{
  "schema": "evulgare.release-acceptance.v1",
  "release": "2.0.0-rc.9-WIP",
  "generated_at": "2026-08-06T07:30:00Z",
  "overall_status": "PASS_WITH_WIP_QUALIFICATIONS",
  "summary": "Repository, deterministic proof, Chromium analytical, static security/privacy, static performance, source-lifecycle, deployment-drift, and candidate/review-ledger contracts pass within declared bounds. No candidate packet is treated as reviewed evidence. Actual-host, representative browser/device, physical graphics/XR, assistive-technology, dynamic security/privacy, measured performance, and independent-claim evidence remain incomplete.",
  "release_decision": "REMAIN_2.0.0-RC.9-WIP",
  "promotion_allowed": false,
  "required_for_final": [
    "deterministic_software",
    "public_source_refresh",
    "production_host",
    "browser_responsive",
    "multi_browser_devices",
    "physical_graphics_xr",
    "assistive_technology",
    "security_privacy",
    "performance",
    "package_integrity",
    "independent_claim_verification"
  ],
  "blockers": [
    "public_source_refresh",
    "production_host",
    "browser_responsive",
    "multi_browser_devices",
    "physical_graphics_xr",
    "assistive_technology",
    "security_privacy",
    "performance",
    "independent_claim_verification"
  ],
  "categories": [
    {
      "id": "deterministic_software",
      "title": "Deterministic software and proof",
      "state": "PASS",
      "summary": "213 dependency-light tests and the packaged deterministic proof programs pass.",
      "evidence": [
        {
          "path": "docs/TEST_RESULTS.json",
          "summary": "Machine-readable test results",
          "sha256": "a60277096140b74cd6d58d1a6c5c9d9dc092c16616db85a6ca46ae094fe16986",
          "bytes": 11578
        },
        {
          "path": "docs/SIMULATION_WORKBENCH_PROOF_REPORT.json",
          "summary": "Ten-simulation workbench proof",
          "sha256": "b622551942d422b0300425274cda4281cc415ec63eea218113d059334ff7d407",
          "bytes": 5800
        },
        {
          "path": "docs/SIMULATION_RENDERER_PARITY_PROOF_REPORT.json",
          "summary": "Renderer-consumption parity proof",
          "sha256": "1354fd260046ea919dac29d6f3752a4c90e593cc334fbbc75f367a0a602792ad",
          "bytes": 9733
        }
      ],
      "checks": [
        {
          "id": "ACC-SW-01",
          "statement": "Dependency-light tests pass",
          "status": "PASS",
          "detail": "213 passed"
        },
        {
          "id": "ACC-SW-02",
          "statement": "Ten workbench simulations preserve deterministic authority",
          "status": "PASS",
          "detail": "10 renderer contracts"
        },
        {
          "id": "ACC-SW-03",
          "statement": "Public derived actions retain the null sink",
          "status": "PASS",
          "detail": "SYNTHETIC_NULL_SINK"
        }
      ],
      "qualification": ""
    },
    {
      "id": "public_source_refresh",
      "title": "Eviulon public-source review and append-only capture",
      "state": "PASS_WITH_QUALIFICATION",
      "summary": "3 accepted append-oriented snapshots remain preserved. Current first-party publication remains materially unchanged in the bounded record; an RC9 candidate packet is staged for deliberate review, and the reviewed-packet index remains empty.",
      "evidence": [
        {
          "path": "docs/EVIULON_PUBLIC_SOURCE_RECORD.json",
          "summary": "Current bounded first-party source record",
          "sha256": "026a2b159fd26d7973221e07f421c4d74e5aaa625ff815dbcb511b8f084cfc81",
          "bytes": 15348
        },
        {
          "path": "docs/EVIULON_SOURCE_HISTORY.json",
          "summary": "Append-oriented source history",
          "sha256": "0168aaff93d8a5d996cee18eb3c77706a7a10f1c14244970e6ee7b829c996597",
          "bytes": 1164
        },
        {
          "path": "docs/EVIULON_SOURCE_DIFFERENCE_REPORT.json",
          "summary": "Material-difference report",
          "sha256": "4917c024b699093312cc2143564ea150defb1d1c63a7c6ece55d195ea6c3fdf3",
          "bytes": 2825
        },
        {
          "path": "docs/EVIULON_SOURCE_LIFECYCLE_PROOF_REPORT.json",
          "summary": "Source lifecycle proof",
          "sha256": "98deeb0924bef4fcc783988ae5ffd88dd402f16fea99c761131974285f273498",
          "bytes": 5006
        }
      ],
      "checks": [
        {
          "id": "ACC-SRC-01",
          "statement": "Exactly four allowlisted records are represented",
          "status": "PASS",
          "detail": "4"
        },
        {
          "id": "ACC-SRC-02",
          "statement": "Earlier accepted snapshots remain visible",
          "status": "PASS",
          "detail": "3"
        },
        {
          "id": "ACC-SRC-03",
          "statement": "Current bounded material difference is explicit",
          "status": "PASS",
          "detail": "0"
        },
        {
          "id": "ACC-SRC-04",
          "statement": "Source lifecycle proof passes",
          "status": "PASS",
          "detail": "19 checks"
        }
      ],
      "qualification": "These are reciprocal first-party publications. They do not independently establish private contract terms, external legal recognition, deployment, classified capability, readiness, performance, or certification."
    },
    {
      "id": "production_host",
      "title": "Production cPanel, Python 3.13.14, MySQL, Passenger, TLS, and headers",
      "state": "NOT_COMPLETED",
      "summary": "The public host responded, but the actual cPanel shell, Passenger process, MySQL migration state, private configuration, TLS/header/cookie/cache configuration, and candidate deployment were not exercised.",
      "evidence": [
        {
          "path": "docs/LIVE_PUBLIC_OBSERVATION.json",
          "summary": "Bounded outside-in observation",
          "sha256": "d83bcc481243fe699ff60b948993c7c8ee64fb28476e6e124c856e1ebc4a06b8",
          "bytes": 1710
        },
        {
          "path": "docs/DEPLOYMENT_RECONCILIATION_RC9.json",
          "summary": "Version-drift reconciliation record",
          "sha256": "e7c70da43a19e3ba522958be193f2fc8849b52a77a3b24c3bb7936ad500a60f4",
          "bytes": 3543
        },
        {
          "path": "docs/CPANEL_FULL_STACK_DIAGNOSTIC.md",
          "summary": "Actual-host diagnostic procedure",
          "sha256": "6090334a2612a48b7c9a2e713d704dea619122f7da82dc0bfd60deb45e8e61a5",
          "bytes": 1679
        }
      ],
      "checks": [
        {
          "id": "ACC-HOST-01",
          "statement": "Homepage, health, and simulation index were publicly observable",
          "status": "PASS_WITH_QUALIFICATION",
          "detail": "home=200 health=200 simulations=200"
        },
        {
          "id": "ACC-HOST-02",
          "statement": "RC9 package is proven deployed",
          "status": "NOT_COMPLETED",
          "detail": "observed=1.0.2 candidate=2.0.0-rc.9-WIP"
        },
        {
          "id": "ACC-HOST-03",
          "statement": "Private host, Passenger, database, migration, TLS, header, cookie, cache, and compression acceptance completed",
          "status": "NOT_RUN",
          "detail": "Authorized actual-host execution required"
        }
      ],
      "qualification": "Public availability is not production-host acceptance. Package-version drift remains a blocker."
    },
    {
      "id": "browser_responsive",
      "title": "Chromium functional, keyboard, fallback, and responsive acceptance",
      "state": "PASS_WITH_QUALIFICATION",
      "summary": "The packaged Jinja, vanilla JavaScript, deterministic state, timeline, comparison, semantic fallbacks, candidate-evidence page, and responsive layouts were exercised in headless Chromium.",
      "evidence": [
        {
          "path": "docs/SIMULATION_WORKBENCH_BROWSER_VERIFICATION.json",
          "summary": "Workbench Chromium verification",
          "sha256": "077245990da9434d77daa53f44fa3d1eca93f6b186d8b36f872431ade548f780",
          "bytes": 6463
        },
        {
          "path": "docs/ACCEPTANCE_EVIDENCE_PACKET_BROWSER_VERIFICATION.json",
          "summary": "Acceptance packet browser verification",
          "sha256": "dc82b36e5999a205daa073226e6d0500c35c728c6e2939e3e7d8b367961c1b59",
          "bytes": 2008
        }
      ],
      "checks": [
        {
          "id": "ACC-BR-01",
          "statement": "No recorded page or console errors",
          "status": "PASS",
          "detail": "Headless Chromium harness"
        },
        {
          "id": "ACC-BR-02",
          "statement": "Timeline, evidence, and responsive synchronization work",
          "status": "PASS",
          "detail": "PASS WITH QUALIFICATION"
        },
        {
          "id": "ACC-BR-03",
          "statement": "Candidate/reviewed evidence UI works",
          "status": "PASS",
          "detail": "PASS WITH QUALIFICATION"
        }
      ],
      "qualification": "One headless Chromium environment is not representative multi-browser, physical-device, WebXR, screen-reader, or qualified-human acceptance."
    },
    {
      "id": "multi_browser_devices",
      "title": "Representative browsers and physical devices",
      "state": "NOT_COMPLETED",
      "summary": "Edge, Firefox, Safari/WebKit, representative Android Chrome, iOS Safari, and physical device laboratories were not completed.",
      "evidence": [
        {
          "path": "docs/BROWSER_DEVICE_GRAPHICS_ACCEPTANCE_RC9.json",
          "summary": "Browser/device status matrix",
          "sha256": "61494a323d365a04b10be322d716f3c000909435c52866339b543ca48a7f8f77",
          "bytes": 3854
        }
      ],
      "checks": [
        {
          "id": "ACC-DEV-01",
          "statement": "Chromium harness completed",
          "status": "PASS_WITH_QUALIFICATION",
          "detail": "PARTIAL"
        },
        {
          "id": "ACC-DEV-02",
          "statement": "Edge and Firefox completed",
          "status": "NOT_RUN",
          "detail": "Representative environments unavailable"
        },
        {
          "id": "ACC-DEV-03",
          "statement": "Safari/WebKit and physical mobile completed",
          "status": "NOT_RUN",
          "detail": "Representative environments unavailable"
        }
      ],
      "qualification": ""
    },
    {
      "id": "physical_graphics_xr",
      "title": "Physical WebGPU, WebGL2/WebGL, context recovery, and WebXR",
      "state": "NOT_COMPLETED",
      "summary": "Renderer authority/parity contracts pass, but the available Chromium environment exposed no GPU context and no physical WebXR hardware was available.",
      "evidence": [
        {
          "path": "docs/SIMULATION_RENDERER_PARITY_PROOF_REPORT.json",
          "summary": "Shared authoritative-state digest proof",
          "sha256": "1354fd260046ea919dac29d6f3752a4c90e593cc334fbbc75f367a0a602792ad",
          "bytes": 9733
        },
        {
          "path": "docs/BROWSER_DEVICE_GRAPHICS_ACCEPTANCE_RC9.json",
          "summary": "Graphics and XR status matrix",
          "sha256": "61494a323d365a04b10be322d716f3c000909435c52866339b543ca48a7f8f77",
          "bytes": 3854
        }
      ],
      "checks": [
        {
          "id": "ACC-GFX-01",
          "statement": "Renderer adapters consume the shared authoritative digest",
          "status": "PASS",
          "detail": "10 simulations"
        },
        {
          "id": "ACC-GFX-02",
          "statement": "Physical GPU and context recovery completed",
          "status": "NOT_COMPLETED",
          "detail": "No representative physical GPU context"
        },
        {
          "id": "ACC-GFX-03",
          "statement": "Physical WebXR tasks completed",
          "status": "NOT_RUN",
          "detail": "No representative headset/controller"
        }
      ],
      "qualification": ""
    },
    {
      "id": "assistive_technology",
      "title": "Assistive technology and qualified-human task review",
      "state": "NOT_COMPLETED",
      "summary": "Semantic alternatives and automated keyboard/reflow contracts pass, but representative assistive technology and qualified-human task review were not run.",
      "evidence": [
        {
          "path": "docs/ACCESSIBILITY_ACCEPTANCE_RC9.json",
          "summary": "Automated accessibility contract",
          "sha256": "65dcbdd8cc53f66719b40fcb732844a5d9a8caa4863cfdf480c505a1fd91a4be",
          "bytes": 3001
        }
      ],
      "checks": [
        {
          "id": "ACC-A11Y-01",
          "statement": "Semantic and no-graphics representations are packaged",
          "status": "PASS",
          "detail": "Table, narrative, metrics, events, proof, and raw evidence"
        },
        {
          "id": "ACC-A11Y-02",
          "statement": "Automated keyboard/reflow/reduced-motion contracts pass",
          "status": "PASS_WITH_QUALIFICATION",
          "detail": "PASS_WITH_QUALIFICATION"
        },
        {
          "id": "ACC-A11Y-03",
          "statement": "Representative AT and qualified-human review completed",
          "status": "NOT_RUN",
          "detail": "NVDA, JAWS, VoiceOver, TalkBack, switch, voice, and qualified-human review required"
        }
      ],
      "qualification": ""
    },
    {
      "id": "security_privacy",
      "title": "Security and privacy acceptance",
      "state": "PASS_WITH_QUALIFICATION",
      "summary": "Static source, API-boundary, source-fetch, secret-pattern, header-contract, and privacy-default checks pass.",
      "evidence": [
        {
          "path": "docs/SECURITY_PRIVACY_ACCEPTANCE_RC9.json",
          "summary": "Static security and privacy acceptance",
          "sha256": "10d7977cf2e5ffb4702acd640130fc756970ea19eaf1feec470a72342393f8df",
          "bytes": 4493
        },
        {
          "path": "docs/SIMULATION_SECURITY_THREAT_MODEL.md",
          "summary": "Simulation threat model",
          "sha256": "cdb78cfa273bb2bcddf7b31a906a357b04427a7cd2c8252c78bf934421f9d9f3",
          "bytes": 2304
        }
      ],
      "checks": [
        {
          "id": "ACC-SEC-01",
          "statement": "Static security/privacy checks pass",
          "status": "PASS",
          "detail": "15 checks"
        },
        {
          "id": "ACC-SEC-02",
          "statement": "Dynamic production DAST, authorization, CSRF, rate-limit, dependency, and privacy review completed",
          "status": "NOT_RUN",
          "detail": "Production-equivalent host and approved tooling required"
        }
      ],
      "qualification": "Static checks are not a penetration test, dynamic vulnerability assessment, production authorization review, or privacy certification."
    },
    {
      "id": "performance",
      "title": "Performance and resilience acceptance",
      "state": "PASS_WITH_QUALIFICATION",
      "summary": "Static transfer and lazy-loading budgets pass; field Core Web Vitals, physical graphics frame time, memory cleanup, and representative device measurements remain unrun.",
      "evidence": [
        {
          "path": "docs/PERFORMANCE_ACCEPTANCE_RC9.json",
          "summary": "Static performance budget report",
          "sha256": "650e557b850bbf02793dfaaf7f8477b0abff637becb2087b0b71d84162a5e759",
          "bytes": 2646
        },
        {
          "path": "docs/SIMULATION_PERFORMANCE_BUDGETS.md",
          "summary": "Declared performance budgets",
          "sha256": "cae48a080535dd48f87fa44d49c2136b8b36d209a098ffb758319a8aa331bfb0",
          "bytes": 2147
        }
      ],
      "checks": [
        {
          "id": "ACC-PERF-01",
          "statement": "Static transfer/loading budgets pass",
          "status": "PASS",
          "detail": "{\"css_total_bytes\": 224394, \"image_total_bytes\": 4889, \"javascript_total_bytes\": 306741, \"largest_css\": {\"bytes\": 140904, \"path\": \"app/static/css/base.css\"}, \"largest_javascript\": {\"bytes\": 83977, \"path\": \"app/static/js/autonomous-drone-control.js\"}, \"template_total_bytes\": 318013}"
        },
        {
          "id": "ACC-PERF-02",
          "statement": "Field and representative-device performance completed",
          "status": "NOT_RUN",
          "detail": "Actual deployment and device laboratory required"
        }
      ],
      "qualification": ""
    },
    {
      "id": "package_integrity",
      "title": "Root archive and reproducible package integrity",
      "state": "PASS",
      "summary": "The repository includes a deterministic root-package builder with sorted members, fixed timestamps, clean extraction, byte/mode parity, forbidden-file rejection, and isolated tests.",
      "evidence": [
        {
          "path": "scripts/build_release.py",
          "summary": "Deterministic root-package builder",
          "sha256": "59c0b2b6f557e43b045a11bd44d0709a2217e302284b32d1c8bf25c6764b7f2d",
          "bytes": 35909
        },
        {
          "path": "scripts/preflight.py",
          "summary": "Dependency-light package preflight",
          "sha256": "581d97861c01757bd6a1376a36c01e8b42fa2be5c2082bec858f88b179fbbaa2",
          "bytes": 48543
        },
        {
          "path": "app/content/release/build-info.json",
          "summary": "Hash-addressed package identity",
          "sha256": "eeefe445f6e6650ccb44e7162e3d8488ea7060caab74c2155ba68b256a3ec75d",
          "bytes": 558
        }
      ],
      "checks": [
        {
          "id": "ACC-PKG-01",
          "statement": "Root package identity is repository-controlled",
          "status": "PASS",
          "detail": "2.0.0-rc.9-WIP"
        },
        {
          "id": "ACC-PKG-02",
          "statement": "cPanel root deployment contract is packaged",
          "status": "PASS",
          "detail": "cpanel_app.py / application / blank URL path"
        },
        {
          "id": "ACC-PKG-03",
          "statement": "Candidate packets cannot auto-promote the package",
          "status": "PASS",
          "detail": "20 packet invariants"
        }
      ],
      "qualification": ""
    },
    {
      "id": "independent_claim_verification",
      "title": "Independent verification of claims beyond reciprocal first-party publication",
      "state": "NOT_ESTABLISHED",
      "summary": "No independent third-party evidence was supplied for private contract terms, external legal recognition, deployment, classified capability, readiness, performance, or certification.",
      "evidence": [
        {
          "path": "docs/EVIULON_PUBLIC_SOURCE_RECORD.md",
          "summary": "First-party source classification",
          "sha256": "4fccd64232b32e6799b05b5d769ae5c15bc90b8a53ea71daad1cd1791019f162",
          "bytes": 5027
        }
      ],
      "checks": [
        {
          "id": "ACC-IND-01",
          "statement": "Reciprocal first-party publication is preserved",
          "status": "PASS",
          "detail": "Eviulon-controlled records"
        },
        {
          "id": "ACC-IND-02",
          "statement": "Independent verification of non-public and external claims is established",
          "status": "NOT_ESTABLISHED",
          "detail": "No independent evidence supplied"
        }
      ],
      "qualification": ""
    }
  ],
  "live_observation": {
    "observed_health_version": "1.0.2",
    "package_version": "2.0.0-rc.9-WIP",
    "deployment_drift_detected": true,
    "simulations_index_status": 200,
    "candidate_deployed": false,
    "observation_sha256": "35de067275a58f9c523c00ee5f81e8919b2de931629bad57815acd30c3716655",
    "deployment_record_sha256": "ff3344243499c9ac7e85de4f44c273323935257ee9c5c83e194a9d2553231c43"
  },
  "source_evidence_class": "RECIPROCAL_FIRST_PARTY_PUBLICATION",
  "acceptance_packet_contract": {
    "candidate_packet_count": 9,
    "reviewed_packet_count": 0,
    "candidate_index_sha256": "030536b7c20a4717c4be05f7361a8c8d69fc82a3b9123b4a6f30e71a99617dca",
    "reviewed_index_sha256": "456a4634b9c91135c2dc009712f75be356aeea0768d480f8a1dba7ecc225db43",
    "ledger_sha256": "87a4d46b5a12c98a37ba49cb16ea92430c0c5631078d44885764cd80fa136fe2",
    "candidate_evidence_is_reviewed": false,
    "reviewed_packets_authoritative": false,
    "automatic_promotion": false,
    "public_persistence": false
  },
  "composite_score": null,
  "public_persistence": false,
  "operational": false,
  "qualification": "Simulation and repository evidence is bounded evidence, not real-system certification, legal approval, operational authorization, procurement acceptance, contract authentication, or liability determination.",
  "terminal": "SYNTHETIC_NULL_SINK",
  "acceptance_sha256": "970543e0fb9347eca2c5ace677658936674d0d2717ed1eff0f26d85569cc858b"
}