T6A independent runtime evidence¶
W03 / SC-ADM¶
The final disposable runtime matrix passed 31/31. The same matrix passed again after installing scola_fees plus its intended bridges while the commercial entitlement remained OFF. Evidence hashes:
| Evidence | SHA-256 |
|---|---|
T6A-W03-runtime-matrix-20260816-final.json |
5397d4cbaa283e64dacaf956581da877e6a6cd61fae481f623e7ca5da3483bd7 |
T6A-W03-runtime-matrix-mixed-20260816-final.json |
74723d280bdc1ff4a1061caf191c54f44fa8079160b8c1337bb3f60f70cc1e47 |
The matrix included real DB before/after checks for state transitions, idempotency, tenant and scope boundaries, direct RPC/call_button, infected documents, retention, recovery, quota and enrollment concurrency, exact public routing, installed-but-unentitled access, package OFF, activation session binding, and rate limits.
Regressions on upgraded Golden¶
| Suite | Result | Backend identity |
|---|---|---|
| E1.2 | 29/29; finding observations 0 | d23c2c6… |
| E1.2 evidence validator | PASS | FE docs descendant explicitly allowed |
| W01 | 64/64 | d23c2c6… |
| W02 | 33/33 | d23c2c6… |
| W05 | 16/16 | d23c2c6… |
E1.2 cases included same-tenant and cross-tenant reset, session revocation/deactivation, must-change API/RPC denial, concurrent token consume/issue, native reset denial, retired bulk-path denial, no plaintext/default credential, and fail-closed audit/session helpers.