System Reconstruction Coverage Matrix — Audit And Evidence Wave¶
- Status:
CURRENT PLATFORM COVERAGE COMPANION - Original source baseline:
qa/master@a5280b7cdc1c78b809ed6f1996ca31491b522146 - Current review ref:
qa/master@1a71a21d39828dda5c4155d728e1dd6d2da36f74 - Source authority:
PLATFORM_AUDIT_TRANSITION_CORRELATION_SUPPORT_SOURCE_AUTHORITY.md - Current writer inventory:
PLATFORM_AUDIT_CURRENT_WRITER_AND_EVIDENCE_INVENTORY_2026-08-08.md - Read-only environment package:
RBR-AUDIT-002-READONLY-ENVIRONMENT-PREFLIGHT.md - Rebuild packet:
PLATFORM_AUDIT_TRANSITION_CORRELATION_SUPPORT_REBUILD_PACKET.md - Phase implementation:
USER HOLD - Important: coverage values describe documentation/evidence gaps. They do not activate Runtime changes, archive/purge, Wiki publication or a Phase Task.
1. Coverage Vocabulary¶
COMPLETE INPUT
PARTIAL
MAPPED
MISSING
OPEN POLICY
RUNTIME EVIDENCE REQUIRED
NOT APPLICABLE
Dimensions:
PDT Product outcome
ROL actors/roles/access
PRC process/sequence
STA state/lifecycle
DAT data/identity/fields
INT query/command/error
EFF external/system effects
UIX UI/UX
OPS operations/recovery
WIK Wiki projection/publication
MIG migration/rollback/caller-zero
VER verification evidence
2. Coverage Summary¶
| Capability | PDT | ROL | PRC | STA | DAT | INT | EFF | UIX | OPS | WIK | MIG | VER | Primary remaining work |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Request/SQL diagnostics | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | NOT APPLICABLE | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | run bounded channel/retention/access/redaction observation from RBR-AUDIT-002 |
| Page/API telemetry | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | NOT APPLICABLE | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | browser header propagation, sampling and current role/support visibility |
| Process context | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | NOT APPLICABLE | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | deployed caller/source parity |
| Transition envelope | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | current row consistency and selected failure/effect policy |
| Transition audit store | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | execute exact schema/row/child/retention preflight |
| Loader transition writer | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | selected Start/Undo rows, transaction behavior and diagnostic readability |
| Operation notifications | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | caller transaction/failure policies, current role config and duplicate behavior |
| Notification ACK/unack | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | ACK pair consistency and explicit non-approval operator acceptance |
| Staff evidence | COMPLETE INPUT | PARTIAL | MAPPED | PARTIAL | MAPPED | PARTIAL | NOT APPLICABLE | PARTIAL | PARTIAL | PARTIAL | PARTIAL | RUNTIME EVIDENCE REQUIRED | owner-specific typed resolver and retention/correlation |
| Scale event evidence | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | PARTIAL | RUNTIME EVIDENCE REQUIRED | typed resolver, ticket/owner handoff and archive relation |
| Inventory ledger evidence | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | PARTIAL | RUNTIME EVIDENCE REQUIRED | resolver, reversal/correction state and retention |
| File evidence | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | object/link/readability and retention/delete evidence |
| Mail evidence | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | inbound/outbound distinction, provider result and retention |
| Provider-attempt evidence | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | domain attempt registries and unknown-result reconciliation |
| Evidence-reference registry | COMPLETE INPUT | OPEN POLICY | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | owner/versioning, exact safe resolver definitions and redaction acceptance |
| Support timeline | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | selected support cohort, access/redaction and source-partial UI |
| Retention/legal hold | COMPLETE INPUT | OPEN POLICY | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | NOT APPLICABLE | PARTIAL | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | legal/business owner, archive/purge precedence and destructive-action evidence |
| PHP↔Next.js audit coexistence | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | COMPLETE INPUT | PARTIAL | COMPLETE INPUT | RUNTIME EVIDENCE REQUIRED | selected one-writer/read cohort and rollback rehearsal |
3. Current Source Facts Versus Gaps¶
| Area | Current source-reconciled fact | Missing evidence or decision |
|---|---|---|
| KJ mutation diagnostic | operation/table/fingerprint/insert ID/affected count/transaction metadata; general before snapshot not established | named-environment channels, field shape, retention/access/redaction and request resolution |
| API request log | request/page/module/status/duration and redacted bounded input | current sampling, source revision/deployment propagation and support authorization |
| Transition schema | three typed reference-only tables and source/migration contract | actual table/column/index/FK/check state and rows |
| Transition writer | selected Loader Start/Undo integration exists; no second direct business writer located statically | deployed activation, dynamic callers, audit-failure semantics and exact rows |
| Operation Event | notification ledger with display policy and reversible ACK | caller-specific transaction/failure/idempotency policy and current row distribution |
| Correlation | request/page/process/audit/provider identifiers exist in separate owners | accepted propagation and named-environment readability |
| Evidence resolution | source owners and allowed types exist | current type/relation population, typed resolvers, tombstone/expiry/redaction handling |
| Retention | engineering purge dates plus archive inputs | legal/customer policy, current distribution, legal holds and archive-versus-purge |
| Support | current logs/admin tools are separate | universal safe read-only timeline and source-partial behavior |
4. Static Preflight Result¶
The current static review established:
TransitionAuditStore source: PRESENT
AuditEnvelope/ProcessContext source: PRESENT
Selected CtcLoaderTransitionEvidence writer: PRESENT
Other direct business writer located: NO
Operation Event writer family: PRESENT
KJ diagnostic family: PRESENT
Universal transition coverage: NO
Selected Loader writer expectation:
PROC-TMS-INBOUND-PLANNING / 0.5.0
START_TRANSLOADING
UNDO_TRANSLOADING
SUCCEEDED / R1 / DATABASE_COMMITTED
BUSINESS_RECORD + KJ_MUTATION
caller-owned transaction
This does not establish current environment installation or rows.
5. Current Evidence Package¶
RBR-AUDIT-002 now includes:
static writer/evidence inventory
44-statement read-only DB query package
bounded diagnostic-channel observation plan
result/stop/data-minimization contract
query-template validation
Read-only coverage:
- environment/source/config identity;
- transition and Operation Event schema;
- columns/indexes/FKs/checks/engine/collation;
- transition/entity/evidence counts;
- process/source/result/recovery/effect/context distributions;
- enum/pair, duplicate and retention candidates;
- orphan/tenant/ordinal child integrity;
- entity/evidence type/relation distributions;
- selected Loader envelope/entity/evidence/readability checks;
- Operation Event ACK/reference boundaries;
- KJ diagnostic field shape, redaction, retention and correlation.
Current package status:
DEFINED
STATICALLY VALIDATED
NOT AUTHORIZED
NOT RUN
6. Factual Documentation Reconciliation¶
| Documentation issue | Current source-level statement | Current disposition |
|---|---|---|
| KJDatabase described as before/after snapshot audit | bounded request/mutation diagnostic metadata; not general business-row snapshots | canonical Architecture/Schema corrected |
| Transition store described as having no active caller | selected Loader writer source present; current environment unverified | canonical source corrected; RBR-AUDIT-002 defined |
| Migration comment says writer inactive | historical migration comment remains provenance | static current inventory controls interpretation |
| Operation Event ACK can be read as approval | ACK/unack is notification read state only | canonical rule and preflight boundary defined |
| Retention values can appear authoritative | engineering defaults pending legal/customer policy | current distribution query defined; policy open |
7. Required Artifact Set¶
docs/reconstruction/PLATFORM_AUDIT_TRANSITION_CORRELATION_SUPPORT_SOURCE_AUTHORITY.md
docs/reconstruction/PLATFORM_AUDIT_CURRENT_WRITER_AND_EVIDENCE_INVENTORY_2026-08-08.md
docs/reconstruction/PLATFORM_AUDIT_TRANSITION_CORRELATION_SUPPORT_REBUILD_PACKET.md
docs/reconstruction/SYSTEM_RECONSTRUCTION_COVERAGE_MATRIX_AUDIT_EVIDENCE_WAVE.md
docs/reconstruction/PLATFORM_AUDIT_DB_PREFLIGHT_TEMPLATE_VALIDATION_2026-08-08.md
docs/operations/platform-audit/RBR-AUDIT-002-READONLY-ENVIRONMENT-PREFLIGHT.md
docs/processes/PLATFORM_AUDIT_TRANSITION_CORRELATION_SUPPORT_POLICY_AND_SEQUENCE.md
docs/runbooks/PLATFORM_AUDIT_AND_SUPPORT_TIMELINE_RUNBOOK.md
docs/wiki/internal/PLATFORM_AUDIT_SUPPORT_WIKI_PROJECTION_PACKET.md
docs/operations/changes/2026-08-08-platform-audit-environment-preflight-handover.md
8. Documentation Readiness¶
Request/mutation diagnostic source map:
DETAILED INPUT
Transition audit source/data/interface map:
DETAILED INPUT
Selected writer static inventory:
COMPLETE
Read-only environment query design:
COMPLETE
Query-template validation:
PASS
Notification and domain-evidence boundaries:
DETAILED INPUT
Support timeline target:
DETAILED INPUT / NOT IMPLEMENTED
Policy decisions:
OPEN / PARTIAL
Current DB/log/role/provider/retention evidence:
NOT RUN
Current Wiki content:
NOT READ
Phase implementation:
USER HOLD
Migration readiness:
NOT M4
9. Implementation Stop Conditions¶
Do not activate an audit/evidence cohort while any of these remains unresolved:
- unknown business state owner;
- compatibility-only tenant context;
- actor/subject/correlation ambiguity;
- undefined transition/effect/recovery semantics;
- undefined required-audit failure behavior;
- raw or sensitive payload required to make the design work;
- Operation Event ACK is used as approval;
- no tenant-safe evidence resolver;
- no rollback from PHP/Next.js dual reader/writer;
- retention/legal-hold policy is invented;
- no Client 1 non-regression for shared infrastructure;
- current DB/deployment identity is unknown;
- a support timeline would expose foreign-record existence.
10. Next Safe Work¶
Documentation lane:
current Wiki inventory package
high-risk packet drift headers
historical redirect consumer review
Evidence lane, after exact authorization:
execute RBR-AUDIT-002
classify the named environment
record conflicts without repair
No database, notification, retention, source or support-access change is authorized by this matrix.
---¶
Source:
docs/reconstruction/SYSTEM_RECONSTRUCTION_COVERAGE_MATRIX_AUDIT_EVIDENCE_WAVE.md— ctc repository · This page is an English translation of the source document. Identifiers, file paths and code symbols are unchanged.