T5 Core Regression Matrix¶
| Gate | Run | Result | Evidence |
|---|---|---|---|
| E1.2 security matrix | T0-E1.2-REBIND-CURRENT-20260814T0605Z |
29/29 PASS, skip 0, finding_observation_fail 0 | T0-E1.2-evidence/…0605Z-security-matrix.json |
| E1.2 first observation | …0557Z |
27/29; native POST 400 CSRF (password unchanged; GET 404; CSRF POST 404) | T5-evidence/T5-preflight-e12-matrix-0557Z-27of29.json |
| E1.2 identity validator | same run, --allow-docs-tip |
FAIL dirty docs/evidence + golden scripts only | T5-preflight-e12-validator.txt |
| Live identity | POST :8090/api/public/certification-identity |
SHA/tree/DB/fixture/modules match | manifest in T5-evidence/ |
check:nav-graph |
current APP_REGISTRY | PASS | T5-preflight-nav-graph.txt |
check:core-parity |
T1-B | PASS | T5-preflight-core-parity.txt |
check:core-nav-ux |
T1-C | PASS | T5-preflight-core-nav-ux.txt |
| Route coverage | AUTH-004 | PASS 1717 / blocker 0 | T5-preflight-route-coverage.txt |
| Package topology | T0-E2 dispositions | PASS 15 SKUs | T5-preflight-package-topology.txt |
| Package consistency | catalog | PASS | T5-preflight-package-consistency.txt |
| Package catalog | npm | PASS | T5-preflight-package-catalog.txt |
| W01 teacher other-faculty hidden + invalid term atomic + full matrix | T2.1-W01-20260814T060808Z |
64/64 PASS | T5-preflight-w01-regression.txt |
| W02 foreign partner + no partial parent + full matrix | T3-W02-20260814T061227Z |
33/33 PASS | T5-preflight-w02-regression.txt |
| W05 forged sheet, out-of-roster, teacher RPC, peer isolation, concurrency | T4-W05-20260814T061529Z |
16/16 PASS | T5-preflight-w05-regression.txt |
| T5 residual probes | T5-PROBE-* |
17/18 (news admin create 500 missing column) | T5-residual-probes.json |
Quality-gate map (Phase 33)¶
| Gate | Bounded Core |
|---|---|
| Product contract stable? | Yes for W01/W02/W05-A + T0/T1. W16/W17/W18 remain decisions. |
| RBAC/scope stable? | Yes (T0 29/29, W01/W02/W05, settings/news negative probes) |
| Tenant isolation stable? | Yes |
| Validation/atomicity | W01/W02/W05 green |
| Cross-role views | Dashboards/projections scoped; no T5 widening |
| Privacy/security | T0 green; native reset/signup still 404 |
| Package topology | 15 SKUs PASS; optional entitlements OFF |
| Immutable evidence | Application trees bound; validator red only on dirty docs/scripts |
| Known Core S0/S1 | None reproduced on certified W01/W02/W05-A/T0. News authoring 500 is schema lag, not a certified-workflow integrity break. |
Compatibility (Phase 27)¶
NO_APPLICATION_CHANGE — NOT_APPLICABLE
T5 did not change FE/BE application source. Scripts-only harness edits are uncommitted and outside application tree hash.