Description
Owner accepts transient grafanaApiKey receipt on the named jobs route only. Drop keys and arbitrary expressions at parse; do not globally weaken credential-field rejection. Owner decision GCI-0041 (product read scope approval) is conditional future authority, not a customer grant or loop9 implementation admission. Packet 5 in codex/loop9-evidence/L-fam/packets.md (sha256 e46afeb70fca8cd53ee0843c898c810a80cc05bc4238db02d8df2c6310eac6ad) holds exact routes/pairs, exclusions and outstanding witnesses.
Acceptance Criteria
- #1 Fresh authorised dev evidence establishes exact action/scope pairs, permitted route/method and complete count visibility, or records the precise blocker without widening authority
- #2 Any implemented source emits counts and bounded enums only; sensitive sentinels are absent from payloads, logs, errors and persisted envelopes; unavailable coverage remains absent
- #3 Any implementation follows fresh inventory, exact selected read boundaries and offline public-boundary proofs with final just check and hosted CI; conditional blockers in the packet are resolved before build
Definition of Done
- #1 just test
- #2 just tf-validate
- #3 just check-identifiers and just no-em-dashes both return clean
Implementation Plan
Loop10 R-wit robk only: fresh declared forecasting-read empty scope plus ML plugin access, basic-None exact custom role, GET named jobs route; parse-time drop grafanaApiKey, counts/control/population only, recorded-ID teardown. No outliers/sift/query grant or customer action.
Loop10a1 nowadmittedafterFaro landedgreen: defaultoff ml-jobs/T2 exactforecastingread+plugin, namedGETstatussuccess/dataarray currentstaffcontrol5, dropjobtopgrafanaApiKeyatparse thenretainglobalunexpectedcredentialguard, no queries/outliers/sift/customergrant. Fullselectedboundary/fixture/goldenretirement/budget/inputage/optionalpanel, lane gate/CR/CI.
Implementation Notes
Loop10 robk exactforecasting-read empty+MLplugin Nonewitness positive: reader/Admin200 count5 same transientIDpopulation; grafanaApiKey droppedatparse, onlykeysets/counts retained. SA62/roledg014znouqp6oe/token72 deletedtoken-role-SA200, role/SA404/postlistsabsence. Nooutliers/sift/query/customergrant. Implementation waitsserialIRM/Faro familyqueue.
Independent follow-on wire-edge reproduction shows validHTTP206 treated as available by existing source. Review-repairr1 now reserved to requireHTTP200, preserving named top-level key discard and unchanged credential guard. Existing tests extended, candidate-only during PDC landing; final gate/review/CI and focused independent verification owed.
Acceptance reopened only for mandatory environment precondition: genuine local justsetup .venv gate at exact921279f, not temporarylinkedrootenv. Same r1, environment correction1, no sourcechange/allowancereset/review or CI repeat.
Final Summary
Loop10 implementation 493fbc7487474efce900b796a9dc7a66a822a3cd accepted: configured ML counts only, exact default-off permissions, approved job-top-level key discarded before unchanged structural guard, nested/other credentials rejected. Real T2/S3/diagnostic/summary/dashboard proofs; 1795 passed, 2 skipped, 8342 subtests; all 21 files CodeRabbit reviewed, zero findings; exact CI37053309165 success; independent security review PASS. Attempt a1, infrastructure retries0. Staff route control supplied; no customer grant, live collector rollout, universal visibility or memory-erasure claim.
Review-repairr1 delivered921279fa6942e18bf00d91270aa63260c40c15b1: exactHTTP200, valid206 withheld before key/body parsing, approved top-level key drop/other-key guard unchanged. Red-first and public T2 withholding, finalgate1909pass2skip8533subtests/CR4complete0/exactCI37063591868success; root finaldiff inspected. a1implementation/r1reviewrepair/infra0; no allowance reset. Sharedrootenvironment via temporarylink recorded as environment-isolation deviation; actual tested code/CI identity verified.
Same exact921279fa code now protocol-conforming localgenuinevenv gate1909pass2skip8533subtests. Prior temporarylink deviation retained, environment correction1 withinr1, no sourcechange/rebase/push/review/CIrepeat. ExistingexactCI37063591868success and CR4zero remainvalid. a1impl/r1reviewrepair/infra1; namedkeyguard/privacyunchanged, finalaccepted.