feat(onboarding): migrate source-backed setup guidance
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
# P7-01 — Authentication and account-security presentation
|
||||
|
||||
**Status: implemented P7-01 scope CONDITIONAL GO; public slice pushed, account final hygiene/push receipt pending.** This is the bounded execution/acceptance plan from the [approved handoff](../../phase-6/p6-05/PHASE7_HANDOFF.md). P7-00 `27c54146ad6f9059295d169b533db7b1b6689210` is pushed and direct development/localHEAD/origin equality verified at2026-10-11 14:44:45UTC; main unchanged and worktree clean at entry. Its [baseline](../p7-00/evidence/baseline.json) and [ledger](../COMMITS.md) satisfy entry. No new routes, identity/provider protocols or capability activation are included. Public8ad720da5db5999ecda787575dc45621d18a5498 is normally pushed; localHEAD=origin=live development directly verified2026-10-11 18:50:24UTC, local/origin/live main27657f3 unchanged. No completed public work remains uncommitted. The separate account implementation/runtime/visual outcome is CONDITIONAL GO below; final finite hygiene and normal account push/receipt remain pending. The public sub-slice alone does not complete P7-01.
|
||||
**Status: implemented P7-01 scope CONDITIONAL GO; public8ad720d and accountad7b419 normally pushed, final static PASS and actual direct receipts recorded.** This is the bounded execution/acceptance plan from the [approved handoff](../../phase-6/p6-05/PHASE7_HANDOFF.md). P7-00 `27c54146ad6f9059295d169b533db7b1b6689210` is pushed and direct development/localHEAD/origin equality verified at2026-10-11 14:44:45UTC; main unchanged and worktree clean at entry. Its [baseline](../p7-00/evidence/baseline.json) and [ledger](../COMMITS.md) satisfy entry. No new routes, identity/provider protocols or capability activation are included. Public8ad720da5db5999ecda787575dc45621d18a5498 is normally pushed; localHEAD=origin=live development directly verified2026-10-11 18:50:24UTC, local/origin/live main27657f3 unchanged. No completed public work remains uncommitted. The separate account implementation/runtime/visual outcome is CONDITIONAL GO below; final staged finite hygiene passed and normal account pushad7b419 has actual direct receipt2026-10-11 19:16:15UTC. The public sub-slice alone does not complete P7-01.
|
||||
|
||||
## Baseline and bounded commit scope
|
||||
|
||||
@@ -93,7 +93,7 @@ At the public gate, five account-presentation RED cases and12 real-provider case
|
||||
|
||||
## Account identity and security implementation
|
||||
|
||||
**Implemented account scope: CONDITIONAL GO after fresh runtime and actual final visual/context review; final finite hygiene/push receipt pending.** The [account manifest](evidence/account-results.json) records the actual fresh runtime results below, exact seven-file source/export identity, all native attachment bodies and geometry, intermediate failures and case-name deltas. Its public entry reference preserves the already pushed public slice. The whole final UI runtime tree including attempts, focused unit records, BUILD_ID, runner/browser config, inherited frontend baseline, seven source snapshots and exact export are frozen under `.artifacts/phase7/p7-01/account-final/`. All206 recorded path/hash references were verified; only file references were rebased, preserving raw bytes, hashes, commands and original report execution paths. Source identity retains original logical source paths with separate immutable snapshots. Do not recollect this slice after subsequent builds. No backend source, authentication protocol, schema, provider capability or external service was changed.
|
||||
**Implemented account scope: CONDITIONAL GO after fresh runtime and actual final visual/context review; final staged finite hygiene passed; accountad7b419 normally pushed with actual direct receipt19:16:15UTC.** The [account manifest](evidence/account-results.json) records the actual fresh runtime results below, exact seven-file source/export identity, all native attachment bodies and geometry, intermediate failures and case-name deltas. Its public entry reference preserves the already pushed public slice. The whole final UI runtime tree including attempts, focused unit records, BUILD_ID, runner/browser config, inherited frontend baseline, seven source snapshots and exact export are frozen under `.artifacts/phase7/p7-01/account-final/`. All206 recorded path/hash references were verified; only file references were rebased, preserving raw bytes, hashes, commands and original report execution paths. Source identity retains original logical source paths with separate immutable snapshots. Do not recollect this slice after subsequent builds. No backend source, authentication protocol, schema, provider capability or external service was changed.
|
||||
|
||||
AuthStatus, 2FA, Sessions and the two real account-provider consumers use the existing themed PageSection with named H2 sections. The shell owns H1; Profile's existing identity/account/password sections keep their save boundaries. Signed-in wording and security/provider dates follow the selected EN/NB locale. Long identity/session metadata wraps within the existing responsive layout.
|
||||
|
||||
@@ -131,6 +131,6 @@ The first native account attempt passed1/6. Four cases assumed Profile PUT retur
|
||||
|
||||
The provider RED8 pass/4 fail, original card RED0/5, strengthened card RED1/7, focused GREEN sets and copy RED33/36 are retained with their exact counts. Earlier full571/89 and passing account/public/boundary native runs precede the copy repair and remain historical, not final acceptance. The fresh full573 run has no pending/skipped/expected-failure masking. Whole previous runtime folders are retained by the runner; raw reports still contain their original execution paths.
|
||||
|
||||
All57 groups remain56 PARTIAL + C11 DEFERRED, all32 routes retained with existing qualifications. This slice adds finite E02–E06/E08/E09 and C01/C07/S03 evidence; it does not upgrade whole groups. Human reader/zoom/physical and software-keyboard, real OAuth/Turnstile/authenticator/device and production delivery gates remain open. Existing server-authored English errors in NB remain an explicit localisation qualification. M01–M12 and inherited debt carry forward; M13/P5-13 stays deferred do-not-execute, Phase8 stays separate, production NO-GO and main unchanged. Implemented account and whole-P7-01 scope are CONDITIONAL GO with these explicit qualifications. Final finite hygiene and normal account commit/push receipt remain pending; no account push is inferred from runtime or visual review. The latest account static record uses [static-checks.json](evidence/static-checks.json); its final metadata will be mirrored after the parent's staged checks.
|
||||
All57 groups remain56 PARTIAL + C11 DEFERRED, all32 routes retained with existing qualifications. This slice adds finite E02–E06/E08/E09 and C01/C07/S03 evidence; it does not upgrade whole groups. Human reader/zoom/physical and software-keyboard, real OAuth/Turnstile/authenticator/device and production delivery gates remain open. Existing server-authored English errors in NB remain an explicit localisation qualification. M01–M12 and inherited debt carry forward; M13/P5-13 stays deferred do-not-execute, Phase8 stays separate, production NO-GO and main unchanged. Implemented account and whole-P7-01 scope are CONDITIONAL GO with these explicit qualifications. Final staged finite hygiene passed; accountad7b419 was normally committed/pushed, localHEAD=origin=live development directly verified2026-10-11 19:16:15UTC. Local/origin/live main27657f3 remains unchanged, worktree clean at immediate observation. Runtime/source/public evidence stays frozen and the actual successor receipt is appended separately. The latest account static record uses [static-checks.json](evidence/static-checks.json); its final2026-10-11 19:15:39UTC metadata and canonical-LF JSON hash are recorded under the actual push receipt.
|
||||
|
||||
The final account [static checks](evidence/static-checks.json) passed2026-10-11 19:15:38UTC: tracked/untracked secret scan, working/staged/Phase7 whitespace,303 relative documentation links,57 groups and32 original routes. Root independently verified all206 account manifest file/hash references. Normal account commit/push remains the next step; the successor records its actual receipt.
|
||||
The final account [static checks](evidence/static-checks.json) passed2026-10-11 19:15:38UTC: tracked/untracked secret scan, working/staged/Phase7 whitespace,303 relative documentation links,57 groups and32 original routes. Root independently verified all206 account manifest file/hash references. Normal account pushad7b419 was directly verified2026-10-11 19:16:15UTC; this successor appends that actual receipt without changing frozen measurements.
|
||||
|
||||
@@ -136,6 +136,11 @@
|
||||
"staticExportSnapshot": {
|
||||
"root": ".artifacts/phase7/p7-01/account-final/export",
|
||||
"qualification": "Exact raw files copied from job-tracker-ui/out; original path/digest algorithm and source observations remain unchanged"
|
||||
},
|
||||
"historicalSourceApplicability": {
|
||||
"appliesAtCommit": "ad7b4196af638f3a8c79e261ffd96507bd002835",
|
||||
"mapping": "identity.accountSourceSnapshots maps each originalSourcePath to exact immutable raw bytes and its canonicalLfSha256",
|
||||
"qualification": "accountSourceFiles and accountSourceSha256Lf are historical measured source identities. Later legitimate changes, including P7-02 translations, must be verified against these immutable snapshots or the committed ad7b419 tree rather than the current workspace. Original hashes/digest remain unchanged."
|
||||
}
|
||||
},
|
||||
"environment": {
|
||||
@@ -34071,7 +34076,37 @@
|
||||
"serverErrorLocalisation": "Existing server-authored English errors in NB states are explicitly retained; caller fallback is translated. No new hard-coded product strings or invented server translation.",
|
||||
"productionAndDeferred": "Main27657f31131cd95d42f0e1290853ec9c9b3959a4 unchanged; production NO-GO, M01-M12 open, M13/P5-13 deferred do-not-execute, Phase8 outside scope",
|
||||
"pushReceipt": {
|
||||
"status": "PENDING_PARENT_ACCOUNT_COMMIT_AND_PUSH"
|
||||
"status": "NORMAL_PUSH_VERIFIED",
|
||||
"checkedUtc": "2026-10-11T19:16:15.819630+00:00",
|
||||
"head": "ad7b4196af638f3a8c79e261ffd96507bd002835",
|
||||
"originDevelopment": "ad7b4196af638f3a8c79e261ffd96507bd002835",
|
||||
"live": {
|
||||
"refs/heads/codex/ui-redesign-phase4": "ad7b4196af638f3a8c79e261ffd96507bd002835",
|
||||
"refs/heads/main": "27657f31131cd95d42f0e1290853ec9c9b3959a4"
|
||||
},
|
||||
"main": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
|
||||
"originMain": "27657f31131cd95d42f0e1290853ec9c9b3959a4",
|
||||
"worktree": "",
|
||||
"raw": {
|
||||
"path": ".artifacts/phase7/p7-01/account-final/push-receipt.json",
|
||||
"sha256": "e27e026ae49478355af8f7ade07f825db3710ebf56907cf6f83263efcb7dcb96",
|
||||
"hashPolicy": "Exact measured raw bytes"
|
||||
},
|
||||
"staticGate": {
|
||||
"path": "docs/redesign/phase-7/p7-01/evidence/static-checks.json",
|
||||
"sha256": "a872440b8907f9303034ef652da7dbd03018ce9fc28584bea5d32f82354199f7",
|
||||
"hashPolicy": "Portable JSON UTF-8 text with CRLF normalized to LF",
|
||||
"checkedUtc": "2026-10-11T19:15:39.214576+00:00",
|
||||
"status": "PASS",
|
||||
"commands": 4,
|
||||
"documentation": {
|
||||
"files": 8,
|
||||
"relativeLinks": 303,
|
||||
"errors": []
|
||||
},
|
||||
"qualification": "Final staged checkpoint hygiene, distinct from successor receipt updates"
|
||||
},
|
||||
"qualification": "Actual successor receipt; original tested working-tree identity/build/runtime/public slice remains unchanged. Clean worktree recorded at immediate observation, not inferred for future work."
|
||||
},
|
||||
"rawRetention": {
|
||||
"root": ".artifacts/phase7/p7-01/account-final",
|
||||
|
||||
Reference in New Issue
Block a user