{
  "schemaVersion": 1,
  "workstreamId": "AUTOMATION-HANDOFF-01",
  "kind": "BLOCKERS",
  "items": [
    {
      "id": "P10-ENTRY-01",
      "description": "No protected owner approval of the final published development baseline and exact cleanup scope was supplied to this handoff.",
      "evidence": [
        "AUTHORITY.md",
        "docs/cv-integration-qa/PHASE_10_HANDOFF.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Exact baseline/scope and independent stage entry",
      "requiredAction": "Review the completed package and candidate scope; grant phase10-development-entry only through the separate protected approval process. A repository GO is insufficient.",
      "blockingPhase": [
        "PHASE-10"
      ],
      "responsibleParty": "Owner / protected controller approval authority",
      "deferralAuthority": null,
      "classification": "MANDATORY_ENTRY",
      "status": "BLOCKED"
    },
    {
      "id": "P10-CANDIDATE-01",
      "description": "No proposed product deletion has proven absence of static, dynamic, route and historical-data consumers.",
      "evidence": [
        "CLEANUP_INVENTORY.md",
        "docs/redesign/IMPLEMENTATION_PLAN.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Unused-route proof; passing affected tests; satisfied functionality inventory",
      "requiredAction": "Prepare and approve a concrete candidate with caller/route/inventory/rollback proof and affected native regression; retain every active compatibility path.",
      "blockingPhase": [
        "PHASE-10: each removal candidate"
      ],
      "responsibleParty": "Development owner / reviewer",
      "deferralAuthority": null,
      "classification": "MANDATORY_ENTRY",
      "status": "BLOCKED"
    },
    {
      "id": "AUTO-RUNTIME-01",
      "description": "Current single-user controller reports real MXC canary PASS, but no actual owner key or ChatGPT sign-in, operator-controlled policy and disabled real execution; current-context qualification/activation remains incomplete.",
      "evidence": [
        "CONTROLLER_ADDENDUM.md",
        "READY_TO_RUN.md",
        "controller-current-native-qualification-json",
        "controller-current-setup-results-json"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Independent qualified execution boundary",
      "requiredAction": "Operator must sign into dedicated auth-only profile, configure the actual protected owner key and qualify its host-positive/worker-negative boundary and fresh current-context controls, then independently approve runtime/queue/entry policy. Existing same-user MXC mode does not require a new account or VM; its finite canaries do not qualify actual owner credentials or roadmap execution. This handoff must not operate that runtime.",
      "blockingPhase": [
        "AUTOMATIC_PHASE-10_EXECUTION"
      ],
      "responsibleParty": "AUTONOMOUS-ROADMAP-01 platform operator",
      "deferralAuthority": null,
      "classification": "MANDATORY_ENTRY",
      "status": "BLOCKED"
    },
    {
      "id": "AUTO-ADAPTER-01",
      "description": "The external controller real-stage test adapter is unconfigured; synthetic orchestration tests are not application qualification.",
      "evidence": [
        "ROADMAP.md",
        "READY_TO_RUN.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Qualified real-stage composite test adapter",
      "requiredAction": "Install/review actual commands and parsers, source and suite membership, report freshness and failure/skip/retry/cleanup policy. Independently rerun candidate checks; do not set configured=true as a bypass.",
      "blockingPhase": [
        "AUTOMATIC_PHASE-10_EXECUTION"
      ],
      "responsibleParty": "AUTONOMOUS-ROADMAP-01 test-adapter maintainer",
      "deferralAuthority": null,
      "classification": "MANDATORY_ENTRY",
      "status": "BLOCKED"
    },
    {
      "id": "PDF-S01-01",
      "description": "Revised-template S01 DOM Range versus PDF character-cell coordinate failures remain undispositioned. Raster agreement is a different measurement.",
      "evidence": [
        "docs/pre-phase10-ux/ACCEPTANCE.md",
        "VISUAL_REVIEW.md"
      ],
      "severity": "MODERATE",
      "acceptanceCriterion": "Required preview/PDF fidelity and visual spacing qualification",
      "requiredAction": "Retain original oracle and all failures. Investigate/fix an actual measured defect; obtain explicit protected scope/criterion disposition if applicability is ambiguous. Do not waive an automated requirement using a model summary or change goldens to conceal failures.",
      "blockingPhase": [
        "PHASE-10: document/rendering scope or required PDF gate",
        "PRODUCTION"
      ],
      "responsibleParty": "Document QA owner / owner acceptance authority",
      "deferralAuthority": null,
      "classification": "MANDATORY_ENTRY",
      "status": "BLOCKED"
    },
    {
      "id": "HUMAN-01",
      "description": "Physical device, keyboard/AT/contrast, human EN/Bokmål, typography and actual printing acceptance are not provided.",
      "evidence": [
        "MANUAL_ACCEPTANCE.md"
      ],
      "severity": "MODERATE",
      "acceptanceCriterion": "Genuine human/device/language/print acceptance",
      "requiredAction": "Complete the prioritised manual scenarios; record exact device/AT/language/print evidence outside model-writable approval authority. Candidate-specific regressions still block.",
      "blockingPhase": [
        "HUMAN_ACCEPTANCE",
        "PRODUCTION",
        "PHASE-10: affected candidate requires preservation"
      ],
      "responsibleParty": "Owner / human QA",
      "deferralAuthority": "docs/redesign/phase-9/REQUEST.md:246–252 permits genuine unfinished human checks as release gates;426–439 requires individual disposition. This is not automatic Phase10 entry or an executable deferral.",
      "classification": "CONDITIONAL_DEVELOPMENT",
      "status": "CONDITIONALLY_DEFERRED"
    },
    {
      "id": "AI-CV-01",
      "description": "The disabled/disconnected CV adapter has no accepted end-to-end semantic qualification. Three real isolated synthetic responses were rejected.",
      "evidence": [
        "AI_EVALUATION_PLAN.md",
        "AI_RESULTS.md",
        "docs/cv-import/ACCEPTANCE.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "No invented facts; source-grounded factual accuracy and explicit user review",
      "requiredAction": "Keep CV_IMPORT_AI_ENABLED=false and active processing deterministic; qualify immutable model/runtime/schema/prompt on frozen real PDF/DOCX corpus, review burden and adversarial cases before activation. Small generic successes do not qualify CV accuracy.",
      "blockingPhase": [
        "CV_MODEL_ACTIVATION",
        "CV_AI_ACCURACY",
        "PRODUCTION_AI_QUALITY"
      ],
      "responsibleParty": "AI qualification owner",
      "deferralAuthority": "docs/cv-import/ACCEPTANCE.md permits model-independent conditional development with inactive optional adapter; no security-risk waiver or automatic controller deferral.",
      "classification": "CONDITIONAL_DEVELOPMENT",
      "status": "CONDITIONALLY_DEFERRED"
    },
    {
      "id": "DET-RECALL-01",
      "description": "Frozen deterministic PDF typed recall and unresolved-source precision remain partial; source correction is necessary.",
      "evidence": [
        "docs/pre-phase10-ux/ACCEPTANCE.md"
      ],
      "severity": "MODERATE",
      "acceptanceCriterion": "Near-100% is aspirational; preserve unknown/ambiguous facts",
      "requiredAction": "Preserve source evidence, unknown values, conservative merges and manual corrections; benchmark changes on frozen corpus separately from model probes.",
      "blockingPhase": [
        "BROAD_EXTRACTION_ACCURACY_CLAIMS",
        "PHASE-10: review/legacy compatibility removal"
      ],
      "responsibleParty": "CV/import QA owner",
      "deferralAuthority": "docs/cv-import/ACCEPTANCE.md and docs/cv-integration-qa/ACCEPTANCE.md explicitly condition supported workflow acceptance on these retained limitations.",
      "classification": "CONDITIONAL_DEVELOPMENT",
      "status": "CONDITIONALLY_DEFERRED"
    },
    {
      "id": "PYSEC-01",
      "description": "Full Python dependency security is conditional; retained vendor-local Torch PyPI404 is not a clean two-provider/whole-image verdict.",
      "evidence": [
        "docs/redesign/phase-9/p9-sec-02/ACCEPTANCE_ADDENDUM_2026-10-25.md",
        "docs/redesign/phase-9/p9-sec-02/DISPOSITIONS.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "No bypass of Python/model/cache qualification",
      "requiredAction": "Retain exact installed OSV/vendor wheel/range/source/model evidence and incomplete response; refresh before affected changes/release. Current import-lock zero advisories does not close full runtime/native security.",
      "blockingPhase": [
        "PYTHON_UNTRUSTED_PROCESSING_QUALIFICATION",
        "PRODUCTION",
        "PHASE-10: affected Python/model path"
      ],
      "responsibleParty": "Security / Python qualification owner",
      "deferralAuthority": "Existing P9-SEC-02 scoped CONDITIONAL PASS and Phase9 development decision; no owner residual-risk acceptance.",
      "classification": "CONDITIONAL_DEVELOPMENT",
      "status": "CONDITIONALLY_DEFERRED"
    },
    {
      "id": "CI-01",
      "description": "Hosted MariaDB remains quarantined; current runner isolation/lifecycle is unverified and no hosted cases are qualified.",
      "evidence": [
        "docs/redesign/phase-9/p9-sec-02/CI_ASSESSMENT.md",
        ".gitea/workflows/mariadb-integration.yml"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Hosted provider and infrastructure isolation evidence",
      "requiredAction": "Provision dedicated nonproduction runner/daemon and native private service; prove merged HostConfig/egress/secret boundaries plus success/fail/cancel/crash cleanup, then reviewed enabling change and actual hosted execution. Do not bypass unconditional workflow guard.",
      "blockingPhase": [
        "HOSTED_CI_ACCEPTANCE",
        "PRODUCTION",
        "AUTOMATION: if hosted lane required"
      ],
      "responsibleParty": "CI infrastructure operator",
      "deferralAuthority": "P9-SEC-02 CI-M01 allows operator-blocked hosted CI while independent local qualification continues; does not qualify controller execution.",
      "classification": "CONDITIONAL_DEVELOPMENT",
      "status": "BLOCKED"
    },
    {
      "id": "MYSQL-TLS-01",
      "description": "MySqlConnector2.4.0 has the retained moderate GHSA-473q-m89c-ghf8 advisory; production TLS configuration was not inspected.",
      "evidence": [
        "docs/pre-phase10-ux/DEPENDENCY_AUDIT.md"
      ],
      "severity": "MODERATE",
      "acceptanceCriterion": "Current dependency/reachability disposition; no accepted residual security risk",
      "requiredAction": "Qualify >=2.6.1 or the documented trusted-CA mitigation; verify actual affected TLS configuration and rerun MariaDB/RD21. Isolated loopback SslMode=None evidence is not production TLS acceptance.",
      "blockingPhase": [
        "PRODUCTION_SECURITY_RELEASE"
      ],
      "responsibleParty": "Database/security release owner",
      "deferralAuthority": null,
      "classification": "PRODUCTION_ONLY",
      "status": "BLOCKED"
    },
    {
      "id": "OPS-01",
      "description": "Production filesystem integrity, independent off-disk restore/rollback, deployed identity/cache/monitoring and recovery evidence remain unverified.",
      "evidence": [
        "docs/redesign/phase-9/p9-sec-02/ACCEPTANCE_ADDENDUM_2026-10-25.md"
      ],
      "severity": "CRITICAL",
      "acceptanceCriterion": "Independent infrastructure, backup, recovery and release acceptance",
      "requiredAction": "Complete independent operator verification and release approval on authorised infrastructure; do not perform production repairs, DB operations or service/cache changes from this handoff.",
      "blockingPhase": [
        "PRODUCTION"
      ],
      "responsibleParty": "Production operator / release owner",
      "deferralAuthority": null,
      "classification": "PRODUCTION_ONLY",
      "status": "BLOCKED"
    },
    {
      "id": "NATIVE-SEC-01",
      "description": "Native parser/decoder fuzzing, whole-image review and applicable Windows memory enforcement remain outside the qualified bounded fixture evidence.",
      "evidence": [
        "docs/pre-phase10-ux/SECURITY_REVIEW.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Secure bounded untrusted document processing",
      "requiredAction": "Qualify native resource/isolation/security boundaries; retain page/file/time/child/container admission limits and privacy/retention cleanup.",
      "blockingPhase": [
        "PRODUCTION_UNTRUSTED_DOCUMENT_PROCESSING"
      ],
      "responsibleParty": "Security / runtime owner",
      "deferralAuthority": null,
      "classification": "PRODUCTION_ONLY",
      "status": "BLOCKED"
    },
    {
      "id": "FUTURE-01",
      "description": "Separate P5-13/C11, LinkedIn, Android, SQLite retirement, MariaDB upgrade, monitoring and country initiatives remain tracked future work.",
      "evidence": [
        "ROADMAP.md"
      ],
      "severity": "INFORMATIONAL",
      "acceptanceCriterion": "No silent backlog loss or unrelated implementation",
      "requiredAction": "Retain initiative-specific entry decisions and dependencies; do not activate withheld features, remove compatibility or perform major upgrades during cleanup.",
      "blockingPhase": [
        "SEPARATE_AUTHORISED_WORKSTREAMS"
      ],
      "responsibleParty": "Product / initiative owners",
      "deferralAuthority": null,
      "classification": "FUTURE_FEATURE",
      "status": "OPEN"
    },
    {
      "id": "AI-CONTEXT-01",
      "description": "Generic strategy admission still requires legacy ProfileCvText; successful reviewed structured import alone does not establish that precondition.",
      "evidence": [
        "AI_RESULTS.md",
        "JobTrackerApi/Services/StrategySnapshotService.cs",
        "JobTrackerApi/Controllers/ProfileCvController.Import.cs"
      ],
      "severity": "MODERATE",
      "acceptanceCriterion": "Do not claim canonical-only import to generic AI compatibility without exercising it",
      "requiredAction": "Assess canonical-only generic-AI source compatibility during Product Review. Preserve existing consent/source contracts; never silently fill legacy text from unreviewed uploads. The current successful smoke explicitly supplies separately authored fictional CV text.",
      "blockingPhase": [
        "GENERIC_AI_FROM_CANONICAL_ONLY_PROFILE_CLAIM"
      ],
      "responsibleParty": "Product / AI integration owner",
      "deferralAuthority": null,
      "classification": "FUTURE_FEATURE",
      "status": "OPEN"
    },
    {
      "id": "AUTO-SCOPE-01",
      "description": "The committed controller policy has stage entry/review approvals but no explicit protected candidate-scope checkpoint after an assessment-only Phase10 entry.",
      "evidence": [
        "CONTRACT.md",
        "GATES.json",
        "CLEANUP_INVENTORY.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Concrete owner-approved candidate scope before cleanup implementation",
      "requiredAction": "Bind a full entry approval to already-proven exact candidates, or use the controller's signed policy update to stop after assessment and require a protected candidate-specific-cleanup-scope decision before removal. Do not treat assessment-only approval or worker-written evidence as deletion authority.",
      "blockingPhase": [
        "AUTOMATIC_PHASE-10_CLEANUP_IMPLEMENTATION"
      ],
      "responsibleParty": "Owner / AUTONOMOUS-ROADMAP-01 policy maintainer",
      "deferralAuthority": null,
      "classification": "MANDATORY_ENTRY",
      "status": "BLOCKED"
    },
    {
      "id": "GIT-RECOVERY-01",
      "description": "The originally pending caa0c6a and5032ccb publication was recovered and independently read back.",
      "evidence": [
        "AUTHORITY.md"
      ],
      "severity": "HIGH",
      "acceptanceCriterion": "Clean directly verified remote baseline",
      "requiredAction": "Reverify exact final local/remote HEAD after publishing the finished package; normal push only. GJ-00 was independently verified without modifying/merging it.",
      "blockingPhase": [
        "PHASE-10: final published baseline"
      ],
      "responsibleParty": "Git integration owner",
      "deferralAuthority": null,
      "classification": "MANDATORY_ENTRY",
      "status": "CLOSED"
    }
  ]
}