{ "title": "Snabb feature and flow audit", "auditDate": "2026-09-11", "sourceRevision": "f5b07085937319e91c6b83c289bbe933801f3760", "method": "Refresh of the original feature inventory using the current source diff, sanitized live readiness/configuration/public endpoint observations and dated qualification records. Earlier pinned evidence remains labeled where retained. This refresh makes no new workload/model/failover claim.", "statusDefinitions": { "done": "Fully done within stated scope", "partial": "Partially done", "ui": "Implemented; UI gap", "blocked": "Deployed; disabled or blocked", "stub": "UI or adapter stub", "notdone": "Not implemented", "unverified": "Implemented; qualification incomplete", "undeployed": "Implemented; not deployed" }, "counts": { "unverified": 13, "partial": 34, "done": 39, "stub": 11, "blocked": 4, "notdone": 4, "ui": 1 }, "features": [ { "id": "A01", "area": "Access & onboarding", "feature": "Blazingfast SSO sign-in", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired or API/client path", "deployment": "Deployed", "usability": "Not established end to end for the stated scope", "priority": "P1", "finding": "OIDC/PKCE BFF path is present and deployed. This audit did not complete a real identity-provider login; the prior SSO fix lives partly outside this repository.", "next_action": "Qualify a fresh browser Blazingfast login/callback/logout. Direct password access is a separately qualified alternative (A17).", "evidence": [ { "path": "apps/console/server/server.mjs", "line": 76, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/server/server.mjs#L76", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/features/auth/pages/SignInPage.tsx", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/features/auth/pages/SignInPage.tsx#L1", "kind": "pinned source or historical qualification" }, { "path": "deployment-snapshot.json", "line": null, "url": "deployment-snapshot.json", "kind": "fresh observation" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A02", "area": "Access & onboarding", "feature": "Native email registration and magic-link login", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Administrator-configured Resend is enabled. The recipient confirmed delivery; a real console browser sign-in request returned 202 and created a fresh 15-minute challenge. Email-link consumption and a new-user registration journey were not exercised by that live check.", "next_action": "Qualify receipt → one-use link consumption → session, expiry/replay and new-account registration.", "evidence": [ { "path": "qualification/email-delivery-2026-09-11.json", "line": null, "url": "qualification/email-delivery-2026-09-11.json", "kind": "Dated sanitized observation / qualification" }, { "path": "feature-flags.json", "line": null, "url": "feature-flags.json", "kind": "Dated sanitized observation / qualification" }, { "path": "services/control-plane/src/auth-routes.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/src/auth-routes.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/features/auth/pages/SignInPage.tsx", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/features/auth/pages/SignInPage.tsx#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "G12" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "A03", "area": "Access & onboarding", "feature": "Passkey sign-in and account passkey management", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired or API/client path", "deployment": "Deployed", "usability": "Not established end to end for the stated scope", "priority": "P1", "finding": "The undefined-options bug has a schema-checked adapter. Sign-in, listing and removal are wired; fresh physical-device enrollment and authentication were not exercised in this audit.", "next_action": "Qualify enrollment and login on supported browsers/devices, including recovery when no passkey exists.", "evidence": [ { "path": "apps/console/src/api/live/passkey.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/passkey.ts#L1", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 434, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L434", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/features/auth/pages/SignInPage.tsx", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/features/auth/pages/SignInPage.tsx#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A04", "area": "Access & onboarding", "feature": "Scoped API keys and revocation", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Live UI creates scoped keys and only returns the secret once. Prior qualification verified project-bound access denial and revocation.", "next_action": "Keep negative scope and revocation checks in release gates.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 410, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L410", "kind": "pinned source or historical qualification" }, { "path": "docs/end-to-end-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/end-to-end-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/runtime-rotation-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-rotation-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A05", "area": "Access & onboarding", "feature": "Project roles and invitations", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Project role changes, removal and email-addressed invitations exist. Direct-add is disabled; company billing membership is intentionally separate from project execution access.", "next_action": "Make invitation/link delivery explicit and qualify cross-role journeys in the browser.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 404, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L404", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 458, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L458", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A17" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A06", "area": "Access & onboarding", "feature": "Account settings and device sessions", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Session interruption preference and device sign-out are wired. Other account update fields reject with feature_disabled; several preference displays are fixed defaults.", "next_action": "Wire supported settings and remove or disable controls that cannot persist.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 432, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L432", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A07", "area": "Access & onboarding", "feature": "Project creation and repository settings", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Project creation and repository settings are wired. Source defaults and retention/checkpoint policy now have explicit flows, but the generic project update remains repository-focused and arbitrary field updates are not supported.", "next_action": "Verify the supported project settings in the browser and keep unsupported edits absent.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 290, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/client.ts#L290", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "A17", "B01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "A08", "area": "Access & onboarding", "feature": "Public Git repository to prepared workspace", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "CLI/API and workspace UI; full onboarding wizard not qualified", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Pinned public GitHub/GitLab checkout, frozen npm/pnpm/Yarn setup and saved-workspace recovery passed bounded live fixtures.", "next_action": "Retain these fixtures; private credentials and full browser onboarding have separate rows.", "evidence": [ { "path": "docs/public-onboarding-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/public-onboarding-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/prepared-environments-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/prepared-environments-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07", "W01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A09", "area": "Access & onboarding", "feature": "Private GitHub/GitLab onboarding and credential repair", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "GitHub connection/repository selection and private credential paths exist, but the cited onboarding qualification explicitly excludes private permissions, revocation and secret repair.", "next_action": "Qualify fresh private repositories and actionable permission/revocation repair.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 454, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L454", "kind": "pinned source or historical qualification" }, { "path": "docs/public-onboarding-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/public-onboarding-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07", "G01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A10", "area": "Access & onboarding", "feature": "Verified source archive upload from browser", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Full live browser journey not yet established", "priority": "P1", "finding": "The browser now uploads actual archive bytes, verifies the digest, finalizes the source and publishes its index. Settings accepts a File instead of passing only filename/size. Code, adapter tests and the release are present; a fresh live browser upload-to-first-run journey remains unqualified.", "next_action": "Run a fresh browser archive upload, failure recovery and source admission journey.", "evidence": [ { "path": "apps/console/src/api/live/source-upload.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/source-upload.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/features/settings/pages/SettingsPage.tsx", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/features/settings/pages/SettingsPage.tsx#L1", "kind": "Current pinned source / dated qualification" }, { "path": "services/control-plane/test/source-publication-archive.test.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/test/source-publication-archive.test.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "deployment-snapshot.json", "line": null, "url": "deployment-snapshot.json", "kind": "Dated sanitized observation / qualification" } ], "depends_on": [ "A07" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "A11", "area": "Access & onboarding", "feature": "Source index publication and context discovery", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Full live browser journey not yet established", "priority": "P1", "finding": "Browser upload now publishes the verified archive index and source selection pins its identity. CLI/API paths remain available. The full fresh browser source/index/agent journey still needs live acceptance.", "next_action": "Verify publication, expired/replaced sources and selection in a real browser.", "evidence": [ { "path": "apps/console/src/api/live/source-upload.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/source-upload.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 227, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/ai-sessions.ts#L227", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "A10" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "A12", "area": "Access & onboarding", "feature": "Development manifest and saved verification tasks", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Manifest initialization and publishing, saved task edit/run paths and immutable task inputs have implementation and bounded qualification.", "next_action": "Keep exact package-manager pins and preserve source/task identities.", "evidence": [ { "path": "docs/public-onboarding-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/public-onboarding-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 163, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L163", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sessions.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A13", "area": "Access & onboarding", "feature": "Project overview metrics and uploaded-source display", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P1", "finding": "projectDto always returns zero run/spend/cap metrics, no sparkline, no uploaded source and no variables. These values are not measurements.", "next_action": "Map real aggregates and source state; show unavailable rather than zero when absent.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 115, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L115", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A14", "area": "Access & onboarding", "feature": "Project variables editor", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "The variables editor calls projects.addVariable, which always throws; project variables are always mapped to an empty array. Project secrets are a separate working facility.", "next_action": "Choose a persisted variable contract and wire the editor and execution request.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 115, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L115", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 291, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L291", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/features/settings/pages/SettingsPage.tsx", "line": 217, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/features/settings/pages/SettingsPage.tsx#L217", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A15", "area": "Access & onboarding", "feature": "Project payer transfer and project deletion UI", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "Both project transfer and delete adapters are disabled. Company payer ownership transfer does exist but does not move projects between payers.", "next_action": "Define archive/delete and cross-payer transfer semantics, then implement reviewed workflows.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 289, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L289", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07", "B03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A16", "area": "Access & onboarding", "feature": "new.snabb.run as a production console", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Demo screens; billing links to canonical console", "deployment": "Stub deployed", "usability": "Usable as an interface preview, not evidence of live feature delivery", "priority": "P2", "finding": "The published second console builds in mock mode and loadApi selects MockApiClient. Agent live modules are copied there but do not make the deployed demo a live console; billing redirects to the canonical console.", "next_action": "Keep its demo label, or qualify and deploy live mode as a separate product decision.", "evidence": [ { "path": "snabb-console/Dockerfile", "line": 8, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/snabb-console/Dockerfile#L8", "kind": "pinned source or historical qualification" }, { "path": "snabb-console/src/api/provider.tsx", "line": 58, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/snabb-console/src/api/provider.tsx#L58", "kind": "pinned source or historical qualification" }, { "path": "snabb-console/src/api/mock/client.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/snabb-console/src/api/mock/client.ts#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-supervision-qualification-2026-09-09.md", "line": 37, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-supervision-qualification-2026-09-09.md#L37", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "A17", "area": "Access & onboarding", "feature": "Direct password setup, sign-in and sign-out", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P2", "finding": "One-time password setup, salted scrypt, shared PostgreSQL attempt limits, session revocation and administrator eligibility are deployed. An isolated real browser fixture verified setup/replay rejection, login, secure cookies, sign-out, cross-origin denial and non-admin rejection.", "next_action": "Retain the regression and operator-controlled setup-token workflow. No administrator password is stored in this report.", "evidence": [ { "path": "qualification/password-auth-2026-09-11.json", "line": null, "url": "qualification/password-auth-2026-09-11.json", "kind": "Dated sanitized observation / qualification" }, { "path": "services/control-plane/src/password-routes.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/src/password-routes.ts#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "B01", "area": "Billing & companies", "feature": "Shared beta plan catalogue", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Trial, Developer, Team and Private beta with zero recurring fees are shared by backend, canonical console, admin and marketing. Public pricing labels matched during this audit.", "next_action": "Keep generated catalogue checks; zero recurring fee does not mean free compute.", "evidence": [ { "path": "packages/contracts/billing/beta-catalogue.json", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/packages/contracts/billing/beta-catalogue.json#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "public-checks.json", "line": null, "url": "public-checks.json", "kind": "fresh observation" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B02", "area": "Billing & companies", "feature": "Wallet admission, holds, settlement and fractional-cent carry", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Reservations, exactly-once settlement, ledger debits and payer-level fractional-cent carry are implemented with transactional and rollout evidence. Historical PER_RUN amounts are preserved.", "next_action": "Continue invariant/replay checks when pricing or reservation semantics change.", "evidence": [ { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-isolation-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-isolation-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-followups-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-followups-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/end-to-end-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/end-to-end-2026-09-07.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B03", "area": "Billing & companies", "feature": "Independent company payers and billing administrators", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Company creation is enabled. Separate wallets, account selection, addressed invitations, billing administrators and payer ownership transfer are implemented. Billing roles deliberately do not grant source or execution access.", "next_action": "Retain browser and database membership tests; owners share invitation links manually.", "evidence": [ { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "feature-flags.json", "line": null, "url": "feature-flags.json", "kind": "fresh observation" } ], "depends_on": [ "A01", "B01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B04", "area": "Billing & companies", "feature": "Company agreements and requested beta plan changes", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Canonical billing UI and operator console", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Admin-configured agreements and reviewed plan requests use the existing beta catalogue. Requests grant no entitlements before administrator approval.", "next_action": "Keep agreement changes visible and stale decisions rejected.", "evidence": [ { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B05", "area": "Billing & companies", "feature": "Billing totals, ledger history and deposit receipts", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Authoritative month/holds/carry display and deposit receipts exist. Initial views are bounded to 100 ledger entries, 50 deposits and 50 reservations; full customer history navigation is incomplete.", "next_action": "Add explicit history bounds and server pagination/export for older records.", "evidence": [ { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 338, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L338", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B06", "area": "Billing & companies", "feature": "Manual deposits and administrator-confirmed reversals", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Operator console; customer receipts", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Manual beta funding and reviewed refund/chargeback decisions are the supported model. Provider state changes create review work rather than silently deducting funds.", "next_action": "Retain human approval, audit evidence and idempotent retry behavior.", "evidence": [ { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-followups-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-followups-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-isolation-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-isolation-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B07", "area": "Billing & companies", "feature": "Stripe checkout, webhook recovery and reconciliation", "status": "blocked", "status_label": "Deployed; disabled or blocked", "code": "Implemented", "ui": "Present or partially wired", "deployment": "Deployed", "usability": "Blocked by configuration or admission", "priority": "P1", "finding": "Code, reconciliation streams and admin panels are deployed, but Stripe is false in live configuration. Real provider payment/retry/return flows remain unqualified.", "next_action": "Connect approved credentials/webhook, qualify provider test mode, then explicitly enable.", "evidence": [ { "path": "feature-flags.json", "line": null, "url": "feature-flags.json", "kind": "fresh observation" }, { "path": "docs/billing-followups-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-followups-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B02", "B06" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B08", "area": "Billing & companies", "feature": "Bounded storage and retained-output metering", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Billing/operator usage; not a complete storage inventory UI", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Durable paginated scans, account/hour publication and incomplete-scan refusal are implemented; natural hourly samples and disposable multi-page recovery were qualified.", "next_action": "Monitor accounts that cannot finish a scan within an hour; do not bill partial observations.", "evidence": [ { "path": "docs/billing-followups-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-followups-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/prepared-environments-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/prepared-environments-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/session-output-expiry.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-output-expiry.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W02", "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B09", "area": "Billing & companies", "feature": "Customer storage charging", "status": "blocked", "status_label": "Deployed; disabled or blocked", "code": "Implemented", "ui": "Present or partially wired", "deployment": "Deployed", "usability": "Blocked by configuration or admission", "priority": "P1", "finding": "The current global settings row is absent, which resolves to chargingEnabled=false. Allowance/rate and debit code exist, but charging has not been activated or fully qualified with customer-like test usage.", "next_action": "Qualify allowances, proration, carry, retries and ledger debits before a separate activation.", "evidence": [ { "path": "storage-settings.json", "line": null, "url": "storage-settings.json", "kind": "fresh observation" }, { "path": "services/control-plane/src/execution/storage-policy.ts", "line": 23, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/services/control-plane/src/execution/storage-policy.ts#L23", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-service.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-service.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B08", "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "B10", "area": "Billing & companies", "feature": "Company invitation delivery", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Company invite acceptance is implemented via manually shared links; creating an invitation sends no email. This is a delivery convenience gap, not a failure of company authorization. Recurring invoices and a distinct priced Enterprise tier are outside the approved beta model.", "next_action": "Keep link sharing explicit; optionally add invitation-email delivery. Do not treat abandoned paid plan designs as missing requirements.", "evidence": [ { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "feature-flags.json", "line": null, "url": "feature-flags.json", "kind": "fresh observation" } ], "depends_on": [ "B03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R01", "area": "Execution & delivery", "feature": "Isolated jobs on signed Firecracker runtimes", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Command execution, timeout and bounded multiworker canaries were qualified; signed runtime catalogs and compatible worker/guest releases are recorded.", "next_action": "Preserve immutable source/runtime admission and per-worker canaries.", "evidence": [ { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/runtime-rotation-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-rotation-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/end-to-end-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/end-to-end-2026-09-07.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07", "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R02", "area": "Execution & delivery", "feature": "Run form semantics: source, environment and advanced options", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Run admission now carries selected source/ref, environment, leased secrets, label, ephemeral retention, checkpoint and email options. Saved tasks bind their configuration ID; unsupported optimization goals are rejected. The resource/runtime UI remains limited and the complete live option matrix is not qualified.", "next_action": "Exercise each supported option through browser admission, execution and recorded results.", "evidence": [ { "path": "apps/console/src/features/runs/components/ScriptForm.tsx", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/features/runs/components/ScriptForm.tsx#L1", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 341, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/client.ts#L341", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "R01", "A10" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "R03", "area": "Execution & delivery", "feature": "Run cost quotes and cancellation cost feedback", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Full live browser journey not yet established", "priority": "P1", "finding": "The fixed €0.50 quote is replaced by the current billing catalogue and requested resources/duration. Cancellation leaves unknown settlement explicit. Regression tests and deployment are complete; browser quote-to-actual-settlement acceptance remains to be run.", "next_action": "Compare displayed reservation and final measured settlement for success, cancellation and failure.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 341, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/client.ts#L341", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/features/runs/components/ScriptForm.tsx", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/features/runs/components/ScriptForm.tsx#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "B02", "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "R04", "area": "Execution & delivery", "feature": "Complete run history and search", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Full live browser journey not yet established", "priority": "P2", "finding": "Run history and search now use server pagination, including records beyond the old latest-100 limit. Tests cover 124 visible runs, tenant isolation, sorting and labels. A live large-history browser journey remains unqualified.", "next_action": "Verify older pages, filters and reloads against a real account history.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 305, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/client.ts#L305", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/resources.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "R05", "area": "Execution & delivery", "feature": "Run logs, artifact downloads and result verification", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Bounded live execution verified artifact bytes/checksums, secret-safe delivery and signed results. Console routes and generated clients expose these paths.", "next_action": "Keep explicit retention/gap and signature status; do not infer completeness from a truncated view.", "evidence": [ { "path": "docs/end-to-end-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/end-to-end-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/trusted-test-file-results-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/trusted-test-file-results-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 307, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L307", "kind": "pinned source or historical qualification" } ], "depends_on": [ "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R06", "area": "Execution & delivery", "feature": "Run provenance and environment detail presentation", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Run details now use recorded source, environment and region, mask leased secrets, expose unknown cache outcomes and calculate artifact retention from expiry. Some account-member/trigger labels and wider metadata views remain simplified.", "next_action": "Qualify browser result details against actual execution receipts and remove remaining synthetic identity labels.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 261, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/client.ts#L261", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "R01", "R05" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "R07", "area": "Execution & delivery", "feature": "Runtime and script-interpreter catalogue", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Node 22/24, Python and OCI have current promoted runtime evidence. The live UI also advertises Go, Rust and C/C++, while script admission explicitly allows only Node/Python profiles.", "next_action": "Build runtime/interpreter choices from current capabilities and explain unsupported combinations.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 282, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L282", "kind": "pinned source or historical qualification" }, { "path": "services/control-plane/src/routes.ts", "line": 145, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/services/control-plane/src/routes.ts#L145", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 46, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L46", "kind": "pinned source or historical qualification" } ], "depends_on": [ "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R08", "area": "Execution & delivery", "feature": "Schedules and schedule estimates", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Create/toggle APIs and scheduler are present, but the console estimate returns zero. Long-duration dispatch/failure behavior was not freshly qualified here.", "next_action": "Expose a real estimate or unavailable state and test missed ticks/recovery.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 211, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L211", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 218, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L218", "kind": "pinned source or historical qualification" }, { "path": "deployment-snapshot.json", "line": null, "url": "deployment-snapshot.json", "kind": "fresh observation" } ], "depends_on": [ "A12", "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R09", "area": "Execution & delivery", "feature": "Pipeline definition, immutable versions and full retained history", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "YAML validation/save/trigger and retained-history pagination/direct lookup are wired. Pipeline summaries still contain placeholder aggregate timing/cost data.", "next_action": "Replace placeholder aggregates and qualify dispatch/report/publication recovery.", "evidence": [ { "path": "docs/pipeline-history-drafts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/pipeline-history-drafts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 390, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L390", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 100, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L100", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A12", "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R10", "area": "Execution & delivery", "feature": "Pipeline step retry/resume and GitHub checks UI", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Whole-pipeline retry now creates a new run from the original immutable definition, commit and resources, with idempotent receipt recovery. Per-step retry/resume and GitHub check controls remain separate unsupported operations.", "next_action": "Qualify whole-run retry in the live browser and make unsupported step/check operations explicit.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 409, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/resources.ts#L409", "kind": "Current pinned source / dated qualification" }, { "path": "services/control-plane/test/pipeline-retry-postgres.test.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/test/pipeline-retry-postgres.test.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "R09", "A09" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "R11", "area": "Execution & delivery", "feature": "OCI builds, verified images and remote BuildKit cache", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Cross-worker cold/warm OCI builds produced matching image digests and verified cache import. Savings were measured for one bounded fixture, not a general performance guarantee.", "next_action": "Keep trust-scoped caches, signed results and representative follow-up benchmarks.", "evidence": [ { "path": "docs/prepared-environments-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/prepared-environments-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 423, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L423", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A10", "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R12", "area": "Execution & delivery", "feature": "SBOM and provenance document downloads", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Full live browser journey not yet established", "priority": "P2", "finding": "SBOM and provenance downloads now retrieve the actual build documents, check their stored/browser digests, enforce access and retention, and preserve exact JSON bytes. Tests and deployment are present; a real browser build-to-download journey remains unqualified.", "next_action": "Download and verify both documents from a real retained build; check expired and unauthorized access.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 470, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/resources.ts#L470", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "R11" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "R13", "area": "Execution & delivery", "feature": "Registry credentials and image lifecycle", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Live registry schema, credential creation/revocation and image metadata are wired. This audit did not exercise a fresh authenticated external push/pull or outage drill.", "next_action": "Qualify scoped push/pull, revocation and registry unavailability.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 430, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L430", "kind": "pinned source or historical qualification" }, { "path": "docs/prepared-environments-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/prepared-environments-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "R11", "G01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R14", "area": "Execution & delivery", "feature": "Private previews and signed run HTTP/TCP/UDP access", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Create/stop and signed access/exposure operations are wired to deployed services. Usability depends on eligible policy, a running healthy target and the correct image/port.", "next_action": "Qualify browser access, expiry and revocation for each supported protocol.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 433, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L433", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 325, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L325", "kind": "pinned source or historical qualification" }, { "path": "services/control-plane/src/routes.ts", "line": 3073, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/services/control-plane/src/routes.ts#L3073", "kind": "pinned source or historical qualification" }, { "path": "docs/service-readiness.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/service-readiness.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "R11", "R01", "G04" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R15", "area": "Execution & delivery", "feature": "Team previews, extension, relaunch and live preview events", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "Team visibility is explicitly refused; extend and relaunch throw. The preview event stream is an idle iterator that emits no events.", "next_action": "Implement team proxy policy and lifecycle/event contracts, or remove these UI promises.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 439, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L439", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 440, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L440", "kind": "pinned source or historical qualification" } ], "depends_on": [ "R14" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "R16", "area": "Execution & delivery", "feature": "Generic integration and webhook management", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Repository-specific integration settings now expose verified identity, GitLab webhook setup/rotation, enable/disable and delivery outcomes. Generic webhooks, notification rules and generic test/connect adapters remain disabled.", "next_action": "Qualify repository-specific setup and delivery in the browser; keep generic unsupported channels clearly separate.", "evidence": [ { "path": "apps/console/src/api/live/git-integrations.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/git-integrations.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 507, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/resources.ts#L507", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "R09" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "R17", "area": "Execution & delivery", "feature": "GitLab CI project binding and triggers", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "GitLab project binding and triggers now distinguish equal project IDs on different hosts/projects, validate Tag Push Hook events and recheck authority during admission. PostgreSQL and browser component tests passed; live private-provider browser acceptance remains open.", "next_action": "Exercise private repository setup, actual push/tag delivery, rotation and revocation in the deployed flow.", "evidence": [ { "path": "apps/console/src/api/live/git-integrations.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/git-integrations.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "A07", "R09" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "W01", "area": "Workspaces & sessions", "feature": "Named workspace lifecycle", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Create/start/pause/stop/recover and real runtime state mapping are wired with deployed lifecycle and cross-worker qualification.", "next_action": "Keep uncertain transition handling and confirm saved generations before reporting success.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 310, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L310", "kind": "pinned source or historical qualification" }, { "path": "docs/session-lifecycle-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-lifecycle-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/session-failure-recovery.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-failure-recovery.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07", "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W02", "area": "Workspaces & sessions", "feature": "Encrypted checkpoints, archive and recovery", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Saved checkpoints, seven-day archive recovery and exact-version deletion have PostgreSQL/MinIO and bounded cross-worker evidence.", "next_action": "Preserve image/key recovery compatibility and shared-reference checks.", "evidence": [ { "path": "docs/workspace-archive-storage.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/workspace-archive-storage.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/end-to-end-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/end-to-end-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W03", "area": "Workspaces & sessions", "feature": "Independent data disk and runtime changes", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Published checkpoint-backed workspace data survives qualified Node/Python runtime changes and cross-worker recovery. This does not provide replicated live volumes.", "next_action": "Keep compatibility tests for each supported runtime migration.", "evidence": [ { "path": "docs/independent-workspace-disks.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/independent-workspace-disks.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 11, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L11", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W04", "area": "Workspaces & sessions", "feature": "Replicated live volumes and survival of uncheckpointed writes", "status": "notdone", "status_label": "Not implemented", "code": "Not implemented for the stated scope", "ui": "Absent", "deployment": "No completed capability to deploy", "usability": "Unavailable", "priority": "P2", "finding": "The implemented disk model recovers published checkpoints; it does not guarantee uncheckpointed-write survival under physical host/disk loss.", "next_action": "Design replicated durable storage and failure semantics before promising this guarantee.", "evidence": [ { "path": "docs/independent-workspace-disks.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/independent-workspace-disks.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 11, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L11", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W05", "area": "Workspaces & sessions", "feature": "Live revisions and incremental context", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "CLI/VS Code/API; selected console metadata", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Fenced encrypted live revisions, bounded reconciliation and context cursors are deployed and qualified for bounded fixtures, with a 4,000-file live limit.", "next_action": "Expose the bound and retain full-rescan fallback; larger-load behavior has a separate row.", "evidence": [ { "path": "docs/live-workspace-revisions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/live-workspace-revisions.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/workspace-context.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/workspace-context.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 7, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L7", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W01", "A11" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W06", "area": "Workspaces & sessions", "feature": "Prepared environments: publish, clone and revoke", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Canonical console and downloaded CLI completed real publication, independent clone and revocation; trust/resource checks and cross-worker restore were qualified.", "next_action": "Retain digest-bound recipes and visible revocation reasons.", "evidence": [ { "path": "docs/prepared-environments-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/prepared-environments-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W02", "A10" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W07", "area": "Workspaces & sessions", "feature": "Private prebuilds and large prepared-environment catalogues", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Public-source preparation works, but credential-bearing private prebuild qualification, catalogue pagination beyond 100 rows and representative large-load results remain open.", "next_action": "Qualify secret isolation and add pagination plus measured larger-repository cases.", "evidence": [ { "path": "docs/prepared-environments-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/prepared-environments-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W06", "A09" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W08", "area": "Workspaces & sessions", "feature": "Fork, three-way comparison and selective file promotion", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Saved-version comparison and keep/take file decisions have live qualification, fresh verification, concurrent-target rejection and durable retry evidence.", "next_action": "Keep target preconditions and verify the exact prepared result before publication.", "evidence": [ { "path": "docs/workspace-file-comparison-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/workspace-file-comparison-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/workspace-selective-promotion-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/workspace-selective-promotion-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W02", "A12" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W09", "area": "Workspaces & sessions", "feature": "Inline text diff, custom edits and automatic line merge", "status": "notdone", "status_label": "Not implemented", "code": "Not implemented for the stated scope", "ui": "Absent", "deployment": "No completed capability to deploy", "usability": "Unavailable", "priority": "P2", "finding": "Selective promotion chooses saved file versions; inline text diffs, custom conflict editing and automatic line merging are not delivered by that implementation.", "next_action": "Implement bounded text review and explicit merge semantics with fresh verification.", "evidence": [ { "path": "docs/eight-milestone-delivery.md", "line": 12, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L12", "kind": "pinned source or historical qualification" }, { "path": "docs/workspace-file-comparison-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/workspace-file-comparison-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/workspace-selective-promotion-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/workspace-selective-promotion-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W08" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W10", "area": "Workspaces & sessions", "feature": "Reference handoff versus cross-project workspace sharing", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Saved-generation reference handoff is implemented. Cross-project handoff and the general workspace share adapter remain unavailable.", "next_action": "Define authorization and source/secret boundaries for cross-project sharing before enabling it.", "evidence": [ { "path": "docs/eight-milestone-delivery.md", "line": 12, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L12", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 345, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L345", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W08", "G02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W11", "area": "Workspaces & sessions", "feature": "Browser workspace terminal and checkpoint terminal", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Full live browser journey not yet established", "priority": "P1", "finding": "Existing workspace terminals and the checkpoint debug UI use authenticated session-gateway admission. Checkpoint selection, resource/cost ceiling, shell and lease settings are preserved, reload reads the original receipt, and Stop cancels the debug job. Real browser attach/reconnect remains unqualified.", "next_action": "Qualify terminal input/output, reconnect, expiry, cancellation and cross-account denial in a real browser.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 384, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/resources.ts#L384", "kind": "Current pinned source / dated qualification" }, { "path": "services/control-plane/test/checkpoint-browser-postgres.test.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/test/checkpoint-browser-postgres.test.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "W01", "S01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "W12", "area": "Workspaces & sessions", "feature": "Structured commands, reconnect, cancellation and retained output", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "CLI/VS Code/API; browser terminal separately unavailable", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Async command identity, wait/cancel, reconnect and more than 512 acknowledged commands have deployed runtime qualification. Unknown effects are not blindly replayed.", "next_action": "Preserve identities and truthful unknown/gap outcomes across all clients.", "evidence": [ { "path": "docs/runtime-rotation-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-rotation-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/session-lifecycle-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-lifecycle-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/session-failure-recovery.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-failure-recovery.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W01", "A04" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W13", "area": "Workspaces & sessions", "feature": "Named service TCP/HTTP readiness", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Configured readiness probes and retained output have deployed bounded qualification; a process start alone is not treated as readiness.", "next_action": "Retain timeout and failed-readiness tests.", "evidence": [ { "path": "docs/service-readiness.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/service-readiness.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 9, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L9", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W12" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W14", "area": "Workspaces & sessions", "feature": "90-day output policy and natural production expiry", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Retention/accounting and elapsed-deadline fixture reclamation are implemented. Natural seven-day archive deadlines fall on 14–15 September; 90-day output deadlines have not elapsed on this audit date.", "next_action": "Observe scheduled expiry and GC/restore races at real deadlines; do not claim future checks as passed.", "evidence": [ { "path": "docs/session-output-expiry.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-output-expiry.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/public-onboarding-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/public-onboarding-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 27, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L27", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W02", "W12", "B08" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W15", "area": "Workspaces & sessions", "feature": "Storage inventory, retention editor and external backup bucket", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Storage inventory remains bounded and the generic storage retention/bucket adapters remain disabled. Owners can now edit project artifact retention/checkpoint policy through Settings; checkpoint retention uses observed expiry and cannot revive expired payloads.", "next_action": "Qualify the supported project/checkpoint policy editors and separate them from unsupported generic storage/bucket controls.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 240, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/resources.ts#L240", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/features/settings/pages/SettingsPage.tsx", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/features/settings/pages/SettingsPage.tsx#L1", "kind": "Current pinned source / dated qualification" }, { "path": "services/control-plane/test/checkpoint-browser-postgres.test.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/test/checkpoint-browser-postgres.test.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "W02", "R05" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "W16", "area": "Workspaces & sessions", "feature": "Bounded partition recovery without duplicate effects", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "A 20-second packet partition and abrupt VM loss during a 120-second worker API partition have live evidence of preserved command identities and settled/released reservations.", "next_action": "Keep these qualified failure cases; broader gateway/scheduler restart combinations, physical and correlated loss require separate qualification.", "evidence": [ { "path": "docs/session-failure-recovery.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-failure-recovery.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/runtime-rotation-qualification-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-rotation-qualification-2026-09-07.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W12", "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "W17", "area": "Workspaces & sessions", "feature": "Physical host/disk loss, multi-day soak and tenant fairness", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired or API/client path", "deployment": "Deployed", "usability": "Not established end to end for the stated scope", "priority": "P1", "finding": "Existing bounded recovery tests do not establish physical disk/host-loss recovery, correlated failure, multi-day session survival or sustained fairness/latency SLOs.", "next_action": "Run isolated physical-failure and sustained multi-tenant campaigns with p50/p95/p99 and resource-growth evidence.", "evidence": [ { "path": "docs/eight-milestone-delivery.md", "line": 24, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L24", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/session-failure-recovery.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/session-failure-recovery.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W16", "O01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S01", "area": "Agents", "feature": "Agent API discovery and structured SDK lifecycle", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "API, CLI and SDKs", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Published OpenAPI has 190 operations at this snapshot; source contracts, generated JavaScript/Python clients and independent structured lifecycle examples exist. Interactive identity/payment operations are intentionally excluded.", "next_action": "Validate generated contracts against the running API and keep structured error/recovery examples.", "evidence": [ { "path": "packages/contracts/openapi/agent-core-v1.json", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/packages/contracts/openapi/agent-core-v1.json#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-sdk.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sdk.md#L1", "kind": "pinned source or historical qualification" }, { "path": "public-checks.json", "line": null, "url": "public-checks.json", "kind": "fresh observation" } ], "depends_on": [ "A04" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S02", "area": "Agents", "feature": "Personal BYOK provider settings", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "OpenAI, Claude, Gemini and custom-compatible configuration is user/account-scoped with write-only Vault credentials and pinned endpoint checks. Saving configuration intentionally makes no paid validation call.", "next_action": "Retain owner isolation and removal fencing; actual provider credentials require user-specific qualification.", "evidence": [ { "path": "docs/agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sessions.md#L1", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/ai-providers.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/ai-providers.ts#L1", "kind": "pinned source or historical qualification" }, { "path": "feature-flags.json", "line": null, "url": "feature-flags.json", "kind": "fresh observation" } ], "depends_on": [ "A01", "B03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S03", "area": "Agents", "feature": "Native agent edit, approvals, tests and source download", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Eligible accounts with verified source, provider configuration and a full-suite task", "priority": "P3", "finding": "Native sessions pin source/provider/model, perform reviewed edits and verification, and save a report and downloadable archive. Fixtures cover approvals, budgets, cleanup and settlement.", "next_action": "Keep source/task prerequisites visible; this scope excludes autonomous Git push and production Codex runner admission.", "evidence": [ { "path": "docs/agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sessions.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-suggestion-answer-fix-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-suggestion-answer-fix-2026-09-11.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A11", "A12", "S02", "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S04", "area": "Agents", "feature": "Useful source-backed suggestion answer on a real account", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired or API/client path", "deployment": "Deployed", "usability": "Not established end to end for the stated scope", "priority": "P1", "finding": "The first real ChatGPT request returned an inadequate answer without admitted source. The fix is deployed on both schedulers and console; the corrected useful real-provider workflow was not rerun in the recorded release.", "next_action": "Publish verified source and qualify one authorized real-account suggestion, including rendered answer and usage.", "evidence": [ { "path": "docs/agent-suggestion-answer-fix-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-suggestion-answer-fix-2026-09-11.md#L1", "kind": "pinned source or historical qualification" }, { "path": "deployment-snapshot.json", "line": null, "url": "deployment-snapshot.json", "kind": "fresh observation" } ], "depends_on": [ "A11", "S06" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S05", "area": "Agents", "feature": "Model quotas and hard in-flight token/cost ceilings", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Budgets and usage are enforced at iteration/request boundaries with unknown-result fencing. They are not a hard cap on provider consumption inside an already running request; provider invoice reconciliation remains unqualified.", "next_action": "Present the boundary clearly and qualify provider errors, throttling, refresh and invoice reconciliation.", "evidence": [ { "path": "docs/agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sessions.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-chatgpt-connection-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-chatgpt-connection-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "S02", "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S06", "area": "Agents", "feature": "Personal ChatGPT connection and account-backed native execution", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Connections and account runs are enabled with dedicated isolated workers. A real account request is documented, but useful corrected source analysis, refresh/rate limits and multi-day qualification remain open. This is the native executor using the account connection.", "next_action": "Finish the source-backed real-account journey and account lifecycle/failure qualification.", "evidence": [ { "path": "docs/agent-chatgpt-connection-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-chatgpt-connection-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-suggestion-answer-fix-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-suggestion-answer-fix-2026-09-11.md#L1", "kind": "pinned source or historical qualification" }, { "path": "feature-flags.json", "line": null, "url": "feature-flags.json", "kind": "fresh observation" }, { "path": "apps/console/src/api/live/agent-connections.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/agent-connections.ts#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A01", "B01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S07", "area": "Agents", "feature": "Durable multi-turn agent and workspace admission", "status": "blocked", "status_label": "Deployed; disabled or blocked", "code": "Implemented with remaining release work", "ui": "Present or partially wired", "deployment": "Deployed supporting components", "usability": "Unavailable through production admission", "priority": "P1", "finding": "Durable session, interaction and private-workspace components are deployed, but effective durable admission remains disabled. Native single-task execution is separately enabled. Production controller integration and broader durable failure/recovery acceptance remain open.", "next_action": "Complete the production durable controller and qualify admission, approvals, cancellation, recovery and usage before enabling.", "evidence": [ { "path": "feature-flags.json", "line": null, "url": "feature-flags.json", "kind": "Dated sanitized observation / qualification" }, { "path": "docs/durable-agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/durable-agent-sessions.md#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "S03", "W01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "S08", "area": "Agents", "feature": "Full production Codex runner with authenticated tools", "status": "blocked", "status_label": "Deployed; disabled or blocked", "code": "Adapter/guest/bridge implemented; production controller integration incomplete", "ui": "Present or partially wired", "deployment": "Deployed supporting components", "usability": "Unavailable through production admission", "priority": "P1", "finding": "The standalone Codex adapter, guest, journal and approval/command bridge have local qualification. The full production runner controller is not completed or selectable; an enabled personal ChatGPT connection does not establish full Codex workspace execution.", "next_action": "Finish physical workspace/worker controller integration and authenticated tool turns, then qualify reviewed effects, cancellation, recovery and limits.", "evidence": [ { "path": "docs/durable-agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/durable-agent-sessions.md#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "S07", "W12", "G03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "S09", "area": "Agents", "feature": "Exact-payload effect approval and denial", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Real approvals bind the currently proposed payload digest and session authority, reject stale decisions and preserve cancellation fences. Approval inbox actions are wired.", "next_action": "Keep approval rechecks at dispatch and do not equate opening a review page with granting approval.", "evidence": [ { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 296, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/ai-sessions.ts#L296", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sessions.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "S03", "G02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S10", "area": "Agents", "feature": "Pause/resume/stop, guidance and saved activity history", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Native controls and interaction messages are wired; bounded replay, snapshots, decimal cursors and refresh behavior are qualified. This does not override disabled durable admission.", "next_action": "Retain fresh-history and lost-response recovery checks across console/CLI.", "evidence": [ { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 281, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/ai-sessions.ts#L281", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-supervision-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-supervision-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-suggestion-answer-fix-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-suggestion-answer-fix-2026-09-11.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "S03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S11", "area": "Agents", "feature": "Legacy plan approval, per-file decisions and playbooks UI", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "Legacy approvePlan/rejectPlan/decideFile adapters throw and playbooks returns an empty list. Actual exact-action approval is implemented separately and must not be classified as missing.", "next_action": "Remove superseded seams or implement the intended plan/file/playbook workflows consistently.", "evidence": [ { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 279, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/ai-sessions.ts#L279", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 287, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/ai-sessions.ts#L287", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 291, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/ai-sessions.ts#L291", "kind": "pinned source or historical qualification" } ], "depends_on": [ "S09" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S12", "area": "Agents", "feature": "Agent approve-and-push, take-over and report archive actions", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Reviewed Git publication and session archive now have working server/client paths. Publication pins reviewed files/base commit and reconciles an uncertain provider response without another write; archive fences outstanding publication. A synthetic live GitLab provider test passed and cleaned up its branch. Full browser-to-provider acceptance and the separate take-over workflow remain open.", "next_action": "Qualify browser review → approval → Git branch, recovery and archive with a disposable repository; separately resolve take-over behavior.", "evidence": [ { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 303, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/ai-sessions.ts#L303", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 295, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/ai-sessions.ts#L295", "kind": "Current pinned source / dated qualification" }, { "path": "services/control-plane/src/ai/git-publication.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/src/ai/git-publication.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "qualification/git-publication-2026-09-11.json", "line": null, "url": "qualification/git-publication-2026-09-11.json", "kind": "Dated sanitized observation / qualification" } ], "depends_on": [ "S03", "W08" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "S13", "area": "Agents", "feature": "Agent private workspace writer handoff and promotion", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Private saved-workspace integration and handoff tests exist, but general admission is gated and broader writable/failure/return-handoff qualification remains limited.", "next_action": "Finish owner handoff, reclaim after human changes and live writable-effect qualification before general availability.", "evidence": [ { "path": "docs/agent-workspace-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-workspace-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "S07", "W08" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S14", "area": "Agents", "feature": "Durable in-app agent inbox", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Persisted inbox/read state and review links have live read qualification and shared console/CLI client handling. Availability does not itself grant durable execution admission.", "next_action": "Keep notification counts, links and pagination aligned with durable records.", "evidence": [ { "path": "apps/console/src/api/live/agent-notifications.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/agent-notifications.ts#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-workspace-qualification-2026-09-09.md", "line": 71, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-workspace-qualification-2026-09-09.md#L71", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-supervision-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-supervision-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "S03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S15", "area": "Agents", "feature": "Email agent completion and approval notifications", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Full live browser journey not yet established", "priority": "P1", "finding": "Resend delivery is now enabled and a real test was received. Agent/run notifications use durable outbox records, stable send identity, access rechecks and read/opt-out suppression. Real completion/approval notification delivery was not exercised by the generic test or sign-in request.", "next_action": "Qualify an opted-in completion and approval message, link access, retries, opt-out and read suppression.", "evidence": [ { "path": "qualification/email-delivery-2026-09-11.json", "line": null, "url": "qualification/email-delivery-2026-09-11.json", "kind": "Dated sanitized observation / qualification" }, { "path": "services/control-plane/src/lib/email.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/src/lib/email.ts#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "S14", "G12" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "S16", "area": "Agents", "feature": "External agent connection tokens and rotation wizard", "status": "ui", "status_label": "Implemented; UI gap", "code": "Implemented backend/client path", "ui": "Missing or disabled live UI path", "deployment": "Backend deployed", "usability": "Use the stated API/CLI alternative", "priority": "P1", "finding": "The agent registry can list/revoke agents, but connectInfo/connect/rotateToken methods are disabled. Scoped API keys are the supported alternative.", "next_action": "Point the wizard to scoped API-key creation/revocation or implement dedicated managed credentials.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 448, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L448", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 410, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L410", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A04" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "S17", "area": "Agents", "feature": "Downloaded CLI and VS Code extension distribution", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Published command-line and extension artifacts", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Public CLI/extension distribution remains available with versioned download metadata and dated checksum/acceptance evidence. The refreshed public observation records the current manifest; distribution does not certify every physical client workflow.", "next_action": "Keep artifact/source checksums current and run the separate real-client acceptance journey.", "evidence": [ { "path": "public-checks.json", "line": null, "url": "public-checks.json", "kind": "Dated sanitized observation / qualification" }, { "path": "docs/agent-chatgpt-connection-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/agent-chatgpt-connection-release-2026-09-10.md#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/agent-supervision-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/agent-supervision-qualification-2026-09-09.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "S01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "S18", "area": "Agents", "feature": "Fresh physical-device and VS Code extension-host acceptance", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired or API/client path", "deployment": "Deployed", "usability": "Not established end to end for the stated scope", "priority": "P2", "finding": "Browser/client fixtures and downloads are qualified, but real device and extension-host login/recovery acceptance remains a stated release limitation.", "next_action": "Run the full install, login, attach, reconnect and approval journey in actual supported clients.", "evidence": [ { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-supervision-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-supervision-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "S17", "A03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "T01", "area": "Test intelligence", "feature": "Source-bound advisory impact and archive explanations", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "API/CLI/SDK; not a complete console analysis workbench", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Verified archives, static JS/TS dependencies and runtime evidence produce bounded candidate explanations with explicit full-suite-required semantics. API/CLI/SDK agreement has live evidence.", "next_action": "Keep source identity, deletion lineage and uncovered-input reasons visible.", "evidence": [ { "path": "docs/archive-backed-test-impact-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/archive-backed-test-impact-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/runtime-test-impact.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-test-impact.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/source-inputs-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/source-inputs-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A11" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "T02", "area": "Test intelligence", "feature": "Smart Run source/runtime admission binding", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Admission pins approved source, declared inputs and runtime identities; mismatches/retries and settlement were exercised across workers.", "next_action": "Continue negative binding checks and retain full-suite fallback.", "evidence": [ { "path": "docs/smart-run-admission-binding-qualification-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/smart-run-admission-binding-qualification-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "T01", "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "T03", "area": "Test intelligence", "feature": "Signed isolated Node test-file results", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Enforced Node file-process execution and signed pass/fail results have cross-worker evidence. Reported Node test cases retain explicit trust limits.", "next_action": "Keep process-level attestation distinct from trusted individual test-case attribution.", "evidence": [ { "path": "docs/trusted-test-file-results-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/trusted-test-file-results-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/test-impact-corpus-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/test-impact-corpus-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "T02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "T04", "area": "Test intelligence", "feature": "Runtime input attribution and directory/hidden-input coverage", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Completed isolated Node results contribute signed observation-window file edges. Inotify does not identify the reader; directory membership/absence and hidden inputs are not completely observed.", "next_action": "Implement stronger input observation and broaden correctness fixtures before making sound selection claims.", "evidence": [ { "path": "docs/runtime-test-impact.md", "line": 3, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-test-impact.md#L3", "kind": "pinned source or historical qualification" }, { "path": "docs/runtime-test-impact.md", "line": 7, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-test-impact.md#L7", "kind": "pinned source or historical qualification" }, { "path": "docs/runtime-test-impact.md", "line": 9, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-test-impact.md#L9", "kind": "pinned source or historical qualification" }, { "path": "source-comparison.json", "line": null, "url": "source-comparison.json", "kind": "fresh observation" } ], "depends_on": [ "T03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "T05", "area": "Test intelligence", "feature": "Verified test selection and reusable verdicts", "status": "notdone", "status_label": "Not implemented", "code": "Not implemented for the stated scope", "ui": "Absent", "deployment": "No completed capability to deploy", "usability": "Unavailable", "priority": "P1", "finding": "Automatic selection and result reuse remain disabled by design. Advisory candidates and a 25-mutation corpus do not establish safe skipping of the full suite.", "next_action": "Prove complete immutable input/coverage rules and invalidation before enabling selection or reuse.", "evidence": [ { "path": "docs/runtime-test-impact.md", "line": 17, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/runtime-test-impact.md#L17", "kind": "pinned source or historical qualification" }, { "path": "docs/test-impact-corpus-qualification-2026-09-09.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/test-impact-corpus-qualification-2026-09-09.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 13, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L13", "kind": "pinned source or historical qualification" } ], "depends_on": [ "T04" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "T06", "area": "Test intelligence", "feature": "Reuse button and reusable-result revocation UI", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "runs.useResult and storage.revokeReuse are disabled, while reuse-related design interfaces exist. There is no usable verified reuse path behind them.", "next_action": "Hide unsupported actions until T05 is safely implemented.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 316, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L316", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 461, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L461", "kind": "pinned source or historical qualification" } ], "depends_on": [ "T05" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "T07", "area": "Test intelligence", "feature": "Investigations, insights, test quarantine and feedback", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Investigation APIs are partially wired, but feedback and quarantine are disabled; entitlement flags and simplified estimates do not prove complete diagnostic behavior.", "next_action": "Qualify the actual investigation/bisect flow and remove unsupported quarantine/feedback controls.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 365, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L365", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 377, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L377", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 282, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L282", "kind": "pinned source or historical qualification" } ], "depends_on": [ "T01", "R05" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G01", "area": "Governance & trust", "feature": "Write-only project secrets and provider secret isolation", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Project secret create/delete and delivery are implemented and qualified. Reveal is intentionally unavailable; replacement by the same name is the supported rotation path.", "next_action": "Preserve write-only storage; make the replacement workflow clear rather than adding reveal.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 459, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L459", "kind": "pinned source or historical qualification" }, { "path": "docs/end-to-end-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/end-to-end-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sessions.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A07" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G02", "area": "Governance & trust", "feature": "RBAC, capability scopes and billing-only access", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Scoped authorization and billing-role isolation are implemented with negative tests. The whole-platform consistency/tenant-fairness assurance milestone remains broader than those tests.", "next_action": "Complete a cross-entrypoint human/agent/CI permission and revocation matrix.", "evidence": [ { "path": "docs/billing-isolation-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-isolation-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "packages/contracts/openapi/agent-core-v1.json", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/packages/contracts/openapi/agent-core-v1.json#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 14, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L14", "kind": "pinned source or historical qualification" } ], "depends_on": [ "A04", "A05", "B03" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G03", "area": "Governance & trust", "feature": "Runtime-enforced read-only command profile", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Namespace/Landlock enforcement makes source/runtime read-only, removes external network and confines temporary files; unsupported kernels fail closed. Deployed guest support supersedes older pending notes.", "next_action": "Retain synchronous/async escape and writable-command regressions.", "evidence": [ { "path": "docs/agent-sessions.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-sessions.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/agent-runner-supervisor-release-2026-09-10.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/agent-runner-supervisor-release-2026-09-10.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "W12" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G04", "area": "Governance & trust", "feature": "General egress and unified policy enforcement", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "The Resend incident exposed missing Cilium DNS observation for FQDN allowlists. The deployed DNS policy now makes the existing Resend/GitHub/OAuth destination rules effective, and repository checks cover every Snabb FQDN rule. General cross-entrypoint egress/revocation assurance remains broader than this fix.", "next_action": "Retain DNS policy regression checks and qualify redirect/revocation behavior across execution paths.", "evidence": [ { "path": "qualification/email-delivery-2026-09-11.json", "line": null, "url": "qualification/email-delivery-2026-09-11.json", "kind": "Dated sanitized observation / qualification" }, { "path": "deploy/snabb/manifests/10-guardrails.yaml", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/deploy/snabb/manifests/10-guardrails.yaml#L1", "kind": "Current pinned source / dated qualification" }, { "path": "scripts/test_snabb_network_policies.py", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/scripts/test_snabb_network_policies.py#L1", "kind": "Current pinned source / dated qualification" }, { "path": "docs/service-route-ownership.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/service-route-ownership.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "G02", "R01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "G05", "area": "Governance & trust", "feature": "Policy profile editor and exception requests", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "Session time limits can persist, but editProfile and requestException are disabled. The live feature map advertises several capabilities statically.", "next_action": "Drive controls from actual capability discovery and wire reviewed profile/exception contracts.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 453, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L453", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/ai-sessions.ts", "line": 309, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/ai-sessions.ts#L309", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 282, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L282", "kind": "pinned source or historical qualification" } ], "depends_on": [ "G02", "S09" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G06", "area": "Governance & trust", "feature": "Audit chaining, WORM export and permanent-gap disclosure", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "Export isolation and acknowledged-gap continuation are implemented. One historical chain gap remains permanently invalid; later valid exports do not repair full-chain integrity.", "next_action": "Keep permanent-gap disclosure and monitoring; never describe the affected chain as fully verified.", "evidence": [ { "path": "docs/audit-permanent-gap-reconciliation.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/audit-permanent-gap-reconciliation.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/audit-export-isolation-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/audit-export-isolation-2026-09-07.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "G02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G07", "area": "Governance & trust", "feature": "Console audit history, saved filters, live tail and export semantics", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "Console auditRows aggregates up to 50 sessions of events. saveFilter only returns an object, savedFilters is empty and tail emits nothing; stats are not a complete daily audit aggregate.", "next_action": "Connect the canonical audit ledger with server pagination, persisted filters and real streaming; label limited exports.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 455, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L455", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 456, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L456", "kind": "pinned source or historical qualification" } ], "depends_on": [ "G06" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G08", "area": "Governance & trust", "feature": "Service status, capacity, uptime and incidents display", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P2", "finding": "The hardcoded Operational/100% uptime display is replaced by current worker state, observed region/capacity and explicit unknown 30-day uptime. This is a worker availability snapshot; retained incident history and live status subscriptions are not implemented.", "next_action": "Verify degraded/unavailable worker rendering and add uptime/incident history only from retained measurements.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 447, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/client.ts#L447", "kind": "Current pinned source / dated qualification" }, { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "O01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "G09", "area": "Governance & trust", "feature": "Custom alerts, delivery tests and notification rules", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "Budget alert history/acknowledgement works. Custom create/toggle/test-fire and notification-rule adapters are disabled; the feature map already sets some flags false.", "next_action": "Separate usable budget alerts from unavailable custom alert channels.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 444, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L444", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/resources.ts", "line": 462, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L462", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 282, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L282", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G10", "area": "Governance & trust", "feature": "Trust portal DPA, reports and account-wide export", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "Trust content is largely static; DPA download, exportAll and report requests throw. No certification or complete compliance evidence is established by that page.", "next_action": "Publish only supported evidence and implement document/export workflows with an actual owner.", "evidence": [ { "path": "apps/console/src/api/live/client.ts", "line": 418, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L418", "kind": "pinned source or historical qualification" } ], "depends_on": [ "G06" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G11", "area": "Governance & trust", "feature": "Support tickets and documentation feedback", "status": "stub", "status_label": "UI or adapter stub", "code": "Operational path missing at this seam", "ui": "Screen/adapter exists", "deployment": "Stub deployed", "usability": "This operation does not work through the live adapter", "priority": "P2", "finding": "Support ticket list is always empty and creation is disabled. Documentation helpful feedback also throws; local documentation content/search still works.", "next_action": "Connect a support backend or provide an explicit supported contact route; remove dead feedback controls.", "evidence": [ { "path": "apps/console/src/api/live/resources.ts", "line": 463, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/resources.ts#L463", "kind": "pinned source or historical qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 450, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/apps/console/src/api/live/client.ts#L450", "kind": "pinned source or historical qualification" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "G12", "area": "Governance & trust", "feature": "Admin Resend configuration and test delivery", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P2", "finding": "The complete Settings page now binds after insertion. The saved key is write-only in Vault, sender changes require a fresh test, provider failures are safe and specific, uncertain retries survive reload, and a successful new test gets a new identity. Delivery was confirmed by the authorized recipient and enabled with an audit record.", "next_action": "Monitor provider failures and qualify actual opted-in workflow notifications separately.", "evidence": [ { "path": "qualification/email-delivery-2026-09-11.json", "line": null, "url": "qualification/email-delivery-2026-09-11.json", "kind": "Dated sanitized observation / qualification" }, { "path": "apps/admin/public/email-settings.js", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/admin/public/email-settings.js#L1", "kind": "Current pinned source / dated qualification" }, { "path": "services/control-plane/src/admin-email-routes.ts", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/services/control-plane/src/admin-email-routes.ts#L1", "kind": "Current pinned source / dated qualification" } ], "depends_on": [ "A17", "G01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "O01", "area": "Operations", "feature": "Current application deployment readiness", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Operator tooling/monitoring", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "The fresh snapshot records 20 application deployments and MinIO at requested readiness. Public readiness endpoints are recorded separately. This is point-in-time health, not uptime or complete workflow qualification.", "next_action": "Keep readiness monitoring and distinguish service health from user-flow acceptance.", "evidence": [ { "path": "deployment-snapshot.json", "line": null, "url": "deployment-snapshot.json", "kind": "Dated sanitized observation / qualification" }, { "path": "public-checks.json", "line": null, "url": "public-checks.json", "kind": "Dated sanitized observation / qualification" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" }, { "id": "O02", "area": "Operations", "feature": "Billing database and command-credential isolation", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Operator configuration", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Billing uses a designated writer, separate read-only identities and scoped command authentication; migrations/negative permission checks and rollout invariants are documented.", "next_action": "Preserve least privilege and per-domain command scopes during migrations.", "evidence": [ { "path": "docs/billing-isolation-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-isolation-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-followups-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-followups-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "B02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "O03", "area": "Operations", "feature": "Complete domain database ownership and distributed transactions", "status": "notdone", "status_label": "Not implemented", "code": "Not implemented for the stated scope", "ui": "Absent", "deployment": "No completed capability to deploy", "usability": "Unavailable", "priority": "P1", "finding": "Shared routing ownership is generated consistently, but extracted control-plane services still use shared models and cross-domain writes. Billing isolation does not complete this architecture.", "next_action": "Assign one writer per aggregate, then add outbox/idempotent command and reconciliation boundaries before removing shared writes.", "evidence": [ { "path": "docs/service-route-ownership.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/service-route-ownership.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "O02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "O04", "area": "Operations", "feature": "Database backup and isolated restore drills", "status": "done", "status_label": "Fully done within stated scope", "code": "Implemented", "ui": "Operator tooling", "deployment": "Deployed", "usability": "Usable within the stated prerequisites", "priority": "P3", "finding": "Encrypted backup checksums and actual isolated control/auth/billing restores have release evidence, including post-company-schema restore. This is not a live failover guarantee.", "next_action": "Retain scheduled restore verification and key compatibility.", "evidence": [ { "path": "docs/billing-company-accounts.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-company-accounts.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/end-to-end-2026-09-07.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/end-to-end-2026-09-07.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/billing-followups-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-followups-2026-09-08.md#L1", "kind": "pinned source or historical qualification" } ], "depends_on": [ "O02" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "O05", "area": "Operations", "feature": "Database failover and sustained capacity qualification", "status": "unverified", "status_label": "Implemented; qualification incomplete", "code": "Implemented", "ui": "Wired or API/client path", "deployment": "Deployed", "usability": "Not established end to end for the stated scope", "priority": "P1", "finding": "Bounded HTTP/load and restore tests exist, but database failover, sustained multi-tenant saturation, distributed customer rate limits and recovery percentiles remain open.", "next_action": "Run representative load/failover tests and document capacity limits, queue fairness and recovery SLOs.", "evidence": [ { "path": "docs/billing-followups-2026-09-08.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/billing-followups-2026-09-08.md#L1", "kind": "pinned source or historical qualification" }, { "path": "docs/eight-milestone-delivery.md", "line": 24, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/7ff34500e37ef15a5f5c5b85f4a791a60f29788d/docs/eight-milestone-delivery.md#L24", "kind": "pinned source or historical qualification" } ], "depends_on": [ "O04", "O01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "evidenceReview": "Earlier pinned evidence retained; no new completion claim in this refresh" }, { "id": "O06", "area": "Operations", "feature": "Latest pipeline and fixed-revision release qualification", "status": "done", "status_label": "Fully done", "code": "Implemented", "ui": "Wired", "deployment": "Deployed", "usability": "Usable", "priority": "P1", "finding": "Pipeline 5394 passed all 30 jobs at d8c9f75, including runtime build, worker/runtime promotion, application deployment and both live canaries. All 20 application deployments are ready at this same revision. New local P1 fixes require their own qualified release.", "next_action": "Keep subsequent application changes pinned and pass the same release gates before claiming them deployed.", "evidence": [ { "path": "pipeline-snapshot.json", "line": null, "url": "pipeline-snapshot.json", "kind": "Dated sanitized observation / qualification" }, { "path": "qualification/password-auth-2026-09-11.json", "line": null, "url": "qualification/password-auth-2026-09-11.json", "kind": "Dated sanitized observation / qualification" }, { "path": "qualification/email-delivery-2026-09-11.json", "line": null, "url": "qualification/email-delivery-2026-09-11.json", "kind": "Dated sanitized observation / qualification" }, { "path": "qualification/fixed-release-2026-09-11.json", "line": null, "url": "qualification/fixed-release-2026-09-11.json", "kind": "Dated sanitized observation / qualification" } ], "depends_on": [ "O01" ], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T17:07:56.845313+00:00", "evidenceReview": "Fresh fixed-revision application rollout and live canary qualification" }, { "id": "O07", "area": "Operations", "feature": "Main/deployed source reconciliation and remaining branch", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P3", "finding": "All 20 application deployments now run the fully qualified d8c9f75 revision. Main f5b0708 adds documentation only. Independent feature branch review and the remaining P1 work continue; the progress branch is intentionally separate.", "next_action": "Keep subsequent P1 implementation and branch review reconciled to a fixed application revision.", "evidence": [ { "path": "source-comparison.json", "line": null, "url": "source-comparison.json", "kind": "Dated sanitized observation / qualification" }, { "path": "deployment-snapshot.json", "line": null, "url": "deployment-snapshot.json", "kind": "Dated sanitized observation / qualification" }, { "path": "audit-end-check.json", "line": null, "url": "audit-end-check.json", "kind": "Dated sanitized observation / qualification" }, { "path": "qualification/fixed-release-2026-09-11.json", "line": null, "url": "qualification/fixed-release-2026-09-11.json", "kind": "Dated sanitized observation / qualification" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T17:07:56.845313+00:00", "evidenceReview": "Fresh fixed-revision application rollout and live canary qualification" }, { "id": "O08", "area": "Operations", "feature": "Accurate product capability and release documentation", "status": "partial", "status_label": "Partially done", "code": "Implemented with gaps", "ui": "Wired with limitations", "deployment": "Deployed", "usability": "Usable with limitations", "priority": "P1", "finding": "The audit now incorporates password and Resend qualification, deployed upload/run/action wiring and current pipeline state. It retains distinct code/UI/deployment/usability/evidence dimensions. Some legacy feature flags, overview values, disabled adapters and old implementation-ledger checkpoints still need reconciliation.", "next_action": "Use this matrix as a dated inventory; update rows only with current source and qualification evidence.", "evidence": [ { "path": "docs/user-agent-flow-completion-2026-09-11.md", "line": 1, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/docs/user-agent-flow-completion-2026-09-11.md#L1", "kind": "Current pinned source / dated qualification" }, { "path": "apps/console/src/api/live/client.ts", "line": 288, "url": "https://gitlabb.blazingfast.io/platform/snabb/-/blob/f5b07085937319e91c6b83c289bbe933801f3760/apps/console/src/api/live/client.ts#L288", "kind": "Current pinned source / dated qualification" }, { "path": "source-comparison.json", "line": null, "url": "source-comparison.json", "kind": "Dated sanitized observation / qualification" } ], "depends_on": [], "confidence": "High for the described code/configuration; qualification limited to cited evidence", "reviewedAt": "2026-09-11T16:32:11.295690+00:00", "evidenceReview": "Updated after the deployed user-flow and email releases" } ], "flows": [ { "id": "start", "title": "User: sign in → first useful run", "ids": [ "A01", "A17", "A02", "A03", "B01", "B03", "A07", "A09", "A10", "A11", "A12", "R01", "R05", "B02", "G12" ], "description": "Password authentication has real browser qualification. Email delivery and sign-in request work; link consumption, registration, private permissions and source-upload-to-first-run still need full live acceptance.", "edges": [ [ "A01", "B01", "SSO option" ], [ "A03", "B01", "passkey option" ], [ "B01", "B03", "optional company payer" ], [ "B01", "A07", "personal payer" ], [ "B03", "A07", "new company project" ], [ "A07", "A09", "repository source option" ], [ "A07", "A10", "archive source option" ], [ "A10", "A11", "verify and publish" ], [ "A11", "A12", "bind task" ], [ "A09", "A12", "repository task" ], [ "A12", "R01", "admit run" ], [ "R01", "R05", "inspect output" ], [ "R01", "B02", "settle usage" ], [ "A17", "A07", "qualified password identity alternative" ], [ "A17", "G12", "administrator configures sender" ], [ "G12", "A02", "Resend enabled" ], [ "A02", "B01", "email: link consumption pending" ] ] }, { "id": "agent", "title": "User + native agent: source → provider → reviewed result", "ids": [ "A01", "B01", "A10", "A11", "A12", "S02", "S06", "S03", "S04", "S09", "S10", "R01", "R05", "S12", "W08", "S14", "S15" ], "description": "Native BYOK/account paths are enabled. Reviewed publication/archive are implemented but need full browser acceptance. Durable admission and full production Codex remain gated, independently of model-account connection.", "edges": [ [ "A01", "B01", "eligible account" ], [ "B01", "S02", "BYOK option" ], [ "B01", "S06", "ChatGPT option" ], [ "B01", "A10", "project source" ], [ "A10", "A11", "publish verified source" ], [ "A11", "S03", "pin source" ], [ "A12", "S03", "full-suite verification task" ], [ "S02", "S03", "provider/model" ], [ "S06", "S03", "account-backed model" ], [ "S03", "S09", "request effect approval" ], [ "S09", "R01", "approved tests" ], [ "R01", "R05", "signed output" ], [ "S03", "S10", "supervise" ], [ "S03", "S04", "suggestion mode" ], [ "R05", "W08", "review/promote saved result" ], [ "R05", "S12", "Git push/archive: unavailable" ], [ "S03", "S14", "durable inbox" ], [ "S14", "S15", "Resend: notification flow pending" ] ] }, { "id": "durable", "title": "Agent: durable workspace and full Codex runner", "ids": [ "S02", "S06", "W01", "W05", "S07", "S08", "S09", "W12", "G03", "S13", "W08", "S14", "W17" ], "description": "This is a separate gated path. Deployed supervisor/guest code and ChatGPT login support do not enable durable admission or the full authenticated Codex runner. Dashed dependencies show the intended path across blockers.", "edges": [ [ "W01", "S07", "workspace" ], [ "W05", "S07", "context" ], [ "S02", "S07", "personal provider" ], [ "S06", "S07", "account option" ], [ "S07", "S08", "durable admission OFF" ], [ "S08", "S09", "review effects" ], [ "S09", "W12", "dispatch command" ], [ "G03", "W12", "read-only boundary" ], [ "W12", "S13", "save/handoff" ], [ "S13", "W08", "promote reviewed result" ], [ "S07", "S14", "supervision inbox" ], [ "S13", "W17", "physical-loss qualification" ] ] }, { "id": "workspace", "title": "User / agent: prepare → fork → verify → promote → recover", "ids": [ "A10", "A12", "W01", "W02", "W03", "W05", "W06", "W07", "W08", "W09", "W10", "W11", "W12", "W13", "W14", "W04" ], "description": "Saved-generation prepare/clone/recovery/promotion have bounded qualification. Browser checkpoint/terminal wiring is deployed; real attach/reconnect acceptance, cross-project sharing, line merge and replicated live-write durability remain separate gaps.", "edges": [ [ "A10", "W01", "admitted source" ], [ "W01", "W12", "CLI/VS Code commands" ], [ "W01", "W11", "browser terminal: qualify live" ], [ "W12", "W13", "service readiness" ], [ "W01", "W05", "live context" ], [ "W01", "W02", "save generation" ], [ "W02", "W03", "runtime change" ], [ "W02", "W06", "publish prepared" ], [ "W06", "W07", "private/large follow-up" ], [ "W06", "W08", "fork result" ], [ "A12", "W08", "fresh verification" ], [ "W08", "W09", "text merge not delivered" ], [ "W08", "W10", "reference handoff" ], [ "W02", "W14", "retention and GC" ], [ "W03", "W04", "replication not delivered" ] ] }, { "id": "delivery", "title": "User / CI: pipeline → build → registry → preview", "ids": [ "A09", "A12", "R17", "R09", "R10", "R01", "R11", "R12", "R13", "R14", "R15", "R16", "R05", "B02" ], "description": "Whole-pipeline retry, supply-chain document downloads and repository integration controls are implemented and deployed. Complete browser/provider journeys, step-level retry/checks and generic preview/webhook controls remain open.", "edges": [ [ "A09", "R17", "provider binding" ], [ "R17", "R09", "GitLab trigger" ], [ "A12", "R09", "saved tasks" ], [ "R09", "R01", "dispatch" ], [ "R09", "R10", "whole-run retry; step/check gap" ], [ "R09", "R16", "generic webhook gap" ], [ "R01", "R11", "OCI build" ], [ "R11", "R12", "verified document downloads" ], [ "R11", "R13", "publish image" ], [ "R13", "R14", "private preview" ], [ "R14", "R15", "team/extend/relaunch gaps" ], [ "R01", "R05", "results" ], [ "R01", "B02", "execution settlement" ], [ "R14", "B02", "preview settlement" ] ] }, { "id": "impact", "title": "Agent / CI: source evidence → advisory impact → full verification", "ids": [ "A10", "A11", "T01", "T02", "T03", "T04", "T05", "T06", "R01", "R05", "T07" ], "description": "Candidate analysis is useful advisory evidence. Its file observations and bounded corpus do not justify skipping the full suite or claiming reusable verified verdicts.", "edges": [ [ "A10", "A11", "archive/index binding" ], [ "A11", "T01", "analyze changes" ], [ "T01", "T02", "pin plan inputs" ], [ "T02", "R01", "full-suite required" ], [ "R01", "T03", "isolated file result" ], [ "T03", "T04", "runtime observations" ], [ "T04", "T05", "soundness gaps block selection" ], [ "T05", "T06", "reuse UI unavailable" ], [ "R01", "R05", "verify result" ], [ "T01", "T07", "investigate candidates" ] ] }, { "id": "company", "title": "Company user + admin: payer → agreement → usage → finance", "ids": [ "A01", "B01", "B03", "B04", "A05", "A07", "B02", "B05", "B06", "B07", "B08", "B09", "B10", "G02", "O02" ], "description": "Company billing roles grant financial access, not project execution. Approved beta agreements are metadata/entitlements on existing plans. Card payments and customer storage charging are disabled; manual funding is supported.", "edges": [ [ "A01", "B03", "owner creates company" ], [ "B01", "B03", "beta catalogue" ], [ "B03", "B04", "admin agreement/plan review" ], [ "B03", "B10", "share invite link" ], [ "B03", "G02", "billing-only role" ], [ "A05", "A07", "separate project membership" ], [ "B03", "A07", "new payer-owned project" ], [ "B06", "B02", "manual funding/review" ], [ "B07", "B02", "Stripe OFF" ], [ "A07", "B02", "reserve/settle usage" ], [ "B02", "B05", "ledger/receipt" ], [ "B08", "B09", "charging OFF" ], [ "B09", "B02", "future validated debit" ], [ "O02", "B02", "isolated writer" ] ] }, { "id": "governance", "title": "Operator: authority → enforcement → evidence → recovery", "ids": [ "A04", "G01", "G02", "G03", "G04", "G05", "S09", "R01", "G06", "G07", "G08", "G10", "O01", "O02", "O03", "O04", "O05", "O06", "W17" ], "description": "Key isolation, reviewed effects and read-only execution have implementation. Shared data ownership, complete audit UX, measured public status and production-scale/failure assurance remain separate gaps.", "edges": [ [ "A04", "G02", "scoped authority" ], [ "G01", "R01", "write-only secret delivery" ], [ "G02", "S09", "reviewed effects" ], [ "G02", "G05", "profile/exception UI gap" ], [ "S09", "R01", "authorized dispatch" ], [ "G03", "R01", "read-only profile" ], [ "G04", "R01", "egress policy" ], [ "R01", "G06", "audit evidence" ], [ "G06", "G07", "incomplete audit UI" ], [ "G06", "G10", "trust documents gap" ], [ "O01", "G08", "status must use real data" ], [ "O02", "O03", "wider ownership still open" ], [ "O02", "O04", "backup/restore" ], [ "O04", "O05", "live failover unqualified" ], [ "O05", "W17", "soak/physical failure" ], [ "O06", "O01", "fixed-revision qualification" ] ] } ], "interpretation": "Feature counts describe this inventory, not a percentage of product completion. Fully done means the explicitly named bounded scope, not unrestricted scale/security certification. Dependencies are prerequisites or flow links, not an execution schedule. Alternative identity/provider paths are labeled in flow graphs.", "updatedAt": "2026-09-11T17:07:56.845313+00:00", "sourceRepository": "https://gitlabb.blazingfast.io/platform/snabb", "siteBranch": "progress" }