{
  "schema_version": "mentaview.public-mvp-local-progress/v1",
  "stage_id": "document-upload-local",
  "step_name": "Native TXT/table upload verified locally; public activation pending",
  "reported_at": "2026-09-14",
  "status": "passed-targeted-local",
  "evidence_scope": "local-engineering",
  "attribution": "One document-upload HTTP test passed with real PostgreSQL, and strict server Clippy passed on the same M4 runtime plus one new test. This qualifies only the stated local TXT/table path; release CI and public activation remain separate.",
  "counting_boundary": "One targeted PostgreSQL test is reported here. Clippy is a separate static check. Prior UI suites and later helper fixtures are separate observations, not additional document-upload executions or a unique test total.",
  "unique_test_total": null,
  "source_boundary": {
    "baseline_commit": "fee82bc00539520f8c730648ba443804c6d21d1b",
    "composition": "Exact M4 fee82bc archive plus only frozen S5 guest document HTTP test and qualification doc; production equals M4; no S3/S4 diagnostic overlays",
    "baseline_runtime_inventory_sha256": "662842c9ce96b44add20bd113d1a170b7acede650f6a7e63d862d2ad94cb29a2",
    "baseline_runtime_files": 477,
    "runtime_source_files_guarded": 478,
    "added_test_sha256": "da49d527f565873ba9dc699d4f25b03bfc53beff559c75405a1bfe2e3f8ca7ca",
    "source_manifest_sha256": "c0e938d907c03a495836cd3ce3372fa39f1467e7e1a622fe6b385311d9f72df6",
    "source_files_verified_before_and_after": 2107,
    "production_unchanged": true,
    "s3_included": false,
    "scope": "Exact M4 fee82bc plus one new document-upload test; production runtime and UI are unchanged. Qualification verified 2107 source files before and after. The current guard retains all 477 M4 runtime/Cargo hashes and authorizes only the one pinned test addition, for 478 files. The later CI helper patch and reviewed documentation are outside this tested runtime composition. No S3 fix is included."
  },
  "suites": [
    {
      "id": "document-upload-postgresql",
      "label": "Native TXT/table upload with PostgreSQL",
      "tests_passed": 1,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally; real PostgreSQL 17.11",
      "scope": "One 126-byte synthetic UTF-8 TXT table: Base64/checksum upload, ready state, source catalogue and retrieval with headers and row in the same excerpt, durable reread through a new pool/AppState, user/tenant isolation and CSRF/Origin/checksum rejections. No model call."
    }
  ],
  "local_qualification": {
    "postgresql": {
      "status": "passed",
      "tests_passed": 1,
      "tests_failed": 0,
      "tests_ignored": 0,
      "version": "17.11",
      "final_results_sha256": "b7acfc3decddf264df6f7844f961fcbffb710162be85dad62626c99c1edaf441",
      "log_sha256": "a8c3c3f50c1395523825e4cca1b952e57989d84cbf2be5bfae707ead78bb519c",
      "remaining_owned_databases": 0
    },
    "server_strict_clippy": {
      "status": "passed",
      "all_features": true,
      "all_targets": true,
      "deny_warnings": true,
      "historical_allowed_lints": [
        "clippy::too_many_arguments",
        "clippy::type_complexity",
        "clippy::items_after_test_module"
      ],
      "additional_allowed_lints": [],
      "log_sha256": "89e34763e23432e7b3e7f14ab4fabe40f9c02679835c9815e7ba768b32f82f8a"
    },
    "scope": "Strict server Clippy passed with all features and all targets, denying warnings with exactly the three historical allowances. The owned test database was removed and its absence independently verified."
  },
  "document_upload_scope": "A single native TXT table passed upload, checksum, ready-state, source-catalogue and retrieval checks. The retrieved excerpt contains both headers and its row. Durability uses a new PostgreSQL pool and application state, not a database-process restart. API user/tenant isolation is covered; this is not a new restricted-SQL-role RLS qualification. No OCR, PDF, scans, long-document corpus, ANN, reranking, performance measurement or final model reply is qualified. S5 remains open.",
  "fixture": {
    "format": "native-txt-table",
    "bytes": 126,
    "sha256": "1b1b8b6279bdef41430b8709e060da179418aa3725faa96654940d7244b460db",
    "retrieval_route": "full_document",
    "ann_passes": 0,
    "embedding_model": "none:complete-small-document"
  },
  "previous_failed_attempt": {
    "status": "FAILED",
    "preserved": true,
    "test_sha256": "51cc4cdb0e6b535cf56b5c8a617366c673ad21bfc6c871b3678a6a08ae42daeb",
    "final_results_sha256": "6505cc6df5ba338fc24c425389f0bfbe0f4a3424254893a0fb51d5868f4935f5",
    "log_sha256": "3c77aac85f02c8746e248b4034151e989811b1046dc05e271970eb28a7989d52",
    "runtime_fix": false,
    "scope": "The first test expected none; the existing M4 contract returned none:complete-small-document. Only that expected literal was corrected. The failed proof is preserved and no runtime repair is claimed."
  },
  "prior_ui": {
    "public_evidence_url": "/evidence/mvp-guest-memory-local-receipt.json",
    "unchanged": true,
    "rerun_for_document_upload": false,
    "scope": "The M4 UI assets are unchanged. Their 26/45 Node and 10/12 Chrome observations remain in the historical guest-memory receipt; no new browser execution is claimed."
  },
  "helper_followup": {
    "status": "execution-pending",
    "runtime_helper_executed": false,
    "applied_after_qualification": true,
    "fixture_methods_passed": 11,
    "mock_processes": 60,
    "node_memory_tests_passed": 26,
    "scope": "The later helper/workflow/fixture patch passed 11 fixture methods with 60 mocked processes and a separate 26-test Node memory source suite, in the reported engineering checks. This helper revision has not yet executed against the runtime. M4 already ran guest-memory PostgreSQL in its mandatory broad loop; the follow-up moves it into the inventory-bound helper and adds the Node memory gate."
  },
  "local_consent": {
    "included": true,
    "scope": "Explicit consent is required for each public-processing turn, covering the whole conversation and authorized context, including history, summaries, memories, claims and retrieved text. PublicStrict treatment is mandatory; it is not an anonymity guarantee and may reduce detail.",
    "retention": "Retention is checked for the configured host account: verified none or explicitly acknowledged limited retention. Unknown retention is blocked; no universal provider no-retention claim is made.",
    "dispatch": "Creating an offer does not call a provider or decrypt a credential. Authorization is persisted before provider discovery and dispatch; replay does not dispatch again. A new turn needs fresh consent, and expired, revoked or mismatched offers fail closed."
  },
  "real_model_trial": {
    "status": "separate S3 locally qualified; not included in S5",
    "s5_model_reply_qualified": false,
    "s3_included": false,
    "cedar02_status": "FAIL",
    "v4_negative_status": "FAIL",
    "v5_status": "locally-qualified",
    "separate_source": {
      "baseline_commit": "7f626d944f89d2562b0769a3f5ad7e763a1e8b4e",
      "composition": "M3 base plus five reviewed S3 fixes; no S4/S5 runtime overlay",
      "release_exact_commit": false,
      "source_manifest_sha256": "148ef5975084958fac24c75027acc5b023251580248ccf9d03df23859fe56dae",
      "binary_sha256": "ccdfef447438d443f7f7628e90ee4b1ee69627515d8aa7b5eeea7d2c199c14c4"
    },
    "cedar03": {
      "status": "passed-bounded-synthetic-local",
      "first_turn_checks_passed": 14,
      "first_turn_checks_total": 14,
      "replay_checks_passed": 5,
      "replay_checks_total": 5,
      "model": "qwen2.5:1.5b",
      "model_digest": "65ec06548149b04c096a120e4a6da9d4017ea809c91734ea5631e89f96ddc57b",
      "generation_calls": 1,
      "replay_observed_requests": 0,
      "replay_observation_scope": "isolated-configured-ollama-http-observer"
    },
    "evidence_sha256": {
      "cedar07_final_results": "e7283914055637e1afb50fd78ae063ccd9fabff8bb4996c4437ca3544908e857",
      "cedar03_execution_summary": "bb8a0b60b539c3318613c2ad54600e1fc4df6bd6100225f960b06b2fc5e3b535",
      "report04": "d827f1148f69f110e99b1711d1a5f08f614305db0ae9332fc75b70daffd8deb6"
    },
    "scope": "Separate S3 V5 is locally qualified. Cedar03 passed 14 first-turn checks and 5 replay checks for one synthetic fact/question, with one actual qwen2.5:1.5b generation. Zero replay requests were observed at the isolated configured Ollama HTTP observer; this is not a claim about all host traffic. Earlier Cedar02 and V4 failures remain preserved. This S3 composition is not included in S5: its runtime remains M4 plus the new upload test. The S5 upload result ends at retrieved evidence and does not qualify a model reply for this candidate."
  },
  "pending_checks": [
    "M4 PR24 CI attempt 1 (run 34794393993) failed at the physical PostgreSQL PITR drill and downstream artifact assembly. Attempt 2 is rerunning on the same fee82bc source and its result is pending; no fix or transient-failure explanation is established. S5 local PostgreSQL/Clippy results do not clear the failed gate; exact candidate release CI and publication remain outstanding.",
    "The revised mandatory helper has fixture coverage but no actual execution result yet. The existing guest-memory PostgreSQL broad-loop coverage is historical; separate PostgreSQL, attested sidecar and environment gates, including media/hardware requirements, are not all cleared.",
    "S5 still requires its wider authorized corpus, source/page ground truth, recovery and performance qualification. Separate S3 V5 and the bounded actual Cedar03 trial are locally qualified, but their code is not included in this S5 runtime; integration and qualification of the combined candidate remain pending."
  ],
  "public_activation": {
    "status": "HOLD",
    "canonical_openai_byok_status": "blocked",
    "backend_gcp_target_status": "unconfirmed",
    "public_backend_qualified": false,
    "provider_qualified": false,
    "default_public_hold": {
      "implemented": true,
      "before_discovery": true,
      "before_dispatch": true,
      "capability_inference": false,
      "http_status": 503
    },
    "blockers": [
      "No hosted document-upload backend, live external pilot or public provider is qualified by this local test.",
      "Public activation stays on HOLD before provider discovery and dispatch; backend GCP target remains unconfirmed.",
      "Static Firebase publication and local checks cannot establish a successful model reply, S5 closure or MVP readiness."
    ]
  },
  "truth_boundary": {
    "public_backend_qualified": false,
    "external_certification": false,
    "mvp_ready": false,
    "m5_promotions": 0,
    "historical_p95_status": "FAIL",
    "s5_closed": false,
    "statement": "Engineering evidence is not external certification. All eleven modules remain at the non-standard M4− internal-laboratory boundary, with zero M5 promotions. Historical p95 FAIL limits remain in force. This local TXT/table result does not close S5 or qualify a model reply, public provider, hosted backend or MVP readiness."
  }
}