Record TK-10832 Codex comparison evidence

8d8a8c630977cdd02014aef1d42d320bca45c762 · 2026-08-30 09:40:07 -0700 · Steve
Files touched

A verification/tk-10832-codex-e2e-proof.json
Diff

commit 8d8a8c630977cdd02014aef1d42d320bca45c762
Author: Steve <steve@designerwallcoverings.com>
Date:   Sun Aug 30 09:40:07 2026 -0700

    Record TK-10832 Codex comparison evidence
---
 verification/tk-10832-codex-e2e-proof.json | 76 ++++++++++++++++++++++++++++++
 1 file changed, 76 insertions(+)

diff --git a/verification/tk-10832-codex-e2e-proof.json b/verification/tk-10832-codex-e2e-proof.json
new file mode 100644
index 00000000..e36a651d
--- /dev/null
+++ b/verification/tk-10832-codex-e2e-proof.json
@@ -0,0 +1,76 @@
+{
+  "ticket": "TK-10832",
+  "model": "codex",
+  "intent": "Independently compare the Claude photo-forward mailer draft and compliance evidence, improve only the local draft, and prove that no send or publish occurs.",
+  "risk_tier": "R2 local user-facing draft with an R4 external-send boundary held closed",
+  "environment": "local /Users/macstudio3/Projects/Designer-Wallcoverings; Chromium desktop 700px and mobile 375px; read-only HTTP probes",
+  "baseline_commits": {
+    "claude_photo_forward": "b3cb72e7",
+    "claude_compliance_fix": "55a8c487",
+    "claude_editorial_gate": "c0aa530a"
+  },
+  "result_commit": "4aef18ec",
+  "timestamp_utc": "2026-08-30T16:39:34Z",
+  "baseline_findings": [
+    {
+      "verdict": "FAIL",
+      "boundary": "external-write safety",
+      "finding": "With CC_LIVE removed from the invoking environment, cc-client reloaded CC_LIVE=1 from its gitignored .env; --confirm reached the Constant Contact OAuth token endpoint instead of no-oping. The refresh failed before campaign creation and the token cache remained unchanged."
+    },
+    {
+      "verdict": "FAIL",
+      "boundary": "mobile UI",
+      "finding": "At a 375px viewport the document scrollWidth was 620px, proving horizontal clipping despite the prior mobile-render claim."
+    },
+    {
+      "verdict": "QUALIFY",
+      "boundary": "advertising claims",
+      "finding": "Changing stocked to available reduced the inventory implication but left blanket claims that every pattern was available/waiting in the showroom and that a memo sample could be requested for any pattern."
+    }
+  ],
+  "changes": [
+    "Require CC_LIVE=1 in the caller environment before dotenv loads; a persisted .env value can no longer arm writes.",
+    "Add regression tests for both halves of the Constant Contact double gate.",
+    "Remove blanket inventory/sample-availability claims while retaining the photo-forward editorial voice.",
+    "Correct the campaign footer address from 15442 Ventura Bl to 15442 Ventura Blvd and add exact-address/inventory-claim checks.",
+    "Make the 620px email container fluid so the mobile layout does not overflow."
+  ],
+  "checks": [
+    {
+      "verdict": "PASS",
+      "command": "node --test mailers/cc-api/cc-client-gate.test.js",
+      "assertion": "2/2 tests pass; caller-unset CC_LIVE and missing confirm each produce NO-OP without token refresh or live POST."
+    },
+    {
+      "verdict": "PASS",
+      "command": "env -u CC_LIVE node mailers/cc-api/build-phillip-jeffries-campaign.js --dry-run",
+      "assertion": "11/11 checks pass; mode reports CC_LIVE=(unset); no network call."
+    },
+    {
+      "verdict": "PASS",
+      "command": "Playwright real Chromium render at 700x900 and 375x812",
+      "assertion": "Both viewports have scrollWidth equal to clientWidth, 5/5 images decoded, and zero console errors.",
+      "artifacts": [
+        "/tmp/tk-10832-codex-desktop.png",
+        "/tmp/tk-10832-codex-mobile.png"
+      ]
+    },
+    {
+      "verdict": "PASS",
+      "command": "curl read-only probes plus cmp against committed local backups",
+      "assertion": "5/5 image URLs return 200 image/jpeg and byte-match their committed local copies; 6/6 unique destination URLs resolve 200 after redirects."
+    },
+    {
+      "verdict": "PASS",
+      "command": "git diff --check",
+      "assertion": "No whitespace errors."
+    },
+    {
+      "verdict": "PASS",
+      "boundary": "side effects",
+      "assertion": "No campaign created, scheduled, sent, or published. No CC campaign endpoint was reached; .cc-token-cache.json retained its Aug 13 timestamp and was not committed or modified."
+    }
+  ],
+  "cleanup": "Only /tmp screenshots and HTTP probe files were retained as ephemeral evidence; no external state was created.",
+  "verdict": "PASS — local draft and gates verified; all send/publish actions remain held."
+}
← 96a93b90 Harden PJ mailer draft safety and mobile layout · back to Dw Validator Debug TK11314 · fix(TK-10965): guard importer inventory stamp — never stock b83a37b1 →