M47: record final production acceptance

2026-08-21 18:52:23 +02:00
parent 95c91797fa
commit a24098c583
2 changed files with 33 additions and 0 deletions
@@ -21,6 +21,19 @@ in `PROJECT_STATE.md`.
 - Operations: Prometheus/Alertmanager configuration validation passed, including the
  watchdog and authenticated n8n receiver route.

+## 2026-08-21 production verification
+
+- Immutable application revision `95c91797fa2c599443d69d9c96d83a85ee0711f7` was promoted
+  from a checksum-verified source archive after a fresh production backup.
+- Source revision and both OCI revision labels matched. Public readiness was green,
+  Alembic was at head, all health-gated services were healthy and persisted demo data was
+  retained without a deployment reset.
+- Trivy found zero fixed HIGH/CRITICAL vulnerabilities in each exact production image.
+- Prometheus successfully scraped the bearer-protected API target, Alertmanager carried
+  the active delivery watchdog, and the authenticated n8n alert receiver remained active.
+- The final non-destructive HTTPS canary passed **4/4** across Chromium and Firefox,
+  including the core operator routes and a grounded answer from the real knowledge stack.
+
 ## Evidence boundary

 The complete local suite uses the deterministic provider and an isolated database so it is