DataOps-platform/docs/phase3/P3_WP14_RELEASE_TRACEABILITY.json

{
  "schema_version": "1.0",
  "work_package": "P3-WP14",
  "release_status": "ENGINEERING_BASELINE_COMPLETE_ENTERPRISE_UAT_BLOCKED",
  "release_identifier": "p3-wp14-local-engineering-20260818",
  "migration_head": "20260818_559",
  "signature_status": "TBD_EXTERNAL",
  "remote_save_status": "TBD_EXTERNAL",
  "release_manifest_path": "docs/phase3/P3_WP14_RELEASE_MANIFEST.json",
  "release_manifest_sha256": "363090b101879eea0333d11cbff635c7e90f80e8664bde1b7b49e679009d0219",
  "verification_ledger_path": "docs/validation/P3_WP14_LOCAL_VERIFICATION_LEDGER.json",
  "verification_ledger_sha256": "bd0d6f7f1fb9273377f84bcf867bdef7aca96960759312812f3504569f89b492",
  "verification_log_path": "docs/validation/P3_WP14_LOCAL_VERIFICATION.log",
  "verification_log_sha256": "de9d361dbd25f7d1d2f05a924fc48df4a69a3f721b998480dd9eddfbf9877a63",
  "controlled_scope": {
    "manifest_covers": [
      "app",
      "deployment/app",
      "migrations",
      "deployment/migrations",
      "docs/architecture/OPENAPI.yaml",
      "deploy/docker/docker-compose.yml",
      "scripts/generate_openapi.py",
      "P3-WP14 acceptance, handover, audit, configuration, generator, and contract assets"
    ],
    "worktree_state": "UNCOMMITTED_WORKTREE_EVIDENCE",
    "claim": "The manifest is an unsigned local snapshot from a dirty shared worktree, not a clean or signed release."
  },
  "second_isolated_local_environment": {
    "formal_same_signed_version_status": "BLOCKED_EXTERNAL",
    "formal_same_signed_version_reason": "manifest is unsigned; signature and enterprise second-environment authority are TBD_EXTERNAL",
    "local_portability_rehearsal": {
      "result": "PASS_LOCAL",
      "manifest_sha256": "363090b101879eea0333d11cbff635c7e90f80e8664bde1b7b49e679009d0219",
      "manifest_signed": false,
      "boundary": "Two closed, non-secret local configuration renders are bound to this unsigned manifest digest. This is portability rehearsal only, not the required same signed-version second isolated environment."
    }
  },
  "release_notes": "The release manifest has no external signature. Enterprise signing, pilot installation, remote preservation, and production approval remain TBD_EXTERNAL.",
  "local_verification_cache": {
    "classification": "UNSIGNED_REPRODUCIBILITY_CACHE",
    "pass_local_authority": "FRESH_VERIFIER_CURRENT_PROCESS_ONLY",
    "external_signature_status": "TBD_EXTERNAL",
    "enterprise_gate": "BLOCKED_EXTERNAL"
  }
}