{ "schemaVersion": 1, "publicSummaryVersion": "2026-09-30", "classification": "PUBLIC", "title": "Test-status snapshot published 10 September 2026", "summary": "This historical snapshot preserves the test-status register as published on 10 September 2026. It includes a failed encrypted soak that completed fewer checkpoints than required, and a prior soak rerun marked unnecessary for a narrowly scoped change. Those statuses describe this snapshot, not today’s deployment. Green entries apply only to their recorded assertions and environments. The snapshot does not carry one overall execution date; use each underlying test record for its date and limitations, and the current register for later results.", "date": "10 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "result": "This historical snapshot preserves the test-status register as published on 10 September 2026. It includes a failed encrypted soak that completed fewer checkpoints than required, and a prior soak rerun marked unnecessary for a narrowly scoped change. Those statuses describe this snapshot, not today’s deployment. Green entries apply only to their recorded assertions and environments. The snapshot does not carry one overall execution date; use each underlying test record for its date and limitations, and the current register for later results.", "sections": [ { "title": "Individual recorded test outcomes", "items": [ { "id": "gate-gate-0", "title": "Historical environment-readiness test", "text": "On 28 July 2026, the laboratory environment passed readiness checks for running hardware-virtualized guests and verifying its pinned software. A deliberately altered integrity value was rejected. The result supports that environment’s readiness and integrity checks at that point in time. It does not demonstrate an agent workload, hosted availability or ongoing production health.", "status": "green", "date": "28 July 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Point-in-time laboratory hygiene Single altered integrity value No hosted availability claim", "href": "/evidence/phase-0" }, { "id": "gate-gate-1", "title": "Historical memory-continuity test", "text": "On 28 July 2026, a laboratory guest resumed after its virtual-machine process was forcibly stopped. Its in-memory witness remained the same and its counter continued advancing; a fresh boot failed the continuity checks. The guest used a read-only filesystem, so the witness could not be reconstructed from a saved disk file. This was a small counter guest, not an AI agent or a production workload, and establishes only the recorded memory-continuity result.", "status": "green", "date": "28 July 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Counter guest, not AI agent Read-only filesystem test Laboratory, not production", "href": "/evidence/phase-1" }, { "id": "gate-gate-2a", "title": "Historical session lifecycle test", "text": "On 28 July 2026, laboratory checks ran a session through checkpoint, forced stop and resume while preserving its in-memory witness and continuing counter. Repeating the test confirmed the lifecycle could run again, and substituting a fresh start failed the continuity checks. This test did not verify clock resynchronization; a separate general-image demonstration was reported as data, not an asserted result. The evidence concerns the recorded laboratory lifecycle, not current hosted availability.", "status": "green", "date": "28 July 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Clock resynchronization untested General-image smoke result is data only Laboratory scope", "href": "/evidence/phase-2a" }, { "id": "gate-gate-2b", "title": "Historical checkpoint portability and integrity test", "text": "On 28 July 2026, a laboratory test restored a session from its stored checkpoint on a second service instance, created branches with recorded ancestry, and rejected corrupted checkpoint data. An interrupted checkpoint publication left the prior checkpoint intact. Both service instances ran on the same laboratory host with compatible software and local storage; this was not a cross-host disaster-recovery test. Branch differences came from staggered execution, not agent steering.", "status": "green", "date": "28 July 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Second instance on same host Compatible software/local storage Not cross-host recovery Branch divergence not steering", "href": "/evidence/phase-2b" }, { "id": "gate-gate-3", "title": "Historical interrupted-call replay test", "text": "On 28 July 2026, a laboratory Claude Code session survived a forced stop and resume. Its records reconciled, and a completed interrupted response was replayed without being billed again. The test also detected deliberately degraded replay and record behavior. The result depends on the client returning for the held response; it is not a promise about every agent’s retry behavior. The specimen’s task outcome was reported separately and did not determine whether the infrastructure test passed.", "status": "green", "date": "28 July 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Claude Code client scope Client retry behavior separate Task outcome not asserted Some billing checks alone remain true in degraded system", "href": "/evidence/phase-3" }, { "id": "gate-gate-4", "title": "Historical unattended recovery demonstration", "text": "On 29 July 2026, a laboratory demonstration automatically checkpointed an agent, stopped both its virtual machine and supervising service, and resumed the session. The recorded run passed its recovery and cleanup checks. A run without a usable checkpoint correctly failed. The asserted endpoint was the agent being alive after resume; completion of its task was separate reported data. Reported component timings were measurements, while monetary conversions were estimates. This is a single demonstration result, not a general recovery-time or task-success guarantee.", "status": "green", "date": "29 July 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Alive after resume, not task completion Component timings reported, not all asserted Dollar figures estimated Single laboratory demonstration", "href": "/evidence/phase-4" }, { "id": "gate-gate-5", "title": "Historical branch-isolation and steering test", "text": "On 29 July 2026, laboratory checks created branches from a shared checkpoint, applied distinct steering inputs and verified separate branch histories and filesystems. A test-written marker in one branch did not appear in the others. Identical steering inputs were correctly detected as failing the distinctness requirement. The marker was written by the test harness, not the agent: it proves filesystem isolation, not that an agent obeyed its instructions. Agent behavior remains measured data rather than a guaranteed result.", "status": "green", "date": "29 July 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Marker written by test harness Isolation is not agent obedience Laboratory scope", "href": "/evidence/phase-5" }, { "id": "gate-gate-6", "title": "Historical long-running checkpoint reliability test", "text": "The snapshot records this historical soak as not required for the release rerun; its old result is not a fresh run. The record sealed on 31 July 2026 reports a replacement seven-hour laboratory soak with successful scheduled checkpoints and restoration of an older checkpoint. An earlier run exposed a defect that stopped repeated checkpointing; the record reports its correction and retest. It also discloses that cleanup destroyed the originally preserved checkpoint, so its restoration was not performed; the later restoration used a replacement artifact. One workload and one soak do not establish a general reliability rate. The separate 25-cycle sample supports only its stated confidence interval, not guaranteed success.", "status": "not-required", "date": "31 July 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "One soak/one workload Original preserved artifact destroyed; original restoration not performed Replacement restoration is distinct 25-cycle confidence limits remain visible", "href": "/evidence/phase-6" }, { "id": "gate-gate-7", "title": "Historical second-agent compatibility test", "text": "The original record of 31 July 2026 and rerun of 30 August tested a second agent, aider, and a fresh laboratory installation. The gateway retained the interrupted response in all four reported runs; aider retried successfully in three. That difference is a material client limitation. The second installation used another virtual machine on the same physical computer. A later attempt was not counted as a completed trial because its environment was not ready. These results support the named agent and setup, not compatibility with every agent or guaranteed resumption.", "status": "green", "date": "31 July 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Aider retry 3/4 versus held response 4/4 Second VM on same physical machine Trial-not-held excluded explicitly Not universal compatibility", "href": "/evidence/phase-7" }, { "id": "gate-quickstart-clean-room", "title": "Independent quickstart run for release v0.1.3", "text": "On 25 August 2026, a clean-environment run of the v0.1.3 quickstart completed successfully on an Apple Silicon laboratory machine. The source instructions were hash-checked before execution. The first attempt stopped because a stale checkout existed; a fresh second attempt exited successfully in 176 seconds, preserved session state across resume and completed cleanup. This was a quickstart demonstration, not certification of the separate blocked acceptance test. That broader test remained blocked on two assertions awaiting a human decision.", "status": "green", "date": "25 August 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Two attempts; stale-checkout refusal retained. 176 seconds belongs to one successful attempt. Broader acceptance gate remained blocked.", "href": "/evidence/quickstart-run-v0.1.3-redacted" }, { "id": "gate-az-0", "title": "Historical deployment-platform portability test", "text": "The record resolved on 30 August 2026 reports that the existing readiness, memory-continuity, lifecycle and checkpoint tests passed on the hosted x86 platform. Their test definitions were checked for consistency with the laboratory versions. The first run failed because its corruption test did not actually change the selected data; after that test was corrected, the negative test passed. This demonstrates the recorded platform transition, not continuous availability, portability across arbitrary architectures or a claim that the first failed result never occurred.", "status": "green", "date": "30 August 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Initial corruption test invalid, corrected in later run Named platform only No arbitrary cross-architecture portability", "href": "/evidence/phase-az-0" }, { "id": "gate-az-1", "title": "Historical account-isolation test", "text": "On 30 August 2026, a two-account test on hosted hardware verified that each owner could operate its own session and that forged or cross-account attempts to read, attach, checkpoint or resume were refused without changing the target session. The test exercised the engine’s account-ownership boundary using test-generated account assertions. It was not a full end-to-end test of external sign-in or today’s document portal. Legacy laboratory sessions had a separate local-access scope, explicitly outside the owned-session claim.", "status": "green", "date": "30 August 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Two-account engine test Not external sign-in or document authorization Legacy laboratory-session scope differs", "href": "/evidence/phase-az-1" }, { "id": "gate-az-2", "title": "Historical owned-session broker test", "text": "On 30 August 2026, a test on hosted hardware used an account token to create, read and checkpoint an owned session through the control plane. Another account’s token and a revoked token were refused. The tested components were colocated; public-domain transport, real Google/GitHub sign-in and real provider-key use were not established by this test and awaited separate setup. The result demonstrates that recorded ownership and token-revocation path, not a complete customer onboarding or payment journey.", "status": "green", "date": "30 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Colocated components Real external sign-in and BYOK outside scope Not complete paid onboarding", "href": "/evidence/phase-az-2" }, { "id": "gate-az-3", "title": "Historical private service-boundary test", "text": "The record sealed on 31 August 2026 reports checks run on 30 August showing that the authorized control plane could create and read an owned session across the private network. Public and unauthenticated transport attempts were refused, including plaintext and untrusted client certificates. Network restrictions and certificate authentication were tested independently. This was a same-region control-path test. It did not test moving a checkpoint to another host, recovery after host loss or today’s network configuration.", "status": "green", "date": "31 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Run date differs from seal date Same region control path Not cross-host restore Historical configuration only", "href": "/evidence/phase-az-3" }, { "id": "gate-az-3b", "title": "Provider-key isolation and safe refusal without a key", "text": "On 30 August 2026, a hosted-service test used a fixture credential and a simulated provider. The session completed its request using the account’s supplied key, the inspected logs and stored records contained no plaintext copy, and a session without a usable key was refused. A negative control confirmed refusal when the key could not be decrypted. Assertions were appended on 6 September 2026. This record did not make a live provider call and does not establish that arbitrary credentials can never leak.", "status": "green", "date": "30 August 2026; 6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Simulated provider and fixture credential Live provider behavior belongs to a separate record No general proof against credential leakage", "href": "/evidence/phase-az-3b" }, { "id": "gate-az-4", "title": "Historical hosted-client and provider-key trial", "text": "The record sealed on 31 August 2026 reports hosted-client checks run on 30 August: a token created a session on the live fleet, read its usage information and stopped it. A revoked token was refused before creating a session. A separate team-operated trial on 31 August completed a real model call using the team’s own provider key. That real-key trial is narrative evidence, not one of the automated gate assertions. These two scopes are distinct and do not establish behavior for every workload or current release.", "status": "green", "date": "31 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Automated client checks versus narrative real-key trial Team-owned key, not customer trial Historical availability only", "href": "/evidence/phase-az-4" }, { "id": "gate-az-5", "title": "Historical restart-and-reboot recovery test", "text": "On 31 August 2026, a hosted-hardware test verified that the services restarted after a forced process stop and returned automatically after the host rebooted. A previously checkpointed and stopped counter session resumed with its in-memory witness preserved and its counter advancing. The negative test detected the absence of automatic restart. This test used a small counter specimen and a saved checkpoint; it does not promise preservation of unsaved work, arbitrary workload recovery or failover to another host.", "status": "green", "date": "31 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Counter specimen Checkpointed and stopped before reboot Not cross-host failover or unsaved-work guarantee", "href": "/evidence/phase-az-5" }, { "id": "gate-kill-guard", "title": "Protect unsaved work from accidental termination", "text": "On 31 August 2026, three hosted assertions passed for the termination guard. An ordinary termination request with unsaved work was refused and the session stayed alive, with safer choices explained. Explicit forced termination proceeded; a session with a saved checkpoint could be terminated normally. The protection was enforced by the service as well as the client. This guard protects unsaved work, not all destructive actions, and an explicit force request can still discard that work.", "status": "green", "date": "31 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Guard concerns unsaved work. Explicit force permits destruction.", "href": "/evidence/phase-kill-guard" }, { "id": "gate-cp-1", "title": "Historical account persistence and callback tests", "text": "On 30 August 2026, laboratory checks verified that an account and its session survived a service restart, deletion removed identifying account data while retaining a tombstone, and the deleted account’s session was refused. Altered sign-in callback state created no account. Session-cookie protections were also checked. The login round trip used a test identity provider; Google and GitHub redirect construction was checked without contacting those providers. This is not a live-provider authentication test or proof of document-specific authorization.", "status": "green", "date": "30 August 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Test identity provider Google/GitHub wiring structural only No scoped-document authorization test", "href": "/evidence/phase-cp-1" }, { "id": "gate-cp-2", "title": "Historical device-login and token-revocation tests", "text": "On 30 August 2026, laboratory tests completed the client’s device-login flow, bound the resulting token to the approving account and verified that revocation took effect on the next request. Expired and mismatched approval codes were rejected. The inspected logs and database did not contain the fixture token; it appeared only in the tested client credential store. This exercised the Linux storage path. The macOS keychain path was not tested here, and the result is not a general claim that no token can ever leak.", "status": "green", "date": "30 August 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Linux credential store tested macOS keychain untested here Fixture inspection does not prove universal absence of secrets", "href": "/evidence/phase-cp-2" }, { "id": "gate-cp-3", "title": "Historical onboarding and key-vault tests", "text": "On 30 August 2026, laboratory checks verified that onboarding state survived a restart, stored a fixture provider key in encrypted form and returned only a masked key reference. Cross-account attempts to read or change the vault were refused. The service also refused an unsafe key-storage configuration. The fixture key was deliberately not a real provider credential, and no live provider call was made. The evidence applies to those inspected responses and stores; it does not certify every current production secret-handling path.", "status": "green", "date": "30 August 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Non-provider fixture key No live provider call Inspected paths only", "href": "/evidence/phase-cp-3" }, { "id": "gate-cp-c1", "title": "Historical usage-meter reconciliation test", "text": "On 31 August 2026, a test on hosted hardware reconciled a usage statement against its token, session-time and storage records. The total matched its priced lines, an altered meter record failed reconciliation, and an unreadable source was shown as unavailable rather than zero. A real billed model call supplied the token measurement. This test did not exercise card handling or checkout. It verifies the recorded statement and reconciliation checks, not today’s prices or every future bill.", "status": "green", "date": "31 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "No checkout/card path Missing source is unavailable, not zero Historical statement, not current prices", "href": "/evidence/phase-cp-c1" }, { "id": "gate-cp-c2", "title": "Historical credit-ledger and funds-interlock test", "text": "On 31 August 2026, a hosted-hardware test with a real virtual-machine session verified that repeated credit operations did not duplicate a debit and that exhaustion checkpointed and parked the session, which later resumed after a top-up. A 17 September amendment changed the test because customers were no longer allowed to invoke credit-changing operations. The amended ledger checks run in isolation, with settlement supported by separate evidence. The original assertions describe the earlier interface; they are not proof that those customer operations remain available or that the amended test reran in production.", "status": "green", "date": "31 August 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Original interface superseded Amended ledger proof isolated No production rerun inferred from amendment", "href": "/evidence/phase-cp-c2" }, { "id": "gate-cp-c3", "title": "Historical payment-notification verification test", "text": "On 31 August 2026, a laboratory sandbox test verified that an authenticated payment notification added credit once, repeated delivery or another notification for the same order added nothing further, and a forged notification was refused. The simulated payment, order and credit records reconciled. A mock payment service and test signing secret were used; this was not a live card purchase or a test of the hosted checkout page. KeepState’s usage statement is separate from the payment provider’s tax receipt. Later live-payment assurance requires its own evidence.", "status": "green", "date": "31 August 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Mock provider and test secret No live card purchase No hosted checkout-page test Usage statement not tax receipt", "href": "/evidence/phase-cp-c3" }, { "id": "gate-cp-c4", "title": "Historical usage-statement integrity test", "text": "On 31 August 2026, a test on hosted hardware verified that a downloadable usage statement matched its source statement and priced lines, retained a verifiable relationship to the prior statement and detected alteration. It was explicitly a usage statement, not a tax receipt. A 17 September amendment changed how the test account was funded after customer credit-changing operations were closed. This version says the amended rerun was still pending an authorized test window. The original passing result does not establish a completed amended production rerun.", "status": "green", "date": "31 August 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Usage statement, not tax receipt Amended rerun pending in this version Original result not amended production proof", "href": "/evidence/phase-cp-c4" }, { "id": "gate-cp-c5", "title": "Historical low-credit notification test", "text": "On 31 August 2026, laboratory tests verified that low-credit alerts were calculated from server-side account records, appeared once in the console and were not falsely marked emailed when email was unavailable. With a mock delivery endpoint, an alert reached that endpoint before being marked sent. Live authenticated email was outside this test. A 17 September amendment changed test funding; its attempted rerun was not held because the laboratory environment was unreachable. The original result remains historical, and the aborted attempt is not a passing rerun.", "status": "green", "date": "31 August 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Mock email endpoint Live authenticated email separate Amended rerun trial not held", "href": "/evidence/phase-cp-c5" }, { "id": "gate-cp-c6", "title": "Audited activation and welcome-screen behavior", "text": "On 31 August 2026, a laboratory test recorded three passing assertions: accounts could not activate themselves, authorized activation was audited, and queued accounts received no start instructions while active accounts received usable welcome instructions. A negative control confirmed that the activation restriction mattered. The welcome test checked instruction structure, not the production destination. This historical result does not establish that the same activation policy or interface is deployed today.", "status": "green", "date": "31 August 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Laboratory run; production URL not verified. Three per-assertion passes, not a product-wide verdict.", "href": "/evidence/phase-cp-c6" }, { "id": "gate-lr-1", "title": "Rehearsal of onboarding, usage and billing reconciliation", "text": "On 31 August 2026, a hosted rehearsal passed all ten steps in the recorded customer journey and two summary assertions. It covered activation, a supplied provider key, crediting, model use, pause/resume, statement reconciliation and a refund returning the balance to zero. Revoked access and a modified statement were rejected. The identity provider and payment service were test systems: this was a rehearsal, not proof that a real new customer completed live checkout or received a real refund.", "status": "green", "date": "31 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Test identity provider and mock payment sandbox. No live customer checkout or live refund established.", "href": "/evidence/phase-lr-1" }, { "id": "gate-em-1", "title": "Email is recorded before delivery is claimed", "text": "The original record dated 2 September 2026 reports three passing assertions across laboratory and hosted email checks. Simulated interruptions left mail queued, and sent status required provider acceptance. The provider verified the domain’s email authentication configuration and accepted a welcome message. The interruption tests used a mock provider; provider acceptance does not prove inbox delivery or receiver authentication headers. A 17 September amendment changed test funding, but its rerun was not held because the laboratory host was unreachable. The amendment therefore adds no new passing run.", "status": "green", "date": "2 September 2026", "scope": "Laboratory or bench evidence; production behavior is not inferred from it.", "limitation": "Mock provider for interruption tests. Provider acceptance does not prove recipient receipt or receiver headers. 17 September amended rerun was not held because the laboratory host was unreachable.", "href": "/evidence/phase-em-1" }, { "id": "gate-cli-1", "title": "Historical public-client installation checks", "text": "Checks recorded on 1 September 2026 verified installation of the released client, successful sign-in and session start on a fresh Linux virtual machine, and rejection of altered installer/update downloads. macOS checks used a cleaned environment rather than a fresh operating-system installation. A 2 September rerun after the repository transfer verified the new distribution paths and compatibility redirects. Windows installation was not covered. These results apply to those historical client releases and environments, not all current installers or supported platforms.", "status": "green", "date": "1 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "macOS environment not fresh VM Windows not tested Historical release paths", "href": "/evidence/phase-cli-1" }, { "id": "gate-ad-1", "title": "Historical staff-console control tests", "text": "On 1 September 2026, four recorded tests on hosted hardware reported role restrictions, auditing of privileged writes, consent-bound content access, independently reconciled financial displays and detection of altered records. Missing source data was displayed as unavailable rather than zero. These are historical test assertions about the administrative console. They do not establish the current confidential-document access model or resolve conflicting public statements about whether staff-access controls are implemented. This historical record does not independently verify the deployed staff-access behavior.", "status": "green", "date": "1 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Historical console tests No document-pack access proof The historical record contains conflicting staff-access statements.", "href": "/evidence/phase-ad" }, { "id": "gate-ad-2", "title": "Historical staff-console control tests", "text": "On 1 September 2026, four recorded tests on hosted hardware reported role restrictions, auditing of privileged writes, consent-bound content access, independently reconciled financial displays and detection of altered records. Missing source data was displayed as unavailable rather than zero. These are historical test assertions about the administrative console. They do not establish the current confidential-document access model or resolve conflicting public statements about whether staff-access controls are implemented. This historical record does not independently verify the deployed staff-access behavior.", "status": "green", "date": "1 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Historical console tests No document-pack access proof The historical record contains conflicting staff-access statements.", "href": "/evidence/phase-ad" }, { "id": "gate-ad-3", "title": "Historical staff-console control tests", "text": "On 1 September 2026, four recorded tests on hosted hardware reported role restrictions, auditing of privileged writes, consent-bound content access, independently reconciled financial displays and detection of altered records. Missing source data was displayed as unavailable rather than zero. These are historical test assertions about the administrative console. They do not establish the current confidential-document access model or resolve conflicting public statements about whether staff-access controls are implemented. This historical record does not independently verify the deployed staff-access behavior.", "status": "green", "date": "1 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Historical console tests No document-pack access proof The historical record contains conflicting staff-access statements.", "href": "/evidence/phase-ad" }, { "id": "gate-ad-4", "title": "Historical staff-console control tests", "text": "On 1 September 2026, four recorded tests on hosted hardware reported role restrictions, auditing of privileged writes, consent-bound content access, independently reconciled financial displays and detection of altered records. Missing source data was displayed as unavailable rather than zero. These are historical test assertions about the administrative console. They do not establish the current confidential-document access model or resolve conflicting public statements about whether staff-access controls are implemented. This historical record does not independently verify the deployed staff-access behavior.", "status": "green", "date": "1 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Historical console tests No document-pack access proof The historical record contains conflicting staff-access statements.", "href": "/evidence/phase-ad" }, { "id": "gate-ac-1", "title": "Historical signup-credit and free-session test", "text": "On 1 September 2026, laboratory tests with real virtual-machine sessions verified automatic account activation, a one-time signup credit, concurrency limits and checkpoint-and-park behavior. Repeat signup by the same authenticated identity did not receive another grant. The record’s parking behavior was based on elapsed runtime, not inactivity, and some abuse controls were approximations. Production self-service was disabled in this historical version. A 17 September amendment changed the credit-exhaustion check to an isolated internal test; that amendment is not itself a new full production run. This record does not establish current signup grants or availability.", "status": "green", "date": "1 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Runtime rather than idle detection Abuse-control approximations Historical production self-service disabled Amended exhaustion test isolated", "href": "/evidence/phase-ac-1" }, { "id": "gate-af-1", "title": "Historical hosted attach-and-fork test", "text": "On 3 September 2026, laboratory checks created owned fork branches, exercised terminal attachment and refused another account’s access. File-divergence checking was skipped because most branch networks were unreachable, and attachment used the stable parent. A separate production narrative reports successful owned forks and keyboard interaction through the hosted client after deployment. Final robustness changes could not be rerun on the damaged laboratory environment. The laboratory assertions and production narrative cover different scopes; neither resolves the recorded branch-network limitation.", "status": "green", "date": "3 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "File-divergence check skipped in laboratory Attachment tested on stable parent Separate production narrative Final robustness changes not rerun on damaged laboratory environment", "href": "/evidence/phase-af-1" }, { "id": "gate-pv-1", "title": "Metering and replay on an additional provider path", "text": "On 4 September 2026, six hosted assertions passed for an additional compatible provider path. Deterministic tests checked credential routing, usage accounting, ordered records and replay of an identical request without another charge. A separate live provider call also succeeded and its identical retry was replayed. The live gateway ran in isolation and did not prove the full agent-plus-session-interruption combination. The replay guarantee concerns identical retries; it does not mean all similar requests are free.", "status": "green", "date": "4 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Mechanics used a deterministic mock. Live gateway was isolated; full agent recovery separate. Replay applies to identical requests.", "href": "/evidence/phase-pv-1" }, { "id": "gate-pv-2", "title": "Change models only while a session is saved", "text": "On 4 September 2026, three hosted test assertions passed for changing a session’s model. A change was refused while the session was running, accepted while it was checkpointed, and used by the next request without resetting the request lineage. These tests used a simulated compatible provider. They covered compatible clients through the tested routing path; native clients for the other protocol were explicitly outside this result. Live continuation quality was not measured here.", "status": "green", "date": "4 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Mock upstream. Native clients for the other protocol not claimed. No live continuation-quality measurement.", "href": "/evidence/phase-pv-2" }, { "id": "gate-rs-1", "title": "Measured session resume times", "text": "On 5 September 2026, a hosted measurement ran 20 warm and 20 cold resumes of a 2 GiB guest in interleaved order. All 40 completed. Warm p95 was 25.09 seconds and cold p95 was 47.46 seconds; medians were 18.08 and 33.36 seconds. The cold result met the 60-second target, while the warm result missed the 5-second target. These measurements describe that guest and environment, not a general latency guarantee or current service level.", "status": "green", "date": "5 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Warm p95 missed the target. Single tested guest/environment and 40 runs. Measurement, not service guarantee.", "href": "/evidence/phase-rs1" }, { "id": "gate-fo-1", "title": "Resume on another host after an interruption", "text": "On 5 September 2026, four hosted assertions passed for moving saved sessions to another host after an isolated service failure. The tested sessions preserved in-memory state, each move produced one event and a customer notice, and duplicate resume attempts were prevented. The test used shared durable storage within one region. Work since the latest checkpoint could be lost. Billing reconciliation on the replacement host was still pending in this record; these results do not prove recovery from every host or regional failure.", "status": "green", "date": "5 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Isolated service termination, same-region shared storage. Checkpoint-bounded loss window. Replacement-host billing reconciliation pending in this record.", "href": "/evidence/phase-fo-1" }, { "id": "gate-hr-1-codex", "title": "Separate recovery, metering and retry support checks", "text": "On 5 September 2026, eight hosted assertions passed across two supported provider paths. Test sessions preserved in-memory state through save, interruption and resume; real provider calls were metered; identical retries avoided a second charge; missing credential access failed closed. The tests used a base guest exercising the integration configuration, rather than proving every behavior of a full agent application. Whether a request is retried remains the client’s decision. These results apply to the tested combinations.", "status": "green", "date": "5 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Base guest/configuration surface, not every native agent workflow. Retry issuance is client-controlled.", "href": "/evidence/phase-hr1" }, { "id": "gate-hr-1-openrouter-generic", "title": "Separate recovery, metering and retry support checks", "text": "On 5 September 2026, eight hosted assertions passed across two supported provider paths. Test sessions preserved in-memory state through save, interruption and resume; real provider calls were metered; identical retries avoided a second charge; missing credential access failed closed. The tests used a base guest exercising the integration configuration, rather than proving every behavior of a full agent application. Whether a request is retried remains the client’s decision. These results apply to the tested combinations.", "status": "green", "date": "5 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Base guest/configuration surface, not every native agent workflow. Retry issuance is client-controlled.", "href": "/evidence/phase-hr1" }, { "id": "gate-t0-p", "title": "Public claims and their recorded evidence", "text": "On 6 September 2026, three deterministic publication assertions passed. Claimed results had to reference specific assertions present in the cited records, rather than just naming a test or release. The check reconciled 152 assertions across 42 test records and rejected empty or invalid references. This establishes traceability within the inspected records, not whether each product result is correct or currently deployed. The public website’s rendering was a separate scope.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Record linkage, not independent product correctness. Website rendering separate.", "href": "/evidence/phase-t0-p" }, { "id": "gate-t0-c-p", "title": "Evidence catalogue titles and source records", "text": "On 6 September 2026, two deterministic publication assertions passed. Evidence titles and summaries were derived from each record’s declared subject, conflicting manually supplied titles were rejected, and records missing required metadata stopped generation. This checks the consistency of the evidence catalogue, not the truth of every underlying product claim. It covers the record-generation side; whether the public website actually rendered the correct titles required a separate website check.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Catalogue consistency, not product verification. Public-site rendering tested separately.", "href": "/evidence/phase-t0-c-p" }, { "id": "gate-s1", "title": "Deterministic checks for the acceptance contract", "text": "On 6 September 2026, six deterministic assertions passed for the acceptance layer. Approved task conditions could not change silently; verification was separated from agent-controlled material; publication was limited to an authorized review branch or pull request; and unresolved attempts blocked settlement. Complete-job accounting matched an independent calculation, while unreadable inputs were shown as unavailable. These were isolated deterministic checks. A live multi-model task and real external publication were separate matters; this record does not establish either.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Deterministic checks, separate from live model execution. Publication authorization limited to review branch or pull request. No external publication proved.", "href": "/evidence/phase-s1" }, { "id": "gate-s2", "title": "Deterministic checks for the acceptance contract", "text": "On 6 September 2026, six deterministic assertions passed for the acceptance layer. Approved task conditions could not change silently; verification was separated from agent-controlled material; publication was limited to an authorized review branch or pull request; and unresolved attempts blocked settlement. Complete-job accounting matched an independent calculation, while unreadable inputs were shown as unavailable. These were isolated deterministic checks. A live multi-model task and real external publication were separate matters; this record does not establish either.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Deterministic checks, separate from live model execution. Publication authorization limited to review branch or pull request. No external publication proved.", "href": "/evidence/phase-s1" }, { "id": "gate-s4", "title": "Deterministic checks for the acceptance contract", "text": "On 6 September 2026, six deterministic assertions passed for the acceptance layer. Approved task conditions could not change silently; verification was separated from agent-controlled material; publication was limited to an authorized review branch or pull request; and unresolved attempts blocked settlement. Complete-job accounting matched an independent calculation, while unreadable inputs were shown as unavailable. These were isolated deterministic checks. A live multi-model task and real external publication were separate matters; this record does not establish either.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Deterministic checks, separate from live model execution. Publication authorization limited to review branch or pull request. No external publication proved.", "href": "/evidence/phase-s1" }, { "id": "gate-s5", "title": "Deterministic checks for the acceptance contract", "text": "On 6 September 2026, six deterministic assertions passed for the acceptance layer. Approved task conditions could not change silently; verification was separated from agent-controlled material; publication was limited to an authorized review branch or pull request; and unresolved attempts blocked settlement. Complete-job accounting matched an independent calculation, while unreadable inputs were shown as unavailable. These were isolated deterministic checks. A live multi-model task and real external publication were separate matters; this record does not establish either.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Deterministic checks, separate from live model execution. Publication authorization limited to review branch or pull request. No external publication proved.", "href": "/evidence/phase-s1" }, { "id": "gate-s6", "title": "Deterministic checks for the acceptance contract", "text": "On 6 September 2026, six deterministic assertions passed for the acceptance layer. Approved task conditions could not change silently; verification was separated from agent-controlled material; publication was limited to an authorized review branch or pull request; and unresolved attempts blocked settlement. Complete-job accounting matched an independent calculation, while unreadable inputs were shown as unavailable. These were isolated deterministic checks. A live multi-model task and real external publication were separate matters; this record does not establish either.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Deterministic checks, separate from live model execution. Publication authorization limited to review branch or pull request. No external publication proved.", "href": "/evidence/phase-s1" }, { "id": "gate-s7", "title": "Deterministic checks for the acceptance contract", "text": "On 6 September 2026, six deterministic assertions passed for the acceptance layer. Approved task conditions could not change silently; verification was separated from agent-controlled material; publication was limited to an authorized review branch or pull request; and unresolved attempts blocked settlement. Complete-job accounting matched an independent calculation, while unreadable inputs were shown as unavailable. These were isolated deterministic checks. A live multi-model task and real external publication were separate matters; this record does not establish either.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Deterministic checks, separate from live model execution. Publication authorization limited to review branch or pull request. No external publication proved.", "href": "/evidence/phase-s1" }, { "id": "gate-s3", "title": "Live task completion after a failed attempt", "text": "On 6 September 2026, four hosted assertions passed across two live provider families. A first-stage candidate could pass independent checks; when a first attempt failed, the workspace was restored and a later stage completed the fixture. Calls were metered, and disabling escalation did not turn failure into acceptance. The tasks were tiny supplied fixtures, and recovery here was at workspace-segment level. Memory restoration was established separately; no acceptance-rate, cost-saving or general workload claim follows.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Tiny supplied fixtures. Workspace-level segment restore; memory recovery separate. No savings or general acceptance-rate claim.", "href": "/evidence/phase-s3" }, { "id": "gate-l-1", "title": "Historical accepted-work test across two provider families", "text": "A confirmation run on 6 September 2026 completed one bounded coding fixture through each of two live provider families. The initial attempts failed; later attempts produced accepted artifacts after independent checks. Seven checks passed, including complete-job accounting. Publication was limited to a scoped authorization: no external pull request was created. A negative control showed that verifier independence mattered. The sample is two task arms with deliberately constrained initial attempts, not a general task-success rate, comparative model ranking or cost-savings claim.", "status": "green", "date": "6 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "One bounded fixture in two provider families Initial attempts were deliberately resource-constrained No external publication or general success rate", "href": "/evidence/phase-l-1" }, { "id": "gate-fo-1b", "title": "Billing state across a real host loss", "text": "The record combines a hosted failover rehearsal dated 6 September 2026 and production enablement dated 7 September. Six assertions report billing continuity after real host deallocation: recorded spend survived, an identical retry was not billed again, and budget enforcement used the carried balance. Settlement stayed blocked until reconciliation passed. One run measured 47 seconds from deallocation to reconciliation; this is not an availability promise. The enablement addendum records a live production check. Session recovery relied on a separately tested mechanism, and regional disaster recovery was not established.", "status": "green", "date": "6 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "47 seconds is one run’s deallocation-to-reconciliation measurement. Shared storage and separately tested guest recovery are dependencies. Settlement remains blocked until reconciliation completes. Production enablement is a separate 7 September addendum.", "href": "/evidence/phase-fo-1b" }, { "id": "gate-s11", "title": "Accepted-work checks on a plain Linux stand-in", "text": "On 7 September 2026, three assertions passed for the accepted-work workflow on a plain Linux customer-environment stand-in. A failed attempt restarted from a saved segment boundary, a later attempt completed, and the artifact was independently checked after the remote round trip. The environment’s limitations appeared in the result and missing limitation declarations were rejected. Plain-host recovery did not rewind memory. This was a tested integration configuration, not proof for every customer host or workload.", "status": "green", "date": "7 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Customer-environment stand-in. No RAM rewind on plain hosts; segment restart only. Configuration-specific result.", "href": "/evidence/phase-s11" }, { "id": "gate-af-2", "title": "Historical independently verified branch-work test", "text": "On 7 September 2026, a hosted-hardware test forked one task workspace into three branches. Two branches reached authorized model providers, performed work in their own workspaces and produced accepted candidates under independent verification. The unreachable branch was counted as failed rather than omitted. Exactly one verified result received scoped publication authorization. This was authorization for a review branch or pull request, not an actual external publication. Larger branch counts were not tested.", "status": "green", "date": "7 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Three branches only Unreachable attempt counted failed Authorization intent, no external publication", "href": "/evidence/phase-af-2" }, { "id": "gate-er-1", "title": "Account erasure and recovery isolation", "text": "On 7 September 2026, six recorded assertions passed for account-level erasure on hosted infrastructure. Deleted-account checkpoints became unreadable after key destruction, including from the tested backup copy, while another account’s matching content remained restorable. Identity was removed from retained billing records. The rollout used team/test data; a cleanup error also removed the test canary’s chunks, with no reported customer impact. A fresh post-cleanup checkpoint subsequently resumed. This record does not establish that every backup or future deployment follows the same key-management conditions.", "status": "green", "date": "7 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Team/test rollout only; cleanup error and no reported customer impact retained. Backup recovery depends on stated key-management conditions.", "href": "/evidence/phase-er-1" }, { "id": "gate-pv-3", "title": "Continue a fixture across provider protocols", "text": "On 7 September 2026, four hosted assertions passed for continuing a tested task across provider protocols at a checkpoint boundary. The live continuation included tool use and an independently verified artifact, while lineage and metering remained continuous. A failed continuation was refused and the prior workspace restored for fallback. Deterministic translation checks were separate from the live run. The result is fixture-specific and model-dependent; streaming translation was unsupported and explicitly refused in this version.", "status": "green", "date": "7 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Fixture-specific continuation; quality depends on model. Streaming unsupported in this version. Deterministic and live checks have separate scopes.", "href": "/evidence/phase-pv-3" }, { "id": "gate-pv-3b", "title": "Native coding-agent continuation across providers", "text": "On 7 September 2026, three hosted assertions passed with the actual tested coding-agent application and real tool use. A fixture task continued after a checkpoint-boundary provider change and produced an independently verified artifact. Lineage and metering remained continuous; a disabled continuation path failed closed and fallback completed after restoring the workspace. The agent ran in an isolated copy of its environment, with transport tested separately. Quality remains model-dependent, and streaming was buffered rather than incremental.", "status": "green", "date": "7 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Isolated application environment; transport proved separately. Fixture and model-dependent result. Buffered, nonincremental streaming.", "href": "/evidence/phase-pv-3b" }, { "id": "gate-1b2d", "title": "Historical transcript-conversion test", "text": "On 7 September 2026, deterministic checks converted a real Claude Code transcript into inputs for other agent tools and produced a separate task handoff. The record reports the conversation information lost in each conversion. No live target agent was run in this test, and no successful task continuation is claimed. Each supported source/target pair needs its own live completion test before it can be advertised as harness switching. The task handoff remained usable independently of transcript conversion.", "status": "green", "date": "7 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Mechanics only; no live target agent Only one source-transcript reader tested Conversation loss declared per target No harness-switch availability claim", "href": "/evidence/phase-1b2d" }, { "id": "gate-b37", "title": "Historical erasure-failure isolation regression", "text": "A regression run on 7 September 2026, sealed in the 8 September record, verified that a session with destroyed account key material could not resume while another account’s session resumed immediately afterward without restarting the service. The earlier reported service failure was traced to an invalid test request, not damage to the service. This was an isolated engine test on hosted hardware. It did not exercise the production account-deletion route, which requires its separate canary evidence.", "status": "green", "date": "7 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Earlier failure was invalid test request Isolated engine test Production deletion route separate", "href": "/evidence/phase-b37" }, { "id": "gate-b38", "title": "Historical account-deletion cleanup correction", "text": "On 8 September 2026, regression and production-canary evidence reported that deleting a synthetic account removed its active-session resources before destroying its key. The prior behavior left unusable session residue and caused health checks to fail. The corrected deletion refused to report success if teardown failed. Billing-related tombstone records were retained under the stated policy. The production check used a synthetic tenant; unrelated resources from a concurrent test were cleaned separately. This is dated evidence for that cleanup path and does not remove later open account-deletion findings.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenant Unrelated concurrent-test cleanup separate Billing tombstones retained Later deletion findings remain public", "href": "/evidence/phase-b38" }, { "id": "gate-b38-prod", "title": "Historical account-deletion cleanup correction", "text": "On 8 September 2026, regression and production-canary evidence reported that deleting a synthetic account removed its active-session resources before destroying its key. The prior behavior left unusable session residue and caused health checks to fail. The corrected deletion refused to report success if teardown failed. Billing-related tombstone records were retained under the stated policy. The production check used a synthetic tenant; unrelated resources from a concurrent test were cleaned separately. This is dated evidence for that cleanup path and does not remove later open account-deletion findings.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenant Unrelated concurrent-test cleanup separate Billing tombstones retained Later deletion findings remain public", "href": "/evidence/phase-b38" }, { "id": "gate-b39", "title": "Historical checkpoint-timeout correction", "text": "The 8 September 2026 record reports a correction for checkpoints that exceeded the previous fixed deadline. Tests verified an adjusted time allowance, bounded recovery after a timeout and explicit recording of failed checkpoints. The page reports deployment verification before the later soak resumed. Measurements came from one host and one storage class; the calibration did not track storage that degraded while the service was running. A prematurely started soak on the previous build was stopped, so it is not evidence for the corrected build.", "status": "green", "date": "8 September 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "One host/storage class Calibration not continuously tracking degradation Old-build soak stopped, not proof of fix", "href": "/evidence/phase-b39" }, { "id": "gate-pv-3-prod", "title": "Production check of cross-provider translation", "text": "On 8 September 2026, one production-hosted assertion passed for a real translated request on the team’s account. The request reached a live compatible model, was recorded and metered, and the service stayed healthy. This was a one-call production check, not a broad task-success study. Streaming responses were buffered rather than incremental, and replayed thinking blocks were omitted during translation. Those limitations remain part of the result; current behavior requires separate deployment verification.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "One call on a team account. Buffered streaming; replayed thinking blocks omitted.", "href": "/evidence/phase-pv-3-prod" }, { "id": "gate-hosted-prod", "title": "Customer-facing hosted service checks", "text": "On 8 September 2026, six production-hosted assertions passed for synthetic tenants. The check covered authenticated account data, onboarding redirection, write-only credential submission, an authorized session fork, attachment negotiation and billing displays. An unrelated real tenant remained unchanged. Limits matter: the credential was synthetic, the paid state was simulated, attachment covered the handshake rather than an interactive session, and the billing account had no spend. The rendered console and larger fork fan-outs were not verified.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenants, key and paid-state setup. No rendered-console or interactive-keystroke proof. No-spend billing case; larger fan-outs untested.", "href": "/evidence/phase-hosted-prod" }, { "id": "gate-browser-console-prod", "title": "Customer-facing hosted service checks", "text": "On 8 September 2026, six production-hosted assertions passed for synthetic tenants. The check covered authenticated account data, onboarding redirection, write-only credential submission, an authorized session fork, attachment negotiation and billing displays. An unrelated real tenant remained unchanged. Limits matter: the credential was synthetic, the paid state was simulated, attachment covered the handshake rather than an interactive session, and the billing account had no spend. The rendered console and larger fork fan-outs were not verified.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenants, key and paid-state setup. No rendered-console or interactive-keystroke proof. No-spend billing case; larger fan-outs untested.", "href": "/evidence/phase-hosted-prod" }, { "id": "gate-byok-prod", "title": "Customer-facing hosted service checks", "text": "On 8 September 2026, six production-hosted assertions passed for synthetic tenants. The check covered authenticated account data, onboarding redirection, write-only credential submission, an authorized session fork, attachment negotiation and billing displays. An unrelated real tenant remained unchanged. Limits matter: the credential was synthetic, the paid state was simulated, attachment covered the handshake rather than an interactive session, and the billing account had no spend. The rendered console and larger fork fan-outs were not verified.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenants, key and paid-state setup. No rendered-console or interactive-keystroke proof. No-spend billing case; larger fan-outs untested.", "href": "/evidence/phase-hosted-prod" }, { "id": "gate-fork-prod", "title": "Customer-facing hosted service checks", "text": "On 8 September 2026, six production-hosted assertions passed for synthetic tenants. The check covered authenticated account data, onboarding redirection, write-only credential submission, an authorized session fork, attachment negotiation and billing displays. An unrelated real tenant remained unchanged. Limits matter: the credential was synthetic, the paid state was simulated, attachment covered the handshake rather than an interactive session, and the billing account had no spend. The rendered console and larger fork fan-outs were not verified.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenants, key and paid-state setup. No rendered-console or interactive-keystroke proof. No-spend billing case; larger fan-outs untested.", "href": "/evidence/phase-hosted-prod" }, { "id": "gate-hosted-attach-prod", "title": "Customer-facing hosted service checks", "text": "On 8 September 2026, six production-hosted assertions passed for synthetic tenants. The check covered authenticated account data, onboarding redirection, write-only credential submission, an authorized session fork, attachment negotiation and billing displays. An unrelated real tenant remained unchanged. Limits matter: the credential was synthetic, the paid state was simulated, attachment covered the handshake rather than an interactive session, and the billing account had no spend. The rendered console and larger fork fan-outs were not verified.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenants, key and paid-state setup. No rendered-console or interactive-keystroke proof. No-spend billing case; larger fan-outs untested.", "href": "/evidence/phase-hosted-prod" }, { "id": "gate-billing-ledger-prod", "title": "Customer-facing hosted service checks", "text": "On 8 September 2026, six production-hosted assertions passed for synthetic tenants. The check covered authenticated account data, onboarding redirection, write-only credential submission, an authorized session fork, attachment negotiation and billing displays. An unrelated real tenant remained unchanged. Limits matter: the credential was synthetic, the paid state was simulated, attachment covered the handshake rather than an interactive session, and the billing account had no spend. The rendered console and larger fork fan-outs were not verified.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenants, key and paid-state setup. No rendered-console or interactive-keystroke proof. No-spend billing case; larger fan-outs untested.", "href": "/evidence/phase-hosted-prod" }, { "id": "gate-soak-3", "title": "Encrypted checkpoint soak: one checkpoint missed", "text": "The encrypted soak failed because one expected checkpoint was missed. The later rerun is a separate record; this failed result stays visible. The run completed in September 2026 and was sealed as failed on 8 September. On the encrypted hosted configuration, a six-hour segment restored its hours-old state and stayed within the other measured durability limits, but only 71 of 72 checkpoints completed because one snapshot exceeded its deadline. The record therefore remains failed. A later amendment points to a successful rerun completed on 19 September; that result belongs to the separate rerun and does not erase this defect or its original outcome.", "status": "red", "date": "2026-09-08", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "71/72 failure preserved. Run transcript dated 7 September; failed seal dated 8 September. Later supersession is not a revised original pass.", "href": "/evidence/phase-soak-3" }, { "id": "gate-er-1d", "title": "Deleted credentials stay unreadable in the tested backup", "text": "The credential-erasure record dated 8 September 2026 reports three passing hosted test assertions. A database backup recovered the test credential before account deletion but could not afterward, even with the master key retained. A negative control confirmed that destroying the account key was necessary. The base test required older entries to be rewritten; an appended production section dated 7 September reports migrating and verifying all four existing entries. Erasure protection depends on keeping account keys outside the database backup set. The record does not establish later deployments or independent copies of those keys.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Separate account-key custody and exclusion from the database backup set are required. Base test and production migration appendix are distinct evidence. Later deployments and independent key copies are outside this record.", "href": "/evidence/phase-er-1d" }, { "id": "gate-er-1c-prod", "title": "Deletion verified on the running hosted service", "text": "On 8 September 2026, three production-hosted assertions passed for deletion of a synthetic tenant. The customer-facing deletion operation destroyed checkpoint access, removed stored provider credentials and removed the account identity without affecting another tenant. A copied checkpoint was unrecoverable under the stated key-management conditions. The fix was deployed during this work; the result applies from that deployment, not earlier builds. The copy was made for the test because no scheduled checkpoint-store backup existed.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Synthetic tenant. Attests only from the corrected deployment onward. Test-made backup copy; no scheduled checkpoint-store backup.", "href": "/evidence/phase-er-1c-prod" }, { "id": "gate-er-1d-prod", "title": "Credential erasure protection enabled in production", "text": "The production record dated 8 September 2026 reports enablement on 7 September. Its single assertion passed: all four existing credential entries were migrated to per-account protection and verified to require their account keys rather than the master key alone; a live model request still succeeded. This supports the reported migration at that time. Credential erasure depends on keeping account keys outside the database backup set. The record does not certify later entries, later deployments or independent copies of key material.", "status": "green", "date": "8 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Erasure depends on account keys being excluded from database backups. Historical migration result, not continuing certification. 8 September record date differs from 7 September reported enablement.", "href": "/evidence/phase-er-1d-prod" }, { "id": "gate-soak-2", "title": "Reissued six-hour checkpoint evidence", "text": "The reissued record spans the 31 August 2026 release and 7 September test evidence. It preserves the original hosted segment’s failure to reach 72 checkpoints: only 68 were recorded, although recovery of old state and bounded memory passed. A later run using the corrected driver reached 72 checkpoints across its own six hours and restored the earlier checkpoint. Reissue did not turn the first result into a pass. This is evidence for two identified test segments, not a guarantee for every workload or current release.", "status": "green", "date": "31 August 2026", "scope": "Historical evidence; the scope and environment are described in the recorded result.", "limitation": "Original failed segment retained. Later corrected run is separate. Record spans release and run dates.", "href": "/evidence/phase-soak-2-reissued" }, { "id": "gate-1b-1", "title": "Historical opt-in encrypted-record test", "text": "On 7 September 2026, an engine test on hosted hardware verified that an opted-in session produced an encrypted transcript readable with the customer’s key, while an opted-out session produced no transcript in the record subsystem. Alteration of a recorded entry was detected. This record explicitly says the feature was not enabled in production. The separate, bounded response-replay cache is outside the transcript subsystem, so the opt-out result is not a claim that no response bytes can exist anywhere. Production enablement requires separately reviewed privacy disclosures and evidence.", "status": "green", "date": "7 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Not enabled in production in this record Replay cache outside recording subsystem Engine test, not current deployment proof", "href": "/evidence/phase-1b-1" }, { "id": "gate-er-1c", "title": "Deletion fails closed when erasure cannot be confirmed", "text": "On 7 September 2026, four assertions passed using production binaries with disposable data. The customer deletion path removed credentials and made checkpoint data unrecoverable through the tested backup-recovery path. It did not report deletion if key destruction could not be confirmed. A second tenant remained restorable. Production services were not changed by this test; it exercised their deletion code in isolation. Recovery protection depends on keys being excluded from the restored backup.", "status": "green", "date": "7 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Disposable data; production daemons untouched. Backup/key separation is required.", "href": "/evidence/phase-er-1c" }, { "id": "gate-email-prod", "title": "Production transactional email sending check", "text": "On 9 September 2026, a production transactional-email check recorded a green result. The provider reported the sending domain authenticated, a DMARC policy was present in public DNS, and the deployed service’s message was accepted by the mail provider. The check did not independently derive every DNS authentication record or measure inbox placement. It did not establish delivery to a subscriber list; subscriber fan-out and an unsubscribe route were absent in this record.", "status": "green", "date": "9 September 2026", "scope": "Historical record; any production observation is limited to the dated test described below.", "limitation": "Provider authentication-state reporting, not independent DNS derivation. No inbox-placement or subscriber-delivery proof. Subscriber fan-out and unsubscribe route absent.", "href": "/evidence/phase-email-prod" } ] } ], "currentDeployment": "Not independently verified by this historical evidence.", "canonical": "/evidence/gates-current-2026-09-10" }