{ "date": "2026-10-25", "scope": "Selected sanitized extracts of retained local qualification receipts; not a complete independently reproducible test package.", "sourceStatus": "Phases 1-5 source-complete and locally qualified; required source CI passed. Hosted adoption is separate and not asserted here.", "workspaceEvidenceRevision": "a3211d39765b072240d53c37deada2d1a889f00f", "sourcePipelines": [ { "repository": "foundry-platform-services", "pipelineId": 2986247469, "commit": "de29b17e9526f2cbb29e0966eebf6f7495ff8819", "status": "success", "publicationHeld": true, "tests": { "time": 154.8570000000001, "count": 112, "success": 110, "failed": 0, "skipped": 2, "error": 0, "suite_error": null, "reported": true } }, { "repository": "loom", "pipelineId": 2986247616, "commit": "d91c80a4d06570f9936d62e04935b0d4ec0a269c", "status": "success", "publicationHeld": true, "tests": { "time": 384.99799999999954, "count": 397, "success": 394, "failed": 0, "skipped": 3, "error": 0, "suite_error": null, "reported": true } }, { "repository": "foundry-k8s", "pipelineId": 2986247841, "commit": "3ec1406967848db4116bb12e74a1288068a3e2a7", "status": "success", "publicationHeld": true, "tests": { "time": 522.930999999999, "count": 333, "success": 323, "failed": 0, "skipped": 10, "error": 0, "suite_error": null, "reported": true } }, { "repository": "foundry-dev-workspace", "pipelineId": 2986248397, "commit": "be7aa6ecebd4c4d33ba66c96f3ba74c189970d00", "status": "success", "publicationHeld": true, "tests": { "reported": false, "reason": "No JUnit aggregation; all four required workspace contract jobs passed." } } ], "latticeRevision": "a8243e504f983b524db3bcc7c148018fb24ea628", "phase1": { "revision": "3715ebe", "nativeGatewayChecks": 23, "nonAdapterProductionDependenciesOnNativeProtocol": "absent in qualified source" }, "integrated": { "status": "passed", "scope": "Fresh local real Zitadel/native Users/Settings/Admin and actual registration/preparation replay; no module modifications", "steps": 70, "integrationChecks": [ "native-module-caller-network-and-workload-project-aligned", "installed-control-tls-readable-by-envoy-runtime", "create-declared-dependency-read-private-tenant-and-method-fenced", "create-automatic-native-role-and-staff-preparation", "all-confirmed-run-actions-executed-without-native-manual-seeding", "public-users-authenticated-bootstrap-actor-with-stable-id", "real-users-bl-uses-native-profile-and-related-services", "bootstrap-native-application-role-through-normal-gateway", "actual-executor-definition-preparation-replay-preserves-institution-edits-empty-revoked-and-managed-definition-without-regrant" ] }, "browser": { "status": "passed", "browser": "156.0.8078.47", "playwright": "1.60.0", "checks": [ "real-zitadel-login-v2-pkce-session-issuer-subject", "native-permission-macro-expands-real-backend-children", "actual-selected-users-mfe-search-mounted", "native-ui-patron-create-and-record-navigation", "native-ui-patron-edit-persisted-after-reload", "native-ui-cql-search-created-patron", "native-record-preferences-empty-grants-and-stable-actor-readback", "native-service-points-json-and-ui-written-user-association", "native-users-settings-create-permission-set-and-reload", "native-users-ui-assigns-institution-permission-set-and-persists", "real-zitadel-staff-manager-self-request-approved-without-workspace-admin-and-empty-native-access", "real-admin-neutral-role-create-and-observed-version-edit", "permission-manager-grants-native-app-role-to-real-staff-ui-api-allow-without-membership-promotion", "native-singleton-companion-and-empty-role-preservation-revocation-and-spoof-tenant-denial", "real-zitadel-revoked-native-manager-ui-and-direct-write-denial-measured", "native-users-bl-related-read-before-fault-and-bootstrap-role-removal", "integrated-native-grant-service-failure-denies-read-write-and-clears-real-session-permissions", "same-owned-native-runtime-recovers-without-grant-reseeding-or-provider-change", "managed-bootstrap-assignment-explicitly-removed-with-institution-role-retained-for-replay", "real-zitadel-nonmember-denied-ui-and-direct-api-without-mfe-load" ], "staffRevocationVisibleMs": 57281, "managerRevocationVisibleMs": 1972 }, "replay": { "status": "passed", "scope": "Exact completed native registration/preparation targets replayed through existing owning executors; no new run/reset or direct SQL", "customRolePreserved": true, "emptyAndRemovedRolesPreserved": true, "directSingletonPreserved": true, "managedDefinitionPreserved": true, "revokedBootstrapAdministratorNotReseeded": true }, "nativeBoundary": { "status": "passed", "checks": [ "real-native-tenant-registration-and-ui-backend-definition-replay", "receiving-replica-postgres-coordination-preserves-native-concurrent-grants-and-revocation", "management-production-http-anonymous-and-cross-tenant-denial", "management-native-catalogue-bounded-paging-source-filter-and-real-lookahead", "management-http-rejects-read-only-null-and-invalid-role-fields-and-unbounded-pages", "management-native-role-composition-category-assignment-and-native-immutable-refusal", "foundry-role-versions-reject-stale-update-delete-and-concurrent-edit-native-changes-invalidate", "management-native-ids-partial-patch-database-search-and-protected-definitions", "management-idempotent-item-bindings-preserve-unrelated-grants-native-permission-records-without-creating-users-or-admission", "management-http-concurrent-add-add-and-revoke-add-preserve-unrelated-direct-grants-after-explicit-retry", "management-receiving-replica-busy-denial-explicit-clear-delete-and-readback", "legacy-trusted-whole-record-self-put-native-limitation-and-native-role-composition-and-mutable-assignment", "legacy-native-user-create-indexed-add-remove-whole-list-replacement-and-native-retarget-semantics", "legacy-native-deprecated-reference-retention-and-native-assignment-semantics", "legacy-settings-edit-protected-definitions-native-delete-purge-module-token-tenant-fence-and-common-coordination", "serialized-legacy-whole-list-put-can-restore-prior-revocation", "native-required-grants-and-two-tenant-isolation", "sarc-native-authenticated-marker-desired-intersection-and-actor-tenant-projection", "native-token-tenant-fence-and-browser-rejects-native-or-invalid-oidc-token", "verified-rsa-oidc-nonmember-pending-missing-token-and-spoof-denial", "actor-membership-and-permission-record-ids-distinct", "patron-and-empty-grant-record-do-not-enroll-or-create-login", "native-cross-user-assignment-guard-and-privileged-self-write-characterized", "native-mutable-sets-immutable-registration-upgrade-and-replay-preserve-users", "real-bl-native-module-delegation-succeeds-without-human-users-read-grant", "native-membership-revocation-overrides-existing-folio-grants-neighbour-preserved", "lightweight-provider-and-original-actor-mapping-preserved", "management-production-http-read-and-write-fail-closed-during-native-outage", "native-token-service-outage-denies-without-lightweight-fallback" ], "images": { "mod-users": "docker.io/folioci/mod-users@sha256:381f630473aae3c7bf1498d9bee1d6976cdf13bd4ff49cf334a565ef99c7304b", "mod-authtoken": "docker.io/folioci/mod-authtoken@sha256:995a25a3313326e8a92864e6fa5a2dce1ab76cca5ff986c96c8b44b73a35357b", "mod-permissions": "docker.io/folioci/mod-permissions@sha256:5363e98c6299f7638f5c993b706a118a3747db783cad4d359420d54a11bd3a5d", "mod-users-bl": "docker.io/folioci/mod-users-bl@sha256:32de320199de85d9df49d58f47a56cd4ba6beedaf14a4e255a3a4a6680c993d4" }, "nativeSelfWrite": { "directOtherPut": 403, "nativeTokenPresent": true, "nativeActorPreserved": true, "directSelfPut": 200, "directItemPost": 403, "providerImage": "docker.io/folioci/mod-permissions@sha256:5363e98c6299f7638f5c993b706a118a3747db783cad4d359420d54a11bd3a5d", "requiredBoundary": "native module owns grant decisions", "selfGrantPersisted": true }, "durationSeconds": 149 }, "cleanup": { "ownedContainersAbsent": true, "ownedVolumesAbsent": true, "ownedNetworksAbsent": true, "exportedTokensRemoved": true }, "triggerProof": { "scope": "Earlier isolated native SYS reference diagnostic, not Foundry implementation or completed import", "inlineTokenBytes": 7601, "referenceTokenBytes": 417, "declaredPermissionStatus": 202, "undeclaredPermissionStatus": 403, "actorPreserved": true, "okapiRevision": "cf3c30f40fd201405c2ddf9345c9f4a42b344016" }, "limitations": [ "Native modules and grant policy remain unmodified; copied Foundry grant-policy checks were removed.", "Whole-record permission-user PUT is fully trusted grant-administrator authority; selected native self-PUT adds a grant refused by item POST.", "Legacy stale whole-list forms can overwrite later edits despite serialized execution.", "Native grant caches remain eventual; timing observations are not service-level guarantees.", "Managed delegation, completed Data Import, a second provider, customer migration and completed hosted adoption are not demonstrated by these receipts." ], "upstreamSources": { "ui-users": "4671f57020ce3f76de06f8d1004198f8a915513f", "mod-permissions": "6df12a03374fd930ecee1fdcd7589d4abf5faf99", "mod-authtoken": "172586c71fe936ac0b4d104b95acd508e88e43d3", "folio-module-sidecar": "24d990eafeb761690b5793d36e664e45aa768616" }, "screenshot": { "source": "Phase 4 local UI qualification, 24 October 2026", "actorsAndDefinitions": "synthetic fixture values; not customer data or deployed release versions", "laterQualification": "Phase 5 fresh real Zitadel integration" } }