Merge pull request 'docs(governance): refresh live audit status' (#233) from codex/dev-000248-self-development-runtime-status into main

dev/ACTIVE_TASK.json

@@ -1,5 +1,5 @@
 {
-  "task_file": "dev/tasks/DEV-000254-development-gate-canary-promotion-rollback.json",
-  "task_id": "DEV-000254",
+  "task_file": "dev/tasks/DEV-000255-refresh-live-audit-status-projection.json",
+  "task_id": "DEV-000255",
   "task_revision": 1
 }

dev/tasks/DEV-000255-refresh-live-audit-status-projection.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000255",
+  "task_revision": 1,
+  "architecture_revision": "ADR-0018",
+  "base_repo_revision": "12ab124411771fbed16e1f1935b97b1d0700a7b0",
+  "risk_tier": "E",
+  "intent": "Refresh the audit status projection and evidence matrix from current production and authenticated UI observations without changing runtime behavior.",
+  "requirement_ids": ["task lineage and status synchronization", "auditable production evidence"],
+  "allowed_change_scope": {"modules": ["governance-documentation"], "paths": ["docs/PROJECT_STATUS.md", "docs/evidence/audit-completion-matrix-2026-08-23-v4.json", "docs/evidence/authenticated-ui-acceptance-2026-08-23-v3.json", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000255-refresh-live-audit-status-projection.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**", "contracts/**", "LLM-local/**", "cmd/**", "modules/**", "adapters/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["current production health and revision evidence", "current authenticated Creator UI observation"], "may_change": ["documentation evidence projection only"]},
+  "semantic_owner": "Governance evidence projection",
+  "canonical_state": ["none; evidence files are derived audit artifacts"],
+  "state_transitions": ["supersede stale status projection with timestamped current evidence"],
+  "side_effects_and_privileges": ["documentation-only; no runtime, database, secret or external mutation"],
+  "persistence_and_migrations": ["none"],
+  "failure_retry_restart": ["retain prior evidence as historical; newer evidence supersedes it without rewriting history"],
+  "assumptions": ["mobile viewport cannot be emulated by the current in-app browser control surface, so mobile remains explicitly unverified"],
+  "acceptance_scenarios": ["status names current deployed revision", "model counts match current authenticated UI", "external bridge and mobile limitations remain explicit", "no secret values are recorded"],
+  "required_tests": ["go test ./cmd/core-runtime", "go vet ./cmd/core-runtime", "independent evidence review", "go run ./cmd/devctl preflight -active dev/ACTIVE_TASK.json", "go run ./cmd/devctl check-diff -active dev/ACTIVE_TASK.json", "go run ./cmd/devctl check-architecture", "git diff --check", "CI", "production health smoke"],
+  "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_SPEC_GAP"]
+}

docs/PROJECT_STATUS.md

@@ -2,7 +2,7 @@
 
 ## Current audit delta — 2026-08-23
 
-- `LAST_COMPLETED = DEV-000222`; independent task verification now supports exact text and structured top-level JSON-field checks, and unresolved outcomes can produce two bounded additional case candidates after the general evaluation stage. The task packet is merged to `main` and deployed; quality remains unclaimed unless verifier evidence is present.
+- `LAST_COMPLETED = DEV-000254`; the governed self-development path now has a local bounded verifier plus durable authenticated CAS transitions for `CANARY`, `PROMOTED` and `ROLLED_BACK`. Production is deployed from merge `12ab124`; mobile UI remains explicitly unverified because the current browser control surface cannot emulate a 390x844 viewport.
 
 - `CURRENT_PRODUCTION_STATUS = LIVE_HEALTHY`; public `/healthz` is healthy. The exact deployed revision is authoritative in the deployment log and merge record, not duplicated in this mutable status projection. Evidence: `docs/evidence/audit-runtime-status-2026-08-23-v1.json`.
 - `FAST_PROVIDER_STATUS = LIVE_SMOKE_SUPPORTED`: local CPU gateway authentication is configured through a protected file reference; four bounded local-only advisory cases completed through cognitive-worker. Evidence: `docs/evidence/wp-601-fast-gateway-live-smoke-2026-08-22-v1.json`.
@@ -13,19 +13,19 @@
 - `TRUTH_RESEARCH_STATUS = LIVE_CANARY_PERSISTED`; the web research canary preserved an OBSERVED/COMPLETE/NO-CONFLICT source chain while leaving the claim UNVERIFIED and belief PROVISIONAL. Evidence: `docs/evidence/truth-runtime-canary-2026-08-23-v1.json`.
 - `LEARNING_REFLECTION_STATUS = LIVE_RECONCILED`; reflection worker returned no pending candidate and the durable state contains 31 RESOLVED candidates with no OPEN backlog. Evidence: `docs/evidence/reflection-runtime-reconciliation-2026-08-23-v1.json`.
 - `BACKUP_RESTORE_STATUS = VERIFIED`; latest checksum and isolated restore evidence is retained in `docs/evidence/wp-002-postgres-restore-2026-08-22-v1.json`.
-- `GOVERNED_SELF_DEVELOPMENT_STATUS = DURABLE_GATE_PERSISTED`; Work-owned revisioned gate storage and optimistic-concurrency persistence are live. No bridge-backed source mutation, promotion or rollback is claimed. Evidence: `docs/evidence/governed-development-gate-persistence-2026-08-23-v1.json`.
+- `GOVERNED_SELF_DEVELOPMENT_STATUS = DURABLE_GATE_VERIFIER_AND_TRANSITIONS_LIVE`; Work-owned revisioned gate storage, independent local verification, and authenticated optimistic-concurrency transitions for canary/promotion/rollback are live. Source mutation and external bridge execution remain unclaimed. Evidence: `docs/evidence/governed-development-gate-persistence-2026-08-23-v1.json` and DEV-000254 CI/live-smoke records.
 - `UI_AUTHENTICATED_ACCEPTANCE = AUTHENTICATED_QUICK_SMOKE_PASS`; browser-driven smoke completed in the active production session: chat response received, admin login accepted, diagnostics 7/7 passed, operations fleet 4/4 READY, and action history loaded. Deep mutation, delegation-specific and long-running acceptance remain intentionally deferred.
 - `CURRENT_UI_SESSION_STATUS = NO_CURRENT_AUTHENTICATED_SESSION`; the historical quick-smoke evidence above is retained, but the current acceptance run has no signed-in browser session, so no new authenticated visual result is claimed. Public cabinet shell and unauthenticated protection were checked separately.
 - `AGENT_WORKER_STATUS_CORRECTION = LIVE_TRUTHFUL_LOCAL_EXECUTOR`; absence of the protected bridge is reported as `executor_configured=false`, `mode=local-executor`, `ready=false`, with `task-evaluation` as the only advertised local capability; unsupported work remains durably waiting and is not represented as external agent execution. Evidence: `docs/evidence/audit-runtime-status-2026-08-23-v2.json` (pre-DEV-000227 field shape remains historical).
 - `FLEET_READINESS_LIVE = MEDIUM_SELECTED_BY_AVAILABILITY`; the live cognitive worker observed FAST unavailable, MEDIUM available, HEAVY available and LIFEBOAT available; it selected MEDIUM while the configured preference remained FAST. This is routing evidence only, not a quality or promotion claim. Evidence: `docs/evidence/fleet-readiness-live-2026-08-23-v2.json`.
-- `UI_AUTHENTICATED_ACCEPTANCE = CURRENT_LIVE_PASS`; current signed-in browser evidence covers root chat session, admin diagnostics 7/7, operations fleet 4/4 READY with FAST selected, truthful local-executor agent status, action history and learning/reflection sections; the 390x844 console layout remained readable without horizontal overflow. Evidence: `docs/evidence/authenticated-ui-acceptance-2026-08-23-v2.json`.
+- `UI_AUTHENTICATED_ACCEPTANCE = CURRENT_DESKTOP_LIVE_PASS`; current signed-in browser evidence covers admin diagnostics 7/7, operations with FAST selected and 3/4 model tiers ready, truthful local-fallback agent status, action history and learning/reflection sections. Mobile viewport acceptance is not claimed in the current run. Evidence: `docs/evidence/authenticated-ui-acceptance-2026-08-23-v3.json`.
 
 ## Current governance checkpoint
 
-- `COMPLETION_MATRIX = docs/evidence/audit-completion-matrix-2026-08-23-v3.json`; all seven objective areas are mapped to current repository/production proof, with external bridge, GPU promotion/quality and deep-acceptance gaps explicit.
+- `COMPLETION_MATRIX = docs/evidence/audit-completion-matrix-2026-08-23-v4.json`; all seven objective areas are mapped to current repository/production proof, with external bridge, GPU quality/promotion, mobile acceptance and deep-acceptance gaps explicit.
 
 - `ACTIVE_TASK = dev/tasks/DEV-000235-model-qualification-probe.json revision 1`; cognitive-worker now exposes a bounded provider-neutral qualification probe that discovers actual model IDs, invokes them in parallel, reports reachability/latency and keeps quality `UNRATED` until independent task tests. Hardware presence does not grant promotion or priority.
 - `LINEAGE_DECISION = docs/GOVERNANCE_LINEAGE_DECISION_2026-08-22.md`; historical packets remain provenance and are not current authority.
 - `REGISTRY_STATUS = YAML and JSON semantic mirrors agree`
 - `PRODUCTION_DOMAIN = docker.cin.su`; shared docker-test is not used for this project.
-- `NEXT_WORK = use qualification evidence in the provider-neutral Capability rating/selection loop, then continue authenticated UI acceptance, reflection recovery and governed self-development gaps.`
+- `NEXT_WORK = close mobile/operations acceptance where the browser surface permits, then continue provider-neutral model qualification/rating and external-bridge-independent execution gaps.`

docs/evidence/audit-completion-matrix-2026-08-23-v4.json

@@ -0,0 +1,11 @@
+{
+  "evidence_id": "audit-completion-matrix-2026-08-23-v4",
+  "captured_at": "2026-08-23T18:46:05Z",
+  "production_revision": "12ab124411771fbed16e1f1935b97b1d0700a7b0",
+  "supersedes": "docs/evidence/audit-completion-matrix-2026-08-23-v3.json",
+  "overall_status": "NOT_COMPLETE",
+  "completed_areas": ["agent execution local recovery", "multi-agent work graph", "truth/research runtime", "learning reflection loop", "model availability/failover", "governed gate verification and durable transitions"],
+  "remaining_gaps": ["independently operated Agent Execution bridge is unavailable", "GPU quality qualification and promotion remain incomplete", "mobile authenticated acceptance is not verified in the current browser control surface", "deep UI/operations acceptance remains deferred under quick-test policy"],
+  "live_facts": {"healthz": "OK", "diagnostics": "7/7 OK", "fleet_ready": "3/4", "selected_tier": "FAST", "fallback_tier": "LIFEBOAT", "agent_mode": "local-fallback"},
+  "secrets": "No secret values included."
+}

docs/evidence/authenticated-ui-acceptance-2026-08-23-v3.json

@@ -0,0 +1,13 @@
+{
+  "evidence_id": "authenticated-ui-acceptance-2026-08-23-v3",
+  "observed_on": "2026-08-23",
+  "captured_at": "2026-08-23T18:46:05Z",
+  "source": "current authenticated in-app browser session against assistant.cin.su",
+  "production_revision_visible": "12ab124411771fbed16e1f1935b97b1d0700a7b0",
+  "chat": {"authenticated": true, "session_state": "active"},
+  "admin": {"authenticated": true, "diagnostics": {"passed": 7, "total": 7}, "operations": {"fleet_ready": 3, "fleet_total": 4, "selected_tier": "FAST", "fallback_tier": "LIFEBOAT"}, "agent_worker": {"mode": "local-fallback", "executor_configured": false, "external_mutation": false}, "action_history_records_visible": 25, "learning_signals_visible": 17, "reflection_state_visible": "RESOLVED", "skill_state_visible": "SUSPENDED"},
+  "responsive": {"viewport": "not changed; current browser control surface has no viewport emulation", "horizontal_overflow_observed": "not assessed", "sections_readable": true},
+  "mutations_performed": false,
+  "secrets_exposed": false,
+  "limitations": ["mobile viewport acceptance not verified", "no delegation-specific mutation performed", "no external bridge configured"]
+}