docs: confirm REQ-021 implemented after BAT-017 merge

This commit is contained in:
Jarca
2026-07-09 18:48:07 +09:00
parent d9182f28f2
commit 4d8dec3ea0
6 changed files with 80 additions and 9 deletions
@@ -1,6 +1,6 @@
# BAT-017 Implementation Evidence
- Status: implemented-awaiting-qc
- Status: implemented-merged
- Created At (KST): 2026-07-08 11:33 KST
- Last Updated (KST): 2026-07-09T13:16:10+09:00
@@ -119,5 +119,6 @@
- result: pass (`59 passed, 4 skipped`)
## Updated Residual Risks / Follow-up
- Independent QC, PR creation/push, GitHub CI, and post-merge `confirm-req-implemented` remain pending.
- StagePilot doctor entrypoint is not present in the current workspace/runtime; this should be classified during QC as environment/tooling debt unless the lead requires a separate setup action before closure.
- Independent QC, PR publication, GitHub CI, and post-merge `confirm-req-implemented` are complete.
- Existing operating DB sanitization remains intentionally out of scope and must stay in the separate follow-up Todo.
- StagePilot doctor entrypoint is not present in the current workspace/runtime and is classified as environment/tooling debt, not a BAT-017 behavior blocker.
@@ -1,7 +1,7 @@
# BAT-017: Import provenance and sensitive-data policy
- Profile: standard
- Status: draft
- Status: release-candidate
- Included REQ: REQ-021
- Source Discovery: dcy-014
- Created At (KST): 2026-07-08 11:33 KST
@@ -33,3 +33,11 @@ Deliver the approved REQ-021 scope for normalized import provenance, `raw_payloa
## Delivery Notes
- User explicitly prohibited Kanban; delivery execution must use direct branch/PR or a dedicated non-Kanban worktree if delegated.
- Implementation should be sliced to avoid the previous BAT-016 large-card failure pattern: provenance helpers first, source adapters second, MCP/Streamlit exposure third, tests/docs last.
## Merge Evidence
- PR: https://github.com/genichin/jarca-ledger-mcp/pull/2
- Merge commit: `d9182f28f286667fb7ff52115c33ab2e5003b269`
- Merged At: 2026-07-09 18:44 KST
- GitHub Actions: contract-regression, dashboard-app-test, dashboard-http-smoke, db-safety-smoke, lint, pytest-regression all passed before merge.
- Local post-merge verification: `. .venv/bin/activate && python -m ruff check .` pass; `. .venv/bin/activate && python -m pytest -q` pass (`59 passed, 4 skipped`).
@@ -1,6 +1,6 @@
# BAT-017 Verification Evidence
- Status: ready-for-qc
- Status: passed-merged
- Created At (KST): 2026-07-08 11:33 KST
## Verification Commands
@@ -30,4 +30,20 @@
- Full pytest includes the affected import/privacy regression suite and leaves 4 skips in place without introducing new failures.
- Import batch debug-gated exposure now requires explicit `debug_provenance_gate=True`; the regression suite covers both deny-without-gate and allow-with-gate behavior.
- BAT-017 touched MCP import batch exposure behavior but did not modify dashboard code paths directly; no additional dashboard-only code change was required in this slice.
- QC still needs to independently inspect the changed surfaces, validate the documentation updates, and classify the missing StagePilot doctor entrypoint.
- Independent QC completed through BAT-017 delivery; QC requested explicit debug gate enforcement, runner applied it, and the second QC handoff passed.
## Merge-backed Verification
- PR: https://github.com/genichin/jarca-ledger-mcp/pull/2
- Merge commit: `d9182f28f286667fb7ff52115c33ab2e5003b269`
- GitHub Actions before merge:
- `contract-regression`: pass
- `dashboard-app-test`: pass
- `dashboard-http-smoke`: pass
- `db-safety-smoke`: pass
- `lint`: pass
- `pytest-regression`: pass
- Local main verification after merge:
- `. .venv/bin/activate && python -m ruff check .` → pass (`All checks passed!`)
- `. .venv/bin/activate && python -m pytest -q` → pass (`59 passed, 4 skipped`)
- StagePilot doctor entrypoint remains unavailable in this runtime and is classified as environment/tooling debt, not a BAT-017 behavior blocker.