Lewati ke isi

T4/W05 Independent Runtime Evidence

Independent matrix rerun

w05_runtime_certify.py was rerun against Golden with the current FE/BE tips. Result: 16/16 PASS, 0 skipped. Cases covered creation/update/idempotency, foreign session and student, forged sheet, cross-tenant session, parent own/peer, student own/peer RPC, teacher direct RPC create, concurrent save, and the documented single-session policy.

Targeted source/runtime checks

  • Faculty save rejects a forged sheet whose session or local date differs from the requested session.
  • Faculty save rejects a student absent from the session batch with invalid_student.
  • Teacher line creation uses the scoped elevated helper only after faculty/session/roster checks; direct teacher call_kw op.attendance.line.create remains denied and created no row in the rerun.
  • Parent/student serializers emit no raw proof_file binary; parent daily output retains only filename/has-proof metadata.
  • Global attendance-line company rule plus student-own-line rule is present. The independent student peer RPC case returned no peer line while own daily attendance succeeded.
  • E1.2 validator rerun against the 2205 manifest/matrix returned E12 VALIDATOR PASS.

The backend Python files compile and the controller route-budget check passes.