T0-E1.1 Preflight — Unified Authority / Credential / Certification Closure¶
| Item | Value |
|---|---|
| Mode | Server development /home/scola/odoo |
| Docs read | audit/T0-E1-independent-*.md, audit/T0-final-*.md, T0-E1-result/preflight, workspace-governance, development-guide, DEC-002, DEC-014 |
| Prior E1 label | IMPLEMENTED_BUT_INDEPENDENTLY_FAILED (E1-C) |
| This tranche | Corrective only — must not write T0 CLOSED |
| Do not start | T0-E2, T1 |
Preserve prior evidence (immutable inputs)¶
Do not rewrite:
docs/release-readiness/audit/T0-final-*.mddocs/release-readiness/audit/T0-E1-independent-*.mddocs/release-readiness/execution/T0-E1-result.mddocs/release-readiness/execution/T0-E1-evidence/(PASS matrices are not E1.1 certification evidence)
E1 implementation status for this tranche baseline:
IMPLEMENTED_BUT_INDEPENDENTLY_FAILED
Source identity (E1.1 start)¶
| Repo | Branch | HEAD | origin |
|---|---|---|---|
| FE | develop |
7bf75bbe59a978ef276c2063266e8d0c0c405d73 |
synced |
| BE | main |
039e95b587cb40ca7db12fdfeb2320deeff2c8cc |
synced |
| FE working tree | untracked: recon XLSX, E1 independent audit docs, leftover E1 evidence JSON | ||
| BE working tree | clean |
Served / Golden baseline (start)¶
| Item | Value |
|---|---|
| Golden HTTP | http://127.0.0.1:8090 (/web/login 200) |
| DB | scola_golden |
| BE identity env | last start used SCOLA_BACKEND_GIT_COMMIT_SHA=039e95b5… |
| Independently CLOSED (do not redesign unless needed) | T0F-002, T0F-013 |
Remaining findings owned by E1.1¶
| Finding | Independent status | Primary exploit / gap |
|---|---|---|
| T0F-001 | NOT_FIXED | Inactive platform_operator group widens school_admin |
| T0F-003 | NOT_FIXED | No E1 runtime manifest; validator incomplete |
| T0F-004 | PARTIALLY_FIXED | Enable-one package + native RPC package boundary incomplete |
| T0F-005 | NOT_FIXED | Cross-tenant reset via authority fallback |
| T0F-006 | NOT_FIXED | Alternate plaintext/default credential paths |
| T0F-007 | NOT_FIXED | Must-change only /api; dataset reads allowed |
| T0F-008 | NOT_FIXED | /web/signup?token= lifecycle remains |
| T0F-009 | PARTIALLY_FIXED | Issue race; revoke/audit fail-open |
| T0F-014 | NOT_FIXED | Incomplete DEC-014 denominator |
| T0F-015 | NOT_FIXED | GT-T1 res.partner RPC read of GT-T2 |
Architectural goals (not symptom patches)¶
- One authority/tenant model across Scola API + permitted Odoo RPC
- One credential establishment/recovery lifecycle
- One server-enforced restricted-principal state
- One complete immutable runtime certification model
Proceed¶
Implement E1.1. Final label only:
T0-E1.1 IMPLEMENTATION COMPLETE — PENDING INDEPENDENT AUDIT