Add enterprise appliance experience Phase 1 foundation

2026-07-12 12:13:23 +05:30
1 parent b3eec34158
commit ebaa2e7219
@@ -0,0 +1,46 @@
+# Phase 1 Evidence Manifest
+
+**Status**: Test foundation established; runtime implementation not yet accepted.
+
+## Source
+
+- Git revision: record at validation time
+- Working-tree status: record at validation time
+- Feature: `001-enterprise-experience`
+- Product coverage: one representative Workstation and one representative Server
+
+## Required Evidence
+
+| Gate | Evidence | Status |
+|---|---|---|
+| Specification | Requirements checklist 16/16 | Complete |
+| Test foundation | Isolated Python, browser, deployment and fixture guidance | Complete |
+| Migration | Versioned migration and rollback design | Complete |
+| Backend contracts | State, error, operation, audit, authorization and entitlement tests | Complete |
+| Browser journeys | Setup, interruption, readiness and WCAG evidence | Pending |
+| Workstation | Clean install and recovery evidence | Pending |
+| Server | Clean install and recovery evidence | Pending |
+| Package provenance | Source-to-package and ISO checksum evidence | Pending |
+| Pilot | Controlled pilot evidence | Not authorized |
+| Approval | Product owner plus delivery/support | Pending |
+
+## Review Boundary
+
+The test harness adds only `tests/` and specification evidence files. It does not require runtime
+product changes. Runtime work begins only after the harness and contract tests are reviewable.
+
+## Foundational Contract Evidence
+
+- Versioned, idempotent schema migration creates durable operations and audit correlation fields.
+- Newer unsupported schemas are rejected before feature mutation.
+- Customer-state and error envelopes expose stable, non-secret fields.
+- Operation kinds and idempotency constraints are durable in SQLite.
+- New operation creation requires an administrator identity server-side.
+- Structured and text audit detail tests redact secret categories.
+- Canonical and deployed license helpers are byte-identical.
+- Isolated backend contract suite passed using synthetic in-memory SQLite on 2026-07-12.
+
+## Artifact Record
+
+Record source revision, ISO/package path, build timestamp, size, SHA-256, included portal/backend/
+installer revisions, environment, results, known limitations, and reviewer for each candidate.
@@ -0,0 +1,66 @@
+# Phase 1 Provenance Check — Partial
+
+**Checked**: 2026-07-12
+
+## Source State
+
+- Local repository HEAD before uncommitted Phase 1 work: `b3eec341586551023b05db7a82bf19446186c768`
+- Phase 1 implementation is currently uncommitted and therefore has no immutable release revision.
+- Working tree contains the intended Spec Kit, test, backend, installer and portal changes plus the
+  pre-existing unrelated untracked `how-it-flows.gif`.
+
+## Local ISO Evidence
+
+| Path | Size | SHA-256 | Result |
+|---|---:|---|---|
+| `cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
+| `autoinstall/cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
+
+No local Workstation ISO artifact exists. Build scripts remain separate for Server and Workstation.
+
+## Build-Host Check
+
+Authenticated read-only verification succeeded against `cezen@172.16.10.145` at
+`/home/cezen/aipackage/cgit`. No remote state changed.
+
+| Artifact | Size | Timestamp (UTC) | SHA-256 |
+|---|---:|---|---|
+| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:52:52 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
+| `cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:53:40 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
+
+No `cezen-ai-workstation-ubuntu2204.iso` artifact exists in either checked build-host location.
+The host is Ubuntu with approximately 8.0 GB free on `/`; capacity must be monitored during rebuild.
+The existing Server ISO predates the uncommitted Phase 1 implementation and is not valid provenance
+evidence for this feature.
+
+## Remaining Evidence
+
+- After explicit sync/rebuild authorization, sync the accepted source and build Server and Workstation
+  artifacts from that exact revision.
+- Prove the artifact contains the accepted portal, backend, installer, deployment and license copies.
+- Complete representative Workstation and Server install/recovery journeys.
+
+T036, T037 and T038 remain incomplete.
+
+## Authorized Rebuild Results — 2026-07-12
+
+Current uncommitted source was synchronized to `/home/cezen/aipackage/cgit` with Git metadata,
+credentials, caches, unrelated `how-it-flows.gif`, and existing ISO binaries excluded. Both builds
+completed and their internal `md5sum.txt` manifests verified successfully.
+
+| Artifact | Size | Timestamp (UTC) | SHA-256 |
+|---|---:|---|---|
+| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-12 06:37:08 | `b7ba156e9eae6de5595fa85354468836d582db093d1c3cb85eceb9caaca5dfcf` |
+| `autoinstall/cezen-ai-workstation-ubuntu2204.iso` | 2,136,399,872 bytes | 2026-07-12 06:39:55 | `46c0ec277a711e7075082e362bcf5f5882812e8cbf9baf6ca35c4b5afc68e171` |
+
+The older root-level `cezen-ai-ubuntu2204.iso` remains unchanged with SHA-256
+`bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d`; it MUST NOT be confused with
+the rebuilt Server artifact.
+
+### Provenance limitation
+
+Both online installer images clone `https://cgit.cezentech.com/jinojose/aipackage.git` during first
+boot. The Phase 1 implementation is still uncommitted and unpushed, so the rebuilt ISO boot layer is
+current but a real install would still pull the older remote package. T038 cannot pass until the
+accepted source is committed/pushed and artifact/source evidence is rechecked. T036–T037 also remain
+pending real representative installs.