The intended operator environment runs P6's authenticated, multi-tenant, contract, accessibility, and security checks and publishes evidence.
Milestone 4.E.1 — Environment, Fixtures & Required CI
Status: Planned — consumes P6 evidence; not satisfied by docs/static-shell smoke. Outcome: A reproducible operator environment runs the P6 harness and publishes required, versioned evidence. Track: Track E — Release Readiness & Phase Exit Dependencies: 4.P.0, 4.P.1, 4.P.6, Track D slices Estimated effort: 2 weeks Gate: G1 operator CI
Scope and deliverables
Provision the API, Postgres/RLS, Redis/Lua, ClickHouse, object storage, identity, operator SSE origin, and browser dependencies specified by 4.P.0. Seed four roles across two tenants and labeled fixtures for complete, partial, sampled, late, redacted, expired, deleted, and simulated states. Execute the P6 OpenAPI snapshot/generated client/runtime-parser, compatibility, Playwright, axe, keyboard, visual, hostile-content, cache-isolation, SSE, performance, and tenant-negative checks.
Publish the P6 artifact manifest, required-check inventory, commit/image/schema/fixture pins, JUnit, traces, screenshots, visual diffs, axe JSON, performance output, and rollback record. Do not substitute contract doubles for RLS, Lua limiting, pgvector, or revocation.
Verification gate
The OpenAPI snapshot matches the declared contract; breaking changes require a version bump. Four-role/two-tenant direct reads and searches deny cross-tenant access. Runtime parsing passes. Critical accessibility and hostile-content checks pass. Required-check inventory matches actual branch protection, including Python and Semgrep gates.
Rollout and rollback
Trigger: environment drift, missing P6 artifact, unregistered check, or failed tenant/security gate. Reversal: block merge/promotion and retain the last evidence-backed release. Verify: rerun P6 and attach the manifest and operator-runtime transcript.
Findings addressed
F4-001, F4-002, F4-008, F4-012, F4-034.
Exit checklist
- Reproducible operator environment manifest is published.
- Four roles × two tenants pass with P6 artifacts.
- OpenAPI, generated client, runtime parsing, and compatibility checks pass.
- Accessibility, visual, hostile-content, cache, SSE, and performance artifacts are attached.
- Required-check inventory matches protection rules.
- Docs/static-shell smoke is separately labeled and not counted as operator E2E.
Last updated on