pcvantol · Oct 14, 2026 · Oct 14, 2026
@@ -1,5 +1,33 @@
 # Engineering Platform Roadmap
 
+## HOB-EP01 project discovery — protected implementation, 2026-10-14
+
+The selected [Workspace project-discovery producer](../engineering/WORKSPACE_PROJECT_DISCOVERY_READ_V1.md)
+is qualified on protected EP2.3.120 main
+`c3d4e8161598adb92aa21a40aaa903df591c6c3a` after normal protected PR355.
+[Delivery/Finalization record](WORKSPACE_PROJECT_DISCOVERY_READ_V1_DELIVERY.md)
+binds current source/tree/wheels, actual installed2559 tests, strict changed-file
+line coverage, independent complete Quality/Security and all11 owning CI jobs.
+Only bounded authenticated B8R/CENTRAL discovery/topology reads and finite
+revocable Workspace READ grants are selected. No scanner/second registry,
+project create/adopt, generic IAM, user-data migration or live installation.
+
+The same sole ARCHITECT_2 / LANE_2_WORK continues ordinary nonempty NO_BUMP
+Finalization with its own reviews/checks/protected merge, then NEW exact-final-main
+installed HTTP/readback/cleanup and immutable qualified L4 handoff under
+`L2-L4-HOB-EP01-VERIFIED-LINK-V1-20261012`. These remaining gates are PENDING;
+source-qualified or initial installed proof is not full HOB closure. Scope and
+operational budgets stay unchanged; actual consumption is retained without an
+administrative cycle maximum under decision6161548467.
+
+R34, r33, r43/r44 and GP remain CLOSED. The dated r34 entries below retain their
+original observed stage and historical failures; they are not executable work
+or a reopening. HOB-EP01's activation6161548467 supersedes its historical wait
+markers. L4's complete GUI, L1 installer and L3 are not producer prerequisites.
+TDE observe is reported separately as actual FAILED, with unsuppressed open
+maintenance signals; a green nonblocking workflow is not TDE-qualified PASS.
+
+
 ## Current r34 protected source delivery and NO_BUMP Finalization — 2026-10-13
 
 [ACK and one-time documentary correction47 booking](https://github.com/pcvantol/forge/issues/142#issuecomment-6154663253):

@@ -0,0 +1,159 @@
+# Workspace project discovery HOB-EP01 delivery
+
+**PROTECTED IMPLEMENTATION QUALIFIED / ORDINARY FINALIZATION.**
+New exact-final-main installed HTTP/readback/cleanup and immutable handoff remain
+PENDING until their actual terminal receipts; this is not full HOB-EP01 closure.
+
+Assignment `L2-WORKSPACE-PROJECT-DISCOVERY-READ-V1-20261012`.
+Decision `L2-HOB-EP01-ACTIVATE-CONTINUE-TO-DOD-20261014`.
+JOIN `L2-L4-HOB-EP01-VERIFIED-LINK-V1-20261012`.
+Same sole `ARCHITECT_2 / LANE_2_WORK` source writer and session.
+Base `b2befba67174deb9061134e668549c75c57a14b7` (EP2.3.119).
+Implementation branch `codex/hob-ep01-project-discovery-v1`; PR355.
+Package PATCH2.3.120; ordinary nonempty Finalization is NO_BUMP.
+R34/r33/r43/r44/GP remain closed; their histories, proofs and budgets are distinct.
+
+## Selected producer boundary
+
+Read only the existing B8R/CENTRAL projects, authority/child repositories and
+permitted bounded attachment availability. No second register/scanner/identity,
+project creation/adoption/execution, provider or real-user installation.
+The owner contract is WORKSPACE_PROJECT_DISCOVERY_READ_V1.md and the shipped
+closed workspace-project-discovery-v1.schema.json, contract1.0/schema75.
+Two authenticated GET routes and ordinary finite issue/status/revoke CLI.
+Separate readscope binds EP/Workspace instances, consumer/audience, explicit
+projects/fields and validity. Private cursor signing key conveys no authority.
+Unsupported journal modes are rejected without switching the existing store.
+Noncreating snapshots reauthenticate and fence the final publication; missing,
+denied and corrupt source are not healthy empty results. No published paths,
+bearers, verifiers or host metadata. Owner ledger writes remain separate from
+zero-domain-effect GET proof.
+
+## Exact candidate and actual evidence
+
+Frozen source c218460aac7cf362598c11048f9f09df4706f375, tree
+a74597dbf76fa83c1de4535ab611034de9a41505; official installed Mac wheel SHA256
+6f11b9e3d658c6af7f995346b578815803e3fe6b91d830884ce3f83312209f53.
+Source/wheel/current noneditable runtime195-product-byte equality independently
+verified by complete Quality and Security. Forty current targeted installed
+HTTP/authority/schema/migration/lifetime regressions PASS, not a full suite.
+First ordinary installed service21 CLI/HTTP records belongs to39a/4d8/wheelcbd,
+not this frozen source or a future final-main; it admitted the initial small chain.
+
+Current local full installed suite2559/3619.624s/OK/one existing macOSskip,
+natural exit0 and no remaining own coverage/HTTP workers. Original full JSON
+SHA256 a44921d4ba9871911201c12706a8fa4754fee614c9a7db54a8de8843a8ca007b;
+no union with previous evidence. All166 measured shipped Python modules meet
+existing combined>=80.20%, minimum80.3203661327%, aggregate85.0462988531%.
+Strict changed executable-line counts: central reset1280/1523=84.04464872%;
+platform version82/90=91.11111111%; discovery235/253=92.88537549%;
+server3937/4694=83.87302940%; each strictly>80.2%. Both independent reviewers
+recompute original JSON/native diff and actual stop, not rounded combined values.
+
+The later owning installed-location check rejected the Mac runtime above because
+its noneditable site-packages directory was physically below the ignored checkout
+`tmp` directory. That original failure is retained; the actual functional suite
+and byte equality are not retrospectively claimed to pass the outside-checkout
+location gate. A new standalone runtime in `/private/tmp` installs the same
+official candidate wheel without editable/source imports. The unchanged owning
+version/location check now passes. Final-main qualification must use this
+outside-checkout layout and new final-main wheel, with separate receipts.
+
+Current owning CI38547636168 all11jobsSUCCESS: full installed coverage2559/
+3509.198s/OK/two existing Ubuntu skips; independent166module combined check.
+Hosted synthetic mergeaa5db4df76b32d431ba14387cc65349a51cb0709 has the exact
+reviewedtreea74597d, but a distinct hostedwheel3e56c6340c524bc3ea0ac3d8aa9d6547dbc28519eff91f16f209212878c8fc0a.
+Validate3native and102coupled regressions, whole2577tests/3543.323s/Ubuntu2,
+P-TRANSPORT3x2, parallelAction16, repositoryauthority8, actual Genesis/Managed
+E2E, owning Postman and downstreamTrustedDelivery evidence all PASS. Four
+normal browser shards, exact JavaScript coverage/localization and existing
+external gates SUCCESS; unchanged GoldenRegression baselineSKIP is not PASS.
+
+Complete independent exact-source Quality and Security both APPROVE normal
+protected implementation delivery. Immutable report SHA256 values:
+
+- Quality: 69393f7abcb8eb5b9371293da0971b766fe966539c78f55e1ba1b221a768f16d.
+- Security: b0e0bf6f2e6672474dfff1d67926fb70e57ada1c71035a44562400d5f2caf7b6.
+
+[PR355](https://github.com/pcvantol/engineering-platform/pull/355) was normally
+protected squash merged at2026-10-14T12:31:26Z to
+c3d4e8161598adb92aa21a40aaa903df591c6c3a. Native Git and GitHub readback both
+confirm treea74597dbf76fa83c1de4535ab611034de9a41505 equals the reviewed tree.
+Exact-head match, existing protection and Owner AuthorizationSUCCESS retained;
+no admin bypass. The implementation branch/history remain preserved.
+
+Ordinary nonempty NO_BUMP Finalization uses the same writer on
+codex/hob-ep01-project-discovery-finalization-v1, actual basec3d4e816. Its own
+exact reviews/checks/protected merge and NEW exact-final-main producer proof
+remain pending; no future artifact or outcome is claimed here.
+
+## Preserved failures and corrections
+
+Original malformed/future freshness, WAL late-revocation/publication and
+fixture-lifetime regressions retained. Round1 repairs admitted independently.
+Round2 fixes actual Postman generator/request/grant/schema binding and five
+empty-pre75 historical fixture shape errors. Its minimal Postman lifetime repair
+uses non-daemon handler joins/server_close before successcleanup; unknown stop
+retains fixture and both original request/cleanup errors. Actual original gap
+reproduced with live handler/open socket after fixture deletion; two current real
+handler/unknown-stop tests pass with setup ownership protected.
+
+Fullcycle1 local interrupted: no terminal suite/coverage/PASS. CI38539955153
+terminal2557tests/5historicalERRORs/2platformSKIPs plus browser4colorFAIL;
+raw originals retained. The color cause remains UNKNOWN and diagnostics did not
+reproduce it. Fullcycle2 f43/38545862893 had normal4shards+JScoverageSUCCESS,
+then superseded/cancelled for review-required helper repair; not completePASS.
+Fullcycle3 current frozen candidate uses unchanged owning thresholds and all
+mandatory regressions. No r34 browser/CSS/assertion rewrites or retry waiver.
+Cumulative2corrections/4full cycles counted (three candidate cycles plus the
+actual automatic protected-main CI38564455565, still running at Finalization
+start), no new administrative cap/reset;
+installed service attempts counted separately with retained original identities.
+Old r34 test-result trees were intentionally hard-deleted only under explicit
+user storage disposition; remaining original logs/databases/reviews and active
+HOB evidence retained. Missing historical bytes are not reconstructed.
+
+## Source availability and preserved refs
+
+Source availability was restored through supported existing iCloud downloads;
+no source replacement or second writer. After protected merge, fetch reported
+an existing invalid-name iCloud conflict ref for the closed r34 branch. Its
+original41-byte ref and commitfb96d0d remain untouched; zlib/native Git confirm
+the commit object is intact. The original valid branch77d59a8 remains. New
+mainc3d4e816 and its exact reviewed tree were received and independently read
+natively and through GitHub; Finalization branches directly from that verified
+commit. Stale origin/main is explicitly not used as current authority. No ref
+delete, history rewrite, lock removal or replacement clone.
+
+## Finalization and exact-final-main qualification
+
+This delivery record, current roadmap entry and producer contract form the
+ordinary nonempty documentary Finalization. No product/version changes.
+After its own exact reviews/checks/protected merge, build/install a NEW official
+wheel from exact final-main and record its native source/tree/wheel/package
+identity, real ordinary synthetic installed HTTP/readback, targeted authority/
+attachment/cursor/expiry/race guards and actual stop/cleanup. Those future bytes
+and outcomes must be recorded separately in immutable #142/#208 receipts; never
+transfer the candidate or initial small-chain PASS to final-main.
+
+## Qualified L4 handoff and limits
+
+Only LINK-capability selects this producer under the existing JOIN; existing
+Forge pins stay unchanged. Topology revision/snapshot are64hex SHA256 strings,
+not integer/source/artifact digests. Closed schema, exact instance/scope and
+consumer request/document/epoch checks apply before accepting a late response.
+On409rediscover; revoked/unavailable removes link readiness. No Console,
+submission/admin bearer, SQL/CLI consumer fallback or cached positive identity.
+
+Provide final source/tree/wheel/schema hashes, actual sanitized HTTP outcomes,
+issuer/revocation/readscope/compatibility and safe synthetic owning setup/stop
+instructions in immutable qualified handoff. The local isolated installed
+producer suffices; no production EP update, live usergrant or GUI prerequisite.
+Current candidate TDE observe38547636315 assessment/qualification both exit2;
+policyFAIL (source86540>75000, repository maximum complexity319>30);
+coverage inputUNAVAILABLE with collectionexit1, not zero. The three new module
+HIGH complexity signals (13/20/31, regressionUNKNOWN) remain OPEN and
+unsuppressed. Independent Quality records separate nonblocking maintenance
+risks, no additionally established functional/security defect. TDE FAILED is
+reported separately from blocking source/installed/CI acceptance; the green
+nonblocking workflow is not qualifiedPASS.
@@ -3,7 +3,12 @@
 Assignment: `L2-WORKSPACE-PROJECT-DISCOVERY-READ-V1-20261012`.
 JOIN: `L2-L4-HOB-EP01-VERIFIED-LINK-V1-20261012`.
 
-**Implementation candidate, not yet a qualified handoff.** Schema75 adds one
+**Protected implementation qualified; exact-final-main handoff pending.**
+[Delivery and ordinary Finalization](../development/WORKSPACE_PROJECT_DISCOVERY_READ_V1_DELIVERY.md)
+records the exact source, actual installed tests, strict coverage, independent
+reviews and protected PR355. Final-main installed/readback/cleanup and the
+immutable JOIN handoff remain separate required evidence, not an inherited
+candidate PASS. Schema75 adds one
 separate security ledger. Existing B8R project/repository/attachment rows remain
 the sole logical/physical topology; no new project register or identity exists.
 Contract version1.0 is additive and does not widen existing credentials.