`verification/gracie-rollout/e2e-proof.json`

58 lines
{
  "ticket": "TK-11438",
  "risk_tier": "R4",
  "at": "2026-09-11T20:23:47.192Z",
  "verdict": "PASS Gracie batch; overall fleet ticket incomplete",
  "source_commit": "966130377ec694055a0688d0e1bd7f4bdf454a93",
  "approval": "Steve explicitly approved Gracie batch and required private/nothing online; local-only implementation, no emails",
  "intent": "Move Gracie PostgreSQL connections to Unix sockets while preserving catalog/auth/schema and enforcing localhost-only HTTP",
  "baseline": {
    "pid": 8186,
    "listener": "*:10073",
    "products": 150,
    "transport": "TCP",
    "schema": "existing vendor_requests"
  },
  "boundaries": {
    "source": "two files,three changed lines",
    "service": "one restart; PID91857 stable/restarts2",
    "data": "catalog150; Gracie request records and schema/index definitions unchanged",
    "database": "catalog macstudio3 and vendor dw_admin roles preserved on dw_unified; socket identity and missingENOENT",
    "http": "health200 and protected catalog/requests401/401/200",
    "privacy": "127.0.0.1 listener only;8nonloopbackIPv4 probes fail includingLAN/Tailscale;17localproxy/tunnel configs show no route"
  },
  "negative_checks": [
    "missing/invalid authentication401",
    "nonloopback connections fail",
    "missing socketENOENT",
    "peer edits rejected by rollback"
  ],
  "evidence": [
    "baseline.json",
    "after.json",
    "startup-schema.json",
    "verification.json",
    "observation.json",
    "independent-preflight.json",
    "independent-runtime.json"
  ],
  "independent_assertions": 22,
  "rollback": {
    "status": "rehearsed,not invoked live",
    "private_backups": "private/",
    "file_mode": "0600",
    "directory_mode": "0700",
    "privacy": "restores transport while retaininglocalhost bind"
  },
  "limits": [
    "Cloud-managed and remote proxy routes not audited; no online publication performed",
    "Catalog is served from unchangedJSONL; configured catalogDB connection independently tested",
    "Initial verifier Date/string mismatch retained; fixed test, no repeat restart",
    "Remaining original/expandedfleet and scheduler migration not complete"
  ],
  "email_sends": 0,
  "remote_pushes": 0,
  "deployments": 0,
  "tcp_shutdown": false
}