{ "schema_version": "1.0", "work_package": "P3-WP14", "release_status": "ENGINEERING_BASELINE_COMPLETE_ENTERPRISE_UAT_BLOCKED", "release_identifier": "p3-wp14-local-engineering-20260818", "migration_head": "20260818_559", "signature_status": "TBD_EXTERNAL", "remote_save_status": "TBD_EXTERNAL", "release_manifest_path": "docs/phase3/P3_WP14_RELEASE_MANIFEST.json", "release_manifest_sha256": "363090b101879eea0333d11cbff635c7e90f80e8664bde1b7b49e679009d0219", "verification_ledger_path": "docs/validation/P3_WP14_LOCAL_VERIFICATION_LEDGER.json", "verification_ledger_sha256": "bd0d6f7f1fb9273377f84bcf867bdef7aca96960759312812f3504569f89b492", "verification_log_path": "docs/validation/P3_WP14_LOCAL_VERIFICATION.log", "verification_log_sha256": "de9d361dbd25f7d1d2f05a924fc48df4a69a3f721b998480dd9eddfbf9877a63", "controlled_scope": { "manifest_covers": [ "app", "deployment/app", "migrations", "deployment/migrations", "docs/architecture/OPENAPI.yaml", "deploy/docker/docker-compose.yml", "scripts/generate_openapi.py", "P3-WP14 acceptance, handover, audit, configuration, generator, and contract assets" ], "worktree_state": "UNCOMMITTED_WORKTREE_EVIDENCE", "claim": "The manifest is an unsigned local snapshot from a dirty shared worktree, not a clean or signed release." }, "second_isolated_local_environment": { "formal_same_signed_version_status": "BLOCKED_EXTERNAL", "formal_same_signed_version_reason": "manifest is unsigned; signature and enterprise second-environment authority are TBD_EXTERNAL", "local_portability_rehearsal": { "result": "PASS_LOCAL", "manifest_sha256": "363090b101879eea0333d11cbff635c7e90f80e8664bde1b7b49e679009d0219", "manifest_signed": false, "boundary": "Two closed, non-secret local configuration renders are bound to this unsigned manifest digest. This is portability rehearsal only, not the required same signed-version second isolated environment." } }, "release_notes": "The release manifest has no external signature. Enterprise signing, pilot installation, remote preservation, and production approval remain TBD_EXTERNAL.", "local_verification_cache": { "classification": "UNSIGNED_REPRODUCIBILITY_CACHE", "pass_local_authority": "FRESH_VERIFIER_CURRENT_PROCESS_ONLY", "external_signature_status": "TBD_EXTERNAL", "enterprise_gate": "BLOCKED_EXTERNAL" } }