设置

readOnly=true; endpoint=/api/readiness; generatedAt=2026-10-09T21:59.

safeForLocalTrial=false; noPlatformApiCall=true.

Safety failed=0; conversation failed=0.

approval/takeover; alerts=6; operatorReview=4; memoryReview=4.

blocking=1; watch=5.

missing=7; liveMembership=missing_foundation; routeReview=waiting_for_live_membership; nextRoute=GET /api/readiness. login/session/membership/RBAC/tenant admin are tracked but not enabled.

nextRoute=GET /api/readiness; owner=auth-readiness-route; risk=low; stage=proof_point; missingEvidence=2; blocker=Live membership proof is missing_foundation.; milestones=0/5; focus=Human approval.

Route Review Gate On Hold

Validation Review Gate Blocked

Live membership proof is blocking staging validation. state=missing_foundation; subjectLookup=false; probe=false; requestPaths=5.

No reviewed staging evidence timeline is recorded yet.

Proof Recertification Blocked Record reviewed command metadata before preparing a staging migration run. After that, Complete subject lookup readiness before treating Better Auth request-path proof as current. After that, Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.

Reviewed Evidence Acceptance Blocked; canaryDecision=retired; blocker=reviewed_external_proof_missing. Resolve the reviewed evidence, live membership, or Chatwoot freeze blocker before advancing.

proof=missing; acceptance=blocked; membership=missing_foundation; chatwootFreeze=frozen_preview_only. Resolve the reviewed evidence, live membership, or Chatwoot freeze blocker before advancing. Internal handoff only; no live-send or Chatwoot writeback authority.

AG42 Real Staging Prep Missing Evidence; blocker=reviewed_external_proof_missing; canary=POST /api/customers/[id]/notes; decision=retired. Import sanitized reviewed Better Auth/PostgreSQL staging evidence before advancing. Internal-only: no live send, no Chatwoot writeback, no production rollout.

state=held; Hosted Write Canary Held Keep the shared canary on hold until reviewed route and proof blockers are cleared.

No reviewed bundle audit is recorded yet.

No accepted synthetic or reviewed external execution evidence is recorded yet.

No reviewed bundle attachment contract is recorded yet.

owner=auth-readiness-route; reviewState=waiting_for_live_membership; selection=ranked_top_candidate; missing=2. Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.

No reviewed route lock is active. The next hosted route is currently following the ranked cutover candidate flow instead of a reviewed lock.

Schema drift or reviewed SQL isolation issues block staging review.

Record reviewed command metadata before preparing a staging migration run.

Record reviewed command metadata before preparing a staging migration run.

Attach a reviewed Prisma membership delegate before treating live membership proof as in progress.

Live membership proof is missing_foundation.

nextRoute=GET /api/readiness; owner=auth-readiness-route; risk=low; stage=proof_point.

missingEvidence=2; blocker=Live membership proof is missing_foundation..

conflicts=0; rollbackVisible=false; rollbackNote=Disable hosted auth enforcement to return this route to local-compatible preview behavior..

The refreshed page matches the accepted receipt.

recorded=false; local evidence only; production login remains incomplete.

env=true; evidenceReady=false.

recorded=false; source=unknown.

state=missing_foundation; runtimeBlocker=none; requestPaths=5.

GET /api/readiness; state=waiting_for_live_membership; candidate=needs_evidence; owner=auth-readiness-route; selection=ranked_top_candidate; missing=2.

latest=server_session_bridge_not_injected; latestFailure=server_session_not_resolved.

secretConfigured=false; mode=secret_or_trusted_admin.

endpoint=missing; secret=missing; inbox=missing.

Record reviewed command metadata before preparing a staging migration run.

No reviewed migration command metadata is recorded yet.

Record reviewed command metadata before preparing a staging migration run.

state=missing_foundation; subjectLookup=false; prismaDelegate=false; probe=false; requestPaths=5.

reviewed=true; isolated=false.

events=0; conflicts=0; rollbackVisible=false.

Attach a reviewed Prisma membership delegate before treating live membership proof as in progress. owner=auth-readiness-route; missing=2.

productionAuth=false; orgMembership=false; rbac=false.

x-clientpilot-session-workspace-id wins over local explicit scope when present; local header contract is not trusted production auth.

trustedSessionReady requires runtime guardrails, boundary secret match, and server-side session source evidence; header=x-clientpilot-auth-boundary-secret.

enabled=false; canInjectTrustedHeaders=false; local simulation only.

x-clientpilot-membership-role maps owner/admin/operator/viewer to advisory-only policy evidence; it is not organization membership or RBAC enforcement.

x-clientpilot-workspace-id, workspaceId query scope, and fallbackWorkspaceId support local demo checks only; they are not tenant auth isolation.

Future production-only routes can set requireTrustedSession=true to deny requests before fallback unless the internal trusted-session boundary is verified.

selected=true; internalLoginOnly=true; emailPassword=true.

canMountRoute=true; requiresDatabase=true.

none

Schema review, auth route validation, server-side session bridge, and workspace membership resolution are still required.