# Phase 1 Provenance Check — Partial

**Checked**: 2026-07-12

## Source State

- Local repository HEAD before uncommitted Phase 1 work: `b3eec341586551023b05db7a82bf19446186c768`
- Phase 1 implementation is currently uncommitted and therefore has no immutable release revision.
- Working tree contains the intended Spec Kit, test, backend, installer and portal changes plus the
  pre-existing unrelated untracked `how-it-flows.gif`.

## Local ISO Evidence

| Path | Size | SHA-256 | Result |
|---|---:|---|---|
| `cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
| `autoinstall/cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |

No local Workstation ISO artifact exists. Build scripts remain separate for Server and Workstation.

## Build-Host Check

Authenticated read-only verification succeeded against `cezen@172.16.10.145` at
`/home/cezen/aipackage/cgit`. No remote state changed.

| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:52:52 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
| `cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:53:40 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |

No `cezen-ai-workstation-ubuntu2204.iso` artifact exists in either checked build-host location.
The host is Ubuntu with approximately 8.0 GB free on `/`; capacity must be monitored during rebuild.
The existing Server ISO predates the uncommitted Phase 1 implementation and is not valid provenance
evidence for this feature.

## Remaining Evidence

- After explicit sync/rebuild authorization, sync the accepted source and build Server and Workstation
  artifacts from that exact revision.
- Prove the artifact contains the accepted portal, backend, installer, deployment and license copies.
- Complete representative Workstation and Server install/recovery journeys.

T036, T037 and T038 remain incomplete.

## Authorized Rebuild Results — 2026-07-12

Current uncommitted source was synchronized to `/home/cezen/aipackage/cgit` with Git metadata,
credentials, caches, unrelated `how-it-flows.gif`, and existing ISO binaries excluded. Both builds
completed and their internal `md5sum.txt` manifests verified successfully.

| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-12 06:37:08 | `b7ba156e9eae6de5595fa85354468836d582db093d1c3cb85eceb9caaca5dfcf` |
| `autoinstall/cezen-ai-workstation-ubuntu2204.iso` | 2,136,399,872 bytes | 2026-07-12 06:39:55 | `46c0ec277a711e7075082e362bcf5f5882812e8cbf9baf6ca35c4b5afc68e171` |

The older root-level `cezen-ai-ubuntu2204.iso` remains unchanged with SHA-256
`bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d`; it MUST NOT be confused with
the rebuilt Server artifact.

### Provenance limitation

Both online installer images clone `https://cgit.cezentech.com/jinojose/aipackage.git` during first
boot. The Phase 1 implementation is still uncommitted and unpushed, so the rebuilt ISO boot layer is
current but a real install would still pull the older remote package. T038 cannot pass until the
accepted source is committed/pushed and artifact/source evidence is rechecked. T036–T037 also remain
pending real representative installs.