Freeze Tigrcorn category boundaries and refresh SSOT

Author: cobycloud

.github/workflows/phase9-certification-release.yml

@@ -82,7 +82,7 @@ jobs:
         run: |
           python -m compileall -q src benchmarks tools
           PYTHONPATH=src pytest -q \
-            tests/test_phase9i_release_assembly_checkpoint.py \
+            tests/test_release_assembly_checkpoint.py \
             tests/test_release_gates.py \
             tests/test_certification_environment_freeze.py \
             tests/test_aioquic_adapter_preflight.py

.ssot/graphs/registry.graph.json

@@ -0,0 +1,105 @@
+# Tigrcorn Certifiable Delivery Plan
+
+Generated: 2026-04-28T10:09:53Z
+
+Sources:
+- `.ssot/registry.json`
+- `.ssot/graphs/registry.graph.json`
+- `.ssot/reports/validation.report.json`
+- `docs/review/conformance/claims_registry.json`
+- `tools/ssot_sync.py`
+- `tigrcorn_certification.release_gates.assert_release_ready(".")`
+- `tigrcorn_certification.release_gates.assert_promotion_target_ready(".")`
+
+## Current Registry State
+
+- Features: 275 total, 275 implemented, 0 partial, 0 absent.
+- Profiles: 6 active deployment profiles, all passing.
+- Tests: 631 registry test rows, all passing.
+- Evidence: 648 registry evidence rows, all passed.
+- Claims: 318 total; 57 certified and 261 promoted.
+- Issues: 11 total, all closed.
+- Risks: 4 total, all mitigated.
+- Boundaries: 14 total; all 14 are frozen, including the nine category coverage boundaries.
+- Release: `rel:0.3.9` is promoted against `bnd:authoritative-0-3-9`.
+- SSOT validation: passing on schema `0.2.0`.
+- Release gate: passing.
+- Promotion target gate: passing.
+
+## Current Gaps
+
+No current SSOT feature, profile, test, evidence, issue, or risk row blocks the authoritative certification boundary.
+
+The previous governance hygiene gap for SSOT entity naming provenance is closed: current feature, claim, test, evidence, issue, risk, profile, boundary, and release IDs/titles/paths/descriptions no longer contain lifecycle-label wording. The retained historical documentation tree still contains archival checkpoint names; those records are not active SSOT entity references or release blockers under the authoritative boundary.
+
+The remaining non-code gap is operational: the Windows venv Python launcher under `.venv\Scripts` returns `Access is denied` when `uv` tries to query or execute it in this workspace. System Python does not have pytest installed, the local `.venv\Lib\site-packages` pytest install is incomplete, and network access is blocked, so pytest cannot be rerun in this environment until the workspace venv is repaired or rebuilt.
+
+Historical docs and checkpoint scripts still contain older references to incomplete broader overlays. Those are not active release blockers under the current authoritative SSOT boundary, but they should be archived or rewritten if the package wants every retained prose artifact to read as current-state truth.
+
+## Completed During This Run
+
+- Re-ran `tools/ssot_sync.py` with the installed SSOT package on `PYTHONPATH`, which regenerated `.ssot/registry.json` on schema `0.2.0`.
+- Restored package-managed ADR/SPEC metadata, document reservations, normalized hashes, and package version metadata in the registry.
+- Ran SSOT status synchronization through `python -m ssot_registry registry sync-statuses .`; no additional changes were needed after regeneration.
+- Regenerated `.ssot/graphs/registry.graph.json` through the SSOT graph export command.
+- Revalidated the registry with `python -m ssot_registry validate . --write-report`.
+- Verified release and promotion gates with the repo-native certification gate API.
+- Froze all category coverage boundaries in the SSOT generator and regenerated `.ssot/registry.json`.
+- Renamed retained lifecycle-labeled pytest modules to capability-scoped filenames and updated generator/source references.
+- Added an SSOT regression that fails if pytest-backed test/evidence entity IDs, titles, or paths reintroduce lifecycle-label wording.
+- Added a broader SSOT regression that fails if current feature, claim, test, evidence, issue, risk, profile, boundary, or release IDs/titles/paths/descriptions reintroduce lifecycle-label wording.
+- Removed remaining lifecycle-label wording from active risk register summaries and regenerated the SSOT registry.
+- Removed lifecycle-label wording from generated origin, observability, intermediary-proxy, and flow-control conformance/operator artifacts.
+- Verified the generator-backed registry state directly because pytest is not executable in the current local environment.
+- Rechecked this run's active SSOT closure: no in-scope non-implemented features, no untracked test files, no untracked deployment profile files, no features without claims/tests, and no claims without tests/evidence.
+
+## Delivery Plan
+
+1. Registry authority and schema closure.
+   - Done: `.ssot/registry.json` is generated by `tools/ssot_sync.py` on schema `0.2.0`.
+   - Done: package-managed ADR/SPEC rows match installed `ssot-registry` metadata and document hashes.
+   - Required going forward: run the generator with the installed SSOT package available before validation or release checks.
+
+2. Feature, profile, and boundary closure.
+   - Done: all 275 tracked feature rows are implemented.
+   - Done: all 6 deployment profiles are active and passing.
+   - Done: authoritative boundary `bnd:authoritative-0-3-9` is frozen and has no non-implemented in-bound features.
+   - Done: all category coverage boundaries are frozen.
+
+3. Public operator, extension, and runtime surface closure.
+   - Done: current registry covers CLI flags, logging profile keys, WebTransport controls, ASGI3 extensions, HTTP status-code rows, governance graph export, deployment profiles, and explicit out-of-bounds compatibility exclusions.
+   - Required going forward: every new flag, public API option, extension, operator setting, profile, and exclusion remains a separately tracked feature with linked claim, test, and evidence rows.
+
+4. Claim, test, and evidence closure.
+   - Done: every feature has linked claims and tests.
+   - Done: every claim has linked tests and evidence.
+   - Done: all tests are passing and all evidence rows are passed.
+   - Done: no open issue or active risk blocks certification.
+
+5. Execution and certification closure.
+   - Done: SSOT validation, graph export, compileall, style governance, release readiness, and promotion readiness pass.
+   - Blocked locally: pytest cannot run until the local `.venv` Python executable and pytest installation are repaired or rebuilt.
+   - Required before publication automation: repair the local Windows venv launcher state with a runnable interpreter matching the installed binary wheels, then run the full pytest suite with `--basetemp .tmp\pytest-full`.
+
+6. Naming provenance cleanup.
+   - Done: retained lifecycle-labeled pytest module filenames were renamed to capability-scoped filenames.
+   - Done: generated SSOT entity IDs, titles, paths, and descriptions for features, claims, tests, evidence, issues, risks, profiles, boundaries, and releases contain 0 lifecycle-label references.
+   - Required going forward: keep archival prose/checkpoint artifacts clearly labeled as historical if they retain old lifecycle terminology.
+
+## Verification
+
+- `python -m ssot_registry validate . --write-report`: passed.
+- `python -m ssot_registry graph export . --format json --output .ssot\graphs\registry.graph.json`: passed.
+- `python -m ssot_registry registry sync-statuses .`: passed, no changes needed.
+- `python -m ssot_registry registry sync-statuses . --dry-run`: passed, changed 0.
+- `assert_release_ready(".")` and `assert_promotion_target_ready(".")`: passed.
+- Direct registry audit: 275 implemented features, 6 active profiles, 631 passing tests, 648 passed evidence rows, 318 promoted/certified claims, 11 closed issues, 4 mitigated risks, 14 frozen boundaries, 0 untracked test/profile files, 0 lifecycle-label entity references.
+- Generator equality check: `.ssot/registry.json` matches `_converge_automated_statuses(build_registry())`.
+- `python -m compileall -q src pkgs tools tests`: passed.
+- Key imports: `tigrcorn`, `tigrcorn_config`, `tigrcorn_certification.release_gates`, `tools.ssot_sync`, and `tools.style_governance` all import successfully with repo-local source roots.
+- Style governance audit: passed with 0 blocking line-length findings and 0 malformed docstring-section findings.
+- `uv lock --check`: passed.
+- `uv tree --only-group dev`: shows pytest, ssot-registry, and certification dependencies in the dev group.
+- `uv run pytest --version`: blocked because `.venv\Scripts\python.exe` returns `Access is denied`.
+- `python -m pytest --version`: blocked because system Python has no pytest installation.
+- `python -m pytest` with `.venv\Lib\site-packages` on `PYTHONPATH`: blocked because `_pytest` is incomplete in the local venv.

.ssot/registry.json

@@ -0,0 +1 @@
+{"docstrings":{"documented_public_definitions":27,"malformed_section_count":0,"malformed_sections":[],"policy":{"recognized_sections":["Args:","Returns:","Raises:","Yields:"],"sections_required_when_they_add_signal":true},"public_definitions":2855,"sectioned_docstrings":8},"line_lengths":{"advisory_count":7786,"blocking_count":0,"blocking_findings":[],"policy":{"code_target":79,"comment_docstring_target":72,"practical_exceptions_allowed":true,"project_formatter_ceiling":120},"scanned_files":729,"scanned_lines":71767},"passed":true}

.ssot/reports/certifiable_delivery_plan.md

@@ -1 +1 @@
-{"failures":[],"passed":true,"registry_path":".ssot/registry.json","summary":{"counts":{"adrs":47,"boundaries":14,"claims":217,"evidence":393,"features":195,"issues":10,"profiles":6,"releases":1,"risks":4,"specs":55,"tests":453},"profile_status":{"draft":0,"failing":0,"passing":6}},"warnings":[]}
+{"failures":[],"passed":true,"registry_path":".ssot/registry.json","summary":{"counts":{"adrs":51,"boundaries":14,"claims":318,"evidence":648,"features":275,"issues":11,"profiles":6,"releases":1,"risks":4,"specs":60,"tests":631},"profile_status":{"draft":0,"failing":0,"passing":6}},"warnings":[]}

.ssot/reports/style_governance.report.json

@@ -38,34 +38,34 @@
     "tests/test_intermediary_proxy_corpus.py",
     "tests/test_lifespan.py",
     "tests/test_observability_workers.py",
-    "tests/test_phase1_surface_parity_checkpoint.py",
-    "tests/test_phase2_cli_config_surface.py",
-    "tests/test_phase2_entity_semantics_checkpoint.py",
-    "tests/test_phase2_static_delivery_surface.py",
-    "tests/test_phase3_h1_websocket_operator_surface.py",
-    "tests/test_phase3_policy_surface.py",
-    "tests/test_phase3_strict_rfc_surface.py",
-    "tests/test_phase3_transport_core_strictness_checkpoint.py",
-    "tests/test_phase4_advanced_protocol_delivery_checkpoint.py",
-    "tests/test_phase4_http2_operator_surface.py",
-    "tests/test_phase4_operator_surface.py",
-    "tests/test_phase4_quic_surface.py",
-    "tests/test_phase5_flow_control_bundle.py",
-    "tests/test_phase5_intermediary_proxy_corpus.py",
-    "tests/test_phase5_origin_contract.py",
-    "tests/test_phase5_tls_operator_material_surface.py",
-    "tests/test_phase6_observability_surface.py",
-    "tests/test_phase6_performance_harness.py",
-    "tests/test_phase6_public_lifecycle_and_embedder_contract.py",
-    "tests/test_phase7_flag_surface_truth_reconciliation.py",
-    "tests/test_phase7_negative_certification.py",
-    "tests/test_phase8_promotion_targets.py",
-    "tests/test_phase9d1_connect_relay_local_negatives.py",
-    "tests/test_phase9f1_tls_cipher_policy_closure.py",
+    "tests/test_surface_parity_checkpoint.py",
+    "tests/test_cli_config_surface.py",
+    "tests/test_entity_semantics_checkpoint.py",
+    "tests/test_static_delivery_surface.py",
+    "tests/test_h1_websocket_operator_surface.py",
+    "tests/test_policy_surface.py",
+    "tests/test_strict_rfc_surface.py",
+    "tests/test_transport_core_strictness_checkpoint.py",
+    "tests/test_advanced_protocol_delivery_checkpoint.py",
+    "tests/test_http2_operator_surface.py",
+    "tests/test_operator_surface.py",
+    "tests/test_quic_surface.py",
+    "tests/test_flow_control_bundle.py",
+    "tests/test_minimum_certified_intermediary_proxy_corpus.py",
+    "tests/test_origin_contract.py",
+    "tests/test_tls_operator_material_surface.py",
+    "tests/test_observability_surface.py",
+    "tests/test_performance_harness.py",
+    "tests/test_public_lifecycle_and_embedder_contract.py",
+    "tests/test_flag_surface_truth_reconciliation.py",
+    "tests/test_negative_certification.py",
+    "tests/test_promotion_targets.py",
+    "tests/test_connect_relay_local_negatives.py",
+    "tests/test_tls_cipher_policy_closure.py",
     "tests/test_phase9f2_logging_exporter_closure.py",
-    "tests/test_phase9f3_concurrency_keepalive_closure.py",
-    "tests/test_phase9g_strict_performance_closure.py",
-    "tests/test_phase9h_promotion_evaluator_hardening.py",
+    "tests/test_concurrency_keepalive_closure.py",
+    "tests/test_strict_performance_closure.py",
+    "tests/test_promotion_evaluator_hardening.py",
     "tests/test_pipe_and_inproc.py",
     "tests/test_prebuffered_reader_and_custom.py",
     "tests/test_profile_resolution.py",
@@ -156,34 +156,34 @@
     "tests/test_intermediary_proxy_corpus.py",
     "tests/test_lifespan.py",
     "tests/test_observability_workers.py",
-    "tests/test_phase1_surface_parity_checkpoint.py",
-    "tests/test_phase2_cli_config_surface.py",
-    "tests/test_phase2_entity_semantics_checkpoint.py",
-    "tests/test_phase2_static_delivery_surface.py",
-    "tests/test_phase3_h1_websocket_operator_surface.py",
-    "tests/test_phase3_policy_surface.py",
-    "tests/test_phase3_strict_rfc_surface.py",
-    "tests/test_phase3_transport_core_strictness_checkpoint.py",
-    "tests/test_phase4_advanced_protocol_delivery_checkpoint.py",
-    "tests/test_phase4_http2_operator_surface.py",
-    "tests/test_phase4_operator_surface.py",
-    "tests/test_phase4_quic_surface.py",
-    "tests/test_phase5_flow_control_bundle.py",
-    "tests/test_phase5_intermediary_proxy_corpus.py",
-    "tests/test_phase5_origin_contract.py",
-    "tests/test_phase5_tls_operator_material_surface.py",
-    "tests/test_phase6_observability_surface.py",
-    "tests/test_phase6_performance_harness.py",
-    "tests/test_phase6_public_lifecycle_and_embedder_contract.py",
-    "tests/test_phase7_flag_surface_truth_reconciliation.py",
-    "tests/test_phase7_negative_certification.py",
-    "tests/test_phase8_promotion_targets.py",
-    "tests/test_phase9d1_connect_relay_local_negatives.py",
-    "tests/test_phase9f1_tls_cipher_policy_closure.py",
+    "tests/test_surface_parity_checkpoint.py",
+    "tests/test_cli_config_surface.py",
+    "tests/test_entity_semantics_checkpoint.py",
+    "tests/test_static_delivery_surface.py",
+    "tests/test_h1_websocket_operator_surface.py",
+    "tests/test_policy_surface.py",
+    "tests/test_strict_rfc_surface.py",
+    "tests/test_transport_core_strictness_checkpoint.py",
+    "tests/test_advanced_protocol_delivery_checkpoint.py",
+    "tests/test_http2_operator_surface.py",
+    "tests/test_operator_surface.py",
+    "tests/test_quic_surface.py",
+    "tests/test_flow_control_bundle.py",
+    "tests/test_minimum_certified_intermediary_proxy_corpus.py",
+    "tests/test_origin_contract.py",
+    "tests/test_tls_operator_material_surface.py",
+    "tests/test_observability_surface.py",
+    "tests/test_performance_harness.py",
+    "tests/test_public_lifecycle_and_embedder_contract.py",
+    "tests/test_flag_surface_truth_reconciliation.py",
+    "tests/test_negative_certification.py",
+    "tests/test_promotion_targets.py",
+    "tests/test_connect_relay_local_negatives.py",
+    "tests/test_tls_cipher_policy_closure.py",
     "tests/test_phase9f2_logging_exporter_closure.py",
-    "tests/test_phase9f3_concurrency_keepalive_closure.py",
-    "tests/test_phase9g_strict_performance_closure.py",
-    "tests/test_phase9h_promotion_evaluator_hardening.py",
+    "tests/test_concurrency_keepalive_closure.py",
+    "tests/test_strict_performance_closure.py",
+    "tests/test_promotion_evaluator_hardening.py",
     "tests/test_pipe_and_inproc.py",
     "tests/test_prebuffered_reader_and_custom.py",
     "tests/test_profile_resolution.py",

.ssot/reports/validation.report.json

@@ -1,6 +1,6 @@
 # Metrics Schema
 
-This file is generated from the package-owned Phase 6 observability metadata.
+This file is generated from the package-owned observability metadata.
 
 ## Transport counters
 

LEGACY_UNITTEST_INVENTORY.json

@@ -9,7 +9,7 @@
         "docs/review/conformance/releases/0.3.9/release-0.3.9/tigrcorn-connect-relay-local-negative-artifacts"
       ],
       "tests": [
-        "tests/test_phase9d1_connect_relay_local_negatives.py::ConnectRelayPhase9D1LocalNegativeTests::test_http2_connect_policy_deny_and_allowlist_rejection_end_stream"
+        "tests/test_connect_relay_local_negatives.py::ConnectRelayPhase9D1LocalNegativeTests::test_http2_connect_policy_deny_and_allowlist_rejection_end_stream"
       ]
     },
     {
@@ -20,7 +20,7 @@
         "docs/review/conformance/releases/0.3.9/release-0.3.9/tigrcorn-connect-relay-local-negative-artifacts"
       ],
       "tests": [
-        "tests/test_phase9d1_connect_relay_local_negatives.py::ConnectRelayPhase9D1LocalNegativeTests::test_http3_connect_policy_deny_and_allowlist_rejection_end_stream"
+        "tests/test_connect_relay_local_negatives.py::ConnectRelayPhase9D1LocalNegativeTests::test_http3_connect_policy_deny_and_allowlist_rejection_end_stream"
       ]
     }
   ],

docs/conformance/metrics_schema.md

@@ -7,7 +7,7 @@
       "id": "required-early-data-downgrade",
       "preserved_artifacts": [],
       "tests": [
-        "tests/test_phase4_quic_surface.py::Phase4QuicSurfaceTests::test_http3_handler_require_policy_triggers_too_early_on_resumed_downgrade"
+        "tests/test_quic_surface.py::Phase4QuicSurfaceTests::test_http3_handler_require_policy_triggers_too_early_on_resumed_downgrade"
       ]
     }
   ],