Lewati ke isi

T2.1-W01 Result — Security, Atomicity and Evidence Closure

Item Nilai
Mode Server · /home/scola/odoo
Tanggal 2026-08-11
Exit label T2.1 ENGINEERING COMPLETE — PENDING INDEPENDENT W01 RE-AUDIT

Identity

Item Value
FE tip (artifacts/evidence) develop / af94cd929a83fd4049258940cdda88da35639100 (identity bind; matrix tip 2014f0a42773a9d2f49c334f6c19fbcf9503a5df)
FE app tip (served dist) e2b7646f77c24f423851abd3a8db35b74d5eeba4 (docs-only tip drift vs app tree)
BE tip main / f106676bef2af56f58265e33bb7e1b3bb1e6b9cb
BE app tree 1d480d1f7c830e03b697c588c9e904fc824c00daebce071d5568ce105e0ceb8d
Runtime evidence T2.1-W01-20260811T010823Z · 64/64 PASS
Prior W01 28 28/28 PASS
E1.2 rebind T0-E1.2-REBIND-CURRENT-20260811T0115Z · 29/29 PASS · validator PASS (--allow-docs-tip)
E1.2 manifest T0-E1.2-evidence/T0-E1.2-REBIND-CURRENT-20260811T0115Z-runtime-manifest.json
DEC-003 18704cbddf996b516a5ed2eafb0b2f740c6f30ec82a46995efa26a124cfc11f2 unchanged
Golden scola_golden · 2bf5fd27-9390-11f1-9617-28e8d4be73f5 · overlay gt-w01-1.0 / live fixture gt-core-b1.1
Lesson-hour overlap LESSON_HOUR_OVERLAP_FORBIDDEN

Historical T2-W01-result.md remains the historical engineering claim; this file supersedes current engineering status only.

Key code fixes (BE)

  1. F-001 academic_session_api.py: _session_actor_scope_domain() + sessions/get; list/count share canonical scope.
  2. F-002 academic_master_api.py: academic_year_save pre-validates terms + savepoint (create & update).
  3. F-003 lesson-hour savepoint + foreign profile deny; overlap enforced by model + evidence.
  4. Concurrent hard backstop: unique index op_session_faculty_start_uniq (workers=0 shared-CNX advisory lock bypass).
  5. Harness w01_runtime_certify.py: expanded denominator + disposable cleanup.

Artifacts

  1. T2.1-W01-preflight.md
  2. T2.1-W01-session-read-scope-contract.json
  3. T2.1-W01-atomicity-matrix.md
  4. T2.1-W01-expanded-denominator.json
  5. T2.1-W01-runtime-matrix.md
  6. T2.1-W01-evidence/
  7. T2.1-W01-findings-closure.md
  8. T2.1-W01-result.md (this file)

Explicit non-certifications

  • W01 — engineering complete only; not independently re-certified here
  • W02 NOT CERTIFIED
  • W05 NOT CERTIFIED
  • Optional packages NOT CERTIFIED

Adversarial self-review (must be No)

  1. Teacher A list see Teacher B? No
  2. Through count? No
  3. Through direct detail? No
  4. Through search/read/search_read? No (RPC denied/empty)
  5. Widen via faculty/batch filter? No
  6. Invalid term create year anyway? No
  7. Invalid term update partial year? No
  8. Mixed valid+invalid leave children? No
  9. Overlap rule known? Yes — FORBIDDEN from source
  10. Rule exercised? Yes
  11. Admin/teacher RPC bypass API? No
  12. Weaken company isolation? No
  13. Reopen T0/T1 auth? No (E1.2 rebind 29/29 + validator PASS after BE tip)
  14. Old 28 valid? Yes 28/28
  15. False-green resistant? Yes — DB asserts

Follow-up (2026-08-11) — Core news beranda visibility

Observed after T2.1: beranda “Berita terbaru” missing across roles because Core scola_news was incorrectly gated like an optional SKU.

Engineering fix recorded in T2.1-W01-core-news-visibility-fix.md (FE widget/Topbar + BE install-authoritative merge + API registry v7).

This follow-up does not self-issue W01 CERTIFIED and does not reopen F-001–F-004.

Final label

T2.1 ENGINEERING COMPLETE — PENDING INDEPENDENT W01 RE-AUDIT