Lewati ke isi

T6B V1 Independent Umbrella Audit Input

Mode: server · workspace /home/scola/odoo
Prepared: 2026-08-18T00:16:00Z
Engineering label: T6B V1 ENGINEERING COMPLETE — READY FOR INDEPENDENT UMBRELLA AUDIT

This pack is not T6B COMPLETE and is not authorization to promote demo or production.

Do not overwrite files under docs/release-readiness/audit/ except with a new timestamped umbrella artefact.

Isolation --live at handoff: PASS. Overlay HTTP :8094 / Core :8095 are disposable. Golden, GBN, scoladev, demo, and production were not changed.

Exact identities to bind

Field Value
FE application commit 430452805812704d7b52b68c945f1ad6ab373888
FE application tree e00180e14fcff6fa73d9cffff80f095028b5d8170a3fbb6370f4735d94a2d9d8
Local dist version.json frontend_git_commit_sha=430452805812704d7b52b68c945f1ad6ab373888, version=430452805812+msxwd1g3
FE build checksum d0f8c4f00c1b75536bb0057d2ab9ac00bd115888c19032c5da294439d3267939
BE application commit (main) 8bc21d269382eb0379994f029825dc86215caeef
BE application / live runtime tree 0bc7689baf691882a694ae4a74a1809ac1c140ae193bf440c09dececf1dad451
Overlay DB scola_t6b2_audit_20260817T094947Z
Overlay HTTP http://127.0.0.1:8094
Overlay id (this recert seed) 4687f1f1-f4f3-486e-bc69-176bcc8d371b
Core clone DB scola_t6b2_core_20260817T102234Z
Core HTTP http://127.0.0.1:8095
Live runtime source /home/scola/odoo/custom_addons_scola/gcgscola

Served-dev/demo docroots were not updated.

Predecessor labels that must still hold on this SHA pair

  • T6A COMPLETE — W03 31/31 on :8094
  • T6B.1 VERIFIED — W10 11/11 including AV fail-closed (proof_infected, stored 0)
  • T6B.2 COMPLETE — 19/19 skip 0; VAL-01 inactive attach ok is False; IDM-01 one success + one conflict

In-scope closures to re-verify

  1. POST /my/child/<id>/fees/<fee_id>/upload → HTTP 410; ir.attachment count does not increase.
  2. FE treasurer lacks finance.payment.setup / finance.payment.manage / finance.billing.receive_cash.
  3. FE head_admin lacks finance.billing.manage / finance.payment.manage.
  4. Accounting leaves remain; do not treat their presence as T6G certification.
  5. No S0/S1 open in T6B V1 scope (cash/transfer). T6B.3 / T6G / T6C–T6K are accepted residuals, not blockers.

Commands for independent re-execution

Do not target Golden, GBN, scoladev, demo, or production.

python3 /home/scola/odoo/custom_addons_scola/gcgscola/scripts/ops/environment_isolation_check.py --live

python3 /home/scola/odoo/custom_addons_scola/gcgscola/scripts/golden/e12_evidence_identity_validator.py \
  --manifest /home/scola/odoo/scola-fe-v2/docs/release-readiness/execution/T6B-V1-evidence/T6B-V1-E1.2-runtime-manifest.json \
  --results /home/scola/odoo/scola-fe-v2/docs/release-readiness/execution/T6B-V1-evidence/T6B-V1-E1.2-20260818T001139Z-security-matrix.json \
  --fe-root /home/scola/odoo/scola-fe-v2 \
  --be-root /home/scola/odoo/custom_addons_scola/gcgscola \
  --dist /home/scola/odoo/scola-fe-v2/dist \
  --allow-docs-tip

export GT_DB_NAME=scola_t6b2_audit_20260817T094947Z
export GT_BASE_URL=http://127.0.0.1:8094
export ODOO_T6B2_CONF=/home/scola/odoo/config/odoo-t6b2.conf
python3 /home/scola/odoo/custom_addons_scola/gcgscola/scripts/golden/t6b_v1_portal_upload_probe.py

# Optional full recert (already bound in T6B-V1-evidence/; rerun only if identity drifted)
export ODOO_GOLDEN_CONF=/home/scola/odoo/config/odoo-t6b2.conf
export T6B2_FE_APPLICATION_COMMIT=430452805812704d7b52b68c945f1ad6ab373888
python3 /home/scola/odoo/custom_addons_scola/gcgscola/scripts/golden/w10_runtime_certify.py
python3 /home/scola/odoo/custom_addons_scola/gcgscola/scripts/golden/t6b2_runtime_certify.py
python3 /home/scola/odoo/custom_addons_scola/gcgscola/scripts/golden/w03_runtime_certify.py

Source proof points:

  • scola_parent/controllers/portal.py portal_upload_payment_proof → _w10_gone() status 410
  • scola-fe-v2/src/config/roleFragments/operationalRoles.js treasurer/head_admin W10 grants
  • scola-fe-v2/src/config/apps/roleApps.js treasurer hiddenLeafIds includes finance.cash.receive

Out of scope

  • Demo or production promotion
  • Restart/rsync of /var/www/dev-scola
  • T6B.3 gateway, T6G accounting, T6C–T6K
  • Dropping overlay databases
  • Rewriting historical T6A / T6B.1 / T6B.2 audit files