Lewati ke isi

RC1 Independent Re-Audit Runtime Evidence

Current exact-tip gates

Gate Independent result
Environment isolation PASS; 7 runtimes, 0 errors
E1.2 RC1-INDEPENDENT-20260814T0908Z: 29/29 PASS, 0 skip, 0 finding-observation fail
E1.2 validator PASS before and after probes
T1 nav graph PASS; 36 apps, 528 leaves, 45 Core, 0 Core missing capability
Core parity / nav UX PASS / PASS; hard 0, warning 0
Route denominator PASS; 1,717 total, 1,679 protected, 35 public, 3 internal, 0 unknown/ambiguous/blocker
Package topology / consistency / catalog PASS; 15 commercial SKUs; SC-CORE checksum 43115784…2999; topology mutations 5/5
RC1 FE regression slice 71/71 PASS
Credential unit 13/13 PASS
Attendance API / structure unit 32/32 and 30/30 PASS
W01 T2.1-W01-20260814T090840Z: 64/64 PASS
W02 T3-W02-20260814T091301Z: 33/33 PASS, 0 skip
W05 per-lesson T4-W05-20260814T091536Z: 16/16 PASS, 0 skip

The first temporary-worktree Core-parity invocation failed only because the disposable worktree lacked the sibling backend path. After linking the real read-only sibling checkout, the same checker passed. This is an audit-environment setup failure, not product evidence.

Independent adversarial probes

  • DEC-014: an administrator-supplied known password was denied; the original credential remained valid after denial; a separate no-password request generated a random temporary secret; only the generated secret authenticated; must_change was set; the fixture credential was restored.
  • Five live Golden personas (school_admin, teacher, homeroom, student, parent) resolved zero of the 15 former false-Core targets through the exact application registry used by navigation/search/mobile. Deep links are also rejected by the product-status/prefix router guard.
  • W01: unrelated teacher timetable hidden; direct RPC create denied with unchanged count; invalid nested term left zero year/term; concurrent identical session create persisted exactly one record.
  • W02: GT-T1 linking a GT-T2 partner with no existing op.parent returned scope_error; parent count stayed 0 and student links were unchanged.
  • W05: foreign session/student and forged-sheet attempts caused no unauthorized state change; direct op.attendance.line.create RPC was denied; parent/student peer data was hidden; concurrent save left one sheet/line.
  • Optional entitlement proof in E1.2 restored all flags to OFF. Installed scola_hr did not open HR while disabled; enabling HR alone did not open finance.
  • Prior attendance proof_file privacy proof carries forward because the serializer/runtime files are unchanged in BE 334db… -> 3d7a…; current W05 output also contains no raw proof binary.

Deployment observation (read-only)

Demo and all five production tenants independently returned the same older pair: FE 3b7e578040773f5054ba32d63d5fce64a30acc56, BE 334db599f4fa0ef66e9872aa4cfcbf0f378f2381. None serves the Golden candidate pair. No deployment, restart, module upgrade, or tenant mutation was performed.