RC1-A Independent Closure Findings

Finding	Prior severity	Current-tip proof	Verdict	Residual
RC1F-001 DEC-014 admin reset	S1	E1.2 29-case matrix: server-generated secret, must-change, revoke/audit and tenant denial	CLOSED	none in Core V1
RC1F-002 false-Core leaves	S1	nav graph, parity and nav UX pass; 45 Core leaves	CLOSED	excluded leaves remain fail-closed
RC1F-003 News authoring	S1	authoring remains outside certified Core and fail-closed	CLOSED	W16 + schema upgrade required before future exposure
RC1F-004 evidence identity	S1	complete 1,226-file BE runtime denominator; top-level service/manifests included; mutation tests pass	CLOSED	historical 69bd9993… hash is superseded
RC1F-005 denominator truth	S1	route denominator 1717/1679/35/3, zero unknown and zero ambiguous	CLOSED	none
RC1F-006 immutable demo candidate	S1	exact remote freeze, immutable demo pair, served identity, 11/11 authenticated UAT, isolation PASS	CLOSED FOR APPROVED RC1 SCOPE	production and GBN are not certification prerequisites or deployment targets
RC1F-007 attendance fixtures	S2	Golden W05 16/16 plus real linked-faculty demo W05 save/reload	CLOSED	daily/RFID/smart/HR/ATTEND+ excluded
RC1F-008 stale documentation	S3	v3 canonical evidence index and this verdict supersede RC1-B as current status	CLOSED	historical artifacts retained as chronology
RC1A-F001 excluded Daily API returned empty success	S1	backend gate returns product_surface_unavailable, INCOMPLETE_REMOVE; demo harness rejects empty success	CLOSED	Daily remains excluded
RC1A-F002 incomplete BE tree hash	S0 evidence integrity	old and new app commits now hash differently; stale release is rejected; add/mutate top-level runtime file fails validator	CLOSED	old release manifest cannot be used for certification

No open S0 or S1 remains inside the bounded Core RC1 certification scope.