{
  "schema_version": "mentaview.public-mvp-local-progress/v1",
  "stage_id": "grounded-pilot-local",
  "reported_at": "2026-09-14",
  "status": "passed-runtime-local",
  "evidence_scope": "local-engineering",
  "step_name": "Combined grounded runtime verified locally; browser qualification pending",
  "attribution": "The combined S3/S4/S5 runtime passed 821 distinct tests, strict Clippy and its Linux server build on exact commit 497faeb8. This is local runtime qualification; the independent browser result, public activation and release CI remain separate.",
  "counting_boundary": "The 821 distinct tests belong to this exact combined run. The ten public PostgreSQL tests were initially ignored in the ordinary server suite and then executed individually; count each once. Inventory listing is not execution. Prior Cedar criteria, UI observations and the 33 simulated PITR diagnostics tests are separate and must not be added to this count.",
  "unique_test_total": null,
  "distinct_tests_passed_in_this_run": 821,
  "source_boundary": {
    "baseline_revision": "0cd398e",
    "source_commit": "497faeb8bed27c2c2f98079d8817b07a0dae5097",
    "source_is_exact_commit": true,
    "baseline_runtime_files": 478,
    "current_runtime_files": 487,
    "source_inventory_sha256": "2195e5eac6fd982781abc4e885ad3210aa21593a48b60bf828581cd2f498ffd7",
    "source_manifest_sha256": "77ee864799f33c7cbcf495f78e5d1c3bb9643b03255ca3ee468412e7e85bbb69",
    "source_files_verified_before_and_after": 2141,
    "source_overlay_sha256": "12fd0c141c5d8bb8c9d6cfdd1d8d0d486d509631aa09b97944c76b42fa8e70ed",
    "s3_included": true,
    "scope": "Exact commit 497faeb8 combines the S5 baseline and reviewed S3 fixes. Its qualification verified 2141 source files before and after; the current guard checks all 487 runtime/Cargo files. Exactly two production files and one test module changed, with nine active tests added. The M3 public include is retained and the old kb diagnostic overlay is excluded. Later S7 Python/workflow and site/documentation changes are outside this tested Rust snapshot."
  },
  "suites": [
    {
      "id": "answer",
      "label": "Answer suite",
      "tests_passed": 86,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally on exact combined runtime",
      "scope": "Full Answer tests for the combined source."
    },
    {
      "id": "kernel",
      "label": "Kernel library",
      "tests_passed": 533,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally on exact combined runtime",
      "scope": "Kernel regressions, including the active grounding and public-processing tests."
    },
    {
      "id": "domain",
      "label": "Domain library",
      "tests_passed": 20,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally on exact combined runtime",
      "scope": "Domain library tests on the same source."
    },
    {
      "id": "server-ordinary",
      "label": "Server ordinary library",
      "tests_passed": 169,
      "tests_failed": 0,
      "tests_ignored": 18,
      "status": "Passed locally on exact combined runtime",
      "scope": "Eighteen tests were initially ignored. Ten public PostgreSQL cases were then run separately; eight historical tests were not executed here. Separate PostgreSQL, attested sidecar and environment gates, including media/hardware requirements, are not all cleared."
    },
    {
      "id": "grounding-postgresql",
      "label": "Grounding HTTP with PostgreSQL",
      "tests_passed": 1,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally on exact combined runtime",
      "scope": "One exact HTTP grounding test with real PostgreSQL and a synthetic loopback provider; no actual model."
    },
    {
      "id": "memory-postgresql",
      "label": "Guest-memory HTTP with PostgreSQL",
      "tests_passed": 1,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally on exact combined runtime",
      "scope": "One real PostgreSQL guest-memory test on the combined runtime."
    },
    {
      "id": "document-postgresql",
      "label": "Document-upload HTTP with PostgreSQL",
      "tests_passed": 1,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally on exact combined runtime",
      "scope": "One real PostgreSQL native TXT/table upload test; no PDF/OCR, ANN, performance or model-reply qualification."
    },
    {
      "id": "public-postgresql",
      "label": "Public-authorization PostgreSQL gates",
      "tests_passed": 10,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally on exact combined runtime",
      "scope": "Ten compiled inventory cases executed individually against fresh owned PostgreSQL databases and fixture roles. Inventory discovery alone is not a test pass."
    }
  ],
  "runtime_qualification": {
    "status": "passed-locally",
    "strict_clippy": "PASS",
    "build_status": "passed",
    "binary_platform": "linux-x86_64",
    "binary_sha256": "09c1e7b28ba334218b30a8afcc6e12a0698dcbdde62d8decf9806638f51913ea",
    "remaining_historical_ignored_tests": 8,
    "owned_databases_absent": 13,
    "owned_fixture_roles_absent": 10,
    "results_sha256": "8eae7a838b90d0c34015e1c5fedcb5497926039560d16aeaa7a2674fc750ff47",
    "source_build_sha256": "0a1e90bb2896ae6d6c383939209e6ebbe7abf8f1a08da1f795c8906cb9d9ee31",
    "command_evidence_sha256": "da4f381814de6ceaffc6d8892b29f0a9a1aab483a375a21ff6bbdde4bc877a62",
    "scope": "Strict Clippy passed with all features and all targets for Answer, kernel and server, denying warnings with exactly the three historical allowances. The default Linux x86-64 server build passed. All 13 owned databases and 10 fixture roles were confirmed absent; 214 prior artifacts remained unchanged. These results do not establish a live backend, provider or browser/model execution."
  },
  "local_consent": {
    "included": true,
    "scope": "Explicit consent is required for each public-processing turn, covering the whole conversation and authorized context, including history, summaries, memories, claims and retrieved text. PublicStrict treatment is mandatory; it is not an anonymity guarantee and may reduce detail.",
    "retention": "Retention is checked for the configured host account: verified none or explicitly acknowledged limited retention. Unknown retention is blocked; no universal provider no-retention claim is made.",
    "dispatch": "Creating an offer does not call a provider or decrypt a credential. Authorization is persisted before provider discovery and dispatch; replay does not dispatch again. A new turn needs fresh consent, and expired, revoked or mismatched offers fail closed."
  },
  "prior_s3": {
    "evidence_scope": "separate-prior-local-composition",
    "source": {
      "baseline_commit": "7f626d944f89d2562b0769a3f5ad7e763a1e8b4e",
      "composition": "M3 base plus five reviewed S3 fixes; no S4/S5 runtime overlay",
      "release_exact_commit": false,
      "source_manifest_sha256": "148ef5975084958fac24c75027acc5b023251580248ccf9d03df23859fe56dae",
      "binary_sha256": "ccdfef447438d443f7f7628e90ee4b1ee69627515d8aa7b5eeea7d2c199c14c4"
    },
    "cedar07": {
      "status": "passed-locally",
      "distinct_tests_passed": 640,
      "strict_clippy": "PASS",
      "counts_apply_to_combined_candidate": false
    },
    "cedar03": {
      "status": "passed-bounded-synthetic-local",
      "first_turn_checks_passed": 14,
      "first_turn_checks_total": 14,
      "replay_checks_passed": 5,
      "replay_checks_total": 5,
      "model": "qwen2.5:1.5b",
      "model_digest": "65ec06548149b04c096a120e4a6da9d4017ea809c91734ea5631e89f96ddc57b",
      "generation_calls": 1,
      "replay_observed_requests": 0,
      "replay_observation_scope": "isolated-configured-ollama-http-observer"
    },
    "evidence_sha256": {
      "cedar07_final_results": "e7283914055637e1afb50fd78ae063ccd9fabff8bb4996c4437ca3544908e857",
      "cedar03_execution_summary": "bb8a0b60b539c3318613c2ad54600e1fc4df6bd6100225f960b06b2fc5e3b535",
      "report04": "d827f1148f69f110e99b1711d1a5f08f614305db0ae9332fc75b70daffd8deb6"
    },
    "earlier_failures_preserved": true,
    "scope": "Cedar07 qualified its separate S3 composition with 640 distinct tests and strict Clippy. Cedar03 passed 14 first-turn criteria and 5 replay criteria for one synthetic question with one actual local Qwen generation; zero replay requests were observed at its isolated Ollama HTTP observer. These are separate observations, not a new unique test total. They do not qualify the combined candidate or its browser."
  },
  "combined_browser": {
    "status": "pending",
    "cases_passed": null,
    "source_inventory_sha256": null,
    "backend_kind": null,
    "model_executed": null,
    "scope": "Independent browser qualification for the combined candidate is pending. No browser pass, Chrome-exit proof or combined model reply is claimed from the earlier harness preparation. Prior Cedar03 is a separate local trial, not this candidate's browser evidence."
  },
  "pitr_diagnostics": {
    "status": "passed-mocks-only",
    "tests_passed": 33,
    "tests_failed": 0,
    "previous_tests_passed": 32,
    "previous_proof_preserved": true,
    "actual_physical_pitr_qualified": false,
    "integrated_workflow_qualified_by_mocks": false,
    "known_generated_secret_writer_guard": "fixed-and-covered-by-one-focused-negative-test",
    "qualified_python_sources": [
      {
        "path": "deploy/on-prem/postgres-pitr/pitr_drill.py",
        "sha256": "191c923130de5453f0d8c940098a735e2090ad392b919252d6622f1170242406"
      },
      {
        "path": "deploy/on-prem/postgres-pitr/test_pitr_drill.py",
        "sha256": "98144fe6a3f5a3c2e2475a23fb8261725e50603c1530c12f6c1eb36f2f2e9cf7"
      }
    ],
    "evidence_sha256": {
      "pilot-pitr-diagnostics-01-results-20260914.json": "33c0d023f6d899d577adaaf7f12cd53194e2d82b258a8d3512873a87d55a3c37",
      "pilot-pitr-diagnostics-01-log-20260914.txt": "2c19aacd058007dc933301f4b3eb6bdaff5a427de9388716c081d601fee88903",
      "pilot-pitr-diagnostics-02-results-20260914.json": "360ff917430b8a8023e3a1e7bee0ed2d61eb1935791b6abbb3efb09241d783a4",
      "pilot-pitr-diagnostics-02-log-20260914.txt": "208958691fb1651898d92327adc4da98cc78d6a8b500f08255a409ccc3be6537"
    },
    "scope": "Thirty-three simulated diagnostics tests passed, including a focused negative test for the known generated-secret writer guard. The earlier 32-test proof remains preserved. These mocks do not establish a new physical PostgreSQL PITR success or qualify the integrated release workflow."
  },
  "pending_checks": [
    "Independent combined browser qualification remains pending; no actual model or browser was executed in the 821-test runtime qualification.",
    "Eight historical server tests remain unexecuted here. Broader environment, hardware, attested sidecar and separate PostgreSQL requirements remain; S4/S5 corpus and performance acceptance are not closed by this result.",
    "Both M4 CI attempts failed. Attempt 2 observed disk exhaustion before PITR failed; exact Docker stderr remains unavailable. CI for the reviewed step-order change is pending. The 33 diagnostics mocks do not establish a new physical PITR success. Publication-commit CI, Firebase provenance and public hosted-backend qualification remain separate."
  ],
  "public_activation": {
    "status": "HOLD",
    "canonical_openai_byok_status": "blocked",
    "backend_gcp_target_status": "unconfirmed",
    "public_backend_qualified": false,
    "provider_qualified": false,
    "default_public_hold": {
      "implemented": true,
      "before_discovery": true,
      "before_dispatch": true,
      "capability_inference": false,
      "http_status": 503
    },
    "blockers": [
      "Public activation stays on HOLD before provider discovery and dispatch.",
      "No hosted backend or public provider is qualified; the backend GCP target remains unconfirmed.",
      "Local test/build evidence and static Firebase publication do not establish external certification, MVP readiness or a qualified public pilot."
    ]
  },
  "truth_boundary": {
    "public_backend_qualified": false,
    "external_certification": false,
    "mvp_ready": false,
    "m4_minus_modules": 11,
    "m5_promotions": 0,
    "historical_p95_status": "FAIL",
    "s4_closed": false,
    "s5_closed": false,
    "statement": "Engineering evidence is not external certification. This prepares evidence for future assurance work. All eleven modules remain at the M4− internal-laboratory boundary, with zero M5 promotions and historical p95 FAIL limits unchanged. No public provider, hosted backend, MVP readiness or S4/S5 closure is claimed."
  },
  "release_status": {
    "canonical_site_milestone": "M3",
    "m4_ci": {
      "pull_request": 24,
      "source_commit": "fee82bc00539520f8c730648ba443804c6d21d1b",
      "status": "failed",
      "attempts": [
        {
          "attempt": 1,
          "run_id": "34794393993",
          "status": "failed",
          "failed_gates": [
            "physical-postgresql-pitr-drill",
            "downstream-artifact-assembly"
          ]
        },
        {
          "attempt": 2,
          "run_id": "34794393993",
          "source_commit": "fee82bc00539520f8c730648ba443804c6d21d1b",
          "same_source": true,
          "status": "failed",
          "completed_at": "2026-09-14T02:31:09Z",
          "failed_gates": [
            "physical-postgresql-pitr-drill",
            "downstream-artifact-assembly"
          ],
          "artifact_id": "10330966008",
          "artifact_sha256": "9f82536219bc32a189a594112f3ad96074d5af695743a84f171d2220bd2401c5"
        }
      ],
      "root_cause_status": "unresolved-original-stderr-discarded",
      "fix_claimed": false,
      "transient_failure_claimed": false,
      "third_blind_rerun_planned": false,
      "disk_observation": {
        "reported_free_space_mb": 7,
        "observed_at": "2026-09-14T02:31:06.4237898Z",
        "physical_pitr_failure_at": "2026-09-14T02:31:09.3764798Z",
        "status": "disk-exhaustion-observed",
        "exact_docker_failure_mechanism": "unknown",
        "evidence_sha256": "4bf939ca063bf7bec05ea41f03c7235dc61fdd6eb69a80f49310b6454790eb00"
      },
      "candidate_ordering": {
        "status": "applied-ci-pending",
        "change": "Unchanged final shared-target Rust holdouts and owned Cargo cache cleanup moved before both PostgreSQL recovery drills.",
        "all_steps_and_bodies_preserved": true,
        "shared_target_commands_after_cleanup": 0,
        "actual_candidate_ci": "pending",
        "physical_pitr_success_claimed": false
      }
    },
    "prior_upload_milestone_ci_status": "running-independently",
    "scope": "Both M4 CI attempts failed at the physical PostgreSQL PITR Docker run and downstream artifact assembly. Attempt 2 reported only 7 MB free at 02:31:06 UTC before failing at 02:31:09 on 14 September. Disk exhaustion was observed; the discarded Docker stderr leaves the exact failure mechanism unresolved. The candidate moves unchanged final Rust holdouts and owned Cargo cache cleanup before both recovery drills, retaining every step and body; its CI remains pending. No verified fix, transient-failure explanation or new physical PITR success is claimed. The canonical site remains M3 and the preceding upload milestone's CI runs independently."
  }
}