V32 Gate 8: Rehearse testnet and mainnet readiness

Adds package-owned typed readiness rehearsal records for local, staging-testnet, production-mainnet, and offline-disabled lanes. Generates the source-safe Gate 8 artifact, wires the checker, focused BTD test, proof matrix, deterministic replay report, workflow coverage, and V32 spec/roadmap parity updates. Keeps production-mainnet value-bearing settlement explicitly blocked while staging-testnet readiness is classified by secret presence only.

Author: geraldarthurdavis

.bitcode/v32-deterministic-replay-report.json

@@ -11,9 +11,9 @@
     {
       "artifactPath": ".bitcode/v32-proof-coverage-matrix.json",
       "byteEqual": true,
-      "byteLength": 21695,
-      "firstDigest": "sha256:61248901dde4774485f5c9e56b2c7a83a44943274058a3408c503bbcb8dd6851",
-      "secondDigest": "sha256:61248901dde4774485f5c9e56b2c7a83a44943274058a3408c503bbcb8dd6851"
+      "byteLength": 22024,
+      "firstDigest": "sha256:ba6a357d344ceb075c9d2bf76f1b28314fac25caab4236f9e22a5a2fcbf2920a",
+      "secondDigest": "sha256:ba6a357d344ceb075c9d2bf76f1b28314fac25caab4236f9e22a5a2fcbf2920a"
     }
   ],
   "artifactId": "v32-deterministic-replay-report",

.bitcode/v32-proof-coverage-matrix.json

@@ -262,19 +262,19 @@
     {
       "blockers": [],
       "coverageStatus": "v32-expansion-required",
-      "expectedArtifact": ".bitcode/v32-ledger-btd-settlement-failure-state-coverage.json",
+      "expectedArtifact": ".bitcode/v32-testnet-mainnet-readiness-rehearsal.json",
       "failureModes": [
         "rls-projection-denial-without-repair",
         "schema-type-drift",
         "service-secret-leak",
         "telemetry-row-missing"
       ],
-      "fixture": "packages/orm/src/__tests__/bitcode-execution-storage.test.ts; packages/orm/src/__tests__/execution-events.test.ts; packages/orm/src/__tests__/btd-registry.test.ts; packages/orm/src/__tests__/data-health.contract.test.ts; packages/btd/__tests__/v32-ledger-btd-settlement-failure-states.test.ts",
+      "fixture": "packages/orm/src/__tests__/bitcode-execution-storage.test.ts; packages/orm/src/__tests__/execution-events.test.ts; packages/orm/src/__tests__/btd-registry.test.ts; packages/orm/src/__tests__/data-health.contract.test.ts; packages/btd/__tests__/v32-ledger-btd-settlement-failure-states.test.ts; packages/btd/__tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts",
       "owner": "packages/orm; supabase/migrations; packages/pipeline-hosts",
       "plannedGate": "Gate 5 and Gate 8",
       "promotedBehavior": "Supabase/PostgreSQL projections for executions, events, pipeline runs, BTD registry, user/account state, and asset-pack evidence.",
       "repairPosture": "Gate 5 proves ledger/database drift repair; Gate 8 proves environment-lane readiness without printing credentials.",
-      "replayCommand": "pnpm -C packages/orm test -- --runTestsByPath src/__tests__/bitcode-execution-storage.test.ts src/__tests__/execution-events.test.ts src/__tests__/btd-registry.test.ts src/__tests__/data-health.contract.test.ts --runInBand && pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-ledger-btd-settlement-failure-states.test.ts && pnpm run check:v32-ledger-btd-settlement-failure-states",
+      "replayCommand": "pnpm -C packages/orm test -- --runTestsByPath src/__tests__/bitcode-execution-storage.test.ts src/__tests__/execution-events.test.ts src/__tests__/btd-registry.test.ts src/__tests__/data-health.contract.test.ts --runInBand && pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-ledger-btd-settlement-failure-states.test.ts __tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts && pnpm run check:v32-ledger-btd-settlement-failure-states && pnpm run check:v32-testnet-mainnet-readiness-rehearsal",
       "requiredContexts": [
         "pipeline_runs",
         "execution_events",
@@ -287,10 +287,10 @@
     },
     {
       "blockers": [
-        "V32 needs source-safe object-storage fixture rows that distinguish proof artifacts from protected AssetPack source."
+        "A future storage-provider depth gate must replace source-safe readiness classification with live provider readback for every protected-source storage adapter."
       ],
       "coverageStatus": "planned-gap",
-      "expectedArtifact": ".bitcode/v32-ledger-btd-settlement-failure-state-coverage.json",
+      "expectedArtifact": ".bitcode/v32-testnet-mainnet-readiness-rehearsal.json",
       "failureModes": [
         "artifact-missing-after-settlement",
         "protected-source-upload-visible-before-payment",
@@ -302,7 +302,7 @@
       "plannedGate": "Gate 5 and Gate 8",
       "promotedBehavior": "Object-storage and artifact delivery posture for source-safe proof artifacts, protected AssetPack source, delivery receipts, and retrieval readback.",
       "repairPosture": "Gate 5 binds delivery receipts to paid settlement and encrypted protected-source storage; Gate 8 classifies provider connectivity by environment lane.",
-      "replayCommand": "pnpm --filter @bitcode/pipeline-hosts exec jest --config jest.config.cjs --runTestsByPath src/__tests__/asset-pack-harness.test.ts --runInBand && pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-ledger-btd-settlement-failure-states.test.ts && pnpm run check:v32-ledger-btd-settlement-failure-states && npm --prefix protocol-demonstration test -- --test-name-pattern \"storage\"",
+      "replayCommand": "pnpm --filter @bitcode/pipeline-hosts exec jest --config jest.config.cjs --runTestsByPath src/__tests__/asset-pack-harness.test.ts --runInBand && pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-ledger-btd-settlement-failure-states.test.ts __tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts && pnpm run check:v32-ledger-btd-settlement-failure-states && pnpm run check:v32-testnet-mainnet-readiness-rehearsal && npm --prefix protocol-demonstration test -- --test-name-pattern \"storage\"",
       "requiredContexts": [
         "storage publication receipt",
         "storage retrieval receipt",

.bitcode/v32-testnet-mainnet-readiness-rehearsal.json

@@ -0,0 +1,233 @@
+{
+  "artifactId": "v32-testnet-mainnet-readiness-rehearsal",
+  "closureCommand": "pnpm run check:v32-gate8",
+  "currentTarget": "V31",
+  "generatedAt": "2026-05-22T00:00:00.000Z",
+  "lanes": [
+    {
+      "blockers": [],
+      "laneId": "local",
+      "ledgerNetwork": "local",
+      "network": "regtest",
+      "postures": [
+        "local-ledger-ready",
+        "fixture-database-ready",
+        "source-safe-object-storage-only",
+        "regtest-btc-only",
+        "rollback-root-required"
+      ],
+      "providerConnectivity": [
+        "local-fixtures:ready",
+        "sandbox-host:review"
+      ],
+      "readinessRoot": "sha256:a58fe2e8ba02508d4380de3cd6e15ac1b6820283ebacd6f33a1dd3be5ae92fb3",
+      "secretHandling": "no-live-secret-required",
+      "sourceSafetyClass": "source-safe-internal",
+      "state": "ready",
+      "valueBearingSettlementAdmitted": false,
+      "valueBearingSettlementRequested": false
+    },
+    {
+      "blockers": [],
+      "laneId": "staging-testnet",
+      "ledgerNetwork": "testnet",
+      "network": "testnet",
+      "postures": [
+        "ledger-readback-ready",
+        "database-readback-ready",
+        "encrypted-protected-source-storage",
+        "testnet-btc-only",
+        "rollback-root-required"
+      ],
+      "projectRef": "tkpyosihuouusyaxtbau",
+      "providerConnectivity": [
+        "vercel-sandbox:ready",
+        "supabase-staging-testnet:ready",
+        "github-delivery:ready",
+        "model-inference:ready"
+      ],
+      "readinessRoot": "sha256:b0ddc3908285b32db13bbeefa5ec713a0a680c081f2943b5cb2cc72a83f69177",
+      "secretHandling": "presence-only-values-never-serialized",
+      "sourceSafetyClass": "secret-presence-only",
+      "state": "ready",
+      "valueBearingSettlementAdmitted": false,
+      "valueBearingSettlementRequested": false
+    },
+    {
+      "blockers": [
+        "production-mainnet-value-bearing-not-admitted-in-v32",
+        "future-explicit-launch-gate-required"
+      ],
+      "laneId": "production-mainnet",
+      "ledgerNetwork": "mainnet",
+      "network": "mainnet",
+      "postures": [
+        "ledger-represented-no-value-write",
+        "database-non-value-readiness-only",
+        "protected-source-locked",
+        "mainnet-broadcast-blocked",
+        "future-launch-gate-required"
+      ],
+      "projectRef": "rinalyjfecxnmyczrpzo",
+      "providerConnectivity": [
+        "supabase-production-mainnet:review",
+        "bitcoin-mainnet-observer:review",
+        "github-delivery:blocked"
+      ],
+      "readinessRoot": "sha256:7e104efa6bebac350d2882f3c8432a5eacb69bfe319e6c45b0085fb3b67862e8",
+      "secretHandling": "presence-only-values-never-serialized",
+      "sourceSafetyClass": "secret-presence-only",
+      "state": "blocked",
+      "valueBearingSettlementAdmitted": false,
+      "valueBearingSettlementRequested": true
+    },
+    {
+      "blockers": [
+        "external-network-disabled"
+      ],
+      "laneId": "offline-disabled",
+      "ledgerNetwork": "offline",
+      "network": "offline",
+      "postures": [
+        "no-live-ledger-write",
+        "no-live-database-readback",
+        "no-live-object-storage-write",
+        "no-btc-broadcast",
+        "fixture-only"
+      ],
+      "providerConnectivity": [
+        "external-network:disabled",
+        "wallet-broadcast:disabled"
+      ],
+      "readinessRoot": "sha256:18b0ccdf8ba5102b0f5b752665179a2c7bb346c7e54f0deeae451d72a92f3c31",
+      "secretHandling": "no-live-secret-required",
+      "sourceSafetyClass": "source-safe-generated-proof",
+      "state": "disabled",
+      "valueBearingSettlementAdmitted": false,
+      "valueBearingSettlementRequested": false
+    }
+  ],
+  "passed": true,
+  "proofCoverage": {
+    "laneCount": 4,
+    "localRepresented": true,
+    "offlineDisabledRepresented": true,
+    "productionMainnetRepresented": true,
+    "productionMainnetValueBearingAdmitted": false,
+    "protectedSourceSerialized": false,
+    "rawProviderPayloadsSerialized": false,
+    "secretPresenceClassCount": 7,
+    "secretValuesSerialized": false,
+    "stagingTestnetRepresented": true
+  },
+  "schemaId": "bitcode.v32.testnetMainnetReadinessRehearsal.v1",
+  "secretPresenceClasses": [
+    "sandbox-auth-token",
+    "model-provider-key",
+    "supabase-admin-credential",
+    "database-admin-password",
+    "vcs-installation-credential",
+    "wallet-signer-capability",
+    "production-operator-approval"
+  ],
+  "sourceEvidence": [
+    {
+      "digest": "sha256:5be7cfcc9518ef8cb2e33ba3e178b7e4d07e1ad717e0b902690993ed3a364963",
+      "relativePath": "packages/btd/src/testnet-mainnet-readiness-rehearsal.ts",
+      "requiredTokens": [
+        {
+          "present": true,
+          "token": "buildV32TestnetMainnetReadinessRehearsal"
+        },
+        {
+          "present": true,
+          "token": "production-mainnet-value-bearing-not-admitted-in-v32"
+        },
+        {
+          "present": true,
+          "token": "secret-presence-only"
+        },
+        {
+          "present": true,
+          "token": "tkpyosihuouusyaxtbau"
+        },
+        {
+          "present": true,
+          "token": "rinalyjfecxnmyczrpzo"
+        }
+      ]
+    },
+    {
+      "digest": "sha256:65f910e8e471fe199939e9c4f0ce6498b6d97f649d9cbd0ca42e38c0ee2588de",
+      "relativePath": "packages/btd/src/btc-fee-operation.ts",
+      "requiredTokens": [
+        {
+          "present": true,
+          "token": "production-mainnet"
+        },
+        {
+          "present": true,
+          "token": "Value-bearing BTC fee settlement on mainnet requires explicit operational approval."
+        }
+      ]
+    },
+    {
+      "digest": "sha256:0c76a019063830300de0e30ebcb4f5e5b8296ac1cb912685cb3df90c61fbf971",
+      "relativePath": "packages/btd/src/deployment-lanes.ts",
+      "requiredTokens": [
+        {
+          "present": true,
+          "token": "mainnet-value-bearing"
+        },
+        {
+          "present": true,
+          "token": "Value-bearing mainnet V27 lane requires operational approval root."
+        }
+      ]
+    },
+    {
+      "digest": "sha256:5011937c41fefefd5973b2272bdc1c0f37c707a7dced70cbb3cda1ed27cbb45d",
+      "relativePath": "packages/btd/README.md",
+      "requiredTokens": [
+        {
+          "present": true,
+          "token": "testnet/mainnet readiness rehearsal"
+        },
+        {
+          "present": true,
+          "token": "secret-presence-only"
+        },
+        {
+          "present": true,
+          "token": "production-mainnet remains blocked"
+        }
+      ]
+    }
+  ],
+  "sourceSafetyVerdict": "source-safe-readiness-metadata-secret-presence-only",
+  "testEvidence": [
+    {
+      "digest": "sha256:eb849a63ffae938c1e84ad26462611202bdef67c5d4a1336e68ba7015f4a71c9",
+      "relativePath": "packages/btd/__tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts",
+      "requiredTokens": [
+        {
+          "present": true,
+          "token": "represents every readiness lane with typed source-safe records"
+        },
+        {
+          "present": true,
+          "token": "classifies secret presence without serializing credential values"
+        },
+        {
+          "present": true,
+          "token": "keeps production-mainnet value-bearing settlement blocked in V32"
+        },
+        {
+          "present": true,
+          "token": "keeps disabled/offline rehearsal fixture-only"
+        }
+      ]
+    }
+  ],
+  "version": "V32"
+}

.github/workflows/bitcode-gate-quality.yml

@@ -118,6 +118,7 @@ jobs:
             node scripts/check-v32-gate5-ledger-btd-settlement-failure-states.mjs --skip-branch-check
             node scripts/check-v32-gate6-interface-contract-regression-suites.mjs --skip-branch-check
             node scripts/check-v32-gate7-browser-accessibility-responsive-visual-proof.mjs --skip-branch-check
+            node scripts/check-v32-gate8-testnet-mainnet-readiness-rehearsal.mjs --skip-branch-check
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2
             exit 1
@@ -145,6 +146,7 @@ jobs:
           pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/btd.test.ts
           pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-ledger-btd-settlement-failure-states.test.ts
           pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-interface-contract-regression.test.ts
+          pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts
           pnpm --filter @bitcode/api exec jest --config jest.config.cjs --runTestsByPath src/routes/__tests__/btd-crypto.test.ts --runInBand
           pnpm --filter @bitcode/api exec jest --config jest.config.cjs --runTestsByPath src/routes/__tests__/auxillaries-contract.test.ts --runInBand
           pnpm --dir packages/executions-mcp/src/mcp-server run test:mcp -- --runTestsByPath src/__tests__/unit/auth.test.ts --runInBand

BITCODE_SPEC_V32.md

@@ -8,7 +8,7 @@
 - Canonical proof-source commit: none until V32 promotion
 - Prior canonical anchor: `BITCODE_SPEC_V31.md`
 - Prior generated proof appendix: `BITCODE_SPEC_V31_PROVEN.md`
-- Generated structured artifact inventory: planned draft `.bitcode/v32-spec-family-report.json`, `.bitcode/v32-canonical-input-report.json`, `.bitcode/v32-canon-posture-drift-report.json`, generated Gate 2 `.bitcode/v32-proof-coverage-matrix.json`, generated Gate 3 `.bitcode/v32-artifact-volatility-inventory.json` and `.bitcode/v32-deterministic-replay-report.json`, generated Gate 4 `.bitcode/v32-reading-pipeline-proof-coverage.json`, generated Gate 5 `.bitcode/v32-ledger-btd-settlement-failure-state-coverage.json`, later V32 proof/test coverage artifacts, V32 gate-quality and promotion workflow evidence, and `BITCODE_SPEC_V32_PROVEN.md` only after promotion
+- Generated structured artifact inventory: planned draft `.bitcode/v32-spec-family-report.json`, `.bitcode/v32-canonical-input-report.json`, `.bitcode/v32-canon-posture-drift-report.json`, generated Gate 2 `.bitcode/v32-proof-coverage-matrix.json`, generated Gate 3 `.bitcode/v32-artifact-volatility-inventory.json` and `.bitcode/v32-deterministic-replay-report.json`, generated Gate 4 `.bitcode/v32-reading-pipeline-proof-coverage.json`, generated Gate 5 `.bitcode/v32-ledger-btd-settlement-failure-state-coverage.json`, generated Gate 8 `.bitcode/v32-testnet-mainnet-readiness-rehearsal.json`, later V32 proof/test coverage artifacts, V32 gate-quality and promotion workflow evidence, and `BITCODE_SPEC_V32_PROVEN.md` only after promotion
 - Source parity state: V32 source-side proof-family replay, deterministic artifact generation, scenario matrices, cross-surface regression coverage, browser/accessibility/visual evidence, testnet/mainnet-readiness rehearsal, and promotion-proof hardening are opened but not yet closed
 - State: draft target opened
 - Active canonical pointer during draft opening: `BITCODE_SPEC.txt` -> `V31`
@@ -300,8 +300,14 @@ Gate 8 readiness rehearsal precision:
 
 - Local, staging-testnet, production-mainnet, and offline/disabled lanes are typed readiness records.
 - Secrets are classified by presence and purpose but are never printed in logs, generated artifacts, or UI metadata.
+- Provider connectivity, ledger/database/object-storage posture, BTC network posture, rollback, and repair checks are source-safe.
 - Production-mainnet remains blocked unless a future explicit launch gate admits value-bearing settlement.
 
+Gate 8 source closure is `.bitcode/v32-testnet-mainnet-readiness-rehearsal.json`, generated by `pnpm run generate:v32-testnet-mainnet-readiness-rehearsal` and checked by `pnpm run check:v32-testnet-mainnet-readiness-rehearsal` plus `pnpm run check:v32-gate8`.
+The package source `packages/btd/src/testnet-mainnet-readiness-rehearsal.ts` owns the typed readiness records for `local`, `staging-testnet`, `production-mainnet`, and `offline-disabled`.
+The focused test `packages/btd/__tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts` proves lane shape, secret-presence-only handling, staging-testnet project boundary `tkpyosihuouusyaxtbau`, production-mainnet project boundary `rinalyjfecxnmyczrpzo`, disabled/offline fixture mode, and production-mainnet value-bearing block posture.
+The artifact records readiness metadata, roots, source/test digests, provider connectivity classes, ledger/database/object-storage posture, BTC network posture, and rollback/repair checks only; it must never serialize credential values, raw provider payloads, protected source, or production-mainnet value-bearing approval.
+
 Gate 9 promotion proof precision:
 
 - V32 proof generation must support dry-run, check, and promotion modes.

BITCODE_SPEC_V32_DELTA.md

@@ -177,6 +177,10 @@ Closure acceptance:
 - secret presence, provider connectivity, ledger/database/object-storage posture, BTC network posture, and rollback/repair checks are source-safe;
 - production-mainnet remains blocked unless a future explicit launch gate admits it.
 
+Gate 8 source closure is `.bitcode/v32-testnet-mainnet-readiness-rehearsal.json`, generated by `pnpm run generate:v32-testnet-mainnet-readiness-rehearsal` and checked by `pnpm run check:v32-testnet-mainnet-readiness-rehearsal` plus `pnpm run check:v32-gate8`.
+The implementation centers on `packages/btd/src/testnet-mainnet-readiness-rehearsal.ts` and `packages/btd/__tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts`.
+The record set binds local, staging-testnet, production-mainnet, and offline-disabled lanes; classifies credentials as secret-presence-only; names staging-testnet project `tkpyosihuouusyaxtbau` and production-mainnet project `rinalyjfecxnmyczrpzo`; and keeps production-mainnet value-bearing settlement blocked for V32.
+
 ### Gate 9: Promotion Proof Generation Hardening
 
 Gate 9 hardens V32 promotion proof generation and workflow debuggability.

BITCODE_SPEC_V32_NOTES.md

@@ -118,6 +118,9 @@ Rehearse environment readiness without admitting value-bearing launch:
 - local, staging-testnet, production-mainnet, and disabled/offline lanes;
 - secret presence classes, provider connectivity, ledger/database/object-storage posture, BTC network posture, rollback, and repair;
 - production-mainnet remains blocked unless a future explicit launch gate admits it.
+- generated artifact `.bitcode/v32-testnet-mainnet-readiness-rehearsal.json`;
+- generator command `pnpm run generate:v32-testnet-mainnet-readiness-rehearsal`, checker command `pnpm run check:v32-testnet-mainnet-readiness-rehearsal`, and gate closure command `pnpm run check:v32-gate8`;
+- focused package test `packages/btd/__tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts` proving typed lanes, secret-presence-only handling, staging-testnet and production-mainnet project boundaries, disabled/offline fixture posture, and production-mainnet value-bearing block posture.
 
 ### Gate 9: Promotion Proof Generation Hardening