T0 final audit preflight¶
Audit mode: server, read-only application audit. Workspace: /home/scola/odoo.
Baseline¶
| Item | Observed identity/state |
|---|---|
| FE | develop, HEAD/origin dc7279aff2897790deb39a0b63294ffddb659ca0 |
| BE | main, HEAD/origin 4f132a86c4e2abb661502af7929959384287fcb0 |
| Working tree | BE clean; FE has only pre-existing untracked XLSX under docs/recon/ |
| Certified B2.1 | FE ad0c2d8e57ac21914340d302725970d596c75e5; BE d1ab29853bb43128e01eefddc5ad397969e53c4 |
| T0-C application commits | FE f036eefa63acb22b8f7952a13e72e6720fd20e5d; BE 582731118be89fcd4a04496170ecc513f614759c |
| T0-D application commits | FE f25698b094c2e452dddcf24b2f6cab8d63714252; BE current 4f132a86c4e2abb661502af7929959384287fcb0 |
| Golden DB | scola_golden, UUID 2bf5fd27-9390-11f1-9617-28e8d4be73f5, fixture gt-core-b1.1; logical checksum 5571f1755dd2d8083a5cb9eb54d34a86c3fb541858d9d150965273c48e15e6ec |
| Golden installed baseline | Core plus historic scola_hr and scola_leadership_hub; optional entitlement flags false/default |
| Served FE | 127.0.0.1:5181, version ad0c2d8e57ac+msl6skx1 (B2.1 build, not T0-D FE) |
| Served BE | 127.0.0.1:8090, /api/public/source-identity reports current BE 4f132a86... |
The current served FE/BE pair has no immutable combined T0-D certification. The evidence validator was run before deeper analysis and failed on the route checksum mismatch. A controlled descendant worktree with application changes nevertheless produced validator PASS, proving the validator can be false-green.
Targeted checks¶
Route surface: 1,715 extracted / 1,675 protected / 37 public / 3 internal / 0 unknown. A temporary unregistered /api/v1 fixture failed the checker and was removed. CI does not invoke this denominator checker. Active-role unit suites passed (8, 12); credential lifecycle unit passed 8; modular topology unit failed 7/44. Core smoke selector listed 4 tests, but execution was blocked by fixture login access denial. Fresh Core install independently yielded 13 scola_* modules and checksum 43115784e71c36f5ee2ee2209f17705c8405fc88da0f689ca73fb47e91fe8299.
No-change assertion¶
No application source, tests, manifests, runtime databases, or deployment files were modified by this audit. Disposable audit runtime/database artifacts were removed by the delegated auditors.