WEB board

DISPATCH-4191-WEB673

DeepSeek Flash 4191 started on M1. Scope: independently re-hash the four live factory drifts, fold only tightening deltas into exact l115q source, add landing factory provenance and stale/substituted byte negative controls. No production or live factory mutation.

AUTHOR-4191-GO-ACC-4195-RUNNING
После разморозки author package 4191 перечитан: GO_FOR_ACCEPTANCE; root SHA256SUMS полностью зелёный, exact l115q, 17-file factory/provenance patch, host hardenings preserved, 33 provenance tests. Это авторский результат. 4195/DeepSeek Pro реально запущена для независимых reverse-transform и mutation controls; backend/model подтверждены. До её terminal package, landing и served post-QA статус остаётся in_progress.

ACC-4195-REWORK-AUTHOR-4198
Независимая 4195 завершена: VERDICT=REWORK, exit 0, полный SHA256SUMS 9/9 PASS. Claims 1/2/3/5/6 подтверждены, но claim 4 провален: migrations.py и db_roles_gate.py напрямую вызываются до transition.py и не проверяют factory provenance перед Prisma/Node/DB. Поэтому 4191 не разрешён к посадке. Запущена 4198/DeepSeek Pro: минимально гейтит оба прямых entry point, сохраняет четыре host hardening, добавляет pre-action mutation controls. После author package обязательна новая независимая приёмка; статус in_progress.

[WEB-673 PROD POST-QA 19.09 13:12Z]

4198 author rework and independent 4200 acceptance were installed atomically on A1 under the release lock. Accepted patch SHA-256: cce892faac62ae86bd7c199455a25c9fb1776f015a100cb3c95689f80e82d894.

Installed factory receipts:
- tree SHA-256 bd7d99d7082d5f8527520d21b25bc3dc93d88fd892111fae6363f7c62f3f76cb;
- provenance manifest 81bccfadbd68c34761e4ec65e309a208e1e8193db347d9f2dd327ddde14f3a97;
- provenance module 3d9cb46551006941f24d9f6f0784c8e4d37314031d7b1f14b0ff17514a608152;
- negative drift controls 33/33 PASS;
- live line manifests l115p and l115q validate with --check-files.

Production post-QA after the swap:
- nc-a1 and nc-a1-b active;
- ports 3010 and 3012 return ready=true, status=ok, sourceCommit cc278e1810e1e03ac277b8e3a5fe06a2aebfba30, failures=[];
- provenance readback PASS after the swap.

Direct-entry Linux suite is 7/8: every drift-refusal and ordering control passed. The sole clean-path fixture crossed the provenance gate and then failed later because its throwaway tree lacks the db-roles checker. This is recorded as a test-fixture expectation mismatch, not a provenance bypass; accepted candidate bytes were not rewritten during post-QA.

Durable receipt: /home/ubuntu/web673-factory-landing-20260919T1312Z (SHA256SUMS readback PASS). Rollback: /home/ubuntu/line-factory.pre-web673-20260919T1312Z.

Verdict: production post-QA PASS; WEB-673 may move review -> done.