{
  "schema_version": "mentaview.public-mvp-local-progress/v1",
  "stage_id": "public-processing-local",
  "step_name": "Public-processing consent verified locally; activation pending",
  "reported_at": "2026-09-14",
  "evidence_scope": "local-engineering",
  "attribution": "Reviewed local engineering results, with source-byte and receipt checks. These observations do not establish live functionality or independently certify the product.",
  "counting_boundary": "Separate suite observations may overlap or contain included subsets. Do not add them into a unique test total. An unspecified ignored count is not zero.",
  "unique_test_total": null,
  "source_boundary": {
    "integrated_source_commit": "951f797671caf9de600038f0fde30bf695c5c67f",
    "overlay_baseline_commit": "9ff8762cd680f2a025ae6ff0f19c778204ce666a",
    "verified_source_files": 105,
    "source_boundary_sha256": "5f9565d333a661452f8cc97da08cb060aff612a2420608e8ef68fad6a961365d",
    "release_exact_test_composition": false,
    "scope": "Kernel, SDK and server suites used explicit overlays on baseline 9ff8762. All 105 final server-boundary source files match integrated checkpoint 951f797; this byte match does not turn the earlier compositions into release-exact CI."
  },
  "suites": [
    {
      "id": "kernel-domain-regression",
      "label": "Kernel and domain regression",
      "tests_passed": 709,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally",
      "scope": "Linux composition over the canonical baseline; strict Clippy passed with the three historical allowances only."
    },
    {
      "id": "server-ordinary",
      "label": "Server ordinary suite",
      "tests_passed": 169,
      "tests_failed": 0,
      "tests_ignored": 18,
      "status": "Passed locally",
      "scope": "All-feature library suite and strict Clippy passed. The 18 ignored tests retain separate PostgreSQL, attested sidecar and environment gates, including media or hardware requirements; targeted passes do not clear every gate."
    },
    {
      "id": "sdk-http-tls",
      "label": "Rust SDK HTTP/TLS",
      "tests_passed": 44,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally",
      "scope": "44 tests and strict Clippy passed in the SDK overlay composition. The separately exercised 21 network-contract tests are an included subset, not an additional unique total."
    },
    {
      "id": "public-processing-postgresql",
      "label": "Public-processing PostgreSQL",
      "tests_passed": 10,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally",
      "scope": "Ten public policy, dispatch, replay, inventory and adversarial tests passed across initial, v2 and v3 runs using real PostgreSQL and synthetic provider exchanges."
    },
    {
      "id": "encrypted-credential-store",
      "label": "Encrypted credential store",
      "tests_passed": 21,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally",
      "scope": "Separate 21-test credential-store result; do not combine it with other suites as a unique count."
    },
    {
      "id": "turn-idempotency-http",
      "label": "Turn idempotency HTTP",
      "tests_passed": 2,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally",
      "scope": "Two separate local HTTP tests; no hosted-provider qualification."
    },
    {
      "id": "node-ui",
      "label": "M3 Node UI tests",
      "tests_passed": 45,
      "tests_failed": 0,
      "tests_ignored": 0,
      "status": "Passed locally",
      "scope": "45 tests on the M3 asset. The historical M2 asset and its 37 tests remain in their original receipt."
    },
    {
      "id": "browser-ui-local",
      "label": "M3 browser UI checks",
      "tests_passed": 12,
      "tests_failed": 0,
      "tests_ignored": null,
      "status": "Passed locally",
      "scope": "12 actual Chrome 152 headless cases on the same M3 asset, using loopback HTTPS and a synthetic backend. A local manual gate, separate from mandatory CI; not Rust, authentication or hosted-backend qualification."
    }
  ],
  "current_ui_evidence": {
    "asset_sha256": "215fcaed895623c86a6392a1f0a45ee6bbaef6dd723a1f1b4d055b74976ac669",
    "node_tests_passed": 45,
    "browser_cases_passed": 12,
    "browser_version": "152.0.7977.84",
    "playwright_version": "1.62.1",
    "browser_gate": "local-manual",
    "mandatory_github_browser_job": false,
    "environment": "loopback-https-synthetic-backend",
    "rust_qualified": false,
    "authentication_qualified": false,
    "hosted_backend_qualified": false
  },
  "api_contract": {
    "operations": 96,
    "paths": 83,
    "negative_fixtures": 43,
    "scope": "Static route/OpenAPI inventory and negative contract fixtures; not deployed API qualification."
  },
  "local_consent": {
    "included": true,
    "scope": "Explicit consent is required for each public-processing turn, covering the whole conversation and authorized context, including history, summaries, memories, claims and retrieved text. PublicStrict treatment is mandatory; it is not an anonymity guarantee and may reduce detail.",
    "retention": "Retention is checked for the configured host account: verified none or explicitly acknowledged limited retention. Unknown retention is blocked; no universal provider no-retention claim is made.",
    "dispatch": "Creating an offer does not call a provider or decrypt a credential. Authorization is persisted before provider discovery and dispatch; replay does not dispatch again. A new turn needs fresh consent, and expired, revoked or mismatched offers fail closed."
  },
  "integrated_helper_run": {
    "source_commit": "951f797671caf9de600038f0fde30bf695c5c67f",
    "expected_gates": 10,
    "status": "passed",
    "completed_result_recorded": true,
    "scope": "One actual invocation of the ten mandatory helper gates passed on the exact 951f797 archive. Ten public PostgreSQL cases each used a fresh database; all17 helper databases were removed. This local qualification does not replace final release CI or hosted deployment.",
    "helper_invocations": 1,
    "gates_passed": 10,
    "public_tests_discovered": 10,
    "public_tests_individually_executed": 10,
    "fresh_helper_databases": 17,
    "helper_databases_dropped": 17,
    "owned_databases_remaining": 0,
    "owned_public_roles_remaining": 0,
    "final_results_sha256": "ea7e54d56a8b4d9b94e81736a9ce022f31e5ceddc2b96388fef8fc9e1837b0e8",
    "helper_log_sha256": "7dae9639bd3eec8f68b6155c51667e3264382ed39af05373e2a498977fa2c84c",
    "gate_report_sha256": "b09e094451b0fc4d0b44d90e8b08e390eb1399860d1d828b3ac94245be0c1959",
    "public_report_sha256": "90755daf28ebc9df2a8ecaaa65bfb1c72fc3852e58ad045334bd598cce67d9dd"
  },
  "real_model_trial": {
    "status": "failed",
    "source_commit": "9ff8762cd680f2a025ae6ff0f19c778204ce666a",
    "provider": "local Ollama",
    "scope": "A separate real-model trial used the earlier runtime baseline, not this M3 checkpoint. A documented kb:// reference was accepted by UTF-8 ingress but refused by the Answer evidence contract; the published answer abstained. No successful end-to-end model result or replay is established. A correction belongs to separate work.",
    "successful_end_to_end_model_qualified": false
  },
  "pending_checks": [
    "Full release CI on the final candidate commit remains required.",
    "Canonical Firebase publication remains pending final release qualification."
  ],
  "public_activation": {
    "status": "HOLD",
    "canonical_openai_byok_status": "blocked",
    "backend_gcp_target_status": "unconfirmed",
    "successor_consent_kernel_included": true,
    "public_backend_qualified": false,
    "provider_qualified": false,
    "blockers": [
      "Public consent is implemented and verified locally. Public activation remains pending; the default public route stays held before provider discovery and dispatch, with inference capability false and a specific HTTP 503 response.",
      "Public provider and Google Cloud backend qualification are still absent. No live invitation pilot endpoint is established by these tests.",
      "The separate real Ollama trial failed the published-answer criterion. A fix and a successful retest are not included in this checkpoint."
    ],
    "default_public_hold": {
      "implemented": true,
      "before_discovery": true,
      "before_dispatch": true,
      "capability_inference": false,
      "http_status": 503
    }
  },
  "truth_boundary": {
    "public_backend_qualified": false,
    "external_certification": false,
    "mvp_ready": false,
    "m5_promotions": 0,
    "historical_p95_status": "FAIL",
    "statement": "Engineering evidence is not external certification. All eleven modules remain at the non-standard M4\u2212 internal-laboratory boundary, with zero M5 promotions. Historical p95 FAIL limits remain in force. Local consent, static Hosting and synthetic provider exchanges do not establish public backend qualification, successful end-to-end model execution or MVP readiness."
  }
}