{
  "schemaVersion": 1,
  "workstreamId": "AUTOMATION-HANDOFF-01",
  "kind": "GATES",
  "contractStatus": "PROPOSED_EVIDENCE_ADAPTER_NOT_EXECUTABLE_POLICY",
  "controllerCommit": "140e182516e86c8718054cf0907593fcd6a38aa7",
  "controllerFiles": [
    "automation/backlog.json",
    "automation/schemas/backlog.schema.json",
    "automation/schemas/result.schema.json",
    "docs/automation/GATES.md",
    "docs/automation/SINGLE_USER_ACCEPTANCE.md",
    "docs/automation/SINGLE_USER.md"
  ],
  "executionEnabledByThisPackage": false,
  "externalApprovalPolicy": "Use existing protected RSA/SHA256 owner-SID/request-hash/expiry binding. Bind resolved final baseline, candidate scope, policy/prompt and artifact hashes. No signatures/tokens are created here; all current checkpoint deferrableGates are empty. Any policy update/conditional-deferral requires the controller signed process.",
  "stages": [
    {
      "id": "PHASE-10",
      "sequence": 5,
      "requiredPredecessor": [
        "AUTOMATION-HANDOFF-01 accepted entry and protected owner decision"
      ],
      "requiredTestSuites": [
        "Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
        "Stage-specific requirements and independent source-requirements review"
      ],
      "minimumEvidence": [
        "Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
        "Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
      ],
      "requiredGitState": [
        "Exact approved published baseline ancestry",
        "Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
        "No main merge, force push or deployment"
      ],
      "preservationChecks": [
        "All57 original criteria retain status and scope; all33 old routes plus admin processing route",
        "Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
        "Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
      ],
      "manualApprovals": [
        "phase10-development-entry",
        "stage-requirements-review",
        "candidate-specific-cleanup-scope"
      ],
      "permissibleConditionalDeferrals": [],
      "blockingFindings": [
        "Missing predecessor or protected approval",
        "Unqualified runtime/test adapter or missing/wrong-source report",
        "Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding",
        "Missing protected candidate-scope decision before removal; assessment-only entry cannot authorise deletions"
      ]
    },
    {
      "id": "PRODUCT-REVIEW-01",
      "sequence": 6,
      "requiredPredecessor": [
        "PHASE-10"
      ],
      "requiredTestSuites": [
        "Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
        "Stage-specific requirements and independent source-requirements review"
      ],
      "minimumEvidence": [
        "Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
        "Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
      ],
      "requiredGitState": [
        "Exact approved published baseline ancestry",
        "Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
        "No main merge, force push or deployment"
      ],
      "preservationChecks": [
        "All57 original criteria retain status and scope; all33 old routes plus admin processing route",
        "Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
        "Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
      ],
      "manualApprovals": [
        "product-ranked-scope",
        "stage-requirements-review"
      ],
      "permissibleConditionalDeferrals": [],
      "blockingFindings": [
        "Missing predecessor or protected approval",
        "Unqualified runtime/test adapter or missing/wrong-source report",
        "Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
      ]
    },
    {
      "id": "INT-GLOBAL-JOBS-01",
      "sequence": 7,
      "requiredPredecessor": [
        "PRODUCT-REVIEW-01"
      ],
      "requiredTestSuites": [
        "Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
        "Stage-specific requirements and independent source-requirements review"
      ],
      "minimumEvidence": [
        "Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
        "Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
      ],
      "requiredGitState": [
        "Exact approved published baseline ancestry",
        "Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
        "No main merge, force push or deployment"
      ],
      "preservationChecks": [
        "All57 original criteria retain status and scope; all33 old routes plus admin processing route",
        "Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
        "Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
      ],
      "manualApprovals": [
        "global-jobs-implementation",
        "product-ranked-scope",
        "provider-licences-and-display-rights",
        "stage-requirements-review"
      ],
      "permissibleConditionalDeferrals": [],
      "blockingFindings": [
        "Missing predecessor or protected approval",
        "Unqualified runtime/test adapter or missing/wrong-source report",
        "Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
      ]
    },
    {
      "id": "I18N-01",
      "sequence": 8,
      "requiredPredecessor": [
        "INT-GLOBAL-JOBS-01"
      ],
      "requiredTestSuites": [
        "Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
        "Stage-specific requirements and independent source-requirements review"
      ],
      "minimumEvidence": [
        "Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
        "Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
      ],
      "requiredGitState": [
        "Exact approved published baseline ancestry",
        "Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
        "No main merge, force push or deployment"
      ],
      "preservationChecks": [
        "All57 original criteria retain status and scope; all33 old routes plus admin processing route",
        "Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
        "Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
      ],
      "manualApprovals": [
        "human-linguistic-and-market-qualification",
        "i18n-scope",
        "stage-requirements-review"
      ],
      "permissibleConditionalDeferrals": [],
      "blockingFindings": [
        "Missing predecessor or protected approval",
        "Unqualified runtime/test adapter or missing/wrong-source report",
        "Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
      ]
    },
    {
      "id": "LAUNCH-SITE-01",
      "sequence": 9,
      "requiredPredecessor": [
        "I18N-01"
      ],
      "requiredTestSuites": [
        "Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
        "Stage-specific requirements and independent source-requirements review"
      ],
      "minimumEvidence": [
        "Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
        "Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
      ],
      "requiredGitState": [
        "Exact approved published baseline ancestry",
        "Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
        "No main merge, force push or deployment"
      ],
      "preservationChecks": [
        "All57 original criteria retain status and scope; all33 old routes plus admin processing route",
        "Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
        "Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
      ],
      "manualApprovals": [
        "homepage-design-selection",
        "stage-requirements-review"
      ],
      "permissibleConditionalDeferrals": [],
      "blockingFindings": [
        "Missing predecessor or protected approval",
        "Unqualified runtime/test adapter or missing/wrong-source report",
        "Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
      ]
    },
    {
      "id": "SECURITY-AUDIT-01",
      "sequence": 10,
      "requiredPredecessor": [
        "LAUNCH-SITE-01"
      ],
      "requiredTestSuites": [
        "Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
        "Stage-specific requirements and independent source-requirements review"
      ],
      "minimumEvidence": [
        "Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
        "Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
      ],
      "requiredGitState": [
        "Exact approved published baseline ancestry",
        "Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
        "No main merge, force push or deployment"
      ],
      "preservationChecks": [
        "All57 original criteria retain status and scope; all33 old routes plus admin processing route",
        "Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
        "Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
      ],
      "manualApprovals": [
        "isolated-adversarial-targets",
        "material-security-findings-disposition",
        "security-test-environment-and-scope",
        "stage-requirements-review"
      ],
      "permissibleConditionalDeferrals": [],
      "blockingFindings": [
        "Missing predecessor or protected approval",
        "Unqualified runtime/test adapter or missing/wrong-source report",
        "Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
      ]
    },
    {
      "id": "RELEASE-READINESS-01",
      "sequence": 11,
      "requiredPredecessor": [
        "SECURITY-AUDIT-01"
      ],
      "requiredTestSuites": [
        "Fresh applicable .NET, React, browser/contracts/import, MariaDB/RD21, Python/Docling, native PDF, type/lint/build/security/preservation lanes",
        "Stage-specific requirements and independent source-requirements review"
      ],
      "minimumEvidence": [
        "Native nonempty reports and command exits; source/commit/image binding; expected test membership; zero hidden failures/skips/retries",
        "Original failures retained; actual cleanup and old-data/route compatibility; human/provider/model results separate"
      ],
      "requiredGitState": [
        "Exact approved published baseline ancestry",
        "Clean authorised feature checkout; normal push and independent exact remote HEAD readback",
        "No main merge, force push or deployment"
      ],
      "preservationChecks": [
        "All57 original criteria retain status and scope; all33 old routes plus admin processing route",
        "Canonical Career Profile, CV overrides/frozen versions, letters, applications, auth/tenant and RD21 contracts",
        "Candidate-specific caller/old-data/rollback proof and unchanged PDF/font oracles"
      ],
      "manualApprovals": [
        "release-evidence-review",
        "stage-requirements-review"
      ],
      "permissibleConditionalDeferrals": [],
      "blockingFindings": [
        "Missing predecessor or protected approval",
        "Unqualified runtime/test adapter or missing/wrong-source report",
        "Unpublished commit; failed mandatory test; undispositioned affected compatibility or security finding"
      ]
    }
  ],
  "separateInitiatives": [
    "P5-13/C11 AI qualification and model assessment",
    "LinkedIn feasibility",
    "Android application",
    "SQLite retirement",
    "MariaDB upgrade strategy",
    "Monitoring and operational improvements",
    "Future country integrations"
  ]
}