31 lines
2.6 KiB
Markdown
31 lines
2.6 KiB
Markdown
# Foundation Exit audit — V1
|
|
|
|
Status is based on executed repository tests and Docker-stack verification on 2026-08-16.
|
|
|
|
| Criterion | Status | Evidence / gap |
|
|
|---|---|---|
|
|
| Cold agent can use repository artifacts | PASS | `AGENTS.md`, architecture documents, versioned task packets and `devctl preflight`. |
|
|
| Cross-owner DB write denied | PASS | `tests/owner_acl/verify.ps1` proves `continuity_role` cannot write `work.tasks`. |
|
|
| Wrong-project mutation rejected | PASS | focus isolation tests and the remote WS-004 guarded commit harness. |
|
|
| Stale/revoked authority rejected | PASS | action-commit tests and live HTTP 409 checks in DEV-000017. |
|
|
| Duplicate/replay side effect prevention | PASS | isolated Test Executor applies by ActionIntentID once, injects lost ACK, and reconciles without mutation. |
|
|
| Future obligation survives engine loss | PASS | prospective-memory recovery and reproducible remote Continuity restart harness. |
|
|
| No-LLM continuity | PASS | DEV-000014 stopped cognitive worker while Core, Continuity and Commit remained available. |
|
|
| Two process topologies | PASS | in-process suites plus `tests/topology_equivalence/verify-remote.ps1` for extracted runtimes. |
|
|
| Provider swap/fake | PASS | deterministic cognitive fake has no canonical mutation authority. |
|
|
| Declared/observed architecture | PASS | strengthened sentinel checks declared contract dependencies and implementation imports; discovered Commit→Identity drift was removed. |
|
|
| Semantic migration drill | PASS | Capability Health V1→V2 migration, rejection of V3 and projection rebuild. |
|
|
| Guardrails negative tests | PASS | negative self-tests cover infrastructure imports, cross-module implementation imports, undeclared contracts, protected-path task authority, and live DB ACL denial. |
|
|
|
|
## Foundation conclusion
|
|
|
|
Foundation V1 is eligible for freeze. Creator session authentication was also completed as DEV-000019 and does not carry Authority.
|
|
|
|
The three original post-foundation gates are complete:
|
|
|
|
1. `ADR-0005` specifies the first real external operation, prospective notification delivery.
|
|
2. DEV-000024 through DEV-000032 and DEV-000040 through DEV-000043 provide the authenticated Creator API/UI and external operation only through the validated Identity, Authority, Continuity, Capability and Commit boundaries.
|
|
3. `ADR-0004` and ARCH-000004 implement exact diff-to-task scope comparison.
|
|
|
|
DEV-000044 re-ran local architecture/unit checks and the production Creator-to-receiver smoke on 2026-08-16. The deployed stack and Windows operational tasks were healthy. Current product status and explicitly uncommitted future scope are recorded in `docs/PROJECT_STATUS.md`.
|