INFINBOT — SOFTWARE CLOSURE AND PENDING HOST ACCEPTANCE
2026-10-13

Completed software work; remove these specific defects from the development list:
* Explicit Decimal MES units and caller-supplied clearing/display conversion.
  CME specification: $5 per index point; 0.25-point tick = $1.25 per contract.
* Official ES futures Time & Sales v2 sample: 839,644 validated rows.
* Official ES options Time & Sales v2 sample: 23,716 validated rows, including
  4,265 strategy rows and 561 negative strategy prices. User-defined outright
  options remain distinct from UD strategy instruments. Weekly delivery labels
  are retained, without guessing a strategy's legs or precise expiry date.
* Downloaded Alpaca SDK stock/option fixtures: two bars each. Schema, Decimal
  values, option symbol formats and unfinished pagination are checked.
* Client /client page connected to authenticated ClickwrapApp. Checkbox begins
  unchecked. Exact terms/version/hash and session-bound CSRF are checked server-side.
  Acceptance is audited; a separate valid payment entitlement is needed to activate
  the key. Request JSON cannot select a different tenant. Unapproved terms fail closed.
* Every outgoing signal uses guarded_send. A committed SUSPENDED status blocks
  the next handoff; idle access checks occur at most one second apart. Bytes already
  handed to the network cannot be recalled. A bounded host transport is required.
* Schedule installation preserves other jobs, rejects legacy duplicates, reads
  back installed jobs and restores previous definitions after failed readback.
* Notification transport distinguishes API acceptance from actual device receipt;
  ambiguous timeouts are never automatically resent. Stale receipts cannot confirm
  a new operations test.

Evidence: closure tests, full regression suite, real loopback WSGI requests and
three JavaScript acceptance scenarios. Browser rendering and actual host services
remain unverified. No production/LGC approval is fabricated.

HOST ACCEPTANCE IS A PENDING CHECK, NOT A SOFTWARE DEFECT
It verifies the installed code, selected private configuration, current provider
responses and actual ledger on /Users/bpa/ForesixaQuant, then records a private
receipt for review. Missing sessions or dispositions cannot be invented to make
that receipt pass. You may run available checks during setup; current feed,
session and execution evidence are checked when those observations exist.
Acceptance does not submit orders, start a trial or grant real-money clearance.

Pending items, separate from completed development:
* Main private-token/TradingBotEngine integration and replacement broker
  authentication are last, as requested. The actual engine source is not present
  in this workspace. No private file was uploaded or altered.
* Current authenticated MES/stocks/options delivery and contract metadata belong
  to host acceptance. ES is not relabeled MES. Alpaca test fixtures are not live data.
  WORKER_DATA_PROFILES.json declares supported profiles; it does not replace the
  owner's active worker configuration or enable workers.
* Host tenant/session middleware, approved terms manifest and bounded TLS signal
  transport must bind the tested commercial factory to the actual deployed host.
  The LGC contract remains entirely untouched. Synthetic test terms stay isolated.
* Actual Mac scheduler installation/readback, first scheduled execution and phone
  receipt require that host. This environment has no Mac execution connection.
* Offsite recovery, actual application restart and browser viewport review remain
  acceptance items. Native SQLite snapshot validation already passed on the host.

ONE OPERATIONS COMMAND ON THE MAC AFTER SOURCE INSTALLATION
cd /Users/bpa/ForesixaQuant && python3 infinbot_operations.py --config private/infinbot-host.json --install-schedules --send-test

This loads the existing host configuration; notification credentials come from
notification_credentials_file in that config, or the existing project file
notification_credentials.json. Use --notification-credentials only if the existing
notifier file is elsewhere. No new secret or provider is provisioned. Confirm YES
only if the test arrived on your actual phone. Share only the redacted output.
Main Alpaca/signing-token integration is not needed by this operations command.

COMMERCIAL HOST INTEGRATION
foresixa_licensing_server.create_clickwrap_app() constructs the /client and API app.
The host supplies trusted authenticated Principal objects; never create them from
untrusted tenant IDs, subjects or admin flags in a request. The additive migration
is explicit. Existing customers/keys are not automatically activated or destroyed.
Use the existing approved terms/version/hash and approval reference; do not use
the synthetic test contract in production. Secure key provisioning stays owner-side.

FILES AND DATA PRESERVATION
Source installer backs up replaced code. It preserves host config, credentials,
databases and contracts. Public samples remain separate from the actual ledger;
the source installer does not copy sample archives into enterprise_logs.