Description
Owner treats appKey and collect endpoints as public ingest values, but all details are dropped. Exact viewer metadata and None-reader sufficiency need proof. Owner decision GCI-0041 (product read scope approval) is conditional future authority, not a customer grant or loop9 implementation admission. Packet 4 in codex/loop9-evidence/L-fam/packets.md (sha256 e46afeb70fca8cd53ee0843c898c810a80cc05bc4238db02d8df2c6310eac6ad) holds exact routes/pairs, exclusions and outstanding witnesses.
Acceptance Criteria
- #1 Fresh authorised dev evidence establishes exact action/scope pairs, permitted route/method and complete count visibility, or records the precise blocker without widening authority
- #2 Any implemented source emits counts and bounded enums only; sensitive sentinels are absent from payloads, logs, errors and persisted envelopes; unavailable coverage remains absent
- #3 Any implementation follows fresh inventory, exact selected read boundaries and offline public-boundary proofs with final just check and hosted CI; conditional blockers in the packet are resolved before build
Definition of Done
- #1 just test
- #2 just tf-validate
- #3 just check-identifiers and just no-em-dashes both return clean
Implementation Plan
R-wit loop10 on robk only: verified current declared viewer metadata; isolate exact apps-read+plugin pairs on basic-None, GET projected app list versus Admin, count/shape/transient population match, teardown token/role/SA by IDs. No sourcemap grant or customer action.
Loop10 a1 familyimplementation nowadmitted afterIRMlandedgreen/securityPASS; root frozenpacket web/mobile/unknown enum frominstalledmodule, defaultofffaro-apps/T2 exact2pairs/exactGET/noextraquery. Samefamilymechanicalgoldenretirement literalunion+budget/inputfreshness integration; own gate/CR/CI toterminal ifpushgranted.
Implementation Notes
Loop10 fresh robk exact apps-read empty scope plus plugin access basic-None witness: reader/Admin both200, count2, transient ID populations equal, shape keysets retained without values. SA61/roleeg00uo8hfi8sga/token71 deleted in token-role-SA order,200/404readbacks and postlists absence. No sourcemap or customer grant; family build waits serial preceding IRM lane.
Loop10a1 landed3fae7cc23be867334c648cd2d1345563b3915d6e CI37046324314success; gate1768pass2skips8248subtests/CRcomplete21zero; realT2->source->compose->S3/panel/defaultoff/privacy/typedcounts/retainedoptional sourceproved. Initialdevelopmentfullsuite mechanicalliteralretirementexpectedmismatch fixedwithinexplicitownedpre-final scope; no finalgatefailurea2/retry claimed, infra0. Independentpostlandingsecurityreview pending beforeDone.
Independent follow-on wire-edge reproduction shows validHTTP206 treated as available by existing source. Review-repairr1 now reserved to requireHTTP200, with extended existing failure/public-boundary proof. No route/permission/fixture/transport changes; candidate-only while PDC lands, final gate/review/CI and focused independent verification owed.
Finaldiff/CR/exactCI remain verified, but root discovered explicit no-symlink lane environment rule. Acceptance reopened until same exact921279f code gets justcheck from genuine local justsetup .venv, not linkedrootenv. Environment correction1 within existingr1; no newcode/CR/CI/push required, original deviation retained.
Final Summary
Loop10 defaultofffaro-apps exactNone/Admin200count2/transientpopulation match+IDteardown, web/mobile/unknown counts-only fullT2/compose/hydrate/S3/optionalpanel/sourceprivacy proof. Landed3fae7cc23be867334c648cd2d1345563b3915d6e CI37046324314success, finalgate1768pass2skips8248subtests/CR21completezero, independentR-sec-FaroPASS. a1impl/infra0; no newquery/sourcemap/write/customergrant/universalvisibility/minimality/livecollector/browserclaim.
Review-repairr1 delivered921279fa6942e18bf00d91270aa63260c40c15b1: exactHTTP200, otherwise valid206 positive/empty withheld, real T2 no view/S3 overwrite. Six red-first failures across two sources then53pass, unchanged4fileCRcomplete0, finalgate1909pass2skip8533subtests/exactCI37063591868success; root inspected finaldiff. No permission/transport/fixture/IRM changes; a1implementation/r1reviewrepair/infra0. Gate used genuine sharedrootenvironment via temporarylink rather than dedicatedvenv; this is recorded as environment-isolation deviation, not fictitious gate proof.
Environment correction1 completed withinr1 at unchanged921279fa6942e18bf00d91270aa63260c40c15b1/tree0f428ed9c065d10a9f97043fa9b652f87a8c30c0. Actualignoredlocaljustsetup .venv directory (notlink), finaljustcheck1909pass2skip8533subtests. No codechange/rebase/push or CR/CIrepeat; existingCR4complete0/exactCI37063591868success remainvalid. Earlierlinked-env gate preserved as nonconforming history, superseded by actual local gate. a1impl/r1reviewrepair/infra1; finalaccepted.