{
  "generated_at": "2026-05-12T19:35:00-05:00",
  "generated_by": "Codex Chairman closeout refresh - website buyer-readiness pass",
  "source_notes": "Refreshed after the 2026-05-12 closeout using board-drain green status, Memory/Brain launch-root receipts, storage-context bridge receipts, website auditor findings, and the 5-person buyer focus-group synthesis. Original RC1 and Pliny fields remain snapshot-based until the post-S19b measured run is regenerated.",
  "rc1_status": "frozen",
  "rc1_tag": "rc1",
  "rc1_frozen_at": "2026-05-11T03:00:00Z",
  "rc1": {
    "tag": "rc1",
    "commit": "8488a66f",
    "repo": "github.com/griffin9899/v2-platform",
    "frozen_at": "2026-05-10T22:00:00-05:00",
    "note": "RC1 ships on the v2-platform repo. Annotated tag 'rc1' (object SHA 8488a66) points at commit 05e11a2 ('RC1 SHIP GATE: freeze spec + ADR #2 addendum + injection corpus deferral'). This control-plane monorepo (griff-ai-control-plane) is a separate surface and remains on branch control-plane-build-2026-05-06."
  },
  "pliny": {
    "framework_version": "Plan v2 §3 (14 classes: 10 MUST + 4 SHOULD)",
    "ship_threshold": "10/10 MUST blocked + >=3/4 SHOULD blocked",
    "must_classes_total": 10,
    "should_classes_total": 4,
    "fixtures_authored": 3,
    "fixtures_total_target": 14,
    "must_blocked_count": null,
    "must_blocked_percent": null,
    "should_blocked_count": null,
    "measurement_status": "pending S19b broker eval — 8 of 10 MUST classes are broker-primary venue (1, 2, 3, 5, 6, 7, 8, 9 per S19b §2 matrix), 2 delegated to host-hardening (#4) and eval-harness (#10); SHOULDs #11-14 deferred to S22 / S18 calibration. No measured red-team run yet; fixtures are seed inputs, not pass/fail results.",
    "must_blocked_summary": "8/10 (broker primary) + 2 delegated",
    "should_blocked_summary": "TBD — SHOULDs #11-14 deferred to S22 (skill reflex compiler) and S18 (surprise segmenter calibration)",
    "authored_fixtures": [
      "pliny-1-wrapper-skip",
      "pliny-2-toctou-classifier",
      "pliny-3-prompt-inject-judge"
    ]
  },
  "tests": {
    "python_local_runner": {
      "collected": 39,
      "command": "pytest --collect-only -q packages/local-runner",
      "as_of": "2026-05-10"
    },
    "typescript_web_suites": {
      "files": 7,
      "path": "packages/web/tests",
      "as_of": "2026-05-10"
    },
    "v2_platform_python": {
      "collected": 321,
      "command": "pytest --collect-only -q (from A:/projects/v2-platform/)",
      "as_of": "2026-05-10",
      "note": "RC1 freeze snapshot (per spec): 275 passed / 17 failed (all 17 [d1]-marked with stale D1_ATOMIC_BATCH_TOKEN env var vs rotated worker secret — non-functional, env-refresh closes) / 4 skipped. 25 net-new tests have landed post-freeze (296 → 321 collected)."
    },
    "test_count_total": "321 (v2-platform) + 39 (local-runner) + 7 TS suites (web)"
  },
  "known_limitations": [
    {
      "id": "L1",
      "title": "Hosted recall demo not yet public",
      "detail": "app.griff.run/ does not yet front a public recall console. WEB-2 focus group identified this as the highest-leverage missing artifact. The current /demo route shows MASTER ATC custody theater, not memory recall.",
      "severity": "high",
      "tracked_in": "WEB-2 synthesis + Sprint 7 design (S7-T002 hosted demo console with abuse controls)"
    },
    {
      "id": "L2",
      "title": "/openapi.json behind CF Access",
      "detail": "Public OpenAPI spec is currently gated by Cloudflare Access on memory.griff.run. Developer evaluators (Marcus, Bo, Priya in WEB-2) flagged this as a show-stopper.",
      "severity": "medium",
      "tracked_in": "WEB-2 Theme 5 — fold into Sprint 7 S7-T002 as a 30-minute add"
    },
    {
      "id": "L3",
      "title": "Pliny red-team battery not yet measured end-to-end",
      "detail": "3 of 14 fixtures authored (classes 1-3 wrapper-skip / TOCTOU / prompt-inject-judge). Broker enforcement venues mapped per S19b §2 — 8 broker-primary MUSTs, 2 delegated (class #4 keyring hardening, class #10 classifier mislabel via eval-harness). SHOULDs #11-14 are S22 / S18 surface, not broker. No measured run yet.",
      "severity": "medium",
      "tracked_in": "Sprint S19b (brain-S19b-mcp-host-broker-design.md) + N18 fixtures audit"
    },
    {
      "id": "L4",
      "title": "Real Execution Kernel: design only, sandbox primitive proven but not wired",
      "detail": "P0c spike PASSED all 3 attacks (Job Object + cleared env + deny-DACL + WFP firewall, 2.6 ms spawn). Production integration deferred per V-6 Sprint 7 drop list — BD12 sandbox primitive integration is 6-9h of internal hygiene that doesn't produce customer surface; parked to S8 with ADR-007 deferred. ADR-006 dispatcher stub is what shipped for RC1.",
      "severity": "high",
      "tracked_in": "phase0-P0c-sandbox-spike.md + V-6 Sprint 7 review §2.5 drops"
    },
    {
      "id": "L5",
      "title": "Section 889 / Section 508 compliance: scaffolded, federal-conditional",
      "detail": "S6-T003 shipped a 480 LOC scanner + CI workflow + sample.json + 4 tests (commit 8e8266b fixture exclude fix). Per Plan v2 §4 A10, full federal-customer-conditional checks are deferred unless a federal warm-intro materializes. NDAA 889 attestation generator is design-only beyond the scaffold.",
      "severity": "medium",
      "tracked_in": "rc1-rush-R3-section-889-shipped.md + master plan §4 A10 deferral"
    },
    {
      "id": "L6",
      "title": "Memory federation cross-machine: post-RC1",
      "detail": "Brain Plan v2 broker is single-host (S19b §0 explicit non-goal). Fleet federation across JWGH02 / GRIFFIN / JWGH03 is post-RC1. Memory recall today works cross-session on a single host via memory.griff.run; multi-host coherence is the next layer.",
      "severity": "medium",
      "tracked_in": "brain-S19b-mcp-host-broker-design.md §0 non-goals"
    },
    {
      "id": "L7",
      "title": "No published benchmarks vs mem0 / Letta / Anthropic built-in memory",
      "detail": "Sam (journalist persona, WEB-2) flagged. Comparison harness not yet built; recall eval harness (A2) gated on P0d golden corpus lock.",
      "severity": "low",
      "tracked_in": "WEB-2 divergent themes + Plan v2 A2 acceptance criterion"
    },
    {
      "id": "L8",
      "title": "17 [d1]-marked tests failing on stale token (non-functional)",
      "detail": "RC1 freeze snapshot: 275 passed / 17 failed / 4 skipped. All 17 failures are D1 [d1]-marked tests with stale D1_ATOMIC_BATCH_TOKEN env var vs the rotated worker secret. Non-functional — env-refresh closes them. Honest disclosure rather than test-suppression.",
      "severity": "low",
      "tracked_in": "RC1-integrated-mvp-build-spec.md §'Locked RC1 P0 acceptance thresholds'"
    }
  ],
  "firewall_iac_verified_at": "2026-05-10T23:54:50-05:00",
  "firewall_iac_note": "V-8 NF-2 firewall IaC at A:\\GRIFF_AI\\00_MASTER_CONTROL\\firewall\\ — psd1 + apply + verify. Daily scheduled task command surfaced in audit 2026-05-10-final-drain-S008-firewall-iac.md but NOT yet registered."
}