docs: publish current audit status

dev/ACTIVE_TASK.json

@@ -1,5 +1,5 @@
 {
-  "task_file": "dev/tasks/DEV-000153-fleet-secret-wiring.json",
-  "task_id": "DEV-000153",
+  "task_file": "dev/tasks/DEV-000155-current-audit-status.json",
+  "task_id": "DEV-000155",
   "task_revision": 1
 }

dev/tasks/DEV-000154-fast-live-smoke-evidence.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000154",
+  "task_revision": 1,
+  "architecture_revision": "ADR-0010",
+  "base_repo_revision": "283f5c044c3bf6739c8ed859412cd736754e3177",
+  "risk_tier": "E",
+  "intent": "Record bounded production evidence that the authenticated local CPU provider is available and invokable through the cognitive boundary.",
+  "requirement_ids": ["AUDIT-WP-003", "AUDIT-WP-201", "WP-601"],
+  "allowed_change_scope": {"modules": ["capability", "cognitive"], "paths": ["docs/evidence/wp-601-fast-gateway-live-smoke-2026-08-22-v1.json", "docs/evidence/WP-601-FAST-GATEWAY-LIVE-SMOKE-2026-08-22.md", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000154-fast-live-smoke-evidence.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "cmd/devctl/**", ".gitea/**", "database/**", "deploy/**", "contracts/**", "modules/**", "adapters/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["production cognitive discovery and bounded advisory response evidence"], "may_change": []},
+  "semantic_owner": "capability",
+  "canonical_state": ["none; append-only evidence artifact only"],
+  "state_transitions": ["none; evidence does not activate or promote a binding"],
+  "side_effects_and_privileges": ["four bounded local-only synthetic advisory requests"],
+  "persistence_and_migrations": ["no database migration"],
+  "failure_retry_restart": ["not applicable to evidence artifact"],
+  "assumptions": ["provider key remains in protected production volume and is not copied to repository or logs"],
+  "acceptance_scenarios": ["evidence records available API_KEY provider", "four requests complete with expected sentinels", "limitations remain explicit", "no secret material is present"],
+  "required_tests": ["JSON validation", "go test", "go vet", "architecture preflight", "check-diff", "git diff --check", "independent", "CI"],
+  "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT", "BLOCKED_BY_ARCHITECTURE_GAP"]
+}

dev/tasks/DEV-000155-current-audit-status.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000155",
+  "task_revision": 1,
+  "architecture_revision": "ADR-0010",
+  "base_repo_revision": "5703ab3ed5e22a5424a2db7f19886c0305e54280",
+  "risk_tier": "E",
+  "intent": "Synchronize the project status projection with current live audit evidence, explicitly distinguishing completed runtime foundations from external blockers.",
+  "requirement_ids": ["AUDIT-TRUTHFUL-STATUS", "WP-003", "WP-301", "WP-800"],
+  "allowed_change_scope": {"modules": [], "paths": ["docs/PROJECT_STATUS.md", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000155-current-audit-status.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "cmd/devctl/**", ".gitea/**", "database/**", "deploy/**", "contracts/**", "modules/**", "adapters/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["live audit observations and committed evidence artifacts"], "may_change": []},
+  "semantic_owner": "none; documentation projection",
+  "canonical_state": ["none"],
+  "state_transitions": ["none"],
+  "side_effects_and_privileges": ["none"],
+  "persistence_and_migrations": ["no database migration"],
+  "failure_retry_restart": ["not applicable"],
+  "assumptions": ["status projection remains subordinate to runtime evidence and does not declare blocked items complete"],
+  "acceptance_scenarios": ["current revision and FAST evidence are referenced", "Medium/Heavy and bridge gaps are explicit", "UI acceptance remains pending without session", "no secret value appears"],
+  "required_tests": ["JSON validation", "go test", "go vet", "architecture preflight", "check-diff", "git diff --check", "independent", "CI"],
+  "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT", "BLOCKED_BY_ARCHITECTURE_GAP"]
+}

docs/PROJECT_STATUS.md

@@ -1,6 +1,16 @@
 # Assistant project status
 
-Audit date: 2026-08-22. Active implementation: DEV-000099 revision 1.
+## Current audit delta — 2026-08-22
+
+- `CURRENT_PRODUCTION_REVISION = 5703ab3ed5e22a5424a2db7f19886c0305e54280`; public `/healthz` is healthy.
+- `FAST_PROVIDER_STATUS = LIVE_SMOKE_SUPPORTED`: local CPU gateway authentication is configured through a protected file reference; four bounded local-only advisory cases completed through cognitive-worker. Evidence: `docs/evidence/wp-601-fast-gateway-live-smoke-2026-08-22-v1.json`.
+- `MEDIUM_PROVIDER_STATUS = NOT_CONFIGURED`; no medium runtime is registered in production.
+- `HEAVY_PROVIDER_STATUS = UNAVAILABLE`; GPU endpoint `192.168.220.91:11434` timed out during live discovery.
+- `AGENT_EXECUTION_STATUS = RECOVERY_ONLY`; `AGENT_EXECUTION_BRIDGE_URL` is not configured and no Codex/bridge runtime is deployed. Durable recovery and status endpoints remain active.
+- `UI_AUTHENTICATED_ACCEPTANCE = PENDING`; public login UI is reachable, but no authenticated browser session was available for cabinet visual acceptance.
+- `SECURITY_NOTE = one production executor secret was rotated after an accidental diagnostic disclosure; values are not retained in repository evidence.`
+
+Audit date: 2026-08-22. Historical governance checkpoint: DEV-000099 revision 1.
 
 ## Current governance checkpoint
 

docs/evidence/WP-601-FAST-GATEWAY-LIVE-SMOKE-2026-08-22.md

@@ -0,0 +1,14 @@
+# WP-601 FAST gateway live smoke
+
+Observed `2026-08-22T14:41:47Z` on production revision `283f5c044c3bf6739c8ed859412cd736754e3177`.
+
+The protected provider reference was enabled in production without retaining
+credential material in the repository or evidence. Cognitive discovery reported
+`local-cpu-primary` as `AVAILABLE` with `AuthMode=API_KEY` and observed models
+`Qwen3.6-27B-UD-Q4_K_XL` and `dspark-DeepSeek-V4-Flash-0731-Q8_0`.
+
+Four bounded local-only advisory requests crossed the cognitive boundary and
+completed with the expected sentinel response: 4/4, zero failures. This proves
+availability and invocation of FAST; it does not promote a binding or claim that
+MEDIUM/HEAVY are available. Existing Lifeboat qualification remains the fallback
+evidence.

docs/evidence/wp-601-fast-gateway-live-smoke-2026-08-22-v1.json

@@ -0,0 +1,31 @@
+{
+  "artifact_id": "wp-601-fast-gateway-live-smoke-2026-08-22-v1",
+  "observed_at": "2026-08-22T14:41:47.1155793Z",
+  "production_revision": "283f5c044c3bf6739c8ed859412cd736754e3177",
+  "endpoint": "assistant.cin.su",
+  "runtime_path": "creator-web -> cognitive-worker -> local-cpu-primary -> llm-local-gateway",
+  "credential_material": "not retained; protected file reference only",
+  "provider": {
+    "provider_instance_id": "local-cpu-primary",
+    "provider_kind": "openai-compatible-chat-v1",
+    "health": "AVAILABLE",
+    "auth_mode": "API_KEY",
+    "credential_ref": "credential://domovoy/local-cpu/provider-api-key/v1",
+    "models_observed": [
+      "Qwen3.6-27B-UD-Q4_K_XL",
+      "dspark-DeepSeek-V4-Flash-0731-Q8_0"
+    ]
+  },
+  "cases": [
+    {"request_id": "live-fast-smoke-20260822", "expected": "FAST_OK", "actual": "FAST_OK", "finish_reason": "COMPLETED", "input_units": 36, "output_units": 3},
+    {"request_id": "live-fast-case-1-20260822", "expected": "CASE_OK_1", "actual": "CASE_OK_1", "finish_reason": "COMPLETED", "input_units": 38, "output_units": 5},
+    {"request_id": "live-fast-case-2-20260822", "expected": "CASE_OK_2", "actual": "CASE_OK_2", "finish_reason": "COMPLETED", "input_units": 38, "output_units": 5},
+    {"request_id": "live-fast-case-3-20260822", "expected": "CASE_OK_3", "actual": "CASE_OK_3", "finish_reason": "COMPLETED", "input_units": 38, "output_units": 5}
+  ],
+  "summary": {"cases": 4, "completed": 4, "failed": 0, "qualification": "LIVE_SMOKE_SUPPORTED"},
+  "limitations": [
+    "This is availability and bounded invocation evidence, not a binding promotion.",
+    "Medium and heavy fleet members remain unconfigured/unavailable.",
+    "Fallback qualification remains covered by the existing Lifeboat evidence."
+  ]
+}