cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
4a8c907d70cbed235728f7d690b5409e72b93abe
jobtrackingapp/docs/redesign/phase-9/p9-remed-02/findings.json
T

2271 lines
119 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"schemaVersion": 1,
"reportDate": "2026-10-25",
"baselineCommit": "3727a723e8d0d9066ef3a0a4eed3e5313ff9cc28",
"branch": "fix/p9-pdf-security-requalification",
"scope": "P9-REMED-02 dated successor register. Original59 findings retained; one preview pointer defect added. Inherited criteria and historical evidence are not overwritten.",
"freshExecution": "Final source-bound local functional regression PASS: backend1130, frontend935, ordinary browser362, MariaDB35, sidecar58; separate contracts/provider/PDF/workload lanes in validation.json. Global automation remains incomplete for Python advisory findings and hosted isolation.",
"gateRules": {
"phase9": "REQUEST §§6,13,18: classify each item independently; unfinished genuine human checks remain release gates. No production-only condition automatically vetoes local functional QA. Remaining mandatory functional criteria require evidence.",
"phase10": "IMPLEMENTATION_PLAN.md:164-170: no route uses removed code + tests pass + functionality inventory satisfied. REQUEST prohibits automatically starting Phase10. No blanket conditional deletion eligibility.",
"production": "REQUEST §16 independent release/operator/provider/manual gates; no operations authorized",
"debt": "accepted optional or low debt remains visible, never relabelled a pass",
"cvUx": "The user explicitly prohibits starting CV-UX-01 during this task. No authoritative CV-UX entry exception or owner waiver is inferred from local automated PASS or a future Phase9 decision."
},
"findings": [
{
"id": "RD01",
"aliases": [
"F04"
],
"criterion": "OPEN; local static/loopback ingress contracts only",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 9
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High: wrong client identity or exposed ingress",
"dependency": "Production",
"ownerAndRequiredClosure": "Release operator: actual TLS/IPv6/firewall/topology/trusted peer and deployed auth evidence",
"status": "OPEN; local static/loopback ingress contracts only",
"gates": {
"phase9": "operator release gate",
"phase10": "candidate-specific ingress compatibility proof",
"production": "BLOCKED pending actual ingress identity",
"debt": "open operational qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD01",
"statusAt3727a72": "OPEN; local static/loopback ingress contracts only"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD02",
"aliases": [],
"criterion": "NOT TESTED: independently verified off-disk complete backup/restore",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 10
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Critical if recovery needed: irreversible loss",
"dependency": "Production",
"ownerAndRequiredClosure": "Release operator: isolated restore of DB/files/CVs/keys/tombstones, hashes and recovery rehearsal",
"status": "NOT TESTED: independently verified off-disk complete backup/restore",
"gates": {
"phase9": "no independent veto of isolated functional QA",
"phase10": "candidate restore dependency",
"production": "BLOCKED backup/restore",
"debt": "open operational qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD02",
"statusAt3727a72": "NOT TESTED: independently verified off-disk complete backup/restore"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD03",
"aliases": [
"F19"
],
"criterion": "PARTIAL: SQLite and generated MariaDB SQL; MariaDB runtime unavailable",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 11
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
},
{
"path": "docs/database/mariadb-standardisation/ACCEPTANCE.md",
"kind": "historical superseding bounded provider evidence"
},
{
"path": "docs/database/mariadb-standardisation/validation.json",
"kind": "historical raw result index"
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High: schema/provider/startup disagreement",
"dependency": "Production; provider acceptance",
"ownerAndRequiredClosure": "Database owner: actual approved MariaDB migration, restart, CRUD/constraints/concurrency and effective configuration proof",
"status": "Fresh MariaDB12.2.2:35 integration cases,1 native recovery,2 HTTP cases and15-minute workload PASS; broader deployed parity remains PARTIAL.",
"gates": {
"phase9": "Local bounded provider qualification PASS; deployed parity remains independent.",
"phase10": "provider migration proof per candidate",
"production": "BLOCKED exact deployed parity/migrations",
"debt": "partial broad provider qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD03",
"statusAt3727a72": "Fresh MariaDB12.2.2:35 integration cases,1 native recovery,2 HTTP cases and15-minute workload PASS; broader deployed parity remains PARTIAL."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD04",
"aliases": [],
"criterion": "NOT TESTED: intended Linux rollback",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 12
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High: failed release cannot be reversed",
"dependency": "Production",
"ownerAndRequiredClosure": "Release operator: isolated failure/rollback rehearsal using complete prior images/configuration/recovery set",
"status": "NOT TESTED: intended Linux rollback",
"gates": {
"phase9": "no independent veto of isolated functional QA",
"phase10": "rollback proof per candidate",
"production": "BLOCKED actual rollback",
"debt": "open operational qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD04",
"statusAt3727a72": "NOT TESTED: intended Linux rollback"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD05",
"aliases": [],
"criterion": "OPEN: old runner crashes/deployed identity not superseded",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 13
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
},
{
"kind": "current root-reported hosted investigation; final evidence pending root CI report",
"detail": "Merged host Docker socket binding found. No privileged socket fallback or production host access authorized; explicit blocked workflow gate retained."
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-remed-02/ci-isolation.json",
"kind": "fresh read-only baseline runtime/API evidence, no hosted job dispatched"
}
],
"severityAndImpact": "High: healthy endpoint may serve wrong release",
"dependency": "Production",
"ownerAndRequiredClosure": "CI/operator owner: prove isolated private service execution and lifecycle without host socket/privileges/public ports/production coupling, then successful exact hosted TRX and cleanup. Keep workflow BLOCKED while isolation cannot be proven. Separate deployed runner/storage/release identity remains unqualified.",
"status": "Hosted MariaDB BLOCKED: historical853/job1743 prepares host-network/socket job and exits first guard; fresh25October metadata has no new database run/private isolation proof. Live HostConfig not re-inspected.",
"gates": {
"phase9": "Hosted infrastructure qualification BLOCKED; no database test PASS/FAIL inferred. Assess independently from local provider closure.",
"phase10": "Hosted evidence absent; independent affected testpass/unused-route/inventory criteria remain required.",
"production": "BLOCKED deployed identity and operator diagnosis",
"debt": "open CI/release qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD05",
"statusAt3727a72": "Hosted MariaDB BLOCKED: inspected847/849 fail first isolation gate; no database tests. Existing host network/socket binding is not safe service isolation."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD06",
"aliases": [],
"criterion": "PARTIAL: finite axe/DOM/keyboard evidence; human checks open",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 14
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High accessibility impact",
"dependency": "Acceptance qualification; production",
"ownerAndRequiredClosure": "Accessibility tester: [M09-01–06](../p9-03/MANUAL_CHECKLIST.md), contextual contrast/reader evidence; triage every applicable incomplete",
"status": "PARTIAL: finite axe/DOM/keyboard evidence; human checks open",
"gates": {
"phase9": "manual carry-forward allowed only as explicit release qualification (REQUEST §6), no human PASS",
"phase10": "affected functionality must remain satisfied; no deletion permission",
"production": "BLOCKED applicable human accessibility",
"debt": "open human qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD06",
"statusAt3727a72": "PARTIAL: finite axe/DOM/keyboard evidence; human checks open"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD07",
"aliases": [],
"criterion": "NOT TESTED: physical input/AT/alternate browsers/forced colors",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 15
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium/High usability exclusion",
"dependency": "Acceptance qualification; production",
"ownerAndRequiredClosure": "Product/accessibility owners: actual supported devices/browser/input versions and complete workflows",
"status": "NOT TESTED: physical input/AT/alternate browsers/forced colors",
"gates": {
"phase9": "manual carry-forward release qualification; no physical/AT PASS",
"phase10": "affected functionality proof still required",
"production": "BLOCKED supported device/browser/input acceptance",
"debt": "open human qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD07",
"statusAt3727a72": "NOT TESTED: physical input/AT/alternate browsers/forced colors"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD08",
"aliases": [
"C11",
"P5-13"
],
"criterion": "DEFERRED; no new model qualification or activation",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 16
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High: unqualified proposal semantics",
"dependency": "AI activation; production",
"ownerAndRequiredClosure": "Separate AI qualification owner: production-equivalent identity/inference, original 366-call protocol, independent human semantics, review UI/integration evidence",
"status": "DEFERRED; no new model qualification or activation",
"gates": {
"phase9": "C11 explicitly withheld; separate scope",
"phase10": "no activation/deletion eligibility",
"production": "BLOCKED AI activation unless separately qualified",
"debt": "DEFERRED product/model scope"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD08",
"statusAt3727a72": "DEFERRED; no new model qualification or activation"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD09",
"aliases": [],
"criterion": "Local withheld-operation contract retained; deployed withholding NOT TESTED",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 17
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High: unreviewed AI write/external request",
"dependency": "Production / AI",
"ownerAndRequiredClosure": "Release/AI owners: keep 503/no-provider/no-write guards, verify actual deployment independently",
"status": "Local withheld-operation contract retained; deployed withholding NOT TESTED",
"gates": {
"phase9": "local withholding contract needs fresh successor",
"phase10": "retain withholding and callers",
"production": "BLOCKED deployed withholding untested",
"debt": "open deployment qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD09",
"statusAt3727a72": "Local withheld-operation contract retained; deployed withholding NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD10",
"aliases": [],
"criterion": "PARTIAL: native local PDF corpus and visual sheets; deployed fonts/photo/print absent",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 18
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-remed-02/pdf-static-checkpoint.json",
"kind": "focused actual Linux successor, not final full regression"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/validation.json",
"kind": "final source-bound actual local execution"
}
],
"severityAndImpact": "Medium/High document reliability",
"dependency": "Acceptance qualification; production",
"ownerAndRequiredClosure": "Document owner: intended Linux/fonts/photo/crop/print and alternate-browser proof, original bytes/geometry",
"status": "PARTIAL overall: final original Windows24/24 and Linux24/24 fixtures/60pages each PASS; supplemental Linux2/2 (2+8pages) PASS. Human/physical printing/deployed output NOT TESTED.",
"gates": {
"phase9": "Current original Linux/Windows and supplemental output PASS; human physical-print qualifications remain release gates.",
"phase10": "affected rendering must preserve output contracts",
"production": "BLOCKED intended output environment",
"debt": "open output qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD10",
"statusAt3727a72": "Windows24 fixtures/60 pages PASS; Linux13/24 fixtures PASS,65 exported versus60 expected pages: P9-REQUAL-PDF01 OPEN; physical printing NOT TESTED."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD11",
"aliases": [],
"criterion": "Scoped SQLite bootstrap/WAL mechanism repaired before entry; broad reliability remains PARTIAL",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 19
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High if preference save fails",
"dependency": "Reliability qualification",
"ownerAndRequiredClosure": "Database owner: retain held-reader/write proof, distinguish old reproduced mechanism from unproven provider/contention cases",
"status": "Scoped SQLite bootstrap/WAL mechanism repaired before entry; broad reliability remains PARTIAL",
"gates": {
"phase9": "scoped WAL repair retained; broad reliability qualification open",
"phase10": "retain provider/concurrency safeguards",
"production": "provider contention remains qualified",
"debt": "retained broader reliability"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD11",
"statusAt3727a72": "Scoped SQLite bootstrap/WAL mechanism repaired before entry; broad reliability remains PARTIAL"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD12",
"aliases": [],
"criterion": "PARTIAL: notification draft/failure recovery and SQLite tests; complete contention/provider behavior unqualified",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 20
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium: settings may not persist",
"dependency": "Reliability qualification",
"ownerAndRequiredClosure": "Database/settings owners: intended-provider overlapping writes and failure/reload recovery with no data loss",
"status": "PARTIAL: notification draft/failure recovery and SQLite tests; complete contention/provider behavior unqualified",
"gates": {
"phase9": "no newly established failure; provider overlap remains qualification",
"phase10": "candidate must preserve drafts and recovery",
"production": "intended-provider qualification open",
"debt": "retained reliability"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD12",
"statusAt3727a72": "PARTIAL: notification draft/failure recovery and SQLite tests; complete contention/provider behavior unqualified"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD13",
"aliases": [],
"criterion": "Historical Rules 500 mechanism remains UNCONFIRMED",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 21
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium: failed save/draft retention",
"dependency": "Reliability qualification",
"ownerAndRequiredClosure": "Rules/API owners: original failure trace plus controlled causal reproduction and successor regression; passing retry alone insufficient",
"status": "Historical Rules 500 mechanism remains UNCONFIRMED",
"gates": {
"phase9": "historical causal mechanism UNCONFIRMED; not relabelled resolved",
"phase10": "candidate must preserve Rules recovery",
"production": "no complete reliability claim",
"debt": "unconfirmed historical observation"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD13",
"statusAt3727a72": "Historical Rules 500 mechanism remains UNCONFIRMED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD14",
"aliases": [],
"criterion": "Historical command/dialog focus incident remains UNCONFIRMED; settled drawer proof is a separate finite result",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 22
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium/High keyboard access",
"dependency": "Accessibility qualification",
"ownerAndRequiredClosure": "Shared UI owner: preserve original observations, reproduce affected modal transitions and actual reader/trap/return behavior",
"status": "Historical command/dialog focus incident remains UNCONFIRMED; settled drawer proof is a separate finite result",
"gates": {
"phase9": "historical causal mechanism UNCONFIRMED; human focus qualification",
"phase10": "candidate must preserve trap/return/error states",
"production": "applicable human checks open",
"debt": "unconfirmed historical observation"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD14",
"statusAt3727a72": "Historical command/dialog focus incident remains UNCONFIRMED; settled drawer proof is a separate finite result"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD15",
"aliases": [],
"criterion": "Historical intermittent CV section expansion cause unproven",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 23
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium: editing disrupted",
"dependency": "Reliability qualification",
"ownerAndRequiredClosure": "CV owner: retain failed observation and reproduce causally before closing; do not weaken expansion assertions",
"status": "Historical intermittent CV section expansion cause unproven",
"gates": {
"phase9": "historical cause UNCONFIRMED; no invented current defect",
"phase10": "candidate must preserve expansion state",
"production": "broader reliability qualification",
"debt": "unconfirmed historical observation"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD15",
"statusAt3727a72": "Historical intermittent CV section expansion cause unproven"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD16",
"aliases": [],
"criterion": "Scoped company-error repair retained; wider reader/dialog/date contract PARTIAL",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 24
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium: recovery/access",
"dependency": "Preservation qualification",
"ownerAndRequiredClosure": "Company/UI owners: native failed-save → retained draft → successful retry plus human dialogue checks",
"status": "Scoped company-error repair retained; wider reader/dialog/date contract PARTIAL",
"gates": {
"phase9": "scoped repair historical PASS; broader human contract open",
"phase10": "candidate-specific recovery proof",
"production": "human/provider qualification open",
"debt": "partial preserved contract"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD16",
"statusAt3727a72": "Scoped company-error repair retained; wider reader/dialog/date contract PARTIAL"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD17",
"aliases": [],
"criterion": "Board remains O(N); 200/1,000-job and new bounded 250-job observations are finite",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 25
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium: growing rendering cost",
"dependency": "Performance qualification",
"ownerAndRequiredClosure": "Jobs owner: agreed budget, bounded sustained profile and CPU/frame attribution before optimization; preserve full membership",
"status": "PARTIAL: prior exclusive15-minute MariaDB workload passed at3727a72; current remediation is not a new workload/capacity SLA. Independent bounded performance qualification retained.",
"gates": {
"phase9": "Finite15-minute local MariaDB workload PASS; no capacity SLA.",
"phase10": "measured bottleneck and full membership before optimization",
"production": "no production capacity/SLA claim",
"debt": "O(N) known design limit"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD17",
"statusAt3727a72": "Finite exclusive MariaDB workload PASS:250 applications,2 readers,900006ms,3382 reads,20 navigations,zero failures and selected exact-state checks; no capacity SLA."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD18",
"aliases": [],
"criterion": "NOT TESTED: physical drag/drop/cancel/browser variants",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 26
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium access/workflow risk",
"dependency": "Human/device qualification",
"ownerAndRequiredClosure": "Input/device tester: real Board/CV selection and named alternatives, no hidden result cap",
"status": "NOT TESTED: physical drag/drop/cancel/browser variants",
"gates": {
"phase9": "manual carry-forward release qualification; physical behavior not passed",
"phase10": "retain accessible reorder alternatives",
"production": "BLOCKED physical input variants",
"debt": "open device qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD18",
"statusAt3727a72": "NOT TESTED: physical drag/drop/cancel/browser variants"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD19",
"aliases": [],
"criterion": "DEFERRED: reviewed `followMode` consumer",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 27
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium workflow limitation",
"dependency": "Deferred scope; not silently completed",
"ownerAndRequiredClosure": "Product/mail owner: separate explicit mode→review/action/fallback design; no auto-send or uncertain resend",
"status": "DEFERRED: reviewed `followMode` consumer",
"gates": {
"phase9": "accepted deferred reviewed consumer; no activation",
"phase10": "ineligible to remove metadata/paths",
"production": "separate activation gate",
"debt": "DEFERRED product scope"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD19",
"statusAt3727a72": "DEFERRED: reviewed `followMode` consumer"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD20",
"aliases": [],
"criterion": "Optional P5-05 quick preview DEFERRED; Phase 8 Dashboard scope was delivered separately",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 28
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Low optional scope",
"dependency": "Deferred scope",
"ownerAndRequiredClosure": "Product owner: explicit separate brief; retain existing full workspace and all routes",
"status": "Optional P5-05 quick preview DEFERRED; Phase 8 Dashboard scope was delivered separately",
"gates": {
"phase9": "optional preview DEFERRED; full workspace retained",
"phase10": "no deletion of full workspace/aliases",
"production": "no independent veto while optional scope remains deferred",
"debt": "DEFERRED optional scope"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD20",
"statusAt3727a72": "Optional P5-05 quick preview DEFERRED; Phase 8 Dashboard scope was delivered separately"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD21",
"aliases": [],
"criterion": "OPEN: canonical Career/generic job revision contract and creation-intent idempotency",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 29
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
},
{
"path": "docs/database/mariadb-standardisation/ACCEPTANCE.md",
"kind": "historical superseding bounded provider evidence"
},
{
"path": "docs/database/mariadb-standardisation/validation.json",
"kind": "historical raw result index"
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-remed-02/PLAN.md",
"kind": "strict stale-draft autosave409/200 fixture and focused recovery successor; no full current-stage provider claim"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/validation.json",
"kind": "final source-bound actual local execution"
}
],
"severityAndImpact": "High: stale editor can overwrite acknowledged edits",
"dependency": "Data-integrity acceptance; production",
"ownerAndRequiredClosure": "Domain/API/UI owners: separate bounded contract issue covering both callers, server compare-and-swap/transaction semantics, conflict recovery and backward compatibility; characterization is not safety acceptance",
"status": "RESOLVED within original six save/concurrency requirements; final35 MariaDB tests,1 MariaDB recovery,2 HTTP observations and6 separate browser companions PASS. Creation-intent idempotency remains separate OPEN debt.",
"gates": {
"phase9": "Original six save/concurrency requirements RESOLVED in tested scope; separate creation debt retained.",
"phase10": "no compatibility removal without all-caller/rollback proof",
"production": "BLOCKED deployment/rollback parity; no historical recovery claim",
"debt": "creation-intent idempotency OPEN, separate concern"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD21",
"statusAt3727a72": "RESOLVED within original six save/concurrency clauses and tested scope; fresh source-bound provider/browser/regression evidence. Creation-intent idempotency remains separate OPEN debt."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD22",
"aliases": [
"F20"
],
"criterion": "NOT TESTED: enabled-worker outage recovery/durability",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 30
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High: duplicate/lost async work",
"dependency": "Production / enabled producer",
"ownerAndRequiredClosure": "Worker owner: isolated enabled-producer failure/restart/recovery, no-loss/no-duplicate proof before activation",
"status": "NOT TESTED: enabled-worker outage recovery/durability",
"gates": {
"phase9": "isolated fixtures do not accept enabled producer",
"phase10": "retain stable IDs and recovery paths",
"production": "BLOCKED enabled-worker recovery",
"debt": "open operational qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD22",
"statusAt3727a72": "NOT TESTED: enabled-worker outage recovery/durability"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD23",
"aliases": [
"F21"
],
"criterion": "OPEN: actual calendar offset/DST/date-only semantics",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 31
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium: wrong event time",
"dependency": "Calendar qualification",
"ownerAndRequiredClosure": "Calendar owner: dedicated boundary/DST/provider proof in authorised sandbox before semantic changes",
"status": "OPEN: actual calendar offset/DST/date-only semantics",
"gates": {
"phase9": "actual offset/DST/date-only unqualified",
"phase10": "retain calendar semantics until dedicated proof",
"production": "BLOCKED calendar activation qualification",
"debt": "open provider semantics"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD23",
"statusAt3727a72": "OPEN: actual calendar offset/DST/date-only semantics"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD24",
"aliases": [],
"criterion": "NOT TESTED: billing/deletion/retention/provider cleanup policy and configuration",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 32
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High privacy/lifecycle impact",
"dependency": "Production / lifecycle activation",
"ownerAndRequiredClosure": "Product/security/operator owners: approved policy, explicit destructive-action authority, isolated recovery/cleanup proof",
"status": "NOT TESTED: billing/deletion/retention/provider cleanup policy and configuration",
"gates": {
"phase9": "policy and destructive lifecycle outside functional proof",
"phase10": "no removal without approved lifecycle policy",
"production": "BLOCKED policy/restore/provider cleanup",
"debt": "open policy qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD24",
"statusAt3727a72": "NOT TESTED: billing/deletion/retention/provider cleanup policy and configuration"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD25",
"aliases": [],
"criterion": "PARTIAL: local SMTP/HTTP/provider contracts; actual OAuth/Turnstile/mail/calendar/model unavailable",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 33
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High identity/privacy/delivery impact",
"dependency": "Provider acceptance; production",
"ownerAndRequiredClosure": "Approved provider/human tester: sandbox consent/revoke/reconnect/origin/state/delivery/uncertain-attempt proof",
"status": "PARTIAL: local SMTP/HTTP/provider contracts; actual OAuth/Turnstile/mail/calendar/model unavailable",
"gates": {
"phase9": "sandbox/provider qualifications remain; fixtures do not pass them",
"phase10": "candidate must preserve auth/delivery contracts",
"production": "BLOCKED applicable real provider evidence",
"debt": "open provider qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD25",
"statusAt3727a72": "PARTIAL: local SMTP/HTTP/provider contracts; actual OAuth/Turnstile/mail/calendar/model unavailable"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD26",
"aliases": [],
"criterion": "Legacy Job/Application cutover OPEN",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 34
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High compatibility/data loss if removed",
"dependency": "Phase 10 deletion eligibility; production",
"ownerAndRequiredClosure": "Migration owner: expand/verify/contract, restore/rollback and all readers/writers/aliases before removal",
"status": "Legacy Job/Application cutover OPEN",
"gates": {
"phase9": "no legacy cutover authorized",
"phase10": "BLOCKED deletion until expand/verify/contract and all readers/writers",
"production": "BLOCKED unqualified cutover",
"debt": "open migration scope"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD26",
"statusAt3727a72": "Legacy Job/Application cutover OPEN"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD27",
"aliases": [],
"criterion": "NOT TESTED: actual monitoring/alert/recovery coverage",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 35
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High operational detection risk",
"dependency": "Production",
"ownerAndRequiredClosure": "Operations owner: effective sink, alert trigger, responder/runbook and recovery observations",
"status": "NOT TESTED: actual monitoring/alert/recovery coverage",
"gates": {
"phase9": "no independent veto of isolated functional QA",
"phase10": "candidate observability proof where affected",
"production": "BLOCKED actual alert/recovery",
"debt": "open operational qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD27",
"statusAt3727a72": "NOT TESTED: actual monitoring/alert/recovery coverage"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "RD28",
"aliases": [],
"criterion": "Ongoing evidence/provenance obligation",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 36
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High if failures are misrepresented",
"dependency": "Every decision",
"ownerAndRequiredClosure": "QA owner: exact source hashes/counts, original failures, no retries/skips/assertion relaxation; separate characterization from safe behavior",
"status": "Ongoing evidence/provenance obligation",
"gates": {
"phase9": "fresh exact evidence and source binding required",
"phase10": "required exact candidate evidence",
"production": "required exact deployment evidence",
"debt": "ongoing obligation"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "RD28",
"statusAt3727a72": "Ongoing evidence/provenance obligation"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-OPS-01",
"aliases": [],
"criterion": "Previously reported EXT4/Docker storage errors UNRECHECKED",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 37
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Critical if disk faults persist",
"dependency": "Production",
"ownerAndRequiredClosure": "Production operator only: independent storage-health/repair and recovery qualification under separate authority",
"status": "Previously reported EXT4/Docker storage errors UNRECHECKED",
"gates": {
"phase9": "not a standalone functional defect; retain stated qualification",
"phase10": "no permission to delete; affected-candidate proof",
"production": "BLOCKED until stated operator closure",
"debt": "retained gate"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-OPS-01",
"statusAt3727a72": "Previously reported EXT4/Docker storage errors UNRECHECKED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-SEC-01",
"aliases": [],
"criterion": "Live advisories NOT REFRESHED; inherited NuGet Pkcs high/moderate retained. Local dev-only GHSA-vfj7-8cjw-p6xm policy expires at2026-11-01 00:00UTC (after31October), verified in source23October",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 38
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
},
{
"kind": "current root-reported authorized advisory review; final raw ledger pending",
"detail": "Root-reported live audits: System.Security.Cryptography.Pkcs8.0.1 transitively via MimeKit4.17.0, high/moderate advisories fixed8.0.2 (exact identifiers/raw audit pending final root ledger); Next16.3.8 now has three critical advisories, existing Sharp0.35.5 SVG mitigation covers one only and UI is statically exported; dev-transitive Zod4.5.4 GHSA-mrhx-c7xc-m3w5 fixed4.6.6."
},
{
"kind": "current requalification observation, not a rewrite of inherited history",
"detail": "P9-REQUAL-SEC01–03 carry new stable IDs, original RED security-before-pins evidence and post-pin zero-findings audit paths; root will bind raw hashes in final validation."
},
{
"kind": "fresh Python risk observation",
"detail": "P9-REQUAL-SEC04 retains locked Python critical/high provider labels and incomplete query coverage; post-pin NuGet/npm zero audits do not establish blanket security PASS."
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-remed-02/security/advisory-inventory.json",
"kind": "109 per-advisory baseline groups, source-limited reachability,65 remediated/44 remaining"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/security/validation.json",
"kind": "58 complete model-disabled sidecar cases, actual startup/uploads and bounded Linux parser supplement; focused checkpoint not final full regression"
}
],
"severityAndImpact": "High dependency risk until assessed",
"dependency": "Security/sidecar owner: remaining filelock protocol/cache compatibility and Torch/Transformers selected-model artifact/runtime qualification; no large model download authorized.",
"ownerAndRequiredClosure": "Security/sidecar owners: complete narrowly scoped filelock cache/protocol compatibility work, select a patched compatible CPU Torch/Transformers graph, verify immutable model/checkpoint identities and startup/inference/extraction contracts in an approved environment; serious residual risk requires explicit owner disposition. No automatic waiver, model change/download or production action.",
"status": "BLOCKED: five exact compatible/parser pins remove65/109 baseline advisory alias groups;44 remain (filelock3,Torch19,Transformers22), individually assessed without owner risk acceptance. Full model-runtime qualification unavailable.",
"gates": {
"phase9": "BLOCKER by acceptance-risk judgment under REQUEST9/13/14: selected-model/cache applicability and compatible fixes remain unqualified; not an automatic veto for every advisory. No owner risk waiver.",
"phase10": "Unwaived security uncertainty and affected functionality/testpass criteria remain; no cleanup authority.",
"production": "BLOCKED independent deployed dependencies/model integrity, active parser exposure and release review; local repairs are not deployed.",
"debt": "Remaining serious uncertainty is not accepted optional debt. Individual source-limited assessments remain visible."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-SEC-01",
"statusAt3727a72": "Compatible NuGet/npm repairs and fresh regression PASS; Python P9-REQUAL-SEC04 OPEN, coverage INCOMPLETE. No blanket security PASS."
},
"remediationAssessment": "Bounded remediation demonstrated; security remains BLOCKED, not RESOLVED/ACCEPTED. Alias groups are not independent CVE/exploit counts; exact vendor PyPI query404 remains disclosed."
},
{
"id": "P9-PUB-01",
"aliases": [],
"criterion": "Initial HTTP502 blockage recovered on23October; all checkpoint ancestors published in normal push; direct feature equality verified at `0fb108bd673ea91749f6fa057295e5b6d15d557f`",
"source": [
{
"path": "docs/redesign/phase-9/RISKS.md",
"line": 39
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical assessment",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Resolved for published checkpoint; final commit still needs its own direct equality proof",
"dependency": "Final publication / handoff completeness",
"ownerAndRequiredClosure": "QA: retain failed attempts and verify each subsequent normal push; no force push",
"status": "Remediation checkpoints normally published throughb313e20 as reported in execution ledger; final commit/remote/clean-tree verification remains root publication responsibility.",
"gates": {
"phase9": "not a standalone functional defect; retain stated qualification",
"phase10": "no permission to delete; affected-candidate proof",
"production": "BLOCKED until stated operator closure",
"debt": "retained gate"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-PUB-01",
"statusAt3727a72": "Normal checkpoint pushes verified through7092697; final publication follows ledger and direct remote receipt. No force-push or main change."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-T01",
"criterion": "Medium test reliability: parser descendant test could time out before it had a descendant",
"source": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"anchor": "P9-T01"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"kind": "historical defect/reproduction/closure record",
"detail": "Entry sidecar 55 pass/1 fail (missing PID); isolated run passes; explicit slow startup reproduces the race. Fixture now waits for its child PID before the unchanged 200 ms deadline. Real process-tree kill and HTTP 504 assertions retained. Focused green and full 56/56 successor. No parser product change.",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium test reliability: parser descendant test could time out before it had a descendant",
"dependency": "Resolved in tested Windows environment; Linux run remains separate.",
"ownerAndRequiredClosure": "QA; `.artifacts/phase9/sidecar-entry-failed.*`, `sidecar-fixture-red.*`, `sidecar-fixture-green.*`, `sidecar.xml`",
"status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.",
"gates": {
"phase9": "fresh affected regression required",
"phase10": "candidate proof only; no cleanup authority",
"production": "does not clear independent release gates",
"debt": "Resolved in tested Windows environment; Linux run remains separate."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-T01",
"statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-L01",
"criterion": "Low localisation defect: Admin grid vendor controls appear in English in Bokmål",
"source": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"anchor": "P9-L01"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"kind": "historical defect/reproduction/closure record",
"detail": "Sole DataGrid owner omitted localeText. New English desktop test passes while Bokmål fails to find “Rader per side:”. Reuse installed `nbNO` locale in AdminUsersPage. Focused 12/12 green; first integrated Jest919/104 and native desktop matrix green; final complete successors recorded in validation.json.",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Low localisation defect: Admin grid vendor controls appear in English in Bokmål",
"dependency": "Resolved in observed local integration; no authorisation, pagination or data contract change.",
"ownerAndRequiredClosure": "Frontend; `admin-users-page.test.tsx`, `AdminUsersPage.tsx`; retained RED/GREEN logs/JSON",
"status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.",
"gates": {
"phase9": "fresh affected regression required",
"phase10": "candidate proof only; no cleanup authority",
"production": "does not clear independent release gates",
"debt": "Resolved in observed local integration; no authorisation, pagination or data contract change."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-L01",
"statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-V01",
"criterion": "Medium visual defect: wrapped public h2 lines overlap at320px in EN/NB",
"source": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"anchor": "P9-V01"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"kind": "historical defect/reproduction/closure record",
"detail": "Four larger h2 owners inherited a fixed body line height. Original native geometry2/2 RED; explicit lineHeight1.4 now2/2 GREEN across16 width/theme/locale vectors; independent EN/light and NB/dark PNG inspection confirms separation. Intermediate1.2 still failed unchanged geometry assertions and was superseded.",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium visual defect: wrapped public h2 lines overlap at320px in EN/NB",
"dependency": "Bounded fix verified by native geometry/build; the complete final 362-case ordinary successor also passed.",
"ownerAndRequiredClosure": "Frontend; `LandingPage.tsx`, new `landing-presentation.spec.ts`; `landing-red`, `landing-qualified`, `landing-accepted` raw reports",
"status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.",
"gates": {
"phase9": "fresh affected regression required",
"phase10": "candidate proof only; no cleanup authority",
"production": "does not clear independent release gates",
"debt": "Bounded fix verified by native geometry/build; the complete final 362-case ordinary successor also passed."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-V01",
"statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-V02",
"criterion": "Wrapped bottom CTA title must keep separate readable lines across EN/NB, themes and narrow widths",
"source": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"line": 51,
"anchor": "P9-V02"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical separate bottom CTA repair and complete 362-case ordinary successor",
"detail": "Existing bottom CTA owner inherited fixed body line height; explicit1.4 repair retains exact translated CTA plus all four h2s in both native landing cases. Both languages failed before and passed after. Original-width inspection of all four320px green images retained.",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Medium visual defect: wrapped bottom CTA title lines overlapped",
"dependency": "LandingPage bottom CTA owner and landing-presentation.spec.ts; exact EN/NB, theme/width geometry and original image evidence",
"ownerAndRequiredClosure": "Frontend/QA: preserve existing LandingPage lineHeight1.4 and exact CTA+heading geometry assertions; qualify fresh complete landing and ordinary successors on frozen source, retain original RED/GREEN evidence and native-width images",
"status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.",
"gates": {
"phase9": "fresh affected regression required",
"phase10": "candidate proof only; no cleanup authority",
"production": "does not clear independent release gates",
"debt": "bounded CTA repair separate from P9-V01 four-h2 repair"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-V02",
"statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-L02",
"criterion": "Low linguistic residual: stored event type `Created` appears in Bokmål job history/audit",
"source": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"anchor": "P9-L02"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"kind": "historical defect/reproduction/closure record",
"detail": "Rendered route comparison detects18 occurrences across the matrix; raw stored metadata is not a missing translation key. Do not translate authored/provider content indiscriminately.",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Low linguistic residual: stored event type `Created` appears in Bokmål job history/audit",
"dependency": "Retained nonblocking development qualification; no data mutation proposed.",
"ownerAndRequiredClosure": "UI/localisation owner; separately map known event enums with unknown-value fallback and history/audit tests; human wording review",
"status": "RETAINED low development debt",
"gates": {
"phase9": "nonblocking development debt with visible limit",
"phase10": "candidate proof only; no cleanup authority",
"production": "does not clear independent release gates",
"debt": "Retained nonblocking development qualification; no data mutation proposed."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-L02",
"statusAt3727a72": "RETAINED low development debt"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-T02",
"criterion": "Low test compatibility: existing Admin pagination fixture hard-coded the English vendor accessible name in Bokmål mode",
"source": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"anchor": "P9-T02"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"kind": "historical defect/reproduction/closure record",
"detail": "First native shard97pass/1fail: no button named “Go to next page” in NB. The installed locale exposes “Gå til neste side”. Locator now uses installed enUS/nbNO pagination names; the six original width/locale/theme, long-identity, page-change, focus/reachability and no-write assertions remain. Focused 1/1 green; the final isolated 98-case shard and complete 362-case successor passed.",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Low test compatibility: existing Admin pagination fixture hard-coded the English vendor accessible name in Bokmål mode",
"dependency": "Test-only repair; no product or authorisation change.",
"ownerAndRequiredClosure": "QA; `phase7-admin-users.spec.ts`; original shard report/trace and `admin-grid-green` retained. Other English-name callers belong to the separate English JobTable owner and remain unchanged.",
"status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.",
"gates": {
"phase9": "fresh affected regression required",
"phase10": "candidate proof only; no cleanup authority",
"production": "does not clear independent release gates",
"debt": "Test-only repair; no product or authorisation change."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-T02",
"statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-PERF-01",
"criterion": "Low duplicate report work: shell and Dashboard each initially read reminders",
"source": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"anchor": "P9-PERF-01"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-06/DEFECTS.md",
"kind": "historical defect/reproduction/closure record",
"detail": "Phase 8 source/network diagnosis retained. Phase 9 request-count evidence must distinguish initial duplicate reads from additional reads during editing.",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Low duplicate report work: shell and Dashboard each initially read reminders",
"dependency": "Accepted existing development debt; no Phase 10 implementation here.",
"ownerAndRequiredClosure": "Shared reminder read owner; measured benefit and independent shell/dashboard failure/loading tests before consolidation.",
"status": "RETAINED low development debt",
"gates": {
"phase9": "nonblocking development debt with visible limit",
"phase10": "candidate proof only; no cleanup authority",
"production": "does not clear independent release gates",
"debt": "Accepted existing development debt; no Phase 10 implementation here."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-PERF-01",
"statusAt3727a72": "RETAINED low development debt"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-T03",
"criterion": "Provider-worker isolation must prevent server-originated NAV changes in preservation fixtures",
"source": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"anchor": "P9-T03"
},
{
"path": "docs/redesign/phase-9/p9-00/worker-isolation-delta.json"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-07/FINAL_ACCEPTANCE.md",
"kind": "historical 87 pass/1 fail then full corrected successor",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High test isolation",
"dependency": "controlled native fixture; production worker unchanged",
"ownerAndRequiredClosure": "QA: retain failed run, unchanged no-write assertions, fixture config delta and fresh full successor",
"status": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged.",
"gates": {
"phase9": "fresh exact fixture/case successor",
"phase10": "preserve isolation and assertions",
"production": "not enabled-worker acceptance",
"debt": "no product fix inferred"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-T03",
"statusAt3727a72": "RESOLVED within mapped automated scope; fresh complete regression PASS; manual qualifications unchanged."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-01",
"criterion": "With NVDA + supported desktop browser, traverse login, Jobs, job details, Career, CV editor, Documents and Settings using headings/landmarks/forms. Repeat equivalent VoiceOver/Safari journeys.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-01 / accessibility tester"
}
],
"evidence": [],
"severityAndImpact": "High accessibility qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "accessibility tester",
"status": "NOT TESTED",
"requiredClosure": "Names, roles, values, selected state, headings, reading order and errors are understandable; retain reader/version and spoken observations. No hidden background content is announced.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-01",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-02",
"criterion": "Keyboard-only: skip link → navigation → commands → add/edit dialogs → job sections → CV preview/history. Open/close the mobile drawer, confirmation, select and menu repeatedly, including after errors.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-02 / accessibility tester"
}
],
"evidence": [],
"severityAndImpact": "High accessibility qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "accessibility tester",
"status": "NOT TESTED",
"requiredClosure": "Visible focus, logical order, genuine traps only while modal, Escape and focus restoration; no off-screen/hidden tab stops. Record any transition-specific failure.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-02",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-03",
"criterion": "Dashboard: hide/show, Earlier/Later, size, Cancel, Reset-confirm/cancel, failed Save, stale conflict/reload, saved empty layout recovery. Listen with a reader.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-03 / accessibility tester"
}
],
"evidence": [],
"severityAndImpact": "High accessibility qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "accessibility tester",
"status": "NOT TESTED",
"requiredClosure": "Each action/position/save/error announces once and agrees with visible DOM order; pointer drag has an equivalent keyboard route.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-03",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-04",
"criterion": "Inspect P9-AX-02/03 backgrounds in light/dark, focused/hover/disabled, open native select, scrolled editor and fixed chrome. Measure actual foreground/background paint.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-04 / accessibility tester"
}
],
"evidence": [],
"severityAndImpact": "High accessibility qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "accessibility tester",
"status": "NOT TESTED",
"requiredClosure": "Applicable normal text ≥4.5:1, large text ≥3:1 and necessary UI boundaries/focus ≥3:1. Record sampled colors/ratios/state. An axe incomplete is not sufficient to close the row.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-04",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-05",
"criterion": "Inspect zero badges and both open/settled-closed drawer states with the accessibility tree and actual reader.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-05 / accessibility tester"
}
],
"evidence": [],
"severityAndImpact": "High accessibility qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "accessibility tester",
"status": "NOT TESTED",
"requiredClosure": "Invisible zero badge is absent from announcements; live unread count remains meaningful; closed drawer is neither read nor tabbable. Runtime DOM checks cover only the tested states.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-05",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-06",
"criterion": "Use actual browser 100/200/400% zoom and text-only enlargement, increased text spacing and forced colors across all significant forms, grid pagination, job sections and CV controls.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-06 / accessibility tester"
}
],
"evidence": [],
"severityAndImpact": "High accessibility qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "accessibility tester",
"status": "NOT TESTED",
"requiredClosure": "Essential controls remain reachable/readable, no lost content or focus; distinguish intentional table/document scrollers from root clipping. Preserve fixed A4/Letter geometry.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-06",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-07",
"criterion": "On actual phone/tablet in portrait/landscape, edit long text with software keyboard, open drawers/dialogs/selects, reorder Dashboard and Board via supported alternatives, scroll CV preview and download PDF.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-07 / product owner with physical devices"
}
],
"evidence": [],
"severityAndImpact": "Medium/High human/provider/output qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "product owner with physical devices",
"status": "NOT TESTED",
"requiredClosure": "No keyboard-obscured primary action/data loss; reachable touch targets, no accidental destructive action; record device/input mode. Emulated touch does not close this.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-07",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-08",
"criterion": "Read registration/recovery, validation/errors, onboarding, Dashboard editing, Jobs/Board, Career/import, CV/library, documents/mail, notifications, Settings and Admin in Bokmål. Include long names, singular/plural, dates/numbers and accessible names.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-08 / Bokmål reviewer"
}
],
"evidence": [],
"severityAndImpact": "Medium/High human/provider/output qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "Bokmål reviewer",
"status": "NOT TESTED",
"requiredClosure": "Natural professional Bokmål, consistent established terms, meaningful messages. Separate authored English content, technical names and provider strings from untranslated application copy.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-08",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-09",
"criterion": "Compare preview and downloaded one-/multi-page EN/NB CVs, long words, optional/photo sections and all supported templates on intended Linux/font environment and another supported browser; print representative PDFs.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-09 / document reviewer"
}
],
"evidence": [],
"severityAndImpact": "Medium/High human/provider/output qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "document reviewer",
"status": "NOT TESTED",
"requiredClosure": "Legible fonts, intact glyphs/diacritics, margins, page boundaries, searchable text, photo/crop, correct language/date output and no missing/duplicated content. Retain original bytes, renderer/font versions and print observations.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-09",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "M09-10",
"criterion": "In authorised sandboxes test Google/Microsoft/Turnstile, verification/reset mail delivery, mailbox reconnect/revocation, uncertain send and actual calendar timezone/DST.",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/MANUAL_CHECKLIST.md",
"anchor": "M09-10 / approved provider tester"
}
],
"evidence": [],
"severityAndImpact": "Medium/High human/provider/output qualification",
"dependency": "Human qualified tester; exact build/environment and synthetic data; see MANUAL_ACCEPTANCE.md",
"owner": "approved provider tester",
"status": "NOT TESTED",
"requiredClosure": "Correlated origin/state, explicit confirmation, no accidental resend, correct ownership/timezone. Local SMTP/HTTP fixtures do not close external-provider qualification.",
"gates": {
"phase9": "explicit carry-forward qualification under REQUEST §6; no human result inferred",
"phase10": "affected functionality proof required; no deletion authority",
"production": "BLOCKED until applicable genuine human/provider evidence",
"debt": "open qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "M09-10",
"statusAt3727a72": "NOT TESTED"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-AX-01",
"criterion": "aria-hidden-focus: drawer/focus",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json",
"anchor": "P9-AX-01"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-03/README.md",
"kind": "historical finite scans and original inherited triage",
"occurrences": 1,
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation",
"dependency": "M09-01/02/04/05 as applicable",
"owner": "Accessibility tester",
"status": "Requires manual inspection",
"requiredClosure": "Shared Dashboard drawer settled predicate, Escape focus and24Tab proof pass. Original Analytics transition cause is not proven; human reader/transition qualification remains.",
"gates": {
"phase9": "carry exact applicable manual qualification; no violation or human PASS inferred",
"phase10": "retain accessible functionality; affected-candidate proof required",
"production": "applicable manual evidence required",
"debt": "human qualification; do not count repeated occurrences as unique defects"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-AX-01",
"statusAt3727a72": "Requires manual inspection"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-AX-02",
"criterion": "color-contrast: dashboard size selector",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json",
"anchor": "P9-AX-02"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-03/README.md",
"kind": "historical finite scans and original inherited triage",
"occurrences": 48,
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation",
"dependency": "M09-01/02/04/05 as applicable",
"owner": "Accessibility tester",
"status": "Requires manual inspection",
"requiredClosure": "Contextual foreground/background measurement remains required.",
"gates": {
"phase9": "carry exact applicable manual qualification; no violation or human PASS inferred",
"phase10": "retain accessible functionality; affected-candidate proof required",
"production": "applicable manual evidence required",
"debt": "human qualification; do not count repeated occurrences as unique defects"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-AX-02",
"statusAt3727a72": "Requires manual inspection"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-AX-03",
"criterion": "color-contrast: text/control with obscured background",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json",
"anchor": "P9-AX-03"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-03/README.md",
"kind": "historical finite scans and original inherited triage",
"occurrences": 5,
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation",
"dependency": "M09-01/02/04/05 as applicable",
"owner": "Accessibility tester",
"status": "Requires manual inspection",
"requiredClosure": "Contextual foreground/background measurement remains required.",
"gates": {
"phase9": "carry exact applicable manual qualification; no violation or human PASS inferred",
"phase10": "retain accessible functionality; affected-candidate proof required",
"production": "applicable manual evidence required",
"debt": "human qualification; do not count repeated occurrences as unique defects"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-AX-03",
"statusAt3727a72": "Requires manual inspection"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-AX-04",
"criterion": "color-contrast: hidden badge",
"source": [
{
"path": "docs/redesign/phase-9/p9-03/inherited-axe-triage.json",
"anchor": "P9-AX-04"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-03/README.md",
"kind": "historical finite scans and original inherited triage",
"occurrences": 10,
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Accessibility qualification; incomplete is not a confirmed violation",
"dependency": "M09-05 actual reader/positive count",
"owner": "Accessibility tester",
"status": "Not applicable in tested settled hidden state",
"requiredClosure": "Four current native EN/NB theme vectors: aria-hidden=true and zero area. Actual reader/live unread-state remains separate.",
"gates": {
"phase9": "carry exact applicable manual qualification; no violation or human PASS inferred",
"phase10": "retain accessible functionality; affected-candidate proof required",
"production": "historical zero-state not applicable; live reader state still open",
"debt": "human qualification; do not count repeated occurrences as unique defects"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-AX-04",
"statusAt3727a72": "Not applicable in tested settled hidden state"
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-REQUAL-SEC01",
"reviewId": "P9-REQUAL-SEC01",
"criterion": "System.Security.Cryptography.Pkcs8.0.1 transitive lock via MimeKit4.17.0 contains published high/moderate advisories",
"source": [
{
"path": ".artifacts/p9-requal-01/security-before-pins/",
"kind": "original RED live audit artifacts; exact report hashes owned by root validation ledger"
},
{
"path": ".artifacts/p9-requal-01/security/nuget-advisories.log",
"kind": "actual post-pin audit; root verified, hashes pending final ledger"
}
],
"evidence": [
{
"path": ".artifacts/p9-requal-01/security/nuget-advisories.log",
"kind": "post-pin live NuGet audit: zero findings"
},
{
"path": ".artifacts/p9-requal-01/security/frontend-audit.json",
"kind": "post-pin npm audit: zero vulnerabilities"
},
{
"path": ".artifacts/p9-requal-01/security/npm-advisories.log",
"kind": "post-pin npm audit process log"
},
{
"kind": "root-reported post-pin checks",
"detail": "Backend1123/1123, MariaDB32/32, build/types/lint pass. Frontend and full browser successors pending. Do not add repeated/focused counts or qualify final source with pre-pin frontend934."
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High GHSA-846f-f764-76mx SignedCms CPU exhaustion; Moderate GHSA-2fmv-rv2c-59x7 Windows EnvelopedCms behavior. Vulnerable package presence established; application reachability/exploit not claimed.",
"dependency": "compatible locked dependency correction plus complete affected/frozen-source successor qualification",
"ownerAndRequiredClosure": "Dependency/QA owner: Direct compatible package override System.Security.Cryptography.Pkcs8.0.2; retain MimeKit4.17.0 ownership. Retain before/after advisory paths, raw hashes and exact lock/pin delta; complete frontend/browser and required full successors, then bind all reports to final source. Production deployed dependencies/exposure remain independent.",
"status": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED.",
"gates": {
"phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.",
"phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority",
"production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained",
"debt": "published vulnerable package version repaired locally; remaining evidence qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-REQUAL-SEC01",
"statusAt3727a72": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-REQUAL-SEC02",
"reviewId": "P9-REQUAL-SEC02",
"criterion": "Next16.3.8 locked package now has three published critical advisories",
"source": [
{
"path": ".artifacts/p9-requal-01/security-before-pins/",
"kind": "original RED live audit artifacts; exact report hashes owned by root validation ledger"
},
{
"path": ".artifacts/p9-requal-01/security/frontend-audit.json",
"kind": "actual post-pin audit; root verified, hashes pending final ledger"
}
],
"evidence": [
{
"path": ".artifacts/p9-requal-01/security/nuget-advisories.log",
"kind": "post-pin live NuGet audit: zero findings"
},
{
"path": ".artifacts/p9-requal-01/security/frontend-audit.json",
"kind": "post-pin npm audit: zero vulnerabilities"
},
{
"path": ".artifacts/p9-requal-01/security/npm-advisories.log",
"kind": "post-pin npm audit process log"
},
{
"kind": "root-reported post-pin checks",
"detail": "Backend1123/1123, MariaDB32/32, build/types/lint pass. Frontend and full browser successors pending. Do not add repeated/focused counts or qualify final source with pre-pin frontend934."
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "Critical package advisories GHSA-2464-fhr4-w9xw, GHSA-p3m5-59mp-jv5r and GHSA-673q-mjm6-r5xr. Vulnerable package presence is distinct from reachable deployed paths; no application exploit claimed.",
"dependency": "compatible locked dependency correction plus complete affected/frozen-source successor qualification",
"ownerAndRequiredClosure": "Dependency/QA owner: Pin Next and eslint-config-next exactly16.4.1. Existing static export, unoptimized images and Sharp0.35.5 mitigate the image-serving path; they do not close every package advisory. Retain before/after advisory paths, raw hashes and exact lock/pin delta; complete frontend/browser and required full successors, then bind all reports to final source. Production deployed dependencies/exposure remain independent.",
"status": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED.",
"gates": {
"phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.",
"phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority",
"production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained",
"debt": "published vulnerable package version repaired locally; remaining evidence qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-REQUAL-SEC02",
"statusAt3727a72": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-REQUAL-SEC03",
"reviewId": "P9-REQUAL-SEC03",
"criterion": "Dev-transitive Zod4.5.4 via eslint-plugin-react-hooks is within a vulnerable published range",
"source": [
{
"path": ".artifacts/p9-requal-01/security-before-pins/",
"kind": "original RED live audit artifacts; exact report hashes owned by root validation ledger"
},
{
"path": ".artifacts/p9-requal-01/security/npm-advisories.log",
"kind": "actual post-pin audit; root verified, hashes pending final ledger"
}
],
"evidence": [
{
"path": ".artifacts/p9-requal-01/security/nuget-advisories.log",
"kind": "post-pin live NuGet audit: zero findings"
},
{
"path": ".artifacts/p9-requal-01/security/frontend-audit.json",
"kind": "post-pin npm audit: zero vulnerabilities"
},
{
"path": ".artifacts/p9-requal-01/security/npm-advisories.log",
"kind": "post-pin npm audit process log"
},
{
"kind": "root-reported post-pin checks",
"detail": "Backend1123/1123, MariaDB32/32, build/types/lint pass. Frontend and full browser successors pending. Do not add repeated/focused counts or qualify final source with pre-pin frontend934."
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High GHSA-mrhx-c7xc-m3w5 in development dependency graph. No production application reachability/exploit claimed.",
"dependency": "compatible locked dependency correction plus complete affected/frozen-source successor qualification",
"ownerAndRequiredClosure": "Dependency/QA owner: Use compatible existing ^4 dependency range via Zod4.6.6 override; do not add runtime functionality. Retain before/after advisory paths, raw hashes and exact lock/pin delta; complete frontend/browser and required full successors, then bind all reports to final source. Production deployed dependencies/exposure remain independent.",
"status": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED.",
"gates": {
"phase9": "Bounded compatible repair and affected regression PASS; independent Python gate remains open.",
"phase10": "testpass and functionality-inventory criteria still require final complete evidence; no cleanup authority",
"production": "NOT DEPLOYED; no deployed fix or app-reachable exploit claim; independent release gates retained",
"debt": "published vulnerable package version repaired locally; remaining evidence qualification"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-REQUAL-SEC03",
"statusAt3727a72": "LOCALLY REMEDIATED; post-pin audits zero and complete affected frozen-source successors PASS; production NOT DEPLOYED."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-REQUAL-SEC04",
"reviewId": "P9-REQUAL-SEC04",
"criterion": "REQUEST §9 requires explicit review and disposition of live security/dependency risk; fresh locked Python sidecar advisory findings remain unclosed",
"source": [
{
"path": "docs/redesign/phase-9/REQUEST.md",
"anchor": "9. Security and privacy"
},
{
"path": ".artifacts/p9-requal-01/security/python-locked/",
"kind": "fresh exact locked Python provider queries; completed tracked summaries linked below"
}
],
"evidence": [
{
"path": ".artifacts/p9-requal-01/security/python-locked/",
"kind": "root-reported fresh locked dependency queries",
"detail": "49 pins,98 provider queries,97 successful and1 PyPI404 for torch2.6.0+cpu; exact OSV lookup succeeds.249 provider records deduplicate into109 alias groups across8 packages:certifi,filelock,pillow,pypdf,setuptools,torch,transformers,urllib3. Critical/high among provider severity labels;109 alias groups are not109 independent CVEs. Exploitability/application reachability not assessed.",
"lockedFileSha256": "36f2912965d183e59f2d8320f3817ca8dd0fee6d76e05cfd63ac92defe6c6031"
},
{
"path": "docs/redesign/phase-9/p9-requal-01/python-advisories.json",
"kind": "completed machine-readable advisory summary",
"detail": "See PYTHON_SECURITY.md for current reviewed call sites and limitations. Findings remain OPEN and coverage INCOMPLETE; applicability and exploitability are not fully assessed.",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-remed-02/security/advisory-inventory.json",
"kind": "109 per-advisory baseline groups, source-limited reachability,65 remediated/44 remaining"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/security/validation.json",
"kind": "58 complete model-disabled sidecar cases, actual startup/uploads and bounded Linux parser supplement; focused checkpoint not final full regression"
}
],
"severityAndImpact": "Critical/high provider labels include source-limited model/cache applicability uncertainty; not44 confirmed exploits. One exact vendor PyPI query404 disclosed.",
"dependency": "Security/sidecar owner: remaining filelock protocol/cache compatibility and Torch/Transformers selected-model artifact/runtime qualification; no large model download authorized.",
"ownerAndRequiredClosure": "Security/sidecar owners: complete narrowly scoped filelock cache/protocol compatibility work, select a patched compatible CPU Torch/Transformers graph, verify immutable model/checkpoint identities and startup/inference/extraction contracts in an approved environment; serious residual risk requires explicit owner disposition. No automatic waiver, model change/download or production action.",
"status": "BLOCKED: five exact compatible/parser pins remove65/109 baseline advisory alias groups;44 remain (filelock3,Torch19,Transformers22), individually assessed without owner risk acceptance. Full model-runtime qualification unavailable.",
"gates": {
"phase9": "BLOCKER by acceptance-risk judgment under REQUEST9/13/14: selected-model/cache applicability and compatible fixes remain unqualified; not an automatic veto for every advisory. No owner risk waiver.",
"phase10": "Unwaived security uncertainty and affected functionality/testpass criteria remain; no cleanup authority.",
"production": "BLOCKED independent deployed dependencies/model integrity, active parser exposure and release review; local repairs are not deployed.",
"debt": "Remaining serious uncertainty is not accepted optional debt. Individual source-limited assessments remain visible."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-REQUAL-SEC04",
"statusAt3727a72": "OPEN; locked Python advisory coverage INCOMPLETE; critical/high provider labels retained; exploitability NOT ASSESSED"
},
"remediationAssessment": "Bounded remediation demonstrated; security remains BLOCKED, not RESOLVED/ACCEPTED. Alias groups are not independent CVE/exploit counts; exact vendor PyPI query404 remains disclosed."
},
{
"id": "P9-REQUAL-DB01",
"aliases": [],
"criterion": "Phase9 REQUEST section8: actual MariaDB provider compatibility; document index must return owned metadata with preserved filters and ordering",
"source": [
{
"path": "docs/redesign/phase-9/REQUEST.md",
"section": "8 Database and persistence qualification"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-requal-01/DOCUMENTS_PROVIDER_REPAIR.md",
"kind": "verified provider defect, targeted RED/GREEN, full backend and35-case provider successor",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "fresh native result ledger; separate lane counts and limits",
"historicalBaselineEvidence": true
}
],
"severityAndImpact": "High functional provider defect: Documents index returns500 on actual MariaDB startup schema; no acknowledged-save loss reproduced",
"dependency": "MariaDB document query qualification and sustained workload preflight",
"ownerAndRequiredClosure": "API DocumentsIndexService owner: narrow read-only projection fix, actual MariaDB regression including tenant/search/data preservation, fresh affected full successors",
"status": "LOCALLY REPAIRED at2b26953; three real RED/GREEN cases, full35 MariaDB/1123 backend and complete successor browser/workload PASS.",
"gates": {
"phase9": "Provider query repair and complete successor qualification PASS within tested scope.",
"phase10": "not permission to remove provider/schema/alias compatibility",
"production": "withheld: no production operation or deployed qualification",
"debt": "no schema/table collation migration required for this repair"
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-REQUAL-DB01",
"statusAt3727a72": "LOCALLY REPAIRED at2b26953; three real RED/GREEN cases, full35 MariaDB/1123 backend and complete successor browser/workload PASS."
},
"remediationAssessment": "Inherited qualification remains; no new closure beyond explicitly linked checkpoint evidence. Final source-bound local functional regression PASS; only explicitly linked bounded criteria close."
},
{
"id": "P9-REQUAL-PDF01",
"aliases": [
"RD10"
],
"criterion": "Preview/export document fidelity on intended Linux rendering configuration; unchanged two corpora and geometry/page oracle.",
"source": [
{
"path": "docs/redesign/phase-9/REQUEST.md",
"section": "10: PDF and print validation"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-requal-01/LINUX_PDF.md",
"kind": "fresh real Linux renderer and unchanged oracle results",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-requal-01/validation.json",
"kind": "native reports and source hashes",
"historicalBaselineEvidence": true
},
{
"path": "docs/redesign/phase-9/p9-remed-02/pdf-static-checkpoint.json",
"kind": "actual real Linux24/24,36+24pages, unchanged original oracle and no input drift"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/FONT_PACKAGING.md",
"kind": "font provenance, intentional visual delta, static-outline trial and preserved settings/revisions"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/validation.json",
"kind": "final source-bound actual local execution"
}
],
"severityAndImpact": "High: exported documents shift geometry and gain pages relative to preview.",
"dependency": "Embedded licensed static document fonts at shared render owner; final regression and separate intended-device/print acceptance.",
"ownerAndRequiredClosure": "Document/QA owners: bind final frozen-source Linux and Windows24-fixture results to unchanged oracle/content/geometry checks, review intentional portable font replacement and retained historical bytes; human/physical printing remains M09-09, not automated closure.",
"status": "RESOLVED within original Linux24-fixture scope: final16/16 fidelity36pages plus8/8 settings24pages PASS, unchanged oracle; finalWindows24/24 and supplementalLinux2/2 PASS. No physical-print/deployed output claim.",
"gates": {
"phase9": "Confirmed Linux failure closed by final source-bound unchanged-oracle evidence.",
"phase10": "Affected functionality/testpass and independent route/unused-code/inventory criteria still required; no cleanup authority.",
"production": "Human/print/deployed-renderer/release conditions remain unqualified.",
"debt": "Original functional defect resolved in tested scope; human/deployed output qualification remains separate."
},
"inheritedRecord": {
"path": "docs/redesign/phase-9/p9-requal-01/findings.json",
"id": "P9-REQUAL-PDF01",
"statusAt3727a72": "OPEN: Linux producer5/5 PASS but fidelity9/16 and settings4/8 PASS;65 exported versus60 expected pages. Root cause not yet isolated."
},
"remediationAssessment": "Focused real Linux result PASS; final source-bound Windows/Linux successors PASS. No tolerance/reference changes or frozen PDF rewrite."
},
{
"id": "P9-REMED-PTR01",
"aliases": [
"RD14"
],
"criterion": "CV preview failed-read recovery control must remain pointer- and keyboard-usable without accidental layout movement; existing preview/recovery/accessibility contracts retained.",
"source": [
{
"path": "docs/redesign/phase-9/REQUEST.md",
"section": "6 accessibility qualification and CV/PDF/complete recovery workflows"
},
{
"path": "job-tracker-ui/src/views/CvBuilderEditor.tsx",
"owner": "preview Paper onFocusCapture at shared focus owner"
}
],
"evidence": [
{
"path": "docs/redesign/phase-9/p9-remed-02/PLAN.md",
"kind": "trace and RED/GREEN accounting; first broad attempt95PASS/3FAIL retained"
},
{
"path": ".artifacts/p9-remed-02/pointer-unit-red/test.log",
"kind": "one new unit reproduces descendant-focus scroll before repair"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/SOURCE_REVIEW.md",
"kind": "independent review of minimal shared-owner guard and strict autosave fixture assertions"
},
{
"path": "docs/redesign/phase-9/p9-remed-02/validation.json",
"kind": "final source-bound actual local execution"
}
],
"severityAndImpact": "High usability/recovery defect: pointer-down focus schedules a RAF that scrolls the pane190px before pointer-up; Retry target moves, so no click handler/HTTP retry occurs.",
"dependency": "Shared preview focus owner; genuine physical-device/human checks remain separate; final full regression in progress.",
"ownerAndRequiredClosure": "Frontend/QA owners: retain direct-region focus scrolling/mobile-pane selection while preventing descendant-control target movement; bind unit46/46 plus held-pointer4/4 and stale-draft/admin6/6 focused proof to final935 frontend/362 browser successors. No blanket timeout increase or assertion weakening.",
"status": "RESOLVED within tested scope: focused unitRED/46GREEN and native6GREEN retained; final complete935 frontend/362 ordinary browser PASS with no retries/skips. Source review found no remaining Important issue.",
"gates": {
"phase9": "Confirmed pointer defect closed by failing-before and complete passing successor evidence.",
"phase10": "No cleanup authority; preserve focused recovery behavior and satisfy independent route/inventory/testpass criteria.",
"production": "Local repair not deployed; physical/device/human and release evidence remain.",
"debt": "Bounded functional repair, not optional optimization. Original admin deadline failure retained as unreproduced in isolated focused successor."
},
"remediationAssessment": "Stale-draft fixture observes actual autosave409/200 instead of racing SaveNow; original draft/download/history/version assertions retained. Focused6 not added to whole362; first failed95/3 shard and prior934 frontend not accepted as current complete results."
}
],
"checkpointCommit": "b313e20",
"counts": {
"findings": 60,
"inherited": 59,
"new": 1,
"preservationGroups": 57,
"partialGroups": 56,
"deferredGroups": 1,
"supportedRoutes": 33
}
}
Reference in New Issue View Git Blame Copy Permalink