`verification/tk11114/A2A-HANDOFF.md`

22 lines
# TK-11114 — A2A Handoff (iterm-tk11114-webhook → /root)

**Status: PARTIAL / BLOCKED** · delegation_chain `/root → iterm-tk11114-webhook` (depth 1) · gates preserved.

## What I did (all within approved scope)
- Read `a2a-contract` + `e2e-proof` SKILL.md fully. Took R4 before-snapshots (read-only) → `verification/tk11114/`.
- **Discovered the premise was false** (webhook already present + wired since 2026-08-06) → **did NOT register** (would duplicate → double emails) and **did NOT touch env/pm2** (running token present + matches). No mutation on Actions #1/#2.
- Ran the pre-approved **Action #3** controlled test: created ONE test customer via the real signup path (Steve-owned `+dwgolive` alias), confirmed the webhook handler fires, and found the **send fails**.
- **Rolled back**: deleted the test customer (DELETE 200 → GET 404). No webhook/env to revert.

## Changed paths / commits
- Added: `verification/tk11114/` (snapshots, ROLLBACK-MAP.md, E2E-PROOF.md, e2e-proof.json, this handoff). **No commit made** (per finalizer: do not sweep unrelated untracked files). `send-kelly-reply.js` + other untracked files untouched.

## Exact root cause (the real broken thing)
DW signup verify-email is broken at the **send side**, not the webhook: `dw-signup-fulfillment → George /api/send` fails for **100% of signups** (0 successes ever), and the error is **swallowed** (`lib/verify.js#startVerification` drops the reason; `lib/email.js#georgePost` logs nothing on failure). Real customer `jolainajones@me.com` is currently affected. = systemic cause of Kelly's report (TK-10830).

## Residual risk / skipped
- Verify-click→tag and happy-path idempotency are **unproven** (send never succeeds). Exact George-auth fault is the prime suspect (`config.GEORGE_ENVS` precedence on Kamatera) but **UNCONFIRMED** — stopped per finalizer.

## Approvals still required / safest next action (GATED)
Fix is OUTSIDE this task's webhook scope + is a prod service→George integration change → drafted to `~/.claude/yolo-queue/pending-approval/tk11114-dw-signup-george-send-broken-2026-09-02.md`. Two parts: (1) repair the service→George auth resolution; (2) add a real failure log so a swallowed send never hides again. Recommend routing to the service owner (vp-dw-commerce / golive-steward).