docs(phase10): record independent frozen-source review

2026-11-10 22:43:02 +01:00
parent 4beedad4c2
commit 56a4cee76d
3 changed files with 11 additions and 2 deletions
@@ -11,7 +11,7 @@
 - A3 PERF page correspondence `bca750446f1069eb55d648be838be192d70c2d30` published and read back. 36 selected tests passed. Captured SQLite SQL returned 250→15 and 2,500→15 groups on a 15-item page. MariaDB execution and latency remain open.
 - A3 Companies integration `6bfdbd9db72e06f18f8aa9aaf57b025bff55ce5b` published and read back. Input and output hook/test files matched the isolated patch's parent and result respectively. 37 selected integration-branch tests, type-check and scoped lint passed.
 - Isolated frontend PERF-09/15 `85ebbd9f65cba700ecbeae26126a137caa0e7f08` published and read back on `codex/perf-jobtable-chunk`. Landing and Login each load 241,317 fewer raw JS bytes across the cold fixture runs. Jobs loads 29,311 more bytes. 74 tests, type-check, scoped lint, export and auth/keyboard checks passed. Next review A3 compatibility and compare on throttled/mobile conditions before integration.
- The independent Phase 10 reviewer reached the agent usage limit before returning a result. Phase 10 acceptance is still open. Existing full local results and the frozen source remain available.
+- An independent Phase 10 reviewer verified the frozen CLEAN-20 delta, 34 routes, 57 preservation groups, and native test and evidence integrity. The reviewer reached a usage limit before completing the provider, sidecar and output applicability review. [P10-05](../redesign/phase-10/P10-05.md) records the verified scope. Final acceptance remains open.

 ## Roadmap TODO and audit search

@@ -8,7 +8,7 @@ Updated 10 November 2026. This is the cross-phase work list. The source prompts,
 - [x] **P10-01** Remove the approved unimported `App.css` under CLEAN-20 and publish its targeted verification. Any additional removal needs its own evidence and approval.
 - [x] **P10-02/03** Review compatibility and backend/configuration retention. Keep legacy/frozen documents, import/export, renderers, old links, migrations and SQLite where still required.
 - [ ] **P10-04** Finish applicable data and document integrity, historical CV/letter revision compatibility, MariaDB and migration/recovery evidence. **Partial**. Keep SQLite retirement separate.
- [ ] **P10-05** Independently reconcile 34 routes and 57 preservation groups, browser and browser contracts, EN/NB, accessibility, sidecar, security, accepted PDF evidence and applicable environments. Local full regression passed 1,448 backend and 1,031 frontend cases. Reuse valid evidence from unchanged sources.
+- [ ] **P10-05** Independent source/evidence review matched 34 routes, 57 preservation groups, and native receipts for 1,448 backend and 1,031 frontend cases. Complete browser contract, human/device, sidecar/security and environment applicability and qualification. Reuse accepted PDF evidence for unchanged inputs.
 - [ ] Record Phase 10, redesign development and Product Review readiness decisions with the post-redesign handoff. Track production separately. See [P10-05](../redesign/phase-10/P10-05.md).

 ## PRODUCT-REVIEW-01 · Independent product review
@@ -41,3 +41,12 @@ Fresh integrity check at continuation from 2a4acc17: all 263 indexed TEST_EVIDEN
 - Production release: NO-GO. No merge or deployment authorised.

 Next: reconcile complete accepted suite evidence and remaining preservation-group qualifications, complete independent audit coverage, and record genuine reviewer/owner decisions. Keep active-host, provider, model, migration and paid-scan gates distinct from ordinary source review. Do not rerun thousands of unchanged tests solely as a restart demonstration. If a relevant implementation changes, refresh its affected checks and final integrated qualification accordingly.
+## 10 November independent frozen-source review
+
+An independent read-only reviewer inspected the published checkpoint `4beedad4c2c0a11f93313dbdb7024bdf122410db`. It matched the remote. Both the accepted handoff comparison and the CLEAN-20 commit comparison showed the sole product change was deletion of `job-tracker-ui/src/App.css`, blob `74b5e053450a48a6bdb4d71aad648e7af821975c`. The reviewer found the distinctive selectors only in that file in the parent tree. A fresh Git comparison also found no product changes since the full-regression source `39aac4f4`.
+
+- Verified 263 indexed evidence artifact hashes and 34 indexed reports. Matched 1,279 raw source hashes with the approved file as the sole missing path.
+- Matched the preserved capability register and verified 57 unique groups, with 56 PARTIAL and PRES-C11 DEFERRED. Parsed the TSX route registrations and matched all 34 routes.
+- Independently decoded and hashed the native receipts for 1,448 backend and 1,031 frontend passes, with zero failures or skips. The 103 selected backend and 92 selected frontend cases overlap those totals. Verified the raw and compressed CLEAN-20 browser receipt and all five passing cases. These were evidence checks.
+
+The reviewer reached a usage limit before completing the provider, sidecar and output applicability review. Full Phase 10 acceptance remains OPEN. Carry forward the broader browser and human/device qualification, isolated MariaDB/recovery, scoped sidecar/security and applicable hosted evidence. No unchanged suite was rerun for this review.