{
  "title": "M6 R3.1 W11 actual API pool and initial workflow HTTP",
  "date": "2026-11-03",
  "verifiedAtUTC": "2026-11-02T16:06:36.157307+00:00",
  "schemaVersion": 43,
  "goalStatus": "in_progress",
  "sourceCommit": "e89fe779f24a4714d313b64bd90084ee5264fc4e",
  "implemented": [
    "Explicit default-off catalog/API flags; catalog-only bootstrap does not require a pool or register automatically",
    "Actual code-built kernel/catalog and api-role pool acquired before listen; current SSO/session guards preserved",
    "Business requests capture own bounded pool context; catalog requests only bind lifecycle/deadline; shared close latch/counting prevents Add/Wait races",
    "Pool child cancellation revokes bound request root before Run returns; readiness and formal API listener stop on actual owner loss",
    "Current primary identity, policy, Origin and unified JSON/RSA-AES/SM2-SM4 routes for catalog/form/definition/draft/start/current tasks/resource decisions/mutations/external management",
    "Explicit accepted start returns 202/current checkpoint; original command replay and current resource/task authorization preserved",
    "Fixed exact workflow body routes capped at512KiB; domain model/form bounds remain256KiB; ordinary auth/body endpoints remain16KiB",
    "Single projected keyset directory query, 51-row bound, retired history separate from actual build capability snapshot"
  ],
  "namedFinalApplicationTests": [
    "TestIntegrationFilesHTTP",
    "TestIntegrationWorkflowAPIExternal",
    "TestIntegrationWorkflowAPIHTTP",
    "TestIntegrationWorkflowAPIRequestLifetime",
    "TestIntegrationWorkflowAPILossCancellation",
    "TestIntegrationWorkflowAPIProcess",
    "TestIntegrationWorkflowCatalogReadPagination"
  ],
  "checks": {
    "workspaceRaceVet": {
      "status": "passed",
      "modules": 26
    },
    "freshIndependentModules": {
      "status": "passed",
      "modules": 26,
      "cleanup": "Python TemporaryDirectory; only owned copies/cache removed"
    },
    "appCoreSecurityNilness": "passed",
    "apiChildCancellationUnit": "passed; deterministic unit calls serveLifetime without finish, no fake SQL/pool proof",
    "finalAppAuthWorkflowRaceVet": "passed after corrected loss-cancellation test",
    "dmActualAPIAndWorkerBuild": "passed; build only, not real database certification",
    "golangciLint": "not installed; not run",
    "browser": "not run; disabled in Work settings"
  },
  "logDigests": {
    "workspace": {
      "sha256": "49fd479851c8f020d62289aeaf998b7937a76704cf0f341a568605ab15fde69a"
    },
    "independent": {
      "sha256": "3c3e02497b1c64117a06bcd759550f66513ce0fb5f91e01f29fc57f9e3a70d27"
    },
    "nilness": {
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
    },
    "dm": {
      "sha256": "addb85a719adb293cdcedd917ef01f5c6d4493f34cad97a45f9bd3ab1745d51d"
    }
  },
  "fullRegressionBaseline": {
    "directory": "integration-20261102T150835Z",
    "scope": "Full workflow baseline compiled before final transport-limit and immediate child-cancellation refinements; excludes the later APILossCancellation top-level case. Final targeted matrix below validates final code; do not sum overlapping counts.",
    "matrix": {
      "mysql": {
        "status": "passed",
        "cleanup": true,
        "applicationRun": "^TestIntegrationWorkflow",
        "commands": [
          {
            "module": "apps/fago-server",
            "passed": 146,
            "logSHA256": "f24fe9aaf1e94ded44e9d5b834728c226378ab247c5132bf2018b00ac7668150"
          },
          {
            "module": "fago-migrations",
            "passed": 13,
            "logSHA256": "35d06f2edf1c02ac6f02a46c2ac293a866db039a003a222d648e594f6dd4543d"
          }
        ]
      },
      "postgres": {
        "status": "passed",
        "cleanup": true,
        "applicationRun": "^TestIntegrationWorkflow",
        "commands": [
          {
            "module": "apps/fago-server",
            "passed": 146,
            "logSHA256": "d56becf40e61032686e5a39d42c9c69f44ea642623643f7a59fce2f5ae483eb5"
          },
          {
            "module": "fago-migrations",
            "passed": 13,
            "logSHA256": "f854737e04f4f556756e9fed30ef6191cbf4dfc160c14957cd781be363ef0a7e"
          }
        ]
      }
    }
  },
  "finalTargetedRegression": {
    "directory": "integration-20261102T160007Z",
    "scope": "Final code: six workflow/API cases plus unchanged file HTTP regression; all body/child cancellation refinements and corrected proof are present; all13 migration cases still run.",
    "matrix": {
      "mysql": {
        "status": "passed",
        "cleanup": true,
        "applicationRun": "^TestIntegrationWorkflow(API|CatalogReadPagination)|^TestIntegrationFilesHTTP$",
        "commands": [
          {
            "module": "apps/fago-server",
            "passed": 7,
            "logSHA256": "79ff9ce28587f55756ef6a9a281e6b57c638e9b6fee871bac3d6a28d7498ff69"
          },
          {
            "module": "fago-migrations",
            "passed": 13,
            "logSHA256": "b0ad5181908fd1d6745963198a84524207d6f3d95d333d86c73efaba4a53a691"
          }
        ]
      },
      "postgres": {
        "status": "passed",
        "cleanup": true,
        "applicationRun": "^TestIntegrationWorkflow(API|CatalogReadPagination)|^TestIntegrationFilesHTTP$",
        "commands": [
          {
            "module": "apps/fago-server",
            "passed": 7,
            "logSHA256": "c7f6f2731c16c5e1a4f52bcd4b65b6f7303f92e83e92068a29044f7b0c11591e"
          },
          {
            "module": "fago-migrations",
            "passed": 13,
            "logSHA256": "06834249277e9009f4b15c946b3684bf17680afb59b631718f80ef0e52667645"
          }
        ]
      }
    }
  },
  "bodyBytesPerSuite": {
    "mysql": [
      {
        "definition": 17599,
        "start": 20906,
        "decision": 20719
      },
      {
        "definition": 17599,
        "start": 20906,
        "decision": 20719
      },
      {
        "definition": 17599,
        "start": 20906,
        "decision": 20719
      }
    ],
    "postgres": [
      {
        "definition": 17599,
        "start": 20906,
        "decision": 20719
      },
      {
        "definition": 17599,
        "start": 20906,
        "decision": 20719
      },
      {
        "definition": 17599,
        "start": 20906,
        "decision": 20719
      }
    ]
  },
  "queryCost": {
    "scenario": "actual retired runtime directory metadata, current platform guard excluded from relevant statement counter",
    "oneItemRelevantStatements": 1,
    "fiftyItemsRelevantStatements": 1,
    "historyRows": 52,
    "pageLimit": 50,
    "manifestBodyRead": false,
    "failureReturnsPartialPage": false,
    "boundary": "fixed relevant SQL count; not production p95/capacity certification"
  },
  "proofCorrection": "Earlier owner-revocation test held control lock, but Renew clears current grant and Close returns before requesting control. The timing-dependent Done assertion was removed. Final integration proves actual loss cancellation; deterministic unit separately proves child-to-root propagation before finish. No control-lock-blocked cleanup claim.",
  "knownFailedRuns": [
    "integration-20261102T145152Z: test paired worker pool with a different kernel;403001 correctly rejected; fixture corrected",
    "integration-20261102T151401Z: large-payload fixture edit failed compile; fixed before final run"
  ],
  "remaining": [
    "W11 complete definition/form key lists, own started/completed pages and participant-authorized history/resource contracts",
    "W11 actual Vben approval product and menus with real HTTP; no mocks",
    "W08 other accepted command kinds; W07 other resources; full W10/W12 rolling/backlog/lockwait/capacity acceptance"
  ],
  "privacy": "No tokens, cookies, DSNs, endpoints, credential paths, raw form/opinion/response bodies, owner values, raw logs or Redis recovery materials published"
}
