${escape(step.error)}
`:''}${id==='runner-register'&&connected?``:''}","old_content":"${step.error?`${escape(step.error)}
`:''}"},{"path":"scripts/knocklaunch-console/server.mjs","new_content":"export const allowedSettings=['CLOUDFLARE_API_TOKEN','CLOUDFLARE_ACCOUNT_ID','SUPABASE_ACCESS_TOKEN','SUPABASE_PROJECT_REF','FORGEJO_TOKEN','RUNNER_SERVICE'];\nexport const RUNNER_REGISTRATION=Object.freeze({home:'/home/nysom',file:'/home/nysom/.runner',config:'/home/nysom/.config/forgejo-runner/config.yml',instance:'https://git.knocklaunch.app',name:'msi-local',label:'msi-local:docker://node:22-bookworm',service:'knocklaunch-forgejo-runner.service'});\nconst readSettings=()=>{try{return JSON.parse(readFileSync(configurationPath,'utf8'));}catch{return {};}};\nconst environment=()=>({...process.env,...readSettings()});\nconst session=randomBytes(32).toString('hex'),sessionExpires=Date.now()+12*60*60*1000;\nconst origins=new Set(['http://127.0.0.1:'+port,'http://localhost:'+port,'https://app.knocklaunch.app','https://knocklaunch.app']);\nconst state={jobs:[],steps:{},providers:{},release:null,sourceSha:null};\nconst ephemeralSecrets=new Set();\nconst secretValues=()=>[session,...ephemeralSecrets,...Object.entries(environment()).filter(([key])=>/secret|token|key|password/i.test(key)).map(([,value])=>value)];\nconst clean=value=>redact(value,secretValues());\nexport function requireRunnerRegistrationToken(value,alreadyRegistered=false){if(alreadyRegistered)throw new Error('MSI runner is already registered. Re-registration is blocked.');const token=String(value||'').trim();if(token.length<16||token.length>1024)throw new Error('A valid repository runner registration token is required.');return token;}\nexport function runnerRegistrationArgs(token){return ['--cd',RUNNER_REGISTRATION.home,'--','forgejo-runner','--config',RUNNER_REGISTRATION.config,'register','--no-interactive','--instance',RUNNER_REGISTRATION.instance,'--token',token,'--name',RUNNER_REGISTRATION.name,'--labels',RUNNER_REGISTRATION.label];}\nfunction wslRegistrationExists(){if(!windows)return existsSync(join(homedir(),'.runner'));try{execFileSync('wsl.exe',['--','test','-f',RUNNER_REGISTRATION.file],{encoding:'utf8',timeout:10000,windowsHide:true});return true;}catch{return false;}}","old_content":"const allowedSettings=['CLOUDFLARE_API_TOKEN','CLOUDFLARE_ACCOUNT_ID','SUPABASE_ACCESS_TOKEN','SUPABASE_PROJECT_REF','FORGEJO_TOKEN','RUNNER_SERVICE'];\nconst readSettings=()=>{try{return JSON.parse(readFileSync(configurationPath,'utf8'));}catch{return {};}};\nconst environment=()=>({...process.env,...readSettings()});\nconst session=randomBytes(32).toString('hex'),sessionExpires=Date.now()+12*60*60*1000;\nconst origins=new Set(['http://127.0.0.1:'+port,'http://localhost:'+port,'https://app.knocklaunch.app','https://knocklaunch.app']);\nconst state={jobs:[],steps:{},providers:{},release:null,sourceSha:null};\nconst secretValues=()=>[session,...Object.entries(environment()).filter(([key])=>/secret|token|key|password/i.test(key)).map(([,value])=>value)];\nconst clean=value=>redact(value,secretValues());"},{"path":"scripts/knocklaunch-console/server.mjs","new_content":" if(id==='docker')return windows?runProcess(job,'wsl.exe',['--','docker','info','--format','{{json .}}'],{},30000):runProcess(job,'docker',['info','--format','{{json .}}'],{},30000);","old_content":" if(id==='docker')return runProcess(job,'docker',['info','--format','{{json .}}'],{},30000);"},{"path":"scripts/knocklaunch-console/server.mjs","new_content":" if(id==='git-pull'){requireClean();if(body.confirmation!==state.sourceSha)throw new Error('Confirm current source before updating.');return runProcess(job,'git',['pull','--ff-only'],{},90000);}\n if(id==='runner-register'){if(!windows)throw new Error('MSI runner registration is available only from the Windows Console.');const registrationToken=requireRunnerRegistrationToken(body.registrationToken,wslRegistrationExists());await runProcess(job,'wsl.exe',runnerRegistrationArgs(registrationToken),{},60000);if(!wslRegistrationExists())throw new Error('Runner registration did not create the expected local registration.');await runProcess(job,'wsl.exe',['--exec','systemctl','--user','start',RUNNER_REGISTRATION.service],{},30000);append(job,'MSI runner registered as msi-local and local service started.');return;}\n if(id.startsWith('runner-')){const service=env.RUNNER_SERVICE;if(!/^[a-zA-Z0-9_-]+\\.service$/.test(service||''))throw new Error('Set the installed MSI runner service name in Console settings.');const action=id.slice(7);if(['stop','restart'].includes(action)&&body.confirmation!==(state.release?.confirmation||state.sourceSha))throw new Error('Confirm the local runner operation.');const args=['--user',action==='status'?'status':action,service,...(action==='status'?['--no-pager']:[])];return windows?runProcess(job,'wsl.exe',['--exec','systemctl',...args],{},30000):runProcess(job,'systemctl',args,{},30000);}","old_content":" if(id==='git-pull'){requireClean();if(body.confirmation!==state.sourceSha)throw new Error('Confirm current source before updating.');return runProcess(job,'git',['pull','--ff-only'],{},90000);}\n if(id.startsWith('runner-')){const service=env.RUNNER_SERVICE;if(!/^[a-zA-Z0-9_-]+\\.service$/.test(service||''))throw new Error('Set the installed MSI runner service name in Console settings.');const action=id.slice(7);if(['stop','restart'].includes(action)&&body.confirmation!==(state.release?.confirmation||state.sourceSha))throw new Error('Confirm the local runner operation.');const args=['--user',action==='status'?'status':action,service,...(action==='status'?['--no-pager']:[])];return windows?runProcess(job,'wsl.exe',['--exec','systemctl',...args],{},30000):runProcess(job,'systemctl',args,{},30000);}"},{"path":"scripts/knocklaunch-console/server.mjs","new_content":"function startJob(body){const id=requireAction(body.action);if(state.jobs.some(job=>job.status==='running'))throw new Error('Another step is running.');const transientSecret=id==='runner-register'?String(body.registrationToken||'').trim():'';if(transientSecret)ephemeralSecrets.add(transientSecret);const executionBody={...body,...(transientSecret?{registrationToken:transientSecret}:{})};if(Object.hasOwn(body,'registrationToken'))body.registrationToken='';const job={id:randomBytes(8).toString('hex'),action:id,status:'running',startedAt:new Date().toISOString(),output:''};\n if(state.release){const sequence=prerequisites('verify-live').concat('verify-live'),index=sequence.indexOf(id);if(index>=0)for(const next of sequence.slice(index+1))delete state.steps[next];}\n state.jobs.unshift(job);state.jobs=state.jobs.slice(0,30);state.steps[id]=job;\n void execute(job,executionBody).then(()=>{job.status='passed';}).catch(error=>{job.status='failed';job.error=clean(error.message);append(job,'\\n'+job.error);}).finally(()=>{if(transientSecret)ephemeralSecrets.delete(transientSecret);executionBody.registrationToken='';job.endedAt=new Date().toISOString();job.durationMs=Date.parse(job.endedAt)-Date.parse(job.startedAt);job.sourceSha=state.sourceSha;state.steps[id]=job;});return job;\n}","old_content":"function startJob(body){const id=requireAction(body.action);if(state.jobs.some(job=>job.status==='running'))throw new Error('Another step is running.');const job={id:randomBytes(8).toString('hex'),action:id,status:'running',startedAt:new Date().toISOString(),output:''};\n if(state.release){const sequence=prerequisites('verify-live').concat('verify-live'),index=sequence.indexOf(id);if(index>=0)for(const next of sequence.slice(index+1))delete state.steps[next];}\n state.jobs.unshift(job);state.jobs=state.jobs.slice(0,30);state.steps[id]=job;\n void execute(job,body).then(()=>{job.status='passed';}).catch(error=>{job.status='failed';job.error=clean(error.message);append(job,'\\n'+job.error);}).finally(()=>{job.endedAt=new Date().toISOString();job.durationMs=Date.parse(job.endedAt)-Date.parse(job.startedAt);job.sourceSha=state.sourceSha;state.steps[id]=job;});return job;\n}"},{"path":"scripts/knocklaunch-console/console.test.mjs","new_content":"import { authorized, validOrigin, requireAction, allowedSettings, RUNNER_REGISTRATION, requireRunnerRegistrationToken, runnerRegistrationArgs } from './server.mjs';","old_content":"import { authorized, validOrigin, requireAction } from './server.mjs';"},{"path":"scripts/knocklaunch-console/console.test.mjs","new_content":"test('promotion depends on build, tests, Gate and candidate proof',()=>{\n for(const id of ['prepare','build','tests','gate','candidate','verify-candidate'])assert.ok(prerequisites('promote').includes(id));\n});\ntest('runner registration token is required and never becomes a persisted setting',()=>{\n assert.throws(()=>requireRunnerRegistrationToken(''),/registration token/i);\n const token='r'.repeat(40);assert.equal(requireRunnerRegistrationToken(token),token);\n assert.equal(allowedSettings.includes('FORGEJO_RUNNER_REGISTRATION_TOKEN'),false);\n});\ntest('runner registration blocks duplicates and fixes instance, name, label and service',()=>{\n const token='t'.repeat(40);assert.throws(()=>requireRunnerRegistrationToken(token,true),/already registered/i);\n assert.deepEqual(runnerRegistrationArgs(token),['--cd','/home/nysom','--','forgejo-runner','--config','/home/nysom/.config/forgejo-runner/config.yml','register','--no-interactive','--instance','https://git.knocklaunch.app','--token',token,'--name','msi-local','--labels','msi-local:docker://node:22-bookworm']);\n assert.equal(RUNNER_REGISTRATION.service,'knocklaunch-forgejo-runner.service');assert.equal(runnerRegistrationArgs(token).join(' ').includes('docker-8g'),false);\n});","old_content":"test('promotion depends on build, tests, Gate and candidate proof',()=>{\n for(const id of ['prepare','build','tests','gate','candidate','verify-candidate'])assert.ok(prerequisites('promote').includes(id));\n});"},{"path":"scripts/knocklaunch-console/README.md","new_content":"The local runner controls target an already-installed WSL user service whose name is configured in Connection settings. The Runner stage can perform one repository-scoped registration of that preinstalled MSI runner as `msi-local`; paste the repository registration token into the local password field and it is used once, never stored in Console settings or returned to the browser. Registration is fixed to the `msi-local:docker://node:22-bookworm` label and never assigns the production `docker` or `docker-8g` labels. The Console does not retire, relabel, or alter cloud runners. The standalone app can still build without that service.","old_content":"The local runner controls target an already-installed WSL user service whose name is configured in Connection settings. They do not install, register, relabel, retire, or alter cloud runners. The standalone app can still build without that service."}],"implementation":{"files":[],"writes":[]},"requestContract":{"outcomes":[{"id":"runner-registration","statement":"The existing KNOCKLAUNCH Console provides a secure one-time local MSI runner registration flow and starts the installed msi-local service without exposing or persisting the registration token.","proofConditionIds":["proof-production","proof-visual"]}],"objective":"Add the secure one-time local MSI Forgejo runner registration step to the existing KNOCKLAUNCH Console. Modify only public/console/catalog.mjs, public/console/console.js, scripts/knocklaunch-console/server.mjs, scripts/knocklaunch-console/console.test.mjs and scripts/knocklaunch-console/README.md. Runner stage gets Register MSI runner. Local connected UI accepts a password-type repository runner registration token and submits it only to localhost. The token must never be stored in settings/state/jobs/output/logs or returned to the browser. Registration fails closed when /home/nysom/.runner already exists. On Windows, invoke WSL from /home/nysom with fixed instance https://git.knocklaunch.app, fixed name msi-local, fixed label msi-local:docker://node:22-bookworm, fixed config /home/nysom/.config/forgejo-runner/config.yml, and --no-interactive. After successful registration start knocklaunch-forgejo-runner.service using the existing allowlisted service control. Do not change production runner labels/workflows yet and do not touch C:\\Users\\nysom\\KnockLaunchOS. Add focused tests for required token, non-persistence/non-reflection, duplicate-registration blocking, and fixed command/identity. One focused PR, canonical Gate, squash merge, frontend release, live /admin proof.","constraints":[{"id":"token-boundary","statement":"The runner registration token is local-only, one-time input: never persist it, echo it, return it to the browser, place it in job/state output, or log it.","proofConditionIds":["proof-production"]},{"id":"fixed-runner-identity","statement":"Registration is fixed to https://git.knocklaunch.app, name msi-local, label msi-local:docker://node:22-bookworm, /home/nysom config and knocklaunch-forgejo-runner.service; no arbitrary command/instance/name/label inputs and no production docker/docker-8g workflow migration.","proofConditionIds":["proof-production"]},{"id":"owner-checkout-preserved","statement":"Do not mutate or depend on the owner's existing C:\\Users\\nysom\\KnockLaunchOS working checkout.","proofConditionIds":["proof-production"]}],"terminalPolicy":"all_required_proof_conditions_satisfied_after_live_release","proofConditions":[{"id":"proof-production","kind":"runtime","claim":"The shipped Console registration implementation is live with fixed runner identity, one-time local token handling, duplicate-registration blocking, tests, and frontend release.","route":"/admin","required":true,"allowedReleaseTargets":["frontend"],"requiredReleaseTargets":["frontend"]},{"id":"proof-visual","kind":"visual","claim":"The live GodMode Console at /admin renders the Register MSI runner control in the Runner stage without breaking the existing staged UI.","route":"/admin","required":true,"allowedReleaseTargets":["frontend"],"requiredReleaseTargets":["frontend"]}]},"repairGeneration":null,"executionEnvelope":{"ship":true,"version":1,"approved":true,"missionId":"53d37037-d0b1-4265-b5b6-e9ea72ad856e","ownerApproved":true,"releaseIntent":null,"sourceTargets":["public/console/catalog.mjs","public/console/console.js","scripts/knocklaunch-console/server.mjs","scripts/knocklaunch-console/console.test.mjs","scripts/knocklaunch-console/README.md"],"requestContract":{"outcomes":[{"id":"runner-registration","statement":"The existing KNOCKLAUNCH Console provides a secure one-time local MSI runner registration flow and starts the installed msi-local service without exposing or persisting the registration token.","proofConditionIds":["proof-production","proof-visual"]}],"objective":"Add the secure one-time local MSI Forgejo runner registration step to the existing KNOCKLAUNCH Console. Modify only public/console/catalog.mjs, public/console/console.js, scripts/knocklaunch-console/server.mjs, scripts/knocklaunch-console/console.test.mjs and scripts/knocklaunch-console/README.md. Runner stage gets Register MSI runner. Local connected UI accepts a password-type repository runner registration token and submits it only to localhost. The token must never be stored in settings/state/jobs/output/logs or returned to the browser. Registration fails closed when /home/nysom/.runner already exists. On Windows, invoke WSL from /home/nysom with fixed instance https://git.knocklaunch.app, fixed name msi-local, fixed label msi-local:docker://node:22-bookworm, fixed config /home/nysom/.config/forgejo-runner/config.yml, and --no-interactive. After successful registration start knocklaunch-forgejo-runner.service using the existing allowlisted service control. Do not change production runner labels/workflows yet and do not touch C:\\Users\\nysom\\KnockLaunchOS. Add focused tests for required token, non-persistence/non-reflection, duplicate-registration blocking, and fixed command/identity. One focused PR, canonical Gate, squash merge, frontend release, live /admin proof.","constraints":[{"id":"token-boundary","statement":"The runner registration token is local-only, one-time input: never persist it, echo it, return it to the browser, place it in job/state output, or log it.","proofConditionIds":["proof-production"]},{"id":"fixed-runner-identity","statement":"Registration is fixed to https://git.knocklaunch.app, name msi-local, label msi-local:docker://node:22-bookworm, /home/nysom config and knocklaunch-forgejo-runner.service; no arbitrary command/instance/name/label inputs and no production docker/docker-8g workflow migration.","proofConditionIds":["proof-production"]},{"id":"owner-checkout-preserved","statement":"Do not mutate or depend on the owner's existing C:\\Users\\nysom\\KnockLaunchOS working checkout.","proofConditionIds":["proof-production"]}],"terminalPolicy":"all_required_proof_conditions_satisfied_after_live_release","proofConditions":[{"id":"proof-production","kind":"runtime","claim":"The shipped Console registration implementation is live with fixed runner identity, one-time local token handling, duplicate-registration blocking, tests, and frontend release.","route":"/admin","required":true,"allowedReleaseTargets":["frontend"],"requiredReleaseTargets":["frontend"]},{"id":"proof-visual","kind":"visual","claim":"The live GodMode Console at /admin renders the Register MSI runner control in the Runner stage without breaking the existing staged UI.","route":"/admin","required":true,"allowedReleaseTargets":["frontend"],"requiredReleaseTargets":["frontend"]}]},"repairGeneration":null,"proofRequirements":null,"controlPlaneUnfreeze":false,"controlPlaneMaintenance":false,"controlPlaneMaintenancePaths":[],"controlPlaneMaintenanceReason":null},"proofRequirements":null,"controlPlaneUnfreeze":false,"durableMutationResume":true,"controlPlaneMaintenance":false,"controlPlaneMaintenancePaths":[],"controlPlaneMaintenanceReason":null},"recovery":false,"fingerprint":"f3d32faad88926c6232ec0581daf32942617ecf3ff582f26c74080064c7ed4c6","replayCount":0,"serializedBytes":23948},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-26T14:22:49.780283+00:00","proof_gate":"repository_mutation_intent_persisted","source_sha":null,"external_id":null,"receipt_type":"repository_mutation_intent","idempotency_key":"mission:53d37037-d0b1-4265-b5b6-e9ea72ad856e:repository-mutation-intent:f3d32faad88926c6232ec0581daf32942617ecf3ff582f26c74080064c7ed4c6:0","mission_step_id":"c608a72c-9793-4974-ba71-b670e24649a1","command_center_event_id":"53d37037-d0b1-4265-b5b6-e9ea72ad856e"},{"id":"ffc4498c-92bd-4028-a520-1e339257b5fb","source":"cc-execution","status":"authorized","payload":{"paths":["workers/cc-execution/src/version.js"],"reason":"Re-bind the already-applied corrective generation to its exact PR head after green Gate; no new source change is intended.","baseSha":"040dd08903e952572e2ef1b26267b3c9ff638533","issuedAt":1789588476967,"expiresAt":1789588656967,"missionId":"fcf71247-9f41-4de7-bb0a-bf2f2f95db7b","authorizationId":"fbf9b238-c3ae-415d-b2d2-5d43aeb1f7c3","retryableWithinExactScope":true},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-16T19:54:37.352786+00:00","proof_gate":"control_plane_maintenance_scope_authorized","source_sha":"040dd08903e952572e2ef1b26267b3c9ff638533","external_id":null,"receipt_type":"control_plane_maintenance_authorization","idempotency_key":"control-plane-maintenance-authorize:fbf9b238-c3ae-415d-b2d2-5d43aeb1f7c3","mission_step_id":"80696739-07d3-498e-bb9d-77028d0fbac2","command_center_event_id":"fcf71247-9f41-4de7-bb0a-bf2f2f95db7b"},{"id":"ffc699c8-d298-48ae-8ae9-f5e181aba2e9","source":"durable-mission-ledger","status":"verified","payload":{"sourceSha":"deb1ebb74d9a6ba593276cf1fcad7f14098ee552","requestContractProof":{"legacy":false,"present":true,"outcomes":[{"id":"public-link","satisfied":true,"statement":"Every proposal has a persisted public review URL that opens logged-out and stays on the intended proposal across refresh/deep-link navigation.","proofConditionIds":["anthony-public","invalid-public"]},{"id":"delivery-truth","satisfied":true,"statement":"Proposal send uses the canonical provider-aware email transport and sent state requires durable provider acceptance evidence. Failures remain retryable and unsent; idempotent retry cannot duplicate delivery.","proofConditionIds":["anthony-delivery"]},{"id":"signature-policy","satisfied":true,"statement":"Each proposal template declares signature mode none, separate_esign, or mapped_esign. Signature/date capture is a separate form from proposal content. mapped_esign applies the exact captured signature and exact signed date only to explicitly configured signature/date fields when producing the final signed artifact; none never forces signing.","proofConditionIds":["anthony-public"]},{"id":"anthony-canary","satisfied":true,"statement":"After release, Anthony Francis's KLG-PCG-2026-001 is resent exactly once through the repaired canonical workflow with its public link and configured signature policy, with a durable provider receipt.","proofConditionIds":["anthony-delivery"]}],"satisfied":true,"constraints":[{"id":"regressions","satisfied":true,"statement":"Add regression coverage for no-sign proposals, separate signature form, mapped signature/date placement, false-sent prevention, provider failure, retry/idempotency, logged-out public routing, invalid/expired token handling, and cross-tenant isolation. Use one safe PR, Gate, squash merge, deploy, and production proof. Do not stop at implementation, PR, merge, or deploy.","proofConditionIds":["anthony-public","anthony-delivery","invalid-public"]},{"id":"capability-completeness","satisfied":true,"statement":"Every dependency the implementation declares or relies on must be wired and proven across applicable frontend, backend/runtime, schema/data/storage, authentication/authorization, provider configuration, prerequisite/loading/empty/error states, release ownership, and live production behavior; owner-authorized unavailable dependencies must become explicit prerequisite states rather than runtime failures.","proofConditionIds":["anthony-public","anthony-delivery","invalid-public"]},{"id":"atomic-capability-lifecycle","satisfied":true,"statement":"Changed capabilities remain non-active until dependency readiness, N/N-1 compatibility, affected-target release, and claim-matched production canary proof are satisfied; missing optional dependencies become prerequisite_required, and runtime drift or health-contract violation quarantines only the affected capability instead of breaking unrelated working capability.","proofConditionIds":["anthony-public","anthony-delivery","invalid-public"]}],"contractHash":"e2a90785f93d26ac821655534d93492ee9d7dccdda441f3322e1aaf8b1918609","releaseBound":true,"witnessBound":false,"visualRequested":false,"visualSatisfied":true,"conditionResults":[{"id":"anthony-public","kind":"runtime","evidence":{"reason":null,"satisfied":true,"releaseState":"verified","missingTargets":[],"disallowedTargets":[],"migrationRequired":false,"releaseTargetStates":{"supabaseEdge":"success"},"unsuccessfulTargets":[],"activeReleaseTargets":["supabaseEdge"],"allowedReleaseTargets":[],"requiredReleaseTargets":[],"migrationReleaseVerified":null,"releaseRequestContractHash":"e2a90785f93d26ac821655534d93492ee9d7dccdda441f3322e1aaf8b1918609"},"required":true,"satisfied":true},{"id":"anthony-delivery","kind":"runtime","evidence":{"reason":null,"satisfied":true,"releaseState":"verified","missingTargets":[],"disallowedTargets":[],"migrationRequired":false,"releaseTargetStates":{"supabaseEdge":"success"},"unsuccessfulTargets":[],"activeReleaseTargets":["supabaseEdge"],"allowedReleaseTargets":[],"requiredReleaseTargets":[],"migrationReleaseVerified":null,"releaseRequestContractHash":"e2a90785f93d26ac821655534d93492ee9d7dccdda441f3322e1aaf8b1918609"},"required":true,"satisfied":true},{"id":"invalid-public","kind":"runtime","evidence":{"reason":null,"satisfied":true,"releaseState":"verified","missingTargets":[],"disallowedTargets":[],"migrationRequired":false,"releaseTargetStates":{"supabaseEdge":"success"},"unsuccessfulTargets":[],"activeReleaseTargets":["supabaseEdge"],"allowedReleaseTargets":[],"requiredReleaseTargets":[],"migrationReleaseVerified":null,"releaseRequestContractHash":"e2a90785f93d26ac821655534d93492ee9d7dccdda441f3322e1aaf8b1918609"},"required":true,"satisfied":true}],"validationErrors":[],"pendingProofKinds":[],"activeReleaseTargets":["supabaseEdge"]},"authoritativeMissionRefresh":true,"evaluatedRequestContractRevision":1},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-22T14:51:45.229053+00:00","proof_gate":"request_contract_terminal_verified","source_sha":"deb1ebb74d9a6ba593276cf1fcad7f14098ee552","external_id":null,"receipt_type":"request_contract_reconciliation","idempotency_key":"mission:970fa332-d7b7-4b0c-aa9a-0c302c57f7df:request-contract:e2a90785f93d26ac821655534d93492ee9d7dccdda441f3322e1aaf8b1918609:deb1ebb74d9a6ba593276cf1fcad7f14098ee552:verified:","mission_step_id":"a9db4f10-4476-426e-8148-01b6c94431ed","command_center_event_id":"970fa332-d7b7-4b0c-aa9a-0c302c57f7df"},{"id":"ffc7eb1c-d284-4d73-8f23-537dfbc24240","source":"cc-execution","status":"waiting_for_gate","payload":{"ok":true,"jobId":null,"phase":"implementation","branch":"ai/objective-first-repair-d080afc712f3","reason":"provider_verified_auto_progress_owns_gate_merge_release_outside_owner_response","status":"waiting_for_gate","metrics":{"receiptBytes":72933,"releaseCount":0,"toolCallCount":3,"repeatedCallCount":0,"executorlessWaitMs":14577,"firstUsefulResultAt":"2026-10-04T10:21:39.270Z","recoveryAttemptCount":0,"ownerInterruptionCount":0},"version":"1.64.90-owner-contract-autocompile","prNumber":4731,"terminal":false,"missionId":"d080afc7-12f3-471c-9840-623e60c5e38a","operation":"execute_mission","proofGate":"repair_mission_pr_handed_off_to_supervisor","sourceSha":null,"timingsMs":{"gateMs":0,"proofMs":0,"handlerMs":4088,"releaseMs":0,"mutationMs":0,"repositoryMs":0,"prReadinessMs":0,"approvedPlanMs":666,"missionSetupMs":272,"providerAuthMs":0,"shipAndProveMs":0,"ledgerPrepareMs":272,"ledgerReconcileMs":0,"lineageReconcileMs":0,"resolvePreflightMs":272,"repositoryMutationMs":3422,"repositoryProviderMs":3422,"authoritativeLedgerMs":0,"ledgerAsyncDispatchMs":0,"repositoryAtomicCommitMs":2047,"repositoryBranchCreateMs":0,"totalSynchronousLedgerMs":272,"asyncBookkeepingDispatchMs":0,"ledgerAuthoritativeCommitMs":0,"repositoryPullRequestCreateMs":1375},"nextAction":"Canonical KnockLaunch Gate notifier and durable mission supervisor own Gate, merge, release, and proof progression from this exact PR head outside the owner response path.","receiptRef":{"mode":"full","missionId":"d080afc7-12f3-471c-9840-623e60c5e38a"},"performance":null,"deploymentId":null,"releaseState":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"ownerFacingState":"IN_PROGRESS","pendingProofKinds":["runtime"],"verificationState":null,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":3237,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true,"requestContractState":"pending"},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-04T10:22:01.358716+00:00","proof_gate":"repair_mission_pr_handed_off_to_supervisor","source_sha":null,"external_id":"4731","receipt_type":"execute_mission","idempotency_key":"mission:d080afc7-12f3-471c-9840-623e60c5e38a:execute_mission:repair_mission_pr_handed_off_to_supervisor:current-generation","mission_step_id":"58455dee-93db-490c-bba4-fb4ef65f5e05","command_center_event_id":"d080afc7-12f3-471c-9840-623e60c5e38a"},{"id":"ffc84651-cfbf-4293-92f3-1f3555f0a78c","source":"cc-execution","status":"waiting_for_gate","payload":{"ok":true,"jobId":null,"phase":"implementation","branch":"ai/objective-first-repair-228d857ef4c8","reason":"provider_verified_auto_progress_owns_gate_merge_release_outside_owner_response","status":"waiting_for_gate","metrics":{"receiptBytes":10160,"releaseCount":0,"toolCallCount":5,"repeatedCallCount":2,"executorlessWaitMs":8710805,"firstUsefulResultAt":"2026-10-02T21:20:43.942Z","recoveryAttemptCount":0,"ownerInterruptionCount":0},"version":"1.64.60-paul-long-horizon-state","prNumber":4568,"terminal":false,"missionId":"228d857e-f4c8-4136-a66f-f889cae51cfc","operation":"execute_mission","proofGate":"repair_mission_pr_handed_off_to_supervisor","sourceSha":null,"timingsMs":{"gateMs":0,"proofMs":0,"handlerMs":4425,"releaseMs":0,"mutationMs":0,"repositoryMs":0,"prReadinessMs":0,"approvedPlanMs":829,"missionSetupMs":302,"providerAuthMs":0,"shipAndProveMs":0,"ledgerPrepareMs":302,"ledgerReconcileMs":0,"lineageReconcileMs":0,"resolvePreflightMs":302,"repositoryMutationMs":3596,"repositoryProviderMs":3596,"authoritativeLedgerMs":0,"ledgerAsyncDispatchMs":0,"repositoryAtomicCommitMs":2100,"repositoryBranchCreateMs":0,"totalSynchronousLedgerMs":302,"asyncBookkeepingDispatchMs":0,"ledgerAuthoritativeCommitMs":0,"repositoryPullRequestCreateMs":1496},"nextAction":"Canonical KnockLaunch Gate notifier and durable mission supervisor own Gate, merge, release, and proof progression from this exact PR head outside the owner response path.","receiptRef":{"mode":"full","missionId":"228d857e-f4c8-4136-a66f-f889cae51cfc"},"performance":null,"deploymentId":null,"releaseState":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"ownerFacingState":"IN_PROGRESS","pendingProofKinds":["runtime"],"verificationState":null,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":3265,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true,"requestContractState":"pending"},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-02T23:46:00.232162+00:00","proof_gate":"repair_mission_pr_handed_off_to_supervisor","source_sha":null,"external_id":"4568","receipt_type":"execute_mission","idempotency_key":"mission:228d857e-f4c8-4136-a66f-f889cae51cfc:execute_mission:repair_mission_pr_handed_off_to_supervisor:current-generation","mission_step_id":"f21b4f8b-1b9f-4bef-bf82-180f963d6cf5","command_center_event_id":"228d857e-f4c8-4136-a66f-f889cae51cfc"},{"id":"ffc87262-72a9-426c-b83b-f48f29d81c68","source":"forgejo-runtime","status":"verified","payload":{"failed":[],"states":{"forgejo-main/source":"success","forgejo-release/workflow":"success","frontend-cloudflare/live":"success"},"mainSha":"b06b57d8a96b1c291d3bb2645653d377468f0c4a","missing":[],"pending":[],"required":["forgejo-main/source","forgejo-release/workflow","frontend-cloudflare/live"],"sourceSha":"b06b57d8a96b1c291d3bb2645653d377468f0c4a","releaseState":"verified","sourceInMain":true,"compareStatus":"identical","releaseTargets":{"frontend":true,"onrunner":false,"migrations":false,"ccExecution":false,"supabaseEdge":false,"edgeFunctionSlugs":[]},"requestContractHash":"00b7eb51cbf9a633abb47a36865e940b78fbb6d4d07f45933e6575442ffff22c","forgejoWorkflowProof":{"url":"https://git.knocklaunch.app/noel/KnockLaunchOS/actions/runs/3413","runId":3413,"status":"success","sourceSha":"b06b57d8a96b1c291d3bb2645653d377468f0c4a","conclusion":null,"failedJobs":[],"diagnostics":null,"exactSource":true},"onrunnerRuntimeProof":null,"releaseSourceVerified":true,"ccExecutionRuntimeProof":null,"releaseTargetRecoveryProof":null,"exactReleaseVerifiedAfterMainAdvanced":false},"tenant_id":"71b397ba-b9ad-496b-914c-985d97dbb12e","created_at":"2026-08-29T18:11:53.615823+00:00","proof_gate":"canonical_release_terminal_verified","source_sha":"b06b57d8a96b1c291d3bb2645653d377468f0c4a","external_id":"forgejo-main-b06b57d8a96b","receipt_type":"canonical_release_status","idempotency_key":"mission:953f28e9-f879-48e4-8826-5fc0c2140e7a:forgejo-release-status:b06b57d8a96b1c291d3bb2645653d377468f0c4a:verified:forgejo-main/source=success|forgejo-release/workflow=success|frontend-cloudflare/live=success","mission_step_id":"e9f6cf4a-293e-44b4-8f10-ecc0a34baa16","command_center_event_id":"953f28e9-f879-48e4-8826-5fc0c2140e7a"},{"id":"ffc90ef8-e3f8-4e3b-8780-d84809e0095f","source":"cc-execution","status":"retryable","payload":{"ok":false,"jobId":null,"phase":"pull_request","branch":"ai/big-papi-invoice-frog-logo-20260824","reason":"retryable_provider_transport:GET:The operation was aborted due to timeout","status":"retryable","metrics":{"receiptBytes":2171,"releaseCount":0,"toolCallCount":2,"repeatedCallCount":1,"ownerInterruptionCount":0},"version":"1.50.20-idempotent-reconciliation-hygiene","prNumber":null,"terminal":false,"missionId":"be3889bf-c923-46d8-b0d1-779418a1981e","operation":"execute_mission","proofGate":"repair_mission_execution_retryable","sourceSha":null,"timingsMs":null,"nextAction":null,"receiptRef":{"mode":"full","missionId":"be3889bf-c923-46d8-b0d1-779418a1981e"},"performance":null,"deploymentId":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":4836,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-08-24T17:58:38.430148+00:00","proof_gate":"repair_mission_execution_retryable","source_sha":null,"external_id":null,"receipt_type":"execute_mission","idempotency_key":"mission:be3889bf-c923-46d8-b0d1-779418a1981e:execute_mission:repair_mission_execution_retryable","mission_step_id":"d5ae622d-9a89-461b-a761-f014dc60d963","command_center_event_id":"be3889bf-c923-46d8-b0d1-779418a1981e"},{"id":"ffc95b57-2b37-4eab-93ed-31a5cb891ff8","source":"cc-execution","status":"waiting","payload":{"kind":"heartbeat","message":"Still active in release.","nextAction":{"lane":"production-release-conductor","action":"reconcile_release","reason":"merged_source_requires_release_proof","automationAllowed":true,"ownerActionRequired":false},"silenceBudgetMs":15000,"semanticCheckpointSignature":"{\"stateMachineVersion\":1,\"phase\":\"release\",\"ownerFacingState\":null,\"latest\":{\"kind\":\"receipt\",\"key\":\"canonical_release_status\",\"status\":\"pending\",\"proofGate\":\"canonical_release_pending\"},\"activeStep\":{\"key\":\"pull_request\",\"status\":\"waiting\",\"lane\":\"cc-execution\"},\"nextStep\":{\"key\":\"release\",\"status\":\"waiting\",\"lane\":\"production-release-conductor\"},\"nextSafeAction\":{\"action\":\"reconcile_release\",\"lane\":\"production-release-conductor\",\"reason\":\"merged_source_requires_release_proof\",\"automationAllowed\":true,\"ownerActionRequired\":false},\"executionOwnership\":{\"active\":false,\"state\":\"waiting\",\"executor\":null,\"lane\":\"cc-execution\",\"nextAction\":\"reconcile_release\",\"recoveryOwner\":\"production-release-conductor\"},\"acceptance\":{\"total\":1,\"verified\":0,\"pending\":1,\"percent\":0,\"satisfied\":false,\"verifiedIds\":[],\"pendingIds\":[\"proof-production\"]},\"stall\":{\"stalled\":false,\"reason\":\"within_deadline\",\"step\":\"release\",\"deadlineAt\":\"2026-10-02T18:45:30.012945+00:00\",\"recoveryAction\":null},\"blocker\":null,\"terminal\":false,\"branch\":\"ai/objective-first-repair-842a152b2c42\",\"prNumber\":4486,\"sourceSha\":\"9a1d36c87bb80789f8edf82f6bcaaa184bd33ff2\",\"deploymentId\":\"forgejo-main-9a1d36c87bb8\"}"},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-02T15:47:04.461005+00:00","proof_gate":"owner_progress_heartbeat","source_sha":null,"external_id":null,"receipt_type":"owner_progress_heartbeat","idempotency_key":"mission:842a152b-2c42-423a-8351-1853b53269d0:owner-progress-heartbeat:119397068","mission_step_id":"5aeabd98-fd55-497b-874a-87f57f2e05d3","command_center_event_id":"842a152b-2c42-423a-8351-1853b53269d0"},{"id":"ffcab09c-f00f-4d7f-b14e-80b93ba3f9ab","source":"cc-execution","status":"waiting","payload":{"body":{"branch":"ai/objective-first-repair-f384d3aff382","approved":true,"missionId":"f384d3af-f382-49de-b915-16bf029376ed","objective":"Continue the existing durable mission using exact structured edits.","repository":"noel/KnockLaunchOS","trackMission":true,"ownerApproved":true,"sourceTargets":["supabase/functions/irslogiqs-sync/index.ts","config/capabilities/tennex-irslogiqs-connection.json"],"anchored_edits":[{"path":"supabase/functions/irslogiqs-sync/index.ts","anchor":" const baseCandidates = [\n 'https://' + subdomain + '.logiqsapi.com/publicapi/V4',\n 'https://' + subdomain + '.logiqs.com/publicapi/V4',\n ];","replacement":" const hostCandidates = [\n subdomain + '.logiqs.com',\n subdomain + '.irslogics.com',\n subdomain + '.logics.com',\n ];\n const apiRootCandidates = ['/publicapi', '/publicapi/V4'];\n const baseCandidates = hostCandidates.flatMap(host => apiRootCandidates.map(root => 'https://' + host + root));"},{"path":"supabase/functions/irslogiqs-sync/index.ts","anchor":" metadata:{...metadata,sync_status_ids:newStatusIds,irslogiqs_api_host:new URL(base).hostname},","replacement":" metadata:{...metadata,sync_status_ids:newStatusIds,irslogiqs_api_host:new URL(base).hostname,irslogiqs_api_root:new URL(base).pathname.replace(/\\/$/,'')},"},{"path":"config/capabilities/tennex-irslogiqs-connection.json","anchor":"\"provider or authentication failure sets degraded and records the verification error\"","replacement":"\"provider or authentication failure sets invalid and records the verification error\""},{"path":"config/capabilities/tennex-irslogiqs-connection.json","anchor":"\"a successful authenticated non-mutating GetCasesByStatus read is required before active and must set last_verified_at\"","replacement":"\"a successful authenticated non-mutating GetCasesByStatus read is required before active and must set last_verified_at; provider endpoint resolution is bounded to the tenant subdomain on logiqs.com, irslogics.com, or logics.com under /publicapi or /publicapi/V4, and the first authenticated successful API root is retained internally\""}],"update_strategy":"auto","controlPlaneUnfreeze":true,"durableMutationResume":true,"controlPlaneMaintenance":true,"controlPlaneMaintenanceReason":"Prime structured exact mutation continuation"},"recovery":false,"fingerprint":"46ee4bd4bc7109a29ddcd1c5daae0a245cc02590cf773bebbfe579366b110059","replayCount":0,"serializedBytes":2336},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-03T01:29:28.520664+00:00","proof_gate":"repository_mutation_intent_persisted","source_sha":null,"external_id":null,"receipt_type":"repository_mutation_intent","idempotency_key":"mission:f384d3af-f382-49de-b915-16bf029376ed:repository-mutation-intent:46ee4bd4bc7109a29ddcd1c5daae0a245cc02590cf773bebbfe579366b110059:0","mission_step_id":"275d99a1-2079-458d-9c9d-4f1ce74002e7","command_center_event_id":"f384d3af-f382-49de-b915-16bf029376ed"},{"id":"ffcb2b60-40e1-4564-8d40-af8eb575d821","source":"cc-execution","status":"source_resolution_required","payload":{"ok":true,"jobId":null,"phase":"objective_received","branch":"ai/objective-first-repair-19ebeb80f55c","reason":null,"status":"source_resolution_required","metrics":{"receiptBytes":0,"releaseCount":0,"toolCallCount":0,"repeatedCallCount":0,"ownerInterruptionCount":0},"version":"1.58.144-request-contract-inference","prNumber":null,"terminal":false,"missionId":"19ebeb80-f55c-482c-a068-e384c41f030e","operation":"execute_mission","proofGate":"repair_mission_source_resolution_required","sourceSha":null,"timingsMs":{"gateMs":0,"proofMs":0,"handlerMs":192,"releaseMs":0,"mutationMs":0,"repositoryMs":0,"missionSetupMs":1177,"providerAuthMs":0,"ledgerPrepareMs":1177,"ledgerReconcileMs":440,"lineageReconcileMs":0,"resolvePreflightMs":1177,"authoritativeLedgerMs":0,"ledgerAsyncDispatchMs":0,"totalSynchronousLedgerMs":1617,"asyncBookkeepingDispatchMs":0,"ledgerAuthoritativeCommitMs":0},"nextAction":"Resolve bounded authoritative Forgejo source targets, then call /mission/execute again with this same missionId and exact files or anchored_edits. Do not switch workflows.","receiptRef":{"mode":"full","missionId":"19ebeb80-f55c-482c-a068-e384c41f030e"},"performance":null,"deploymentId":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"ownerFacingState":"IN_PROGRESS","workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":6094,"likelyAffectedFiles":[],"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-14T03:29:28.015563+00:00","proof_gate":"repair_mission_source_resolution_required","source_sha":null,"external_id":null,"receipt_type":"execute_mission","idempotency_key":"mission:19ebeb80-f55c-482c-a068-e384c41f030e:execute_mission:repair_mission_source_resolution_required:current-generation","mission_step_id":"599586d2-d159-4152-be58-9965a2e3c3da","command_center_event_id":"19ebeb80-f55c-482c-a068-e384c41f030e"},{"id":"ffcc063e-8ec6-4326-8df2-6d6f056f4d8f","source":"forgejo-runtime","status":"pending","payload":{"failed":[],"states":{"forgejo-main/source":"success","forgejo-release/workflow":"pending","frontend-cloudflare/live":"pending"},"mainSha":"fcd6638310a83eb7dc4edf429d64255793e4a0bf","missing":[],"pending":["forgejo-release/workflow","frontend-cloudflare/live"],"required":["forgejo-main/source","forgejo-release/workflow","frontend-cloudflare/live"],"sourceSha":"fcd6638310a83eb7dc4edf429d64255793e4a0bf","releaseState":"pending","sourceInMain":true,"compareStatus":"identical","forgejoWorkflowProof":{"url":"https://git.knocklaunch.app/noel/KnockLaunchOS/actions/runs/382","runId":382,"status":"running","conclusion":null,"failedJobs":[]},"ccExecutionRuntimeProof":null},"tenant_id":"766cfaa7-ac42-46c8-bbef-69d13268a29d","created_at":"2026-08-15T15:03:41.104083+00:00","proof_gate":"canonical_release_pending","source_sha":"fcd6638310a83eb7dc4edf429d64255793e4a0bf","external_id":"forgejo-main-fcd6638310a8","receipt_type":"canonical_release_status","idempotency_key":"mission:ac2b92ab-01fb-4b0b-8a52-4f5fa289fa0e:forgejo-release-status:fcd6638310a83eb7dc4edf429d64255793e4a0bf:pending:forgejo-main/source=success|forgejo-release/workflow=pending|frontend-cloudflare/live=pending","mission_step_id":"2589eeeb-2e3f-447a-8316-5142005df506","command_center_event_id":"ac2b92ab-01fb-4b0b-8a52-4f5fa289fa0e"},{"id":"ffcc43e1-054b-439e-9c3f-9cda87a40077","source":"cc-execution","status":"deployment_dispatched","payload":{"ok":true,"jobId":null,"phase":"objective_received","branch":null,"reason":null,"status":"deployment_dispatched","metrics":{"receiptBytes":0,"releaseCount":0,"toolCallCount":0,"repeatedCallCount":0,"ownerInterruptionCount":0},"version":"1.31.31-resumable-backup-failover","prNumber":4561,"terminal":false,"missionId":"6c9bcca5-90be-447e-84ce-3d9792c7e48d","operation":"ship_and_prove","proofGate":"canonical_release_dispatched","sourceSha":"0e1d4bbcd665c26e0ef35a4d26b74e4f0efce827","timingsMs":null,"nextAction":null,"receiptRef":{"mode":"full","missionId":"6c9bcca5-90be-447e-84ce-3d9792c7e48d"},"performance":null,"deploymentId":"canonical-release-0e1d4bbcd665","workflowRunId":31431897422,"releaseTargets":{"frontend":true,"onrunner":false,"migrations":false,"ccExecution":false,"supabaseEdge":false,"edgeFunctionSlugs":[]},"detailsAvailable":true,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":1214,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true},"tenant_id":"a2929648-19db-46c8-9e93-07378ed1aa5f","created_at":"2026-08-10T21:01:49.561709+00:00","proof_gate":"canonical_release_dispatched","source_sha":"0e1d4bbcd665c26e0ef35a4d26b74e4f0efce827","external_id":"canonical-release-0e1d4bbcd665","receipt_type":"ship_and_prove","idempotency_key":"mission:6c9bcca5-90be-447e-84ce-3d9792c7e48d:ship_and_prove:canonical_release_dispatched:0e1d4bbcd665c26e0ef35a4d26b74e4f0efce827:31431897422","mission_step_id":"6b8b71cc-a035-447b-bfdf-94c71783e2ac","command_center_event_id":"6c9bcca5-90be-447e-84ce-3d9792c7e48d"},{"id":"ffcd9e1e-2245-467b-9e74-3e9875f384b1","source":"forgejo-runtime","status":"pending","payload":{"failed":[],"states":{"forgejo-main/source":"success","forgejo-release/workflow":"pending","supabase-migrations/live":"pending","cc-execution/runtime-proof":"pending","supabase-edge-production/live":"pending"},"mainSha":"dd4046efa2455cf19405221426910005fbc881a6","missing":[],"pending":["forgejo-release/workflow","cc-execution/runtime-proof","supabase-edge-production/live","supabase-migrations/live"],"required":["forgejo-main/source","forgejo-release/workflow","cc-execution/runtime-proof","supabase-edge-production/live","supabase-migrations/live"],"sourceSha":"dd4046efa2455cf19405221426910005fbc881a6","releaseState":"pending","sourceInMain":true,"compareStatus":"protected_main_push_exact_source","releaseTargets":{"frontend":false,"onrunner":false,"migrations":true,"ccExecution":true,"supabaseEdge":true,"edgeFunctionSlugs":["paul-scheduler"]},"releaseTargetStates":{"migrations":"pending","ccExecution":"pending","supabaseEdge":"pending"},"requestContractHash":"93a3aeba0cdbc3d248b7086ff687c33e36236e0bddfbaa8ae2485069286cbf7e","forgejoWorkflowProof":{"runId":12665,"source":"signed_push_receipt","status":"waiting","results":{},"conclusion":"waiting","targetStates":{"migrations":"pending","ccExecution":"pending","supabaseEdge":"pending"},"targetJobCount":7,"observedTargetStates":{"migrations":"pending","ccExecution":"pending","supabaseEdge":"pending"}},"onrunnerRuntimeProof":null,"releaseSourceVerified":true,"ccExecutionRuntimeProof":{"liveSha":"44c56e2f91f4fd9b9da9aa9d2f2f62ed992927cc","deploymentId":"forgejo-main-44c56e2f91f4fd9b9da9aa9d2f2f62ed992927cc","compareStatus":null,"identitySource":"local_build_metadata","runtimeVersion":"1.58.306-paul-repo-health-routing","containsSourceSha":false},"releaseTargetRecoveryProof":null,"exactReleaseVerifiedAfterMainAdvanced":false},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-28T18:14:11.682812+00:00","proof_gate":"canonical_release_pending","source_sha":"dd4046efa2455cf19405221426910005fbc881a6","external_id":"forgejo-main-dd4046efa245","receipt_type":"canonical_release_status","idempotency_key":"mission:adb318f5-e09e-428d-ac21-f6210f289f8c:forgejo-release-status:dd4046efa2455cf19405221426910005fbc881a6:pending:forgejo-main/source=success|forgejo-release/workflow=pending|cc-execution/runtime-proof=pending|supabase-edge-production/live=pending|supabase-migrations/live=pending","mission_step_id":"6f9f1290-06cb-4a99-ad81-b255a0674689","command_center_event_id":"adb318f5-e09e-428d-ac21-f6210f289f8c"},{"id":"ffcf9c64-9bc3-42ef-91f3-a8d0f9ec6675","source":"cc-execution","status":"waiting_for_gate","payload":{"ok":true,"jobId":null,"phase":"pull_request","branch":"ai/objective-first-repair-c3baff2e7105","reason":"provider_verified_auto_progress_owns_gate_merge_release_outside_owner_response","status":"waiting_for_gate","metrics":{"receiptBytes":0,"releaseCount":0,"toolCallCount":0,"repeatedCallCount":0,"ownerInterruptionCount":0},"version":"1.58.182-witness-render-cold-start-aware","prNumber":3117,"terminal":false,"missionId":"c3baff2e-7105-46c3-9a0c-9a015999ea32","operation":"execute_mission","proofGate":"repair_mission_pr_handed_off_to_supervisor","sourceSha":null,"timingsMs":{"gateMs":0,"proofMs":0,"handlerMs":13051,"releaseMs":0,"mutationMs":0,"repositoryMs":0,"prReadinessMs":0,"approvedPlanMs":4487,"missionSetupMs":1104,"providerAuthMs":0,"shipAndProveMs":0,"ledgerPrepareMs":383,"ledgerReconcileMs":0,"lineageReconcileMs":721,"resolvePreflightMs":1104,"repositoryMutationMs":8564,"repositoryProviderMs":8564,"authoritativeLedgerMs":0,"ledgerAsyncDispatchMs":0,"repositoryAtomicCommitMs":7768,"repositoryBranchCreateMs":0,"totalSynchronousLedgerMs":383,"asyncBookkeepingDispatchMs":0,"ledgerAuthoritativeCommitMs":0,"repositoryPullRequestCreateMs":796},"nextAction":"Canonical KnockLaunch Gate notifier and durable mission supervisor own Gate, merge, release, and proof progression from this exact PR head outside the owner response path.","receiptRef":{"mode":"full","missionId":"c3baff2e-7105-46c3-9a0c-9a015999ea32"},"performance":null,"deploymentId":null,"releaseState":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"ownerFacingState":"IN_PROGRESS","pendingProofKinds":["runtime"],"verificationState":null,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":3083,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true,"requestContractState":"pending"},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-18T15:53:33.170503+00:00","proof_gate":"repair_mission_pr_handed_off_to_supervisor","source_sha":null,"external_id":"3117","receipt_type":"execute_mission","idempotency_key":"mission:c3baff2e-7105-46c3-9a0c-9a015999ea32:execute_mission:repair_mission_pr_handed_off_to_supervisor:current-generation","mission_step_id":"062e2e31-40f2-4e52-a604-cedee30f3245","command_center_event_id":"c3baff2e-7105-46c3-9a0c-9a015999ea32"},{"id":"ffd2e4cf-e4b4-49a0-8d30-a2dde513fe42","source":"forgejo","status":"waiting","payload":{"branch":"ai/fix-calendar-migration-version-20260907","prNumber":2095,"nextAction":"Follow the existing canonical release to terminal proof.","mergeCommitSha":"6783b70c33c44dc04efc321f081c5cbfff29da52","branchDeletedAfterMerge":true,"correctiveGenerationCreated":false},"tenant_id":"c55998b4-82a3-467e-8d35-177bb4785f6e","created_at":"2026-09-07T19:03:04.286982+00:00","proof_gate":"forgejo_merged_pr_is_authoritative_source_lineage","source_sha":"6783b70c33c44dc04efc321f081c5cbfff29da52","external_id":"2095","receipt_type":"source_lineage_merged_pr_authoritative","idempotency_key":"mission:5dc323c9-a5d3-4740-940f-450413a024bb:merged-pr:2095:6783b70c33c44dc04efc321f081c5cbfff29da52","mission_step_id":"446f2a63-fc48-403f-897c-9040d1598a6f","command_center_event_id":"5dc323c9-a5d3-4740-940f-450413a024bb"},{"id":"ffd371b2-284a-4974-a152-4c24cabd6ddd","source":"forgejo","status":"waiting","payload":{"branch":"ai/objective-first-repair-1111409396cb","prNumber":5081,"nextAction":"Follow the existing canonical release to terminal proof.","mergeCommitSha":"459a1c4b70b701f1e80b339f911bc83fbcd4c17a","branchDeletedAfterMerge":true,"correctiveGenerationCreated":false},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-05T22:45:02.727099+00:00","proof_gate":"forgejo_merged_pr_is_authoritative_source_lineage","source_sha":"459a1c4b70b701f1e80b339f911bc83fbcd4c17a","external_id":"5081","receipt_type":"source_lineage_merged_pr_authoritative","idempotency_key":"mission:11114093-96cb-44ea-ad68-3d75f6f539cf:merged-pr:5081:459a1c4b70b701f1e80b339f911bc83fbcd4c17a","mission_step_id":"9fc2ac36-2933-4525-bd63-0438e54cbeb4","command_center_event_id":"11114093-96cb-44ea-ad68-3d75f6f539cf"},{"id":"ffd499b1-c9ea-4511-a7cd-7c2e44e1dc0e","source":"durable-mission-ledger","status":"verified","payload":{"sourceSha":"161c318acaafc379cb83fb365c713474eb2fece4","requestContractProof":{"legacy":false,"present":true,"outcomes":[{"id":"future-popup-date","satisfied":true,"statement":"Will can choose a future date, location, start time, and end time in Big Papi Pop-Up mode and save it as a non-live scheduled Pop-Up that appears in the existing KnockLaunch calendar/schedule.","proofConditionIds":["future-popup-runtime","future-popup-repository"]},{"id":"popup-separation","satisfied":true,"statement":"The future Pop-Up stays in Pop-Up context, remains popup_live=false until actual launch, and does not become a Booked Event.","proofConditionIds":["future-popup-runtime","future-popup-repository"]}],"satisfied":true,"constraints":[{"id":"reuse-existing-calendar","satisfied":true,"statement":"Use existing user_calendar_events, normalized schedule, popup_session primitives, and schedule conflict logic. No new database migration or second calendar system.","proofConditionIds":["future-popup-repository"]},{"id":"same-day-launch-preserved","satisfied":true,"statement":"Keep the existing same-day Start Pop-Up readiness workflow, while future scheduling does not require trailer/loadout or payment-ready confirmation.","proofConditionIds":["future-popup-repository"]},{"id":"duplicate-prevention","satisfied":true,"statement":"If a scheduled popup exists for the launch date, the launch path must reuse/activate that record rather than creating a second popup calendar entry.","proofConditionIds":["future-popup-repository"]},{"id":"capability-completeness","satisfied":true,"statement":"Every dependency the implementation declares or relies on must be wired and proven across applicable frontend, backend/runtime, schema/data/storage, authentication/authorization, provider configuration, prerequisite/loading/empty/error states, release ownership, and live production behavior; owner-authorized unavailable dependencies must become explicit prerequisite states rather than runtime failures.","proofConditionIds":["future-popup-runtime","future-popup-repository"]},{"id":"atomic-capability-lifecycle","satisfied":true,"statement":"Changed capabilities remain non-active until dependency readiness, N/N-1 compatibility, affected-target release, and claim-matched production canary proof are satisfied; missing optional dependencies become prerequisite_required, and runtime drift or health-contract violation quarantines only the affected capability instead of breaking unrelated working capability.","proofConditionIds":["future-popup-runtime","future-popup-repository"]}],"contractHash":"50c49e2530d1230245c322597b06a134177e684dc19e22193e68161633cac82e","releaseBound":true,"witnessBound":false,"visualRequested":false,"visualSatisfied":true,"conditionResults":[{"id":"future-popup-runtime","kind":"runtime","evidence":{"reason":null,"satisfied":true,"releaseState":"verified","missingTargets":[],"disallowedTargets":[],"migrationRequired":false,"releaseTargetStates":{"frontend":"success"},"unsuccessfulTargets":[],"activeReleaseTargets":["frontend"],"allowedReleaseTargets":[],"requiredReleaseTargets":[],"migrationReleaseVerified":null,"releaseRequestContractHash":"50c49e2530d1230245c322597b06a134177e684dc19e22193e68161633cac82e"},"required":true,"satisfied":true},{"id":"future-popup-repository","kind":"repository","evidence":{"reason":null,"gateRunId":8904,"satisfied":true,"gateTestProof":null,"gateTestPassed":false,"missingTargets":[],"gateTestExecuted":false,"disallowedTargets":[],"migrationRequired":false,"namedGateTestPath":null,"releaseTargetStates":{"frontend":"success"},"repositoryProofGate":"request_contract_repository_verified","repositoryProofPath":null,"requestContractHash":"50c49e2530d1230245c322597b06a134177e684dc19e22193e68161633cac82e","unsuccessfulTargets":[],"activeReleaseTargets":["frontend"],"allowedReleaseTargets":[],"repositoryProofStatus":"verified","expectedRepositoryPath":null,"namedGateTestSatisfied":true,"requiredReleaseTargets":[],"migrationReleaseVerified":null,"repositoryConditionBound":true,"repositoryProofSourceSha":"161c318acaafc379cb83fb365c713474eb2fece4"},"required":true,"satisfied":true}],"validationErrors":[],"pendingProofKinds":[],"activeReleaseTargets":["frontend"]},"authoritativeMissionRefresh":true,"evaluatedRequestContractRevision":1},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-16T18:41:35.581903+00:00","proof_gate":"request_contract_terminal_verified","source_sha":"161c318acaafc379cb83fb365c713474eb2fece4","external_id":null,"receipt_type":"request_contract_reconciliation","idempotency_key":"mission:6af4fe2f-da20-4f08-93bd-ef5dd1eba303:request-contract:50c49e2530d1230245c322597b06a134177e684dc19e22193e68161633cac82e:161c318acaafc379cb83fb365c713474eb2fece4:verified:","mission_step_id":"98e6accd-2c73-4dd8-bbfe-82b69930c987","command_center_event_id":"6af4fe2f-da20-4f08-93bd-ef5dd1eba303"},{"id":"ffd59351-12a8-4d1e-9b12-b96a9d688220","source":"cc-execution","status":"waiting_for_gate","payload":{"ok":true,"jobId":null,"phase":"implementation","branch":"ai/objective-first-repair-49d0f6ca786e","reason":"provider_verified_auto_progress_owns_gate_merge_release_outside_owner_response","status":"waiting_for_gate","metrics":{"receiptBytes":14684,"releaseCount":0,"toolCallCount":9,"repeatedCallCount":4,"executorlessWaitMs":297590,"firstUsefulResultAt":"2026-10-04T09:24:44.234Z","recoveryAttemptCount":0,"ownerInterruptionCount":0},"version":"1.64.89-paul-continuation-receipt-scope","prNumber":4716,"terminal":false,"missionId":"49d0f6ca-786e-4667-ae20-1b26f91c834a","operation":"execute_mission","proofGate":"repair_mission_pr_handed_off_to_supervisor","sourceSha":null,"timingsMs":{"gateMs":0,"proofMs":0,"handlerMs":3964,"releaseMs":0,"mutationMs":0,"repositoryMs":0,"prReadinessMs":0,"approvedPlanMs":644,"missionSetupMs":177,"providerAuthMs":0,"shipAndProveMs":0,"ledgerPrepareMs":177,"ledgerReconcileMs":0,"lineageReconcileMs":0,"resolvePreflightMs":177,"repositoryMutationMs":3320,"repositoryProviderMs":3320,"authoritativeLedgerMs":0,"ledgerAsyncDispatchMs":0,"repositoryAtomicCommitMs":2066,"repositoryBranchCreateMs":0,"totalSynchronousLedgerMs":177,"asyncBookkeepingDispatchMs":0,"ledgerAuthoritativeCommitMs":0,"repositoryPullRequestCreateMs":1254},"nextAction":"Canonical KnockLaunch Gate notifier and durable mission supervisor own Gate, merge, release, and proof progression from this exact PR head outside the owner response path.","receiptRef":{"mode":"full","missionId":"49d0f6ca-786e-4667-ae20-1b26f91c834a"},"performance":null,"deploymentId":null,"releaseState":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"ownerFacingState":"IN_PROGRESS","pendingProofKinds":["runtime"],"verificationState":null,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":3327,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true,"requestContractState":"pending"},"tenant_id":"9602e177-0cbb-496c-bdf5-2fbc93f1b859","created_at":"2026-10-04T09:29:47.576219+00:00","proof_gate":"repair_mission_pr_handed_off_to_supervisor","source_sha":null,"external_id":"4716","receipt_type":"execute_mission","idempotency_key":"mission:49d0f6ca-786e-4667-ae20-1b26f91c834a:execute_mission:repair_mission_pr_handed_off_to_supervisor:current-generation","mission_step_id":"5d3017d7-ff62-49eb-aba9-b476de78de3e","command_center_event_id":"49d0f6ca-786e-4667-ae20-1b26f91c834a"},{"id":"ffd7b4cb-90c8-4dc6-934c-6d54a97a6075","source":"cc-execution","status":"authorized","payload":{"paths":[".forgejo/workflows/knocklaunch.yml","supabase/functions/admin-tenant-mode-image-upload/index.ts"],"reason":"Scoped permanent repair of the canonical Supabase Edge deployment semantics for admin-tenant-mode-image-upload; no unrelated control-plane change.","baseSha":"e19895cc0f89ae5e464f457d4abdf6eecafcbe0d","issuedAt":1789155786624,"expiresAt":1789155966624,"missionId":"68dcb75c-6461-4e70-a18a-a4ccef1985c2","authorizationId":"ea7d8ca0-80c9-437a-b7fe-41453aece710","retryableWithinExactScope":true},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-11T19:43:07.535428+00:00","proof_gate":"control_plane_maintenance_scope_authorized","source_sha":"e19895cc0f89ae5e464f457d4abdf6eecafcbe0d","external_id":null,"receipt_type":"control_plane_maintenance_authorization","idempotency_key":"control-plane-maintenance-authorize:ea7d8ca0-80c9-437a-b7fe-41453aece710","mission_step_id":"d44588c7-225b-46ec-ac61-65a8d955d961","command_center_event_id":"68dcb75c-6461-4e70-a18a-a4ccef1985c2"},{"id":"ffd81dc4-4a94-4ec2-93f4-ebdebd374cc6","source":"cc-execution","status":"waiting","payload":{"kind":"heartbeat","message":"Still active in release.","nextAction":{"lane":"production-release-conductor","action":"reconcile_release","reason":"merged_source_requires_release_proof","automationAllowed":true,"ownerActionRequired":false},"silenceBudgetMs":15000,"semanticCheckpointSignature":"{\"stateMachineVersion\":1,\"phase\":\"release\",\"ownerFacingState\":null,\"latest\":{\"kind\":\"receipt\",\"key\":\"canonical_release_status\",\"status\":\"pending\",\"proofGate\":\"canonical_release_ancestry_pending\"},\"activeStep\":{\"key\":\"preflight\",\"status\":\"ready\",\"lane\":\"cc-execution\"},\"nextStep\":{\"key\":\"implementation\",\"status\":\"pending\",\"lane\":\"cc-execution\"},\"nextSafeAction\":{\"action\":\"reconcile_release\",\"lane\":\"production-release-conductor\",\"reason\":\"merged_source_requires_release_proof\",\"automationAllowed\":true,\"ownerActionRequired\":false},\"executionOwnership\":{\"active\":false,\"state\":\"waiting\",\"executor\":null,\"lane\":\"cc-execution\",\"nextAction\":\"reconcile_release\",\"recoveryOwner\":\"production-release-conductor\"},\"acceptance\":{\"total\":6,\"verified\":0,\"pending\":6,\"percent\":0,\"satisfied\":false,\"verifiedIds\":[],\"pendingIds\":[\"preflight\",\"implementation\",\"pull_request\",\"release\",\"runtime_proof\",\"visual_proof\"]},\"stall\":{\"stalled\":true,\"reason\":\"step_deadline_exceeded\",\"step\":\"release\",\"deadlineAt\":\"2026-08-06T19:15:51.26022+00:00\",\"recoveryAction\":\"reconcile_release\"},\"blocker\":null,\"terminal\":false,\"branch\":null,\"prNumber\":4145,\"sourceSha\":\"4eeb8eef6c545e1cbfb353f640f14aaf33564873\",\"deploymentId\":\"canonical-release-4eeb8eef6c54\"}"},"tenant_id":"a2929648-19db-46c8-9e93-07378ed1aa5f","created_at":"2026-10-04T11:29:48.842838+00:00","proof_gate":"owner_progress_heartbeat","source_sha":null,"external_id":null,"receipt_type":"owner_progress_heartbeat","idempotency_key":"mission:bf4a1fba-383d-485e-be6f-689af8659452:owner-progress-heartbeat:119407559","mission_step_id":"e1969732-8363-47ad-8d05-e6c794f16193","command_center_event_id":"bf4a1fba-383d-485e-be6f-689af8659452"},{"id":"ffd856d7-91e0-4ac8-9be0-4152746d6933","source":"forgejo","status":"waiting","payload":{"branch":"ai/objective-first-repair-9a728ef74a1f","prNumber":4540,"nextAction":"Follow the existing canonical release to terminal proof.","mergeCommitSha":"cd6f0904207e4eeda744659565f2cd4bfa6dd014","branchDeletedAfterMerge":true,"correctiveGenerationCreated":false},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-02T22:19:33.851757+00:00","proof_gate":"forgejo_merged_pr_is_authoritative_source_lineage","source_sha":"cd6f0904207e4eeda744659565f2cd4bfa6dd014","external_id":"4540","receipt_type":"source_lineage_merged_pr_authoritative","idempotency_key":"mission:9a728ef7-4a1f-4650-b487-ef86d6174703:merged-pr:4540:cd6f0904207e4eeda744659565f2cd4bfa6dd014","mission_step_id":"488bc322-1717-4e8f-acc6-8ed1f5424956","command_center_event_id":"9a728ef7-4a1f-4650-b487-ef86d6174703"},{"id":"ffda4963-e9c3-412b-8fbf-90f6e298f6bb","source":"forgejo-runtime","status":"verified","payload":{"failed":[],"states":{"forgejo-main/source":"success","forgejo-release/workflow":"success","frontend-cloudflare/live":"success","supabase-migrations/live":"success"},"mainSha":"10b98ca41c8ada53c9bb16936ee6e509b42fc1d7","missing":[],"pending":[],"required":["forgejo-main/source","forgejo-release/workflow","frontend-cloudflare/live","supabase-migrations/live"],"sourceSha":"10b98ca41c8ada53c9bb16936ee6e509b42fc1d7","releaseState":"verified","sourceInMain":true,"compareStatus":"protected_main_push_exact_source","releaseTargets":{"frontend":true,"onrunner":false,"migrations":true,"ccExecution":false,"supabaseEdge":false,"edgeFunctionSlugs":[]},"releaseTargetStates":{"frontend":"success","migrations":"success"},"requestContractHash":"3cbe519e760cc4aecd7ff3cd61eae4719e3e8d3628731417c35a8ce757aac4b4","forgejoWorkflowProof":{"url":"https://git.knocklaunch.app/noel/KnockLaunchOS/actions/runs/9794","runId":9794,"status":"success","sourceSha":"10b98ca41c8ada53c9bb16936ee6e509b42fc1d7","conclusion":null,"failedJobs":[],"diagnostics":null,"exactSource":true,"targetStates":{"frontend":"success","migrations":"success"},"targetJobCount":7,"observedTargetStates":{"frontend":"success","migrations":"success"}},"onrunnerRuntimeProof":null,"releaseSourceVerified":true,"ccExecutionRuntimeProof":null,"releaseTargetRecoveryProof":null,"exactReleaseVerifiedAfterMainAdvanced":false},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-18T19:55:39.785781+00:00","proof_gate":"canonical_release_terminal_verified","source_sha":"10b98ca41c8ada53c9bb16936ee6e509b42fc1d7","external_id":"forgejo-main-10b98ca41c8a","receipt_type":"canonical_release_status","idempotency_key":"mission:d0449d39-6c26-4331-93b8-69a8a2efac75:forgejo-release-status:10b98ca41c8ada53c9bb16936ee6e509b42fc1d7:verified:forgejo-main/source=success|forgejo-release/workflow=success|frontend-cloudflare/live=success|supabase-migrations/live=success","mission_step_id":"18fcdd04-ceda-4766-a053-1a34132b8335","command_center_event_id":"d0449d39-6c26-4331-93b8-69a8a2efac75"},{"id":"ffdcf48e-6209-4e48-bf6e-0cfad0444a87","source":"durable-mission-ledger","status":"verified","payload":{"sourceSha":"0a03771b89e057dfff3b68e9bf8d313524e661d4","requestContractProof":{"legacy":false,"present":true,"outcomes":[{"id":"outcome-1","satisfied":true,"statement":"Reduce only the desktop/tablet visual density of src/pages/card-grading/PCGPublicSite.tsx so the PCG public preview at 100% browser zoom visually matches the owner's observed 67% sweet spot. Keep mobile sizing unchanged. Keep prestigiouscardgrading.com and www.prestigiouscardgrading.com on the existing Under Construction gate. Use one maintainable PCG-local scaling primitive rather than manually resizing every element. Do not touch PrivateAppShell or PcgAppShell. Ship, deploy, and verify the preview route on desktop and mobile.","proofConditionIds":["proof-production"]}],"satisfied":true,"constraints":[{"id":"visual-content-truth","satisfied":true,"statement":"Do not present invented names, metrics, prices, dates, services, testimonials, credentials, customer records, or other unknown business facts as real. Omit unknowns or mark them clearly as placeholder/example content.","proofConditionIds":["proof-production"]},{"id":"visual-viewport-authority","satisfied":true,"statement":"The requested mobile viewport/form factor is authoritative. Do not create a mixed-device composite or add another viewport unless explicitly requested.","proofConditionIds":["proof-production"]},{"id":"reference-visual-fidelity","satisfied":true,"statement":"The approved reference owns the material visual composition: hierarchy, major geometry, typography scale, spacing rhythm, image placement/crop, color treatment, radii, shadows/glow, and overall density. Material deviation is a failed visual acceptance, not a stylistic reinterpretation.","proofConditionIds":["proof-production"]},{"id":"responsive-visual-continuity","satisfied":true,"statement":"Responsive adaptation may reflow for the target viewport, but it must preserve information hierarchy, branding, functionality, and design language. It must not invent a second design.","proofConditionIds":["proof-production"]},{"id":"reference-visual-authority","satisfied":true,"statement":"The supplied or approved reference visual is immutable acceptance evidence. Generating another mockup, image, or concept cannot satisfy this implementation request; completion requires source implementation, deployment, and reference-matched visual proof.","proofConditionIds":["proof-production"]},{"id":"capability-completeness","satisfied":true,"statement":"Every dependency the implementation declares or relies on must be wired and proven across applicable frontend, backend/runtime, schema/data/storage, authentication/authorization, provider configuration, prerequisite/loading/empty/error states, release ownership, and live production behavior; owner-authorized unavailable dependencies must become explicit prerequisite states rather than runtime failures.","proofConditionIds":["proof-production"]},{"id":"atomic-capability-lifecycle","satisfied":true,"statement":"Changed capabilities remain non-active until dependency readiness, N/N-1 compatibility, affected-target release, and claim-matched production canary proof are satisfied; missing optional dependencies become prerequisite_required, and runtime drift or health-contract violation quarantines only the affected capability instead of breaking unrelated working capability.","proofConditionIds":["proof-production"]}],"contractHash":"b60077a42a98d331e3fa872e6e4d0353144c5a58f184f6ce4b4e94c35a796cef","releaseBound":true,"witnessBound":false,"visualRequested":false,"visualSatisfied":true,"conditionResults":[{"id":"proof-production","kind":"runtime","evidence":{"reason":null,"satisfied":true,"releaseState":"verified","missingTargets":[],"disallowedTargets":[],"migrationRequired":false,"releaseTargetStates":{"frontend":"success"},"unsuccessfulTargets":[],"activeReleaseTargets":["frontend"],"allowedReleaseTargets":[],"requiredReleaseTargets":[],"migrationReleaseVerified":null,"releaseRequestContractHash":"b60077a42a98d331e3fa872e6e4d0353144c5a58f184f6ce4b4e94c35a796cef"},"required":true,"satisfied":true}],"validationErrors":[],"pendingProofKinds":[],"activeReleaseTargets":["frontend"]},"authoritativeMissionRefresh":true,"evaluatedRequestContractRevision":1},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-05T14:08:30.821384+00:00","proof_gate":"request_contract_terminal_verified","source_sha":"0a03771b89e057dfff3b68e9bf8d313524e661d4","external_id":null,"receipt_type":"request_contract_reconciliation","idempotency_key":"mission:ef2348b2-3788-460c-b4d8-1ecab679d19b:request-contract:b60077a42a98d331e3fa872e6e4d0353144c5a58f184f6ce4b4e94c35a796cef:0a03771b89e057dfff3b68e9bf8d313524e661d4:verified:","mission_step_id":"41f91049-0dfb-47cb-b12a-edb5a8577f3a","command_center_event_id":"ef2348b2-3788-460c-b4d8-1ecab679d19b"},{"id":"ffdcfeaa-4195-47eb-8720-f41fce07e98f","source":"cc-execution","status":"retryable","payload":{"ok":false,"jobId":null,"phase":"pull_request","branch":"ai/roofhelpfinder-growth-engine-20260829","reason":"retryable_provider_transport:GET:The operation was aborted due to timeout","status":"retryable","metrics":{"receiptBytes":4364,"releaseCount":0,"toolCallCount":3,"repeatedCallCount":0,"ownerInterruptionCount":0},"version":"1.56.0-owner-continuation-scope","prNumber":null,"terminal":false,"missionId":"ddf9700b-5519-4246-a780-2c505577dbd8","operation":"execute_mission","proofGate":"repair_mission_execution_retryable","sourceSha":null,"timingsMs":{"handlerMs":10500,"prReadinessMs":0,"approvedPlanMs":10500,"missionSetupMs":861,"shipAndProveMs":0},"nextAction":null,"receiptRef":{"mode":"full","missionId":"ddf9700b-5519-4246-a780-2c505577dbd8"},"performance":null,"deploymentId":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":5548,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-08-29T14:52:37.200961+00:00","proof_gate":"repair_mission_execution_retryable","source_sha":null,"external_id":null,"receipt_type":"execute_mission","idempotency_key":"mission:ddf9700b-5519-4246-a780-2c505577dbd8:execute_mission:repair_mission_execution_retryable:current-generation","mission_step_id":"6713be38-02cc-4d0c-ac0e-d3e7949985bf","command_center_event_id":"ddf9700b-5519-4246-a780-2c505577dbd8"},{"id":"ffde0285-1d76-46ae-a9b1-921286713e5c","source":"forgejo-runtime","status":"verified","payload":{"failed":[],"states":{"forgejo-main/source":"success","forgejo-release/workflow":"success","cc-execution/runtime-proof":"success"},"mainSha":"52b597136a26f7a6154bbc94dfcbf18052611e9b","missing":[],"pending":[],"required":["forgejo-main/source","forgejo-release/workflow","cc-execution/runtime-proof"],"sourceSha":"52b597136a26f7a6154bbc94dfcbf18052611e9b","releaseState":"verified","sourceInMain":true,"compareStatus":"protected_main_push_exact_source","releaseTargets":{"frontend":false,"onrunner":false,"migrations":false,"ccExecution":true,"supabaseEdge":false,"edgeFunctionSlugs":[]},"releaseTargetStates":{"ccExecution":"success"},"requestContractHash":"ef02d8d479e66535c865a656eaaa6f8fc166bdd6893adce8ba733d0eba21fc89","forgejoWorkflowProof":{"runId":11381,"source":"exact_live_cc_execution_runtime_identity","status":"running","liveSha":"52b597136a26f7a6154bbc94dfcbf18052611e9b","results":{},"proofGate":"cc_execution_exact_live_runtime_substitutes_transient_workflow_receipt","sourceSha":"52b597136a26f7a6154bbc94dfcbf18052611e9b","conclusion":"running","deploymentId":"forgejo-main-52b597136a26f7a6154bbc94dfcbf18052611e9b","targetStates":{"ccExecution":"pending"},"runtimeVersion":"1.58.238-scoped-mutation-latency","targetJobCount":7,"observedTargetStates":{"ccExecution":"pending"},"workflowReceiptSubstituted":true},"onrunnerRuntimeProof":null,"releaseSourceVerified":true,"ccExecutionRuntimeProof":{"liveSha":"52b597136a26f7a6154bbc94dfcbf18052611e9b","proofGate":"cc_execution_target_aware_runtime_identity_verified","deploymentId":"forgejo-main-52b597136a26f7a6154bbc94dfcbf18052611e9b","compareStatus":"identical","workflowRunId":11381,"identitySource":"local_build_metadata","runtimeVersion":"1.58.238-scoped-mutation-latency","workflowFailed":false,"containsSourceSha":true},"releaseTargetRecoveryProof":null,"exactReleaseVerifiedAfterMainAdvanced":false},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-24T04:49:21.845907+00:00","proof_gate":"canonical_release_terminal_verified","source_sha":"52b597136a26f7a6154bbc94dfcbf18052611e9b","external_id":"forgejo-main-52b597136a26","receipt_type":"canonical_release_status","idempotency_key":"mission:ce1aaef9-6cbf-4567-8214-5633d1676cb8:forgejo-release-status:52b597136a26f7a6154bbc94dfcbf18052611e9b:verified:forgejo-main/source=success|forgejo-release/workflow=success|cc-execution/runtime-proof=success","mission_step_id":"cc76a3e5-3f06-408c-a33d-2f925bb4c52f","command_center_event_id":"ce1aaef9-6cbf-4567-8214-5633d1676cb8"},{"id":"ffde37d3-4908-4f07-bfd8-a51c34bfd711","source":"cc-execution-autonomous-supervisor","status":"advanced","payload":{"trigger":"cloudflare_cron","leaseEpoch":216,"afterSignature":"{\"stateMachineVersion\":1,\"phase\":\"pull_request\",\"ownerFacingState\":null,\"latest\":{\"kind\":\"receipt\",\"key\":\"deterministic_supervisor_transition\",\"status\":\"advanced\",\"proofGate\":\"deterministic_semantic_transition_journaled\"},\"activeStep\":{\"key\":\"preflight\",\"status\":\"ready\",\"lane\":\"cc-execution\"},\"nextStep\":{\"key\":\"implementation\",\"status\":\"failed\",\"lane\":\"cc-execution\"},\"nextSafeAction\":{\"action\":\"resolve_preflight\",\"lane\":\"cc-execution\",\"reason\":\"durable_state:preflight\",\"automationAllowed\":false,\"ownerActionRequired\":false},\"executionOwnership\":{\"active\":false,\"state\":\"waiting\",\"executor\":null,\"lane\":\"cc-execution\",\"nextAction\":\"resolve_preflight\",\"recoveryOwner\":\"cc-execution\"},\"acceptance\":{\"total\":6,\"verified\":0,\"pending\":6,\"percent\":0,\"satisfied\":false,\"verifiedIds\":[],\"pendingIds\":[\"preflight\",\"implementation\",\"pull_request\",\"release\",\"runtime_proof\",\"visual_proof\"]},\"stall\":{\"stalled\":true,\"reason\":\"step_deadline_exceeded\",\"step\":\"pull_request\",\"deadlineAt\":\"2026-08-07T00:07:30.383421+00:00\",\"recoveryAction\":\"resolve_preflight\"},\"blocker\":null,\"terminal\":false,\"branch\":null,\"prNumber\":null,\"sourceSha\":null,\"deploymentId\":null}","beforeSignature":null,"transitionBrain":"mission_status_deterministic_supervisor"},"tenant_id":"a2929648-19db-46c8-9e93-07378ed1aa5f","created_at":"2026-10-04T18:47:17.008227+00:00","proof_gate":"deterministic_semantic_transition_journaled","source_sha":null,"external_id":null,"receipt_type":"deterministic_supervisor_transition","idempotency_key":"mission:2ec2c77c-996a-43f4-9f8d-29090a3994e2:deterministic-transition:none:{\"stateMachineVersion\":1,\"phase\":\"pull_request\",\"ownerFacingState\":null,\"latest\":{\"kind\":\"receipt\",\"key\":\"deterministic_supervisor_transition\",\"status\":\"advanced\",\"proofGate\":\"deterministic_semantic_transition_journaled\"},\"activeStep\":{\"key\":\"preflight\",\"status\":\"ready\",\"lane\":\"cc-execution\"},\"nextStep\":{\"key\":\"implementation\",\"status\":\"failed\",\"lane\":\"cc-execution\"},\"nextSafeAction\":{\"action\":\"resolve_preflight\",\"lane\":\"","mission_step_id":"d3ae04bd-37b3-4f89-847c-18ac1d3d0c8b","command_center_event_id":"2ec2c77c-996a-43f4-9f8d-29090a3994e2"},{"id":"ffdeeace-3a85-4a33-839b-c116896fd3e0","source":"cc-execution","status":"repair_prepared","payload":{"ok":true,"jobId":null,"phase":"pull_request","branch":"ai/fix-assets-only-worker-binding","reason":null,"status":"repair_prepared","metrics":{"receiptBytes":925,"releaseCount":0,"toolCallCount":1,"repeatedCallCount":0,"ownerInterruptionCount":0},"version":"1.30.20-pr-scoped-release-missions","prNumber":4158,"terminal":false,"missionId":"7b06670b-4b1b-4979-bad4-d557b308c43d","operation":"execute_mission","proofGate":"repair_mission_prepared","sourceSha":null,"timingsMs":null,"nextAction":"continue_batch_or_ship_and_prove","receiptRef":{"mode":"full","missionId":"7b06670b-4b1b-4979-bad4-d557b308c43d"},"performance":null,"deploymentId":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"onePullRequest":true,"terminalProofRequired":true},"sourceReceiptBytes":986,"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true},"tenant_id":"a2929648-19db-46c8-9e93-07378ed1aa5f","created_at":"2026-08-06T21:30:52.490147+00:00","proof_gate":"repair_mission_prepared","source_sha":null,"external_id":"4158","receipt_type":"execute_mission","idempotency_key":"mission:7b06670b-4b1b-4979-bad4-d557b308c43d:execute_mission:repair_mission_prepared","mission_step_id":"a77a5589-6d80-4f94-98ef-515897db4d62","command_center_event_id":"7b06670b-4b1b-4979-bad4-d557b308c43d"},{"id":"ffe1cdeb-3d71-4184-ba6a-3939027a1d3c","source":"cc-execution","status":"waiting","payload":{"body":{"ship":true,"files":[{"path":"workers/cc-execution/src/entrypoint-mcp-oauth.js","content":"import ownerStatusWorker from \"./entrypoint-owner-status.js\";\nimport mcpOAuthWorker from \"./index-mcp-oauth.js\";\nimport commandCenterMcpWorker from \"./index-mcp.js\";\nexport { ForgejoHostCommandQueue } from \"./forgejo-host-command-queue.js\";\nexport { VisualWitnessVirtualRunner } from \"./visual-witness-virtual-container.js\";\n\nconst WELL_KNOWN_PATHS = new Set([\n \"/.well-known/oauth-protected-resource\",\n \"/.well-known/oauth-protected-resource/mcp\",\n]);\n\nconst CURSOR_READONLY_TOOLS = new Set([\n \"command_center_health\",\n \"command_center_capabilities\",\n]);\n\nfunction bearerToken(request) {\n const value = String(request.headers.get(\"Authorization\") || \"\").trim();\n return /^Bearer\\s+/i.test(value) ? value.replace(/^Bearer\\s+/i, \"\").trim() : \"\";\n}\n\nasync function constantTimeTokenMatch(left, right) {\n const expected = String(right || \"\").trim();\n const actual = String(left || \"\").trim();\n if (!expected || !actual) return false;\n const encoder = new TextEncoder();\n const [actualDigest, expectedDigest] = await Promise.all([\n crypto.subtle.digest(\"SHA-256\", encoder.encode(actual)),\n crypto.subtle.digest(\"SHA-256\", encoder.encode(expected)),\n ]);\n const a = new Uint8Array(actualDigest);\n const b = new Uint8Array(expectedDigest);\n let diff = a.length ^ b.length;\n for (let index = 0; index < Math.min(a.length, b.length); index += 1) diff |= a[index] ^ b[index];\n return diff === 0;\n}\n\nexport async function cursorReadonlyAuthDecision(request, env) {\n const token = bearerToken(request);\n if (!(await constantTimeTokenMatch(token, env.CURSOR_PRIME_READONLY_TOKEN))) {\n return { mode: \"other\", isToolCall: false, allowed: false, tool: \"\", id: null };\n }\n let message = null;\n try { message = await request.clone().json(); } catch {}\n const isToolCall = String(message?.method || \"\") === \"tools/call\";\n const tool = String(message?.params?.name || \"\");\n return {\n mode: \"cursor_readonly\",\n isToolCall,\n allowed: isToolCall && CURSOR_READONLY_TOOLS.has(tool),\n tool,\n id: message?.id ?? null,\n };\n}\n\nexport default {\n async fetch(request, env, ctx) {\n const path = new URL(request.url).pathname;\n if (path === \"/mcp\") {\n const decision = await cursorReadonlyAuthDecision(request, env);\n if (decision.mode === \"cursor_readonly\" && decision.isToolCall && decision.allowed) {\n const headers = new Headers(request.headers);\n headers.set(\"Authorization\", `Bearer ${String(env.CC_EXECUTION_KEY || \"\").trim()}`);\n headers.set(\"X-Knocklaunch-Auth-Mode\", \"cursor_readonly\");\n return commandCenterMcpWorker.fetch(new Request(request, { headers }), env, ctx);\n }\n if (decision.mode === \"cursor_readonly\" && decision.isToolCall && !decision.allowed) {\n return new Response(JSON.stringify({\n jsonrpc: \"2.0\",\n id: decision.id ?? null,\n error: {\n code: -32003,\n message: \"Forbidden\",\n data: { proofGate: \"cursor_readonly_tool_denied\", authMode: \"cursor_readonly\" },\n },\n }), {\n status: 403,\n headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n }\n }\n if (path === \"/mcp\" || path === \"/mcp/catalog\" || WELL_KNOWN_PATHS.has(path)) {\n return mcpOAuthWorker.fetch(request, env, ctx);\n }\n return ownerStatusWorker.fetch(request, env, ctx);\n },\n async scheduled(controller, env, ctx) {\n return ownerStatusWorker.scheduled(controller, env, ctx);\n },\n};\n"},{"path":"workers/cc-execution/src/version.js","content":"// Release marker: Forgejo is the canonical repository and self-hosted Actions control plane.\nexport const CC_EXECUTION_VERSION = \"1.58.285-cursor-readonly-mcp-auth\";\n"},{"path":"workers/cc-execution/src/cursor-readonly-mcp-auth.test.js","content":"import test from \"node:test\";\nimport assert from \"node:assert/strict\";\nimport { cursorReadonlyAuthDecision } from \"./entrypoint-mcp-oauth.js\";\n\nfunction requestFor({ tool = \"command_center_health\", token = \"cursor-secret\", method = \"tools/call\" } = {}) {\n return new Request(\"https://cc-execution.knocklaunch.app/mcp\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n ...(token ? { Authorization: `Bearer ${token}` } : {}),\n },\n body: JSON.stringify({\n jsonrpc: \"2.0\",\n id: 1,\n method,\n params: method === \"tools/call\" ? { name: tool, arguments: {} } : {},\n }),\n });\n}\n\ntest(\"Cursor read-only auth allows only health and capabilities tool calls\", async () => {\n const env = { CURSOR_PRIME_READONLY_TOKEN: \"cursor-secret\" };\n assert.equal((await cursorReadonlyAuthDecision(requestFor({ tool: \"command_center_health\" }), env)).allowed, true);\n assert.equal((await cursorReadonlyAuthDecision(requestFor({ tool: \"command_center_capabilities\" }), env)).allowed, true);\n const executeDecision = await cursorReadonlyAuthDecision(requestFor({ tool: \"command_center_execute\" }), env);\n assert.equal(executeDecision.mode, \"cursor_readonly\");\n assert.equal(executeDecision.isToolCall, true);\n assert.equal(executeDecision.allowed, false);\n});\n\ntest(\"Cursor read-only auth rejects missing and incorrect credentials\", async () => {\n const env = { CURSOR_PRIME_READONLY_TOKEN: \"cursor-secret\" };\n assert.equal((await cursorReadonlyAuthDecision(requestFor({ token: \"\" }), env)).mode, \"other\");\n assert.equal((await cursorReadonlyAuthDecision(requestFor({ token: \"wrong\" }), env)).mode, \"other\");\n});\n\ntest(\"Cursor read-only credential does not block public MCP discovery methods\", async () => {\n const env = { CURSOR_PRIME_READONLY_TOKEN: \"cursor-secret\" };\n const decision = await cursorReadonlyAuthDecision(requestFor({ method: \"tools/list\" }), env);\n assert.equal(decision.mode, \"cursor_readonly\");\n assert.equal(decision.isToolCall, false);\n assert.equal(decision.allowed, false);\n});\n"}],"branch":"ai/objective-first-repair-52ac1fafca13","writes":[],"patches":[],"version":1,"approved":true,"missionId":"52ac1faf-ca13-46ca-88eb-4c876681f35e","objective":"Implement and ship a dedicated Cursor read-only MCP bearer authentication path for Prime using runtime secret CURSOR_PRIME_READONLY_TOKEN. The credential may call only command_center_health and command_center_capabilities and must be denied from command_center_execute. Preserve existing OAuth and internal execution-key behavior unchanged, never expose secret material, add deterministic regression coverage, pass Gate, squash merge, release only cc-execution, and verify live runtime. Do not set the actual secret value or change Cursor config yet.","repository":"noel/KnockLaunchOS","ownerApproved":true,"releaseIntent":null,"sourceTargets":[],"implementation":{"files":[],"writes":[]},"requestContract":null,"repairGeneration":null,"executionEnvelope":{"ship":true,"version":1,"approved":true,"missionId":"52ac1faf-ca13-46ca-88eb-4c876681f35e","ownerApproved":true,"releaseIntent":null,"sourceTargets":[],"requestContract":null,"repairGeneration":null,"proofRequirements":null,"controlPlaneUnfreeze":true,"controlPlaneMaintenance":true,"controlPlaneMaintenancePaths":["workers/cc-execution/src/entrypoint-mcp-oauth.js","workers/cc-execution/src/version.js","workers/cc-execution/src/cursor-readonly-mcp-auth.test.js"],"controlPlaneMaintenanceReason":"Owner explicitly authorized this Prime authentication repair so Cursor can use read-only MCP access."},"proofRequirements":null,"controlPlaneUnfreeze":true,"durableMutationResume":true,"controlPlaneMaintenance":true,"controlPlaneMaintenancePaths":["workers/cc-execution/src/entrypoint-mcp-oauth.js","workers/cc-execution/src/version.js","workers/cc-execution/src/cursor-readonly-mcp-auth.test.js"],"controlPlaneMaintenanceReason":"Owner explicitly authorized this Prime authentication repair so Cursor can use read-only MCP access."},"recovery":false,"fingerprint":"ef105739b03d74ca0bf0df66e0d381bc03bd7d8f5424bf612e4aa668285e0487","replayCount":0,"serializedBytes":8210},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-26T10:22:02.304401+00:00","proof_gate":"repository_mutation_intent_persisted","source_sha":null,"external_id":null,"receipt_type":"repository_mutation_intent","idempotency_key":"mission:52ac1faf-ca13-46ca-88eb-4c876681f35e:repository-mutation-intent:ef105739b03d74ca0bf0df66e0d381bc03bd7d8f5424bf612e4aa668285e0487:0","mission_step_id":"7ca769e2-3a73-4aff-b02e-3c00c0ada815","command_center_event_id":"52ac1faf-ca13-46ca-88eb-4c876681f35e"},{"id":"ffe225d4-c8a3-4325-9c37-87f0dd64560c","source":"forgejo-runtime","status":"failed","payload":{"failed":["forgejo-release/workflow"],"states":{"forgejo-main/source":"success","forgejo-release/workflow":"failure","frontend-cloudflare/live":"pending","supabase-edge-production/live":"pending"},"mainSha":"f0a04456f3f0ee07f4e502f2ec1a6bb6c563649f","missing":[],"pending":["supabase-edge-production/live","frontend-cloudflare/live"],"required":["forgejo-main/source","forgejo-release/workflow","supabase-edge-production/live","frontend-cloudflare/live"],"sourceSha":"855803326bafacf34bfd66ad42d5a87ae511ed15","releaseState":"failed","sourceInMain":true,"compareStatus":"known_exact_protected_main_push_history","releaseTargets":{"frontend":true,"onrunner":false,"migrations":false,"ccExecution":false,"supabaseEdge":true,"edgeFunctionSlugs":[]},"releaseTargetStates":{"frontend":"pending","supabaseEdge":"pending"},"requestContractHash":"a06098f88f0de7c1389a3b4c519dd359f0aeddaa0a670853191cb506ac3db1b2","forgejoWorkflowProof":{"runId":8982,"source":"signed_push_receipt","status":"cancelled","results":{},"conclusion":"cancelled","fingerprint":"cancelled||","failureClass":"release_cancelled_transient","targetStates":{"frontend":"pending","supabaseEdge":"pending"},"safeAutoRetry":true,"targetJobCount":7,"observedTargetStates":{"frontend":"pending","supabaseEdge":"pending"}},"onrunnerRuntimeProof":null,"releaseSourceVerified":true,"ccExecutionRuntimeProof":null,"releaseTargetRecoveryProof":null,"exactReleaseVerifiedAfterMainAdvanced":false},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-16T21:17:58.683153+00:00","proof_gate":"canonical_release_terminal_failed","source_sha":"855803326bafacf34bfd66ad42d5a87ae511ed15","external_id":"forgejo-main-855803326baf","receipt_type":"canonical_release_status","idempotency_key":"mission:3a02721b-3ea5-4eef-8b4f-2d33615d7a81:forgejo-release-status:855803326bafacf34bfd66ad42d5a87ae511ed15:failed:forgejo-main/source=success|forgejo-release/workflow=failure|supabase-edge-production/live=pending|frontend-cloudflare/live=pending","mission_step_id":"06dc425f-c0d3-4a70-b014-b3592fbc1036","command_center_event_id":"3a02721b-3ea5-4eef-8b4f-2d33615d7a81"},{"id":"ffe56fd2-7b92-48b9-95a6-c0fd1761e682","source":"cc-execution","status":"synthesis_required","payload":{"ok":true,"jobId":null,"phase":"pull_request","branch":"ai/objective-first-repair-mtgmnf1e","reason":null,"status":"synthesis_required","metrics":{"receiptBytes":11361,"releaseCount":0,"toolCallCount":5,"repeatedCallCount":2,"ownerInterruptionCount":0},"version":"1.56.5-premium-motion-source-targets","prNumber":1180,"terminal":false,"missionId":"3a02c444-f9b4-4fce-9209-6792e1785f92","operation":"execute_mission","proofGate":"repair_mission_synthesis_ready","sourceSha":null,"timingsMs":{"handlerMs":734,"missionSetupMs":921},"nextAction":"Inspect the bounded repository paths, synthesize exact files or anchored_edits, and call /mission/execute again automatically with this same missionId without another owner prompt or workflow switch.","receiptRef":{"mode":"full","missionId":"3a02c444-f9b4-4fce-9209-6792e1785f92"},"performance":null,"deploymentId":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"ownerFacingState":"IN_PROGRESS","workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":3433,"likelyAffectedFiles":["supabase/functions/submit-demo-request/index.ts","src/__tests__/contracts/business-operating-blueprint.contract.test.ts"],"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true},"tenant_id":"385f3582-1b06-5a13-85b5-ad36fa03b397","created_at":"2026-08-31T02:44:27.993023+00:00","proof_gate":"repair_mission_synthesis_ready","source_sha":null,"external_id":"1180","receipt_type":"execute_mission","idempotency_key":"mission:3a02c444-f9b4-4fce-9209-6792e1785f92:execute_mission:repair_mission_synthesis_ready:current-generation","mission_step_id":"a390072d-ef8a-4eb4-810a-38b5e5cf8332","command_center_event_id":"3a02c444-f9b4-4fce-9209-6792e1785f92"},{"id":"ffe787a8-d1a0-4f92-a8df-7ac91f8fd127","source":"cc-execution","status":"waiting","payload":{"body":{"ship":true,"files":[],"branch":"ai/objective-first-repair-93bb161954ba","writes":[],"patches":[],"version":1,"approved":true,"missionId":"93bb1619-54ba-488a-a378-5b4272c7e710","objective":"Apply the deterministic canary repair: preserve Wrangler versions upload preview_url with version_id, validate it as the exact workers.dev candidate URL, and use it for zero-traffic canary proof and console release phases. Add focused contract coverage and ship through canonical Gate.","repository":"noel/KnockLaunchOS","ownerApproved":true,"releaseIntent":null,"sourceTargets":[],"anchored_edits":[{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" const event = JSON.parse(lines[index]);\n if (event?.type === 'version-upload' && typeof event?.version_id === 'string' && event.version_id.trim()) {\n const previewUrl = String(event?.preview_url || '').trim();\n if (!previewUrl) throw new Error('wrangler_version_upload_preview_url_missing');\n return { versionId: event.version_id.trim(), previewUrl };\n }","old_content":" const event = JSON.parse(lines[index]);\n if (event?.type === 'version-upload' && typeof event?.version_id === 'string' && event.version_id.trim()) return event.version_id.trim();"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":"function candidateVersionProofUrl(candidatePreviewUrl, candidateVersionId) {\n const normalized = String(candidatePreviewUrl || '').trim();\n if (!normalized) throw new Error(`frontend_candidate_version_url_unavailable:${candidateVersionId}`);\n let url;\n try { url = new URL(normalized); } catch { throw new Error(`frontend_candidate_version_url_invalid:${candidateVersionId}`); }\n if (url.protocol !== 'https:' || !url.hostname.endsWith('.workers.dev')) {\n throw new Error(`frontend_candidate_version_url_invalid:${candidateVersionId}`);\n }\n return url.toString();\n}\n\nasync function candidateCanaryAttempt(candidateVersionId, candidatePreviewUrl, expectedSourceSha, useOverride) {\n const { expectedIndexHash, assetRefs, proofDomains } = localArtifactContract();\n const canaryDomains = useOverride ? [candidateVersionProofUrl(candidatePreviewUrl, candidateVersionId)] : proofDomains;","old_content":"function candidateVersionProofUrl(candidateVersionId) {\n const result = runWranglerCaptured(['versions', 'view', candidateVersionId, '--json']);\n if (result.status !== 0) throw new Error(`frontend_candidate_version_view_failed:${result.status ?? 1}`);\n const urls = [...collectVersionUrls(parseWranglerJson(result.stdout))]\n .filter((value) => {\n try { return new URL(value).hostname.endsWith('.workers.dev'); } catch { return false; }\n })\n .sort();\n if (!urls.length) throw new Error(`frontend_candidate_version_url_unavailable:${candidateVersionId}`);\n return urls[0];\n}\n\nasync function candidateCanaryAttempt(candidateVersionId, expectedSourceSha, useOverride) {\n const { expectedIndexHash, assetRefs, proofDomains } = localArtifactContract();\n const canaryDomains = useOverride ? [candidateVersionProofUrl(candidateVersionId)] : proofDomains;"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":"async function proveCandidate(candidateVersionId, candidatePreviewUrl, expectedSourceSha, useOverride, label, timeoutMs) {","old_content":"async function proveCandidate(candidateVersionId, expectedSourceSha, useOverride, label, timeoutMs) {"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" lastResult = await candidateCanaryAttempt(candidateVersionId, candidatePreviewUrl, expectedSourceSha, useOverride);","old_content":" lastResult = await candidateCanaryAttempt(candidateVersionId, expectedSourceSha, useOverride);"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" const candidateUpload = uploadCandidateVersion(expectedSourceSha);\n const candidateVersionId = candidateUpload.versionId;\n const candidatePreviewUrl = candidateUpload.previewUrl;\n transactionWrite({ state: 'candidate_uploaded', sourceSha: expectedSourceSha, stableVersionId, candidateVersionId, candidatePreviewUrl, stableDeployment: initialRows, uploadedAt: new Date().toISOString() });\n console.log(JSON.stringify({ ok: true, proofGate: 'frontend_release_transaction_started', stableVersionId, candidateVersionId, candidatePreviewUrl, sourceSha: expectedSourceSha }));","old_content":" const candidateVersionId = uploadCandidateVersion(expectedSourceSha);\n transactionWrite({ state: 'candidate_uploaded', sourceSha: expectedSourceSha, stableVersionId, candidateVersionId, stableDeployment: initialRows, uploadedAt: new Date().toISOString() });\n console.log(JSON.stringify({ ok: true, proofGate: 'frontend_release_transaction_started', stableVersionId, candidateVersionId, sourceSha: expectedSourceSha }));"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" await proveCandidate(candidateVersionId, candidatePreviewUrl, expectedSourceSha, true, 'frontend_zero_traffic_candidate_canary_verified', CANARY_PROOF_TIMEOUT_MS);","old_content":" await proveCandidate(candidateVersionId, expectedSourceSha, true, 'frontend_zero_traffic_candidate_canary_verified', CANARY_PROOF_TIMEOUT_MS);"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" await proveCandidate(candidateVersionId, candidatePreviewUrl, expectedSourceSha, false, 'frontend_post_promotion_application_verified', PROMOTION_PROOF_TIMEOUT_MS);","old_content":" await proveCandidate(candidateVersionId, expectedSourceSha, false, 'frontend_post_promotion_application_verified', PROMOTION_PROOF_TIMEOUT_MS);"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" const candidateUpload = uploadCandidateVersion(expectedSourceSha);\n const candidateVersionId = candidateUpload.versionId;\n const candidatePreviewUrl = candidateUpload.previewUrl;\n transactionWrite({state:'candidate_uploaded',sourceSha:expectedSourceSha,stableVersionId,candidateVersionId,candidatePreviewUrl});","old_content":" const candidateVersionId = uploadCandidateVersion(expectedSourceSha);\n transactionWrite({state:'candidate_uploaded',sourceSha:expectedSourceSha,stableVersionId,candidateVersionId});"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" await proveCandidate(transaction.candidateVersionId,transaction.candidatePreviewUrl,expectedSourceSha,true,'console_candidate_verified',CANARY_PROOF_TIMEOUT_MS);","old_content":" await proveCandidate(transaction.candidateVersionId,expectedSourceSha,true,'console_candidate_verified',CANARY_PROOF_TIMEOUT_MS);"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" await proveCandidate(transaction.candidateVersionId,transaction.candidatePreviewUrl,expectedSourceSha,true,'console_promotion_preflight_verified',CANARY_PROOF_TIMEOUT_MS);","old_content":" await proveCandidate(transaction.candidateVersionId,expectedSourceSha,true,'console_promotion_preflight_verified',CANARY_PROOF_TIMEOUT_MS);"},{"path":"scripts/cloudflare-native-version-deploy.mjs","new_content":" await proveCandidate(transaction.candidateVersionId,transaction.candidatePreviewUrl,expectedSourceSha,false,'console_live_verified',PROMOTION_PROOF_TIMEOUT_MS);","old_content":" await proveCandidate(transaction.candidateVersionId,expectedSourceSha,false,'console_live_verified',PROMOTION_PROOF_TIMEOUT_MS);"},{"path":"src/__tests__/contracts/frontend-public-domain-release-classification.contract.test.ts","new_content":" it('proves zero-traffic candidates through the exact preview URL returned by Wrangler upload', () => {\n const deploy = read('scripts/cloudflare-native-version-deploy.mjs');\n expect(deploy).toContain(\"event?.preview_url\");\n expect(deploy).toContain('wrangler_version_upload_preview_url_missing');\n expect(deploy).toContain('candidatePreviewUrl');\n expect(deploy).toContain('frontend_candidate_version_url_unavailable');\n expect(deploy).toContain(\"hostname.endsWith('.workers.dev')\");\n });","old_content":" it('proves zero-traffic candidates through their exact Cloudflare Version URL', () => {\n const deploy = read('scripts/cloudflare-native-version-deploy.mjs');\n expect(deploy).toContain(\"['versions', 'view', candidateVersionId, '--json']\");\n expect(deploy).toContain('frontend_candidate_version_url_unavailable');\n expect(deploy).toContain(\"hostname.endsWith('.workers.dev')\");\n });"}],"evaluateChecks":true,"implementation":{"files":[],"writes":[]},"openPullRequest":true,"requestContract":null,"repairGeneration":null,"executionEnvelope":{"ship":true,"version":1,"approved":true,"missionId":"93bb1619-54ba-488a-a378-5b4272c7e710","ownerApproved":true,"releaseIntent":null,"sourceTargets":[],"requestContract":null,"repairGeneration":null,"proofRequirements":null,"controlPlaneUnfreeze":false,"controlPlaneMaintenance":false,"controlPlaneMaintenancePaths":[],"controlPlaneMaintenanceReason":null},"proofRequirements":null,"controlPlaneUnfreeze":false,"durableMutationResume":true,"controlPlaneMaintenance":false,"controlPlaneMaintenancePaths":[],"controlPlaneMaintenanceReason":null},"recovery":false,"fingerprint":"e36798d06e7f9b255d531077c601220dcae0d1f4a22413e6b80804940a5966aa","replayCount":0,"serializedBytes":9228},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-30T03:35:48.759463+00:00","proof_gate":"repository_mutation_intent_persisted","source_sha":null,"external_id":null,"receipt_type":"repository_mutation_intent","idempotency_key":"mission:93bb1619-54ba-488a-a378-5b4272c7e710:repository-mutation-intent:e36798d06e7f9b255d531077c601220dcae0d1f4a22413e6b80804940a5966aa:0","mission_step_id":"06b07c40-488f-48e4-8898-8ad87abc7251","command_center_event_id":"93bb1619-54ba-488a-a378-5b4272c7e710"},{"id":"ffe79529-a4d3-4166-9cc5-e82a7491ea8c","source":"cc-execution","status":"synthesis_required","payload":{"ok":true,"jobId":null,"phase":"implementation","branch":"ai/fix-contract-gate-failure-class","reason":null,"status":"synthesis_required","metrics":{"receiptBytes":1943,"releaseCount":0,"toolCallCount":1,"repeatedCallCount":0,"ownerInterruptionCount":0},"version":"1.46.1-predictive-reliability-speed-guardrails","prNumber":null,"terminal":false,"missionId":"b9a791f9-20c7-434a-b6be-d684ef81ab37","operation":"execute_mission","proofGate":"repair_mission_synthesis_ready","sourceSha":null,"timingsMs":null,"nextAction":"Inspect the bounded repository paths, synthesize exact files or anchored_edits, and call /repair/continue-mission automatically with this missionId without another owner prompt.","receiptRef":{"mode":"full","missionId":"b9a791f9-20c7-434a-b6be-d684ef81ab37"},"performance":null,"deploymentId":null,"workflowRunId":null,"releaseTargets":null,"detailsAvailable":true,"workflowInvariant":{"oneBranch":true,"oneMission":true,"oneRelease":true,"invariantScope":"repair_generation","onePullRequest":true,"terminalProofRequired":true,"correctiveGenerationsAllowed":true},"sourceReceiptBytes":9156,"likelyAffectedFiles":["src/__tests__/contracts/command-center-mission-control.test.ts","src/__tests__/contracts/command-center-mission-preflight.test.ts","src/__tests__/contracts/command-center-event-runtime.test.ts","src/__tests__/contracts/command-center-zero-uuid.test.ts","scripts/validate-command-center-contracts.mjs","src/components/admin/TenantUserCommandCenters.tsx","src/__tests__/godmode/command-center.test.ts","src/__tests__/commandCenter/deployDetection.test.ts","src/components/GlobalCommandPalette.tsx",".forgejo/workflows/knocklaunch.yml","src/components/admin/AdminUserCreateModal.tsx","src/components/admin/automation/TemplateInstallBundle.tsx"],"ownerActionRequired":false,"ownerFacingTerminal":false,"continuationRequired":true},"tenant_id":"a2929648-19db-46c8-9e93-07378ed1aa5f","created_at":"2026-08-15T04:10:39.133031+00:00","proof_gate":"repair_mission_synthesis_ready","source_sha":null,"external_id":null,"receipt_type":"execute_mission","idempotency_key":"mission:b9a791f9-20c7-434a-b6be-d684ef81ab37:execute_mission:repair_mission_synthesis_ready","mission_step_id":"7196317c-c84a-425f-a3b9-4044cd0d6223","command_center_event_id":"b9a791f9-20c7-434a-b6be-d684ef81ab37"},{"id":"ffe9216f-bc37-4de4-9564-3cc2a55715b6","source":"cc-execution","status":"waiting","payload":{"kind":"heartbeat","message":"Still active in reasoning required.","nextAction":{"lane":"cc-execution","action":"continue_implementation","reason":"synthesis_required","handoff":null,"capability":"heavy-build-gate","automationAllowed":true,"ownerActionRequired":false,"resumeFromCheckpoint":"preflight"},"silenceBudgetMs":15000,"semanticCheckpointSignature":"{\"stateMachineVersion\":1,\"phase\":\"reasoning_required\",\"ownerFacingState\":null,\"latest\":{\"kind\":\"receipt\",\"key\":\"execute_mission\",\"status\":\"synthesis_required\",\"proofGate\":\"repair_mission_synthesis_ready\"},\"activeStep\":{\"key\":\"implementation\",\"status\":\"ready\",\"lane\":\"cc-execution\"},\"nextStep\":{\"key\":\"pull_request\",\"status\":\"ready\",\"lane\":\"cc-execution\"},\"nextSafeAction\":{\"action\":\"continue_implementation\",\"lane\":\"cc-execution\",\"reason\":\"synthesis_required\",\"automationAllowed\":true,\"ownerActionRequired\":false,\"capability\":\"heavy-build-gate\",\"resumeFromCheckpoint\":\"preflight\",\"handoff\":null},\"executionOwnership\":{\"active\":false,\"state\":\"waiting\",\"executor\":null,\"lane\":\"cc-execution\",\"nextAction\":\"continue_implementation\",\"recoveryOwner\":\"cc-execution\",\"capability\":\"heavy-build-gate\",\"resumeFromCheckpoint\":\"preflight\",\"handoff\":null},\"acceptance\":{\"total\":1,\"verified\":0,\"pending\":1,\"percent\":0,\"satisfied\":false,\"verifiedIds\":[],\"pendingIds\":[\"proof-production\"]},\"stall\":{\"stalled\":false,\"reason\":\"within_deadline\",\"step\":\"pull_request\",\"deadlineAt\":\"2026-10-06T20:07:58.285416+00:00\",\"recoveryAction\":null},\"blocker\":null,\"terminal\":false,\"branch\":null,\"prNumber\":null,\"sourceSha\":null,\"deploymentId\":null}"},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-10-06T18:30:13.123413+00:00","proof_gate":"owner_progress_heartbeat","source_sha":null,"external_id":null,"receipt_type":"owner_progress_heartbeat","idempotency_key":"mission:6f2e8769-9a1f-4083-b735-6ff566b6a372:owner-progress-heartbeat:119420760","mission_step_id":"866ffadd-7c19-424a-a9cd-005198dfa99f","command_center_event_id":"6f2e8769-9a1f-4083-b735-6ff566b6a372"},{"id":"ffec0d34-6330-46db-a7ba-5c99469748eb","source":"cc-execution","status":"recorded","payload":{"requestContract":{"valid":true,"intent":{"evidence":[],"confidence":null,"rawUtterance":"Continue the existing reliability mission on exact PR #2158 and exact current head 27580f4a75183f9d1a0d76edd0670179d3afc864. Source is complete and current with main; do not mutate source, create a branch, or create a PR. Recover the cancelled/stuck exact-head KnockLaunch Gate through the canonical existing Gate/supervisor path, then squash merge only after exact-head green, release only ccExecution, and verify live runtime plus the read-only Forgejo reliability canary. No Visual Witness.","wordingChanged":false,"canonicalIntent":"Continue the existing reliability mission on exact PR #2158 and exact current head 27580f4a75183f9d1a0d76edd0670179d3afc864. Source is complete and current with main; do not mutate source, create a branch, or create a PR. Recover the cancelled/stuck exact-head KnockLaunch Gate through the canonical existing Gate/supervisor path, then squash merge only after exact-head green, release only ccExecution, and verify live runtime plus the read-only Forgejo reliability canary. No Visual Witness.","resolutionStatus":"exact","uniqueResolution":true,"clarificationRequired":false},"source":"explicit","version":1,"outcomes":[{"id":"gate","statement":"Exact head 27580f4a75183f9d1a0d76edd0670179d3afc864 receives successful canonical KnockLaunch Gate without source mutation.","proofConditionIds":["release"]},{"id":"ship","statement":"PR #2158 squash merges, ccExecution-only release succeeds, and live runtime/canary proof succeeds.","proofConditionIds":["release","runtime"]}],"objective":"Continue the existing reliability mission on exact PR #2158 and exact current head 27580f4a75183f9d1a0d76edd0670179d3afc864. Source is complete and current with main; do not mutate source, create a branch, or create a PR. Recover the cancelled/stuck exact-head KnockLaunch Gate through the canonical existing Gate/supervisor path, then squash merge only after exact-head green, release only ccExecution, and verify live runtime plus the read-only Forgejo reliability canary. No Visual Witness.","constraints":[{"id":"identity","statement":"No source mutation, no new branch or PR, no duplicate release path, and no Visual Witness.","proofConditionIds":["release","runtime"]}],"terminalPolicy":"all_required_proof_conditions_satisfied_after_live_release","proofConditions":[{"id":"release","kind":"release","claim":"Exact green PR #2158 is squash merged and ccExecution release succeeds.","route":null,"roleRef":null,"userRef":null,"required":true,"expectedText":null,"targetedActions":[],"allowedReleaseTargets":["ccExecution"],"requiredReleaseTargets":["ccExecution"]},{"id":"runtime","kind":"runtime","claim":"Live cc-execution matches merged SHA and the Forgejo reliability canary is healthy/read-only.","route":null,"roleRef":null,"userRef":null,"required":true,"expectedText":null,"targetedActions":[],"allowedReleaseTargets":[],"requiredReleaseTargets":["ccExecution"]}],"validationErrors":[]},"requestContractHash":"98edab910a0bc5f30a68e3be08181d238d6612748f8aa55f1d2c365d090dcd26","requestContractRevision":9,"previousRequestContractHash":"adf29e8a06b6dcf861bc7d3ce221adb494db20e890677ff9163e07bc008df0ed"},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-08T19:50:55.219332+00:00","proof_gate":"request_contract_revision_recorded","source_sha":null,"external_id":null,"receipt_type":"request_contract_revision","idempotency_key":"mission:0b163683-9113-499c-908f-61bd930fd874:request-contract:98edab910a0bc5f30a68e3be08181d238d6612748f8aa55f1d2c365d090dcd26","mission_step_id":"10ac18eb-63d7-4269-a038-472524325bff","command_center_event_id":"0b163683-9113-499c-908f-61bd930fd874"},{"id":"ffec2bb3-e42c-4428-8aa9-353368adf4c1","source":"forgejo-runtime","status":"failed","payload":{"failed":["forgejo-release/workflow","frontend-cloudflare/live"],"states":{"forgejo-main/source":"success","forgejo-release/workflow":"failure","frontend-cloudflare/live":"failure"},"mainSha":"f4f0f527f528329d6d25c366d6cf93bec03cb1d8","missing":[],"pending":[],"required":["forgejo-main/source","forgejo-release/workflow","frontend-cloudflare/live"],"sourceSha":"f4f0f527f528329d6d25c366d6cf93bec03cb1d8","releaseState":"failed","sourceInMain":true,"compareStatus":"protected_main_push_exact_source","releaseTargets":{"frontend":true,"onrunner":false,"migrations":false,"ccExecution":false,"supabaseEdge":false,"edgeFunctionSlugs":[]},"releaseTargetStates":{"frontend":"failure"},"requestContractHash":"f913db1aed70486d724a1428eea2849e5e97fc0688597713b5d0a417148cf45b","forgejoWorkflowProof":{"runId":8344,"source":"signed_push_receipt","status":"cancelled","results":{},"conclusion":"cancelled","targetStates":{"frontend":"failure"},"targetJobCount":7,"observedTargetStates":{"frontend":"failure"}},"onrunnerRuntimeProof":null,"releaseSourceVerified":true,"ccExecutionRuntimeProof":null,"releaseTargetRecoveryProof":null,"exactReleaseVerifiedAfterMainAdvanced":false},"tenant_id":"a3ffa31f-0c88-4fdd-b872-051db013ca3e","created_at":"2026-09-15T14:20:20.849422+00:00","proof_gate":"canonical_release_terminal_failed","source_sha":"f4f0f527f528329d6d25c366d6cf93bec03cb1d8","external_id":"forgejo-main-f4f0f527f528","receipt_type":"canonical_release_status","idempotency_key":"mission:6936aa27-6b97-4d2e-9e8c-302291a69fe7:forgejo-release-status:f4f0f527f528329d6d25c366d6cf93bec03cb1d8:failed:forgejo-main/source=success|forgejo-release/workflow=failure|frontend-cloudflare/live=failure","mission_step_id":"81108aba-237e-428e-af91-f9db9a2e41c3","command_center_event_id":"6936aa27-6b97-4d2e-9e8c-302291a69fe7"},{"id":"ffee6fca-1d38-4512-87d6-e97089d2b981","source":"cc-execution","status":"recorded","payload":{"objective":"Create a corrective generation from current Forgejo main that supersedes unshipped PR #2036 while preserving its intended live-pipeline behavior and fixing both PipelineTab call sites to pass activeTenant.id directly. After exact changed-file preservation is proven, retire #2036. No release yet.","tenantRef":"curriproperties","receivedAt":"2026-09-07T02:51:08.217Z","fingerprint":"f52cd9662946d4e0d00f119af89441465cacad99854b4fca5048b54b3d3db848","workstreamRef":"curriproperties","conversationId":null,"canonicalBranch":"ai/realtor-live-pipeline-v2-20260906","requestContract":{"valid":true,"intent":{"evidence":[],"confidence":null,"rawUtterance":"Create a corrective generation from current Forgejo main that supersedes unshipped PR #2036 while preserving its intended live-pipeline behavior and fixing both PipelineTab call sites to pass activeTenant.id directly. After exact changed-file preservation is proven, retire #2036. No release yet.","wordingChanged":false,"canonicalIntent":"Create a corrective generation from current Forgejo main that supersedes unshipped PR #2036 while preserving its intended live-pipeline behavior and fixing both PipelineTab call sites to pass activeTenant.id directly. After exact changed-file preservation is proven, retire #2036. No release yet.","resolutionStatus":"exact","uniqueResolution":true,"clarificationRequired":false},"source":"explicit","version":1,"outcomes":[{"id":"outcome-1","statement":"A corrected live Realtor Pipeline generation exists on one fresh PR and preserves #2036's intended functionality without the undefined tenantId defect.","proofConditionIds":["proof-hook","proof-dashboard","proof-supersede"]}],"objective":"Create a corrective generation from current Forgejo main that supersedes unshipped PR #2036 while preserving its intended live-pipeline behavior and fixing both PipelineTab call sites to pass activeTenant.id directly. After exact changed-file preservation is proven, retire #2036. No release yet.","constraints":[{"id":"constraint-1","statement":"Only the Realtor tenancy hook, RealtorTenantDashboard, and focused contract test may change; no schema/backend/release changes.","proofConditionIds":["proof-hook","proof-dashboard"]},{"id":"constraint-2","statement":"Retire #2036 only after the corrected generation preserves its intended changed-file behavior.","proofConditionIds":["proof-supersede"]}],"terminalPolicy":"all_required_proof_conditions_satisfied_after_live_release","proofConditions":[{"id":"proof-hook","kind":"repository","claim":"Corrected generation includes paged tenant-scoped useRealtorPipelineContacts joining canonical contacts.","route":null,"roleRef":null,"userRef":null,"required":true,"expectedText":"useRealtorPipelineContacts","targetedActions":[],"allowedReleaseTargets":[],"requiredReleaseTargets":[]},{"id":"proof-dashboard","kind":"repository","claim":"Pipeline is live and both render paths pass activeTenant.id directly, with no hardcoded No leads in stage facade.","route":null,"roleRef":null,"userRef":null,"required":true,"expectedText":"