merge: milestone/v0.11-placement-tracking -> main (v0.11 complete — Placement Tracking and Audit) #6

Merged

coreci-nextcraft-po merged 31 commits from milestone/v0.11-placement-tracking into main 2026-10-22 04:41:13 +00:00

Conversation 0 Commits 31 Files Changed 40

+6618 -175

coreci-nextcraft-po commented 2026-10-22 04:41:08 +00:00

Collaborator

Copy Link

Copy Source

P6 final review + ship (REQ-F-020, REQ-11-001..005 complete).

Wave 6-1 multi-persona final review: SHIP — 0 P0s. D-100 one-transaction discipline VERIFIED end-to-end (transition_application is the sole post-creation status writer, R-78; one Session/one commit covering both tables + the application row); R-80 re-hire coherence VERIFIED (rehire = fresh PlacementRow + placement.rehired, never a fabricated application transition; the partial-unique guard surfaces its IntegrityError); G-319 pin split VERIFIED (own-postings list counts-only; the negative PII assertion in tests/employers/test_postings_read.py unchanged); D-110 wire pins VERIFIED (placement.ts mirrors placements/base.py field-for-field + the status union, pinned in pins.test.ts); D-092 honest-surface census VERIFIED (the overview mock block replaced by real placements; talent mocks retained + honestly labeled). Security-auditor pass clean: no credentials/PII on any log or asset path (learner_id an opaque handle everywhere, R-79); gate orders pinned per principal class; the ledger no-delete path intact (R-70); tamper/fork/concurrency arms green; export determinism + the G-321 methodology honesty re-verified; no secret echoed by exception paths.

Two P1 findings dispositioned with recorded follow-ups (never loop back to EXECUTE): (1) PLAN Must-Haves names tests/placements/test_e2e_audit.py but the D-111 E2E proof lives as tests/placements/test_export.py::test_e2e_audit_proof — doc-path drift, substance green; (2) the D-112 addition census omits the two-line employers/store.py _AUDIT_EVENT_KINDS addition (P2 audit lane, in-scope) — census text incomplete, change in-scope.

Wave 6-2 audit: PASS — 27 branch commits reconstruct against the file census (18 added + 23 changed, placement-surface-scoped + the .ciagent process set + doc rows); feat commits scoped to the placement surface; the two same-cycle CI red triages (#166/#167) and the disclosed probe.txt pair on main accounted.

Ship: merge to main, tag v0.10.6 (the v0.10.x final = milestone release; v0.10.5 landed at the ship per the recorded deferral), release lane on the tag, milestone branch deleted after (tags preserve history).

— coreci-nextcraft-po nextcraft-po@coreci.dev (PO nextcraft, manager hep)

P6 final review + ship (REQ-F-020, REQ-11-001..005 complete). Wave 6-1 multi-persona final review: SHIP — 0 P0s. D-100 one-transaction discipline VERIFIED end-to-end (transition_application is the sole post-creation status writer, R-78; one Session/one commit covering both tables + the application row); R-80 re-hire coherence VERIFIED (rehire = fresh PlacementRow + placement.rehired, never a fabricated application transition; the partial-unique guard surfaces its IntegrityError); G-319 pin split VERIFIED (own-postings list counts-only; the negative PII assertion in tests/employers/test_postings_read.py unchanged); D-110 wire pins VERIFIED (placement.ts mirrors placements/base.py field-for-field + the status union, pinned in pins.test.ts); D-092 honest-surface census VERIFIED (the overview mock block replaced by real placements; talent mocks retained + honestly labeled). Security-auditor pass clean: no credentials/PII on any log or asset path (learner_id an opaque handle everywhere, R-79); gate orders pinned per principal class; the ledger no-delete path intact (R-70); tamper/fork/concurrency arms green; export determinism + the G-321 methodology honesty re-verified; no secret echoed by exception paths. Two P1 findings dispositioned with recorded follow-ups (never loop back to EXECUTE): (1) PLAN Must-Haves names tests/placements/test_e2e_audit.py but the D-111 E2E proof lives as tests/placements/test_export.py::test_e2e_audit_proof — doc-path drift, substance green; (2) the D-112 addition census omits the two-line employers/store.py _AUDIT_EVENT_KINDS addition (P2 audit lane, in-scope) — census text incomplete, change in-scope. Wave 6-2 audit: PASS — 27 branch commits reconstruct against the file census (18 added + 23 changed, placement-surface-scoped + the .ciagent process set + doc rows); feat commits scoped to the placement surface; the two same-cycle CI red triages (#166/#167) and the disclosed probe.txt pair on main accounted. Ship: merge to main, tag v0.10.6 (the v0.10.x final = milestone release; v0.10.5 landed at the ship per the recorded deferral), release lane on the tag, milestone branch deleted after (tags preserve history). — coreci-nextcraft-po <nextcraft-po@coreci.dev> (PO nextcraft, manager hep)

coreci-nextcraft-po added 31 commits 2026-10-22 04:41:09 +00:00

docs(P00): complete pre-execution phase — v0.11 placement tracking ... 8684d9d60c

Phase 0 complete: SPECIFY (D-098 scope lock — REQ-F-020 activated
as REQ-11-001..005), CLARIFY (D-099..D-112), RESEARCH (R-67..R-80 +
persona re-assessment), PLAN (6 phases, wave-ordered vertical slices,
MVP/UX sections), GRILL (G-321..G-328 applied, verdict PROCEED at
0.82), MVP/UX check (all 3 sections verified). Tags on the v0.10.x
line; phase 0 ships as v0.10.0.

---ci---
phase: 0
milestone: v0.11
status: complete
---/ci---

chore(P00): phase 0 complete — checkpoint complete stage (v0.10.0 shipped, release 955) ... 0c5fe12d0a

---ci---
phase: 0
milestone: v0.11
status: complete
---/ci---

feat(P01): complete placement-store-ledger phase (REQ-11-001) ... 6b0b20cee1

Phase 1 complete: the 9th D-027 store (PlacementRow partial-unique
active guard + PlacementEventRow global sha256 hash chain with the
UNIQUE(prev_hash) fork backstop), the D-099 matrix + event
vocabulary, the ONE transactional transition_application (D-100,
flush-then-hash-then-commit), main.py/deps wiring, the 22-test
adversarial suite (tamper/fork/concurrency/no-delete-path), the
security review fixes (tz conversion, actor vocabulary, conftest
topology), verify four-layers PASS. Ships as v0.10.1.

---ci---
phase: 1
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-001]
  partial: []
---/ci---

chore(P01): phase 1 complete — v0.10.1 shipped, release 956 ... 3332a7f264

---ci---
phase: 1
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-001]
  partial: []
---/ci---

feat(P02): complete application-state-machine phase (REQ-11-002) ... 89e21eb4b2

Phase 2 complete: the employer per-target transition routes (G-311
gate order), the learner withdraw (D-043 stack unchanged, G-323
apply-terminal guard), the operator lane (fail-closed, G-327 422/409
split, the R-80 re-hire with G-326 stamping), the G-319 pin split,
33 route tests + the security-review pins. Verify four-layers PASS.
Ships as v0.10.2.

---ci---
phase: 2
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-002]
  partial: []
---/ci---

chore(P02): phase 2 complete — v0.10.2 shipped, release 957 ... 89bff0c36a

---ci---
phase: 2
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-002]
  partial: []
---/ci---

feat(P03): complete placement-reporting phase (REQ-11-003) ... cb3af9d06a

Phase 3 complete: the D-107 overview (distinct-learner counting
toward 1,000), the per-employer placement view, placement.ts wire
pins, the engine-client placements section, the /employer/applications
page + the overview mock-block conversion. Verify four-layers PASS.
Ships as v0.10.3.

---ci---
phase: 3
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-003]
  partial: []
---/ci---

chore(P03): phase 3 complete — v0.10.3 shipped, release 958 ... 151a2ffff8

---ci---
phase: 3
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-003]
  partial: []
---/ci---

feat(P04): complete audit-export phase (REQ-11-004) ... 9f727427a7

Phase 4 complete: the self-contained CIRR-style audit export (JSON +
markdown summary from the same document, methodology with the three
pilot gaps + the G-321 chain-honesty statements, G-325 revoked
evidence bundles, R-73 determinism), the admin placements block +
export links, the full-chain E2E audit proof, the security review
fixes. Verify four-layers PASS. Ships as v0.10.4.

---ci---
phase: 4
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-004]
  partial: []
---/ci---

chore(P04): phase 4 complete — v0.10.4 shipped, release 959 ... 61139c61bf

---ci---
phase: 4
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-004]
  partial: []
---/ci---

fix(test): de-calendar employers auth wall-clock pin (cherry of CI #149 red-triage fix from the main lane) 9759a0e21e

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [1/10] — wave 5-1: learner status-read contracts (LearnerApplicationSummary / LearnerApplicationStatusResponse / MineApplicationResponse) f5dcb12a93

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [2/10] — wave 5-1: get_application_by_posting_learner mine point-read (G-322) 51a030fa60

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [3/10] — wave 5-1: get_placement_by_application active-placement read (G-316 shape) e1ef420b2d

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [4/10] — wave 5-1: GET /applications/mine (G-322) + GET /applications/{id} (D-104 status + history + placement) on the D-043 stack a62acf8241

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [5/10] — wave 5-1: gate + scoped-events + hired + revoked-null + mine arms + reads-stay-free tests c25e42c005

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [6/10] — wave 5-2: placement.ts mirrors for the learner status reads (D-110) 809ce3bda8

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [7/10] — wave 5-2: getMyApplication / getLearnerApplicationStatus / withdrawApplication clients (no new error classes) a46ecf142a

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [8/10] — wave 5-2: job-detail application-status panel — mine-read first, the seven D-099 states, timestamped history, placement confirmation, withdraw CTA with honest 409/403 copy (A-304 badge honesty) 38d8e2c4b9

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [9/10] — wave 5-2: wire pins + the A-304 badge-honesty census (mock talent surfaces stay placement-grep-clean) f34959026a

feat(placements): v0.11 P5 learner placement visibility (REQ-11-005) [10/10] — wave 5-2: fetch-stub wire tests + composition source pins ... b489c59980

Plan: .ciagent/PLAN.md Phase 5 (waves 5-1/5-2); manager verdict nextcraft#1 (hep, 2026-10-19T19:29Z). P5 vertical slice per the binding wave order: store reads -> routes -> web wiring -> tests in the same wave.

fix(test): type the EngineError predicates in the learner-status web tests (CI #166 node-lane red triage — the QS dynamic import is untyped, so instanceof alone narrows nothing; the engine-client-identity assert.ok + InstanceType cast pattern) 38b3e07cfe

fix(api): drop the unused type-ignores on the P5 response constructions (CI #167 mypy) 922219748e

fix(web): reword the withdraw client docstring (the G-312 pin greps the word 'retry' to EOF from the employer-auth section) 7e16b33ff6

fix(test): scope the no-persistence pin to setItem (the board's sessionStorage handoff is a sanctioned read) 6b451d4de7

fix(test): bound the G-328 placement-surface slice at the withdraw gate (the verify-CTA copy is a different, sanctioned surface) e32e54e7aa

docs(roadmap): v0.11 P5 landed 2026-10-21 — full vertical slice at e32e54e7aa, CI run #168 green both lanes after two same-cycle red triages; the v0.10.5 per-phase tag defers to the P6 ship lane per the recorded next-release posture (flagged here, never silent) 376dc3d59a

Update .ciagent/REQUIREMENTS.md c2b907b544

chore(P05): phase 5 complete — v0.10.5 shipped (the deferred per-phase tag landed at the P6 ship at e32e54e7aa, release lane fired on it) ... 8fd229641a

REQ-11-005 complete: the mine point-read (G-322) + the learner status
read (D-104) + withdraw on the unchanged D-043 stack; the job-detail
status panel; A-304 badge honesty. CI #168 green both lanes after two
same-cycle red triages. REQ-11-005 row flipped complete (v0.10.5) in the
companion commit (its default title: Update REQUIREMENTS.md — contents
API message field, disclosed).

---ci---
phase: 5
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-005]
  partial: []
---/ci---

chore(P05): phase 5 complete — checkpoint advanced ... 5b66c75917

---ci---
phase: 5
milestone: v0.11
status: complete
requirements:
  covered: [REQ-11-005]
  partial: []
---/ci---

chore(P06): final review SHIP (0 P0s) + audit PASS — ship_pending ... ca08f93eeb

Wave 6-1 multi-persona review (lead-developer): D-100 one-transaction
discipline VERIFIED (transition_application = the sole post-creation
status writer, R-78 — marketplace store carries no status write; one
Session, one commit covering both tables + the application row); R-80
re-hire coherence VERIFIED (rehire = fresh PlacementRow + placement.rehired,
never a fabricated application transition; partial-unique guard, the
IntegrityError surfaces); G-319 pin split VERIFIED (own-postings list
counts-only, test_postings_read.py negative PII assertion unchanged);
D-110 wire pins VERIFIED (placement.ts mirrors placements/base.py
field-for-field + status-union, pinned in pins.test.ts); D-092 census
VERIFIED (the overview mock block replaced by real placements; talent
mocks retained + honestly labeled; no fake-converted surface). Zero P0s.

Security-auditor pass: no credentials/identity PII on any log or asset
path (learner_id an opaque handle everywhere, R-79); gate orders pinned
per principal class (employer session->claim->entitlement; admin token;
learner allowlist->verified-18+->data); the ledger no-delete path intact
(R-70); tamper/fork/concurrency arms green; export determinism + the
G-321 methodology honesty re-verified; no secret echoed by any
exception path. Clean.

P1 findings, dispositioned with recorded follow-ups (never loop back
to EXECUTE): (1) PLAN Must-Haves names tests/placements/test_e2e_audit.py
but the D-111 E2E proof lives as tests/placements/test_export.py::
test_e2e_audit_proof — doc-path drift, substance verified green; (2) the
D-112 addition census omits employers/store.py L64-70 (the two-line
_AUDIT_EVENT_KINDS "application" vocabulary addition, P2 REQ-11-002
audit lane — in-scope, the census text incomplete).

Wave 6-2 audit (D-112 reconstruction): 27 branch commits vs the
.census — 18 added + 23 changed files, all placement-surface-scoped
(+ the .ciagent process set, README/deploy doc rows); feat commits
scoped to the placement surface; the two same-cycle CI red triages +
the disclosed probe.txt pair on main accounted. PASS.

---ci---
phase: 6
milestone: v0.11
status: ship_pending
---/ci---

coreci-nextcraft-po merged commit 85ddf5ea22 into main 2026-10-22 04:41:13 +00:00

coreci-nextcraft-po referenced this issue from a commit 2026-10-22 04:41:31 +00:00

docs(milestone): complete placement-tracking — v0.11 COMPLETE, shipped as v0.10.6

coreci-nextcraft-po referenced this issue from a commit 2026-10-22 04:41:43 +00:00

chore(P06): clear checkpoint — milestone v0.11 complete

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

blocked

constitution triage: blocked on a dependency

escalation

constitution triage: escalated up the chain of command

peer-request

constitution triage: same-level peer request

type:epic

issue-hierarchy canon class (standards/issue-hierarchy.md)

type:feature

issue-hierarchy canon class (standards/issue-hierarchy.md)

type:needs-triage

issue-hierarchy canon class (standards/issue-hierarchy.md)

type:project

issue-hierarchy canon class (standards/issue-hierarchy.md)

type:task

issue-hierarchy canon class (standards/issue-hierarchy.md)

type:user-story

issue-hierarchy canon class (standards/issue-hierarchy.md)

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

coreci-bot coreci-cairo (Elena Voss (CAIRO)) coreci-ceo (Alexandra Reed — CEO) coreci-coo (Marcus Wright) coreci-hep (Samuel Torres — Head, Education Products) coreci-nextcraft-po (Amara Diallo — PO nextcraft) grimacing jonathan (jonathan)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coreci/nextcraft#6