feat(governance): add source-approval + dataset-freeze contract schema (AEG-X-009, gated)

Source governance schema: append-only source_approval table enforcing approval before ingestion. Dataset manifest hardened to support FROZEN state, requiring approval timestamps. Boundaries tested (6/6 passing). Server-side resolver (DapperApprovedModelContextReader) now guards both model and dataset approval. P2–P6 deferred: Dataset freeze command, maker-checker review, evaluation/proposal orchestration remain pending human decision package (source allow-list, license/SLA, metric versions, roles). No source/model seeded per CLAUDE.md governance. Migrations 0033–0034 idempotency verified fresh/upgrade/re-run on isolated test DB. AGENTS.md: Maturity (contract-first); Necessity (governance prerequisite). Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
Merge pull request '배포: 날짜·일련번호 기반 프런트엔드 버전 계약 적용' (#15 ) from fix/deploy-build-frontend-artifact into main
2026-08-07 13:32:25 +09:00 · 2026-08-06 16:28:38 +09:00 · 2026-08-06 16:23:47 +09:00 · 2026-08-06 16:13:37 +09:00 · 2026-08-06 16:13:01 +09:00 · 2026-08-06 16:05:28 +09:00
27 changed files with 1173 additions and 31 deletions
@@ -35,8 +35,8 @@ jobs:
          POSTGRES_DB: kartsell
          POSTGRES_USER: kartsell
          POSTGRES_PASSWORD: kartsell
-        ports: ["5432:5432"]
        options: >-
+          --network-alias postgres
          --health-cmd "pg_isready -U kartsell"
          --health-interval 10s
          --health-timeout 5s
@@ -50,16 +50,16 @@ jobs:
      - run: dotnet build KArtSell.sln --no-restore -c Release
      - run: dotnet run --project src/KArtSell.DbMigrator -c Release --no-build
        env:
-          KARTSELL_POSTGRES: Host=localhost;Port=5432;Database=kartsell;Username=kartsell;Password=kartsell
+          KARTSELL_POSTGRES: Host=postgres;Port=5432;Database=kartsell;Username=kartsell;Password=kartsell
      - run: dotnet run --project src/KArtSell.DbMigrator -c Release --no-build
        env:
-          KARTSELL_POSTGRES: Host=localhost;Port=5432;Database=kartsell;Username=kartsell;Password=kartsell
+          KARTSELL_POSTGRES: Host=postgres;Port=5432;Database=kartsell;Username=kartsell;Password=kartsell
      - name: Run backend tests with hang evidence
        run: >-
          dotnet test KArtSell.sln --no-build -c Release --logger trx
          --blame-hang --blame-hang-timeout 2m
        env:
-          KARTSELL_POSTGRES: Host=localhost;Port=5432;Database=kartsell;Username=kartsell;Password=kartsell
+          KARTSELL_POSTGRES: Host=postgres;Port=5432;Database=kartsell;Username=kartsell;Password=kartsell

      - name: Check OpenAPI Breaking Changes (AEG-X-008)
        run: |
@@ -22,6 +22,33 @@ jobs:
        with:
          dotnet-version: '10.0.x'

+      - uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+          cache-dependency-path: frontend/pnpm-lock.yaml
+
+      - name: Build frontend into Host static assets
+        run: |
+          pnpm install --frozen-lockfile
+          VERSION_DATE="$(TZ=Asia/Seoul date +%Y.%m.%d)"
+          RELEASE_COUNT="$(git ls-remote --tags origin "refs/tags/v${VERSION_DATE}.*" | wc -l | tr -d ' ')"
+          VERSION_SEQUENCE="$((RELEASE_COUNT + 1))"
+          APP_VERSION="${VERSION_DATE}.${VERSION_SEQUENCE}.${GITHUB_SHA::10}"
+          echo "VITE_APP_VERSION=${APP_VERSION}" >> "$GITHUB_ENV"
+          echo "release_version=${APP_VERSION}"
+          VITE_APP_VERSION="${APP_VERSION}" pnpm build
+          grep -R -q 'app-version' dist
+          grep -R -q 'UI contract 4.0' dist
+          grep -R -q "${APP_VERSION}" dist
+          find ../src/KArtSell.Host/wwwroot -mindepth 1 -delete
+          cp -R dist/. ../src/KArtSell.Host/wwwroot/
+        working-directory: frontend
+
      - run: dotnet restore KArtSell.sln

      - run: dotnet build KArtSell.sln --no-restore -c Release
@@ -30,6 +57,9 @@ jobs:
        run: |
          dotnet publish -c Release -o ./publish src/KArtSell.Host
          dotnet publish -c Release -o ./publish src/KArtSell.DbMigrator
+          # DbMigrator publish flattens Content SQL beside the executable.
+          # Keep the migration files in the release package; Host publish alone is insufficient.
+          test -f ./publish/0032_shadow_run_queued_status_contract.sql

      - name: Create deployment package
        run: |
@@ -53,16 +83,26 @@ jobs:

          echo "✅ File transferred"
          echo ""
-          echo "📋 Next steps on server (run these):"
-          echo "  ssh kjh2064@178.104.200.7"
-          echo "  sudo rm -rf /app/kartsell/current"
-          echo "  sudo mkdir -p /app/kartsell"
-          echo "  cd /app/kartsell && sudo unzip /tmp/kartsell-release.zip"
-          echo "  export KARTSELL_POSTGRES='${{ secrets.KARTSELL_POSTGRES }}'"
-          echo "  dotnet KArtSell.DbMigrator.dll"
-          echo "  sudo systemctl restart kartsell"
-          echo ""
-          echo "✅ Deployment package ready"
+          ssh -i /tmp/deploy_key.pem -o StrictHostKeyChecking=no kjh2064@178.104.200.7 \
+            "set -euo pipefail; \
+             sudo -n -l | grep -Fq '/usr/bin/systemctl restart kartsell' || { \
+               echo 'Deployment blocked: one-time sudoers delegation is missing for kartsell.' >&2; \
+               echo 'Expected: kjh2064 ALL=(root) NOPASSWD: /usr/bin/systemctl restart kartsell' >&2; \
+               exit 77; \
+             }; \
+             export KARTSELL_POSTGRES='${{ secrets.KARTSELL_POSTGRES }}'; \
+             mkdir -p /app/kartsell/current; \
+             unzip -oq /tmp/kartsell-release.zip -d /app/kartsell/current; \
+             cd /app/kartsell/current; \
+             test -f KArtSell.DbMigrator.dll; \
+             test -f 0032_shadow_run_queued_status_contract.sql; \
+             dotnet KArtSell.DbMigrator.dll; \
+             sudo -n systemctl restart kartsell; \
+             sleep 3; \
+             systemctl is-active --quiet kartsell; \
+             echo 'deployment_verified=true'"
+
+          echo "✅ Artifact deployed, DbMigrator executed, and kartsell restarted"

          # Cleanup
          rm /tmp/deploy_key.pem
@@ -27,17 +27,8 @@
      "Role": "직전 통합 고도화 제안서",
      "Package": "CORE_AND_FULL",
      "Treatment": "RETAINED_UNMODIFIED"
-    },
-    {
-      "File": "KArtSell_Aegis_v15_0_Core_NoLegacy(1).zip",
-      "Relative_Path": "attachments/source_archives/KArtSell_Aegis_v15_0_Core_NoLegacy(1).zip",
-      "Size": 4390109,
-      "SHA256": "6c88d2442c831fa11d42726951592929caf2b5bd5847e6b42f9ad9ef28ee1b95",
-      "Role": "직전 Core 구현 기준선",
-      "Package": "FULL_ONLY",
-      "Treatment": "RETAINED_UNMODIFIED"
    }
  ],
  "all_match": true,
-  "nested_zip_policy": "CORE excludes ZIP; FULL contains one v15 Core archive"
-}
+  "nested_zip_policy": "No source archive is present in this workspace; full-archive evidence is not claimed"
+}
@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://kartsell.taxbaik.com/contracts/data/source-approval.v1.proposed.json",
+  "title": "Governed Data Source Approval Contract",
+  "description": "Proposal only. This contract does not authorize ingestion until a human approval record exists.",
+  "contractVersion": "source-approval.v1-proposed",
+  "status": "DESIGN_PROPOSAL",
+  "automationBoundary": {
+    "allowedModes": ["EVALUATION_ONLY", "PROPOSAL_ONLY", "DRILL_ONLY"],
+    "forbiddenEffects": [
+      "AUTO_MODEL_ACTIVATION",
+      "AUTO_MODEL_PROMOTION",
+      "AUTO_PARAMETER_CHANGE",
+      "AUTO_ORDER",
+      "KIS_SUBMISSION",
+      "CLIENT_PUBLICATION"
+    ]
+  },
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "sourceId",
+    "sourceVersion",
+    "domain",
+    "owner",
+    "steward",
+    "licenseReference",
+    "availabilitySla",
+    "freshnessSla",
+    "timezone",
+    "calendarId",
+    "unitContract",
+    "schemaContractVersion",
+    "status",
+    "contentHash",
+    "approvedBy",
+    "approvedAt"
+  ],
+  "properties": {
+    "sourceId": {"type": "string", "minLength": 1},
+    "sourceVersion": {"type": "string", "minLength": 1},
+    "domain": {"type": "string", "minLength": 1},
+    "owner": {"type": "string", "minLength": 1},
+    "steward": {"type": "string", "minLength": 1},
+    "licenseReference": {"type": "string", "minLength": 1},
+    "availabilitySla": {"type": "string", "minLength": 1},
+    "freshnessSla": {"type": "string", "minLength": 1},
+    "timezone": {"type": "string", "minLength": 1},
+    "calendarId": {"type": "string", "minLength": 1},
+    "unitContract": {"type": "string", "minLength": 1},
+    "schemaContractVersion": {"type": "string", "minLength": 1},
+    "status": {"enum": ["CANDIDATE", "APPROVED", "SUSPENDED", "RETIRED", "QUARANTINED"]},
+    "contentHash": {"type": "string", "pattern": "^[A-Fa-f0-9]{64}$"},
+    "approvedBy": {"type": "string", "minLength": 1},
+    "approvedAt": {"type": "string", "format": "date-time"},
+    "publishedAt": {"type": "string", "format": "date-time"},
+    "revision": {"type": "integer", "minimum": 1}
+  },
+  "allOf": [
+    {
+      "if": {"properties": {"status": {"const": "APPROVED"}}},
+      "then": {"required": ["publishedAt", "revision"]}
+    }
+  ]
+}
@@ -0,0 +1,31 @@
+-- AEG-X-004: align shadow_run status constraint with the existing Queued application state.
+-- Prior migrations are immutable; this is an append-only correction migration.
+DO $$
+DECLARE
+    shadow_run_oid oid := 'model_operations.shadow_run'::regclass;
+BEGIN
+    IF shadow_run_oid IS NULL THEN
+        RAISE EXCEPTION 'model_operations.shadow_run must exist before 0032';
+    END IF;
+
+    IF EXISTS (
+        SELECT 1
+        FROM pg_constraint
+        WHERE conrelid = shadow_run_oid
+          AND conname = 'check_status'
+    ) THEN
+        ALTER TABLE model_operations.shadow_run DROP CONSTRAINT check_status;
+    END IF;
+
+    IF NOT EXISTS (
+        SELECT 1
+        FROM pg_constraint
+        WHERE conrelid = shadow_run_oid
+          AND conname = 'check_status'
+    ) THEN
+        ALTER TABLE model_operations.shadow_run
+            ADD CONSTRAINT check_status CHECK (
+                status IN ('Pending', 'Queued', 'DataBackfill', 'Replay', 'EvaluationComplete', 'Failed')
+            );
+    END IF;
+END $$;
@@ -0,0 +1,53 @@
+-- AEG-X-009 / ADR-DATA-001: append-only source approval boundary.
+-- This migration authorizes governance records only. It does not authorize ingestion,
+-- recommendation, model activation, client publication, order, or KIS submission.
+
+create schema if not exists governance;
+
+create table if not exists governance.source_approval (
+    source_approval_id uuid primary key default gen_random_uuid(),
+    source_id text not null,
+    source_version text not null,
+    domain text not null,
+    owner text not null,
+    steward text not null,
+    license_reference text not null,
+    availability_sla text not null,
+    freshness_sla text not null,
+    timezone text not null,
+    calendar_id text not null,
+    unit_contract text not null,
+    schema_contract_version text not null,
+    status text not null,
+    content_hash char(64) not null,
+    published_at timestamptz,
+    revision integer,
+    approved_by text not null,
+    approved_at timestamptz not null,
+    created_at timestamptz not null default now(),
+    constraint source_approval_status_valid
+        check (status in ('CANDIDATE', 'APPROVED', 'SUSPENDED', 'RETIRED', 'QUARANTINED')),
+    constraint source_approval_hash_valid
+        check (content_hash ~ '^[0-9A-Fa-f]{64}$'),
+    constraint source_approval_approved_requires_publication
+        check (status <> 'APPROVED' or (published_at is not null and revision is not null and revision > 0))
+);
+
+create unique index if not exists source_approval_identity_idx
+    on governance.source_approval (source_id, source_version, revision)
+    where revision is not null;
+
+create index if not exists source_approval_status_idx
+    on governance.source_approval (status, created_at desc);
+
+create or replace function governance.reject_source_approval_mutation()
+returns trigger as $$
+begin
+    raise exception 'governance.source_approval is append-only; create a correction record';
+end;
+$$ language plpgsql;
+
+drop trigger if exists source_approval_no_update on governance.source_approval;
+create trigger source_approval_no_update
+before update or delete on governance.source_approval
+for each row execute function governance.reject_source_approval_mutation();
@@ -0,0 +1,32 @@
+-- AEG-X-009 / ADR-DATA-001: make dataset freeze explicit and append-only.
+-- This migration does not create or seed a dataset. It only hardens the existing
+-- evaluation.dataset_manifest boundary.
+
+alter table evaluation.dataset_manifest
+    drop constraint if exists dataset_manifest_status_check;
+
+alter table evaluation.dataset_manifest
+    add constraint dataset_manifest_status_check
+    check (status in ('PROPOSED', 'APPROVED', 'FROZEN', 'QUARANTINED', 'RETIRED'));
+
+alter table evaluation.dataset_manifest
+    drop constraint if exists dataset_manifest_frozen_approval_check;
+
+alter table evaluation.dataset_manifest
+    add constraint dataset_manifest_frozen_approval_check
+    check (
+        status <> 'FROZEN'
+        or (approved_by is not null and approved_at is not null and frozen_at is not null)
+    );
+
+create or replace function evaluation.reject_dataset_manifest_mutation()
+returns trigger as $$
+begin
+    raise exception 'evaluation.dataset_manifest is append-only; create a correction record';
+end;
+$$ language plpgsql;
+
+drop trigger if exists dataset_manifest_no_update on evaluation.dataset_manifest;
+create trigger dataset_manifest_no_update
+before update or delete on evaluation.dataset_manifest
+for each row execute function evaluation.reject_dataset_manifest_mutation();
@@ -29,3 +29,17 @@ The evidence covers the repository's fresh/upgrade/re-run/recovery and checksum
 ## Completion boundary

 `AEG-X-004` is marked `COMPLETED` for the executed test-database rehearsal. Production deployment, DBA approval, and any production migration execution remain out of scope.
+
+## Status-contract correction evidence (2026-08-06)
+
+- Slice note: `docs/CURRENT/AEG-X-004_STATUS_CONTRACT_SLICE.md`
+- Migration: `db/migrations/0032_shadow_run_queued_status_contract.sql`
+- Regression: `DbUpMigrationTests.Migration0032_QueuedStatus_IsAccepted_AndRerunIsSafe`
+- Command: `dotnet test tests/KArtSell.Integration.Tests/KArtSell.Integration.Tests.csproj -c Release --filter FullyQualifiedName~Migration0032_QueuedStatus --logger trx --verbosity minimal`
+- Result: `1/1 passed`, TRX `tests/KArtSell.Integration.Tests/TestResults/kjh20_KIMJAEHYUN-OFFI_2026-08-06_14_15_10_net10.0.trx`
+- Command: `dotnet test tests/KArtSell.Integration.Tests/KArtSell.Integration.Tests.csproj --no-build -c Release --filter FullyQualifiedName~DbUpMigrationTests --logger trx --verbosity minimal`
+- Result: `12/12 passed`, TRX `tests/KArtSell.Integration.Tests/TestResults/kjh20_KIMJAEHYUN-OFFI_2026-08-06_14_15_28_net10.0.trx`
+- Command: `dotnet test tests/KArtSell.Integration.Tests/KArtSell.Integration.Tests.csproj --no-build -c Release --filter FullyQualifiedName~DbUpRecoveryTests --logger trx --verbosity minimal`
+- Result: `6/6 passed`, TRX `tests/KArtSell.Integration.Tests/TestResults/kjh20_KIMJAEHYUN-OFFI_2026-08-06_14_16_32_net10.0.trx`
+
+The correction accepts the existing application `Queued` state, rejects `UnknownStatus`, and preserves the inserted row across a direct re-run. This does not claim production migration, DBA approval, or Phase 1 execution/requeue.
@@ -0,0 +1,37 @@
+# AEG-X-004 Status Contract Correction Slice
+
+## WBS / Scope
+
+- WBS ID: `AEG-X-004`
+- Slice: `shadow_run.status` application/database contract correction
+- Scope: Add an immutable follow-up migration so the existing `Queued` application state is accepted by the database.
+- Explicitly out of scope: automatic requeue, model promotion, automatic order, KIS submission, production migration, and Phase 1 shadow execution.
+
+## Source
+
+- `src/KArtSell.Modules.ModelOperations/ShadowRun/Sql.cs` inserts `Queued`.
+- `src/KArtSell.Host/Features/ShadowRun/Handler.cs` creates and reports `Queued`.
+- `db/migrations/0022_model_operations_execution_schema.sql` rejects `Queued` through `check_status`.
+- `docs/CURRENT/PHASE-1_SHADOW_RUN_STATUS_CORRECTION.md` records the observed HTTP 500 and PostgreSQL `23514` evidence.
+- `docs/CURRENT/WBS_EXECUTION_PROCEDURES.md` requires one WBS slice, preserved execution evidence, and tracker update.
+
+## Assumption
+
+- `Queued` is an approved existing application lifecycle state because it is already emitted by the active endpoint and SQL path.
+- A follow-up migration is required because prior migrations are immutable.
+
+## Unknown
+
+- Production database migration execution and DBA approval are not available in this slice.
+- Phase 1 has not been requeued or started; this change only removes the known schema-contract failure.
+
+## Decision Required
+
+- Production rollout and explicit Phase 1 requeue approval remain required after this slice.
+
+## Acceptance Evidence
+
+- Migration applies on a fresh test database.
+- Upgrade from the `0022` schema accepts `Queued` and rejects an unknown status.
+- Re-running the follow-up migration is safe and preserves data.
+- Actual test artifacts and tracker status are recorded after execution.
@@ -0,0 +1,176 @@
+# AEG-X-009 Data/Model Proposal Automation — Design Proposal
+
+## Status and traceability
+
+- WBS: `AEG-X-009`
+- Requirement: `REQ-DATA-SOURCE`
+- Evidence class: `SOURCE+DESIGN_PROPOSAL`
+- Status: `DESIGN_PROPOSAL`; not approved implementation
+- Source: `contracts/schedules/model-operations.v3.json`, `contracts/schedules/execution-assurance.v1.json`, `contracts/model-governance/evaluation-promotion.v2.json`, `src/KArtSell.BuildingBlocks/Versioning/VersionSet.cs`, live read-only schema inspection on 2026-08-06
+- Assumption: source ingestion and model evaluation are allowed to create immutable proposal/evidence records when their mode is `EVALUATION_ONLY` or `PROPOSAL_ONLY`.
+- Unknown: approved source owners, source licenses/SLA values, model training implementation, retention period, and operator/secondary assignments.
+- Decision Required: approve the proposal schema, job ownership, source allow-list, promotion review roles, and retention/alert contracts before implementation.
+
+## Non-negotiable boundary
+
+Automation may:
+
+1. discover and validate an approved source;
+2. ingest immutable raw records and create a content-addressed dataset manifest;
+3. run deterministic evaluation against a frozen server-side VersionSet;
+4. create EvidenceSnapshot and a human-review proposal;
+5. notify the maker/checker queue and expose status/metrics.
+
+Automation must never:
+
+- activate or promote a model;
+- mutate thresholds, policy, configuration, or source code;
+- rollback a model automatically;
+- publish to clients;
+- submit an order or KIS request.
+
+## Required state flow
+
+```text
+SOURCE_CANDIDATE
+  -> SOURCE_APPROVED (human owner + license/SLA/timezone/unit)
+  -> INGESTION_EVALUATION_ONLY
+  -> DATASET_QUARANTINED | DATASET_FROZEN
+  -> MODEL_EVALUATION_ONLY
+  -> EVIDENCE_SNAPSHOT_CREATED
+  -> PROPOSAL_ONLY_REVIEW
+  -> HUMAN_APPROVED | HUMAN_REJECTED | EXPIRED
+  -> HUMAN_CHANGE_APPLIED (separate release, never by scheduler)
+```
+
+`DATASET_QUARANTINED`, missing evidence, hash mismatch, PIT violation, or VersionSet drift is a terminal hold for that run. It is not a retryable transient failure.
+
+## Required immutable records
+
+### Source catalog entry
+
+```text
+source_id
+source_version
+owner / steward / secondary
+license_reference
+availability_sla / freshness_sla
+timezone / calendar
+unit / currency
+schema_contract_version
+approved_at / approved_by
+status: CANDIDATE | APPROVED | SUSPENDED | RETIRED
+```
+
+### Dataset manifest
+
+Use the existing `evaluation.dataset_manifest` table. A row is eligible for evaluation only when:
+
+```text
+status = FROZEN
+dataset_id and content_hash are non-blank
+source_catalog_version is approved
+lineage_hash is present
+frozen_at and approved_at are present
+published_at/revision/PIT rules pass
+```
+
+### Evaluation VersionSet
+
+Use the existing `VersionSet` contract. It must be loaded server-side and contain:
+
+```text
+DatasetId, DataHash, ModelVersion, ConfigVersion, CodeSha, ContractVersion
+```
+
+The client may submit scope and requested window only. The client must not submit evidence, hashes, model versions, or configuration versions as authoritative values.
+
+### Proposal packet
+
+The proposal must reference, without copying or mutating, the EvidenceSnapshot and VersionSet. It must contain:
+
+```text
+proposal_id / idempotency_key / scope_key / job_run_id
+version_set / evidence_id / dataset_id / input_hash / output_hash
+policy_id / policy_trace_schema_version / decision_contract_version
+evaluation windows and metric definition versions
+PBO / DSR / frozen OOS / double-cost / false-exit-reentry evidence
+maker / checker / expiry / disposition
+```
+
+## Existing schedule mapping
+
+Do not add a new schedule until ADR/Issue approval. Use the existing contract entries as follows:
+
+| Existing job | Mode | Automated responsibility | Forbidden result |
+|---|---|---|---|
+| J25 SourceContractDriftCheck | EVALUATION_ONLY | detect source contract/license/SLA drift | no source activation |
+| J26 MarketCalendarCompletenessCheck | EVALUATION_ONLY | detect calendar/timezone/unit gaps | no threshold mutation |
+| J27 EvidenceChainAudit | EVALUATION_ONLY | validate lineage/hash/PIT chain | no evidence repair by overwrite |
+| J28 ProjectionFreshnessCheck | EVALUATION_ONLY | validate read-model freshness | no client publication |
+| J30 ReleaseEvidenceAssemble | PROPOSAL_ONLY | assemble a review packet | no release or activation |
+
+The missing business flow is not a new automatic promotion job. It is the contract and application boundary that creates a frozen dataset and proposal packet for the existing review process.
+
+## Repository catalog mapping
+
+The following mapping is grounded in the current catalog and data contracts. It is a design mapping, not an authorization to ingest.
+
+| Domain | Current catalog/source | Current logical tables/contracts | Automation entry condition | Current status |
+|---|---|---|---|---|
+| Market data | KRX OpenAPI | `market_data.prices`, `VS-03_DATA_CONTRACT.md` | source approval + calendar/unit/SLA + PIT/hash checks | CANDIDATE |
+| Corporate/fundamental data | OpenDart API | `model_operations.disclosures`, `VS-05_DATA_CONTRACT.md` | license/redistribution approval + filing schema/DQ | CANDIDATE |
+| Portfolio | User input | `portfolio.holdings`, `VS-04_DATA_CONTRACT.md` | authenticated owner input + audit + PIT | CANDIDATE |
+| Model operations | computed/evaluation output | `evaluation.dataset_manifest`, `governance.model_version_registry`, `signal_engine.evidence_snapshot` | frozen dataset and approved model/config/code contract | BLOCKED until seed/approval |
+| Shadow evaluation | Hangfire/shadow run | `model_operations.shadow_run`, result/evidence contracts | server-side VersionSet + EVALUATION_ONLY capability | BLOCKED until VersionSet |
+
+The source catalog's logical table descriptions must be reconciled with active runtime SQL and the live schema before a migration or ingestion implementation. The catalog itself is not a substitute for runtime schema evidence.
+
+## Existing debt and decision linkage
+
+This proposal directly addresses, but does not close, the following open items:
+
+- `TD-044`: approved Dataset Manifest and Model Registry initial data absent;
+- `TD-063`: total-return/delisting/corporate-action golden data incomplete;
+- `TD-099` / `TD-105`: market calendar/timezone source and SLA not approved;
+- `TD-132`: current total-return source not approved;
+- `DEC-037`, `DEC-038`, `DEC-079`: source/license/SLA and calendar ownership decisions required.
+
+These items remain OPEN/DECISION_REQUIRED until their evidence is attached. No automation job may treat the catalog row as approved merely because the row exists.
+
+## Proposed WBS decomposition (proposal only)
+
+These rows must be approved before being added to `WBS_MASTER.csv`:
+
+| Proposed ID | Scope | Acceptance evidence |
+|---|---|---|
+| AEG-X-009-P1 | Source allow-list and approval record | unapproved source cannot enter ingestion |
+| AEG-X-009-P2 | Dataset manifest freeze command | same input produces same dataset/content hash; append-only |
+| AEG-X-009-P3 | Server-side VersionSet resolver | client-supplied evidence/version values ignored |
+| AEG-X-009-P4 | Evaluation/Proposal orchestration | idempotent JobRun/Watermark; modes fail closed |
+| AEG-X-009-P5 | Human review packet/API/UI | maker-checker, expiry, reject, audit trail |
+| AEG-X-009-P6 | Replay/failure/observability evidence | quarantine, replay hash, alert, runbook, rollback/stop evidence |
+
+## Gate progression
+
+| Gate | Required before next gate |
+|---|---|
+| G0 | contract, source owner, data semantics, WBS approval |
+| G1 | approved source catalog + isolated fresh/upgrade/re-run rehearsal |
+| G2 | frozen dataset + VersionSet resolver + golden/replay evidence |
+| G3 | evaluation-only execution and EvidenceSnapshot proof |
+| G4 | proposal packet + maker/checker review evidence |
+| G5 | separate human change approval; no scheduler activation |
+
+## Immediate decision package
+
+Before code or migration work, approve these six values explicitly:
+
+1. source allow-list and owner/steward;
+2. license, SLA, timezone, calendar, unit, and currency contracts;
+3. dataset freeze status and retention policy;
+4. model evaluation metric definition versions and population/window rules;
+5. maker/checker roles and proposal expiry;
+6. alert, stop, runbook, and secondary owner.
+
+Until these are approved, the correct behavior is `BLOCKED`/`QUARANTINED`, not synthetic data/model creation.
@@ -2,7 +2,7 @@ WBS_ID,Sprint,Slice_ID,Task,Status,Completion_Date,Evidence_Link,Owner,Notes
 AEG-X-001,S0,Cross,Version Coverage Matrix 고도화,COMPLETED,2026-08-04,docs/contracts/platform/VERSION_COVERAGE_MATRIX.md,PM/Architect,"✅ Version matrix: v10/v12/v12.1 compatibility (Retained/Improved/Superseded 100%), Supersession registry, Breaking change assessment, Migration roadmap"
 AEG-X-002,S0,Cross,global.json 고도화,COMPLETED,2026-08-04,.gitea/workflows/ci.yml (dotnet/pnpm restore/build/test),DevOps,"✅ CI pipeline validates: dotnet restore/build/test (Release config), pnpm frozen install/build/e2e, PostgreSQL 17 health checks, Log output to .gitea/workflows/ci.yml"
 AEG-X-003,S0,Cross,Architecture tests 고도화,COMPLETED,2026-08-04,tests/KArtSell.ArchitectureTests/RepositoryRulesTests.cs (6 tests PASSING),Architect/QA,"✅ Architecture rules enforced: (1) No prohibited patterns, (2) Domain isolation from infrastructure, (3) SQL validation (no SELECT *, schema-qualified), (4) Endpoint authorization (Roles/Policies), (5) No placeholder files, (6) No duplicate aggregate IDs. All 6 tests PASS."
-AEG-X-004,S0,Cross,DbUp 복구 rehearsal 고도화,COMPLETED,2026-08-06,"docs/CURRENT/AEG-X-004_DBUP_EVIDENCE.md; tests/KArtSell.Integration.Tests/DbUpMigrationTests.cs; tests/KArtSell.Integration.Tests/DbUpRecoveryTests.cs",DBA/BE,"✅ DbUpMigrationTests 11/11 and DbUpRecoveryTests 6/6 passed against approved test database; fresh/upgrade/re-run/failure-recovery evidence recorded. Full solution test remains separately unclaimed."
+AEG-X-004,S0,Cross,DbUp 복구 rehearsal 고도화,COMPLETED,2026-08-06,"docs/CURRENT/AEG-X-004_DBUP_EVIDENCE.md; docs/CURRENT/AEG-X-004_STATUS_CONTRACT_SLICE.md; db/migrations/0032_shadow_run_queued_status_contract.sql; tests/KArtSell.Integration.Tests/DbUpMigrationTests.cs; tests/KArtSell.Integration.Tests/DbUpRecoveryTests.cs",DBA/BE,"✅ Queued status contract correction applied as append-only 0032; targeted 1/1, DbUpMigrationTests 12/12, DbUpRecoveryTests 6/6 passed against approved test database. Production migration/DBA approval and Phase 1 requeue remain unclaimed."
 AEG-X-005,S0,Cross,Security auth 고도화,COMPLETED,2026-08-04,"docs/decisions/ADR-SEC-001.md + tests/KArtSell.Integration.Tests/SecurityAuthenticationTests.cs (6 tests)",Security/BE,"✅ ADR-SEC-001 produced (OIDC/JWT/DevelopmentHeader tiers), SecurityAuthenticationTests.cs (6 tests): endpoint authorization, DevelopmentHeader mode check, secret logging prevention, secret hardcoding check, AI prompt PII, auth config validation. Acceptance_Evidence verified: '비개발 무인증 접근 0, secret/log/prompt 노출 0'"
 AEG-X-006,S0,Cross,Outbox publisher 고도화,COMPLETED,2026-08-04,"docs/CURRENT/ARTIFACTS/AEG-X-006_ACCEPTANCE_EVIDENCE.md + src/KArtSell.BuildingBlocks/Reliability/DapperOutboxWriter.cs + OutboxPollerJob.cs",BE/SRE,"✅ Outbox→Inbox async pipeline verified: DapperOutboxWriter (transactional), OutboxPollerJob (idempotent), DapperInboxStore (deduplication), 5 consumer implementations. Acceptance_Evidence: All criteria met. 177/177 tests PASS."
 AEG-X-007,S0,Cross,Serilog/OTel correlation 고도화,COMPLETED,2026-08-06,"tests/KArtSell.ArchitectureTests/PiiRedactionTests.cs (6 tests) + commit e7913db",SRE/Security,"✅ PII redaction policy VERIFIED: SSN/Email/CreditCard/ApiKey redaction (6 tests). Commit e7913db adds pattern-based sanitization validation. All tests PASS (249/253)."
@@ -24,4 +24,4 @@ AEG-X-011,S4,Cross,Golden vector 고도화,BLOCKED,TBD,"AGENTS.md: Algorithm cha
 AEG-VS-09-01,S4,VS-09,BuildEvidenceSnapshot,BLOCKED,TBD,"CLAUDE.md: Evidence requires Phase 1 results",PM/Architect,"Gate 2 prerequisite. Blocked by Phase 1."
 AEG-VS-10-01,S4,VS-10,GenerateSellDecision,BLOCKED,TBD,"CLAUDE.md: Model must pass PBO/DSR validation",PM/Architect,"Gate 3 prerequisite. Blocked by Phase 1."
 AEG-VS-19-01,S5,VS-19,RunFrozenBacktest,BLOCKED,TBD,"CLAUDE.md: Requires evidence from Phase 1-4",PM/Architect,"Gate 3 prerequisite. Blocked by Phase 1."
-PHASE-1-SHADOW-RUN,S0-S5,Cross,252+ Trading Day Shadow Run,BLOCKED,TBD,"docs/CURRENT/PHASE-1_SHADOW_RUN_STATUS_CORRECTION.md; logs/phase-1-execution.log; logs/host-startup-20260804-173000.log",BE/SRE,"Observed evidence contradicts RUNNING: enqueue failed with shadow_run.check_status constraint violation and HTTP 500; Job 893 was not actually started. Requires approved status-contract correction, fresh test-db rehearsal, and explicit re-queue approval."
+PHASE-1-SHADOW-RUN,S0-S5,Cross,252+ Trading Day Shadow Run,BLOCKED,TBD,"docs/CURRENT/PHASE-1_SHADOW_RUN_STATUS_CORRECTION.md; docs/CURRENT/AEG-X-004_DBUP_EVIDENCE.md; docs/CURRENT/PHASE-1_REQUEUE_READINESS.md; docs/CURRENT/PHASE-1_EXECUTION_EVIDENCE_PLAN.md; docs/CURRENT/PHASE-1_PREFLIGHT_20260806.md; docs/CURRENT/PHASE-1_PRODUCTION_PREFLIGHT_20260806.md; db/migrations/0032_shadow_run_queued_status_contract.sql; logs/phase-1-execution.log; logs/host-startup-20260804-173000.log",김재현/BE/SRE,"Remote production preflight completed: host/web/PostgreSQL are running, capabilities confirm order/KIS/client publication OFF, but 0032 is absent from deployed artifact and journal; production check_status rejects Queued. No direct SQL or enqueue performed. Deploy reviewed DbMigrator artifact, apply migration, then proceed with VersionSet and new IDs."
@@ -0,0 +1,22 @@
+# 배포 frontend artifact 계약
+
+## Source
+
+- 운영 배포 Run 3357 로그: `dotnet publish` 전 frontend build 단계 없음
+- 운영 bundle에 `app-version` 및 `UI contract 4.0` marker 없음
+- `frontend`의 재현 가능한 `pnpm-lock.yaml` 및 기존 CI frontend job
+
+## Decision
+
+배포 workflow는 Host publish 전에 다음 규칙으로 버전을 계산하고 frontend를 재생성한다.
+
+```text
+YYYY.MM.DD.<당일 release 순번>.<commit SHA 10자리>
+```
+
+당일 순번은 `vYYYY.MM.DD.*` release tag 개수에 1을 더해 계산한다. 예: `2026.08.06.1.acaa731b3f`. 생성된 `frontend/dist`를 Host `wwwroot`에 복사하고, `app-version`, `UI contract 4.0`, 계산된 전체 버전 marker가 없으면 배포를 중단한다.
+
+## Evidence / Unknown
+
+- Source 변경과 운영 artifact를 분리하지 않고, 매 배포 시 동일 commit에서 재생성한다.
+- 실제 운영 반영 증거는 이 Slice의 CI 및 deploy run 완료 후 보존한다.
@@ -0,0 +1,32 @@
+# KArtSell 배포 재기동 권한 계약
+
+## Source
+
+- 운영 호스트 `hz-prod-01`의 실제 sudo 정책 조회 결과
+- 기존 `quantengine` 및 `taxbaik` 서비스의 특정 `systemctl restart` `NOPASSWD` 위임 패턴
+- `.gitea/workflows/deploy.yml`
+
+## Assumption
+
+- 배포 SSH 계정은 `kjh2064`로 유지한다.
+- 운영 서비스는 `/etc/systemd/system/kartsell.service`로 유지한다.
+- DbMigrator와 artifact 복사는 현재처럼 `kjh2064` 권한으로 수행한다.
+
+## Decision
+
+`kjh2064`에 전체 sudo 권한을 부여하지 않고, 운영자가 한 번만 다음 단일 명령을 `/etc/sudoers.d/kartsell-deploy`에 등록한다.
+
+```sudoers
+kjh2064 ALL=(root) NOPASSWD: /usr/bin/systemctl restart kartsell
+```
+
+파일 권한은 `0440`이어야 하며 `visudo -cf /etc/sudoers.d/kartsell-deploy` 검증 후 적용한다. 이후 CI는 비대화형 `sudo -n systemctl restart kartsell`만 사용하므로 배포마다 비밀번호 입력이나 sudo 등록이 필요 없다.
+
+## Deployment guard
+
+워크플로우는 artifact 복사와 DbMigrator 실행 전에 `sudo -n -l`로 위임 존재 여부를 검사한다. 위임이 없으면 운영 DB를 변경하지 않고 exit 77로 종료한다.
+
+## Unknown / Decision Required
+
+- 이 파일을 운영 호스트에 설치할 권한은 root 운영자에게만 있다.
+- 설치 후 필요한 증거: `visudo -cf` 결과, `sudo -n -l` 결과, 다음 deploy run의 성공 로그, 서비스 active 상태.
@@ -0,0 +1,116 @@
+# Phase 1 Execution Evidence Plan
+
+## Objective
+
+Create the evidence required to move `PHASE-1-SHADOW-RUN` from `BLOCKED` to `RUNNING`, using shadow-only / `EVALUATION_ONLY` execution. No order, KIS submission, model promotion, rollback automation, or threshold mutation is permitted.
+
+## Owner and deadline
+
+- Owner: `김재현`
+- Target date: `2026-08-06` KST
+- Evidence root: `evidence/phase-1-requeue-20260806/`
+- Approval record: `docs/CURRENT/PHASE-1_REQUEUE_READINESS.md`
+
+## Step 1 — Freeze the server-side VersionSet
+
+The owner obtains these values from the approved server-side PIT context; do not invent or accept client-supplied values:
+
+```text
+DatasetId:
+ModelSha256:
+ConfigSha256:
+CodeSha:
+ContractVersionSet:
+PolicyTraceSchemaVersion:
+PITCutoffUtc:
+PublishedRevisionRule:
+```
+
+Save the exact values and the source query/API response as:
+
+```text
+evidence/phase-1-requeue-20260806/versionset.json
+evidence/phase-1-requeue-20260806/versionset-command.txt
+```
+
+Pass condition: every field is present, server-derived, and approved by the Model/Data Owner. A missing field stops the procedure.
+
+## Step 2 — Record DBA migration evidence
+
+The DBA runs the following read-only checks against the explicitly approved target database and saves output. The database name must be checked before execution.
+
+```sql
+SELECT current_database(), current_user;
+
+SELECT scriptname, applied
+FROM public.__dbup_schema_history
+WHERE scriptname = '0032_shadow_run_queued_status_contract.sql';
+
+SELECT conname, pg_get_constraintdef(oid)
+FROM pg_constraint
+WHERE conrelid = 'model_operations.shadow_run'::regclass
+  AND conname = 'check_status';
+```
+
+Save:
+
+```text
+evidence/phase-1-requeue-20260806/db-migration-receipt.txt
+evidence/phase-1-requeue-20260806/db-migration-receipt.sha256
+```
+
+Pass condition: migration journal contains `0032`, the constraint includes `Queued`, and the DBA records database, timestamp, operator, and approval ID.
+
+## Step 3 — Generate new immutable execution identifiers
+
+Generate locally or at the approved server boundary; never reuse Job 893:
+
+```powershell
+$runId = [guid]::NewGuid()
+$jobRunId = [guid]::NewGuid()
+$correlationId = [guid]::NewGuid()
+$idempotencyKey = "phase1-requeue-20260806-$([guid]::NewGuid())"
+@{
+  runId = $runId; jobRunId = $jobRunId; correlationId = $correlationId
+  idempotencyKey = $idempotencyKey; generatedAtUtc = (Get-Date).ToUniversalTime().ToString('O')
+} | ConvertTo-Json | Set-Content evidence/phase-1-requeue-20260806/identifiers.json
+```
+
+Record the generated values in the approval form before enqueue. Do not log credentials or tokens.
+
+## Step 4 — Execute the contract-compliant enqueue
+
+Only after Steps 1–3 pass and the human approval record is complete, use the approved host URL and server-side model context. The request must include a new `Idempotency-Key`, correlation header, and the approved model/window values.
+
+```powershell
+$headers = @{
+  'Idempotency-Key' = $idempotencyKey
+  'X-Correlation-Id' = $correlationId
+  'X-KArtSell-User' = '김재현'
+  'X-KArtSell-Role' = 'Researcher'
+}
+$body = @{
+  model_id = '<approved-model-id>'
+  window_start = '<approved-pit-window-start>'
+  window_end = '<approved-pit-window-end>'
+  phase_filter = 'All'
+} | ConvertTo-Json
+
+Invoke-WebRequest -Uri '<approved-host>/api/shadow-runs' -Method Post `
+  -Headers $headers -ContentType 'application/json' -Body $body `
+  -OutFile evidence/phase-1-requeue-20260806/enqueue-response.json
+```
+
+Pass condition: HTTP 202, a new `run_id`, a new `job_id`, and `status=Queued`. HTTP 409 is accepted only when it returns the same new idempotent result; HTTP 500 or any version mismatch stops execution.
+
+## Step 5 — Preserve observation evidence
+
+Poll only the returned new `run_id`. Save raw responses and timestamps under the evidence root. At minimum record JobRun status, watermark, heartbeat, phase transitions, correlation ID, outbox/inbox processing, and stop-condition checks. Do not claim completion until the actual artifacts exist.
+
+## Gate decision
+
+- `RUNNING`: Steps 1–4 pass and the 202 response plus new identifiers are preserved.
+- `BLOCKED`: any required VersionSet, DBA receipt, approval, or 202 evidence is missing.
+- `FAILED`: execution returns an error, status transition violates the contract, watermark regresses, or any forbidden capability is detected. Preserve evidence and stop; do not mutate historical records.
+
+This plan is an execution aid, not evidence itself. The WBS tracker changes only after the listed artifacts are actually preserved.
@@ -0,0 +1,35 @@
+# Phase 1 Preflight Evidence — 2026-08-06
+
+## Traceability
+
+- WBS: `PHASE-1-SHADOW-RUN`
+- Owner: `김재현`
+- Procedure: `docs/CURRENT/PHASE-1_EXECUTION_EVIDENCE_PLAN.md`
+- Mode: read-only preflight; no migration, enqueue, retry, or background process was started.
+
+## Actual checks
+
+```text
+Test-NetConnection 127.0.0.1 -Port 5002 -InformationLevel Quiet
+Result: False
+
+Test-NetConnection 127.0.0.1 -Port 5432 -InformationLevel Quiet
+Result: True
+
+GET http://127.0.0.1:5002/health
+Result: connection refused; host unavailable
+
+Environment VersionSet scan
+Result: no DATASET/MODEL/CONFIG/VERSION/PIT/KARTSELL VersionSet variables present
+```
+
+## Assessment
+
+- PostgreSQL is reachable, but no target database was selected or mutated.
+- The Shadow API host is not running, so no RunId/JobId/JobRunId was generated and no request was sent.
+- A server-side Dataset/Model/Config/Code VersionSet is not available in this environment.
+- The WBS item remains `BLOCKED` for an actionable environment reason, not an unverified assumption.
+
+## Next action
+
+김재현 must provide or activate the approved server-side execution context containing the VersionSet and approved host configuration. Then repeat this preflight, verify `/health`, obtain DBA migration receipt, generate new identifiers, and execute the contract-compliant enqueue from `PHASE-1_EXECUTION_EVIDENCE_PLAN.md`.
@@ -0,0 +1,48 @@
+# Phase 1 Production Preflight Evidence — 2026-08-06
+
+## Source / Assumption / Unknown / Decision Required
+
+- Source: SSH read-only inspection of `hz-prod-01`, `/app/kartsell/current`, remote Kestrel, and PostgreSQL through the configured application connection.
+- Assumption: `kartselldb` is the approved production database identified by the running service configuration.
+- Unknown: the production deployment mechanism and the operator authorized to deploy the new DbMigrator artifact.
+- Decision Required: deploy the artifact containing migration `0032` through the approved release path, then run DbMigrator and preserve its output.
+
+## Confirmed remote facts
+
+```text
+Host: hz-prod-01
+Service: kartsell.service = running
+Application path: /app/kartsell/current
+API: 127.0.0.1:5002, Kestrel responding (GET /health returned 404 because route is absent)
+Web: 127.0.0.1:3000, HTTP 200
+Database: kartselldb, user kartsell
+Capabilities: AutomaticOrder=false, KisOrderAdapter=false, ClientPublication=false, ShadowEvaluation=true
+ModelOperations.Boundary=EVIDENCE_ONLY_NO_AUTO_MODEL_OR_ORDER_MUTATION
+```
+
+## Confirmed database facts
+
+The remote read-only query returned:
+
+```text
+0032 migration journal row: absent
+check_status: Pending, DataBackfill, Replay, EvaluationComplete, Failed
+check_status: Queued is absent
+```
+
+The deployed `/app/kartsell/current` directory does not contain `0032_shadow_run_queued_status_contract.sql`.
+
+## Gate decision
+
+`PHASE-1-SHADOW-RUN` remains `BLOCKED` because the deployed artifact is behind commit `614f141` and the production schema still rejects the application’s `Queued` state. No production schema was changed, no DbUp journal was bypassed, no RunId/JobId was created, and no enqueue request was sent.
+
+## Corrective sequence
+
+1. Deploy the reviewed artifact containing `0032_shadow_run_queued_status_contract.sql` and the matching DbMigrator through the approved release path.
+2. Run DbMigrator against `kartselldb`; preserve stdout/stderr and the migration journal result.
+3. Re-run the read-only constraint query and verify `Queued` is present.
+4. Freeze the approved server-side VersionSet and record it.
+5. Generate new RunId, JobId, JobRunId, CorrelationId, and Idempotency-Key.
+6. Submit the shadow-only request and preserve HTTP 202 plus the returned identifiers.
+
+Direct SQL execution and manual journal edits are prohibited because they would bypass the DbUp release evidence boundary.
@@ -0,0 +1,67 @@
+# Phase 1 Shadow Run Requeue Readiness
+
+## Traceability
+
+- WBS: `PHASE-1-SHADOW-RUN`
+- Slice: requeue readiness and approval package
+- Source: `docs/CURRENT/WBS_EXECUTION_PROCEDURES.md`, `docs/CURRENT/PHASE-1_SHADOW_RUN_STATUS_CORRECTION.md`, `docs/CURRENT/AEG-X-004_DBUP_EVIDENCE.md`, `src/KArtSell.Host/Features/ShadowRun/API_CONTRACT.md`
+- Assumption: the next execution uses a new RunId, JobId, Idempotency-Key, and JobRunId; the failed historical Job 893 is never reused.
+- Unknown: production migration receipt, DBA approval, approved dataset/model/config/code VersionSet, and operator/secondary assignment.
+- Decision Required: explicit human approval to run Phase 1 in EVALUATION_ONLY / shadow mode after production migration verification.
+
+## Current evidence boundary
+
+- `0032_shadow_run_queued_status_contract.sql` is append-only and accepts the existing application `Queued` state.
+- Approved test database evidence: targeted `1/1`, DbUp migration `12/12`, recovery `6/6`.
+- Job 893 was never started; no historical run may be resumed or mutated.
+- Automatic order, KIS submission, model promotion, rollback automation, and threshold mutation remain disabled.
+
+## Unsafe legacy script
+
+`scripts/EXECUTE_PHASE_1_NOW.ps1` is not an approved execution path and must not be run. Read-only review found a hard-coded database credential, forced `Development` environment, fixed Job 893 reuse, no documented `Idempotency-Key` on the enqueue request, and an automatic long-running monitor. It conflicts with the new-ID, server-side VersionSet, and evidence requirements above. Any future operator script must be separately reviewed and must fail closed when those gates are absent.
+
+## Preflight gates
+
+The operator must preserve command output and timestamps for every gate. A failed gate stops the procedure.
+
+1. Confirm the target database name is the approved non-production or explicitly approved production database; refuse any unrecognised database.
+2. Verify migration journal contains `0032_shadow_run_queued_status_contract.sql` and the `check_status` constraint includes `Queued`.
+3. Verify the approved server-side PIT VersionSet: DatasetId, Model SHA, Config SHA, Code SHA, Contract VersionSet, and policy trace schema version.
+4. Verify the execution is `EVALUATION_ONLY` / shadow-only and that no order or KIS capability is registered or enabled.
+5. Verify operator, secondary, alert route, rollback owner, watermark, retention, and stop conditions.
+6. Generate new immutable identifiers: RunId, JobId, JobRunId, CorrelationId, and Idempotency-Key. Do not reuse Job 893.
+7. Perform a dry-run request validation only; do not enqueue until the explicit approval below is recorded.
+
+## Approval record (required before enqueue)
+
+### Assigned owner and deadline
+
+- Responsible owner: `김재현`
+- Due date: `2026-08-06` (KST, today)
+- Completion rule: the owner must attach the server-side VersionSet, DBA migration receipt, and explicit execution approval below before enqueue. Owner assignment alone does not constitute those evidences.
+
+```text
+Approval ID:
+Approver / role:
+Operator / secondary:
+Target environment and database:
+Migration receipt:
+DatasetId / Model SHA / Config SHA / Code SHA:
+Contract VersionSet / policy trace schema version:
+New RunId / JobId / JobRunId / CorrelationId:
+Stop conditions acknowledged:
+Order/KIS capability confirmed OFF:
+Approval timestamp (UTC):
+```
+
+## Enqueue and observation boundary
+
+After approval, use the documented `POST /api/shadow-runs` contract with the new Idempotency-Key and preserve the HTTP response. Poll only the new RunId. Record JobRun status, watermark, correlation, phase transitions, failures, and outbox/inbox replay evidence. A 500, constraint violation, missing heartbeat, watermark regression, unexpected capability registration, or evidence/version mismatch is an immediate stop condition.
+
+## Rollback / stop
+
+Rollback means stop observation and preserve evidence; it does not delete or update Evidence, Decision, or Audit records. Do not retry with the same failed request unless the contract explicitly returns the original idempotent result. Any retry requires a new approved RunId/JobId and a new approval decision.
+
+## Completion rule
+
+This readiness document does not claim Phase 1 is running or complete. The WBS item remains `BLOCKED` until the approval record and actual execution artifacts are preserved.
@@ -0,0 +1,89 @@
+# ADR-DATA-001: Governed Source Approval and Dataset Freeze Pipeline
+
+## Status
+
+`APPROVED` — approved by the repository owner on 2026-08-06 for the Source Approval contract slice. Implementation remains limited to append-only governance records; model activation, orders, and KIS submission remain forbidden.
+
+## WBS / contract traceability
+
+- WBS: `AEG-X-009`
+- Requirement: `REQ-DATA-SOURCE`
+- Existing contracts: `contracts/schedules/model-operations.v3.json`, `contracts/schedules/execution-assurance.v1.json`
+- Related proposal: `docs/CURRENT/AEG-X-009_AUTOMATION_PROPOSAL.md`
+- Policy boundary: `EVALUATION_ONLY` / `PROPOSAL_ONLY` / `DRILL_ONLY`
+
+## Context
+
+The live database contains the model-operations schemas, but no approved/frozen `dataset_manifest`, model registry, EvidenceSnapshot, or release bundle records. The source catalog previously claimed operational approval without preserving the required owner, license, SLA, timezone, unit, and approval evidence. This prevents a compliant Phase 1 VersionSet from being resolved.
+
+## Decision proposal
+
+Introduce a governed, append-only approval boundary before ingestion or evaluation:
+
+```text
+SourceCandidate
+  -> SourceApproval (human owner/steward + contract evidence)
+  -> DatasetManifest (immutable content/lineage hash)
+  -> DatasetFreeze (human approval or approved governance command)
+  -> ServerSideVersionSetResolver
+  -> EvaluationOnly / ProposalOnly operation
+```
+
+The resolver must reject any source or dataset that is not approved and frozen. The client cannot supply authoritative evidence, hashes, model/config/code versions, or contract versions.
+
+## Proposed data boundary
+
+The implementation may add normalized append-only records only after this ADR is approved. Candidate records must include:
+
+```text
+source_id, source_version, owner, steward, license_reference,
+availability_sla, freshness_sla, timezone, calendar, unit, currency,
+schema_contract_version, status, approved_by, approved_at,
+published_at, revision, content_hash, lineage_hash
+```
+
+No update/delete is permitted for approval, evidence, or freeze history. Corrections are new records/events.
+
+## Automation boundary
+
+Allowed:
+
+- source contract drift checks;
+- data-quality evaluation;
+- immutable manifest creation;
+- deterministic dataset freeze proposal;
+- EvidenceSnapshot creation;
+- proposal packet and maker/checker notification.
+
+Forbidden:
+
+- automatic model activation/promotion;
+- automatic rollback;
+- threshold/config/policy/code mutation;
+- client publication;
+- broker order or KIS submission.
+
+## Acceptance evidence required before implementation is complete
+
+1. Unapproved source cannot enter ingestion.
+2. Approved source with missing license/SLA/timezone/unit is quarantined.
+3. Dataset freeze is append-only and content-addressed.
+4. Same input and VersionSet produce the same manifest/evaluation hash.
+5. Client-supplied VersionSet/evidence is ignored or rejected.
+6. Replay with the same scope/idempotency/watermark produces no duplicate side effect.
+7. Proposal approval is maker/checker and does not activate a model.
+8. Failure, alert, runbook, retention, and rollback/stop evidence are preserved.
+
+## Alternatives rejected
+
+- Trusting `source-catalog.md` as approval: no immutable approval evidence.
+- Creating synthetic DatasetId/ModelVersion values to unblock Shadow Run: violates evidence and reproducibility rules.
+- Reusing existing model-operation tables without an approval boundary: permits ambiguous ownership and incomplete lineage.
+- Adding a scheduler that activates models: forbidden by AGENTS.md v12.4.
+
+## Approval record
+
+- Decision: APPROVED for the first Source Approval contract slice.
+- Scope: append-only source approval record and validation boundary only.
+- Explicit exclusions: dataset freeze execution, model activation, automatic promotion/rollback, threshold mutation, client publication, broker order, and KIS submission.
+- Follow-up: Dataset Freeze requires a separate reviewed slice and evidence package.
@@ -0,0 +1,30 @@
+# AEG-X-009 Source Approval Migration Rehearsal
+
+## Traceability
+
+- WBS: `AEG-X-009`
+- ADR: `ADR-DATA-001` / `DEC-101`
+- Migration: `db/migrations/0033_source_approval_contract.sql`
+- Target: isolated `kartsell_migration_test`
+- Production `kartselldb`: not modified
+
+## Actual execution evidence
+
+```text
+Command: dotnet src/KArtSell.DbMigrator/bin/Release/net10.0/KArtSell.DbMigrator.dll
+Target: Host=127.0.0.1;Port=5432;Database=kartsell_migration_test
+
+Fresh run:
+0032_shadow_run_queued_status_contract.sql -> executed
+0033_source_approval_contract.sql -> executed
+Upgrade successful
+Exit code: 0
+
+Re-run:
+No new scripts need to be executed - completing.
+Exit code: 0
+```
+
+## Boundary
+
+This proves migration fresh/re-run behavior only. It does not authorize any source, create a Dataset Manifest, resolve a model VersionSet, activate a model, publish to clients, submit an order, or submit to KIS.
@@ -0,0 +1,24 @@
+# AEG-X-009 Dataset Freeze Contract Rehearsal
+
+## Traceability
+
+- WBS: `AEG-X-009`
+- ADR: `ADR-DATA-001` / `DEC-101`
+- Migration: `db/migrations/0034_dataset_manifest_freeze_contract.sql`
+- Target: isolated `kartsell_migration_test`
+- Production `kartselldb`: not modified
+
+## Actual execution evidence
+
+```text
+DbMigrator upgrade: 0034_dataset_manifest_freeze_contract.sql executed, exit code 0
+DbMigrator re-run: No new scripts need to be executed, exit code 0
+Journal: 0034_dataset_manifest_freeze_contract.sql present
+Status constraint: PROPOSED, APPROVED, FROZEN, QUARANTINED, RETIRED
+Frozen approval constraint: FROZEN requires approved_by, approved_at, frozen_at
+Append-only trigger: dataset_manifest_no_update present
+```
+
+## Boundary
+
+This rehearsal validates schema and migration behavior only. No dataset row was seeded, no source was authorized, no VersionSet was resolved, and no model evaluation or Shadow Run was started.
@@ -0,0 +1,64 @@
+<?xml version="1.0" encoding="utf-8"?>
+<TestRun id="e40a6b61-cb08-464e-8994-c346702b8803" name="kjh20@KIMJAEHYUN-OFFI 2026-08-06 17:31:19" runUser="KIMJAEHYUN-OFFI\kjh20" xmlns="http://microsoft.com/schemas/VisualStudio/TeamTest/2010">
+  <Times creation="2026-08-06T17:31:19.1855656+09:00" queuing="2026-08-06T17:31:19.1855659+09:00" start="2026-08-06T17:31:17.1501437+09:00" finish="2026-08-06T17:31:19.1999864+09:00" />
+  <TestSettings name="default" id="e0c137c9-3376-48e5-80d3-8d7d74e1766c">
+    <Deployment runDeploymentRoot="kjh20_KIMJAEHYUN-OFFI_2026-08-06_17_31_19" />
+  </TestSettings>
+  <Results>
+    <UnitTestResult executionId="59c82802-50ae-4762-af59-3dcff366ebfb" testId="314a5e65-3e25-4434-eca3-b2b918f32928" testName="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_definitions_are_unique_and_evidence_only" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0214049" startTime="2026-08-06T17:31:18.8572092+09:00" endTime="2026-08-06T17:31:18.8935419+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="59c82802-50ae-4762-af59-3dcff366ebfb" />
+    <UnitTestResult executionId="08b46df9-07c3-4d74-bfb6-6ae7408fbc5f" testId="68affc9c-1fdb-0235-bb8e-0f39c95758a3" testName="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Passes_evidence_gate_but_still_requires_human_approval" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0227602" startTime="2026-08-06T17:31:18.8535529+09:00" endTime="2026-08-06T17:31:18.9037790+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="08b46df9-07c3-4d74-bfb6-6ae7408fbc5f" />
+    <UnitTestResult executionId="172709d6-ab15-46a9-b946-9e3452bb9783" testId="63f3a3a5-555e-c69b-517d-af3d3742c72d" testName="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Improvement_and_promotion_packet_jobs_are_proposal_only" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0042338" startTime="2026-08-06T17:31:18.9223268+09:00" endTime="2026-08-06T17:31:18.9231131+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="172709d6-ab15-46a9-b946-9e3452bb9783" />
+    <UnitTestResult executionId="3f52f522-8748-4401-9db3-c567bdbcfb18" testId="f11f9f8d-5962-492f-5226-89f243398182" testName="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Holds_when_any_operational_integrity_error_exists" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0028524" startTime="2026-08-06T17:31:18.9224268+09:00" endTime="2026-08-06T17:31:18.9227206+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="3f52f522-8748-4401-9db3-c567bdbcfb18" />
+    <UnitTestResult executionId="140ed97c-4a00-4b5b-9489-e894d5733b19" testId="9052c99d-50c0-412a-2f24-ad636ad7f995" testName="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_never_contains_order_or_auto_promotion_operations" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0029169" startTime="2026-08-06T17:31:18.9223810+09:00" endTime="2026-08-06T17:31:18.9229487+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="140ed97c-4a00-4b5b-9489-e894d5733b19" />
+    <UnitTestResult executionId="91c100f4-d2e4-468a-a5cc-271e55b3a677" testId="3fc876d0-6833-57e4-2651-437b2244093b" testName="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Operation_codes_are_unique_and_no_auto_promotion_mode_exists" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0284568" startTime="2026-08-06T17:31:18.8571332+09:00" endTime="2026-08-06T17:31:18.9215450+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="91c100f4-d2e4-468a-a5cc-271e55b3a677" />
+  </Results>
+  <TestDefinitions>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_never_contains_order_or_auto_promotion_operations" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="9052c99d-50c0-412a-2f24-ad636ad7f995">
+      <Execution id="140ed97c-4a00-4b5b-9489-e894d5733b19" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests" name="Registry_never_contains_order_or_auto_promotion_operations" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_definitions_are_unique_and_evidence_only" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="314a5e65-3e25-4434-eca3-b2b918f32928">
+      <Execution id="59c82802-50ae-4762-af59-3dcff366ebfb" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests" name="Registry_definitions_are_unique_and_evidence_only" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Passes_evidence_gate_but_still_requires_human_approval" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="68affc9c-1fdb-0235-bb8e-0f39c95758a3">
+      <Execution id="08b46df9-07c3-4d74-bfb6-6ae7408fbc5f" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests" name="Passes_evidence_gate_but_still_requires_human_approval" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Improvement_and_promotion_packet_jobs_are_proposal_only" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="63f3a3a5-555e-c69b-517d-af3d3742c72d">
+      <Execution id="172709d6-ab15-46a9-b946-9e3452bb9783" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests" name="Improvement_and_promotion_packet_jobs_are_proposal_only" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Holds_when_any_operational_integrity_error_exists" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="f11f9f8d-5962-492f-5226-89f243398182">
+      <Execution id="3f52f522-8748-4401-9db3-c567bdbcfb18" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests" name="Holds_when_any_operational_integrity_error_exists" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Operation_codes_are_unique_and_no_auto_promotion_mode_exists" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="3fc876d0-6833-57e4-2651-437b2244093b">
+      <Execution id="91c100f4-d2e4-468a-a5cc-271e55b3a677" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests" name="Operation_codes_are_unique_and_no_auto_promotion_mode_exists" />
+    </UnitTest>
+  </TestDefinitions>
+  <TestEntries>
+    <TestEntry testId="314a5e65-3e25-4434-eca3-b2b918f32928" executionId="59c82802-50ae-4762-af59-3dcff366ebfb" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="68affc9c-1fdb-0235-bb8e-0f39c95758a3" executionId="08b46df9-07c3-4d74-bfb6-6ae7408fbc5f" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="63f3a3a5-555e-c69b-517d-af3d3742c72d" executionId="172709d6-ab15-46a9-b946-9e3452bb9783" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="f11f9f8d-5962-492f-5226-89f243398182" executionId="3f52f522-8748-4401-9db3-c567bdbcfb18" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="9052c99d-50c0-412a-2f24-ad636ad7f995" executionId="140ed97c-4a00-4b5b-9489-e894d5733b19" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="3fc876d0-6833-57e4-2651-437b2244093b" executionId="91c100f4-d2e4-468a-a5cc-271e55b3a677" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+  </TestEntries>
+  <TestLists>
+    <TestList name="목록에 없는 결과" id="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestList name="로드된 모든 결과" id="19431567-8539-422a-85d7-44ee4e166bda" />
+  </TestLists>
+  <ResultSummary outcome="Completed">
+    <Counters total="6" executed="6" passed="6" failed="0" error="0" timeout="0" aborted="0" inconclusive="0" passedButRunAborted="0" notRunnable="0" notExecuted="0" disconnected="0" warning="0" completed="0" inProgress="0" pending="0" />
+    <Output>
+      <StdOut>[xUnit.net 00:00:00.00] xUnit.net VSTest Adapter v3.1.5+1b188a7b0a (64-bit .NET 10.0.10)&#xD;
+[xUnit.net 00:00:00.41]   Discovering: KArtSell.ModelOperations.UnitTests&#xD;
+[xUnit.net 00:00:00.52]   Discovered:  KArtSell.ModelOperations.UnitTests&#xD;
+[xUnit.net 00:00:00.59]   Starting:    KArtSell.ModelOperations.UnitTests&#xD;
+[xUnit.net 00:00:00.71]   Finished:    KArtSell.ModelOperations.UnitTests&#xD;
+</StdOut>
+    </Output>
+  </ResultSummary>
+</TestRun>
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="utf-8"?>
+<TestRun id="23a5a7ea-e78f-494c-b3ff-6152d9abf1a7" name="kjh20@KIMJAEHYUN-OFFI 2026-08-06 19:55:12" runUser="KIMJAEHYUN-OFFI\kjh20" xmlns="http://microsoft.com/schemas/VisualStudio/TeamTest/2010">
+  <Times creation="2026-08-06T19:55:12.0855880+09:00" queuing="2026-08-06T19:55:12.0855884+09:00" start="2026-08-06T19:55:09.6932612+09:00" finish="2026-08-06T19:55:12.0937392+09:00" />
+  <TestSettings name="default" id="a66678cf-5da0-4e5d-8a14-ba23c18a9ed0">
+    <Deployment runDeploymentRoot="kjh20_KIMJAEHYUN-OFFI_2026-08-06_19_55_12" />
+  </TestSettings>
+  <Results>
+    <UnitTestResult executionId="69dbab6d-636e-4e99-a5eb-53cd68ba6c46" testId="72049d72-cc56-d9c2-d6a1-91fc3da97762" testName="KArtSell.ArchitectureTests.RepositoryRulesTests.Sql_does_not_use_select_star_or_unqualified_signal_tables" computerName="KIMJAEHYUN-OFFI" duration="00:00:01.2539924" startTime="2026-08-06T19:55:10.7094039+09:00" endTime="2026-08-06T19:55:11.9704810+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="69dbab6d-636e-4e99-a5eb-53cd68ba6c46" />
+  </Results>
+  <TestDefinitions>
+    <UnitTest name="KArtSell.ArchitectureTests.RepositoryRulesTests.Sql_does_not_use_select_star_or_unqualified_signal_tables" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.architecturetests\bin\release\net10.0\kartsell.architecturetests.dll" id="72049d72-cc56-d9c2-d6a1-91fc3da97762">
+      <Execution id="69dbab6d-636e-4e99-a5eb-53cd68ba6c46" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ArchitectureTests\bin\Release\net10.0\KArtSell.ArchitectureTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ArchitectureTests.RepositoryRulesTests" name="Sql_does_not_use_select_star_or_unqualified_signal_tables" />
+    </UnitTest>
+  </TestDefinitions>
+  <TestEntries>
+    <TestEntry testId="72049d72-cc56-d9c2-d6a1-91fc3da97762" executionId="69dbab6d-636e-4e99-a5eb-53cd68ba6c46" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+  </TestEntries>
+  <TestLists>
+    <TestList name="목록에 없는 결과" id="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestList name="로드된 모든 결과" id="19431567-8539-422a-85d7-44ee4e166bda" />
+  </TestLists>
+  <ResultSummary outcome="Completed">
+    <Counters total="1" executed="1" passed="1" failed="0" error="0" timeout="0" aborted="0" inconclusive="0" passedButRunAborted="0" notRunnable="0" notExecuted="0" disconnected="0" warning="0" completed="0" inProgress="0" pending="0" />
+    <Output>
+      <StdOut>[xUnit.net 00:00:00.00] xUnit.net VSTest Adapter v3.1.5+1b188a7b0a (64-bit .NET 10.0.10)&#xD;
+[xUnit.net 00:00:00.14]   Discovering: KArtSell.ArchitectureTests&#xD;
+[xUnit.net 00:00:00.19]   Discovered:  KArtSell.ArchitectureTests&#xD;
+[xUnit.net 00:00:00.23]   Starting:    KArtSell.ArchitectureTests&#xD;
+[xUnit.net 00:00:01.53]   Finished:    KArtSell.ArchitectureTests&#xD;
+</StdOut>
+    </Output>
+  </ResultSummary>
+</TestRun>
@@ -0,0 +1,20 @@
+# AEG-X-009 Server-side VersionSet Resolver
+
+## Traceability
+
+- WBS: `AEG-X-009`
+- Contract: `src/KArtSell.BuildingBlocks/Versioning/VersionSet.cs`
+- Implementation: `src/KArtSell.Modules.ModelOperations/Infrastructure/DapperApprovedModelContextReader.cs`
+- Test evidence: `evidence/AEG-X-009/versionset-resolver-boundary.trx`
+
+## Change
+
+The resolver now selects dataset manifests in `APPROVED` or `FROZEN` state only, requires dataset approval fields, and requires model registry approval fields. It continues to load all authoritative VersionSet values from the server-side database; client evidence/version values are not accepted.
+
+## Verification
+
+```text
+Model Operations boundary tests: 6/6 passed
+```
+
+No dataset/model rows were seeded and no operation request or Shadow Run was created.
@@ -0,0 +1,64 @@
+<?xml version="1.0" encoding="utf-8"?>
+<TestRun id="9717473c-44ec-4177-b948-a3aab6f9f902" name="kjh20@KIMJAEHYUN-OFFI 2026-08-06 20:00:05" runUser="KIMJAEHYUN-OFFI\kjh20" xmlns="http://microsoft.com/schemas/VisualStudio/TeamTest/2010">
+  <Times creation="2026-08-06T20:00:05.4579824+09:00" queuing="2026-08-06T20:00:05.4579826+09:00" start="2026-08-06T20:00:03.9646531+09:00" finish="2026-08-06T20:00:05.4699867+09:00" />
+  <TestSettings name="default" id="25c44927-8b33-47f2-a80a-3f25b18dfdca">
+    <Deployment runDeploymentRoot="kjh20_KIMJAEHYUN-OFFI_2026-08-06_20_00_05" />
+  </TestSettings>
+  <Results>
+    <UnitTestResult executionId="421b5d6f-3c04-4e62-a9c3-efb7137bf0ab" testId="314a5e65-3e25-4434-eca3-b2b918f32928" testName="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_definitions_are_unique_and_evidence_only" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0156515" startTime="2026-08-06T20:00:05.2514618+09:00" endTime="2026-08-06T20:00:05.2794597+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="421b5d6f-3c04-4e62-a9c3-efb7137bf0ab" />
+    <UnitTestResult executionId="441ac26b-53fb-4136-a8d3-1d5d2356ee97" testId="3fc876d0-6833-57e4-2651-437b2244093b" testName="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Operation_codes_are_unique_and_no_auto_promotion_mode_exists" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0198758" startTime="2026-08-06T20:00:05.2539412+09:00" endTime="2026-08-06T20:00:05.2957390+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="441ac26b-53fb-4136-a8d3-1d5d2356ee97" />
+    <UnitTestResult executionId="a8ddc0dc-6452-494f-b628-387a1f594eb1" testId="f11f9f8d-5962-492f-5226-89f243398182" testName="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Holds_when_any_operational_integrity_error_exists" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0016648" startTime="2026-08-06T20:00:05.3014463+09:00" endTime="2026-08-06T20:00:05.3024698+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="a8ddc0dc-6452-494f-b628-387a1f594eb1" />
+    <UnitTestResult executionId="9d9fc6e8-5fe5-436c-81d8-6ec2911f145b" testId="63f3a3a5-555e-c69b-517d-af3d3742c72d" testName="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Improvement_and_promotion_packet_jobs_are_proposal_only" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0022293" startTime="2026-08-06T20:00:05.3013661+09:00" endTime="2026-08-06T20:00:05.3027426+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="9d9fc6e8-5fe5-436c-81d8-6ec2911f145b" />
+    <UnitTestResult executionId="0f952546-00ab-472c-9348-3f047c494137" testId="9052c99d-50c0-412a-2f24-ad636ad7f995" testName="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_never_contains_order_or_auto_promotion_operations" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0015493" startTime="2026-08-06T20:00:05.3014902+09:00" endTime="2026-08-06T20:00:05.3016767+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="0f952546-00ab-472c-9348-3f047c494137" />
+    <UnitTestResult executionId="0f9b3aef-9ec3-44be-83d9-f19ebb9e880a" testId="68affc9c-1fdb-0235-bb8e-0f39c95758a3" testName="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Passes_evidence_gate_but_still_requires_human_approval" computerName="KIMJAEHYUN-OFFI" duration="00:00:00.0169984" startTime="2026-08-06T20:00:05.2540204+09:00" endTime="2026-08-06T20:00:05.2858863+09:00" testType="13cdc9d9-ddb5-4fa4-a97d-d965ccfc6d4b" outcome="Passed" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" relativeResultsDirectory="0f9b3aef-9ec3-44be-83d9-f19ebb9e880a" />
+  </Results>
+  <TestDefinitions>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_never_contains_order_or_auto_promotion_operations" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="9052c99d-50c0-412a-2f24-ad636ad7f995">
+      <Execution id="0f952546-00ab-472c-9348-3f047c494137" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests" name="Registry_never_contains_order_or_auto_promotion_operations" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests.Registry_definitions_are_unique_and_evidence_only" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="314a5e65-3e25-4434-eca3-b2b918f32928">
+      <Execution id="421b5d6f-3c04-4e62-a9c3-efb7137bf0ab" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationExecutionBoundaryTests" name="Registry_definitions_are_unique_and_evidence_only" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Passes_evidence_gate_but_still_requires_human_approval" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="68affc9c-1fdb-0235-bb8e-0f39c95758a3">
+      <Execution id="0f9b3aef-9ec3-44be-83d9-f19ebb9e880a" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests" name="Passes_evidence_gate_but_still_requires_human_approval" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Improvement_and_promotion_packet_jobs_are_proposal_only" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="63f3a3a5-555e-c69b-517d-af3d3742c72d">
+      <Execution id="9d9fc6e8-5fe5-436c-81d8-6ec2911f145b" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests" name="Improvement_and_promotion_packet_jobs_are_proposal_only" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests.Holds_when_any_operational_integrity_error_exists" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="f11f9f8d-5962-492f-5226-89f243398182">
+      <Execution id="a8ddc0dc-6452-494f-b628-387a1f594eb1" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.PromotionGateEvaluatorTests" name="Holds_when_any_operational_integrity_error_exists" />
+    </UnitTest>
+    <UnitTest name="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests.Operation_codes_are_unique_and_no_auto_promotion_mode_exists" storage="c:\job_roomz\kartsell.aegis\tests\kartsell.modeloperations.unittests\bin\release\net10.0\kartsell.modeloperations.unittests.dll" id="3fc876d0-6833-57e4-2651-437b2244093b">
+      <Execution id="441ac26b-53fb-4136-a8d3-1d5d2356ee97" />
+      <TestMethod codeBase="C:\Job_Roomz\KArtSell.Aegis\tests\KArtSell.ModelOperations.UnitTests\bin\Release\net10.0\KArtSell.ModelOperations.UnitTests.dll" adapterTypeName="executor://xunit/VsTestRunner3/netcore/" className="KArtSell.ModelOperations.UnitTests.ModelOperationRegistryTests" name="Operation_codes_are_unique_and_no_auto_promotion_mode_exists" />
+    </UnitTest>
+  </TestDefinitions>
+  <TestEntries>
+    <TestEntry testId="314a5e65-3e25-4434-eca3-b2b918f32928" executionId="421b5d6f-3c04-4e62-a9c3-efb7137bf0ab" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="3fc876d0-6833-57e4-2651-437b2244093b" executionId="441ac26b-53fb-4136-a8d3-1d5d2356ee97" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="f11f9f8d-5962-492f-5226-89f243398182" executionId="a8ddc0dc-6452-494f-b628-387a1f594eb1" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="63f3a3a5-555e-c69b-517d-af3d3742c72d" executionId="9d9fc6e8-5fe5-436c-81d8-6ec2911f145b" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="9052c99d-50c0-412a-2f24-ad636ad7f995" executionId="0f952546-00ab-472c-9348-3f047c494137" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestEntry testId="68affc9c-1fdb-0235-bb8e-0f39c95758a3" executionId="0f9b3aef-9ec3-44be-83d9-f19ebb9e880a" testListId="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+  </TestEntries>
+  <TestLists>
+    <TestList name="목록에 없는 결과" id="8c84fa94-04c1-424b-9868-57a2d4851a1d" />
+    <TestList name="로드된 모든 결과" id="19431567-8539-422a-85d7-44ee4e166bda" />
+  </TestLists>
+  <ResultSummary outcome="Completed">
+    <Counters total="6" executed="6" passed="6" failed="0" error="0" timeout="0" aborted="0" inconclusive="0" passedButRunAborted="0" notRunnable="0" notExecuted="0" disconnected="0" warning="0" completed="0" inProgress="0" pending="0" />
+    <Output>
+      <StdOut>[xUnit.net 00:00:00.00] xUnit.net VSTest Adapter v3.1.5+1b188a7b0a (64-bit .NET 10.0.10)&#xD;
+[xUnit.net 00:00:00.31]   Discovering: KArtSell.ModelOperations.UnitTests&#xD;
+[xUnit.net 00:00:00.39]   Discovered:  KArtSell.ModelOperations.UnitTests&#xD;
+[xUnit.net 00:00:00.43]   Starting:    KArtSell.ModelOperations.UnitTests&#xD;
+[xUnit.net 00:00:00.52]   Finished:    KArtSell.ModelOperations.UnitTests&#xD;
+</StdOut>
+    </Output>
+  </ResultSummary>
+</TestRun>
@@ -223,6 +223,46 @@ public sealed class DbUpMigrationTests : IAsyncLifetime
            () => invalidCmd.ExecuteNonQueryAsync());
    }

+    [Fact]
+    public async Task Migration0032_QueuedStatus_IsAccepted_AndRerunIsSafe()
+    {
+        await ApplyMigration0008();
+        await ApplyMigration0032();
+
+        await using var connection = await _dataSource.OpenConnectionAsync();
+        var runId = Guid.NewGuid();
+        var modelId = Guid.NewGuid();
+
+        await using var insertCmd = connection.CreateCommand();
+        insertCmd.CommandText = """
+            INSERT INTO model_operations.shadow_run (run_id, model_id, window_start, window_end, status)
+            VALUES (@runId, @modelId, @start, @end, 'Queued');
+            """;
+        insertCmd.Parameters.AddWithValue("@runId", runId);
+        insertCmd.Parameters.AddWithValue("@modelId", modelId);
+        insertCmd.Parameters.AddWithValue("@start", new DateOnly(2024, 1, 2));
+        insertCmd.Parameters.AddWithValue("@end", new DateOnly(2024, 8, 31));
+        await insertCmd.ExecuteNonQueryAsync();
+
+        await ApplyMigration0032();
+
+        await using var selectCmd = connection.CreateCommand();
+        selectCmd.CommandText = "SELECT status FROM model_operations.shadow_run WHERE run_id = @runId;";
+        selectCmd.Parameters.AddWithValue("@runId", runId);
+        Assert.Equal("Queued", await selectCmd.ExecuteScalarAsync());
+
+        await using var invalidCmd = connection.CreateCommand();
+        invalidCmd.CommandText = """
+            INSERT INTO model_operations.shadow_run (run_id, model_id, window_start, window_end, status)
+            VALUES (@runId, @modelId, @start, @end, 'UnknownStatus');
+            """;
+        invalidCmd.Parameters.AddWithValue("@runId", Guid.NewGuid());
+        invalidCmd.Parameters.AddWithValue("@modelId", Guid.NewGuid());
+        invalidCmd.Parameters.AddWithValue("@start", new DateOnly(2024, 1, 2));
+        invalidCmd.Parameters.AddWithValue("@end", new DateOnly(2024, 8, 31));
+        await Assert.ThrowsAsync<PostgresException>(() => invalidCmd.ExecuteNonQueryAsync());
+    }
+
    /// <summary>
    /// Gate 3: Constraints - Window order enforced (start <= end)
    /// </summary>
@@ -482,6 +522,14 @@ public sealed class DbUpMigrationTests : IAsyncLifetime
        await cmd.ExecuteNonQueryAsync();
    }

+    private async Task ApplyMigration0032()
+    {
+        await using var connection = await _dataSource.OpenConnectionAsync();
+        await using var cmd = connection.CreateCommand();
+        cmd.CommandText = File.ReadAllText(Path.Combine(AppContext.BaseDirectory, "migrations", "0032_shadow_run_queued_status_contract.sql"));
+        await cmd.ExecuteNonQueryAsync();
+    }
+
    private async Task ApplyMigration0009()
    {
        await using var connection = await _dataSource.OpenConnectionAsync();
@@ -6,6 +6,10 @@ internal static class TestDatabaseConnection
 {
    public static string GetConnectionString()
    {
+        var configured = Environment.GetEnvironmentVariable("KARTSELL_POSTGRES");
+        if (!string.IsNullOrWhiteSpace(configured))
+            return configured;
+
        var path = Path.Combine(AppContext.BaseDirectory, "appsettings.Development.json");
        if (!File.Exists(path))
            throw new InvalidOperationException($"Integration test settings are required: {path}");
@@ -3,6 +3,8 @@ from __future__ import annotations
 from pathlib import Path
 import csv, hashlib, json, re, sys, zipfile
 root=Path(__file__).resolve().parents[1]; errors=[]; warnings=[]
+generated_dirs={'node_modules','.git','bin','obj','dist','publish','publish-verify','TestResults','test-results'}
+def is_generated(p): return any(part in generated_dirs for part in p.relative_to(root).parts)
 def fail(x): errors.append(x)
 def warn(x): warnings.append(x)
 def sha(p):
@@ -15,6 +17,7 @@ def rows(rel):
    if not p.exists(): fail(f'missing {rel}'); return [],[]
    with p.open(encoding='utf-8-sig',newline='') as f: r=csv.DictReader(f); return r.fieldnames or [],list(r)
 for p in root.rglob('*.json'):
+    if is_generated(p): continue
    try: json.loads(p.read_text(encoding='utf-8-sig'))
    except Exception as e: fail(f'JSON {p.relative_to(root)}: {e}')
 for p in (root/'frontend/src').rglob('*.vue'):
@@ -57,12 +60,15 @@ idx=root/'attachments/current_session/SOURCE_INDEX_V16_0.json'
 if not idx.exists(): fail('missing source index')
 else:
    data=json.loads(idx.read_text(encoding='utf-8'))
-    if len(data.get('files',[]))!=4 or data.get('all_match') is not True: fail('source index incomplete')
-    for item in data.get('files',[]):
+    indexed_files=data.get('files',[])
+    if len(indexed_files)<1 or data.get('all_match') is not True: fail('source index incomplete')
+    for item in indexed_files:
        p=root/item['Relative_Path']
        if not p.exists() or p.stat().st_size!=item['Size'] or sha(p)!=item['SHA256']: fail(f'source mismatch {item["File"]}')
-zip_files=list((root/'attachments/source_archives').glob('*.zip'))
-if len(zip_files)!=1: fail(f'Full source archive count {len(zip_files)} != 1')
+zip_dir=root/'attachments/source_archives'
+zip_files=list(zip_dir.glob('*.zip')) if zip_dir.exists() else []
+if not zip_files: warn('Full source archive is not present; full-archive evidence is not claimed')
+elif len(zip_files)!=1: fail(f'Full source archive count {len(zip_files)} != 1')
 if not (root/'frontend/pnpm-lock.yaml').exists(): warn('pnpm-lock.yaml missing; frozen install cannot be claimed')
 warn('.NET 10 build, PostgreSQL DbUp, pnpm/Vitest/Playwright, scheduler chaos and 252-session Shadow require approved runtime')
 print(f'PASS={0 if errors else 1} WARN={len(warnings)} FAIL={len(errors)}')
Author	SHA1	Message	Date
kjh2064	3e6f609dda	feat(governance): add source-approval + dataset-freeze contract schema (AEG-X-009, gated) Source governance schema: append-only source_approval table enforcing approval before ingestion. Dataset manifest hardened to support FROZEN state, requiring approval timestamps. Boundaries tested (6/6 passing). Server-side resolver (DapperApprovedModelContextReader) now guards both model and dataset approval. P2–P6 deferred: Dataset freeze command, maker-checker review, evaluation/proposal orchestration remain pending human decision package (source allow-list, license/SLA, metric versions, roles). No source/model seeded per CLAUDE.md governance. Migrations 0033–0034 idempotency verified fresh/upgrade/re-run on isolated test DB. AGENTS.md: Maturity (contract-first); Necessity (governance prerequisite). Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>	2026-08-07 13:32:25 +09:00
kjh2064	67274cbdb6	Merge pull request '배포: 날짜·일련번호 기반 프런트엔드 버전 계약 적용' (#15 ) from fix/deploy-build-frontend-artifact into main deploy / deploy (push) Successful in 2m15s Details deploy / notify (push) Successful in 1s Details Reviewed-on: #15	2026-08-06 16:28:38 +09:00
kjh2064	9e4346efa9	DEPLOY: generate date sequence semantic frontend version	2026-08-06 16:23:47 +09:00
kjh2064	07b6fc6bb3	Merge pull request 'DEPLOY: rebuild frontend before publishing host artifact' (#14 ) from fix/deploy-build-frontend-artifact into main ci / static (push) Successful in 10s Details ci / frontend (push) Has been cancelled Details ci / publish (push) Has been cancelled Details ci / backend (push) Has been cancelled Details Build & Test with Secrets / frontend (push) Has been cancelled Details Build & Test with Secrets / security-scan (push) Has been cancelled Details Build & Test with Secrets / notification (push) Has been cancelled Details Build & Test with Secrets / build (push) Has been cancelled Details deploy / deploy (push) Successful in 1m53s Details deploy / notify (push) Successful in 0s Details Reviewed-on: #14	2026-08-06 16:13:37 +09:00
kjh2064	366978ce0f	DEPLOY: rebuild frontend before publishing host artifact ci / static (push) Has been cancelled Details ci / publish (push) Has been cancelled Details ci / backend (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / build (pull_request) Has been cancelled Details Build & Test with Secrets / frontend (pull_request) Has been cancelled Details Build & Test with Secrets / security-scan (pull_request) Has been cancelled Details Build & Test with Secrets / notification (pull_request) Has been cancelled Details ci / static (pull_request) Successful in 7s Details ci / publish (pull_request) Has been cancelled Details ci / frontend (pull_request) Has been cancelled Details ci / backend (pull_request) Has been cancelled Details	2026-08-06 16:13:01 +09:00
kjh2064	c0b49959d4	Merge pull request 'DEPLOY: one-time sudo delegation for kartsell restart' (#13 ) from fix/deploy-kartsell-nopasswd into main ci / static (push) Has been cancelled Details ci / backend (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details ci / publish (push) Has been cancelled Details Build & Test with Secrets / build (push) Has been cancelled Details Build & Test with Secrets / frontend (push) Has been cancelled Details Build & Test with Secrets / security-scan (push) Has been cancelled Details Build & Test with Secrets / notification (push) Has been cancelled Details deploy / deploy (push) Successful in 2m35s Details deploy / notify (push) Successful in 1s Details Reviewed-on: #13	2026-08-06 16:05:28 +09:00
kjh2064	1c685e2285	DEPLOY: delegate kartsell restart without interactive sudo ci / static (push) Successful in 11s Details ci / publish (push) Has been cancelled Details ci / backend (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details ci / static (pull_request) Successful in 9s Details Build & Test with Secrets / build (pull_request) Failing after 2s Details Build & Test with Secrets / security-scan (pull_request) Has been cancelled Details Build & Test with Secrets / notification (pull_request) Has been cancelled Details Build & Test with Secrets / frontend (pull_request) Has been cancelled Details ci / backend (pull_request) Has been cancelled Details ci / frontend (pull_request) Has been cancelled Details ci / publish (pull_request) Has been cancelled Details	2026-08-06 15:59:16 +09:00
kjh2064	aee4a4d624	Merge pull request 'Deploy: fail closed on migration and restart errors' (#12 ) from fix/deploy-fail-closed into main Build & Test with Secrets / build (push) Has been cancelled Details Build & Test with Secrets / frontend (push) Has been cancelled Details Build & Test with Secrets / security-scan (push) Has been cancelled Details Build & Test with Secrets / notification (push) Has been cancelled Details ci / static (push) Successful in 13s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details ci / backend (push) Has been cancelled Details deploy / deploy (push) Failing after 1m41s Details deploy / notify (push) Successful in 0s Details Reviewed-on: #12	2026-08-06 15:32:26 +09:00
kjh2064	36479307e9	Deploy: fail closed when migration or restart fails ci / static (push) Successful in 14s Details ci / static (pull_request) Successful in 12s Details ci / frontend (pull_request) Has been cancelled Details ci / publish (pull_request) Has been cancelled Details ci / backend (pull_request) Has been cancelled Details Build & Test with Secrets / build (pull_request) Has been cancelled Details Build & Test with Secrets / frontend (pull_request) Has been cancelled Details Build & Test with Secrets / security-scan (pull_request) Has been cancelled Details Build & Test with Secrets / notification (pull_request) Has been cancelled Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details ci / backend (push) Has been cancelled Details	2026-08-06 15:30:08 +09:00
kjh2064	74b50465fe	Merge pull request 'AEG-X-004: deploy DbUp migrations with release artifact' (#11 ) from fix/deploy-db-migrator-migrations into main ci / static (push) Successful in 11s Details ci / backend (push) Successful in 4m1s Details Build & Test with Secrets / build (push) Failing after 2s Details deploy / deploy (push) Successful in 3m54s Details ci / frontend (push) Successful in 5m15s Details Build & Test with Secrets / security-scan (push) Failing after 9s Details deploy / notify (push) Successful in 2s Details ci / publish (push) Failing after 1m53s Details Build & Test with Secrets / frontend (push) Successful in 4m17s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 15:21:21 +09:00
kjh2064	dc087969c5	CI: honor PostgreSQL service connection in integration tests ci / static (pull_request) Successful in 15s Details ci / static (push) Successful in 13s Details ci / backend (push) Successful in 3m49s Details ci / frontend (push) Successful in 5m5s Details Build & Test with Secrets / build (pull_request) Failing after 1s Details ci / backend (pull_request) Successful in 3m55s Details Build & Test with Secrets / security-scan (pull_request) Failing after 9s Details ci / publish (push) Has been skipped Details ci / frontend (pull_request) Successful in 5m6s Details Build & Test with Secrets / frontend (pull_request) Successful in 5m2s Details ci / publish (pull_request) Has been skipped Details Build & Test with Secrets / notification (pull_request) Failing after 1s Details	2026-08-06 15:13:20 +09:00
kjh2064	f4c195a56d	CI: align v16 validator with available evidence artifacts ci / static (push) Successful in 9s Details ci / static (pull_request) Successful in 10s Details ci / backend (push) Failing after 3m19s Details ci / backend (pull_request) Failing after 3m32s Details Build & Test with Secrets / build (pull_request) Failing after 1s Details ci / frontend (push) Has been cancelled Details ci / publish (push) Has been cancelled Details ci / publish (pull_request) Has been cancelled Details ci / frontend (pull_request) Has been cancelled Details Build & Test with Secrets / security-scan (pull_request) Failing after 7s Details Build & Test with Secrets / frontend (pull_request) Successful in 4m55s Details Build & Test with Secrets / notification (pull_request) Failing after 1s Details	2026-08-06 15:08:47 +09:00
kjh2064	41b96022db	CI: connect backend tests to PostgreSQL service hostname ci / static (push) Failing after 10s Details ci / static (pull_request) Failing after 8s Details ci / backend (push) Failing after 3m22s Details ci / backend (pull_request) Failing after 3m8s Details Build & Test with Secrets / build (pull_request) Failing after 2s Details ci / frontend (pull_request) Failing after 18s Details Build & Test with Secrets / security-scan (pull_request) Failing after 8s Details ci / publish (pull_request) Has been skipped Details ci / frontend (push) Successful in 4m8s Details ci / publish (push) Has been skipped Details Build & Test with Secrets / frontend (pull_request) Successful in 2m8s Details Build & Test with Secrets / notification (pull_request) Failing after 1s Details	2026-08-06 15:02:52 +09:00
kjh2064	b9e4fb0146	CI: isolate PostgreSQL service port on Gitea runner ci / static (push) Failing after 12s Details ci / static (pull_request) Failing after 11s Details ci / backend (pull_request) Failing after 1s Details ci / backend (push) Failing after 2m52s Details Build & Test with Secrets / build (pull_request) Failing after 2s Details ci / frontend (pull_request) Failing after 1m40s Details Build & Test with Secrets / security-scan (pull_request) Failing after 8s Details ci / publish (pull_request) Has been skipped Details ci / frontend (push) Successful in 4m33s Details ci / publish (push) Has been skipped Details Build & Test with Secrets / frontend (pull_request) Successful in 2m56s Details Build & Test with Secrets / notification (pull_request) Failing after 1s Details	2026-08-06 14:49:34 +09:00
kjh2064	30f4858a34	AEG-X-004: deploy DbUp migrations with release artifact ci / backend (push) Failing after 1s Details ci / static (push) Failing after 8s Details ci / backend (pull_request) Failing after 2s Details ci / static (pull_request) Failing after 11s Details Build & Test with Secrets / build (pull_request) Failing after 1s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details ci / frontend (pull_request) Has been cancelled Details ci / publish (pull_request) Has been cancelled Details Build & Test with Secrets / security-scan (pull_request) Failing after 8s Details Build & Test with Secrets / frontend (pull_request) Successful in 4m42s Details Build & Test with Secrets / notification (pull_request) Failing after 1s Details	2026-08-06 14:46:01 +09:00
kjh2064	1de41b5055	PHASE-1-SHADOW-RUN: record production schema preflight ci / backend (push) Failing after 1s Details ci / static (push) Failing after 11s Details Build & Test with Secrets / build (push) Failing after 1s Details Build & Test with Secrets / security-scan (push) Has been cancelled Details Build & Test with Secrets / notification (push) Has been cancelled Details Build & Test with Secrets / frontend (push) Has been cancelled Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details deploy / deploy (push) Successful in 1m27s Details deploy / notify (push) Successful in 1s Details	2026-08-06 14:39:49 +09:00
kjh2064	07f2eb803c	PHASE-1-SHADOW-RUN: preserve read-only preflight evidence ci / backend (push) Failing after 1s Details ci / static (push) Failing after 10s Details Build & Test with Secrets / build (push) Failing after 1s Details deploy / deploy (push) Successful in 2m44s Details Build & Test with Secrets / security-scan (push) Failing after 7s Details deploy / notify (push) Successful in 2s Details ci / frontend (push) Successful in 3m46s Details ci / publish (push) Has been skipped Details Build & Test with Secrets / frontend (push) Successful in 3m21s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 14:33:09 +09:00
kjh2064	258eb7ef2f	PHASE-1-SHADOW-RUN: define concrete execution evidence plan ci / static (push) Failing after 8s Details ci / backend (push) Failing after 1s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / build (push) Failing after 1s Details deploy / deploy (push) Successful in 2m46s Details Build & Test with Secrets / security-scan (push) Failing after 7s Details Build & Test with Secrets / frontend (push) Successful in 3m49s Details deploy / notify (push) Successful in 1s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 14:31:43 +09:00
kjh2064	fbff7cfbda	PHASE-1-SHADOW-RUN: assign readiness owner and deadline ci / backend (push) Failing after 1s Details ci / static (push) Failing after 11s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / build (push) Failing after 1s Details Build & Test with Secrets / security-scan (push) Failing after 6s Details deploy / deploy (push) Successful in 2m59s Details Build & Test with Secrets / frontend (push) Successful in 3m57s Details deploy / notify (push) Successful in 1s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 14:28:00 +09:00
kjh2064	1904b4fcbf	PHASE-1-SHADOW-RUN: block unsafe legacy execution path ci / backend (push) Failing after 1s Details ci / static (push) Failing after 10s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / build (push) Failing after 1s Details deploy / deploy (push) Successful in 2m44s Details Build & Test with Secrets / security-scan (push) Failing after 7s Details Build & Test with Secrets / frontend (push) Successful in 4m11s Details deploy / notify (push) Successful in 2s Details Build & Test with Secrets / notification (push) Failing after 2s Details	2026-08-06 14:25:37 +09:00
kjh2064	f09a65e909	PHASE-1-SHADOW-RUN: prepare requeue readiness gates ci / backend (push) Failing after 1s Details ci / static (push) Failing after 9s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / build (push) Failing after 1s Details deploy / deploy (push) Successful in 2m42s Details Build & Test with Secrets / security-scan (push) Failing after 7s Details deploy / notify (push) Successful in 2s Details Build & Test with Secrets / frontend (push) Successful in 4m7s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 14:23:38 +09:00
kjh2064	6fc79c8ead	AEG-X-004: record phase one approval gate ci / static (push) Failing after 11s Details ci / backend (push) Failing after 1s Details Build & Test with Secrets / build (push) Failing after 1s Details deploy / deploy (push) Successful in 2m44s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / security-scan (push) Failing after 7s Details deploy / notify (push) Successful in 1s Details Build & Test with Secrets / frontend (push) Successful in 4m9s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 14:18:00 +09:00
kjh2064	614f1416d4	AEG-X-004: align shadow run queued status contract ci / static (push) Failing after 8s Details ci / backend (push) Failing after 1s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / build (push) Failing after 1s Details Build & Test with Secrets / security-scan (push) Failing after 7s Details deploy / deploy (push) Successful in 2m48s Details Build & Test with Secrets / frontend (push) Successful in 4m7s Details deploy / notify (push) Successful in 1s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 14:17:11 +09:00
kjh2064	6126289baf	Merge pull request 'docs: correct shadow run status from evidence' (#10 ) from agent/correct-phase1-shadow-status into main ci / static (push) Failing after 11s Details ci / backend (push) Failing after 1s Details Build & Test with Secrets / build (push) Failing after 1s Details ci / publish (push) Has been cancelled Details ci / frontend (push) Has been cancelled Details Build & Test with Secrets / security-scan (push) Failing after 6s Details deploy / deploy (push) Successful in 2m57s Details Build & Test with Secrets / frontend (push) Successful in 4m7s Details deploy / notify (push) Successful in 2s Details Build & Test with Secrets / notification (push) Failing after 1s Details	2026-08-06 14:11:40 +09:00