{ "schemaVersion": 1, "reportDate": "2026-10-25", "baselineCommit": "f17dba2ec06ea8f53c2785eaaebd25abc515ebf8", "branch": "fix/p9-model-cache-and-ci-qualification", "scope": "P9-SEC-02 successor register: every inherited criterion/source/owner/closure is preserved. Only explicitly scoped new evidence changes status.", "freshExecution": "Actual source-bound results and retained predecessors are in validation.json; historical reports are not fresh executions.", "gateRules": { "phase9": "REQUEST \u00a7\u00a76,13,18: classify each item independently; unfinished genuine human checks remain release gates. No production-only condition automatically vetoes local functional QA. Remaining mandatory functional criteria require evidence.", "phase10": "IMPLEMENTATION_PLAN.md:164-170: no route uses removed code + tests pass + functionality inventory satisfied. REQUEST prohibits automatically starting Phase10. No blanket conditional deletion eligibility.", "production": "REQUEST \u00a716 independent release/operator/provider/manual gates; no operations authorized", "debt": "accepted optional or low debt remains visible, never relabelled a pass", "cvUx": "No approved standalone CV-UX-01 entry/scope artifact was found. REQUEST.md:456 requires a separate issue and dependencies for new features. Implementation remains withheld until that scope/entry decision; unrelated production-only conditions do not prohibit separately scoped planning. This task does not start that work." }, "findings": [ { "id": "RD01", "aliases": [ "F04" ], "criterion": "OPEN; local static/loopback ingress contracts only", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 9 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High: wrong client identity or exposed ingress", "dependency": "Production", "ownerAndRequiredClosure": "Release operator: actual TLS/IPv6/firewall/topology/trusted peer and deployed auth evidence", "status": "OPEN; local static/loopback ingress contracts only", "gates": { "phase9": "operator release gate", "phase10": "candidate-specific ingress compatibility proof", "production": "BLOCKED pending actual ingress identity", "debt": "open operational qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD01", "statusAt3727a72": "OPEN; local static/loopback ingress contracts only" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD01", "statusAtf17dba2": "OPEN; local static/loopback ingress contracts only" }, "classification": { "A_phase9": "operator release gate", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate-specific ingress compatibility proof", "D_production": "BLOCKED pending actual ingress identity", "E_debt": "open operational qualification" } }, { "id": "RD02", "aliases": [], "criterion": "NOT TESTED: independently verified off-disk complete backup/restore", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 10 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Critical if recovery needed: irreversible loss", "dependency": "Production", "ownerAndRequiredClosure": "Release operator: isolated restore of DB/files/CVs/keys/tombstones, hashes and recovery rehearsal", "status": "NOT TESTED: independently verified off-disk complete backup/restore", "gates": { "phase9": "no independent veto of isolated functional QA", "phase10": "candidate restore dependency", "production": "BLOCKED backup/restore", "debt": "open operational qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD02", "statusAt3727a72": "NOT TESTED: independently verified off-disk complete backup/restore" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD02", "statusAtf17dba2": "NOT TESTED: independently verified off-disk complete backup/restore" }, "classification": { "A_phase9": "no independent veto of isolated functional QA", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate restore dependency", "D_production": "BLOCKED backup/restore", "E_debt": "open operational qualification" } }, { "id": "RD03", "aliases": [ "F19" ], "criterion": "PARTIAL: SQLite and generated MariaDB SQL; MariaDB runtime unavailable", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 11 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true }, { "path": "docs/database/mariadb-standardisation/ACCEPTANCE.md", "kind": "historical superseding bounded provider evidence", "historicalBaselineEvidence": true }, { "path": "docs/database/mariadb-standardisation/validation.json", "kind": "historical raw result index", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "actual current source-bound independent lanes" } ], "severityAndImpact": "High: schema/provider/startup disagreement", "dependency": "Production; provider acceptance", "ownerAndRequiredClosure": "Database owner: actual approved MariaDB migration, restart, CRUD/constraints/concurrency and effective configuration proof", "status": "Current actual MariaDB lane and bounded sustained-workload results are in validation.json. Runtime/provider scope only; no hosted execution, capacity SLA, production migration or restart claim.", "gates": { "phase9": "Local bounded provider qualification PASS; deployed parity remains independent.", "phase10": "provider migration proof per candidate", "production": "BLOCKED exact deployed parity/migrations", "debt": "partial broad provider qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD03", "statusAt3727a72": "Fresh MariaDB12.2.2:35 integration cases,1 native recovery,2 HTTP cases and15-minute workload PASS; broader deployed parity remains PARTIAL." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD03", "statusAtf17dba2": "Fresh MariaDB12.2.2:35 integration cases,1 native recovery,2 HTTP cases and15-minute workload PASS; broader deployed parity remains PARTIAL." }, "classification": { "A_phase9": "Local bounded provider qualification PASS; deployed parity remains independent.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "provider migration proof per candidate", "D_production": "BLOCKED exact deployed parity/migrations", "E_debt": "partial broad provider qualification" } }, { "id": "RD04", "aliases": [], "criterion": "NOT TESTED: intended Linux rollback", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 12 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High: failed release cannot be reversed", "dependency": "Production", "ownerAndRequiredClosure": "Release operator: isolated failure/rollback rehearsal using complete prior images/configuration/recovery set", "status": "NOT TESTED: intended Linux rollback", "gates": { "phase9": "no independent veto of isolated functional QA", "phase10": "rollback proof per candidate", "production": "BLOCKED actual rollback", "debt": "open operational qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD04", "statusAt3727a72": "NOT TESTED: intended Linux rollback" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD04", "statusAtf17dba2": "NOT TESTED: intended Linux rollback" }, "classification": { "A_phase9": "no independent veto of isolated functional QA", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "rollback proof per candidate", "D_production": "BLOCKED actual rollback", "E_debt": "open operational qualification" } }, { "id": "RD05", "aliases": [], "criterion": "OPEN: old runner crashes/deployed identity not superseded", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 13 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true }, { "kind": "current root-reported hosted investigation; final evidence pending root CI report", "detail": "Merged host Docker socket binding found. No privileged socket fallback or production host access authorized; explicit blocked workflow gate retained.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/ci-isolation.json", "kind": "fresh read-only baseline runtime/API evidence, no hosted job dispatched", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/ci-assessment.json", "kind": "current read-only infrastructure assessment; permission limits retained" } ], "severityAndImpact": "High: healthy endpoint may serve wrong release", "dependency": "Production", "ownerAndRequiredClosure": "CI/operator owner: prove isolated private service execution and lifecycle without host socket/privileges/public ports/production coupling, then successful exact hosted TRX and cleanup. Keep workflow BLOCKED while isolation cannot be proven. Separate deployed runner/storage/release identity remains unqualified.", "status": "BLOCKED: dedicated label queued/unassigned in observed metadata; effective current runner isolation/lifecycle unverified;0 hosted MariaDB cases.", "gates": { "phase9": "Documented operator-owned hosted-automation qualification; local development decision independent", "phase10": "Hosted evidence absent; independent affected testpass/unused-route/inventory criteria remain required.", "production": "BLOCKED pending isolated runner and release requirements", "debt": "open CI/release qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD05", "statusAt3727a72": "Hosted MariaDB BLOCKED: inspected847/849 fail first isolation gate; no database tests. Existing host network/socket binding is not safe service isolation." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD05", "statusAtf17dba2": "Hosted MariaDB BLOCKED: historical853/job1743 prepares host-network/socket job and exits first guard; fresh25October metadata has no new database run/private isolation proof. Live HostConfig not re-inspected." }, "classification": { "A_phase9": "Documented operator-owned hosted-automation qualification; local development decision independent", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "Hosted evidence absent; independent affected testpass/unused-route/inventory criteria remain required.", "D_production": "BLOCKED pending isolated runner and release requirements", "E_debt": "open CI/release qualification" } }, { "id": "RD06", "aliases": [], "criterion": "PARTIAL: finite axe/DOM/keyboard evidence; human checks open", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 14 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High accessibility impact", "dependency": "Acceptance qualification; production", "ownerAndRequiredClosure": "Accessibility tester: [M09-01\u201306](../p9-03/MANUAL_CHECKLIST.md), contextual contrast/reader evidence; triage every applicable incomplete", "status": "PARTIAL: finite axe/DOM/keyboard evidence; human checks open", "gates": { "phase9": "manual carry-forward allowed only as explicit release qualification (REQUEST \u00a76), no human PASS", "phase10": "affected functionality must remain satisfied; no deletion permission", "production": "BLOCKED applicable human accessibility", "debt": "open human qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD06", "statusAt3727a72": "PARTIAL: finite axe/DOM/keyboard evidence; human checks open" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD06", "statusAtf17dba2": "PARTIAL: finite axe/DOM/keyboard evidence; human checks open" }, "classification": { "A_phase9": "manual carry-forward allowed only as explicit release qualification (REQUEST \u00a76), no human PASS", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality must remain satisfied; no deletion permission", "D_production": "BLOCKED applicable human accessibility", "E_debt": "open human qualification" } }, { "id": "RD07", "aliases": [], "criterion": "NOT TESTED: physical input/AT/alternate browsers/forced colors", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 15 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium/High usability exclusion", "dependency": "Acceptance qualification; production", "ownerAndRequiredClosure": "Product/accessibility owners: actual supported devices/browser/input versions and complete workflows", "status": "NOT TESTED: physical input/AT/alternate browsers/forced colors", "gates": { "phase9": "manual carry-forward release qualification; no physical/AT PASS", "phase10": "affected functionality proof still required", "production": "BLOCKED supported device/browser/input acceptance", "debt": "open human qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD07", "statusAt3727a72": "NOT TESTED: physical input/AT/alternate browsers/forced colors" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD07", "statusAtf17dba2": "NOT TESTED: physical input/AT/alternate browsers/forced colors" }, "classification": { "A_phase9": "manual carry-forward release qualification; no physical/AT PASS", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof still required", "D_production": "BLOCKED supported device/browser/input acceptance", "E_debt": "open human qualification" } }, { "id": "RD08", "aliases": [ "C11", "P5-13" ], "criterion": "DEFERRED; no new model qualification or activation", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 16 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High: unqualified proposal semantics", "dependency": "AI activation; production", "ownerAndRequiredClosure": "Separate AI qualification owner: production-equivalent identity/inference, original 366-call protocol, independent human semantics, review UI/integration evidence", "status": "DEFERRED; no new model qualification or activation", "gates": { "phase9": "C11 explicitly withheld; separate scope", "phase10": "no activation/deletion eligibility", "production": "BLOCKED AI activation unless separately qualified", "debt": "DEFERRED product/model scope", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD08", "statusAt3727a72": "DEFERRED; no new model qualification or activation" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD08", "statusAtf17dba2": "DEFERRED; no new model qualification or activation" }, "classification": { "A_phase9": "C11 explicitly withheld; separate scope", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "no activation/deletion eligibility", "D_production": "BLOCKED AI activation unless separately qualified", "E_debt": "DEFERRED product/model scope" } }, { "id": "RD09", "aliases": [], "criterion": "Local withheld-operation contract retained; deployed withholding NOT TESTED", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 17 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High: unreviewed AI write/external request", "dependency": "Production / AI", "ownerAndRequiredClosure": "Release/AI owners: keep 503/no-provider/no-write guards, verify actual deployment independently", "status": "Local withheld-operation contract retained; deployed withholding NOT TESTED", "gates": { "phase9": "local withholding contract needs fresh successor", "phase10": "retain withholding and callers", "production": "BLOCKED deployed withholding untested", "debt": "open deployment qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD09", "statusAt3727a72": "Local withheld-operation contract retained; deployed withholding NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD09", "statusAtf17dba2": "Local withheld-operation contract retained; deployed withholding NOT TESTED" }, "classification": { "A_phase9": "local withholding contract needs fresh successor", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain withholding and callers", "D_production": "BLOCKED deployed withholding untested", "E_debt": "open deployment qualification" } }, { "id": "RD10", "aliases": [], "criterion": "PARTIAL: native local PDF corpus and visual sheets; deployed fonts/photo/print absent", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 18 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/pdf-static-checkpoint.json", "kind": "focused actual Linux successor, not final full regression", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/validation.json", "kind": "final source-bound actual local execution", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "actual current source-bound independent lanes" } ], "severityAndImpact": "Medium/High document reliability", "dependency": "Acceptance qualification; production", "ownerAndRequiredClosure": "Document owner: intended Linux/fonts/photo/crop/print and alternate-browser proof, original bytes/geometry", "status": "PASS within current original Linux24 and supplemental2 scope; Windows results separate; no physical-print/human qualification.", "gates": { "phase9": "Current original Linux/Windows and supplemental output PASS; human physical-print qualifications remain release gates.", "phase10": "affected rendering must preserve output contracts", "production": "BLOCKED intended output environment", "debt": "open output qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD10", "statusAt3727a72": "Windows24 fixtures/60 pages PASS; Linux13/24 fixtures PASS,65 exported versus60 expected pages: P9-REQUAL-PDF01 OPEN; physical printing NOT TESTED." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD10", "statusAtf17dba2": "PARTIAL overall: final original Windows24/24 and Linux24/24 fixtures/60pages each PASS; supplemental Linux2/2 (2+8pages) PASS. Human/physical printing/deployed output NOT TESTED." }, "classification": { "A_phase9": "Current original Linux/Windows and supplemental output PASS; human physical-print qualifications remain release gates.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected rendering must preserve output contracts", "D_production": "BLOCKED intended output environment", "E_debt": "open output qualification" } }, { "id": "RD11", "aliases": [], "criterion": "Scoped SQLite bootstrap/WAL mechanism repaired before entry; broad reliability remains PARTIAL", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 19 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High if preference save fails", "dependency": "Reliability qualification", "ownerAndRequiredClosure": "Database owner: retain held-reader/write proof, distinguish old reproduced mechanism from unproven provider/contention cases", "status": "Scoped SQLite bootstrap/WAL mechanism repaired before entry; broad reliability remains PARTIAL", "gates": { "phase9": "scoped WAL repair retained; broad reliability qualification open", "phase10": "retain provider/concurrency safeguards", "production": "provider contention remains qualified", "debt": "retained broader reliability", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD11", "statusAt3727a72": "Scoped SQLite bootstrap/WAL mechanism repaired before entry; broad reliability remains PARTIAL" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD11", "statusAtf17dba2": "Scoped SQLite bootstrap/WAL mechanism repaired before entry; broad reliability remains PARTIAL" }, "classification": { "A_phase9": "scoped WAL repair retained; broad reliability qualification open", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain provider/concurrency safeguards", "D_production": "provider contention remains qualified", "E_debt": "retained broader reliability" } }, { "id": "RD12", "aliases": [], "criterion": "PARTIAL: notification draft/failure recovery and SQLite tests; complete contention/provider behavior unqualified", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 20 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium: settings may not persist", "dependency": "Reliability qualification", "ownerAndRequiredClosure": "Database/settings owners: intended-provider overlapping writes and failure/reload recovery with no data loss", "status": "PARTIAL: notification draft/failure recovery and SQLite tests; complete contention/provider behavior unqualified", "gates": { "phase9": "no newly established failure; provider overlap remains qualification", "phase10": "candidate must preserve drafts and recovery", "production": "intended-provider qualification open", "debt": "retained reliability", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD12", "statusAt3727a72": "PARTIAL: notification draft/failure recovery and SQLite tests; complete contention/provider behavior unqualified" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD12", "statusAtf17dba2": "PARTIAL: notification draft/failure recovery and SQLite tests; complete contention/provider behavior unqualified" }, "classification": { "A_phase9": "no newly established failure; provider overlap remains qualification", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate must preserve drafts and recovery", "D_production": "intended-provider qualification open", "E_debt": "retained reliability" } }, { "id": "RD13", "aliases": [], "criterion": "Historical Rules 500 mechanism remains UNCONFIRMED", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 21 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium: failed save/draft retention", "dependency": "Reliability qualification", "ownerAndRequiredClosure": "Rules/API owners: original failure trace plus controlled causal reproduction and successor regression; passing retry alone insufficient", "status": "Historical Rules 500 mechanism remains UNCONFIRMED", "gates": { "phase9": "historical causal mechanism UNCONFIRMED; not relabelled resolved", "phase10": "candidate must preserve Rules recovery", "production": "no complete reliability claim", "debt": "unconfirmed historical observation", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD13", "statusAt3727a72": "Historical Rules 500 mechanism remains UNCONFIRMED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD13", "statusAtf17dba2": "Historical Rules 500 mechanism remains UNCONFIRMED" }, "classification": { "A_phase9": "historical causal mechanism UNCONFIRMED; not relabelled resolved", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate must preserve Rules recovery", "D_production": "no complete reliability claim", "E_debt": "unconfirmed historical observation" } }, { "id": "RD14", "aliases": [], "criterion": "Historical command/dialog focus incident remains UNCONFIRMED; settled drawer proof is a separate finite result", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 22 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium/High keyboard access", "dependency": "Accessibility qualification", "ownerAndRequiredClosure": "Shared UI owner: preserve original observations, reproduce affected modal transitions and actual reader/trap/return behavior", "status": "Historical command/dialog focus incident remains UNCONFIRMED; settled drawer proof is a separate finite result", "gates": { "phase9": "historical causal mechanism UNCONFIRMED; human focus qualification", "phase10": "candidate must preserve trap/return/error states", "production": "applicable human checks open", "debt": "unconfirmed historical observation", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD14", "statusAt3727a72": "Historical command/dialog focus incident remains UNCONFIRMED; settled drawer proof is a separate finite result" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD14", "statusAtf17dba2": "Historical command/dialog focus incident remains UNCONFIRMED; settled drawer proof is a separate finite result" }, "classification": { "A_phase9": "historical causal mechanism UNCONFIRMED; human focus qualification", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate must preserve trap/return/error states", "D_production": "applicable human checks open", "E_debt": "unconfirmed historical observation" } }, { "id": "RD15", "aliases": [], "criterion": "Historical intermittent CV section expansion cause unproven", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 23 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium: editing disrupted", "dependency": "Reliability qualification", "ownerAndRequiredClosure": "CV owner: retain failed observation and reproduce causally before closing; do not weaken expansion assertions", "status": "Historical intermittent CV section expansion cause unproven", "gates": { "phase9": "historical cause UNCONFIRMED; no invented current defect", "phase10": "candidate must preserve expansion state", "production": "broader reliability qualification", "debt": "unconfirmed historical observation", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD15", "statusAt3727a72": "Historical intermittent CV section expansion cause unproven" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD15", "statusAtf17dba2": "Historical intermittent CV section expansion cause unproven" }, "classification": { "A_phase9": "historical cause UNCONFIRMED; no invented current defect", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate must preserve expansion state", "D_production": "broader reliability qualification", "E_debt": "unconfirmed historical observation" } }, { "id": "RD16", "aliases": [], "criterion": "Scoped company-error repair retained; wider reader/dialog/date contract PARTIAL", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 24 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium: recovery/access", "dependency": "Preservation qualification", "ownerAndRequiredClosure": "Company/UI owners: native failed-save \u2192 retained draft \u2192 successful retry plus human dialogue checks", "status": "Scoped company-error repair retained; wider reader/dialog/date contract PARTIAL", "gates": { "phase9": "scoped repair historical PASS; broader human contract open", "phase10": "candidate-specific recovery proof", "production": "human/provider qualification open", "debt": "partial preserved contract", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD16", "statusAt3727a72": "Scoped company-error repair retained; wider reader/dialog/date contract PARTIAL" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD16", "statusAtf17dba2": "Scoped company-error repair retained; wider reader/dialog/date contract PARTIAL" }, "classification": { "A_phase9": "scoped repair historical PASS; broader human contract open", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate-specific recovery proof", "D_production": "human/provider qualification open", "E_debt": "partial preserved contract" } }, { "id": "RD17", "aliases": [], "criterion": "Board remains O(N); 200/1,000-job and new bounded 250-job observations are finite", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 25 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "actual current source-bound independent lanes" } ], "severityAndImpact": "Medium: growing rendering cost", "dependency": "Performance qualification", "ownerAndRequiredClosure": "Jobs owner: agreed budget, bounded sustained profile and CPU/frame attribution before optimization; preserve full membership", "status": "Current actual MariaDB lane and bounded sustained-workload results are in validation.json. Runtime/provider scope only; no hosted execution, capacity SLA, production migration or restart claim.", "gates": { "phase9": "Finite15-minute local MariaDB workload PASS; no capacity SLA.", "phase10": "measured bottleneck and full membership before optimization", "production": "no production capacity/SLA claim", "debt": "O(N) known design limit", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD17", "statusAt3727a72": "Finite exclusive MariaDB workload PASS:250 applications,2 readers,900006ms,3382 reads,20 navigations,zero failures and selected exact-state checks; no capacity SLA." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD17", "statusAtf17dba2": "PARTIAL: prior exclusive15-minute MariaDB workload passed at3727a72; current remediation is not a new workload/capacity SLA. Independent bounded performance qualification retained." }, "classification": { "A_phase9": "Finite15-minute local MariaDB workload PASS; no capacity SLA.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "measured bottleneck and full membership before optimization", "D_production": "no production capacity/SLA claim", "E_debt": "O(N) known design limit" } }, { "id": "RD18", "aliases": [], "criterion": "NOT TESTED: physical drag/drop/cancel/browser variants", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 26 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium access/workflow risk", "dependency": "Human/device qualification", "ownerAndRequiredClosure": "Input/device tester: real Board/CV selection and named alternatives, no hidden result cap", "status": "NOT TESTED: physical drag/drop/cancel/browser variants", "gates": { "phase9": "manual carry-forward release qualification; physical behavior not passed", "phase10": "retain accessible reorder alternatives", "production": "BLOCKED physical input variants", "debt": "open device qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD18", "statusAt3727a72": "NOT TESTED: physical drag/drop/cancel/browser variants" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD18", "statusAtf17dba2": "NOT TESTED: physical drag/drop/cancel/browser variants" }, "classification": { "A_phase9": "manual carry-forward release qualification; physical behavior not passed", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain accessible reorder alternatives", "D_production": "BLOCKED physical input variants", "E_debt": "open device qualification" } }, { "id": "RD19", "aliases": [], "criterion": "DEFERRED: reviewed `followMode` consumer", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 27 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium workflow limitation", "dependency": "Deferred scope; not silently completed", "ownerAndRequiredClosure": "Product/mail owner: separate explicit mode\u2192review/action/fallback design; no auto-send or uncertain resend", "status": "DEFERRED: reviewed `followMode` consumer", "gates": { "phase9": "accepted deferred reviewed consumer; no activation", "phase10": "ineligible to remove metadata/paths", "production": "separate activation gate", "debt": "DEFERRED product scope", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD19", "statusAt3727a72": "DEFERRED: reviewed `followMode` consumer" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD19", "statusAtf17dba2": "DEFERRED: reviewed `followMode` consumer" }, "classification": { "A_phase9": "accepted deferred reviewed consumer; no activation", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "ineligible to remove metadata/paths", "D_production": "separate activation gate", "E_debt": "DEFERRED product scope" } }, { "id": "RD20", "aliases": [], "criterion": "Optional P5-05 quick preview DEFERRED; Phase 8 Dashboard scope was delivered separately", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 28 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Low optional scope", "dependency": "Deferred scope", "ownerAndRequiredClosure": "Product owner: explicit separate brief; retain existing full workspace and all routes", "status": "Optional P5-05 quick preview DEFERRED; Phase 8 Dashboard scope was delivered separately", "gates": { "phase9": "optional preview DEFERRED; full workspace retained", "phase10": "no deletion of full workspace/aliases", "production": "no independent veto while optional scope remains deferred", "debt": "DEFERRED optional scope", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD20", "statusAt3727a72": "Optional P5-05 quick preview DEFERRED; Phase 8 Dashboard scope was delivered separately" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD20", "statusAtf17dba2": "Optional P5-05 quick preview DEFERRED; Phase 8 Dashboard scope was delivered separately" }, "classification": { "A_phase9": "optional preview DEFERRED; full workspace retained", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "no deletion of full workspace/aliases", "D_production": "no independent veto while optional scope remains deferred", "E_debt": "DEFERRED optional scope" } }, { "id": "RD21", "aliases": [], "criterion": "OPEN: canonical Career/generic job revision contract and creation-intent idempotency", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 29 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true }, { "path": "docs/database/mariadb-standardisation/ACCEPTANCE.md", "kind": "historical superseding bounded provider evidence", "historicalBaselineEvidence": true }, { "path": "docs/database/mariadb-standardisation/validation.json", "kind": "historical raw result index", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/PLAN.md", "kind": "strict stale-draft autosave409/200 fixture and focused recovery successor; no full current-stage provider claim", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/validation.json", "kind": "final source-bound actual local execution", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "actual current source-bound independent lanes" } ], "severityAndImpact": "High: stale editor can overwrite acknowledged edits", "dependency": "Data-integrity acceptance; production", "ownerAndRequiredClosure": "Domain/API/UI owners: separate bounded contract issue covering both callers, server compare-and-swap/transaction semantics, conflict recovery and backward compatibility; characterization is not safety acceptance", "status": "RESOLVED within original tested save/concurrency scope; current backend/MariaDB/recovery companions in validation.json; creation idempotency is separate.", "gates": { "phase9": "Original six save/concurrency requirements RESOLVED in tested scope; separate creation debt retained.", "phase10": "no compatibility removal without all-caller/rollback proof", "production": "BLOCKED deployment/rollback parity; no historical recovery claim", "debt": "creation-intent idempotency OPEN, separate concern", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD21", "statusAt3727a72": "RESOLVED within original six save/concurrency clauses and tested scope; fresh source-bound provider/browser/regression evidence. Creation-intent idempotency remains separate OPEN debt." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD21", "statusAtf17dba2": "RESOLVED within original six save/concurrency requirements; final35 MariaDB tests,1 MariaDB recovery,2 HTTP observations and6 separate browser companions PASS. Creation-intent idempotency remains separate OPEN debt." }, "classification": { "A_phase9": "Original six save/concurrency requirements RESOLVED in tested scope; separate creation debt retained.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "no compatibility removal without all-caller/rollback proof", "D_production": "BLOCKED deployment/rollback parity; no historical recovery claim", "E_debt": "creation-intent idempotency OPEN, separate concern" } }, { "id": "RD22", "aliases": [ "F20" ], "criterion": "NOT TESTED: enabled-worker outage recovery/durability", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 30 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High: duplicate/lost async work", "dependency": "Production / enabled producer", "ownerAndRequiredClosure": "Worker owner: isolated enabled-producer failure/restart/recovery, no-loss/no-duplicate proof before activation", "status": "NOT TESTED: enabled-worker outage recovery/durability", "gates": { "phase9": "isolated fixtures do not accept enabled producer", "phase10": "retain stable IDs and recovery paths", "production": "BLOCKED enabled-worker recovery", "debt": "open operational qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD22", "statusAt3727a72": "NOT TESTED: enabled-worker outage recovery/durability" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD22", "statusAtf17dba2": "NOT TESTED: enabled-worker outage recovery/durability" }, "classification": { "A_phase9": "isolated fixtures do not accept enabled producer", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain stable IDs and recovery paths", "D_production": "BLOCKED enabled-worker recovery", "E_debt": "open operational qualification" } }, { "id": "RD23", "aliases": [ "F21" ], "criterion": "OPEN: actual calendar offset/DST/date-only semantics", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 31 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium: wrong event time", "dependency": "Calendar qualification", "ownerAndRequiredClosure": "Calendar owner: dedicated boundary/DST/provider proof in authorised sandbox before semantic changes", "status": "OPEN: actual calendar offset/DST/date-only semantics", "gates": { "phase9": "actual offset/DST/date-only unqualified", "phase10": "retain calendar semantics until dedicated proof", "production": "BLOCKED calendar activation qualification", "debt": "open provider semantics", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD23", "statusAt3727a72": "OPEN: actual calendar offset/DST/date-only semantics" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD23", "statusAtf17dba2": "OPEN: actual calendar offset/DST/date-only semantics" }, "classification": { "A_phase9": "actual offset/DST/date-only unqualified", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain calendar semantics until dedicated proof", "D_production": "BLOCKED calendar activation qualification", "E_debt": "open provider semantics" } }, { "id": "RD24", "aliases": [], "criterion": "NOT TESTED: billing/deletion/retention/provider cleanup policy and configuration", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 32 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High privacy/lifecycle impact", "dependency": "Production / lifecycle activation", "ownerAndRequiredClosure": "Product/security/operator owners: approved policy, explicit destructive-action authority, isolated recovery/cleanup proof", "status": "NOT TESTED: billing/deletion/retention/provider cleanup policy and configuration", "gates": { "phase9": "policy and destructive lifecycle outside functional proof", "phase10": "no removal without approved lifecycle policy", "production": "BLOCKED policy/restore/provider cleanup", "debt": "open policy qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD24", "statusAt3727a72": "NOT TESTED: billing/deletion/retention/provider cleanup policy and configuration" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD24", "statusAtf17dba2": "NOT TESTED: billing/deletion/retention/provider cleanup policy and configuration" }, "classification": { "A_phase9": "policy and destructive lifecycle outside functional proof", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "no removal without approved lifecycle policy", "D_production": "BLOCKED policy/restore/provider cleanup", "E_debt": "open policy qualification" } }, { "id": "RD25", "aliases": [], "criterion": "PARTIAL: local SMTP/HTTP/provider contracts; actual OAuth/Turnstile/mail/calendar/model unavailable", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 33 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High identity/privacy/delivery impact", "dependency": "Provider acceptance; production", "ownerAndRequiredClosure": "Approved provider/human tester: sandbox consent/revoke/reconnect/origin/state/delivery/uncertain-attempt proof", "status": "PARTIAL: local SMTP/HTTP/provider contracts; actual OAuth/Turnstile/mail/calendar/model unavailable", "gates": { "phase9": "sandbox/provider qualifications remain; fixtures do not pass them", "phase10": "candidate must preserve auth/delivery contracts", "production": "BLOCKED applicable real provider evidence", "debt": "open provider qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD25", "statusAt3727a72": "PARTIAL: local SMTP/HTTP/provider contracts; actual OAuth/Turnstile/mail/calendar/model unavailable" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD25", "statusAtf17dba2": "PARTIAL: local SMTP/HTTP/provider contracts; actual OAuth/Turnstile/mail/calendar/model unavailable" }, "classification": { "A_phase9": "sandbox/provider qualifications remain; fixtures do not pass them", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate must preserve auth/delivery contracts", "D_production": "BLOCKED applicable real provider evidence", "E_debt": "open provider qualification" } }, { "id": "RD26", "aliases": [], "criterion": "Legacy Job/Application cutover OPEN", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 34 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High compatibility/data loss if removed", "dependency": "Phase 10 deletion eligibility; production", "ownerAndRequiredClosure": "Migration owner: expand/verify/contract, restore/rollback and all readers/writers/aliases before removal", "status": "Legacy Job/Application cutover OPEN", "gates": { "phase9": "no legacy cutover authorized", "phase10": "BLOCKED deletion until expand/verify/contract and all readers/writers", "production": "BLOCKED unqualified cutover", "debt": "open migration scope", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD26", "statusAt3727a72": "Legacy Job/Application cutover OPEN" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD26", "statusAtf17dba2": "Legacy Job/Application cutover OPEN" }, "classification": { "A_phase9": "no legacy cutover authorized", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "BLOCKED deletion until expand/verify/contract and all readers/writers", "D_production": "BLOCKED unqualified cutover", "E_debt": "open migration scope" } }, { "id": "RD27", "aliases": [], "criterion": "NOT TESTED: actual monitoring/alert/recovery coverage", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 35 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High operational detection risk", "dependency": "Production", "ownerAndRequiredClosure": "Operations owner: effective sink, alert trigger, responder/runbook and recovery observations", "status": "NOT TESTED: actual monitoring/alert/recovery coverage", "gates": { "phase9": "no independent veto of isolated functional QA", "phase10": "candidate observability proof where affected", "production": "BLOCKED actual alert/recovery", "debt": "open operational qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD27", "statusAt3727a72": "NOT TESTED: actual monitoring/alert/recovery coverage" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD27", "statusAtf17dba2": "NOT TESTED: actual monitoring/alert/recovery coverage" }, "classification": { "A_phase9": "no independent veto of isolated functional QA", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate observability proof where affected", "D_production": "BLOCKED actual alert/recovery", "E_debt": "open operational qualification" } }, { "id": "RD28", "aliases": [], "criterion": "Ongoing evidence/provenance obligation", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 36 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "High if failures are misrepresented", "dependency": "Every decision", "ownerAndRequiredClosure": "QA owner: exact source hashes/counts, original failures, no retries/skips/assertion relaxation; separate characterization from safe behavior", "status": "Ongoing evidence/provenance obligation", "gates": { "phase9": "fresh exact evidence and source binding required", "phase10": "required exact candidate evidence", "production": "required exact deployment evidence", "debt": "ongoing obligation", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "RD28", "statusAt3727a72": "Ongoing evidence/provenance obligation" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "RD28", "statusAtf17dba2": "Ongoing evidence/provenance obligation" }, "classification": { "A_phase9": "fresh exact evidence and source binding required", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "required exact candidate evidence", "D_production": "required exact deployment evidence", "E_debt": "ongoing obligation" } }, { "id": "P9-OPS-01", "aliases": [], "criterion": "Previously reported EXT4/Docker storage errors UNRECHECKED", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 37 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true } ], "severityAndImpact": "Critical if disk faults persist", "dependency": "Production", "ownerAndRequiredClosure": "Production operator only: independent storage-health/repair and recovery qualification under separate authority", "status": "Previously reported EXT4/Docker storage errors UNRECHECKED", "gates": { "phase9": "not a standalone functional defect; retain stated qualification", "phase10": "no permission to delete; affected-candidate proof", "production": "BLOCKED until stated operator closure", "debt": "retained gate", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-OPS-01", "statusAt3727a72": "Previously reported EXT4/Docker storage errors UNRECHECKED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-OPS-01", "statusAtf17dba2": "Previously reported EXT4/Docker storage errors UNRECHECKED" }, "classification": { "A_phase9": "not a standalone functional defect; retain stated qualification", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "no permission to delete; affected-candidate proof", "D_production": "BLOCKED until stated operator closure", "E_debt": "retained gate" } }, { "id": "P9-SEC-01", "aliases": [], "criterion": "Live advisories NOT REFRESHED; inherited NuGet Pkcs high/moderate retained. Local dev-only GHSA-vfj7-8cjw-p6xm policy expires at2026-11-01 00:00UTC (after31October), verified in source23October", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 38 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true }, { "kind": "current root-reported authorized advisory review; final raw ledger pending", "detail": "Root-reported live audits: System.Security.Cryptography.Pkcs8.0.1 transitively via MimeKit4.17.0, high/moderate advisories fixed8.0.2 (exact identifiers/raw audit pending final root ledger); Next16.3.8 now has three critical advisories, existing Sharp0.35.5 SVG mitigation covers one only and UI is statically exported; dev-transitive Zod4.5.4 GHSA-mrhx-c7xc-m3w5 fixed4.6.6.", "historicalBaselineEvidence": true }, { "kind": "current requalification observation, not a rewrite of inherited history", "detail": "P9-REQUAL-SEC01\u201303 carry new stable IDs, original RED security-before-pins evidence and post-pin zero-findings audit paths; root will bind raw hashes in final validation.", "historicalBaselineEvidence": true }, { "kind": "fresh Python risk observation", "detail": "P9-REQUAL-SEC04 retains locked Python critical/high provider labels and incomplete query coverage; post-pin NuGet/npm zero audits do not establish blanket security PASS.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/security/advisory-inventory.json", "kind": "109 per-advisory baseline groups, source-limited reachability,65 remediated/44 remaining", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/security/validation.json", "kind": "58 complete model-disabled sidecar cases, actual startup/uploads and bounded Linux parser supplement; focused checkpoint not final full regression", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/DISPOSITIONS.json", "kind": "current109-group and separate pytest inventory" } ], "severityAndImpact": "High dependency risk until assessed", "dependency": "Security/sidecar owner: remaining filelock protocol/cache compatibility and Torch/Transformers selected-model artifact/runtime qualification; no large model download authorized.", "ownerAndRequiredClosure": "Security/sidecar owners: complete narrowly scoped filelock cache/protocol compatibility work, select a patched compatible CPU Torch/Transformers graph, verify immutable model/checkpoint identities and startup/inference/extraction contracts in an approved environment; serious residual risk requires explicit owner disposition. No automatic waiver, model change/download or production action.", "status": "CONDITIONAL PASS: original109 dispositions99 fixed/version-verified and10 scoped not affected; separate pytest advisory fixed; actual model and final scan evidence in current package.", "gates": { "phase9": "Conditional development qualification only", "phase10": "Unwaived security uncertainty and affected functionality/testpass criteria remain; no cleanup authority.", "production": "BLOCKED: no deployed graph/cache/image or release qualification", "debt": "Remaining serious uncertainty is not accepted optional debt. Individual source-limited assessments remain visible.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-SEC-01", "statusAt3727a72": "Compatible NuGet/npm repairs and fresh regression PASS; Python P9-REQUAL-SEC04 OPEN, coverage INCOMPLETE. No blanket security PASS." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-SEC-01", "statusAtf17dba2": "BLOCKED: five exact compatible/parser pins remove65/109 baseline advisory alias groups;44 remain (filelock3,Torch19,Transformers22), individually assessed without owner risk acceptance. Full model-runtime qualification unavailable." }, "classification": { "A_phase9": "Conditional development qualification only", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "Unwaived security uncertainty and affected functionality/testpass criteria remain; no cleanup authority.", "D_production": "BLOCKED: no deployed graph/cache/image or release qualification", "E_debt": "Remaining serious uncertainty is not accepted optional debt. Individual source-limited assessments remain visible." } }, { "id": "P9-PUB-01", "aliases": [], "criterion": "Initial HTTP502 blockage recovered on23October; all checkpoint ancestors published in normal push; direct feature equality verified at `0fb108bd673ea91749f6fa057295e5b6d15d557f`", "source": [ { "path": "docs/redesign/phase-9/RISKS.md", "line": 39 } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical assessment", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "Resolved for published checkpoint; final commit still needs its own direct equality proof", "dependency": "Final publication / handoff completeness", "ownerAndRequiredClosure": "QA: retain failed attempts and verify each subsequent normal push; no force push", "status": "Normal checkpoint pushes22ef8d0/30e251a verified. Final evidence commit/remote/clean-tree/main receipt required and recorded in publication ledger/final delivery; no force push or merge.", "gates": { "phase9": "not a standalone functional defect; retain stated qualification", "phase10": "no permission to delete; affected-candidate proof", "production": "BLOCKED until stated operator closure", "debt": "retained gate", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-PUB-01", "statusAt3727a72": "Normal checkpoint pushes verified through7092697; final publication follows ledger and direct remote receipt. No force-push or main change." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-PUB-01", "statusAtf17dba2": "Remediation checkpoints normally published throughb313e20 as reported in execution ledger; final commit/remote/clean-tree verification remains root publication responsibility." }, "classification": { "A_phase9": "not a standalone functional defect; retain stated qualification", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "no permission to delete; affected-candidate proof", "D_production": "BLOCKED until stated operator closure", "E_debt": "retained gate" } }, { "id": "P9-T01", "criterion": "Medium test reliability: parser descendant test could time out before it had a descendant", "source": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "anchor": "P9-T01" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "kind": "historical defect/reproduction/closure record", "detail": "Entry sidecar 55 pass/1 fail (missing PID); isolated run passes; explicit slow startup reproduces the race. Fixture now waits for its child PID before the unchanged 200 ms deadline. Real process-tree kill and HTTP 504 assertions retained. Focused green and full 56/56 successor. No parser product change.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium test reliability: parser descendant test could time out before it had a descendant", "dependency": "Resolved in tested Windows environment; Linux run remains separate.", "ownerAndRequiredClosure": "QA; `.artifacts/phase9/sidecar-entry-failed.*`, `sidecar-fixture-red.*`, `sidecar-fixture-green.*`, `sidecar.xml`", "status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.", "gates": { "phase9": "fresh affected regression required", "phase10": "candidate proof only; no cleanup authority", "production": "does not clear independent release gates", "debt": "Resolved in tested Windows environment; Linux run remains separate.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-T01", "statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-T01", "statusAtf17dba2": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "classification": { "A_phase9": "fresh affected regression required", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate proof only; no cleanup authority", "D_production": "does not clear independent release gates", "E_debt": "Resolved in tested Windows environment; Linux run remains separate." } }, { "id": "P9-L01", "criterion": "Low localisation defect: Admin grid vendor controls appear in English in Bokm\u00e5l", "source": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "anchor": "P9-L01" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "kind": "historical defect/reproduction/closure record", "detail": "Sole DataGrid owner omitted localeText. New English desktop test passes while Bokm\u00e5l fails to find \u201cRader per side:\u201d. Reuse installed `nbNO` locale in AdminUsersPage. Focused 12/12 green; first integrated Jest919/104 and native desktop matrix green; final complete successors recorded in validation.json.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "Low localisation defect: Admin grid vendor controls appear in English in Bokm\u00e5l", "dependency": "Resolved in observed local integration; no authorisation, pagination or data contract change.", "ownerAndRequiredClosure": "Frontend; `admin-users-page.test.tsx`, `AdminUsersPage.tsx`; retained RED/GREEN logs/JSON", "status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.", "gates": { "phase9": "fresh affected regression required", "phase10": "candidate proof only; no cleanup authority", "production": "does not clear independent release gates", "debt": "Resolved in observed local integration; no authorisation, pagination or data contract change.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-L01", "statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-L01", "statusAtf17dba2": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "classification": { "A_phase9": "fresh affected regression required", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate proof only; no cleanup authority", "D_production": "does not clear independent release gates", "E_debt": "Resolved in observed local integration; no authorisation, pagination or data contract change." } }, { "id": "P9-V01", "criterion": "Medium visual defect: wrapped public h2 lines overlap at320px in EN/NB", "source": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "anchor": "P9-V01" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "kind": "historical defect/reproduction/closure record", "detail": "Four larger h2 owners inherited a fixed body line height. Original native geometry2/2 RED; explicit lineHeight1.4 now2/2 GREEN across16 width/theme/locale vectors; independent EN/light and NB/dark PNG inspection confirms separation. Intermediate1.2 still failed unchanged geometry assertions and was superseded.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium visual defect: wrapped public h2 lines overlap at320px in EN/NB", "dependency": "Bounded fix verified by native geometry/build; the complete final 362-case ordinary successor also passed.", "ownerAndRequiredClosure": "Frontend; `LandingPage.tsx`, new `landing-presentation.spec.ts`; `landing-red`, `landing-qualified`, `landing-accepted` raw reports", "status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.", "gates": { "phase9": "fresh affected regression required", "phase10": "candidate proof only; no cleanup authority", "production": "does not clear independent release gates", "debt": "Bounded fix verified by native geometry/build; the complete final 362-case ordinary successor also passed.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-V01", "statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-V01", "statusAtf17dba2": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "classification": { "A_phase9": "fresh affected regression required", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate proof only; no cleanup authority", "D_production": "does not clear independent release gates", "E_debt": "Bounded fix verified by native geometry/build; the complete final 362-case ordinary successor also passed." } }, { "id": "P9-V02", "criterion": "Wrapped bottom CTA title must keep separate readable lines across EN/NB, themes and narrow widths", "source": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "line": 51, "anchor": "P9-V02" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical separate bottom CTA repair and complete 362-case ordinary successor", "detail": "Existing bottom CTA owner inherited fixed body line height; explicit1.4 repair retains exact translated CTA plus all four h2s in both native landing cases. Both languages failed before and passed after. Original-width inspection of all four320px green images retained.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "Medium visual defect: wrapped bottom CTA title lines overlapped", "dependency": "LandingPage bottom CTA owner and landing-presentation.spec.ts; exact EN/NB, theme/width geometry and original image evidence", "ownerAndRequiredClosure": "Frontend/QA: preserve existing LandingPage lineHeight1.4 and exact CTA+heading geometry assertions; qualify fresh complete landing and ordinary successors on frozen source, retain original RED/GREEN evidence and native-width images", "status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.", "gates": { "phase9": "fresh affected regression required", "phase10": "candidate proof only; no cleanup authority", "production": "does not clear independent release gates", "debt": "bounded CTA repair separate from P9-V01 four-h2 repair", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-V02", "statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-V02", "statusAtf17dba2": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "classification": { "A_phase9": "fresh affected regression required", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate proof only; no cleanup authority", "D_production": "does not clear independent release gates", "E_debt": "bounded CTA repair separate from P9-V01 four-h2 repair" } }, { "id": "P9-L02", "criterion": "Low linguistic residual: stored event type `Created` appears in Bokm\u00e5l job history/audit", "source": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "anchor": "P9-L02" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "kind": "historical defect/reproduction/closure record", "detail": "Rendered route comparison detects18 occurrences across the matrix; raw stored metadata is not a missing translation key. Do not translate authored/provider content indiscriminately.", "historicalBaselineEvidence": true } ], "severityAndImpact": "Low linguistic residual: stored event type `Created` appears in Bokm\u00e5l job history/audit", "dependency": "Retained nonblocking development qualification; no data mutation proposed.", "ownerAndRequiredClosure": "UI/localisation owner; separately map known event enums with unknown-value fallback and history/audit tests; human wording review", "status": "RETAINED low development debt", "gates": { "phase9": "nonblocking development debt with visible limit", "phase10": "candidate proof only; no cleanup authority", "production": "does not clear independent release gates", "debt": "Retained nonblocking development qualification; no data mutation proposed.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-L02", "statusAt3727a72": "RETAINED low development debt" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-L02", "statusAtf17dba2": "RETAINED low development debt" }, "classification": { "A_phase9": "nonblocking development debt with visible limit", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate proof only; no cleanup authority", "D_production": "does not clear independent release gates", "E_debt": "Retained nonblocking development qualification; no data mutation proposed." } }, { "id": "P9-T02", "criterion": "Low test compatibility: existing Admin pagination fixture hard-coded the English vendor accessible name in Bokm\u00e5l mode", "source": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "anchor": "P9-T02" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "kind": "historical defect/reproduction/closure record", "detail": "First native shard97pass/1fail: no button named \u201cGo to next page\u201d in NB. The installed locale exposes \u201cG\u00e5 til neste side\u201d. Locator now uses installed enUS/nbNO pagination names; the six original width/locale/theme, long-identity, page-change, focus/reachability and no-write assertions remain. Focused 1/1 green; the final isolated 98-case shard and complete 362-case successor passed.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "Low test compatibility: existing Admin pagination fixture hard-coded the English vendor accessible name in Bokm\u00e5l mode", "dependency": "Test-only repair; no product or authorisation change.", "ownerAndRequiredClosure": "QA; `phase7-admin-users.spec.ts`; original shard report/trace and `admin-grid-green` retained. Other English-name callers belong to the separate English JobTable owner and remain unchanged.", "status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.", "gates": { "phase9": "fresh affected regression required", "phase10": "candidate proof only; no cleanup authority", "production": "does not clear independent release gates", "debt": "Test-only repair; no product or authorisation change.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-T02", "statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-T02", "statusAtf17dba2": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "classification": { "A_phase9": "fresh affected regression required", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate proof only; no cleanup authority", "D_production": "does not clear independent release gates", "E_debt": "Test-only repair; no product or authorisation change." } }, { "id": "P9-PERF-01", "criterion": "Low duplicate report work: shell and Dashboard each initially read reminders", "source": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "anchor": "P9-PERF-01" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-06/DEFECTS.md", "kind": "historical defect/reproduction/closure record", "detail": "Phase 8 source/network diagnosis retained. Phase 9 request-count evidence must distinguish initial duplicate reads from additional reads during editing.", "historicalBaselineEvidence": true } ], "severityAndImpact": "Low duplicate report work: shell and Dashboard each initially read reminders", "dependency": "Accepted existing development debt; no Phase 10 implementation here.", "ownerAndRequiredClosure": "Shared reminder read owner; measured benefit and independent shell/dashboard failure/loading tests before consolidation.", "status": "RETAINED low development debt", "gates": { "phase9": "nonblocking development debt with visible limit", "phase10": "candidate proof only; no cleanup authority", "production": "does not clear independent release gates", "debt": "Accepted existing development debt; no Phase 10 implementation here.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-PERF-01", "statusAt3727a72": "RETAINED low development debt" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-PERF-01", "statusAtf17dba2": "RETAINED low development debt" }, "classification": { "A_phase9": "nonblocking development debt with visible limit", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "candidate proof only; no cleanup authority", "D_production": "does not clear independent release gates", "E_debt": "Accepted existing development debt; no Phase 10 implementation here." } }, { "id": "P9-T03", "criterion": "Provider-worker isolation must prevent server-originated NAV changes in preservation fixtures", "source": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "anchor": "P9-T03" }, { "path": "docs/redesign/phase-9/p9-00/worker-isolation-delta.json" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md", "kind": "historical 87 pass/1 fail then full corrected successor", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "High test isolation", "dependency": "controlled native fixture; production worker unchanged", "ownerAndRequiredClosure": "QA: retain failed run, unchanged no-write assertions, fixture config delta and fresh full successor", "status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.", "gates": { "phase9": "fresh exact fixture/case successor", "phase10": "preserve isolation and assertions", "production": "not enabled-worker acceptance", "debt": "no product fix inferred", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-T03", "statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-T03", "statusAtf17dba2": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged." }, "classification": { "A_phase9": "fresh exact fixture/case successor", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "preserve isolation and assertions", "D_production": "not enabled-worker acceptance", "E_debt": "no product fix inferred" } }, { "id": "M09-01", "criterion": "With NVDA + supported desktop browser, traverse login, Jobs, job details, Career, CV editor, Documents and Settings using headings/landmarks/forms. Repeat equivalent VoiceOver/Safari journeys.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-01 / accessibility tester" } ], "evidence": [], "severityAndImpact": "High accessibility qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "accessibility tester", "status": "NOT TESTED", "requiredClosure": "Names, roles, values, selected state, headings, reading order and errors are understandable; retain reader/version and spoken observations. No hidden background content is announced.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-01", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-01", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-02", "criterion": "Keyboard-only: skip link \u2192 navigation \u2192 commands \u2192 add/edit dialogs \u2192 job sections \u2192 CV preview/history. Open/close the mobile drawer, confirmation, select and menu repeatedly, including after errors.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-02 / accessibility tester" } ], "evidence": [], "severityAndImpact": "High accessibility qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "accessibility tester", "status": "NOT TESTED", "requiredClosure": "Visible focus, logical order, genuine traps only while modal, Escape and focus restoration; no off-screen/hidden tab stops. Record any transition-specific failure.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-02", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-02", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-03", "criterion": "Dashboard: hide/show, Earlier/Later, size, Cancel, Reset-confirm/cancel, failed Save, stale conflict/reload, saved empty layout recovery. Listen with a reader.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-03 / accessibility tester" } ], "evidence": [], "severityAndImpact": "High accessibility qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "accessibility tester", "status": "NOT TESTED", "requiredClosure": "Each action/position/save/error announces once and agrees with visible DOM order; pointer drag has an equivalent keyboard route.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-03", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-03", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-04", "criterion": "Inspect P9-AX-02/03 backgrounds in light/dark, focused/hover/disabled, open native select, scrolled editor and fixed chrome. Measure actual foreground/background paint.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-04 / accessibility tester" } ], "evidence": [], "severityAndImpact": "High accessibility qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "accessibility tester", "status": "NOT TESTED", "requiredClosure": "Applicable normal text \u22654.5:1, large text \u22653:1 and necessary UI boundaries/focus \u22653:1. Record sampled colors/ratios/state. An axe incomplete is not sufficient to close the row.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-04", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-04", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-05", "criterion": "Inspect zero badges and both open/settled-closed drawer states with the accessibility tree and actual reader.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-05 / accessibility tester" } ], "evidence": [], "severityAndImpact": "High accessibility qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "accessibility tester", "status": "NOT TESTED", "requiredClosure": "Invisible zero badge is absent from announcements; live unread count remains meaningful; closed drawer is neither read nor tabbable. Runtime DOM checks cover only the tested states.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-05", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-05", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-06", "criterion": "Use actual browser 100/200/400% zoom and text-only enlargement, increased text spacing and forced colors across all significant forms, grid pagination, job sections and CV controls.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-06 / accessibility tester" } ], "evidence": [], "severityAndImpact": "High accessibility qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "accessibility tester", "status": "NOT TESTED", "requiredClosure": "Essential controls remain reachable/readable, no lost content or focus; distinguish intentional table/document scrollers from root clipping. Preserve fixed A4/Letter geometry.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-06", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-06", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-07", "criterion": "On actual phone/tablet in portrait/landscape, edit long text with software keyboard, open drawers/dialogs/selects, reorder Dashboard and Board via supported alternatives, scroll CV preview and download PDF.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-07 / product owner with physical devices" } ], "evidence": [], "severityAndImpact": "Medium/High human/provider/output qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "product owner with physical devices", "status": "NOT TESTED", "requiredClosure": "No keyboard-obscured primary action/data loss; reachable touch targets, no accidental destructive action; record device/input mode. Emulated touch does not close this.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-07", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-07", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-08", "criterion": "Read registration/recovery, validation/errors, onboarding, Dashboard editing, Jobs/Board, Career/import, CV/library, documents/mail, notifications, Settings and Admin in Bokm\u00e5l. Include long names, singular/plural, dates/numbers and accessible names.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-08 / Bokm\u00e5l reviewer" } ], "evidence": [], "severityAndImpact": "Medium/High human/provider/output qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "Bokm\u00e5l reviewer", "status": "NOT TESTED", "requiredClosure": "Natural professional Bokm\u00e5l, consistent established terms, meaningful messages. Separate authored English content, technical names and provider strings from untranslated application copy.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-08", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-08", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-09", "criterion": "Compare preview and downloaded one-/multi-page EN/NB CVs, long words, optional/photo sections and all supported templates on intended Linux/font environment and another supported browser; print representative PDFs.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-09 / document reviewer" } ], "evidence": [], "severityAndImpact": "Medium/High human/provider/output qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "document reviewer", "status": "NOT TESTED", "requiredClosure": "Legible fonts, intact glyphs/diacritics, margins, page boundaries, searchable text, photo/crop, correct language/date output and no missing/duplicated content. Retain original bytes, renderer/font versions and print observations.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-09", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-09", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "M09-10", "criterion": "In authorised sandboxes test Google/Microsoft/Turnstile, verification/reset mail delivery, mailbox reconnect/revocation, uncertain send and actual calendar timezone/DST.", "source": [ { "path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md", "anchor": "M09-10 / approved provider tester" } ], "evidence": [], "severityAndImpact": "Medium/High human/provider/output qualification", "dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md", "owner": "approved provider tester", "status": "NOT TESTED", "requiredClosure": "Correlated origin/state, explicit confirmation, no accidental resend, correct ownership/timezone. Local SMTP/HTTP fixtures do not close external-provider qualification.", "gates": { "phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "phase10": "affected functionality proof required; no deletion authority", "production": "BLOCKED until applicable genuine human/provider evidence", "debt": "open qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "M09-10", "statusAt3727a72": "NOT TESTED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "M09-10", "statusAtf17dba2": "NOT TESTED" }, "classification": { "A_phase9": "explicit carry-forward qualification under REQUEST \u00a76; no human result inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "affected functionality proof required; no deletion authority", "D_production": "BLOCKED until applicable genuine human/provider evidence", "E_debt": "open qualification" } }, { "id": "P9-AX-01", "criterion": "aria-hidden-focus: drawer/focus", "source": [ { "path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json", "anchor": "P9-AX-01" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-03/README.md", "kind": "historical finite scans and original inherited triage", "occurrences": 1, "historicalBaselineEvidence": true } ], "severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation", "dependency": "M09-01/02/04/05 as applicable", "owner": "Accessibility tester", "status": "Requires manual inspection", "requiredClosure": "Shared Dashboard drawer settled predicate, Escape focus and24Tab proof pass. Original Analytics transition cause is not proven; human reader/transition qualification remains.", "gates": { "phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "phase10": "retain accessible functionality; affected-candidate proof required", "production": "applicable manual evidence required", "debt": "human qualification; do not count repeated occurrences as unique defects", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-AX-01", "statusAt3727a72": "Requires manual inspection" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-AX-01", "statusAtf17dba2": "Requires manual inspection" }, "classification": { "A_phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain accessible functionality; affected-candidate proof required", "D_production": "applicable manual evidence required", "E_debt": "human qualification; do not count repeated occurrences as unique defects" } }, { "id": "P9-AX-02", "criterion": "color-contrast: dashboard size selector", "source": [ { "path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json", "anchor": "P9-AX-02" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-03/README.md", "kind": "historical finite scans and original inherited triage", "occurrences": 48, "historicalBaselineEvidence": true } ], "severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation", "dependency": "M09-01/02/04/05 as applicable", "owner": "Accessibility tester", "status": "Requires manual inspection", "requiredClosure": "Contextual foreground/background measurement remains required.", "gates": { "phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "phase10": "retain accessible functionality; affected-candidate proof required", "production": "applicable manual evidence required", "debt": "human qualification; do not count repeated occurrences as unique defects", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-AX-02", "statusAt3727a72": "Requires manual inspection" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-AX-02", "statusAtf17dba2": "Requires manual inspection" }, "classification": { "A_phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain accessible functionality; affected-candidate proof required", "D_production": "applicable manual evidence required", "E_debt": "human qualification; do not count repeated occurrences as unique defects" } }, { "id": "P9-AX-03", "criterion": "color-contrast: text/control with obscured background", "source": [ { "path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json", "anchor": "P9-AX-03" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-03/README.md", "kind": "historical finite scans and original inherited triage", "occurrences": 5, "historicalBaselineEvidence": true } ], "severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation", "dependency": "M09-01/02/04/05 as applicable", "owner": "Accessibility tester", "status": "Requires manual inspection", "requiredClosure": "Contextual foreground/background measurement remains required.", "gates": { "phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "phase10": "retain accessible functionality; affected-candidate proof required", "production": "applicable manual evidence required", "debt": "human qualification; do not count repeated occurrences as unique defects", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-AX-03", "statusAt3727a72": "Requires manual inspection" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-AX-03", "statusAtf17dba2": "Requires manual inspection" }, "classification": { "A_phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain accessible functionality; affected-candidate proof required", "D_production": "applicable manual evidence required", "E_debt": "human qualification; do not count repeated occurrences as unique defects" } }, { "id": "P9-AX-04", "criterion": "color-contrast: hidden badge", "source": [ { "path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json", "anchor": "P9-AX-04" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-03/README.md", "kind": "historical finite scans and original inherited triage", "occurrences": 10, "historicalBaselineEvidence": true } ], "severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation", "dependency": "M09-05 actual reader/positive count", "owner": "Accessibility tester", "status": "Not applicable in tested settled hidden state", "requiredClosure": "Four current native EN/NB theme vectors: aria-hidden=true and zero area. Actual reader/live unread-state remains separate.", "gates": { "phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "phase10": "retain accessible functionality; affected-candidate proof required", "production": "historical zero-state not applicable; live reader state still open", "debt": "human qualification; do not count repeated occurrences as unique defects", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-AX-04", "statusAt3727a72": "Not applicable in tested settled hidden state" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-AX-04", "statusAtf17dba2": "Not applicable in tested settled hidden state" }, "classification": { "A_phase9": "carry exact applicable manual qualification; no violation or human PASS inferred", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "retain accessible functionality; affected-candidate proof required", "D_production": "historical zero-state not applicable; live reader state still open", "E_debt": "human qualification; do not count repeated occurrences as unique defects" } }, { "id": "P9-REQUAL-SEC01", "reviewId": "P9-REQUAL-SEC01", "criterion": "System.Security.Cryptography.Pkcs8.0.1 transitive lock via MimeKit4.17.0 contains published high/moderate advisories", "source": [ { "path": ".artifacts/p9-requal-01/security-before-pins/", "kind": "original RED live audit artifacts; exact report hashes owned by root validation ledger" }, { "path": ".artifacts/p9-requal-01/security/nuget-advisories.log", "kind": "actual post-pin audit; root verified, hashes pending final ledger" } ], "evidence": [ { "path": ".artifacts/p9-requal-01/security/nuget-advisories.log", "kind": "post-pin live NuGet audit: zero findings", "historicalBaselineEvidence": true }, { "path": ".artifacts/p9-requal-01/security/frontend-audit.json", "kind": "post-pin npm audit: zero vulnerabilities", "historicalBaselineEvidence": true }, { "path": ".artifacts/p9-requal-01/security/npm-advisories.log", "kind": "post-pin npm audit process log", "historicalBaselineEvidence": true }, { "kind": "root-reported post-pin checks", "detail": "Backend1123/1123, MariaDB32/32, build/types/lint pass. Frontend and full browser successors pending. Do not add repeated/focused counts or qualify final source with pre-pin frontend934.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "High GHSA-846f-f764-76mx SignedCms CPU exhaustion; Moderate GHSA-2fmv-rv2c-59x7 Windows EnvelopedCms behavior. Vulnerable package presence established; application reachability/exploit not claimed.", "dependency": "compatible locked dependency correction plus complete affected/frozen-source successor qualification", "ownerAndRequiredClosure": "Dependency/QA owner: Direct compatible package override System.Security.Cryptography.Pkcs8.0.2; retain MimeKit4.17.0 ownership. Retain before/after advisory paths, raw hashes and exact lock/pin delta; complete frontend/browser and required full successors, then bind all reports to final source. Production deployed dependencies/exposure remain independent.", "status": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED.", "gates": { "phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.", "phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority", "production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained", "debt": "published vulnerable package version repaired locally; remaining evidence qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-REQUAL-SEC01", "statusAt3727a72": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-REQUAL-SEC01", "statusAtf17dba2": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED." }, "classification": { "A_phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority", "D_production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained", "E_debt": "published vulnerable package version repaired locally; remaining evidence qualification" } }, { "id": "P9-REQUAL-SEC02", "reviewId": "P9-REQUAL-SEC02", "criterion": "Next16.3.8 locked package now has three published critical advisories", "source": [ { "path": ".artifacts/p9-requal-01/security-before-pins/", "kind": "original RED live audit artifacts; exact report hashes owned by root validation ledger" }, { "path": ".artifacts/p9-requal-01/security/frontend-audit.json", "kind": "actual post-pin audit; root verified, hashes pending final ledger" } ], "evidence": [ { "path": ".artifacts/p9-requal-01/security/nuget-advisories.log", "kind": "post-pin live NuGet audit: zero findings", "historicalBaselineEvidence": true }, { "path": ".artifacts/p9-requal-01/security/frontend-audit.json", "kind": "post-pin npm audit: zero vulnerabilities", "historicalBaselineEvidence": true }, { "path": ".artifacts/p9-requal-01/security/npm-advisories.log", "kind": "post-pin npm audit process log", "historicalBaselineEvidence": true }, { "kind": "root-reported post-pin checks", "detail": "Backend1123/1123, MariaDB32/32, build/types/lint pass. Frontend and full browser successors pending. Do not add repeated/focused counts or qualify final source with pre-pin frontend934.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "Critical package advisories GHSA-2464-fhr4-w9xw, GHSA-p3m5-59mp-jv5r and GHSA-673q-mjm6-r5xr. Vulnerable package presence is distinct from reachable deployed paths; no application exploit claimed.", "dependency": "compatible locked dependency correction plus complete affected/frozen-source successor qualification", "ownerAndRequiredClosure": "Dependency/QA owner: Pin Next and eslint-config-next exactly16.4.1. Existing static export, unoptimized images and Sharp0.35.5 mitigate the image-serving path; they do not close every package advisory. Retain before/after advisory paths, raw hashes and exact lock/pin delta; complete frontend/browser and required full successors, then bind all reports to final source. Production deployed dependencies/exposure remain independent.", "status": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED.", "gates": { "phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.", "phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority", "production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained", "debt": "published vulnerable package version repaired locally; remaining evidence qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-REQUAL-SEC02", "statusAt3727a72": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-REQUAL-SEC02", "statusAtf17dba2": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED." }, "classification": { "A_phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority", "D_production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained", "E_debt": "published vulnerable package version repaired locally; remaining evidence qualification" } }, { "id": "P9-REQUAL-SEC03", "reviewId": "P9-REQUAL-SEC03", "criterion": "Dev-transitive Zod4.5.4 via eslint-plugin-react-hooks is within a vulnerable published range", "source": [ { "path": ".artifacts/p9-requal-01/security-before-pins/", "kind": "original RED live audit artifacts; exact report hashes owned by root validation ledger" }, { "path": ".artifacts/p9-requal-01/security/npm-advisories.log", "kind": "actual post-pin audit; root verified, hashes pending final ledger" } ], "evidence": [ { "path": ".artifacts/p9-requal-01/security/nuget-advisories.log", "kind": "post-pin live NuGet audit: zero findings", "historicalBaselineEvidence": true }, { "path": ".artifacts/p9-requal-01/security/frontend-audit.json", "kind": "post-pin npm audit: zero vulnerabilities", "historicalBaselineEvidence": true }, { "path": ".artifacts/p9-requal-01/security/npm-advisories.log", "kind": "post-pin npm audit process log", "historicalBaselineEvidence": true }, { "kind": "root-reported post-pin checks", "detail": "Backend1123/1123, MariaDB32/32, build/types/lint pass. Frontend and full browser successors pending. Do not add repeated/focused counts or qualify final source with pre-pin frontend934.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "High GHSA-mrhx-c7xc-m3w5 in development dependency graph. No production application reachability/exploit claimed.", "dependency": "compatible locked dependency correction plus complete affected/frozen-source successor qualification", "ownerAndRequiredClosure": "Dependency/QA owner: Use compatible existing ^4 dependency range via Zod4.6.6 override; do not add runtime functionality. Retain before/after advisory paths, raw hashes and exact lock/pin delta; complete frontend/browser and required full successors, then bind all reports to final source. Production deployed dependencies/exposure remain independent.", "status": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED.", "gates": { "phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.", "phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority", "production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained", "debt": "published vulnerable package version repaired locally; remaining evidence qualification", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-REQUAL-SEC03", "statusAt3727a72": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-REQUAL-SEC03", "statusAtf17dba2": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED." }, "classification": { "A_phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority", "D_production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained", "E_debt": "published vulnerable package version repaired locally; remaining evidence qualification" } }, { "id": "P9-REQUAL-SEC04", "reviewId": "P9-REQUAL-SEC04", "criterion": "REQUEST \u00a79 requires explicit review and disposition of live security/dependency risk; fresh locked Python sidecar advisory findings remain unclosed", "source": [ { "path": "docs/redesign/phase-9/REQUEST.md", "anchor": "9. Security and privacy" }, { "path": ".artifacts/p9-requal-01/security/python-locked/", "kind": "fresh exact locked Python provider queries; completed tracked summaries linked below" } ], "evidence": [ { "path": ".artifacts/p9-requal-01/security/python-locked/", "kind": "root-reported fresh locked dependency queries", "detail": "49 pins,98 provider queries,97 successful and1 PyPI404 for torch2.6.0+cpu; exact OSV lookup succeeds.249 provider records deduplicate into109 alias groups across8 packages:certifi,filelock,pillow,pypdf,setuptools,torch,transformers,urllib3. Critical/high among provider severity labels;109 alias groups are not109 independent CVEs. Exploitability/application reachability not assessed.", "lockedFileSha256": "36f2912965d183e59f2d8320f3817ca8dd0fee6d76e05cfd63ac92defe6c6031", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/python-advisories.json", "kind": "completed machine-readable advisory summary", "detail": "See PYTHON_SECURITY.md for current reviewed call sites and limitations. Findings remain OPEN and coverage INCOMPLETE; applicability and exploitability are not fully assessed.", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/security/advisory-inventory.json", "kind": "109 per-advisory baseline groups, source-limited reachability,65 remediated/44 remaining", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/security/validation.json", "kind": "58 complete model-disabled sidecar cases, actual startup/uploads and bounded Linux parser supplement; focused checkpoint not final full regression", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/DISPOSITIONS.json", "kind": "current109-group and separate pytest inventory" } ], "severityAndImpact": "Critical/high provider labels include source-limited model/cache applicability uncertainty; not44 confirmed exploits. One exact vendor PyPI query404 disclosed.", "dependency": "Security/sidecar owner: remaining filelock protocol/cache compatibility and Torch/Transformers selected-model artifact/runtime qualification; no large model download authorized.", "ownerAndRequiredClosure": "Security/sidecar owners: complete narrowly scoped filelock cache/protocol compatibility work, select a patched compatible CPU Torch/Transformers graph, verify immutable model/checkpoint identities and startup/inference/extraction contracts in an approved environment; serious residual risk requires explicit owner disposition. No automatic waiver, model change/download or production action.", "status": "CONDITIONAL PASS: original109 dispositions99 fixed/version-verified and10 scoped not affected; separate pytest advisory fixed; actual model and final scan evidence in current package.", "gates": { "phase9": "Conditional development qualification only", "phase10": "Unwaived security uncertainty and affected functionality/testpass criteria remain; no cleanup authority.", "production": "BLOCKED: no deployed graph/cache/image or release qualification", "debt": "Remaining serious uncertainty is not accepted optional debt. Individual source-limited assessments remain visible.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-REQUAL-SEC04", "statusAt3727a72": "OPEN; locked Python advisory coverage INCOMPLETE; critical/high provider labels retained; exploitability NOT ASSESSED" }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-REQUAL-SEC04", "statusAtf17dba2": "BLOCKED: five exact compatible/parser pins remove65/109 baseline advisory alias groups;44 remain (filelock3,Torch19,Transformers22), individually assessed without owner risk acceptance. Full model-runtime qualification unavailable." }, "classification": { "A_phase9": "Conditional development qualification only", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "Unwaived security uncertainty and affected functionality/testpass criteria remain; no cleanup authority.", "D_production": "BLOCKED: no deployed graph/cache/image or release qualification", "E_debt": "Remaining serious uncertainty is not accepted optional debt. Individual source-limited assessments remain visible." } }, { "id": "P9-REQUAL-DB01", "aliases": [], "criterion": "Phase9 REQUEST section8: actual MariaDB provider compatibility; document index must return owned metadata with preserved filters and ordering", "source": [ { "path": "docs/redesign/phase-9/REQUEST.md", "section": "8 Database and persistence qualification" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-requal-01/DOCUMENTS_PROVIDER_REPAIR.md", "kind": "verified provider defect, targeted RED/GREEN, full backend and35-case provider successor", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "fresh native result ledger; separate lane counts and limits", "historicalBaselineEvidence": true } ], "severityAndImpact": "High functional provider defect: Documents index returns500 on actual MariaDB startup schema; no acknowledged-save loss reproduced", "dependency": "MariaDB document query qualification and sustained workload preflight", "ownerAndRequiredClosure": "API DocumentsIndexService owner: narrow read-only projection fix, actual MariaDB regression including tenant/search/data preservation, fresh affected full successors", "status": "LOCALLY REPAIRED at2b26953; three real RED/GREEN cases, full35 MariaDB/1123 backend and complete successor browser/workload PASS.", "gates": { "phase9": "Provider query repair and complete successor qualification PASS within tested scope.", "phase10": "not permission to remove provider/schema/alias compatibility", "production": "withheld: no production operation or deployed qualification", "debt": "no schema/table collation migration required for this repair", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-REQUAL-DB01", "statusAt3727a72": "LOCALLY REPAIRED at2b26953; three real RED/GREEN cases, full35 MariaDB/1123 backend and complete successor browser/workload PASS." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-REQUAL-DB01", "statusAtf17dba2": "LOCALLY REPAIRED at2b26953; three real RED/GREEN cases, full35 MariaDB/1123 backend and complete successor browser/workload PASS." }, "classification": { "A_phase9": "Provider query repair and complete successor qualification PASS within tested scope.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "not permission to remove provider/schema/alias compatibility", "D_production": "withheld: no production operation or deployed qualification", "E_debt": "no schema/table collation migration required for this repair" } }, { "id": "P9-REQUAL-PDF01", "aliases": [ "RD10" ], "criterion": "Preview/export document fidelity on intended Linux rendering configuration; unchanged two corpora and geometry/page oracle.", "source": [ { "path": "docs/redesign/phase-9/REQUEST.md", "section": "10: PDF and print validation" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-requal-01/LINUX_PDF.md", "kind": "fresh real Linux renderer and unchanged oracle results", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-requal-01/validation.json", "kind": "native reports and source hashes", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/pdf-static-checkpoint.json", "kind": "actual real Linux24/24,36+24pages, unchanged original oracle and no input drift", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/FONT_PACKAGING.md", "kind": "font provenance, intentional visual delta, static-outline trial and preserved settings/revisions", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/validation.json", "kind": "final source-bound actual local execution", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "actual current source-bound independent lanes" } ], "severityAndImpact": "High: exported documents shift geometry and gain pages relative to preview.", "dependency": "Embedded licensed static document fonts at shared render owner; final regression and separate intended-device/print acceptance.", "ownerAndRequiredClosure": "Document/QA owners: bind final frozen-source Linux and Windows24-fixture results to unchanged oracle/content/geometry checks, review intentional portable font replacement and retained historical bytes; human/physical printing remains M09-09, not automated closure.", "status": "PASS within current original Linux24 and supplemental2 scope; Windows results separate; no physical-print/human qualification.", "gates": { "phase9": "Confirmed Linux failure closed by final source-bound unchanged-oracle evidence.", "phase10": "Affected functionality/testpass and independent route/unused-code/inventory criteria still required; no cleanup authority.", "production": "Human/print/deployed-renderer/release conditions remain unqualified.", "debt": "Original functional defect resolved in tested scope; human/deployed output qualification remains separate.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "inheritedRecord": { "path": "docs/redesign/phase-9/p9-requal-01/findings.json", "id": "P9-REQUAL-PDF01", "statusAt3727a72": "OPEN: Linux producer5/5 PASS but fidelity9/16 and settings4/8 PASS;65 exported versus60 expected pages. Root cause not yet isolated." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-REQUAL-PDF01", "statusAtf17dba2": "RESOLVED within original Linux24-fixture scope: final16/16 fidelity36pages plus8/8 settings24pages PASS, unchanged oracle; finalWindows24/24 and supplementalLinux2/2 PASS. No physical-print/deployed output claim." }, "classification": { "A_phase9": "Confirmed Linux failure closed by final source-bound unchanged-oracle evidence.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "Affected functionality/testpass and independent route/unused-code/inventory criteria still required; no cleanup authority.", "D_production": "Human/print/deployed-renderer/release conditions remain unqualified.", "E_debt": "Original functional defect resolved in tested scope; human/deployed output qualification remains separate." } }, { "id": "P9-REMED-PTR01", "aliases": [ "RD14" ], "criterion": "CV preview failed-read recovery control must remain pointer- and keyboard-usable without accidental layout movement; existing preview/recovery/accessibility contracts retained.", "source": [ { "path": "docs/redesign/phase-9/REQUEST.md", "section": "6 accessibility qualification and CV/PDF/complete recovery workflows" }, { "path": "job-tracker-ui/src/views/CvBuilderEditor.tsx", "owner": "preview Paper onFocusCapture at shared focus owner" } ], "evidence": [ { "path": "docs/redesign/phase-9/p9-remed-02/PLAN.md", "kind": "trace and RED/GREEN accounting; first broad attempt95PASS/3FAIL retained", "historicalBaselineEvidence": true }, { "path": ".artifacts/p9-remed-02/pointer-unit-red/test.log", "kind": "one new unit reproduces descendant-focus scroll before repair", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/SOURCE_REVIEW.md", "kind": "independent review of minimal shared-owner guard and strict autosave fixture assertions", "historicalBaselineEvidence": true }, { "path": "docs/redesign/phase-9/p9-remed-02/validation.json", "kind": "final source-bound actual local execution", "historicalBaselineEvidence": true } ], "severityAndImpact": "High usability/recovery defect: pointer-down focus schedules a RAF that scrolls the pane190px before pointer-up; Retry target moves, so no click handler/HTTP retry occurs.", "dependency": "Shared preview focus owner; genuine physical-device/human checks remain separate; final full regression in progress.", "ownerAndRequiredClosure": "Frontend/QA owners: retain direct-region focus scrolling/mobile-pane selection while preventing descendant-control target movement; bind unit46/46 plus held-pointer4/4 and stale-draft/admin6/6 focused proof to final935 frontend/362 browser successors. No blanket timeout increase or assertion weakening.", "status": "RESOLVED within tested scope: focused unitRED/46GREEN and native6GREEN retained; final complete935 frontend/362 ordinary browser PASS with no retries/skips. Source review found no remaining Important issue.", "gates": { "phase9": "Confirmed pointer defect closed by failing-before and complete passing successor evidence.", "phase10": "No cleanup authority; preserve focused recovery behavior and satisfy independent route/inventory/testpass criteria.", "production": "Local repair not deployed; physical/device/human and release evidence remain.", "debt": "Bounded functional repair, not optional optimization. Original admin deadline failure retained as unreproduced in isolated focused successor.", "cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency." }, "remediationAssessment": "Inherited criterion/qualification retained. New local automation never grants human/provider/production acceptance or whole-capability PASS.", "priorMissionRecord": { "path": "docs/redesign/phase-9/p9-remed-02/findings.json", "id": "P9-REMED-PTR01", "statusAtf17dba2": "RESOLVED within tested scope: focused unitRED/46GREEN and native6GREEN retained; final complete935 frontend/362 ordinary browser PASS with no retries/skips. Source review found no remaining Important issue." }, "classification": { "A_phase9": "Confirmed pointer defect closed by failing-before and complete passing successor evidence.", "B_cvUx": "No independent veto of separately scoped design. Implementation needs its own approved issue/entry decision and preservation of this criterion where affected; production-only evidence is not an automatic dependency.", "C_phase10": "No cleanup authority; preserve focused recovery behavior and satisfy independent route/inventory/testpass criteria.", "D_production": "Local repair not deployed; physical/device/human and release evidence remain.", "E_debt": "Bounded functional repair, not optional optimization. Original admin deadline failure retained as unreproduced in isolated focused successor." } }, { "id": "P9-SEC02-MODEL", "aliases": [], "criterion": "SEC-M02/03: approved immutable artifact identity, real offline loading/inference, parser/native/cache contracts and explicit limitations", "source": [ { "path": "docs/redesign/phase-9/p9-sec-02/PLAN.md" } ], "status": "PASS", "ownerAndRequiredClosure": "Development QA/security owner: actual pinned trained-model and smaller-format/cache/OCR evidence", "severityAndImpact": "High until compatibility established", "dependency": "model/cache qualification", "evidence": [ { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "current actual evidence; predecessor/focused counts separate" } ], "gates": { "phase9": "Current scoped development criterion; see independent verdict", "cvUx": "Own scope/entry decision required", "phase10": "No automatic entry or cleanup authorization", "production": "Unchanged independent release withholding", "debt": "No defect or risk silently waived" }, "classification": { "A_phase9": "Current scoped development criterion; see independent verdict", "B_cvUx": "Own scope/entry decision required", "C_phase10": "No automatic entry or cleanup authorization", "D_production": "Unchanged independent release withholding", "E_debt": "No defect or risk silently waived" } }, { "id": "P9-SEC02-PYTEST", "aliases": [], "criterion": "SEC-M01/03: newly discovered test-only CVE-2025-71176/GHSA-6w46-j5rx-g56g/PYSEC-2026-1845 fixed outside original109", "source": [ { "path": "docs/redesign/phase-9/p9-sec-02/PLAN.md" } ], "status": "Fixed and verified at pytest9.0.3;59-case actual Linux suite and final scan separately recorded", "ownerAndRequiredClosure": "Development owner: maintain exact test lock and compatible test layer", "severityAndImpact": "Test environment security", "dependency": "test-only graph", "evidence": [ { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "current actual evidence; predecessor/focused counts separate" } ], "gates": { "phase9": "Current scoped development criterion; see independent verdict", "cvUx": "Own scope/entry decision required", "phase10": "No automatic entry or cleanup authorization", "production": "Unchanged independent release withholding", "debt": "No defect or risk silently waived" }, "classification": { "A_phase9": "Current scoped development criterion; see independent verdict", "B_cvUx": "Own scope/entry decision required", "C_phase10": "No automatic entry or cleanup authorization", "D_production": "Unchanged independent release withholding", "E_debt": "No defect or risk silently waived" } }, { "id": "P9-SEC02-CLEANUP", "aliases": [], "criterion": "REG-M01: cleanup requires successful bounded positive daemon absence evidence, never failed inspect=absent", "source": [ { "path": "docs/redesign/phase-9/p9-sec-02/PLAN.md" } ], "status": "Independent review Important fixed; negative/timeout guards and actual model successors verify positive absence", "ownerAndRequiredClosure": "QA harness owner: keep unknown cleanup as failure and preserve bounded ownership checks", "severityAndImpact": "Important evidence correctness", "dependency": "qualification harness", "evidence": [ { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "current actual evidence; predecessor/focused counts separate" } ], "gates": { "phase9": "Current scoped development criterion; see independent verdict", "cvUx": "Own scope/entry decision required", "phase10": "No automatic entry or cleanup authorization", "production": "Unchanged independent release withholding", "debt": "No defect or risk silently waived" }, "classification": { "A_phase9": "Current scoped development criterion; see independent verdict", "B_cvUx": "Own scope/entry decision required", "C_phase10": "No automatic entry or cleanup authorization", "D_production": "Unchanged independent release withholding", "E_debt": "No defect or risk silently waived" } }, { "id": "P9-SEC02-OAUTH", "aliases": [], "criterion": "REG-M01: stale callback fixture executes after actual old correspondence component disposal, not merely URL change", "source": [ { "path": "docs/redesign/phase-9/p9-sec-02/PLAN.md" } ], "status": "Successor PASS with original88-case shard retained", "ownerAndRequiredClosure": "Browser QA owner: retain source/origin/owner/read-count assertions and actual destination/disposal prerequisite", "severityAndImpact": "Fixture timing; no proven application security defect", "dependency": "browser fixture", "evidence": [ { "path": "docs/redesign/phase-9/p9-sec-02/validation.json", "kind": "current actual evidence; predecessor/focused counts separate" } ], "gates": { "phase9": "Current scoped development criterion; see independent verdict", "cvUx": "Own scope/entry decision required", "phase10": "No automatic entry or cleanup authorization", "production": "Unchanged independent release withholding", "debt": "No defect or risk silently waived" }, "classification": { "A_phase9": "Current scoped development criterion; see independent verdict", "B_cvUx": "Own scope/entry decision required", "C_phase10": "No automatic entry or cleanup authorization", "D_production": "Unchanged independent release withholding", "E_debt": "No defect or risk silently waived" } } ], "checkpointCommit": "b313e20", "counts": { "findings": 60, "inherited": 59, "new": 1, "preservationGroups": 57, "partialGroups": 56, "deferredGroups": 1, "supportedRoutes": 33 } }