20 lines
3.4 KiB
Markdown
20 lines
3.4 KiB
Markdown
# Independent source review
|
|
|
|
Reviewer: separate AI code-review agent. Baseline3727a72 through published e80815f and the subsequent working-tree focus/fixture delta. This is source review, not human acceptance or runtime approval. The reviewer ran no tests, builds, browsers, databases or service commands.
|
|
|
|
The review covered the shared document-font renderer, resource/publish configuration, original font/license bytes, Python dependency and advisory inventory, CI isolation documentation, and connected persistence/normalization owners. No Critical or Important application-code finding was reported. Canonical data, revisions, settings/null inheritance and frozen artifact writers remain at their established owners.
|
|
|
|
Two evidence findings were resolved: an uncommitted experimental collector did not retain exact eight-state settings membership, so it and its test were deleted and the existing collector/oracle reused unchanged; two license entries and some per-file sources were absent from font provenance, so the manifest was completed. The reviewer verified all37 font/license source/hash entries and confirmed no bundled assets were omitted. The whitespace exception is limited to byte-preserved upstream notices.
|
|
|
|
The reviewer verified all109 advisory rows contain the required fields and the exact current lock hash matches the inventory:65 groups remediated,44 retained (three cache-lock and41 model-runtime groups). No owner risk acceptance is inferred. CI changes remain documentation only.
|
|
|
|
The final delta review found no Critical or Important finding in the preview focus guard or fixture changes. Descendant controls retain their pointer positions; mobile-pane selection remains and direct preview-region focus still scrolls its pane. The native regression now holds pointer-down through layout frames. The stale-draft fixture observes real autosave409/200 responses while retaining its draft/download/version/history assertions.
|
|
|
|
Runtime proof is owned by the qualification ledger. Source review does not certify PDF fidelity, full model inference, hosted isolation, accessibility compliance, physical printing or production readiness.
|
|
# Supplemental evidence review — 25 October
|
|
|
|
Independent read-only review of the new qualification wrappers, representative producers and reconciliation found an Important acceptance gap: a stale supplemental PDF result could pass without exact membership or pre-oracle input binding. The producer now records every input hash before the unchanged oracle, verifies inputs afterward and records the report hash. Reconciliation requires this existing manifest, exact two-fixture membership and successful report/case equality, required artifacts, original oracle identity and current input/report hashes. Follow-up independent review found no remaining Critical/Important issue in that delta. Eight offline collector checks pass; these are evidence-accounting checks, not additional application/browser/PDF execution. The owned waiting helper was restarted before the supplemental lane began; its source transition is retained in raw restart receipts.
|
|
# Final narrative review limit
|
|
|
|
The additional independent final-document consistency pass could not run because the reviewer reached its usage limit. Earlier independent application and evidence-helper reviews completed, including closure of the Important pre/post oracle binding finding. Final narrative, counts, links and hashes were checked by the primary agent; no independent final narrative approval is claimed.
|