Record reversible source rollout rehearsal and approval boundary

39b3dd076ad633dad52381400a9916eb06008726 · 2026-09-09 09:59:18 -0700 · Steve Abrams
Files touched

M verification/REVIEW.md
M verification/e2e-proof.json
A verification/rollback-rehearsal.json
Diff

commit 39b3dd076ad633dad52381400a9916eb06008726
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Wed Sep 9 09:59:18 2026 -0700

    Record reversible source rollout rehearsal and approval boundary
---
 verification/REVIEW.md               |  1 +
 verification/e2e-proof.json          |  5 ++++
 verification/rollback-rehearsal.json | 49 ++++++++++++++++++++++++++++++++++++
 3 files changed, 55 insertions(+)

diff --git a/verification/REVIEW.md b/verification/REVIEW.md
index b7fc35f..a87adbe 100644
--- a/verification/REVIEW.md
+++ b/verification/REVIEW.md
@@ -22,6 +22,7 @@ The canonical/price/sample replay improves from 343 to 637 passing products. The
 - Exact patched runtime batch query + real pagination verified against 50 live DRAFT products: 17 requests, 12 variant pagination cases and four metafield pagination cases; maximum requested query cost 27. Real Designtex/Carnegie fixtures pass the corrected checks; incomplete Fischbacher remains blocked.
 - Repair progress reconciled against the actual database worklist and persisted audit. Dry executor-flow tests leave the audit unchanged and never request a live budget.
 - Reintroduction, duplicate/age and never-activate vendor guard script passed unchanged.
+- Source rollback was rehearsed on isolated temporary copies of all runtime files: reverse patches restored the exact base bytes, and forward patches restored the reviewed bytes. Production was untouched. See `rollback-rehearsal.json`.
 - DTD: Codex CLI and Qwen selected A (2/2 valid votes; 2/6 available), mandatory adversarial review KEEP. Claude disabled by zero-cost policy; Grok/Kimi/Muse unavailable. This technical decision does not authorize publishing.
 
 Evidence: `e2e-proof.json`, `live-boundary.json`, `readiness-replay.json`; retained untracked snapshots `live-products-20260909.json` and `readiness-repairs-20260909.json`. Repair-worker evidence is in `~/Projects/dw-repair-debug-TK11314/verification/e2e-proof.json`.
diff --git a/verification/e2e-proof.json b/verification/e2e-proof.json
index 456ecc9..794c700 100644
--- a/verification/e2e-proof.json
+++ b/verification/e2e-proof.json
@@ -70,6 +70,11 @@
       "check": "Production activation and source-data repair",
       "verdict": "SKIP",
       "evidence": "No deployment, activation, source guessing, bulk product changes, or settlement bypass. Requires explicit production/publishing approval."
+    },
+    {
+      "check": "Runtime source rollback rehearsal",
+      "verdict": "PASS",
+      "evidence": "verification/rollback-rehearsal.json: reverse to base and reapply to reviewed bytes in temporary copies across all three projects; production untouched"
     }
   ],
   "source_sha256": {
diff --git a/verification/rollback-rehearsal.json b/verification/rollback-rehearsal.json
new file mode 100644
index 0000000..cca9c25
--- /dev/null
+++ b/verification/rollback-rehearsal.json
@@ -0,0 +1,49 @@
+{
+  "timestamp": "2026-09-09T16:58:20.183938+00:00",
+  "scope": "Temporary isolated copies only; source rollback does not undo published product state",
+  "checks": [
+    {
+      "project": "dw-activation-debug-TK11314",
+      "verdict": "PASS",
+      "files": [
+        "rotate-activate.js",
+        "lib/settlement-gate.js",
+        "lib/vision-http.js",
+        "lib/live-product-fields.js",
+        "lib/readiness-repairs.js",
+        "lib/activation-result.js"
+      ],
+      "assertions": [
+        "reverse patch restores exact prior bytes/removes only introduced scratch files",
+        "forward patch restores exact reviewed bytes"
+      ],
+      "production_writes": 0
+    },
+    {
+      "project": "dw-validator-debug-TK11314",
+      "verdict": "PASS",
+      "files": [
+        "shopify/scripts/lib/validate-before-activate.js"
+      ],
+      "assertions": [
+        "reverse patch restores exact prior bytes/removes only introduced scratch files",
+        "forward patch restores exact reviewed bytes"
+      ],
+      "production_writes": 0
+    },
+    {
+      "project": "dw-repair-debug-TK11314",
+      "verdict": "PASS",
+      "files": [
+        "bulk-fivefield-exec.py",
+        "drain.sh",
+        "worklist_progress.py"
+      ],
+      "assertions": [
+        "reverse patch restores exact prior bytes/removes only introduced scratch files",
+        "forward patch restores exact reviewed bytes"
+      ],
+      "production_writes": 0
+    }
+  ]
+}
← 8a7469e Fix draft readiness reads and add fail-closed vision diagnos · back to Dw Activation Debug TK11314 · Verify approved production rollout and first scheduled activ 7202f97 →