jobtrackingapp/docs/redesign/phase-7/DEBT.md

# Phase 7 — Retained debt and mandatory gates

This is the current entry disposition of every RD01–RD28 obligation in the [Phase5 debt register](../phase-5/p5-15/READINESS_DEBT.md), reconciled with [successor dispositions](../phase-5/p5-15/p5-15-04/DEBT_DISPOSITION.md), [Phase6 final report](../phase-6/p6-05/README.md) and [exact handoff](../phase-6/p6-05/PHASE7_HANDOFF.md). Historical records stay intact. This table updates scoped outcomes rather than copying obsolete source descriptions as current facts.

Production remains **NO-GO**, main unchanged. Independent bounded development can continue with explicit conditions; a demonstrated severe shared/security/data failure blocks its dependent propagation. Actual provider/production/destructive actions retain separate authority.

## Every retained debt

| ID | Current entry disposition | Dependency / permitted Phase7 boundary |
|---|---|---|
| RD01 | F04 actual production ingress/topology/trusted socket peer/TLS/IPv6/firewall/client identity remains OPEN | Release gate; local ingress tests do not supply actual deployed proof |
| RD02 | Current complete DB/files/CV/export/DataProtection/tombstone recovery set and isolated restore UNVERIFIED | Release/lifecycle gate; backup download is not restore evidence |
| RD03 | Effective provider/schema/configuration/secrets/startup and F19 fallback UNVERIFIED | Release gate; no DDL/cutover or provider assumption hidden in presentation |
| RD04 | Isolated Linux failure/rollback rehearsal and complete prior images/config UNVERIFIED | Release gate; production restore/restart not authorised |
| RD05 | Protected CI/runner/deployed SHA/authenticated smoke identity UNVERIFIED | Release gate; repository main identity is not deployed identity |
| RD06 | Human reader/state/name/contrast and contextual axe acceptance remain OPEN | Applicable M01–M12; current52+267 inventories below supersede old counts; no conformance claim |
| RD07 | Physical touch/software keyboard/mobile AT/forced-colors/text-spacing/alternate-browser acceptance NOT VERIFIED | Applicable actual operators/devices; finite emulation/zoom does not replace them |
| RD08 | P5-13 model semantics/review UI remains DEFERRED/UNQUALIFIED/withheld; frozen32 cases,0/366 configured-target calls,0human reviews | PRES-C11 and M13 do-not-execute; no automatic model qualification or UI activation |
| RD09 | Production CV proposal503/no-provider/no-write has local contract proof; actual deployed withholding unverified | Preserve guard and unrelated existing AI; no unqualified generation/Apply |
| RD10 | Actual production Linux/fonts/portrait/crop/print/other-browser output qualification UNVERIFIED | Local original16/36+8/24 oracle remains passing and finite |
| RD11 | Language preference500 server root remains OPEN; **P6 now shows local/account scope failure, explicit retry and latest-choice race protection** | P7-09 retains repaired feedback; do not claim concurrency/server cause fixed |
| RD12 | Notification-setting SQLite locking/server contention remains OPEN | P7-09 retains draft/in-page error; diagnose intended-provider writes before stronger reliability claim |
| RD13 | Historical Rules500 cause unconfirmed/OPEN; prior durable error/retry/discard/internal-draft repair retained | P7-09 keeps Rules save owner/draft lifetime; no generic retry hides root |
| RD14 | Command/dialog focus timing incident cause remains unproven | All changed modal/shell owners require actual trap/restore/transition proof; clean rerun is not diagnosis |
| RD15 | CV section expansion historical intermittent cause remains unproven | Retain failed observation and original assertions; investigate if reproduced |
| RD16 | **Scoped P6 company-error defect repaired:** durable dialog-local accessible alert, retained draft and retry readback; focused/integrated ordinary cases pass | P7-05 must preserve it; whole actual-reader/dialog/contact/date acceptance remains PARTIAL |
| RD17 | Complete Board result grouping/rendering remains O(N); measured200/1,000 observations prove capacity cost, not a budget | Preserve full membership/query parity; separately bounded measured capacity work, no hidden result cap |
| RD18 | Board/CV physical selection/drag/drop/cancel/browser variants NOT VERIFIED | Applicable M03/M06/M12 physical evidence and named keyboard alternatives; no invented cross-section feature |
| RD19 | `followMode` producers/query metadata retained; reviewed consumer remains DEFERRED | P7-06F requires explicit mode→draft/review action/fallback before implementation; no auto-send/resend |
| RD20 | P5-05 optional read-only quick preview remains DEFERRED; unsupported NEW/OD and Phase8 scope remain reserved | No second full editor or early Dashboard order/resize/reset/cross-device widget framework |
| RD21 | Canonical profile/job stale-save and creation-intent idempotency remain OPEN, separate from verified CV revision | Forward-ID compatibility and structured dirty-locale/held-PUT guards have bounded proof; stale200/last-writer and absent backend expected-version protection remain. Import/history candidate local mutexes do not fix cross-tab/server concurrency. Acceptance may commit canonical data before later Identity failure; retain partial-write/recovery qualification |
| RD22 | F20 enabled-worker outage recovery/durability remains OPEN | Inspect intended gates; recovery/no-loss/no-duplicate proof before new enabled producers; no worker activation |
| RD23 | F21 calendar offset/DST/date-only semantics remain OPEN | P7-05/06 retains existing links; dedicated contract/provider proof before semantic changes or scheduling claims |
| RD24 | Billing/deletion/retention/tombstone/provider-cleanup policy/configuration UNVERIFIED | P7-09 presentation only; no checkout/deletion/restore activation or guessed policy |
| RD25 | Real OAuth/Turnstile/mail/calendar/model/signup delivery/reconnect/privacy semantics remain finite/unqualified | Current provider protocols retained; actual authorised sandbox/human evidence for affected acceptance; never auto-resend uncertain delivery |
| RD26 | Legacy Job/Application expand-verify-contract cutover remains OPEN | No compatibility column/read/write removal; separately authorised production/restore reports and rollback |
| RD27 | Actual monitoring/alerts/recovery owner/runbook coverage UNVERIFIED | Release failure-detection/recovery gate; do not fabricate centralized sink/alerts |
| RD28 | Evidence scope/failure provenance and original closures must be preserved | P2-D01 ordinary pass; no assertion relaxation/skip; inherited old attachment-loss limits remain explicit |

The IF-CV-UNSAVED-01 recoverable-draft/Unsaved intermittent trace obligation also remains open under the CV revision/evidence boundary; successful native held-PUT/history runs do not diagnose every historical incident. Dashboard measured duplicate source reads/layout shifts remain bounded follow-up candidates, not proven backend defects or comparative performance improvements.

## Current accessibility inventory and triage

Actual final Phase6 report SHA256 is `a908c30a8435448b00849171e3cb9ce68b96570f60c3da086409e434d1bcd82a`; measured source/export are `bd47214bdcd74336788dca0f294b8ddb9403cac1` / `2LDblja_XnSBWSuY6ys_V`. The [aggregate](../phase-6/p6-05/evidence/validation.json) retains exact attachment hashes/counts and detailed or representative contexts; complete raw node vectors remain in its identified source report.

| Scope | Snapshots | Violation-node occurrences | Incomplete occurrences |
|---|---:|---:|---:|
| Detailed all-enabled |52|11|435|
| Retained WCAG-tagged/domain-scoped |267|0|2,038|
| Combined **mixed scope** |319|11|2,473|

Counts repeat across states and are not unique defects, all-enabled coverage for319, or a like-for-like Phase5 comparison. Pre-CSS49/11/342 evidence stays historical; the final repaired source52 adds two label and one settled-touch states. Restored modal workflows add16 retained-rule checkpoints versus the first failed full run's251.

| Category | Detailed52 | Retained267 | Combined319 | Required contextual treatment |
|---|---:|---:|---:|---|
| landmark-unique violations |5|0|5|CV parent main/paper-frame context; preserve white print document boundaries and actual reader landmark review |
| heading-order violations |2|0|2|AddJob step heading and workspace Strategy snapshot; bounded semantic owner repair if reproduced, not renderer changes |
| aria-command-name violations |4|0|4|First emulated-touch drawer sample retains four; settled named/focused drawer has0 with Escape restoration. Do not invent transition cause or spoken acceptance |
| color-contrast incomplete |394|1,766|2,160|Overlap/obscured/short-text contexts need M11 measurement; tagged checks include1,380 overlap/193 partly obscured/189 short-text/4 partly obscuring nodes |
| aria-prohibited-attr incomplete |28|209|237|Disabled CV labels/checklist wrappers; review contextual name/state under M09/M11 |
| aria-hidden-focus incomplete |10|41|51|Menu/root/popover/drawer/current-state focusability; tagged contexts #menu24/#root12/popover4/drawer1; evaluate trap/isolation/return |
| aria-valid-attr-value incomplete |2|18|20|Command-dialog missing-label-ID/lifetime context; inspect actual lifecycle and reader names |
| target-size incomplete |1|0|1|Actual physical target/context under M12; no blanket spacing waiver |
| th-has-data-cells incomplete |0|4|4|Four list-error light/dark EN/NB captures target table and report missing/empty data cells; M11 error/header/data context and M09 recovery, no established application defect from incomplete alone |

Settled touch still retains contrast4 and hidden-focus1 (#root) incomplete; it is not blanket accessibility clearance. Applicable manual **M01–M12 remain NOT VERIFIED**, especially M09 spoken names/errors/state, M11 contextual contrast/forced colors/motion and M12 physical touch/software keyboard/orientation/mobile AT. **M13 is deferred AI return/do-not-execute**, not the contrast packet.

Use the established [accessibility plan](../phase-3/ACCESSIBILITY_PLAN.md): WCAG2.2 AA project target, ordinary text4.5:1/large text3:1/control-focus3:1, visible focus/reflow/labels/errors/live state/reduced motion;44px physical-touch aim distinct from AA24px/spacing rules. No automated conformance certification.

### P7-01 public disposition

[Public results](p7-01/evidence/public-auth-results.json) are pushed in8ad720d with direct development equality verified2026-10-11 18:50:24UTC, main unchanged. Its22 new all-enabled scans independently retain0 violation nodes/31 `color-contrast` incomplete nodes, all background-overlap checks on input/button contexts. Keep this separate from the319 mixed-scope Phase6 snapshots; repeated nodes are not unique defects or a comparative conformance score. M09 spoken errors/status/route announcements and M11 contextual contrast/forced colors remain mandatory; human reader/browser zoom/physical input are not supplied by the eight inspected PNGs or native geometry.

RD25 has new **bounded local proof**: actual application registration/SMTP verification/password reset/replay and old-session invalidation pass in fresh synthetic SQLite/keys with a loopback mail capture server. Actual production mail, OAuth/Turnstile/provider consent/privacy/reconnect and delivery remain unverified. Existing English server-authored auth errors in NB samples and possible duplicate route/error announcements remain explicit reader/localisation qualifications. RD06/RD07/RD25 are not closed. At the public gate account identity/security/session/source-isolation work remained in flight; the later conditional disposition is below. No deferred AI activation is implied.

RD28 public runtime provenance is retained in the immutable `.artifacts/phase7/p7-01/public-final/` snapshot, including earlier failed SMTP attempts and final export BUILD_ID. Its manifest file references point to that snapshot while raw reports preserve original internal absolute execution paths; commands/hashes/counts are unchanged. This does not erase the separate historical Phase6 attachment-loss qualification.

### P7-01 account conditional disposition

[Account results](p7-01/evidence/account-results.json) add fresh573/89 frontend, account6/public22/auth-boundaries10 and types/lint/build pass. The account8 all-enabled scans retain0 violation nodes/85 incomplete occurrences: contrast84 (74 overlap/8 short-text/2 partial overlap) and hidden-focus1 targeting`#root` in the failed revoke-others modal. Actual keyboard trap/return and modal-local error/retry assertions pass; **M09/M11 remain required**, including spoken state and contextual contrast/forced colors. The account-build public22 scans separately retain31 contrast incompletes. Keep these30/116 current finite occurrences separate from the319/2,473 inherited mixed-scope Phase6 records and earlier pre-copy account8/84.

Copy fixes following actual visual review truthfully describe stored profile CV text and natural Microsoft unavailability, without changing Career CV labels, fetching the CV library or exposing setup variables to the product user. Identity-only persist/reload and canonical/sibling no-write evidence do not close Career concurrency/import/override/render/production debts. Fresh full573 supersedes the historical pre-copy571 runtime count; no test is skipped to obtain acceptance. All eight final post-copy PNGs were actually inspected and implemented scope is CONDITIONAL GO; final staged finite hygiene passed and accountad7b419 is normally pushed with actual localHEAD=origin=live receipt2026-10-11 19:16:15UTC; main unchanged, worktree clean at observation. Exact runtime/attempt/build/unit/source/export evidence is frozen under `.artifacts/phase7/p7-01/account-final/`, with206 path/hash references verified. The immutable public static record is separate from the latest account static checks. RD06/RD07/RD25 and all manual/provider/release obligations stay open.

## Evidence and production limits

The [separate P7-02 SQLite evidence-list repair](p7-02/evidence/evidence-list-repair.json) reproduces actual provider/HTTP failures and passes the new ordinary SQLite case,91 affected guards, Release build and HTTP readback after owner-local materialization/sort. It changes no schema, SQL owner filter or other-provider ordering. Fullbackend1,034 is derived only; full regression remains P7-12. The list remains O(N), and HTTP proof does not establish Career presentation/reader/production acceptance. Source/DLL/RED/GREEN/spec/raw traces are frozen with34 references verified; slice-specific hygiene PASS00:05:02UTC (9docs337links/0errors,57/32 retained), normal push01281f52 directly verified00:06:47UTC/main unchanged, five unfinished Career paths retained. No RD production/manual/concurrency/provider closure follows from this bounded compatibility repair.

### P7-02 onboarding conditional disposition

[Onboarding results](p7-02/evidence/onboarding-results.json) add fresh affected32/2, ordinary native13 and separate existing Dashboard/Analytics4 with types/lint/build passing. All13 final PNGs were actually inspected; thirteen all-enabled scans retain0 violation nodes/13 `color-contrast` incomplete occurrences on the invisible notification badge `0` (`shortTextContent`). Keep M09/M11 contextual/human qualification and all provider/zoom/physical-input gates open. The connected-mailbox response in the four-complete native case is an explicit stored-connection fixture, not a real grant. Controlled English failure text is server-fixture detail; translated product guidance/fallbacks remain separate.

Actual review demonstrated lost focus when Retry disappeared. Five strengthened existing unit cases and one focused native case reproduced it before the bounded Dismiss-ref/focus correction; final native13 proves retry focus and next action after dismissal/complete recovery. Existing Dashboard summary Retry recovery still captures focus on the shell Skip link with altered scroll; its owner focus restoration remains unqualified. Presentation retry does not diagnose historical Dashboard/Board500 causes or close RD08–RD14. Latest full573/89 is inherited;596/89 is derived573+23 only. Exact source/test/build/export/runner/raw/unit/history are frozen under `.artifacts/phase7/p7-02/onboarding-final/`,154 file-reference hashes verified; initial pre-focus source/export observations are historical identities rather than claimed snapshots. Implemented onboarding CONDITIONAL GO is final hygiene PASS and normal pushd21501aa/direct receipt23:55:12UTC; Career overview/evidence and whole P7-02 remain pending,57/32 statuses unchanged.

### P7-02 Career conditional disposition and P7-03 dependency

[Career results](p7-02/evidence/career-results.json) retain affected46/3, native14 and fresh existing P2-D01/mobile-override2, types/lint/build and actual22-image review passing. Delete-cancel focus loss was reproduced in native and strengthened unit cases before a minimal state-order correction; the shared confirmation and duplicate guard remain. The separate clipboard failure was native Windows LF→CRLF conversion, with only CRLF→LF test normalization and raw codepoint retention. All prior failures stay in immutable history; no product clipboard or byte-exact OS claim is made.

Twenty-two all-enabled scans retain0 violations/**99 incompletes**: contrast74 `bgOverlap`+22 invisiblebadge `shortTextContent`, plus3 hidden-focus `#menu-` MUI select portals. Actual section/form keyboard and corrected cancel/retry focus pass; M09/M11 contextual contrast/reader and RD06/RD07 human/device/zoom remain open. Error captures retain inherited shell Skip-link/scroll focus qualification and controlled English server-fixture detail. No density/provider/production acceptance is inferred. Source/test/export/runner/raw/unit history is frozen in `.artifacts/phase7/p7-02/career-final/`,152 refs verified; final buildqG82wPnFf-IsAkFvXkmn6. Implemented P7-02 is CONDITIONAL GO; [Career final hygiene](p7-02/evidence/career-static-checks.json) PASS (four commands0,9docs347links0errors), normal push8b4d5c2 directly verified05:51:04UTC, main unchanged/clean worktree at observation. Latest full573/89 remains inherited;610/89 and backend1,034 are derived expectations only.

Two independent read reviews identify the existing normalizer dropping job/education/certification/project stable IDs while overrides reference those IDs. P7-03 must separately reproduce and repair optional-ID preservation before structured presentation, with canonical/sibling native and payload proof. This inherited risk is distinct from RD21 stale-save/idempotency and is neither introduced nor closed by P7-02. No date-loss claim is made. Prove dirty-locale/pending-write draft ownership and recovery, and resolve or explicitly bound RD21 before changing save/history owners. Other manual/provider/production and C11/Phase8 gates remain unchanged.

### P7-03 forward-ID repair disposition

[Source-ID results](p7-03/evidence/source-id-results.json) reproduce ID/override loss and null→0 metadata before a bounded frontend normalizer correction; final unit46/3, native2/preservation2, types/lint/build and11 exact readback flags pass. The +8/+1-suite addition gives only derived618/90; browser216/backend1,034 likewise are not new full runs. Prior API DLL/91 targeted guard evidence is inherited unchanged. No automatic unsafe matching/remap of older orphaned overrides occurs; historical records stay. [Final source-ID hygiene](p7-03/evidence/source-id-static-checks.json) PASS at earlier observation; final staged EOF whitespace failed, local3047b6c4 remains unpushed at that failure gate; the transparent test-whitespace/docs successor704637a and normal repair3047+7046 push are now directly verified06:34:48UTC, main unchanged/clean at observation; [fresh corrected staged gate](p7-03/evidence/source-id-hygiene-correction-static-checks.json) PASS (four commands0,10docs374links0errors). No runtime/assertion change or evidence loss.

RD21 now has actual stale200/last-writer/append-restore/raw-current/owner-denial characterization, retaining its concurrency risk before any save/history semantics change. Dirty-locale and held-PUT/pending-write ownership/recovery still require proof for the presentation slice. Two final PNG reviews remain qualified: original editor sticky-scroll capture and blended frozen-dialog/workspace image, with transition cause unconfirmed. No new axe attachments or human/device/theme/settled-dialog acceptance; RD06/RD07/RD14/P7-06/P7-11 requirements remain. Source-ID forward repair does not close full C01/C07 or import/history/production obligations.

### P7-03 structured-editor conditional disposition

[Final editor evidence](p7-03/evidence/editor-results.json) adds bounded dirty-locale/no-refetch, held structured/raw editing locks, localized generic fallback and durable server-detail retry proof: affected54/4, ordinary editor11 plus applicable source-ID2/Career14/preservation2, fresh types/lint/build PASS; all13 final PNGs actually reviewed. Root-overflow is0 for the finite samples. Editor13 scans retain0violations/377 incompletes (362overlap,13short badge,1obscured actual400 context,1hidden import-select portal); separate Career22 scans retain0/99 including3hidden evidence-select portals. M09/M11 and capture-context focus, humanAT/touch/zoom/provider/output requirements remain open. Expanded raw-helper RED and earlier collapsed-panel coverage gap are preserved; original first-build export loss remains explicit. Implemented editor CONDITIONAL GO with final staged hygiene PASS and normal pushf7f6b774 directly verified2026-10-12 11:33:47UTC, localHEAD=origin=live/clean/main unchanged. No RD21 concurrency repair, automatic orphan remap, full regression, import/history closure or production GO is inferred; all57/32 statuses and C11/Phase8 gates remain.

Import/history enters at clean, pushed metadataec23b650 (11:36:15UTC); [entry evidence](p7-03/evidence/import-history-entry.json) retains committed baselines and inherited W4 export. The [current candidate](p7-03/README.md#importhistory-candidate-implementation-and-pending-final-validation) implements scoped history/diff error recovery, local pending-write guards, stale comparison invalidation, retained review choices and stable focus. Earlier affected76/6 passed before the latest focus/inline-Alert changes; final unit/native/build/visual/axe/hygiene/push acceptance remains pending. Initial +20/646 expectations are historical, superseded by22 new cases/2 suites and derived648/93; prospective ordinary233 adds6 cases, with no new full-suite execution claim.

Native W4 baseline0/6 and attempt1 1/5 retain an invalid missing-level French fixture; neither establishes valid Low French product RED. Attempts2/3 each retain4PASS/2FAIL; attempt4 retains5PASS/1FAIL after explicit reload fixes language setup. Its actual remaining NB320 `scrollable-region-focusable` target is the pending-ready inline success Alert message, not the initial Pro-notice attribution. The latest owner-local Career Alert wrapping/overflow correction awaits final affected validation; no global theme/framework change or completed reader qualification follows. Corrected stored Low Contact verifies actual HTTP reachability, explicit selection and unchanged account email; it qualifies no extraction/model/provider. Controlled comparison labels are localized, imported facts remain verbatim, and server summaries/truncation plus un-compared custom/parsed sections/metadata are disclosed. Backend expected-version protection remains absent and canonical acceptance can precede later Identity failure. Keep RD21/M09/M11, previous manual/provider/output/production gates and old orphan recovery open; no lifecycle/schema/renderer/model or Phase8 expansion follows.

The early Phase6 runner retained exact failure commands/reports/logs but reused result folders, so not all old screenshots/traces/error-context paths remain resolvable. Later runs archive the whole previous output; current successful attachments have exact provenance. Preserve that limit rather than claiming complete old failure-trace retention. Native Windows Chromium/local SQLite/synthetic fixtures and finite PDF oracles do not establish deployed Linux, human semantics, physical devices, real provider quality or production load.

API transferSize0 is unavailable cross-origin timing information, not zero network bytes. CDP document/node/heap snapshots can retain earlier navigation/CV iframe documents and do not prove leak/growth. The existing measured Board/Dashboard candidates require baseline/comparative evidence before a repair or capacity claim.

Production remains NO-GO until RD01–05/RD27 plus effective schema/configuration/secrets/provider/F19, complete off-host recovery and isolated Linux rollback/deployed smoke requirements have operator evidence and a separate release decision. The workflow deploys on main push; the owner explicitly keeps main unchanged during this mission. No destructive/provider/production action is authorised by this debt table.

### P7-03 Import/history conditional disposition

[Final import/history evidence](p7-03/evidence/import-history-results.json) records fresh affected76/6, ordinary native35 (6new), unchanged-binary backend98, seeder24, app/browser types/lint/build PASS on _ZuuD2E8lPzbPiP8Dve7Q/75-file export. Actual source/history, select/deselect/accept/discard/replay, account-email separation, tenant/anonymous denial, dirty recovery and sibling/override/frozen readback pass. Named scoped feedback, pre-pending focus and owner-local narrow Alert wrapping are corrected. All17 new images plus16 representative regression images are inspected;54 retained total. Import17 scans0/302, editor13 scans0/377 and Career22 scans0/99 remain fully qualified; M09/M11 overlap/portal/foreground contexts and reader/device requirements stay open. Runtime/design implemented P7-03 CONDITIONAL GO; final hygiene/push pending. All57 statuses/32 routes unchanged. RD21/backend concurrency and partial-write recovery, old orphan records, provider/output/human gates remain; no schema/model/PDF activation or production GO. New22/2 yields648/93 and native+6 yields233 only as derived totals; full573/89/backend1,033/sidecar49 remain inherited pending P7-12.

### Observed import/history push receipt

Implemented P7-03 scope is **CONDITIONAL GO**. The normal import/history push `5d6e32358c79cc8cfe505013fc79995940079767` was directly verified at 2026-10-12 17:28:54.912933UTC: local HEAD=origin=live development, clean worktree, local/origin/live main unchanged `27657f31131cd95d42f0e1290853ec9c9b3959a4`. Fresh affected76/6, ordinary native35, backend98/seeder24, types/lint/build and staged hygiene pass; 33/54 retained final images were inspected. Import17 scans0/302, editor13 scans0/377 and Career22 scans0/99 remain qualified. RD21 concurrency/partial-write recovery, old orphan records and human/device/provider/output requirements remain open. All57 groups remain56 PARTIAL/C11 DEFERRED,32 routes retained. 648/93 frontend and233 browser are derived only; latest whole573/89 remains inherited. Production NO-GO, P5-13 withholding and Phase8 separation remain unchanged.

### P7-04 library finite disposition

[Library results](p7-04/evidence/library-results.json) record fresh affected38/4 (+12/0), ordinary native8, existing editor/gallery consumer4 with actual PDF200, unchanged-binary backend72 and types/lint/build PASS on _fYf-IvM_ULd3ZPdUW-8h. All19 final PNGs actually reviewed; finite root overflow0. Library19 all-enabled scans0/64 and editor12 retained-scope scans0/122 remain contextually qualified: badge/overlap/modal portals, disabled Undo/Redo wrappers and obscured print headings retain M09/M11/manual requirements. Server template names/categories remain English metadata in NB and are P7-11 localisation residual. Meaningful unit/native RED and peer fixes preserve draft/error/current-locale/managed-focus behavior; no assertion/rule waiver. Implemented library CONDITIONAL GO with final hygiene/push pending; public entry/full P7-04 pending. All57 statuses/32 routes unchanged; frontend660/93/browser241/backend1,034 derived only, full573/89/backend1,033/sidecar49 inherited until P7-12. RD21/canonical concurrency, old orphan/frozen/output/provider/human/release debt remains; P5-13 withheld/main NO-GO/Phase8 separate.

### P7-04 public evidence

Public18 top-document all-enabled scans0/12 retain sandbox frame-tested occurrences: generated document context is not fully scanned or human accepted. Keep scripts withheld; M09/M11 remain. Final settings12 WCAG-tagged scans0/223 retain24 disabled Undo/Redo span labels,12 short-text badges,161 overlap and26 partially obscured contexts. Explicit reload observes owner revocation; no live cross-client revocation claim. Actual18 public images and four final PDF comparisons reviewed, not all60 pages. Fresh fidelity16/36+8/24 preserves exact tolerances, no production font/photo/print or provider clearance. RD21/old orphan/concurrency/partial-write/production obligations unchanged; library server-template metadata localisation remains P7-11 residual.

### P7-05 Discovery evidence

[Discovery results](p7-05/evidence/discovery-results.json) repair reproduced saved-to-manual context, held old rows, unrelated Retry, edited-filter loss, duplicate mutations, unnamed spinner and Cancel/removed-control focus in the local owner. New18 all-enabled scans0/81 retain18 badge,57 overlapped contrast and6 modal-focus incompletes; existing9scans0/52 remain. Keyboard trap/return/next Tab and moved-focus tests are automated Chromium evidence, not M01-M12 human/device/zoom acceptance. NAV/provider delivery/model calls were withheld; UI-only intercepted dismiss204 is not persisted-run/history proof. No inherited debt or whole PRES group is closed by this slice.

### P7-05 Companies evidence

[Companies results](p7-05/evidence/companies-results.json) repair demonstrated duplicate/held-save draft ownership, stale relation reads, deep-link hash/state loss, locale refetch, incorrect arbitrary-stage translation, stale response title and BODY focus after dialog exit. Local post-exit fallback preserves valid MUI/moved focus. New20 all-enabled scans0/91 and named20 WCAG0/163 retain complete unresolved overlap/occlusion/modal/contrast/wrapper vectors; finite keyboard/reflow proof does not close M01–M12. Date readbacks compare full calendar seconds without claiming SQLite Kind/DST equivalence. Existing shared cached consumers remain; no inherited debt or whole PRES group is closed.