docs: reconcile protected runtime and commercial gap authority

[seonghobae]

Root cause

Canonical docs/product-technical-gap-baseline.md must stay code-current while separating protected truth, active candidate, transient workflow observation and foreign-owner authority. #546 and its stacked consumers advanced again after a fresh exact-path identity repair, so the prior baseline became stale.

Current reconciliation — 2026-09-06 KST

Documentation repair af5fae8645ab6abe5b0faa02020d141b992e9cd8 refreshes the baseline around live authority:

• protected Noema remains main@e1ac9d50f6c646f04be8c137c8acdc7200182fcd;
• fix(reviewer): fail closed on empty CodeGraph semantics #546 exact 04376e279c61a7491cb311589b28dc643bf65837, retaining JSON-safe recovery and adding RED 3328f7ba... → production 04376e27... for Linux leading-backslash Git path identity;
• fix(naming): make runner-assignment evidence semantic #533 exact 52b9195bb9f5006ffcd2dca7dedbf05c51169239 and fix(reviewer): bind failed checks to actionable source evidence #548 exact dd7353342b4776b007b74f8b223e172dcb3d4f4f, ordinary two-parent/non-force, 68/83 ahead and 0 behind exact fix(reviewer): fail closed on empty CodeGraph semantics #546;
• feat(workflow): add atomic durable task claim and checkpoint CAS #542 exact 7e5ff9cd... is recorded as the durable Workflow/Task Execution candidate whose latest predecessor reached all tests before the 100% coverage gate exposed missing failure/authority branches;
• central workflow trust and runner/control-plane remain foreign-owner authority (.github/main@7f4c5e3e..., .github#712, .github#1759);
• the fresh repository release collection is empty, so no candidate is promoted to immutable release authority.

Current exact authority

• exact PR head: af5fae8645ab6abe5b0faa02020d141b992e9cd8;
• lifecycle: open / Draft;
• exact-head ci 33979800984 — pending/non-passing;
• exact-head reviewer-ci 33979801016 — queued/non-passing;
• exact-head Security Scan 33979801035 — queued/non-passing;
• exact-head patch-validator-image 33979801113 — pending/non-passing;
• fix(reviewer): fail closed on empty CodeGraph semantics #546 exact 04376e279c61a7491cb311589b28dc643bf65837 remains the repository-wide semantic-review prerequisite.

Keep Draft until this unchanged exact head receives current CI/reviewer/Security/image and every applicable documentation/coverage/package/SBOM/vulnerability/provenance gate with zero valid unresolved findings. Do not promote active candidates into protected truth, self-approve, force-push/destructively rebase, or weaken documentation fitness gates.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}