`verification/tk11185-reconcile/RECONCILIATION.md`

31 lines

# Signup ticket reconciliation

The required full designer form and account/login handoff from TK-11283 remain
published. A fresh September 7 read verified both snippet hashes and service health.
The old Gate 2 deployment and rollback commands were retired in commit dc1323f.
They now stop with exit 78 before credential reads or network requests.

The parent and independent reviewer reproduced both historical stale overwrites
and verified eight real command invocations. The current guarded TK-11283 publisher
was preserved. Repository and local LaunchAgent searches found no active callers of
the retired commands. Remote callers and pasted copies were not exhaustively inventoried.

TK-11185 is partial only for retained deployment-test records. Shopify customer
8413577478195 remains as of September 7. Application TRADE-20260903-0eeddd was last
directly observed pending and linked on September 5; it must be re-read before any
cleanup. No destructive cleanup is authorized or executed in this reconciliation.
The exact proposal is in pending-approval/2026-09-07-TK-11185-retained-smoke-record-cleanup.md.

An initial admin-page read returned 401 with local credentials. No guessing,
credential change or auth bypass was attempted. Subsequent verification uses the
approved Shopify GET routes and health endpoint. The read-only SSH observation is
retained in the parent evidence. No real applicant, OTP, account session, email or
checkout was created/exercised by this pass.

Related ticket TK-11177 has separate evidence under
/private/tmp/tk11177-reconcile-4hzfsk. Fresh parent checks on September 7 verified
194 PJ manufacturer mappings and all 45 partner canary predicates. Two partner
codes resolve through the existing mirror fallback; this is not a claim that all
45 partner metafields are populated live. The parent refreshed the evidence manifest
after reruns, resolving the reviewer's only remaining evidence defect.