T0-E1.2 final independent reaudit findings¶
| Finding | Verdict | Independent evidence |
|---|---|---|
| T0F-001 | CLOSED_BY_INDEPENDENT_AUDIT | Active-role authority is used by calendar and core scope; conflict actor with admin group remains denied for calendar save and cross-tenant reset. |
| T0F-003 | CLOSED_BY_INDEPENDENT_AUDIT | E12 validator PASS; live runtime tree, certified tree, DB UUID, fixture, modules, entitlements, route checksum, FE build, and 29-case run all match. |
| T0F-004 | CLOSED_BY_INDEPENDENT_AUDIT | Entitlement-OFF denies HR/finance; enabling only HR opens the intended HR route while finance remains denied; direct native RPC probes against HR document/allowance/performance models returned AccessError/empty data. |
| T0F-005 | CLOSED_BY_INDEPENDENT_AUDIT | Exact-runtime cross-tenant reset denied; before/after target state and audit count unchanged. |
| T0F-006 | CLOSED_BY_INDEPENDENT_AUDIT | Canonical and generation paths omit plaintext credentials; provisioning script requires explicit secret, rejects predictable values, and does not print it. |
| T0F-007 | CLOSED_BY_INDEPENDENT_AUDIT | Exact-runtime must-change API and /web/dataset probes both denied; fixture restored. |
| T0F-008 | CLOSED_BY_INDEPENDENT_AUDIT | Valid shell-issued native signup/reset tokens were tested; GET/POST surfaces returned 404 and password remained unchanged. |
| T0F-009 | CLOSED_BY_INDEPENDENT_AUDIT | 29-case run includes concurrent issue/consume plus controlled revoke/audit fail-closed assertions; token service uses advisory lock/unique open-token protection and row locking. |
| T0F-014 | CLOSED_BY_INDEPENDENT_AUDIT | Independently inspected DEC-014 property denominator; required and executed sets equal, 29/29 PASS, zero skips/failures. |
| T0F-015 | CLOSED_BY_INDEPENDENT_AUDIT | Exact-runtime native RPC probes for partner/user search, name search, and relation read denied; additional HR optional model RPC probes denied by gate/ACL. |
| T0F-002 | CLOSED_BY_INDEPENDENT_AUDIT | Dataset mutation regression remains denied with no DB mutation. |
| T0F-013 | CLOSED_BY_INDEPENDENT_AUDIT | Route denominator remains zero unknown/ambiguous; public child route does not inherit public status. |
T0F-010, T0F-011, and T0F-012 remain outside this audit and open for T0-E2.