{
  "revision": "1.0.0-rc2",
  "artifact_sha256": "e1e4ca0989d96b8b4be8b5fb1233f10440a0ba6e2848d64ddf48631ba663b363",
  "source_hashes": {
    "AUDIT_FINDINGS.md": "00461d28e58ca2791cd69d8bf4795e70141f7a6b7e9d52e82f7e14ced30ee081",
    "README.md": "1064225fb26ca6e3bcd11a14cf14e7927e8930680df8d6c9ec40f20dbb87b511",
    "audit_dashboard.py": "41e4a53c6874641b5b246bdf92d3fccdd1d529b4e98e43a514d498e7dcf8528d",
    "audit_ledger.py": "72beebf9474968d8b7570986017f672fbec46daac810db6df8d1f7c4508098da",
    "audit_viewer.py": "70c2e07bc1a16058b279a0d457767f8c707cb615b924df1678114883113a6e5a",
    "auth_gate.py": "58deef77d7ba37ea8255367147dec33319276ca4c8bac3c6b778dc32657940e7",
    "gauntlet_v2.py": "e1e4ca0989d96b8b4be8b5fb1233f10440a0ba6e2848d64ddf48631ba663b363",
    "host_strategy.py": "d2bf77c06f2c98aa8005ff8a56b877b1d88211b4c7ad5f2a6b3e73f3d3558732",
    "requirements.txt": "7cbe709d58a624b2df8c66b269dbee92801e510ca5800b7eda1aa7a8b04047c0",
    "tests/test_audit.py": "210b3972f357289a3ae3aa37bb78351dfc500db4f3ad4a7f9ebca5b5be1f6a94",
    "tests/test_auth.py": "8c065733d31e934dde8eecd677153ed75b337258f17102d49e6b9928926096b0",
    "tests/test_native.py": "e6328f90468ea14068bfd1030f2431f7190411b20902725c243561f86b861996",
    "web/app.js": "8931dbd4a847df471de321651aef69d51cdb7be11c9f4ea6f532717d01e3f2f2",
    "web/index.html": "a5d35b57803065b74f1147670ad132f0489eb21c3c50044dcbec5a2b5fb5fb76",
    "web/styles.css": "f102155d9717b7bd67042217d0d4b3bc98ca82cafd77f1e99d7e0b9951331830"
  },
  "scope": "Native implementation candidate with original administrator gate and restored audit instrumentation",
  "executed_tests": 71,
  "passed_tests": 71,
  "elapsed_seconds": "28.873",
  "real_trades": 0,
  "critical_defects": 2,
  "critical_defect_scope": "Two unresolved mandatory release requirements: complete authoritative fee/fill accounting and guaranteed/atomic debit controls. No failures in the executed local test suite.",
  "pass_1": [
    {
      "id": "python_and_javascript_syntax",
      "mandatory": true,
      "status": "pass",
      "evidence": "python3 -m compileall -q alphabot-v1; node --check alphabot-v1/web/app.js; both exit 0"
    },
    {
      "id": "complete_local_suite",
      "mandatory": true,
      "status": "pass",
      "evidence": "python3 -m unittest discover -s tests -v; Ran 71 tests in 28.873s; OK. Full output in TEST_RESULTS.txt."
    },
    {
      "id": "restored_authentication_contract",
      "mandatory": true,
      "status": "pass",
      "evidence": "17 authentication tests: exact challenge/response, HTTPS cookie-bound bootstrap, failed status/TTL/cookie/redirect cases, Mac/TTY/main-thread policy, background expiry, renewal and missing-gate rejection."
    },
    {
      "id": "double_entry_and_integrity",
      "mandatory": true,
      "status": "pass",
      "evidence": "Accounting tests cover opening, buy/sell/trial balance, suspense and halt, LESSON ancestry, immutable tables, physical posting/state tamper detection, deferred reconciliation, exclusive read-only diagnostic reports and additive rc1 preservation."
    },
    {
      "id": "authoritative_fees_and_individual_fill_completeness",
      "mandatory": true,
      "status": "fail",
      "evidence": "Alpaca fee remains null with a disclosed reserve; native execution uses authoritative terminal aggregates rather than complete individually reconciled venue fill/fee receipts. AUDIT_FINDINGS.md gap 2."
    },
    {
      "id": "hard_debit_and_atomic_gateway_enforcement",
      "mandatory": true,
      "status": "fail",
      "evidence": "Native market orders use estimated reserves; guaranteed max debit and proposed atomic gateway floor enforcement remain unimplemented. AUDIT_FINDINGS.md gap 3."
    }
  ],
  "pass_2": [
    {
      "id": "combined_gate_broker_observer_ledger_flow",
      "mandatory": true,
      "status": "pass",
      "evidence": "test_complete_https_gate_broker_dashboard_and_ledger_path executes real localhost HTTPS authentication and broker bootstrap, broker buy/sell HTTP/WebSockets, connected observer, diagnostics and independently verified postings."
    },
    {
      "id": "authorization_and_observer_fail_closed",
      "mandatory": true,
      "status": "pass",
      "evidence": "A revoked gate never reaches decide(); a disconnected/missing observer blocks entry while risk samples continue; broker access cannot bypass an absent gate."
    },
    {
      "id": "preservation_and_source_completeness",
      "mandatory": true,
      "status": "pass",
      "evidence": "test_rc1_upgrade_preserves_legacy_risk_lessons_and_pending_state verifies additive schema/trigger upgrade without resetting old events, lessons, pending intent, halt, peak or floor. Source hashes and full runtime modules included."
    },
    {
      "id": "dashboard_protocol_security_and_history",
      "mandatory": true,
      "status": "pass",
      "evidence": "HTTP data, WebSocket replay/attestation, Host/Origin/CSP, read-only endpoints, date lookup, first milestone crossing and historical halt state tested."
    },
    {
      "id": "browser_responsive_layout",
      "mandatory": true,
      "status": "unverified",
      "evidence": "Playwright launch failed: browser executable is not installed. Widths 320/375/768/1024/1440, breakpoint boundaries, keyboard/zoom and browser rendering remain unverified."
    },
    {
      "id": "real_gateway_mac_and_broker_acceptance",
      "mandatory": true,
      "status": "unverified",
      "evidence": "Production gateway/Cloudflare session behavior, real Mac interactive execution, live accounts/entitlements, native broker response coverage and broker-side protection were not exercised."
    }
  ],
  "release_decision": "COMPLETE RC2 CANDIDATE PROVIDED FOR REVIEW; PRODUCTION RELEASE NOT CLEARED. See AUDIT_FINDINGS.md."
}