T0-E1.2 Result — Runtime Evidence Truth and Residual Security Closure¶
| Item | Value |
|---|---|
| Mode | Server /home/scola/odoo |
| Docs read | development-guide.md, workspace-governance.md, architecture-api.md, DEC-014 property map, independent T0-E1.2-final-reaudit-* |
| Independent verdict (prior tip) | T0-E1.2 VERIFIED — SECURITY/ENFORCEMENT FINDINGS CLOSED against BE e5dc9e86… / run …232557Z |
| Current engineering rebind | Current-tip rebind after T1-B Core capability/route/role parity (c7f3691c… / BE 0d165a67…) |
| Label | T0-E1.2 CURRENT-TIP REBIND VERIFIED — 29/29 PASS |
| Not claimed | Optional business-workflow certification; historical audit artifacts remain preserved |
| FE application tip (rebind) | c7f3691c2a0004728b00be3f1befe0d268bc8f47 (develop; T1-B Core parity) |
| FE application tree hash | b28530324697b9d64ed7dbd280ef09d05c93654c62ce211432223b94b886526d |
| Served FE identity | c7f3691c2a00+msn7gxpc |
| BE commit (rebind) | 0d165a67dc2e33b55bae50b6f53a94e49d491cfc (main; scripts tip 8cc5cca… app-tree-equivalent) |
| Rebound run | T0-E1.2-REBIND-20260810T011655Z (historical) |
| Post-E2 packaging rebind | T0-E1.2-REBIND-E2-20260810T014040Z (historical) |
| Audit-tip rebind (push) | T0-E1.2-REBIND-AUDIT-20260810T021408Z / BE 2e04f2f3… (historical) |
| Post-#81 FE rebind | T0-E1.2-REBIND-FE81-20260810T025733Z / FE f036d447… (historical) |
| Prior CURRENT rebind (pre-T1-A) | T0-E1.2-REBIND-CURRENT-20260810T0853Z (preserved) |
| Prior CURRENT rebind (T1-A) | T0-E1.2-REBIND-CURRENT-20260810T104714Z / FE 6c7df740… / BE 95468e5e… (preserved) |
| Current-tip rebind | T0-E1.2-REBIND-CURRENT-20260810T1250Z / FE c7f3691c… / BE 0d165a67… |
| Prior certified run | T0-E1.2-20260809T232557Z (preserved) |
| Golden DB | scola_golden / UUID 2bf5fd27-9390-11f1-9617-28e8d4be73f5 |
| Fixture | gt-core-b1.1 |
| Credential/security matrix | 29/29 PASS, 0 skip |
| Finding observations | T0F-001/004/005/007/015 PASS (finding_observation_fail: 0) |
| Evidence validator | PASS (live re-probe; FE docs tip allowed) |
| Tip-delta vs prior VERIFIED tip | Admin reset now applies caller-provided password (≥8), sets must_change, revokes sessions, returns no plaintext (DEC014-ADMIN-RESET-OK-01) |
Finding matrix (security — unchanged ownership)¶
Independent closure records remain preserved. This current-tip rebind re-proves the 29-case DEC-014 matrix, finding observations, runtime identity, route checksum, Golden fixture, module set, entitlement map, and source-tree binding against the current FE/BE tips.
| Finding | Status after independent final reaudit | Rebind note |
|---|---|---|
| T0F-001…009, 014, 015 | Closed by independent audit on e5dc9e86… |
Re-proved on rebound tip (engineering) |
| T0F-002, T0F-006, T0F-013 | Independently CLOSED | Regression green on rebound tip |
| T0F-010 / 011 / 012 | Open for T0-E2 | Not closed here |
Evidence artifacts¶
- Final independent reaudit (preserved):
docs/release-readiness/audit/T0-E1.2-final-reaudit-*.md - Prior re-audit inputs:
docs/release-readiness/audit/T0-E1.2-re-audit-*.md - Runtime manifest (current):
T0-E1.2-runtime-manifest.json→ runT0-E1.2-REBIND-CURRENT-20260810T1250Z - Current matrix:
T0-E1.2-evidence/T0-E1.2-REBIND-CURRENT-20260810T1250Z-security-matrix.json - Prior CURRENT matrix (T1-A, preserved):
T0-E1.2-evidence/T0-E1.2-REBIND-CURRENT-20260810T104714Z-security-matrix.json - Prior CURRENT matrix (pre-T1-A, preserved):
T0-E1.2-evidence/T0-E1.2-REBIND-CURRENT-20260810T0853Z-security-matrix.json - Prior FE81 matrix (preserved):
T0-E1.2-evidence/T0-E1.2-REBIND-FE81-20260810T025733Z-security-matrix.json - Prior certified matrix:
T0-E1.2-evidence/T0-E1.2-20260809T232557Z-security-matrix.json
Final label¶
T0-E1.2 CURRENT-TIP REBIND VERIFIED — 29/29 PASS
The immutable validator passed against the current application trees and served runtime. Optional business workflows remain uncertified and separately gated.