate-limits.config.ts",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\rate-limit-results"
+    ],
+    "startedUtc": "2026-10-11T09:19:14.672954+00:00",
+    "finishedUtc": "2026-10-11T09:19:25.695402+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T09:19:15.209Z",
+      "duration": 10454.819,
+      "expected": 9,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "61b4a4451b88868dc278a3fead4c276e5fdcf3baf8a0125206458e25ec2c1c20",
+  "logSha256": "8577cd3c476d8bfe6f69dc2a068ad13e4c494e4588f34266def39034f5ccac08",
+  "stats": {
+    "startTime": "2026-10-11T09:19:15.209Z",
+    "duration": 10454.819,
+    "expected": 9,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "A exhausting account exports does not throttle the other account on the same IP",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 1131
+        }
+      ]
+    },
+    {
+      "title": "B exhausting account exports does not throttle the other account on the same IP",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 477
+        }
+      ]
+    },
+    {
+      "title": "concurrent accounts share an IP while sessions, bearer/cookie and changed IPs share each owner's allowance",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 540
+        }
+      ]
+    },
+    {
+      "title": "crafted body/query/headers and B02 context cannot select the email-send owner",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 461
+        }
+      ]
+    },
+    {
+      "title": "export and disabled deletion consume the same account-data policy without affecting another account",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 458
+        }
+      ]
+    },
+    {
+      "title": "invalid credentials are rejected before account partitioning and cannot select anonymous login partitions",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 665
+        }
+      ]
+    },
+    {
+      "title": "login/security policies remain IP based for authenticated and anonymous requests",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 465
+        }
+      ]
+    },
+    {
+      "title": "public PDF remains IP plus slug scoped even after authentication",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 361
+        }
+      ]
+    },
+    {
+      "title": "untrusted direct peers cannot evade IP limits with forged forwarding headers",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 20
+        }
+      ]
+    }
+  ]
+}

docs/redesign/phase-6/p6-05/evidence/semantics-results.json

@@ -0,0 +1,113 @@
+{
+  "command": {
+    "name": "semantics",
+    "command": [
+      "rtk",
+      "proxy",
+      "node",
+      "node_modules/@playwright/test/cli.js",
+      "test",
+      "e2e/responsive-accessibility-audit.spec.ts",
+      "--grep",
+      "P6-03",
+      "--retries=0",
+      "--reporter=list,json",
+      "--output=E:\\Storage\\Projects\\Active\\Job tracker\\.artifacts\\phase6\\current\\ui\\semantics-results"
+    ],
+    "startedUtc": "2026-10-11T08:45:09.916201+00:00",
+    "finishedUtc": "2026-10-11T08:46:49.640163+00:00",
+    "exitCode": 0,
+    "stats": {
+      "startTime": "2026-10-11T08:45:10.463Z",
+      "duration": 99144.70899999999,
+      "expected": 6,
+      "skipped": 0,
+      "unexpected": 0,
+      "flaky": 0
+    }
+  },
+  "reportSha256": "a4680baad17b0c31eeb3c68a54bc8c300895b412239749b17f08d0a888fc4171",
+  "logSha256": "fa961d9d2c01fb10770f4b1e431fef9abc13ea94d7a76567c1766aeec67573a6",
+  "stats": {
+    "startTime": "2026-10-11T08:45:10.463Z",
+    "duration": 99144.70899999999,
+    "expected": 6,
+    "skipped": 0,
+    "unexpected": 0,
+    "flaky": 0
+  },
+  "cases": [
+    {
+      "title": "[P6-03] en/light Settings panel relationships and reflow at 1920px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 16005
+        }
+      ]
+    },
+    {
+      "title": "[P6-03] nb/dark Settings panel relationships and reflow at 360px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 14926
+        }
+      ]
+    },
+    {
+      "title": "[P6-03] en/dark Settings panel relationships and reflow at 1280px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 15138
+        }
+      ]
+    },
+    {
+      "title": "[P6-03] nb/light Settings panel relationships and reflow at 390px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 14878
+        }
+      ]
+    },
+    {
+      "title": "[P6-03] nb/dark Career selector floating label is not clipped at 320px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 15589
+        }
+      ]
+    },
+    {
+      "title": "[P6-03] en/light Career selector floating label is not clipped at 390px",
+      "expectedStatus": "passed",
+      "status": "expected",
+      "results": [
+        {
+          "status": "passed",
+          "retry": 0,
+          "durationMs": 15578
+        }
+      ]
+    }
+  ]
+}

docs/roadmap/todo.md

@@ -1,6 +1,6 @@
 # TODO
 
-Status reconciled: 2026-10-09.
+Phase 6 status reconciled: 2026-10-11. Earlier checkpoint records below retain their original scope and qualifications.
 
 ## Current repository work
 
@@ -47,7 +47,7 @@ Status reconciled: 2026-10-09.
 - **Phase 5 plan:** [bounded plan](../redesign/phase-5/README.md) maps all 57 contracts/31 routes. Board integration, native package and CV revision/rendering gates apply only to dependent slices. F04 remains open.
 - **P2-D01 — successor native proof:** [P5-08b readiness](../redesign/phase-5/p5-08b-readiness/README.md) repairs SQLite ordering and executes successful capture plus immutable-content/file/ZIP assertions. Its final baseline records conversion of the original expected failure into an ordinary regression. Historical reproduction remains in Phase 2. P2-O01's initial rules-500 behavior remains unconfirmed.
 - **P3-O01/P3-O02 — scoped follow-up:** P5-06/P5-07 address Dashboard/Analytics population/period/sample presentation and independent error retention. Backend metric definitions and other navigation/query surfaces remain separately scoped. Evidence is in the current [redesign decision records](../redesign/phase-3/OPEN_DECISIONS.md).
-- **P4-02-D02 — open accessibility debt:** company save-error feedback outside the modal's accessible subtree. D01 command-list semantics are addressed in P5-00; D03 progress-scroll access closes for the targeted P5-08a strip; D04's literal AI context was corrected in [P5-08b readiness](../redesign/phase-5/p5-08b-readiness/README.md) and remains regression protected. [Original evidence](../redesign/phase-4/p4-02/README.md). Do not disable modal background isolation or hide findings.
+- **P4-02-D02 — bounded closure in P6-02:** company save-error feedback now remains inside the active dialog, with draft retained and deliberate Save retry. Native EN/NB persistence/readback and four modal theme/locale cases pass; [current proof](../redesign/phase-6/p6-02/README.md) retains the original failure and strengthened accessible-dialog assertions. D01 command-list semantics are addressed in P5-00; D03 progress-scroll access closes for the targeted P5-08a strip; D04's literal AI context was corrected in [P5-08b readiness](../redesign/phase-5/p5-08b-readiness/README.md) and remains regression protected. [Original evidence](../redesign/phase-4/p4-02/README.md). Modal background isolation remains intact; human acceptance is still conditional.
 - **P5-08a-O01/O03 — scoped successors:** the readiness checkpoint protects existing next-task aliases and unique labelled content; [P5-08b](../redesign/phase-5/p5-08b/README.md) revalidates the seven-section adapter/composition. **O02** retains two failed menu-contrast runs and the explicitly justified settled-state fixture wait; no Dashboard styling change or broader manual certification. [Record](../redesign/phase-5/p5-08a/README.md).
 - **P5-00 scoped closures:** P4-03-D01 Tooltip contrast, P4-04-O01 bottom-action toast overlap, P4-06-O01 mobile labels/focus and P4-06-O02 synthetic long admin metadata are addressed with [readiness evidence](../redesign/phase-5/p5-00/README.md). This does not certify all overlays, all accessibility targets or deployed production behavior.
 - **P4-04-O02 — existing SQLite notification-save contention:** overlapping native preference read/write requests reproduced HTTP 500 with SQLite error 5 in two of ten local runs. The sequential UI test now awaits and requires the save response before readback; server concurrency remains unresolved. Investigate separately from page-layout/density work. [Evidence](../redesign/phase-4/p4-04/README.md).
@@ -74,6 +74,6 @@ Completed phase items are intentionally omitted here; their evidence remains in
 - [x] P6-00 baseline/design audit, pushed `7da083c`.
 - [x] P6-01 shared corrections, pushed `a94ea0a`.
 - [x] P6-02 workflow/save/retry/localisation review, pushed `c135d03`.
-- [x] P6-03 bounded responsive/accessibility/localisation review and mobile Career label correction; native2/2 label and6/6 panel/label cases pass. Manual reader/device requirements remain open; push receipt follows in [Phase 6](../redesign/phase-6/COMMITS.md).
-- [x] P6-04 performance/reuse baseline; standalone native1/1 and actual-provider fetch regression pass. O(N) Board capacity remains qualified; push receipt follows in [Phase 6](../redesign/phase-6/COMMITS.md).
-- [ ] P6-05 integrated acceptance/handoff. Track completed evidence and push hashes in [Phase 6](../redesign/phase-6/README.md). No Phase 7 implementation or production deployment.
+- [x] P6-03 bounded responsive/accessibility/localisation review and mobile Career label correction; native2/2 label and6/6 panel/label cases pass. Pushed `bd47214`, live remote=HEAD. Manual reader/device requirements remain open.
+- [x] P6-04 performance/reuse baseline; standalone native1/1 and actual-provider fetch regression pass. Pushed `badfb19`, live remote=HEAD. O(N) Board capacity remains qualified.
+- [x] P6-05 integrated acceptance/handoff: fresh backend1,033/frontend521/browser159/sidecar49 and separate native/fidelity lanes pass;57 groups and32 routes reconcile. Phase6 CONDITIONAL GO; production NO-GO; Phase7 CONDITIONAL GO. [Final report](../redesign/phase-6/p6-05/README.md) retains mandatory manual/provider/device/production conditions; final commit/push receipt follows in the ledger. No Phase7 implementation or production deployment.