docs: refresh commercial gap authority after #547

[seonghobae]

Finding and ownership

#559 is the sole cross-lane writer for docs/product-technical-gap-baseline.md and its executable documentation-authority tests. Feature lanes retain their source boundaries; historical baseline blobs in feature branches are not authoritative here.

Current protected source is GitHub-verified main@36e5cf957ee20a8bb3e19ff50fea6c97771d2ba1, the normal #556 integration. Moving central observation remains .github/main@7fd571dbcdbae6acf29d8f4ee704d7ba6297e4db, while Noema's reviewed immutable central consumer pin remains separate. Source/docs are not promoted into release, deployment, buyer, legal, or production authority.

Current convergence

#560 advanced from admission-bound live authority to exact-admission activation/replay provenance. #559 refreshed only its owned documentation surface. Current exact 4b6f4f4e64644bb9d06ad16027f9a8f2cb136ca8 binds the active-candidate baseline and executable authority tests to #560 production exact 84a93a2ffcd539df0deb96a9037a31fa863bdcaf. No Tool / Capability source is copied into #559.

The baseline now preserves the additional reality RED: test-only 0a32ee0a88378931a07b7e3b61cc31e3b494a7ab admitted source A, issued a legitimate activation, moved the same trusted authority to source B with the same artifact digest, and demonstrated in hosted application CI 34235691056, job 102092675348, that A's activation could cross into B. Test-only 49115306b4abf7656f7fd136de8a3ff0c5a1968b extends the invariant to retained activation and invocation-receipt replay. Production 84a93a2ffcd539df0deb96a9037a31fa863bdcaf binds those authorities to the exact admitted snapshot. The same requirement was handed to foreign owner context-graph-contracts#27; #559 does not synthesize that future release.

Current exact-head runs are CI 34237453919, reviewer-ci 34237453762, required Security Scan 34237453669, and patch-validator-image 34237453950. They are fresh/nonterminal and are not counted as GREEN. #560's production-head gates are independently fresh/nonterminal as well; predecessor results do not transfer.

The baseline keeps context-graph-contracts#27 and appguardrail#1099 as foreign-owner prerequisites. AppGuardrail/quarantine references are scanner/isolation evidence, EgressWeave remains outbound owner, and provider/model routing remains contextual-orchestrator.

Keep Draft until unchanged current-head required gates are terminal SUCCESS, fresh review authority is clean, ancestry still contains live protected main, and moving #560 facts still match live state. #560 remains the source prerequisite; after it normally merges, #559 must ordinarily/non-force reconverge from the resulting protected main and rewrite the active-candidate section into integrated-history authority before #559 can merge. No release/publication/signature/reproducibility/rollback completion is inferred from documentation convergence.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Exact-head documentation authority update:

• Current docs: refresh commercial gap authority after #547 #559 head is e085d7252570d40b2616214e09b1336dcb186f75, tracking feat(tool-capability): admit external Claude plugins fail-closed #560 exact 8251d4bcd2c81dd13d252a576b55dc21e66db9c4.
• It preserves unbound core-receipt RED 5a50a9bcfe12f3938b30e4a3cb15af8d30134391 → GREEN cbb64def35bad02024076c1db74e9da4739ae736, then activation-time policy revocation RED 8ff77d9b6428a2c09f2c72bf3b05fdb989e35843 → GREEN 8251d4bcd2c81dd13d252a576b55dc21e66db9c4.
• Fresh detached remote-tree verification is 6 files / 11 tests passed, TypeScript typecheck GREEN, and git diff --check GREEN.
• Current exact CI 34228369876, reviewer-ci 34228369915, and Security 34228369868 are terminal SUCCESS. image 34228370043 remains in progress and is not GREEN.
• docs: refresh commercial gap authority after #547 #559 stays Draft and must reconverge after feat(tool-capability): admit external Claude plugins fail-closed #560 normally merges. No predecessor result or documentation assertion transfers release/deployment authority.