docs(ai): record strategy queue evidence

2026-08-09 13:24:26 +02:00
parent a62122640c
commit 89b9cdd92d
10 changed files with 125 additions and 38 deletions
@@ -474,3 +474,14 @@ Status: Implemented; browser/model/provider/production verification incomplete (
 - **Checks that remain:** real AI-003/004 handlers/producers; selected-model benchmark; browser disclosure; MariaDB; controlled synthetic external fallback; production health/restart/canary/rollback.
 - **Blockers and limitations:** no browser, production access, model benchmark or provider authority/configuration; no real/private input used.
 - **Next phase:** AI-003 Strategy Snapshot durable-operation migration.
+
+## Post-audit programme execution — AI-003
+
+Status: Implemented; browser/model/MariaDB/restart/production verification incomplete (2026-08-09).
+
+- **Work completed:** replaced synchronous Focus Plan generation with a typed `strategy.snapshot` producer/handler on the shared durable queue; GET is cache-only; added owner-scoped rehydration, one bounded structured model request, full-response validation, idempotent active work, resume lookup, provenance and explicit UI queue/cancel/retry/failure/completion states.
+- **Commands/evidence:** verification-log V-101–V-103; `docs/verification/ai-003-strategy-snapshot-queue.md`; `docs/audits/evidence/ai-003/README.md`; commit `a621226`.
+- **Findings:** root code path was four sequential model calls in an HTTP GET, sometimes alongside candidate fit. Authorization/tenant filters existed. No schema/dependency change was needed. Strategy remains local-only and the worker remains default-off.
+- **Checks that remain:** real browser responsive/theme/keyboard/refresh checks; selected-model timeout/quality; MariaDB; real restart recovery; production telemetry/canary/rollback; cross-feature usage accounting.
+- **Blockers and limitations:** browser policy, production access and model/MariaDB environments unavailable; fake model/synthetic data only.
+- **Next phase:** AI-004 CV-processing 504 durable-operation migration.
@@ -0,0 +1,9 @@
+# AI-003 evidence index
+
+Synthetic/local evidence only; no secrets, private CVs, provider payloads or screenshots are stored here.
+
+- Implementation and limitations: `docs/verification/ai-003-strategy-snapshot-queue.md`
+- Commands/results: `docs/audits/verification-log.md` V-101–V-103
+- Backend automated coverage: `JobTrackerApi.Tests/StrategySnapshotOperationTests.cs`
+- Frontend automated coverage: `job-tracker-ui/src/job-details-generated-drafts.test.tsx`
+- Implementation commit: `a621226`
@@ -127,3 +127,11 @@ Output was reduced to filenames and commit counts. The token artifact appears un
 - No repository lint script or ESLint configuration is present.
 - `gitleaks`, `trivy`, and `hadolint` are not installed; equivalent bounded checks were performed as described above, but no container CVE scan was available.
 - Dependency audit results are advisory matches, not proof that every advisory is reachable or exploitable.
+
+## Continued verification commands
+
+| ID | Exact command | Directory | Purpose | Result | Relevant errors or warnings | Failure classification |
+|---|---|---|---|---|---|---|
+| V-101 | Bounded `rg`/`Get-Content` trace of Strategy button, Focus Plan tab/cache, controller/model calls, owner filters, proxy/queue/routing configuration and tests | Repository root | Revalidate AI-003 complete execution path before design | PASS — one UI action could start candidate fit plus four sequential synchronous focus-plan model calls; Pro and owner filters existed, durable state did not | Live timeout reproduction blocked; this is code-path evidence | Application-related |
+| V-102 | `dotnet test ... --filter "...StrategySnapshotOperationTests|...AiWorkspaceNotePersistenceTests|...AiOperationQueueTests|...ProEntitlementAuthorizationTests"`; `npm.cmd test -- job-details-generated-drafts.test.tsx --runInBand --forceExit` | Repository root / `job-tracker-ui` | Focused 202/handler/cache/tenant/provider-shape and queued/cancel/fail/retry UI checks | PASS — backend 34/34; frontend 6/6 | Fake model only; Jest reports the existing force-exit/open-handle notice | N/A |
+| V-103 | Full `dotnet test ... --no-restore`; full `npm.cmd test -- --runInBand --forceExit`; `npm.cmd run build`; `git diff --check` | Repository root / `job-tracker-ui` | AI-003 regression, TypeScript production build and patch hygiene | PASS — backend 592/592; frontend 47/47 suites, 160/160; build; no whitespace errors | Initial sandboxed build attempted blocked NuGet restore; previously approved build path restored from existing cache and passed. Line-ending notices only | Environmental command path corrected |