M49: record resilience production acceptance

PROJECT_STATE.md

@@ -1,5 +1,28 @@
 # Project state
 
+## M49 — M48 production acceptance evidence (2026-08-21)
+
+- Pushed M48 revision `00191e9b54ee6b961648a6e02abbb3a57957dba0` and promoted its
+  checksum-verified archive (`9421429ccfec8a91cef482472edf9e7f2047df447f4b612c90d247ca1c21a669`)
+  after creating and verifying `mobilityops-20260821T201820Z.dump`.
+- Production now has a healthy stable gateway, exactly two revision-labelled API replicas
+  and two web replicas. The database stayed running; backup, Prometheus, Alertmanager and
+  Grafana were explicitly refreshed and all report healthy. Alembic is
+  `4f2b9c8d7e61 (head)`, Prometheus sees its API target and backup/restore markers exist.
+- The one-time hand-off of host port 1236 from the former web container to the new gateway
+  caused 14 failures in 1,200 rapid probes. This bounded migration interruption cannot recur:
+  subsequent releases keep the gateway running and atomically reload versioned upstreams.
+- Live non-destructive acceptance passed **4/4** in Chromium and Firefox, including the
+  real grounded knowledge path. The authenticated production read-load gate passed
+  **360/360** at concurrency 18 with p95 **137.2 ms** and max **211.4 ms**.
+- Trivy 0.74 reports zero fixed HIGH/CRITICAL findings for the exact production API, web
+  and gateway images. TLS is valid through 2026-11-03 and a 14-day horizon check passes;
+  all MobilityOps containers had zero traceback/uncaught/panic/fatal/emergency log hits.
+- Exact next action: commit/push this evidence-only M49 revision, deploy it through the now
+  established start-first gateway while probing continuously, verify exact revision and
+  tag `v1.1.0-poc`. OneDrive remains intentionally disabled until the owner completes the
+  one-time interactive Microsoft OAuth authorization.
+
 ## M48 — resilient synthetic-demo operations (2026-08-21)
 
 - Replaced routine Compose recreation with a stable Nginx gateway and a two-API/two-web