# Phase 7 — Initial preservation matrix

All **57 original protected groups** remain in scope. This initial matrix derives the exact IDs/statuses and original evidence/limitations from [Phase6 preservation](../phase-6/p6-05/PRESERVATION.md), reconciled against its [aggregate](../phase-6/p6-05/evidence/validation.json), [original functionality ledger](../audit/FUNCTIONALITY_INVENTORY.md), [Phase2 anchors](../phase-2/PRESERVATION_MATRIX.md) and [Phase3 impacts](../phase-3/PRESERVATION_IMPACT_MATRIX.md). The short rows never replace protected sub-capabilities.

Entry source is development receipt `b5319981ad3d1bd635daff861453d23c0de5320b`, with application frozen at `bd47214bdcd74336788dca0f294b8ddb9403cac1`. [Fresh P7-00 identity/route/matrix evidence](p7-00/evidence/baseline.json) adds finite static proof; runtime results remain the inherited accepted Phase6 run, not a new P7-00 execution.

**Initial disposition: 0 PASS /56 PARTIAL /0 FAIL /1 DEFERRED =57.** PARTIAL means retained capabilities plus scoped execution and incomplete whole-workflow/human/provider/output obligations; it does not mean56 established defects. PRES-C11 remains withheld. P7-00 introduces no capability/route/auth/data/rendering change and upgrades no group to PASS.

## All 57 contracts

The migration-owner column assigns the approved slice while retaining completed owners. Every executed slice must link its new behavior/negative/no-write/readback evidence and exact remaining limits before any later status change. The source-linked Phase5 [complete acceptance matrix](../phase-5/p5-15/PRESERVATION_ACCEPTANCE.md#reconciled-matrix) supplies individual executable anchors.

| Contract / preserved boundary | Existing implementation and behavioral evidence | Initial full-group status | Mandatory limitation / remaining acceptance | Phase7 owner / retention boundary |
|---|---|---|---|---|
| **PRES-E01** Public product, Free/Pro comparison and honest unavailable billing | [Retained public route census](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), ledger/planCatalog tests in original matrix | PARTIAL | Public-page complete mobile/keyboard review and actual billing availability; no invented prices | P7-01; E01 retained product inventory |
| **PRES-E02** Local login/register/remember, Turnstile, resend/reset/verify | [AUTH-01 native repair](../phase-5/p5-15/p5-15-01/analytics-auth-repair/README.md); complete return URL/security proof | PARTIAL | Real mail/reset submit/Turnstile and token expiry/used-token cases; query loss is repaired for its tested scope | P7-01; E01 retained product inventory |
| **PRES-E03** Google/Microsoft sign-in/link/relink, popup state/origin | [Shared return-boundary proof](../phase-5/p5-15/p5-15-01/analytics-auth-repair/README.md), retained provider owners | PARTIAL | Actual consent/popups/revoked grants/relink; mailbox grants remain separate from sign-in | P7-01; E01 retained product inventory |
| **PRES-E04** 2FA/recovery/setup/disable/trusted-device revocation | [Retained identity census](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), TwoFactor/Sessions tests | PARTIAL | Real authenticator/recovery and reader/trusted-device traversal; sensitive confirmations retained | P7-01; E01 retained product inventory |
| **PRES-E05** Sessions/current-device/revoke/logout | [Shell/private lifecycle](../phase-5/p5-02/README.md), Sessions/account-scoped tests | PARTIAL | Native session-card refresh after remote revocation and complete device/AT acceptance | P7-01; E01 retained product inventory |
| **PRES-E06** Avatar/account identity/email/password | [Retained `/profile` and confirmation route](../phase-5/p5-15/ROUTE_ACCEPTANCE.md) | PARTIAL | Complete avatar/remove/password/email-change native flow; account identity remains distinct from career facts | P7-01; E01 retained product inventory |
| **PRES-E07** Expanded/rail/mobile navigation, active route, commands | [Grouped shell](../phase-5/p5-01/README.md), [utilities](../phase-5/p5-02/README.md), [drawer repair](../phase-5/p5-15/p5-15-04/mobile-drawer/README.md) | PARTIAL | Spoken names/live state, settled drawer AX-name triage and historical command/dialog timing; no route silently hidden | Retain shell; P7-11 verified residual / P7-12 |
| **PRES-E08** Themes, EN/NB hydration, shared toast/confirm/prompt/errors | [Semantic foundations](../phase-4/p4-06/README.md), [shared readiness](../phase-5/p5-00/README.md), [P6 corrections](../phase-6/p6-01/README.md), [P7-02 finite onboarding](p7-02/evidence/onboarding-results.json) | PARTIAL | Full OS/locale/state cross-product, contrast/incomplete axe, reader/reflow; save feedback is distinct from server500 root-cause repair | Every affected slice / P7-12 |
| **PRES-E09** Account switch/stale read-write/BFCache/revalidation | [Native owned-resource protection](../phase-5/p5-13-readiness/README.md), [auth expiry/logout proof](../phase-5/p5-15/p5-15-01/analytics-auth-repair/README.md), [P7-02 owner-local dismissal](p7-02/evidence/onboarding-results.json) | PARTIAL | Broader BFCache/offline/old-bundle/deployed cases; presentation never becomes authorization | Every affected slice / P7-12 |
| **PRES-J01** NAV search/filter/sort/source/freshness/details | [Retained Discover owner](../phase-5/p5-15/ROUTE_ACCEPTANCE.md) | PARTIAL | Live NAV availability/freshness and long-result keyboard/narrow traversal | P7-05 |
| **PRES-J02** Named saved searches/run/delete/alerts/results/dismiss | [Native saved-search repair](../phase-5/p5-15/p5-15-01/saved-search-repair/README.md) | PARTIAL | Actual scheduler-to-owned-notification delivery, human/mobile delete acceptance and intended-provider qualification; deterministic runner is not live NAV | P7-05 |
| **PRES-J03** Reviewed manual/URL/paste creation/company/tags/dates/duplicates | [Jobs/Add](../phase-5/p5-03/README.md), shared AddJobModal; transport boundary tests | PARTIAL | Duplicate/company/date/interrupted creation and distinct creation-intent idempotency debt; preview/open is no-write | Retain Jobs/capture; P7-11 verified residual / P7-12 |
| **PRES-J04** Extension/bookmarklet/share capture and optional post-create artifacts | [Capture retained](../phase-5/p5-03/README.md), captureUrl/extension contracts | PARTIAL | Installed extension/share/no-replay and attachment failure recovery; keep payload and safe-return contracts | Retain Jobs/capture; P7-11 verified residual / P7-12 |
| **PRES-J05** Search/filter/sort/pages/columns/saved views/row-card actions | [Jobs presentation](../phase-5/p5-03/README.md), [shared Table/Board query](../phase-5/p5-04b/README.md) | PARTIAL | Full saved-view CRUD/dirty page-size/history combinations and supported capacity; server query semantics unchanged | Retain Jobs/capture; P7-11 verified residual / P7-12 |
| **PRES-J06** Bulk status/delete/restore, soft-delete/Trash, edit | [Native Jobs/Trash](../phase-5/p5-03/README.md), [selection/view integration](../phase-5/p5-04b/README.md) | PARTIAL | Complete selected-scope/partial-failure/dirty/manual combinations; no hard-delete substitution | Retain Jobs/capture; P7-11 verified residual / P7-12 |
| **PRES-J07** Board groups/custom statuses/pointer-keyboard move/cancel/menu | [Board](../phase-5/p5-04a/README.md), [query parity](../phase-5/p5-04b-readiness/README.md), [200/1,000 exact membership](../phase-5/p5-15/p5-15-06/README.md) | PARTIAL | Physical drag/touch/browser variants and O(N) full-array capacity; no capped hidden results or pipeline redefinition | Retain Jobs/capture; P7-11 verified residual / P7-12 |
| **PRES-J08** Company/contact/source/pipeline-date/history editing | [Retained Companies owner](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), [P6 shared feedback checkpoint](../phase-6/p6-01/README.md) | PARTIAL | Scoped in-modal failure proof follows P6 manifest; complete contact/date/source-link and human acceptance remain | P7-05 |
| **PRES-J09** Recorded offer compensation/deadline/notes/source | [Offer/report source acceptance](../phase-5/p5-07/README.md), retained OfferComparisonPage | PARTIAL | Many-offer mobile/currency/date acceptance; no invented salary normalization | P7-05 |
| **PRES-J10** CSV/JSON export/import/conversion/counts | [Retained Settings Data](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), CSV/blob/formula-safety tests | PARTIAL | Complete native roundtrip and target spreadsheet compatibility; job import is not account restore | P7-09 |
| **PRES-W01** Full job workspace/legacy links/optional overlay | [Seven-section native workspace](../phase-5/p5-08b/README.md), [route/readiness proof](../phase-5/p5-08b-readiness/README.md) | PARTIAL | `followMode` metadata retained; compose consumer deferred. P5-05 optional preview lacks production host; full page remains | Retain frame; P7-06 / gated P7-06F |
| **PRES-W02** Details/status/next action/dates/contact/timeline | [Overview/header](../phase-5/p5-08a/README.md), [section composition](../phase-5/p5-08b/README.md) | PARTIAL | Stored-event localisation/timezones/status-reload combinations and separate job revision debt | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W03** Analysis/match/gaps/strategy/reviewed status suggestions | [Contextual existing owners](../phase-5/p5-08b/README.md), workflow/AI tests | PARTIAL | Real-model truthfulness/freshness/cancel quality; route entry never auto-generates; unrelated AI survives C11 withholding | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W04** Checklist CRUD/completion/order/next action | [Retained checklist composition](../phase-5/p5-08b/README.md), checklist tests | PARTIAL | Mobile interruption/edit/delete/reader; item identity and keyboard alternatives retained; no invented due-date schema | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W05** Select/attach/create/tailor CV and source context | [Native attach/tailor/package readiness](../phase-5/p5-08b-readiness/README.md), [Application section](../phase-5/p5-08b/README.md) | PARTIAL | **P2-D01 remains ordinary passing**; broader attach-render/model/deployed combinations remain; owner/job association unchanged | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W06** Manual/AI letter review/reject/apply/history/dirty guard | [Native Application/Letter](../phase-5/p5-08b/README.md), [readiness](../phase-5/p5-08b-readiness/README.md) | PARTIAL | Complete native history/reject/reader/model combinations; no canonical mutation or auto-send | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W07** Drafts/frozen package versions/archived binaries | [Native SQLite/source-mutation/archive ZIP proof](../phase-5/p5-08b-readiness/README.md) | PARTIAL | Actual production restore/rollback/all-storage combinations; current edits/delete cannot mutate frozen bytes; capture is not delivery | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W08** Upload/drop/category/name/consent/preview/download/delete | [Documents section](../phase-5/p5-08b/README.md), [native keyboard picker repair](../phase-5/p5-15/p5-15-04/file-picker/README.md) | PARTIAL | Physical drop, full rename/download/reader and deployed storage; AI inclusion remains explicit | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W09** Interview categories/questions/answers/manual removal/AI review | [Interview section](../phase-5/p5-08b/README.md), interview persistence/context tests | PARTIAL | Real-model and physical software-keyboard/reload/reader; preparation is not a scheduled interview | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W10** Debrief/follow-up content/date/readiness | [Retained interview/follow-up](../phase-5/p5-08b/README.md) | PARTIAL | Timezones/provider delivery; `followMode` reviewed compose UI remains deferred, no automatic send | Retain workspace owners; P7-06 residual / P7-12 |
| **PRES-W11** Reminders/rules/notifications/ICS/Google-Outlook events | [Rules draft/error/retry repair](../phase-5/p5-15/p5-15-01/rules-draft-repair/README.md), retained calendar contracts | PARTIAL | F21 DST/date-only/offsets, real provider events/scheduler delivery and historical unconfirmed Rules500 cause | P7-05/08; F21 gated |
| **PRES-W12** Async progress/failure/retry/cancel/notifications | [Operation and bell entries](../phase-5/p5-02/README.md), operation/worker tests | PARTIAL | Disconnect/reconnect and F20 enabled-worker fault recovery; stable operation IDs/no duplicate starts | P7-06/08 |
| **PRES-C01** All canonical structured/long-tail/custom career fields | [Source isolation](../phase-5/p5-10/README.md), canonical service/controller tests | PARTIAL | Full long-tail mobile save and profile concurrency; singleton source distinct from identified variants | P7-02/03 |
| **PRES-C02** Overview/completeness/import/raw copy/avatar/history restore | [Retained Career owner](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), overview/profile/history tests | PARTIAL | Complete native historical restore/clipboard/avatar/reader; live inherited CVs may reflect later source changes | P7-02/03 |
| **PRES-C03** Upload/extract/reprocess/diff/low-confidence select/accept/discard/retry | [Native picker repair](../phase-5/p5-15/p5-15-04/file-picker/README.md), extraction/diff tests | PARTIAL | Scanned/OCR corpus and complete low-confidence/discard/native-reader flow; extracted proposal is not canonical truth | P7-02/03 |
| **PRES-C04** Evidence sources/categories/tags/add/list/delete | [Retained evidence owner](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), evidence frontend/API tests, [actual SQLite list repair](p7-02/evidence/evidence-list-repair.json) | PARTIAL | Many-item/delete/keyboard/human acceptance; SQLite compatibility repaired with owner SQL preserved, full frontend/production acceptance remains qualified | P7-02/03 |
| **PRES-C05** Library CRUD/gallery/share/publication/PDF | [Gallery/control reuse](../phase-5/p5-12/README.md), library/publication tests | PARTIAL | Library migration not complete; publish/unpublish/old-slug revocation and every template combination required | P7-04/07 |
| **PRES-C06** Studio tabs/save states/debounce/pages/fit/mobile panes | [Frame](../phase-5/p5-09/README.md), [preview](../phase-5/p5-11/README.md), [hidden-initial repair](../phase-5/p5-15/p5-15-04/mobile-preview/README.md) | PARTIAL | Physical keyboard/touch/AT and broader short-height/wrapped/deployed cases; one editor/save/preview owner | Retain editor; P7-04/07 boundaries / P7-12 |
| **PRES-C07** Visibility/order/custom sections/item-document overrides/reset | [Source/override editing](../phase-5/p5-10/README.md), [nested ownership proof](../phase-5/p5-14/README.md) | PARTIAL | Physical selection/drop/all-browser and exhaustive reset/inheritance combinations; sibling/canonical/frozen separation retained | Retain editor; P7-04/07 boundaries / P7-12 |
| **PRES-C08** Capability-aware typography/color/header/skills/sidebar/photo | [Nine-template control matrix](../phase-5/p5-12/README.md) | PARTIAL | Production fonts/portraits/wrapped lines/custom color/reader; schematic gallery is not final-photo qualification | Retain editor; P7-04/07 boundaries / P7-12 |
| **PRES-C09** A4/Letter/density/margins/dates/document locale/section layout | [Advanced controls](../phase-5/p5-12/README.md), [native pagination repair](../phase-5/p5-09-pagination-readiness/README.md) | PARTIAL | Advanced cross-product/manual print/deployed fonts; UI locale distinct from document locale; no print geometry styling change | Retain editor; P7-04/07 boundaries / P7-12 |
| **PRES-C10** Undo/redo/save queue/dirty/history/conflict/preview lifecycle | [Expected-version/recoverable draft protocol](../phase-5/p5-09-readiness/README.md), [responsive held-PUT proof](../phase-5/p5-14/README.md) | PARTIAL | Long offline/history and IF-CV-UNSAVED-01 trace; settings history is not immutable historical profile/PDF; profile/job saves remain separate | Retain editor; P7-04/07 boundaries / P7-12 |
| **PRES-C11** Section/document AI improve/translate/instruction/grammar review | [Deterministic grounding/stale/owner guards](../phase-5/p5-13-readiness/README.md), [Production no-write HTTP proof](../phase-5/release-readiness/README.md) | **DEFERRED** | **0/366 configured-target calls;0 human semantic reviews;review UI absent.** Production503 `cv_ai_unavailable`/no provider/no write remains; safe withholding is not generation acceptance | DEFERRED P5-13; no activation |
| **PRES-C12** Private PDF/public slug preview-PDF/long searchable output | [Unchanged 16/36 and8/24 corpora](../phase-5/p5-15/p5-15-03/README.md), private/public/admission tests | PARTIAL | Deployed Linux/font/photo/browser/manual-print qualification and complete revoke/busy-recovery cases; white print pages retained | Retain editor; P7-04/07 boundaries / P7-12 |
| **PRES-M01** Job manual correspondence log/search/delete/paste | [Timeline/Correspondence composition](../phase-5/p5-08b/README.md), correspondence owner tests | PARTIAL | Full edit/delete/paste/reader native combinations; logging is not sending | P7-06 |
| **PRES-M02** Gmail candidates/thread import/sync/unlink/relink/move | [Retained job Gmail tools](../phase-5/p5-08b/README.md), ownership/import tests | PARTIAL | Actual provider threads/multi-account revoke/reconnect/sync failures; cross-job changes owner-bound | P7-06 |
| **PRES-M03** Global inbox filters/page/provider/link/direction/detail/attachments | [Retained inbox route](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), Email ownership tests | PARTIAL | Large mailbox/native attachments/complete reader acceptance; global inbox remains Phase7 migration | P7-06 |
| **PRES-M04** Compose/reply/draft revisions/confirmed send/uncertain attempt | [Retained draft/send owner](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), draft revision/send tests | PARTIAL | Sandbox delivery/reconnect/dirty interruption; no automatic uncertain resend; reviewed `followMode` UI deferred | P7-06; gated P7-06F / P7-07 |
| **PRES-M05** Gmail reviewed job/link/reject/keep/notes/sync/create | [Review alias/native route](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), review controller/page tests | PARTIAL | Real provider and complete proposed-job create flow; route opening is no-write | P7-06 |
| **PRES-M06** Gmail/Graph/IMAP connect/status/disconnect | [Retained Connections](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), connection/controller tests | PARTIAL | Real grants/revoke/token expiry/reconnect/IMAP safety; keep sign-in identity separate | P7-06/09 |
| **PRES-S01** Personal counts/activity/funnel/company/skills/stage/salary/next action | [Dashboard](../phase-5/p5-06/README.md), [implemented Analytics](../phase-5/p5-07/README.md), [target correction](../phase-5/p5-15/p5-15-04/report-targets/README.md) | PARTIAL | Exact cohort/timezone/sample/unsupported metrics and whole reader acceptance; no fabricated statistics or Analytics rebuild | Retain reports; P7-11 residual |
| **PRES-S02** Five owner-local flags/onboarding/bell read-dismiss | [Dashboard flags](../phase-5/p5-06/README.md), [bell](../phase-5/p5-02/README.md), [12 concurrent rounds](../phase-5/p5-15/p5-15-06/README.md), [P7-02 truthful guidance/legacy dismissal](p7-02/evidence/onboarding-results.json) | PARTIAL | Historical500 causes unproved; full human/notification acceptance; order/resize/reset/cross-device design remains Phase8 | P7-02/08; Phase8 separate |
| **PRES-S03** Rules/notification/table/theme/language/account preferences | [Settings primitives](../phase-4/p4-04/README.md), [Rules retention](../phase-5/p5-15/p5-15-01/rules-draft-repair/README.md), [P6 feedback](../phase-6/p6-01/README.md) | PARTIAL | Language failure visibility is separate from RD11 server cause; RD12 notification locking/RD13 Rules500 and human/provider acceptance retained | P7-09 |
| **PRES-S04** Privacy/AI usage/limits/server entitlement/billing availability | [AI protocol/privacy/metering](../phase-5/p5-13-readiness/README.md), plan/usage tests | PARTIAL | Checkout/webhook/portal and provider delivery; temporary C11 withholding cannot disable unrelated AI or imply successful review | P7-09 |
| **PRES-S05** Account ZIP/encrypted backup/lifecycle/deliberate delete | [Native package/ZIP relationships](../phase-5/p5-08b-readiness/README.md), [release recovery gate](../phase-5/p5-15/p5-15-05/README.md) | PARTIAL | Current complete backup/restore/keys/tombstones/rollback and deletion/provider policy; downloading backup is not restore proof | P7-09 |
| **PRES-A01** Admin users/create/roles/reset/delete/last-admin/self guard | [Retained admin census](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), Users/authorization tests | PARTIAL | Mounted-role revoke/full persisted mutations/reset delivery; hiding navigation never authorizes API calls | P7-10 |
| **PRES-A02** Audit detail/supported undo/job restore | [Retained audit census](../phase-5/p5-15/ROUTE_ACCEPTANCE.md), audit/authorization tests | PARTIAL | Native successful persisted undo/restore and unsupported-action denial; no generic undo semantics | P7-10 |
| **PRES-A03** System/build/DB/AI/mail/SMTP/probe/benchmark/maintenance | [Metadata disclosure](../phase-5/p5-00/README.md), [admin route census](../phase-5/p5-15/ROUTE_ACCEPTANCE.md) | PARTIAL | Actual guarded diagnostic/SMTP/model/maintenance and sensitive-output qualification; no production jobs launched | P7-10 |

## Route and acceptance invariants

### P7-01 public scoped evidence, no full-group upgrade

[Public source/runtime results](p7-01/evidence/public-auth-results.json) and [acceptance/limitations](p7-01/README.md#public-authentication-implementation-and-acceptance) are pushed in8ad720d; immediate localHEAD=origin=live development equality was verified2026-10-11 18:50:24UTC, main unchanged. All57 statuses remain0 PASS/56 PARTIAL/0 FAIL/1 DEFERRED. At that public gate the account/private-tree migration was a separate in-flight boundary; its later finite result is recorded below.

| Protected groups | Fresh finite public evidence | Remaining mandatory boundary |
|---|---|---|
| E02 | Retained33 Login tests; real registration/verification/reset/replay and old-password denial through the application Identity + loopback SMTP path; invalid/missing link and no-write local validation; remember-me/return semantics retained | Actual production mail, Turnstile, authenticator/provider/human and broader expiry/rate-limit combinations; local SMTP is not external delivery acceptance |
| E03 | Shared real provider sign-in consumers remain covered by Login tests; relink retry returns to the configured public policy; no provider call or protocol change | Actual grants, origin/popups/cancellation/provider account-link acceptance; finite account-card proof is below; actual provider grant/popups remain unqualified and mailbox grants remain separate |
| E05/E09 | Real password reset invalidates the earlier authenticated session; failed sign-in retains draft and exact protected return before explicit successful retry | Finite account session/revoke/cancel/modal/private-disposal proof is below; broader account switching/BFCache/offline/old-bundle/deployed cases still require evidence |
| E06 | Missing/invalid email-change confirmation remains named, recoverable and owner-command bound; real password recovery readback is passing | Finite identity-only save/canonical/sibling and retained-password recovery proof is below; complete email-change success/cancel and avatar crop/remove qualification remains |
| E08 | EN/NB/light/dark finite public frames, named main/H1, labelled errors/focus/status/reflow;22 all-enabled scans0 violation nodes and31 retained contrast incomplete nodes | Full cross-product, actual spoken state/name/error and contrast/forced-color/zoom/physical keyboard/device proof; existing server-authored English errors retained explicitly |

The22 public native cases and two isolated recovery cases are new separate packs; affected61 unit cases contain38 inherited cases plus23 additions. They are not summed as new full-suite evidence. Public product/pricing E01, shell navigation E07 and account setup E04 are not declared migrated or complete by this public result.

### P7-01 account scoped evidence, no full-group upgrade

[Account working-tree results](p7-01/evidence/account-results.json) and [account report](p7-01/README.md#account-identity-and-security-implementation) record fresh573/89 full frontend, account6/public22/auth-boundaries10 and types/lint/build pass. Actual eight-image/context review establishes implemented account scope CONDITIONAL GO; final staged finite hygiene passed and accountad7b419 was normally pushed, direct localHEAD=origin=live equality verified2026-10-11 19:16:15UTC with main unchanged and clean worktree at observation. All57 statuses and32 whole-route qualifications remain unchanged.

| Protected groups | Fresh finite account evidence | Remaining mandatory boundary |
|---|---|---|
| E02/E03/E06/E09 | Real default Google/Microsoft account consumers retain current-password/no-exchange/cancel/error/retry/unlink/forced-sign-in safeguards; explicit UI-locale dates. Actual identity PUT204/reload sends only four identity fields and keeps separate email/password/provider owners | Actual provider popup/grant/reconnect/real delivery and full avatar/email-change/device/human combinations remain qualified |
| C01/C07 | Four native identity samples read canonical Career data and two sibling CVs before/after save/reload and assert no canonical/CV browser write. Stored-text status is labelled truthfully without a CV-library fetch | Full Career save/import/history/concurrency and CV overrides/render/frozen/PDF acceptance remain their own migrations and integrated gate |
| E04/E08 | Unknown/failed2FA status is read-only until explicit status retry; known enabled/disabled/recovery/trusted-device cases retain ordinary unit assertions. Named H2 sections and eight finite geometry/axe contexts are retained | Real authenticator/device/reader/zoom and contextual contrast/focus qualification; account8 scans retain0 violation nodes/85 incompletes |
| E05/E08/E09 | Real multiple-login sessions prove canceled confirmation/no write, modal-local failed revoke, keyboard trap/cancel restoration, deliberate retry/readback/other-session401 and current logout/private-tree disposal; existing10 auth/isolation browser boundaries pass | Deployed BFCache/offline/old-bundle and full real-device/assistive combinations; no security protocol or whole-group acceptance inferred |

Full frontend521→573 adds52 cases across four new suites with no removed/renamed cases: public23 and account29 (providers12, card presentation7, flows5, Profile5). Focused subsets and native packs overlap and are not added to that total. Earlier571 frontend and pre-copy native runs remain historical; the exact post-copy build/source identity is in the account manifest. P2-D01/sidecar/backend/rendering execution remains inherited here.

### P7-02 reconciliation, no full-group upgrade

The [onboarding](p7-02/evidence/onboarding-results.json), [separate provider repair](p7-02/evidence/evidence-list-repair.json) and [Career](p7-02/evidence/career-results.json) records retain distinct executed scopes and failures. All57 remain **56 PARTIAL /1 DEFERRED**, with0 PASS/FAIL, and all32 routes remain retained. Career runtime/actual visual review is conditional; [final slice hygiene](p7-02/evidence/career-static-checks.json) PASS (9docs347links0errors/four commands0); normal push8b4d5c2 directly verified05:51:04UTC, main unchanged/clean worktree at observation.

| Protected groups | Fresh finite P7-02 proof | Remaining boundary |
|---|---|---|
| S02/E08/E09 | Onboarding affected32/native13/regression4; four observable steps, nullable unknown, five read-only source facts, existing per-user key and ownerA/B dismiss/reload/settled no-read proof. Existing four destinations/Back, retry and next-action focus pass; no forced guidance | Real grants/human/device/zoom, notification/full flags and historical Dashboard500 causes; Phase8 customization separate |
| C01/C02/C05/E08/E09 | Career affected46/native14: independent known/unknown/error reads, overview provenance, source/raw-copy/history destinations, three unique existing CV links and canonical/sibling readback/no unintended writes | Structured save/import/history and full library/publication migration remain P7-03/04; Windows clipboard content is LF-normalized with raw codepoints, not exact OS bytes |
| C04/E08/E09 | Actual evidence create/delete/readback, canceled confirmation/no write, retained draft/row after failures, scoped requests, explicit retry/reconfirm, keyboard and corrected cancel-focus. Twenty-two inspected geometry/axe states retain0 violations/99 incompletes | Full reader/contextual contrast/device/zoom, all metadata/long-tail combinations and production/provider qualification |
| C04 | Separate real SQLite/HTTP RED→GREEN repair; owner SQL filter/AsNoTracking and foreign-owner denial preserved; differently-offset instants sorted correctly;91 affected guards/Release pass | No live MySQL/production proof; owner-local list remainsO(N), no scaling/schema/payload/auth change |
| W05/W07/C07/E09 | Existing ordinary P2-D01 frozen-workspace and mobile-override cases freshly pass2/2 on final Career export, without skip/retry/expected failure | Broader frozen/render/CV revision/manual/deployed combinations remain their original gates |

Stable job/education/certification/project IDs dropped by the existing normalizer are an inherited **P7-03 entry risk** requiring separate RED/payload/native proof and optional-ID repair before structured editing. This is distinct from RD21 concurrency and is not a P7-02 repair claim. Dirty-locale and pending-write ownership/recovery must also be qualified before save/history expansion.

### P7-03 forward-ID prerequisite reconciliation

[Finite repair evidence](p7-03/evidence/source-id-results.json) adds ordinary unit46/3 (+8 cases/+1 suite) and native2 plus fresh P2-D01/mobile-override2 with types/lint/build passing. C01/C02/C07/E09 optional source IDs/nullable metadata, canonical payload/readback and selected/sibling/history/frozen boundaries are preserved; all11 final flags areTRUE. The second case characterizes stale200/append-restore/raw-current/foreign-owner denial; it does not close RD21 concurrency. No schema/backend contract or PDF/model action changes. Both lanes have0 axe attachments, and two inspected PNGs remain finite capture qualifications, not settled-dialog/design conformance. [Final source-ID hygiene](p7-03/evidence/source-id-static-checks.json) PASS at earlier observation; later staged EOF whitespace failure requires a transparent normal hygiene successor/fresh staged recheck before push. [Corrected staged gate](p7-03/evidence/source-id-hygiene-correction-static-checks.json) now PASS (four commands0,10docs374links0errors), normal repair3047+hygiene704637a push directly verified06:34:48UTC, main unchanged/clean at observation. As-run hashes remain immutable; all57 statuses/32 routes unchanged. Older orphaned overrides require separate justified recovery, and P7-03 structured/import presentation remains pending.

### P7-03 structured-editor reconciliation

[Final editor evidence](p7-03/evidence/editor-results.json) records affected54/4 and native editor11/source-ID2/Career14/preservation2 PASS, with fresh types/lint/build and13 actual final image reviews. C01/C02/E08/E09 retain canonical fields, contextual actions, structured/raw dirty-locale drafts, held-save locks/snapshot ownership, recoverable500/actual400 feedback, keyboard/labels and finite320–1920 reflow. C07/W07 retain matching source IDs, sibling overrides and ordinary frozen P2-D01/mobile-override readback. No schema, authorization, data-saving, document-renderer or model qualification change occurs. Editor13 all-enabled scans0/377 and separate Career22 scans0/99 retain every incomplete category and M09/M11 contextual/reader qualification; source-ID/preservation have0axe scans. Implemented editor CONDITIONAL GO, final staged hygiene PASS and normal pushf7f6b774 directly verified2026-10-12 11:33:47UTC, localHEAD=origin=live/clean/main unchanged; import/history and whole P7-03 unfinished. All57 rows remain56 PARTIAL/C11 DEFERRED and32 routes retained; no wholesale PASS follows.

The [import/history entry](p7-03/evidence/import-history-entry.json) is identity evidence at pushed metadataec23b650, with four exact committed baselines and inherited W4 export; it adds no runtime PASS. C01–C04/E08/E09 and C07/W07 require explicit low-confidence review, dirty/pending/restore/error recovery and canonical/sibling/frozen readback before the second slice is accepted. Existing57 statuses/32 routes, RD21 and manual/deferred/production gates remain unchanged.

### P7-03 import/history candidate; acceptance pending

The [candidate record](p7-03/README.md#importhistory-candidate-implementation-and-pending-final-validation) covers C01/C02/C03/E08/E09 history loading/error/empty states, retained rows and scoped retry; dirty/pending Restore guards; generation-scoped comparisons and invalidated earlier choices; explicit Accept/Discard and string-ID operation guards; durable errors and stable focus. Imported facts remain verbatim, with localized controlled/synthetic labels and visible partial-comparison scope. Existing source/save/history owners, append-only restore/CURRENT raw semantics and C07/W07 selected/sibling/frozen boundaries remain the preservation targets; no backend/schema/renderer or model qualification change is claimed.

Earlier affected76/6 passed before the latest focus/inline-Alert correction; final units/native/build/visual/axe/hygiene/push acceptance is pending. Native W4 baseline0/6 and attempt1 1/5 used an invalid missing-level French premise, so they are not valid Low French product RED. Attempts2/3 retain4PASS/2FAIL. Attempt4 retains5PASS/1FAIL after language setup recovery; its actual remaining NB320 target is the pending-ready inline success Alert message, not the initial Pro-notice attribution. The subsequent owner-local Alert correction covers the existing Career container; its final affected gates remain pending. Corrected Low Contact receives real-HTTP reachability/selection/account-email checks before acceptance. New22 units/2 suites yield only derived648/93;6 prospective ordinary native cases yield233. All57 rows remain56 PARTIAL/C11 DEFERRED and32 routes retained. RD21 expected-version/partial-write risk and all human/provider/output/production qualifications stay open.

[INVENTORY.md](p7-00/INVENTORY.md#current-route-coverage) reconciles exactly32 current App patterns against [route acceptance](../phase-5/p5-15/ROUTE_ACCEPTANCE.md); all whole-route groups remain PARTIAL. Preserve Board/Application/mail aliases and actual query/hash/state behavior, section/sub precedence, safe internal from, numeric navigation-helper output, capture consumption, focusJobId and provider/token destinations. No Documents/Notifications/aggregate Admin/new Career destination is inferred without contract/content evidence.

P2-D01 remains the ordinary passing [frozen-workspace test](../../../job-tracker-ui/e2e/redesign-preservation.spec.ts#L73), retaining native capture/readback/archive bytes/canonical/sibling proof. No skip, expected-failure marker or relaxed oracle may replace it. Preserve server roles/account/tenant/owned-resource denial; canonical Career versus CV overrides; revision/conflict/recoverable drafts; private/public PDF admission/revocation; unchanged physical pagination; immutable packages; existing grounding/proposal/stale guards and Production C11 withholding.

[DEBT.md](DEBT.md) carries actual M01–M12 reader/device/contextual requirements, M13 deferred AI-return restriction, retained319 mixed-scope axe snapshots and all reliability/provider/output/release dependencies. Scoped company/language feedback repairs do not close unknown server causes or whole manual acceptance.

Complete affected migration acceptance requires applicable evidence or an explicit conditional disposition. Production stays **NO-GO** until its independent operational gates and release decision pass; no main push, destructive operation or unsupported activation follows from this matrix.

### P7-03 Import/history reconciliation

[Final import/history evidence](p7-03/evidence/import-history-results.json) records fresh affected76/6, ordinary native35 (6new), unchanged-binary backend98, seeder24, app/browser types/lint/build PASS on _ZuuD2E8lPzbPiP8Dve7Q/75-file export. Actual source/history, select/deselect/accept/discard/replay, account-email separation, tenant/anonymous denial, dirty recovery and sibling/override/frozen readback pass. Named scoped feedback, pre-pending focus and owner-local narrow Alert wrapping are corrected. All17 new images plus16 representative regression images are inspected;54 retained total. Import17 scans0/302, editor13 scans0/377 and Career22 scans0/99 remain fully qualified; M09/M11 overlap/portal/foreground contexts and reader/device requirements stay open. Runtime/design implemented P7-03 CONDITIONAL GO; final hygiene/push pending. All57 statuses/32 routes unchanged. RD21/backend concurrency and partial-write recovery, old orphan records, provider/output/human gates remain; no schema/model/PDF activation or production GO. New22/2 yields648/93 and native+6 yields233 only as derived totals; full573/89/backend1,033/sidecar49 remain inherited pending P7-12.

### Observed import/history push receipt

Implemented P7-03 scope is **CONDITIONAL GO**. The normal import/history push `5d6e32358c79cc8cfe505013fc79995940079767` was directly verified at 2026-10-12 17:28:54.912933UTC: local HEAD=origin=live development, clean worktree, local/origin/live main unchanged `27657f31131cd95d42f0e1290853ec9c9b3959a4`. Fresh affected76/6, ordinary native35, backend98/seeder24, types/lint/build and staged hygiene pass; 33/54 retained final images were inspected. Import17 scans0/302, editor13 scans0/377 and Career22 scans0/99 remain qualified. RD21 concurrency/partial-write recovery, old orphan records and human/device/provider/output requirements remain open. All57 groups remain56 PARTIAL/C11 DEFERRED,32 routes retained. 648/93 frontend and233 browser are derived only; latest whole573/89 remains inherited. Production NO-GO, P5-13 withholding and Phase8 separation remain unchanged.

### P7-04 library finite disposition

[Library results](p7-04/evidence/library-results.json) record fresh affected38/4 (+12/0), ordinary native8, existing editor/gallery consumer4 with actual PDF200, unchanged-binary backend72 and types/lint/build PASS on _fYf-IvM_ULd3ZPdUW-8h. All19 final PNGs actually reviewed; finite root overflow0. Library19 all-enabled scans0/64 and editor12 retained-scope scans0/122 remain contextually qualified: badge/overlap/modal portals, disabled Undo/Redo wrappers and obscured print headings retain M09/M11/manual requirements. Server template names/categories remain English metadata in NB and are P7-11 localisation residual. Meaningful unit/native RED and peer fixes preserve draft/error/current-locale/managed-focus behavior; no assertion/rule waiver. Implemented library CONDITIONAL GO with final hygiene/push pending; public entry/full P7-04 pending. All57 statuses/32 routes unchanged; frontend660/93/browser241/backend1,034 derived only, full573/89/backend1,033/sidecar49 inherited until P7-12. RD21/canonical concurrency, old orphan/frozen/output/provider/human/release debt remains; P5-13 withheld/main NO-GO/Phase8 separate.

### P7-04 public finite disposition

[Public results](p7-04/evidence/public-results.json) establish C05/C12/E09 anonymous sharing/download/revocation/rotated-slug/private-boundary and unchanged source/settings/version/sibling safeguards. Fresh38/3/native8/fidelity16/36+8/24/types/lint/build pass;18 PNGs actually inspected. Sandbox without scripts retains12 frame-tested incompletes; final settings12 WCAG-tagged scans0/223 remain qualified. All57 whole statuses stay56 PARTIAL/C11 DEFERRED,32 routes retained. Derived673/93 and249 are not fresh integrated totals. M09/M11/human/device/output/provider/release obligations remain; production NO-GO/P5-13 withheld/Phase8 separate. Public final hygiene and normal push pending; library fcacae7 verified.

### P7-05 Discovery finite disposition

[Discovery results](p7-05/evidence/discovery-results.json): J01/J02/J08/J09/W11 exact query/saved-ID Retry, protected draft/mutation ownership, SQLite CRUD/owner denial, reviewed-import navigation and backend provider-double runner/dismiss safeguards. Fresh21/1/new8+existing4/native/backend14/types/lint/build pass;18 actual new image reviews. New18scans0/81 and existing9scans0/52 remain qualified. No capability/route/API/schema/AI safety change; all57 remain56 PARTIAL/C11 DEFERRED and32 routes. Derived682/93/browser257 are not integrated totals. Companies/Offers/Reminders/manual/provider/release obligations remain; final hygiene/normal push pending.

### P7-05 Companies finite disposition

[Companies results](p7-05/evidence/companies-results.json): J01/J08/E08/W11 original nine-field payload/date/source/free-stage semantics, current response title, owner/tenant relation/latest20 projection, protected draft recovery, stale reads, query/hash/state/Back and post-exit focus. Fresh30/4/new6+existing2+named4native/backend2/types/lint/build pass;20/50 images actually reviewed. New20scans0/91 and named20WCAG0/163 remain qualified. No capability/route/API/schema/AI/output change; all57 remain56 PARTIAL/C11 DEFERRED and32 routes. Derived689/93/browser263 are not integrated totals. Cached consumers/manual/release obligations and Offers/Reminders remain; final hygiene/normal push pending.

### P7-05 Offers finite disposition

[Offers results](p7-05/evidence/offers-results.json): J01/J02/J08/W11 first25/actualtotal/effectiveorder, supported full-list route/Back/owned workspace, owner/foreign/anonymous boundaries and original salary/date/free-text contract. Fresh9/1/new4native/backend6/types/lint/build pass;14actual image reviews and14all-enabledscans0/15 qualified. Unknown-period compatibility is explicit legacyGETprojection, not persistence proof. All57 remain56 PARTIAL/C11 DEFERRED/32routes; derived696/93/browser267 are not integrated totals. Reminders/manual/release obligations remain; final hygiene/normal push pending.