ee782b7d6e
Checkpoint implementation at user-requested stop; document known failures and incomplete release qualification. Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: GPT-6 Codex <noreply@openai.com>
2.4 KiB
Verification — 2026-10-30
Parent-run elevated ./mvnw.cmd -B verify passed 11 tests, zero failures/errors/skips and Checkstyle: eight public-facade contract tests and three real owner integration tests. Evidence: target/verification-elevated.log.
The real integration suite extends Record Files' public RecordFilesFixture from its tests classifier. That classifier was packaged directly from the 109-test verified owner target/test-classes; no moving archive-source changes were recompiled or represented as verified. The bridge tests exercise actual file-backed H2, QQQ actions/permissions, RetainedFileService, RetainedContentReader, attachment lifecycle and release services. Object storage remains the owner's in-memory boundary fixture; audit failure controls delegate to the real table audit port when healthy.
Verified behavior includes one canonical original across exact retries, generated provenance/source association, quarantined receipt without availability, release before content read, actual source/tenant revocation, audited-read failure before storage, intake audit failure without another original, and historical version reads after a newer version exists. Facade tests separately cover corrupted receipt/bytes, identity/session replacement and request conflicts. No test claims physical printing, provider Object Lock, scanner safety or archive access after source deletion.
The first default-sandbox owner integration run failed during fixture setup because H2 opened the test database read-only. The elevated rerun passed without changing the application behavior. Earlier facade fixture setup failures also exposed eager owner construction; production bridge defaults now resolve configured services at operation time under the current QContext.
Independent public-contract review by the client/security agent found no concrete mismatch in the inspected mapping. This adapter neither writes foreign tables nor duplicates canonical bytes. Generation's own durable audit remains a separate owner responsibility.
Known-version inspection update: parent elevated full install passed the same11 tests at21:14:45 CDT, including real-owner quarantine inspection before/after release and revoked-source refusal. Evidence target/inspect-integration-verification.log. Installed JAR SHA25674315A77BF0583617CAA970970ABE6BFA9E0E914132F87EFEC25F28DA76B51C0. This snapshot compiles against generation foundation's inspect default and33-test known-version reconciliation build.