Description
Policy-list realm filters were not sufficient in historical output. Exact viewer pairs, transient realm attribution and paging need proof; never fetch token routes or mutate policies. Owner decision GCI-0041 (product read scope approval) is conditional future authority, not a customer grant or loop9 implementation admission. Packet 7 in codex/loop9-evidence/L-fam/packets.md (sha256 e46afeb70fca8cd53ee0843c898c810a80cc05bc4238db02d8df2c6310eac6ad) holds exact routes/pairs, exclusions and outstanding witnesses.
Acceptance Criteria
- #1 Fresh authorised dev evidence establishes exact action/scope pairs, permitted route/method and complete count visibility, or records the precise blocker without widening authority
- #2 Any implemented source emits counts and bounded enums only; sensitive sentinels are absent from payloads, logs, errors and persisted envelopes; unavailable coverage remains absent
- #3 Any implementation follows fresh inventory, exact selected read boundaries and offline public-boundary proofs with final just check and hosted CI; conditional blockers in the packet are resolved before build
Definition of Done
- #1 just test
- #2 just tf-validate
- #3 just check-identifiers and just no-em-dashes both return clean
Implementation Plan
Root R-wit exact PDCread/plugin pairs on robk basicNone; freshinventoryregion/id realmquery, transient filter stackrealm plus installedplugin set:pdc-signing scope, fullpaging/positiveAdmincountcontrol orpreciseblocker; no tokensroute/policywrites.
Loop10 a1 admitted from accepted cloud code; exact PDC two-pair GET/current staff attribution1 of25 plus Admin region-union complete controls. Default-off T2 counts, full region/page completeness, HTTP200, no server filter assumption or tokens/POST. Public module token validator/docs exception explicit. Lane owns gate/review/path-bounded landing/exactCI; independent review follows.
Implementation Notes
Loop10 freshrobk None exactPDCread/plugin+Admin200 projected25policies; transientstackrealm+installedplugin set:pdc-signing filter matches1 excludes24, no nextpage metadata. Count/control/populationsagree, no serverrealmfilterassumption. SA64/roleag015gbivggsgc/token74 deletedtoken-role-SA200/404/postlistsabsence; no tokensroute/policywrites. Build waitsserialfamilyqueue.
Implementation a1 finalgate red:1failed1902passed2skips8533subtests. Missing independently literal PDC retirement pair expectation in tests/test_provision_io.py, despite corresponding provision test adaptation; originalgolden unchanged. Exact stagedtree6a03c980fc7e1829d2ef0de348c4fbb7cd532a8a/patch7ef5dedf049bbb20779ba824282c6e7777bb2c1dcf5f91c83a009e93f45b2f14 preserved; noCRcommitpushCI. Root authorises a2: add only two approved literal pairs to existing expected retirement union, rerun failing node then final rebase/gate/CR/landing/exactCI. a1consumed, infra0, no reset.
a2 landed3500a5318516288df0759d9f74c42f108b96ef5f tree23189e069c4bb328e8ffd4af8810d082b4dfb4b3, finalgate1903pass2skip8533subtests/CR21complete1minorcommafixed/exactCI37062681080success. Originalgolden unchanged; only literalexpectedPDCpair addition repaired a1red. a1/a2impl infra0, independentPDCsecurity review pending. Barrier released for disjoint four-file Faro/MLr1 repair; no reports landing concurrently.
Final Summary
PDC counts accepted3500a5318516288df0759d9f74c42f108b96ef5f: final1903pass2skip8533subtests/CR21complete minorcommafixed/exactCI37062681080success/independentR-sec-PDCPASS. Fresh regions plus controlrealms, client exact stackrealm+PDCscope attribution, complete validated reconstructed pagination, scalar counts/private details discarded, unknown unavailable. Originalgolden preserved; a1gate failed omittedliteralretirementexpectation,a2correctedonlypairs/doccomma, infra0. Suppliedstaffconditionalvisibility doesnotproveNoneeveryregion/universalvisibility; no tokenroute/POST/query/customergrant/livecollector/minimality/memoryerasure claim.