diff --git a/dev/ACTIVE_TASK.json b/dev/ACTIVE_TASK.json index 9381fc6..6b6a722 100644 --- a/dev/ACTIVE_TASK.json +++ b/dev/ACTIVE_TASK.json @@ -1,5 +1,5 @@ { - "task_file": "dev/tasks/DEV-000200-medium-live-bounded-smoke-evidence.json", - "task_id": "DEV-000200", + "task_file": "dev/tasks/DEV-000201-authenticated-ui-visual-evidence.json", + "task_id": "DEV-000201", "task_revision": 1 } diff --git a/dev/tasks/DEV-000201-authenticated-ui-visual-evidence.json b/dev/tasks/DEV-000201-authenticated-ui-visual-evidence.json new file mode 100644 index 0000000..6a111e9 --- /dev/null +++ b/dev/tasks/DEV-000201-authenticated-ui-visual-evidence.json @@ -0,0 +1,23 @@ +{ + "task_id": "DEV-000201", + "task_revision": 1, + "architecture_revision": "ADR-0018", + "base_repo_revision": "79feab8e4129af4ad0b9e8c9dcd81a6ba1883642", + "risk_tier": "E", + "intent": "Record user-provided authenticated production UI visual evidence while keeping browser interaction and operations acceptance explicitly open.", + "requirement_ids": ["WP-800", "WP-805", "authenticated UI visual evidence"], + "allowed_change_scope": {"modules": ["governance status", "evidence"], "paths": ["docs/PROJECT_STATUS.md", "docs/evidence/authenticated-ui-visual-observation-2026-08-23-v1.json", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000201-authenticated-ui-visual-evidence.json"]}, + "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**", "cmd/**", "modules/**", "contracts/**", ".gitea/**"]}, + "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0}, + "contracts": {"consume": ["authenticated UI acceptance contract", "production health"], "may_change": ["status and evidence projection only"]}, + "semantic_owner": "governance", + "canonical_state": ["user-provided authenticated UI observation"], + "state_transitions": ["PENDING -> PARTIAL_VISUAL_PROOF; full interaction acceptance remains open"], + "side_effects_and_privileges": ["read-only observation of user-provided screenshot"], + "persistence_and_migrations": ["no migration"], + "failure_retry_restart": ["retain browser-control-channel gap and do not claim API acceptance"], + "assumptions": ["the attached screenshot is a current production view at https://assistant.cin.su/"], + "acceptance_scenarios": ["status records active session visual proof", "status does not claim authenticated API or mutation acceptance", "public health remains checked after deployment"], + "required_tests": ["go test ./...", "go vet ./...", "go run ./cmd/devctl preflight -active dev/ACTIVE_TASK.json", "go run ./cmd/devctl check-diff -active dev/ACTIVE_TASK.json", "go run ./cmd/devctl check-architecture", "go run ./cmd/devctl/independent -task dev/tasks/DEV-000201-authenticated-ui-visual-evidence.json", "git diff --check", "CI", "production public health"], + "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY"] +} diff --git a/docs/PROJECT_STATUS.md b/docs/PROJECT_STATUS.md index c3d2e24..76c9e26 100644 --- a/docs/PROJECT_STATUS.md +++ b/docs/PROJECT_STATUS.md @@ -12,12 +12,12 @@ - `LEARNING_REFLECTION_STATUS = LIVE_RECONCILED`; reflection worker returned no pending candidate and the durable state contains 31 RESOLVED candidates with no OPEN backlog. Evidence: `docs/evidence/reflection-runtime-reconciliation-2026-08-23-v1.json`. - `BACKUP_RESTORE_STATUS = VERIFIED`; latest checksum and isolated restore evidence is retained in `docs/evidence/wp-002-postgres-restore-2026-08-22-v1.json`. - `GOVERNED_SELF_DEVELOPMENT_STATUS = DURABLE_GATE_PERSISTED`; Work-owned revisioned gate storage and optimistic-concurrency persistence are live. No bridge-backed source mutation, promotion or rollback is claimed. Evidence: `docs/evidence/governed-development-gate-persistence-2026-08-23-v1.json`. -- `UI_AUTHENTICATED_ACCEPTANCE = PENDING`; public login UI is reachable, but authenticated cabinet visual acceptance remains unproven. +- `UI_AUTHENTICATED_ACCEPTANCE = PARTIAL_VISUAL_PROOF`; the user-provided production screenshot shows the authenticated Domovoy cabinet loaded with an active session and the operations/dashboard surface visible. Browser-driven interaction and API acceptance remain pending because the browser control channel exposes no tab state. ## Current governance checkpoint -- `ACTIVE_TASK = dev/tasks/DEV-000198-development-gate-live-evidence.json revision 1` +- `ACTIVE_TASK = dev/tasks/DEV-000201-authenticated-ui-visual-evidence.json revision 1` - `LINEAGE_DECISION = docs/GOVERNANCE_LINEAGE_DECISION_2026-08-22.md`; historical packets remain provenance and are not current authority. - `REGISTRY_STATUS = YAML and JSON semantic mirrors agree` - `PRODUCTION_DOMAIN = docker.cin.su`; shared docker-test is not used for this project. -- `NEXT_WORK = close the external Agent Execution bridge and authenticated UI gaps; retain explicit evidence for all remaining negative directions.` +- `NEXT_WORK = close browser-driven interaction, external Agent Execution bridge and GPU gaps; retain explicit evidence for all remaining negative directions.` diff --git a/docs/evidence/authenticated-ui-visual-observation-2026-08-23-v1.json b/docs/evidence/authenticated-ui-visual-observation-2026-08-23-v1.json new file mode 100644 index 0000000..1b75657 --- /dev/null +++ b/docs/evidence/authenticated-ui-visual-observation-2026-08-23-v1.json @@ -0,0 +1,23 @@ +{ + "captured_at": "2026-08-23", + "surface": "https://assistant.cin.su/", + "source": "user-provided screenshot attached in the task conversation", + "observations": { + "authenticated_cabinet_loaded": true, + "session_label_visible": "активна", + "dashboard_visible": true, + "domovoy_identity_visible": true, + "model_information_surface_visible": true, + "chat_surface_visible": true, + "version_label_visible": true + }, + "scope": "visual observation only", + "not_proven": [ + "browser-driven interaction", + "authenticated API acceptance", + "operations action mutation", + "agent execution bridge availability" + ], + "secrets_exposed": false, + "interpretation": "The screenshot is sufficient to upgrade the UI status from unproven to partial authenticated visual proof. It is not sufficient to claim full UI/operations acceptance." +}