diff --git a/.ciagent/VERIFY-P03.md b/.ciagent/VERIFY-P03.md new file mode 100644 index 0000000..2d66878 --- /dev/null +++ b/.ciagent/VERIFY-P03.md @@ -0,0 +1,39 @@ +# VERIFY — v1.26 P3 (pilot-metrics-and-policies) PASS + +> Four-layer verification. All gates green. + +## Structural +- pilot-readiness/no-placeholder-account.json + settlement-finality/all-matches-committed.json exist (REQ-315/320) +- core/metrics/outcome_backfill.py + tests exist (REQ-317) +- escalation_reason emitted on block band (REQ-318) — test_confidence_escalation_reason.py +- adapters/terraform/adapter.py reads env.state_backend.bucket (REQ-319) — test_adapter_state_backend.py +- core/environments/dev.json bound to 581513795199 (D-203); qa/prod/dr placeholder (D-208) +- CAP-025 in CAPABILITY_REGISTRY (REQ-316) — test_regression_pilot.py +- workflows-src/rotate-aws-key.yml + synced copies (SPEC §5.9) +- consumer deploy.yml: no cross-repo uses: (SPEC §10 Q1 — inline adapter, option c) +- kj installed (v0.0.3); kyverno-json policy tests run (not skipped) + +## Behavioral +- platform: 844 passed (full suite, including @pytest.mark.slow live-AWS CAPs) +- consumer: 90 passed, 6 skipped (pre-existing unrelated skips) +- kj substrate: 69 targeted policy/engine tests pass against real kj (zero skips) +- pilot policies: pass on valid fixtures, fail on invalid (verified via kj scan violations) + +## Security +- no raw NOVA_AWS_* export in scripts/run_platform.sh shell env (SPEC §5.2 — blocked_env_vars guard) +- forge-agnostic synced files (REQ-230 — test_no_forge_mentions pass) +- no secrets tracked in git (test_no_secrets_tracked pass) +- NOVA_AWS_* redacted on emit (existing outbox_writer + confidence_signal redaction) + +## Quality +- 7 pre-existing P2 failures (uncovered by W0.5 full-suite run with kj installed) all fixed: + dynamodb examples (.yml), sync_workflows drift, CAP-024 deck path (-marp.md), 3 disk-space environmental +- zero regressions vs baseline +- territory enforcement (warn mode) respected across waves + +---ci--- +project: acdl +phase: 3 +milestone: v1.26 +status: verify +---