docs: record compat observation cognitive blocker

dev/ACTIVE_TASK.json

@@ -1 +1 @@
-{"task_file":"dev/tasks/GEN2-DEPLOY-003-isolated-release-slots.json","task_id":"GEN2-DEPLOY-003","task_revision":1}
+{"task_file":"dev/tasks/GEN2-COMPAT-OBS-001-production-compatibility-observation.json","task_id":"GEN2-COMPAT-OBS-001","task_revision":2}

docs/evidence/gen2-compat-obs-001-authenticated-workload-blocked-2026-08-30.json

@@ -0,0 +1,27 @@
+{
+  "task": "GEN2-COMPAT-OBS-001",
+  "status": "BLOCKED_BY_MISSING_CAPABILITY",
+  "timestamp_utc": "2026-08-30T11:20:56Z",
+  "requested_activity": "authenticated representative production workload through the ordinary browser/runtime path",
+  "browser_session": {
+    "initial_state": "one production tab was authenticated",
+    "state_at_message_send": "session expired and the ordinary login page was shown",
+    "credential_handling": "no password, cookie, token or credential was read, copied or used"
+  },
+  "candidate": {
+    "project": "assistant-slot-b",
+    "revision": "216d76f1d8b4eeba6ee9427da4c87c3e5c728c02",
+    "preworkload_smoke": "four components healthy and header canary passed",
+    "telemetry_workload": "not sent"
+  },
+  "rollback": {
+    "control_plane": "Supervisor release rollback",
+    "traffic_mode": "STABLE",
+    "stable_upstream": "http://creator-web:8084",
+    "public_health": 200,
+    "public_ready": 200,
+    "stable_container_ids_changed": false
+  },
+  "missing_capability": "a currently authenticated production session or an already-approved authenticated service acceptance harness; neither may be replaced by reading credentials, cookies or tokens or by creating an authentication bypass",
+  "not_done": ["authenticated workload", "telemetry baseline counters", "observation window start", "observation tag", "V1 retirement"]
+}

docs/evidence/gen2-compat-obs-001-cognitive-route-blocked-2026-08-30.json

@@ -0,0 +1,35 @@
+{
+  "task": "GEN2-COMPAT-OBS-001",
+  "status": "BLOCKED_BY_SPEC_GAP",
+  "timestamp_utc": "2026-08-30T12:17:54Z",
+  "requested_activity": "authenticated representative production workload through the ordinary production chat path",
+  "session_handling": "an already-authenticated browser session was used; no password, cookie, token, or other credential was read, copied, or emitted",
+  "workload_result": {
+    "assertion_write": "accepted by the ordinary chat path",
+    "capability_request": "completed by the ordinary chat path",
+    "recall_question": "completed with the human-facing cognitive-route-unavailable response; no answer was fabricated"
+  },
+  "runtime_observation": {
+    "supervisor_traffic_mode": "STABLE",
+    "supervisor_current_state": "ROLLED_BACK",
+    "stable_release_revision": "2ee5da81145cdad2da1c92c24a91145ad4af61a5",
+    "stable_core_health": 200,
+    "stable_core_ready": 200,
+    "candidate_slot": "assistant-slot-b",
+    "candidate_components": "four components healthy but not promoted"
+  },
+  "why_observation_cannot_start": "The required authenticated recall smoke did not succeed, so telemetry traffic cannot be promoted and no baseline can truthfully be recorded.",
+  "required_next_scope": [
+    "cmd/cognitive-worker/**",
+    "cognitive routing and provider invocation configuration under its owning remediation packet",
+    "production candidate deployment for the repaired revision"
+  ],
+  "packet_constraint": "GEN2-COMPAT-OBS-001 forbids adapters/models/** and permits only telemetry and limited runtime observation paths; it cannot safely repair cognitive-worker routing.",
+  "not_done": [
+    "remaining representative workload",
+    "telemetry counters baseline",
+    "observation window start",
+    "observation tag",
+    "V1 retirement"
+  ]
+}