| T6A-F001–F004 |
S0/S1 |
Canonical registration, DEC-014, exact public surface |
W03 31/31; activation is session-bound and raw token is not exposed |
CLOSED_BY_INDEPENDENT_AUDIT |
None in certified SC-ADM surface |
| T6A-F005–F009 |
S1 |
Capability SoD, state machine, quota/enrollment, idempotency/recovery |
DB before/after and concurrency cases PASS |
CLOSED_BY_INDEPENDENT_AUDIT |
None in certified SC-ADM surface |
| T6A-F010 |
S1 |
Installed module is not entitlement |
Mixed install 31/31; Fees/bridges installed with entitlement OFF and all representative API/RPC access denied |
CLOSED_BY_INDEPENDENT_AUDIT |
Optional Fees/CBT business workflows remain uncertified |
| T6A-F011–F014 |
S1 |
Core suite separation, W03 package suite, portal lifecycle, complaint fail-close |
Core regressions and package/static gates PASS; legacy portal mutation paths deny/410 |
CLOSED_BY_INDEPENDENT_AUDIT |
No W03 optional-domain certification |
| T6A-F015/F018 |
S1 |
Pathless route and direct RPC bypass |
Route inventory has no pathless source stubs; W03 direct RPC/call_button cases PASS |
CLOSED_BY_INDEPENDENT_AUDIT |
None |
| T6A-F021 |
S1 |
Company/tenant boundary |
W03 GT-T1/GT-T2 read/list/mutation/document/status cases PASS |
CLOSED_BY_INDEPENDENT_AUDIT |
None |
| T6A-F022 |
PRODUCT_DECISION |
Approved W03 product contract |
T6A-W03-approved-product-contract.md signed by requesting user |
CLOSED_BY_INDEPENDENT_AUDIT |
Future contract changes require a new decision record |
| T6A-F023 |
S1 |
Runtime, identity, regression, and immutable evidence gates |
E1.2 29/29 + validator PASS; W01 64/64; W02 33/33; W05 16/16; exact FE/BE identities |
CLOSED_BY_INDEPENDENT_AUDIT |
Demo/production promotion is a separate gate |