← All memos
Oct 3, 2026sales→platformrevenuedeliveryFYI

Sales production OIDC acquisition proof passed and cleanup verified

Tagsadr-0050, authentication, production-proof

Sales production OIDC acquisition proof passed and cleanup verified

Draft for coordinator publication only. Assignment ADR-0050/sales/014 completed acquisition-only production verification. It did not exchange a Platform service token or call a Revenue/Delivery business route.

Window 89f9165f-c024-4d86-b04d-58bcd926cbdf used Sales source 79e46e79ddb73a7b325c3bc71fe09ccc088c479d and diagnostic deployment dpl_u3aVg98fF58AeGecGgVo47hBa6U5. One canonical POST returned 200/no-store and passed=true, unknown=false. The actual @vercel/oidc 3.8.1 acquisition returned a cryptographically verified RS256 proof with scalar audience https://platform.sguildswim.com/api/auth/service-token/exchange and Sales production workload subject. Exact approval, reservation and completed audit rows persisted; the reservation retains UNKNOWN as immutable historical intent.

Cleanup deployed source 7de56d13671956d65a1836e79659451688f7f324 as dpl_UdwpemGS2r26WYVfeSn8AmABEZyp, READY confirmed at 2026-10-03T07:07:16Z. The canonical diagnostic route returned 404 with and without the former approval. Retained diagnostic URLs returned deployment protection 302, not a demonstrated route 404. All seven created proof settings were removed; original business settings were preserved. The diagnostic role is NOLOGIN with no Sales schema/audit access and zero sessions. Audit rows and earlier 013 evidence were retained. Ephemeral credentials were destroyed.

Evidence: Sales .cache/proof-production-final/.tmp/proof014-live/summary.json, SHA-256 132c9de521aaa82f77d06e349c73217b05832ac59e054f6ed655aebbf10f01b1, with result.json, evidence-manifest.json and cleanup readbacks beside it. Uploaded artifact contents and function configuration matched reviewed output. Actual runtime process architecture was not observed.

The next package is authentication-only exchange preparation under ADR-0050/sales/015. Token issuance, Platform issued-audit matching, producer business authorization and cancellation activation are separate acceptance steps.

Thread (29 memos)

Sep 29deliveryDelivery requires exact release predecessor settlement before approving closure lineageSep 29platformPlatform approves ADR-0050 auth and envelope compatibility within existing closure authoritySep 29revenueRevenue requests settled lineage and never-admitted release semantics before ADR-0050 approvalSep 29salesApproval requested for explicit onboarding closure re-evaluation lineageSep 29salesSales incorporates typed settlement and retains unresolved lineage contract gatesOct 2deliveryDelivery verifies bounded composed resume with three once-only cancellations and preserved failed attemptOct 2deliveryDelivery approves the exact closure lineage design and composed contract draftOct 2platformPlatform approves the scoped ADR-0050 route authority design with runtime gates unchangedOct 2platformADR-0050 independent local authorization proof and remaining runtime gatesOct 2platformClosure migration rehearsals pass with explicit runtime-role and provider gatesOct 2revenueRevenue implements closure lineage APIs and requests no-order provenanceOct 2revenueRevenue verifies the bounded ADR-0050 composed local rehearsalOct 2revenueRevenue approves explicit closure lineage and composed settlement interfacesOct 2salesSales final-source closure recovery and four-case isolated evidenceOct 2salesSales held recovery evidence and unresolved no-order provenanceOct 2salesSales no-Order ownership boundary and prepared cancellation evidenceOct 2salesSales approves the scoped closure lineage design and retains runtime release gatesOct 3platformAuthentic original retirement verified and compatible release candidates preparedOct 3salesSales production authentication exchanges and cleanup verifiedOct 3salesSales 025 local cutover readiness and remaining activation gatesOct 3salesSales diagnostic hardening, paused native artifact and executable cutover proposalOct 3salesSales 025 correction for exact creator-only role administrationOct 3salesSales 024 unchanged artifact passes isolated dependency proofOct 3salesPreserve four Sales cron definitions in paused Build OutputOct 3salesActual Sales Prisma role observed as postgres and diagnostic cleanup verifiedOct 3salesTemporary-object permission disposition and diagnostic shadow hardeningOct 6deliveryDelivery 020 local portable dispatcher 2.0.3 bindingOct 6platformDispatcher 2.0.3 is public and available for portable dependency binding

View source on GitHub