RC1 Independent Re-Audit Findings¶
| ID | Original severity | Independent code review | Independent runtime proof | Verdict | Residual / required disposition |
|---|---|---|---|---|---|
| RC1F-001 | S1 security/integrity | canonical admin reset rejects caller password and generates a high-entropy temporary secret | independent manual probe plus E1.2 case PASS; must-change/revoke/audit denominator green | CLOSED_BY_INDEPENDENT_REAUDIT | none |
| RC1F-002 | S1 product surface | 15 former false-Core leaves now use fail-closed statuses and central filtering | five Golden roles expose 0/15; Core count 45 | CLOSED_BY_INDEPENDENT_REAUDIT | excluded workflows remain uncertified |
| RC1F-003 | S1 product/runtime | News authoring controls/routes are fail-closed; read-only News remains Core | no audited role sees authoring | CLOSED_BY_INDEPENDENT_REAUDIT | Golden direct authoring API may still 500; W16 and -u scola_news remain future prerequisites |
| RC1F-004 | S1 evidence integrity | committed app/harness freeze, exact tree equality, docs-only lineage | clean-tree validator PASS before and after probes; W01 embeds current FE/BE tips | CLOSED_BY_INDEPENDENT_REAUDIT | auditor output files are later local docs-only changes |
| RC1F-005 | S1 denominator/release truth | current maps retain excluded mutation/read families explicitly and show 0 reachable unknown owner | route, T1, five-role, and direct-RPC gates pass | CLOSED_BY_INDEPENDENT_REAUDIT | Product Decisions stay fail-closed |
| RC1F-006 | S1 deployment gate | Golden candidate commits are ahead of origin and have no immutable demo/production promotion | demo + five production tenants serve FE 3b7e… / BE 334db…, not FE bd37/1ffc… / BE 3d7a… |
OPEN — RC1 CLOSURE GAP | push/freeze exact commits, create immutable pair, promote to demo, run UAT/smoke, then authorize per-tenant rollout |
| RC1F-007 | S2 test hygiene | attendance fixtures now include roster student_ids |
API unit 32/32; structure 30/30 | CLOSED_BY_INDEPENDENT_REAUDIT | none |
| RC1F-008 | S3 documentation | prior final audit maps/ledgers were stale at audit start | this re-audit replaces their 22fd/334db, 60-leaf, stale DEC-014, and validator-FAIL wording |
CLOSED_IN_CURRENT_AUDIT_ARTIFACTS | commit these docs separately if an immutable auditor tip is desired |
No current Core security/integrity regression was reproduced. RC1F-006 alone prohibits RC1-A and any demo/production promotion.