Assistant/docs/FOUNDATION_EXIT_AUDIT.md

Foundation Exit audit — V1

Status is based on executed repository tests and Docker-stack verification on 2026-08-16.

Criterion	Status	Evidence / gap
Cold agent can use repository artifacts	PASS	AGENTS.md, architecture documents, versioned task packets and devctl preflight.
Cross-owner DB write denied	PASS	tests/owner_acl/verify.ps1 proves continuity_role cannot write work.tasks.
Wrong-project mutation rejected	PASS	focus isolation tests and the remote WS-004 guarded commit harness.
Stale/revoked authority rejected	PASS	action-commit tests and live HTTP 409 checks in DEV-000017.
Duplicate/replay side effect prevention	PASS	isolated Test Executor applies by ActionIntentID once, injects lost ACK, and reconciles without mutation.
Future obligation survives engine loss	PASS	prospective-memory recovery and reproducible remote Continuity restart harness.
No-LLM continuity	PASS	DEV-000014 stopped cognitive worker while Core, Continuity and Commit remained available.
Two process topologies	PASS	in-process suites plus tests/topology_equivalence/verify-remote.ps1 for extracted runtimes.
Provider swap/fake	PASS	deterministic cognitive fake has no canonical mutation authority.
Declared/observed architecture	PASS	strengthened sentinel checks declared contract dependencies and implementation imports; discovered Commit→Identity drift was removed.
Semantic migration drill	PASS	Capability Health V1→V2 migration, rejection of V3 and projection rebuild.
Guardrails negative tests	PASS	negative self-tests cover infrastructure imports, cross-module implementation imports, undeclared contracts, protected-path task authority, and live DB ACL denial.

Foundation conclusion

Foundation V1 is eligible for freeze. Creator session authentication was also completed as DEV-000019 and does not carry Authority.

The three original post-foundation gates are complete:

1. ADR-0005 specifies the first real external operation, prospective notification delivery.
2. DEV-000024 through DEV-000032 and DEV-000040 through DEV-000043 provide the authenticated Creator API/UI and external operation only through the validated Identity, Authority, Continuity, Capability and Commit boundaries.
3. ADR-0004 and ARCH-000004 implement exact diff-to-task scope comparison.

DEV-000044 re-ran local architecture/unit checks and the production Creator-to-receiver smoke on 2026-08-16. The deployed stack and Windows operational tasks were healthy. Current product status and explicitly uncommitted future scope are recorded in docs/PROJECT_STATUS.md.