1.1 KiB
Task
Base SHA: 6382cb8e04
Scope: Review the complete shared working diff and added files for the stage-one task, focusing on production ingress trust, strict/local auth profiles, isolated compose, backup/restore/runbook correctness, R3 failure behavior and no-partial-state, truthful A-H smoke checks, and safe migration bootstrap. Fix concrete defects and missing tests/docs within R1-R5 authorized scope.
Do not change: Randomizer, AuditProof, deterministic proof format, snapshot hash algorithm, HMAC_SHA256_FY_V1; existing tests except the four specifically authorized seed-length assertions; preserve the pre-existing AGENTS.md user modification; no production host/firewall/WireGuard changes; no commit or push.
Definition of Done: Concrete scoped defects fixed, meaningful checks run, report includes exact base and current HEAD, changed files, commands/results, findings, UNVERIFIED claims, blockers, and non-blocking tech debt.
Required verification: Inspect whole diff/new files; relevant R3/R4/R5 adversarial tests and scripts; record exact commands and outcomes. Coordinator owns local Docker smoke and shared gates.