docs(redesign): accept Phase 7 with retained qualifications

2026-10-21 19:46:27 +02:00
parent b2a9fd68b0
commit ef94d579cb
11 changed files with 4925 additions and 1 deletions
@@ -191,3 +191,8 @@ Operations **c5176e3251c869e13284b994b59b2f7aa9220eb1** is normally pushed and d
 ### P7-09 Preferences/Connections publication

 Preferences/Connections **e7dba9a2f776c55e3c4f4df7ef59076f93fa92df** was normally pushed and directly verified **2026-10-17T08:50:42.777224UTC**, with clean HEAD=origin=live development and local/origin/live main27657f3 unchanged. Final staged hygiene passed08:50:12UTC. The [portable publication receipt](p7-09/evidence/preferences-results.json) supersedes earlier pending-publication observations; data/privacy/plan/backup and its separate import prerequisite remain pending.
+
+
+### Final P7-12 acceptance
+
+Documentation commit 2a9fd68b081a8cc1701b1c58eaea7e1070274af was pushed/directly verified clean at 2026-10-21T10:59:27.943590UTC. Fresh uninterrupted351browser plus23separate contracts,899frontend,1060backend and56offline-sidecar pass. [Final acceptance](p7-12/FINAL_ACCEPTANCE.md) and [source ledger](p7-12/SOURCE_COMMITS.md) reconcile all57groups/33routes and the unchanged792-input runtime. Fresh production builds pass; live target remains mismatched. Final documentation publication receipt resides under .artifacts/phase7/ alongside the earlier checkpoint receipts; the exact acceptance hash is recorded after commit.
@@ -1,3 +1,7 @@
+## Final P7-12 reconciliation
+
+[Fresh integrated evidence](p7-12/evidence/final-regression.json) reconciles all57groups, all32original routes plus Documents, ordinary P2-D01 and frozen source/artifacts. Status remains56PARTIAL/C11DEFERRED: retained human/provider/output qualifications are not silently upgraded. See [final acceptance](p7-12/FINAL_ACCEPTANCE.md).
+
 # Phase 7 — Initial preservation matrix

 Current P7-12 continuation retains all57statuses and33routes. [SQLite concurrency](p7-12/SQLITE_CONCURRENCY.md) changes only startup journaling, with actual usage/Identity writes, foreign-row preservation and independent WAL backup proof;1060backend and17affected native cases pass. [Users fixture pagination](p7-12/USERS_PAGINATION.md) preserves the original visible identity and keyboard/reflow assertions. Earlier [fixture isolation](p7-12/FIXTURE_ISOLATION.md) changes only synthetic role/language lifecycle and diagnostics, preserving the original last-admin409, non-admin403, ownership and persistence assertions; combined16/16passes. [Protected-action help](p7-12/ADMIN_HELP.md) retains disabled controls and help while correcting wrapper semantics. The one-package security patch changes no capability or route. Full successor integration and all human/provider/output qualifications remain required; no group is upgraded by these finite checks.
@@ -1,3 +1,7 @@
+## Final acceptance — 21 October 2026
+
+P7-00–P7-12 implemented-scope acceptance is **CONDITIONAL GO**. Fresh backend **1060**, frontend **899/101**, ordinary browser **351** plus **23** separate contracts and offline sidecar **56** pass. Full browser has zero skips, failures, flaky cases or retries. All792 runtime inputs and tested assemblies/export match the frozen source. See [final acceptance](p7-12/FINAL_ACCEPTANCE.md) and [portable regression evidence](p7-12/evidence/final-regression.json). All57 preservation qualifications and33routes are reconciled. Production **NO-GO**; Phase8 readiness **CONDITIONAL GO** with mandatory Dashboard persistence, interaction-policy and accessibility dependencies. Human/provider/output acceptance remains pending. Main/live and Ollama activation remain unverified for the requested release; no Phase8 implementation. Historical in-progress observations below are superseded.
+
 # Phase 7 — Full migration

 ## Current status — 21 October 2026
@@ -0,0 +1,51 @@
+# Phase 7 final acceptance — 21 October 2026
+
+**Phase 7 Migration: CONDITIONAL GO. Production Release: NO-GO. Phase 8 Readiness: CONDITIONAL GO.**
+
+P7-00 through P7-12 are complete for the implemented migration scope. Remaining human, provider, output and production qualification is explicitly retained. Phase 8 implementation has not started. The approved checkpoint reports remain the detailed implementation record; this report supersedes their historical final-regression-pending statements.
+
+## Scope and results
+
+The approved sequence reconciled the inherited interfaces before migrating authentication/account recovery, onboarding, Career Profile overview and editing, CV library and document management, application materials and correspondence, notifications, Settings and Administration. Residual shared forms, accessible names, dialogs, feedback and error states were integrated through P7-11. Existing Jobs, Dashboard, Analytics, CV editor and verified document pagination work was reused, rather than rebuilt. Checkpoint-specific component, persistence, ownership and browser evidence is indexed in the [phase record](../README.md).
+
+The shared confirmation transition now preserves deliberate focus; administrator last-admin help names remain attached to their controls. SQLite startup enables WAL before reconciliation, supported by deterministic reader/write and committed-WAL backup contracts. Populated administrator pagination and language/export lifetime browser consumers were corrected without relaxing their security or persistence assertions. All failed and interrupted attempts remain recorded in the repair reports. A passing successor does not erase them.
+
+## Fresh integrated regression
+
+The [machine-readable final reconciliation](evidence/final-regression.json) verifies all 792 selected runtime input hashes, both Release assemblies and production export against the pre-run [source identity](evidence/consumer-entry.json). As-run source is `508d68e16d49625fb083824a5bee0211c85f3432`; subsequent `b2a9fd6` changes are documentation only.
+
+| Lane | Final result | Phase 6 baseline and change |
+|---|---|---|
+| Backend | 1,060 passing; zero failed/not executed | 1,033 + 27; additions itemized in final reconciliation |
+| Frontend | 899 passing across 101 suites; zero failed/pending | 521/85 + 378 cases/16 suites; per-file deltas recorded, no original suite removed |
+| Ordinary browser | 351 passing; zero skipped, unexpected, flaky or retried | 159 + 192 cases/26 files; no original file removed |
+| Separate browser contracts | 23 passing, zero skipped/flaky/retried | 2 real-HTTP AI safeguards, 2 real identity/SMTP recovery, 9 rate isolation, 6 production-loopback ingress, 1 PDF admission, 3 reliability diagnostics |
+| Sidecar | 56 passing offline | 49 + 7 Qwen request compatibility cases; model loading disabled |
+
+The uninterrupted ordinary browser run finished at 11:38:17 UTC; all separate lanes finished at 11:39:33 UTC. P2-D01 remains an ordinary passing frozen-document case. Overlapping focused vectors are not added to these totals. SMTP fixture, application/browser TypeScript, lint, secret scan, SBOM, dependency policy and configuration helpers pass. Production npm audit reports zero vulnerabilities. The owner-approved temporary dev-only braces exception and existing moderate findings remain; NuGet's successful lookup does **not** clear the recorded Pkcs high/moderate advisories.
+
+Fresh unchanged fidelity oracles recomputed from this run pass 16 standard fixtures/36 pages and 8 Settings fixtures/24 pages. Renderer geometry and tolerances were not altered. Production builds are recorded separately after collection; a regenerated frontend export is not represented as the exact export used by the full browser run.
+
+## Responsive, accessibility and localisation qualifications
+
+Checkpoint journeys cover mobile/tablet/desktop, English/Bokmål and light/dark themes. Final actual-zoom triage contains 102 observations with no measured root/main horizontal overflow. Its 116 outside-control occurrences are explicitly classified: 80 table/Board scroller occurrences, 30 scrollable tab-strip occurrences, 4 transparent switch proxies and 2 pagination controls whose disabled/reachable state was not captured. This is not blanket zoom/reflow acceptance; focused pagination reachability remains pending.
+
+Axe incomplete results remain triaged, including MUI sort semantics/contrast observations. Administrator DataGrid pagination/Sort vendor strings retain an English-in-Bokmål residual. Header-only zoom captures do not establish body reflow. Human screen-reader, physical touch/software keyboard, complete real zoom, other-browser/native print and production font/photo checks remain required. Automation does not satisfy these manual acceptance requirements.
+
+## Preservation and outstanding work
+
+The [57-group matrix](../PRESERVATION.md) is reconciled: 56 PARTIAL and PRES-C11 DEFERRED. These statuses represent finite proof and retained qualifications, not 56 proven defects. All 32 original route patterns remain, with the approved Documents route bringing the inventory to 33. Ownership, tenant isolation, canonical Career Profile authority, CV overrides/revisions, frozen associations, PDF output, settings drafts and AI safeguards retain applicable regression coverage. No capability or original route was silently removed.
+
+Carry forward the [debt register](../DEBT.md), especially historical Dashboard preference-save reliability, Rules/CV unsaved-state observations, concurrency uncertainty beyond the reproduced SQLite mechanism, Board full-result scaling, deferred followMode/P5-05, real provider operations and manual/output acceptance. Passing finite diagnostics does not close historical intermittent failures without causal evidence.
+
+P5-13 remains disabled and unqualified: deployed identity, reachable production-equivalent inference, 366 calls, independent human semantic review, review UI and final integration remain outstanding. Offline sidecar success is not qualification.
+
+## Release and next phase
+
+A fresh read-only live check at 17:44:36 UTC returned HTTP 200 for root, health and readiness, but the host checkout remains `7d641edc7bca866ccf06012897ba1d107c07e59f`, not pushed main `5f835e54a9b74e6b71418422e28431b2af06453f`. Backend identity settings still contain unevaluated shell expressions. The AI service still selects `qwen2.5:7b`. The requested Qwen3.5 model is prepared; activation awaits verified adapter deployment. Healthy endpoints do not establish the target release.
+
+Release 838 failed in native Node/Jest and skipped deployment. Earlier Python/.NET native crashes and unavailable operator diagnostics remain documented in [release status](RELEASE_STATUS.md). No root cause, successful deployment or model activation is inferred. Production F04 ingress, isolated backup/restore, effective configuration/schema, tested rollback and correct deployed identity remain mandatory production gates. This acceptance does not push main or bypass CI.
+
+The [Phase 8 handoff](PHASE8_HANDOFF.md) is ready for planning with mandatory dependencies: inspect Dashboard persistence/reliability ownership; decide supported widget sizing and breakpoint policy; prove compatibility, keyboard ordering/resizing, account isolation, failed-save/reload/stale-session behavior and manual accessibility. No Phase 8 code is included.
+
+All prior source/repair commits are listed in the refreshed [75-entry ancestry ledger](SOURCE_COMMITS.md), through `b2a9fd68b081a8cc1701b1c58eaea7e1070274af`. The final documentation commit is published normally on the development branch; its exact hash and direct remote match are recorded after committing because a commit cannot embed its own hash. No force push is used.
@@ -6,7 +6,7 @@ Status: planning handoff only; Phase8 implementation is not authorized by the Ph

 Reuse the existing DashboardView report owner, shell/navigation, theme/density tokens, shared forms/confirmation/feedback, English/Bokmål catalogues and current five visibility preferences. Analytics already shares its approved report owner: do not migrate it again or change periods, cohorts, denominators or source links. Administration stays separate. Ordering, resizing, layout persistence and reset/default behaviour are future work; this document does not claim they exist.

-P7-12 acceptance is still in progress at this handoff's creation. Phase8 readiness remains conditional on its final regression result and the dependencies below. No current provider/AI/production qualification is inferred.
+P7-12 implemented-scope acceptance is CONDITIONAL GO; the fresh full regression passes. See [final acceptance](FINAL_ACCEPTANCE.md). Phase8 readiness remains conditional on the mandatory dependencies below. No current provider/AI/production qualification is inferred.

 ## Proposed bounded execution order

@@ -1,3 +1,7 @@
+## Final outcome — 21 October 2026
+
+**Completed for implemented scope: CONDITIONAL GO.** [Final acceptance](FINAL_ACCEPTANCE.md) supersedes historical pending-run statements below. Fresh full1060backend/899frontend/351ordinary-browser/56offline-sidecar plus23separate browser contracts pass, with no skips or retries. [Final source reconciliation](evidence/final-regression.json) confirms792runtime inputs, unchanged tested assemblies/export, ordinary P2-D01, all57groups and33routes. Production remains NO-GO; Phase8 readiness conditional on the explicit handoff dependencies. Manual/provider/output qualifications remain.
+
 # P7-12 — Integrated migration acceptance

 ## Continuation — 21 October
@@ -71,5 +71,13 @@ Generated from the actual Git ancestry between the approved Phase6 checkpoint an
 | `9bb8b1a0cf7e2aa97547af1fe5fab1692154f5bf` | 2026-10-21T07:29:49+02:00 | fix(deps): patch redirect credential stripping |
 | `5f835e54a9b74e6b71418422e28431b2af06453f` | 2026-10-21T07:29:49+02:00 | fix(deps): patch redirect credential stripping |
 | `9b17b04d61513b8e3c909e4da74998d4cadb1e83` | 2026-10-21T07:30:46+02:00 | Merge remote-tracking branch 'origin/main' into codex/ui-redesign-phase4 |
+| `59ac1b50497a7df43e728cc10a978ac0951173c1` | 2026-10-21T07:32:45+02:00 | docs(redesign): reconcile integration failures and release qualifications |
+| `fe9ab3d7d37b4011f7fc511771d876e028b6a871` | 2026-10-21T07:42:33+02:00 | docs(redesign): publish patched source identity and exact test inventory |
+| `a15336cc9436d9b182fa98955ec6f443aa6d8c01` | 2026-10-21T07:53:41+02:00 | docs(redesign): record reproduced integrated acceptance failures |
+| `f51e0506cc6a4fdcbc6c91c8cee9f6112cdecbf0` | 2026-10-21T08:04:26+02:00 | fix(database): enable SQLite WAL before schema reconciliation |
+| `2f772e132274e75a05deb0a0dd363dadebc9175a` | 2026-10-21T08:05:01+02:00 | test(admin): navigate populated Users pagination in responsive checks |
+| `32e464f6128fc8f6f0a16219c7acb0310252dac9` | 2026-10-21T08:09:51+02:00 | docs(redesign): freeze WAL successor and reconcile acceptance evidence |
+| `508d68e16d49625fb083824a5bee0211c85f3432` | 2026-10-21T12:48:44+02:00 | test(e2e): reconcile shell and smoke consumers with approved lifetime and locale contracts |
+| `b2a9fd68b081a8cc1701b1c58eaea7e1070274af` | 2026-10-21T12:59:22+02:00 | docs(redesign): record final consumer source and release qualifications |

 The final documentation acceptance commit cannot contain its own hash. Its normal push receipt and exact remotely verified hash are reported after committing, separately from this frozen runtime-source ledger.
@@ -0,0 +1,104 @@
+{
+  "schemaVersion": 1,
+  "checkpoint": "p7-12",
+  "status": "PASS",
+  "checkedUtc": "2026-10-21T17:46:20.457531+00:00",
+  "commands": [
+    {
+      "name": "secret-scan",
+      "command": [
+        "rtk",
+        "proxy",
+        "C:\\Users\\Connor\\AppData\\Local\\Programs\\Python\\Python312\\python.exe",
+        "-X",
+        "utf8",
+        "scripts/supply-chain.py",
+        "scan-secrets"
+      ],
+      "startedUtc": "2026-10-21T17:46:16.908514+00:00",
+      "finishedUtc": "2026-10-21T17:46:19.617527+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261021T174616Z/secret-scan.log",
+      "logSha256Raw": "be5119e6057287d397e87759f855c91e634e3bfac61c8be7584d05592ba2dfcd"
+    },
+    {
+      "name": "working-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check"
+      ],
+      "startedUtc": "2026-10-21T17:46:19.618026+00:00",
+      "finishedUtc": "2026-10-21T17:46:19.702957+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261021T174616Z/working-whitespace.log",
+      "logSha256Raw": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "name": "staged-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--cached",
+        "--check"
+      ],
+      "startedUtc": "2026-10-21T17:46:19.702957+00:00",
+      "finishedUtc": "2026-10-21T17:46:19.789275+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261021T174616Z/staged-whitespace.log",
+      "logSha256Raw": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "name": "phase7-whitespace",
+      "command": [
+        "rtk",
+        "proxy",
+        "git",
+        "diff",
+        "--check",
+        "b5319981ad3d1bd635daff861453d23c0de5320b"
+      ],
+      "startedUtc": "2026-10-21T17:46:19.790288+00:00",
+      "finishedUtc": "2026-10-21T17:46:20.006987+00:00",
+      "exitCode": 0,
+      "log": ".artifacts/phase7/current/static/20261021T174616Z/phase7-whitespace.log",
+      "logSha256Raw": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    }
+  ],
+  "untrackedSecretScan": {
+    "files": 0,
+    "findings": 0
+  },
+  "documentation": {
+    "files": 49,
+    "relativeLinks": 731,
+    "errors": []
+  },
+  "preservation": {
+    "groups": 57,
+    "statuses": {
+      "PARTIAL": 56,
+      "PASS": 0,
+      "FAIL": 0,
+      "DEFERRED": 1
+    },
+    "originalRoutesPreserved": true,
+    "currentConcreteRoutes": 33
+  },
+  "production": {
+    "main": "5f835e54a9b74e6b71418422e28431b2af06453f",
+    "originMain": "5f835e54a9b74e6b71418422e28431b2af06453f",
+    "status": "NO-GO",
+    "qualification": "Local fetched refs; direct push observation recorded separately."
+  },
+  "hashPolicy": "Portable JSON UTF8 LF; raw log hashes measure exact saved bytes.",
+  "limits": [
+    "Pattern scanner skips binary and files over2MiB; not historical Git/production secrets.",
+    "Local links check target existence, not URL/heading anchors.",
+    "Static evidence is not runtime/manual/device/provider/production acceptance."
+  ]
+}