更新时间：2026-09-09
状态只允许：PASS、FAIL、BLOCKED_EXTERNAL、PRE_EXISTING_FAILURE、NOT_VERIFIED。BLOCKED_EXTERNAL 仅限签名证书、本人 OAuth、法律/隐私决策或第三方生产账号；未运行与证据不足统一为 NOT_VERIFIED，不能计入通过率。
本清单逐项映射 GOAL.md 的原始 0–113 条 Release 契约。Internal Beta、Replay、Fixture、历史聊天和临时脚本证据不能自动继承为 Public Release PASS。
当前 checkout 的现行网页/后端入口为 http://127.0.0.1:7410 / http://127.0.0.1:8766；本清单中旧报告或历史切片出现的 8765 仅是历史证据，不代表当前运行入口。2026-09-07 本轮真实数据验收详见 acceptance report。
| ID | Release requirement | Status | Current evidence / proof still required |
|---|---|---|---|
| 0 | Final Goal / local-first public Career OS | NOT_VERIFIED | Goal 已落盘；完整产品 outcome 未证明 |
| 1 | Product North Star / 减少手工维护成本 | NOT_VERIFIED | 需要 Golden Path 主动时间与返工证据 |
| 2 | Stable Product Model | NOT_VERIFIED | 架构文档对齐；需全页面 state projection matrix |
| 3 | Stable Technical Boundary | PASS | ARCHITECTURE.md 保持 React/Python/Tauri/Provider seam，无第二 Node backend |
| 4 | Stable Authority Model | NOT_VERIFIED | Registry 设计存在；需全 surface bypass scan |
| 5 | Repository as System of Record | PASS | GOAL/STATUS/SCORE/CHECKLIST/HANDOFF/ISSUES/ARCHITECTURE/SECURITY/RELIABILITY 均由仓库维护 |
| 6 | Autonomous Execution Mode | PASS | 当前 Phase 与 update loop 已记录 |
| 7 | Hard Stop Conditions | PASS | GOAL.md 已限定真实人工阻塞 |
| 8 | Two-Failure Rule | PASS | GOAL.md 已记录；后续每个假设按此执行 |
| 9 | Release Scope Freeze | PASS | GOAL.md 已冻结非核心新功能 |
| 10 | First Run Journey | NOT_VERIFIED | 50/50 isolated first-run + 10/10 composite browser path；完整安装包 clean-machine 人工路径仍缺 |
| 11 | First Run Metrics | NOT_VERIFIED | 50/50 first-run 无 page error/完整性问题；非 clean-machine、非陌生用户人工验收 |
| 12 | Empty States | NOT_VERIFIED | Portable browser smoke 在隔离数据库真实覆盖 Today、Pipeline、Opportunity、Profile、Resume，均有可操作文案且无 HTTP/console/page error；2026-09-07 又完成 3 次连续当前 checkout 隔离验收；完整安装包与陌生用户验收仍缺 |
| 13 | Today projection | NOT_VERIFIED | Long Task UX 补 Automation Inbox + CareerTask 实时投影；10/10、50/50 Job/Resume/Interview 路径和全 source projection matrix 仍缺 |
| 14 | Today State Consistency | NOT_VERIFIED | 当前组合路径验证 Job/Packet/Timeline/Today 联动；INTERVIEW_INVITED 全事件矩阵仍缺 |
| 15 | Pipeline | NOT_VERIFIED | 10/10 组合路径验证 Pipeline/Job/Packet；全 stage、existing-user migration 仍缺 |
| 16 | Job Detail | NOT_VERIFIED | 新用户和 Resume Workspace E2E 已通过；live research/完整失败矩阵仍缺 |
| 17 | Resume Workspace | NOT_VERIFIED | Public Release E2E 覆盖编辑、Proposal、stale、version、PDF、失败 retry、10/10；Tauri clean UI 仍缺 |
| 18 | Resume Truth Model | PASS | 当前 E2E 断言 source resume 保留、Master 内容未被 Tailored 修改覆盖 |
| 19 | Resume Proposal | PASS | 当前 E2E/10 次重复覆盖 proposal review、accept、手工编辑和版本落盘 |
| 20 | Fact Gate | PASS | test_resume_optimization.py 覆盖 strict structured facts、missing provenance、unverified metric/fact/org/placeholder；test_slice_01.py 覆盖 blocked 时不写入 Profile/ResumeVersion；相关测试 28/28 通过 |
| 21 | Stale Proposal | PASS | test_resume_workspace.py 覆盖手工编辑后旧 Proposal 标记 stale；Resume Workspace E2E 覆盖 stale proposal 不覆盖最新编辑 |
| 22 | Resume Metrics | NOT_VERIFIED | Reliability-03 通过成功 autosave、单次更新、503 可见、draft 保留和 retry；缺 99.9% autosave stress、0 lost edit、跨标签冲突与语言 PDF matrix |
| 23 | Role Intelligence authority split | PASS | Role authority evidence：Agent/Provider 只返回候选结构，Runtime 负责 normalization、dedupe、cohort、sample、frequency、Delta、Evidence Gap 与持久化；无 LLM 统计数字直写 |
| 24 | Fixture vs Live labels | NOT_VERIFIED | dataModeLabel 已统一区分 Fixture、Fixture Plugin、Live、Live Plugin、受控后端检索和未知模式；Role/Interview/Job 页面不再把未知或 fixture plugin 误标为 Live；仍需完整 installer/网站人工 claim review |
| 25 | Live Provider Gate | NOT_VERIFIED | Packaged Pi Agent live smoke 在 staged provider config 下通过；live Role Intelligence report 记录 Pi CLI 无受控网页工具且结构化任务失败；OpenCode 1.17.11 虽可执行但当前没有 OfferU 控制的公开网页 host/redirect/private-address seam，已 fail-closed；Role Intelligence auto 现在会在无 live-capable CLI 且搜索 API/LLM 配置齐全时选择受控 backend_search adapter，Role/JobResearch 两条后端 HTTP 路径均统一直连、拒绝自动重定向、校验 DNS 公网地址并要求来源 URL 来自已提供页面；job-search Capability 也已固定 Arbeitnow API、禁用系统代理和自动重定向，并过滤输出的本机/私有/凭据岗位 URL；正式 architecture audit 已覆盖上述传输边界；真实 Provider/LLM 配置与 10-role matrix 仍未执行。Codex 0.153.4 的 live model、structured output、streaming、resume、cancel 和 cwd isolation 已在 H:\tmp\offeru\codex-lifecycle-final-20260910.json 真实验证，但不等于完整 Role Intelligence live Provider Gate |
| 26 | 10-role Live Acceptance | NOT_VERIFIED | 无 10-role raw→dedupe→cohort→Delta matrix |
| 27 | Interview Focus | NOT_VERIFIED | Interview learning E2E 在隔离浏览器通过 persisted Role Intelligence Focus Plan → 专项问题；当前为 Replay fixture，live provider 仍缺 |
| 28 | Interviewer Behavior | NOT_VERIFIED | 同一 E2E 的模糊首答触发 Adaptive follow-up，活跃页保持 Interviewer Mode 且无即时夸奖/答案补全/Coach 面板；完整 provider/行为矩阵仍缺 |
| 29 | Interview Debrief | NOT_VERIFIED | 同一 E2E 展开报告并显示 transcript-backed 评价引用（实际回答）；完整报告矩阵与 live provider 仍缺 |
| 30 | Interview Learning | NOT_VERIFIED | 同一 E2E 完成 Interview → pending Learning Candidate → Profile UI accept → applied Profile section；Reliability-04 补启动恢复，完整六态/跨重启/live provider 仍缺 |
| 31 | Memory Lifecycle | NOT_VERIFIED | Reliability-04 覆盖 pending Candidate 重启保留与重复防护；六态、source/evidence/confidence/history matrix 仍缺 |
| 32 | PotentialHypothesis isolation | PASS | Hypothesis boundary：Accept 前不入模型，Accept 后保持 career_hypothesis，不进入 verified_fact |
| 33 | Single Automation model | PASS | Architecture audit 确认唯一 automation._process_automation_event durable Event→Rule→CareerTask dispatcher；无私有 async loop/provider bypass，静态 contract 为 0 finding |
| 34 | Automation Reliability | NOT_VERIFIED | Long Task UX 补 Inbox/CareerTask snapshot 与 UI cancel/retry confirmation；Reliability-08 补浏览器双击/已提交后传输重试唯一性；Reliability-09 补 100 个真实 worker 周期；本轮重复确认 100/100 worker cycles 且 CareerTask completion event 与状态在同一事务提交；Reliability-10 补两个独立进程的 CareerTask 原子 claim；Reliability-11 补两个独立进程的 AutomationEvent 原子 claim、唯一任务和唯一 Inbox；Reliability-13/14 补 durable provider auth/timeout、跨进程 retry/restart recovery contract；真实跨进程 provider/network cancel/resume 与全部业务 mutation 仍缺 |
| 35 | CareerTask lifecycle | NOT_VERIFIED | Long Task UX 覆盖 queued/running/waiting/failed/blocked/cancelled 可见状态；Reliability-02/04/05/06/09/10 已有 durable/recovery/retry/100-cycle worker/跨进程 claim evidence，本轮全量回归再次验证 terminal task 与 task.completed event 原子可见；Reliability-11 补完成任务在投影取消后的 terminal 保护，Reliability-13/14 补 auth/timeout 与跨进程 restart 的 blocked/failed lifecycle；完整 UI/provider/approval lifecycle 仍缺 |
| 36 | Restart Recovery | NOT_VERIFIED | Reliability-02 覆盖真实 Python force-stop/restart、durable state 和浏览器启动 overlay/core UI recovery；Reliability-03/04 补 Resume retry 与 Interview/Learning recovery；Reliability-05 恢复 normal writable backend；Reliability-06 通过 Interview answer restart retry；Reliability-11 处理重启前 processing AutomationEvent 的幂等 requeue；Reliability-14 新增独立进程 running task 终止→recovery→retry contract；Startup recovery evidence 补 health/diagnostics ready/degraded + error_id 与可选服务边界；Tauri 8765 health client 现在显式绕过代理，真实桌面/provider/network/browser 全矩阵仍缺 |
| 37 | AgentRuntimeProvider UI seam | NOT_VERIFIED | Architecture audit 未发现主 Agent UI 的 provider-specific execution branch；仍需完整构建产物与所有入口的长期 contract 固化 |
| 38 | Minimum Live Agent Gate | PASS | source Pi 与 packaged Pi 在 staged config/env + 可用模型下均完成真实 Run；默认当前模型不可用不被伪装成成功 |
| 39 | Operation Registry Audit | NOT_VERIFIED | Architecture audit 与正式 backend/scripts/release/audit_architecture.py 证明 route-level direct mutation、Registry bypass、CLI/MCP/plugin escape hatch 均为 0；browser/legacy 全 surface runtime audit 仍需固化 |
| 40 | Application Pipeline stages | PASS | Application stage matrix：8 个外部 stage 全部进入 Timeline，并投影到 Pipeline/overview/workspace |
| 41 | External Signals as Candidate | NOT_VERIFIED | Security-06：邮箱服务端确认门、只读 scope、revoke 后 signal/candidate 失效；完整 email/browser/calendar 未授权矩阵和真实浏览器证据仍缺 |
| 42 | Browser Autofill boundary | NOT_VERIFIED | 若保留 claim，需 Fill≠Submit E2E；否则 Experimental |
| 43 | Database Migration | PASS | docs/archive/pre-2026-10/evals/reports/2026-08-31-codex-offeru-core-v1-data-safety-02.md：v1/v2 编号迁移、old-schema A/B fixtures、future version fail-closed |
| 44 | Migration Safety | PASS | 本轮 backend 全量回归包含 3 次 backup→mutate→stage→apply→integrity、managed assets 保留、SQLite -wal/-shm sidecar 移动失败后的已移动 sidecar 回滚，以及 tamper/symlink guards；全部通过 |
| 45 | Consistent Backup | PASS | docs/archive/pre-2026-10/evals/reports/2026-08-31-codex-offeru-core-v1-data-safety-01.md：SQLite Online Backup API、managed assets、manifest/hash、integrity 验证 |
| 46 | Restore 3 cycles | PASS | 本轮 backend 全量回归重新执行 3 次隔离 create→backup→mutate→stage→restart→verify，数据库、资产、pre-restore backup 和 PRAGMA integrity_check=ok 均通过；恢复替换逻辑修改已被 sidecar failure/rollback tests 覆盖 |
| 47 | Structured Data Export | PASS | docs/archive/pre-2026-10/evals/reports/2026-08-31-codex-offeru-core-v1-data-safety-03.md：Profile/Job/Application/Resume/Interview/CareerArtifact 结构化集合、counts、可读性、嵌套敏感字段排除和 Settings 下载 |
| 48 | Reset Demo vs Delete Data | PASS | 同一报告：明确 source=offeru-demo + batch_id=offeru-demo-v1 scope、确认门、子记录清理、真实 Profile/未标记 Job 保留和隔离浏览器 E2E |
| 49 | SQLite Integrity | PASS | 同一报告：Doctor 与每次恢复后的 PRAGMA integrity_check=ok，foreign-key violations 为 0 |
| 50 | Security Baseline | NOT_VERIFIED | security-01–security-11 加 artifact audit 已覆盖当前子项；错误关联、诊断包、JSON canary、bundle/sidecar 高置信 secret scan、最新 RustSec 普通 audit、Tauri permission contract、logger contract、云端类别同意、邮箱撤回、合成数据清理、Provider health、durable error projection、Agent/插件/扩展错误边界和独立常见 credential redaction 已有实现/部分证据；严格 RustSec unsound policy、3 条历史旧正文、完整 runtime PII-data-flow、retention、真实 OAuth/浏览器和签名仍缺 |
| 51 | Secrets exclusion | NOT_VERIFIED | security-02 覆盖 API validation/error、diagnostic、browser feedback、config/Run/export 路径；security-03 补共用 JSON 与 Run artifact 落盘 canary；security-07 增加历史旧邮件正文计数与明确确认清理；security-08 清理严格命名空间的合成邮箱、信号、候选、同步运行和凭据引用；security-11 收紧 Provider/Task/Event/Hosted Executor 错误与 Provider event payload projection 的直接 PII；本轮又收紧扩展 HTTP/Smart Fill、Capability Plugin、Agent Runtime、Pi Guardian 和独立 sk/rk/pk/GitHub/Google credential 错误边界；artifact audit 已扫描本地 bundle/sidecar，并拒绝跟随 artifact 目录内的符号链接；artifact verifier 也拒绝 symlink root/metadata，文本型 artifact 另有 email/phone value-free guard，CI 现同时扫描上传前与安装/Draft Release 下载后的 artifact；历史行、Temp、trace、log、binary/PDF 完整 matrix 仍缺 |
| 52 | Canary Secret Test | NOT_VERIFIED | Security-02/03/07/08 canary 路径通过；artifact audit 与本轮真实 Tauri bundle/sidecar/Extension artifact audit 均为 0 finding，CI 已接入 release bundle/sidecar、browser trace/screenshot/log 以及安装/Draft Release 下载目录 audit；远程 runner、signed/PDF/clean-machine artifact matrix 仍缺 |
| 53 | PII Logging | NOT_VERIFIED | security-05 用 AST 覆盖 backend/app 标准 logger，当前敏感动态参数为 0，并收口已知原始异常/搜索/路径日志；security-06 补邮箱撤回清理；security-08 清理合成测试遗留凭据引用；security-11 收紧 durable error projection、Agent Runtime、Capability Plugin、Pi Guardian 和扩展 HTTP 错误的直接 PII/credential；扩展错误 projection 现在只把有界脱敏文本进入用户提示/跨消息响应/bootstrap console；前端主 API/SWR、直接 fetch、SSE、Showcase LLM、Agent/Chat 与核心页面错误也统一经过有界脱敏投影；artifact audit 新增文本型 email/phone finding 且不输出值；历史持久化行、桌面/第三方日志和完整 runtime data-flow 尚未完成 |
| 54 | Tauri Security | PASS | security-01 基线加 security-04 permission contract：capability 仅 core:default、shell plugin 已移除、CSP 非 null，依赖更新后 cargo check 通过；broad HTTPS limitation 已记录 |
| 55 | Dependency Gate | NOT_VERIFIED | Agent-runtime、frontend、extension npm production audit 与 Python pip-audit 本轮均无已知漏洞；普通 cargo audit --no-fetch 扫描通过但含 17 条 warning，严格 cargo audit --no-fetch --deny unsound 失败于 glib 0.18.5 / RUSTSEC-2024-0429；严格 job 已接入 CI，远程 runner 尚未执行 |
| 56 | Structured Observability | NOT_VERIFIED | security-02 已覆盖 bounded error metadata 与 error ID，security-05 增加 logger payload contract，security-07 增加 bounded privacy hygiene summary，security-08 增加合成测试数据清理/诊断计数；startup recovery 又补 health/diagnostics 的统一 check projection；Diagnostic Bundle 现纳入 bounded durable CareerTask、AutomationEvent、RoleBenchmarkRun 和 JobResearchRun failure summary，security-11 又收紧这些错误及 Hosted Provider event projection 的直接 PII；扩展、插件、Agent Runtime、Guardian、Skill Pipeline 和历史 RoleBenchmarkRun/研究 CLI 错误边界已有代码收口但新契约尚未执行；完整 Run/Task/Audit schema/correlation/retention 矩阵仍缺 |
| 57 | Error Correlation | NOT_VERIFIED | HTTP、Starlette 404、validation、frontend request/SSE、浏览器 feedback、startup recovery、Agent SSE failure/disappearance、CareerTask durable failure、结果投影失败、RoleBenchmarkRun failure 和 JobResearchRun failure 已实现 bounded error_id；扩展 HTTP/Smart Fill、Agent Runtime、Capability Plugin、Pi Guardian、Skill Pipeline、历史研究错误与前端 direct-fetch redirect boundary 新增了统一错误/传输边界，但本轮契约测试尚未执行，真实 provider/stream/worker/desktop/audit matrix 仍未完成 |
| 58 | Diagnostic Bundle | NOT_VERIFIED | Registry-backed bundle、provider/DB/error 摘要、privacy hygiene summary、startup recovery state、bounded durable CareerTask/AutomationEvent/RoleBenchmarkRun/JobResearchRun failure summary 与浏览器下载 canary 已有实现/既有隔离证据；artifact audit 新增文本型 email/phone value-free finding；扩展/插件/Agent Runtime/Guardian/Skill Pipeline/历史研究错误边界和独立 credential redaction 已落盘但契约尚未执行，完整 artifact/PII review 与 retention policy 仍缺 |
| 59 | Performance Baseline | PASS | Performance report：Windows reference environment、cold/warm/cache/action/progress measurements |
| 60 | UI Performance SLO | PASS | cold 993.239ms、warm 1071.201ms、navigation p95 339.558ms、action 35.123ms、progress 661.186ms 均低于阈值 |
| 61 | Long Task UX | NOT_VERIFIED | Long Task UX：Today 实时 status/progress/error/cancel/retry confirmation path 通过；startup recovery、CareerTask、RoleBenchmarkRun 和 JobResearchRun durable failure 不再静默且提供 error ID；所有 >2s 路径、真实 provider/network/restart failure audit 仍缺 |
| 62 | Soak Test | PASS | Reliability-12 按 Goal 的“2 小时或 100 个代表性 task cycles”解释，使用 Reliability-09 的 100 个真实 CareerTask worker cycles 通过替代门槛；Reliability-05/08/10/11 继续提供混合 workload、浏览器重复/重试和跨进程 claim 证据；2 小时是未执行的等价验证方式，不是叠加硬要求 |
| 63 | Memory / Resource Leak | PASS | Reliability-12 复核 Reliability-05 的 100 个真实混合 backend cycles，warm-up 后 RSS 增长 3.01% < 20%，无 workload error；不宣称任意长时 workload 均无泄漏 |
| 64 | Testing Pyramid | NOT_VERIFIED | backend unit/contract/integration、browser E2E、failure、migration、packaging 均有证据；CI/全 release matrix 仍缺 |
| 65 | Unit / Deterministic Tests | NOT_VERIFIED | Application stage classification/projection 已由 stage matrix 覆盖；Role authority evidence 补 normalization、Delta、Evidence Gap deterministic tests；Fact Gate、Today priority、Candidate lifecycle 等完整 mapping 仍缺 |
| 66 | Operation Contract Tests | PASS | 全量 250 operations 均发布 closed input_schema；tests/test_cli_ops.py 校验 input properties/required、output envelope、side effects、dry-run/confirmation 与 operation version |
| 67 | Agent Contract Tests | PASS | Agent Runtime contract：Replay interface 与 canonical stream/tool/approval/cancel/failure/resume matrix 通过 |
| 68 | Browser E2E Philosophy | NOT_VERIFIED | Portable CI browser smoke 与 Reliability-08 使用用户可见 UI、场景隔离 DB/browser，并覆盖双击/传输重试；public-release 五个 E2E 入口现在共享固定 127.0.0.1:7410/8765 guard，误指向 8080/其它端口会在网络或 Playwright 前失败；smoke、Interview、Empty State 还会在创建 managed Chromium 前核对页面/health identity；仓库自动浏览器静态审计已覆盖根目录临时脚本、E2E、PDF 与扩展 fixture，当前无系统 Chrome/Edge 选择器；前端与扩展直接 fetch 也拒绝 HTTP 重定向；新增 contract 与远程 runner 尚未执行 |
| 69 | Playwright Isolation | PASS | 50 个 first-run DB、10 个 composite DB、Interview learning fresh DB 与 CI empty/smoke/interview 三场景独立 DB/browser context 均隔离，integrity/FK 通过 |
| 70 | Playwright Failure Artifacts | NOT_VERIFIED | Portable smoke 在失败时保存 trace/screenshot、成功不保存；三个 CI browser job 已在上传前对 trace/screenshot/log 执行 secret audit，E2E 地址 guard 也拒绝错误网页端口，但 failure-only upload 与新增 contract 尚未在远程 runner 验证 |
| 71 | Golden Path A — New User | NOT_VERIFIED | 50/50 isolated browser first-run、10/10 composite、portable preparation/empty-state CI-smoke、Interview learning PASS；CI 已新增 10 个彼此隔离的 critical new-user repeatability runner，但本轮未执行远程 runner；installer clean-machine 完整 UI 仍缺 |
| 72 | Golden Path B — Existing User | NOT_VERIFIED | 历史 migration 报告只作为背景；当前仓库已新增 backend/scripts/e2e/test_public_release_migration.py 与独立 migration-browser-smoke job，使用临时 schema v1 数据库、真实 lifespan migration 和 Playwright managed Chromium 无头 UI 验收；脚本现在要求 7410 返回含 OfferU 的 2xx 页面，8765 返回当前 checkout 版本、OfferU/python 和 local-development health identity，拒绝旧服务或错误端口；本轮未执行 runner，installer upgrade 仍由 R88 单独覆盖 |
| 73 | Golden Path C — Failure | NOT_VERIFIED | Long Task UX 补 task error/action failure 可见；当前浏览器 Resume save/PDF 503、Reliability-08 的 Job ingest 503 可见/可重试，Reliability-04/06 evaluation/restart evidence 保留，Provider/task/backend 全 failure matrix 仍缺 |
| 74 | Golden Path D — Duplicate | NOT_VERIFIED | Application stage matrix 走真实 review path；Reliability-06 通过 Resume/Application/Interview answer/Memory review 服务层重复请求和 restart retry；Reliability-08 通过浏览器 double-click、已提交后 transport retry 且 Job/task 各唯一；Reliability-09 确认 100 个 worker Job/task/event 各唯一；Reliability-10 确认两个独立进程同一 task 只有一次 attempt；Reliability-11 确认两个独立进程同一 AutomationEvent 只有一个任务和 Inbox projection；Reliability-13/14 确认 failure retry contract 不伪造成功，并覆盖跨进程 retry/restart；Job ingest、provider/network 和全部 mutation 并发矩阵仍缺 |
| 75 | Golden Path E — Resume Conflict | PASS | 当前 10/10 composite 均验证手工编辑后旧 Proposal 变 stale，不能覆盖新内容 |
| 76 | Golden Path F — Data Recovery | PASS | 同一报告：隔离 Settings UI 暂存/取消、真实重启恢复和恢复后健康检查通过；不继承其他 Public E2E 结论 |
| 77 | Critical Repeatability 10/10 | PASS | E2E report：10/10 complete composite iterations |
| 78 | Extended Stability 50 runs ≥98% | PASS | E2E report：50/50 isolated first-run，integrity 50/50 |
| 79 | Full Test Gate | NOT_VERIFIED | 2026-09-07 backend 全量回归为 487 passed, 17 warnings, 1 subtests passed in 354.99s；empty-state 3/3、smoke、migration、failure/recovery、automation concurrency、Interview Replay、worker soak 100/100、frontend typecheck/build、extension typecheck/managed single-thread Vitest/WXT build、Tauri bundle 和 packaged sidecar health 通过；标准 PowerShell extension npm test 受宿主 System.OutOfMemoryException 影响，严格 RustSec、CI/clean-machine、live provider 和完整 release matrix 仍未验证 |
| 80 | Pre-existing Failure policy | PASS | 当前 Status 不把历史失败排除出 Release |
| 81 | Release Severity | PASS | P0–P3 已在 KNOWN_ISSUES.md 使用 |
| 82 | Release Bug Gate | PASS | Severity gate：当前 KNOWN_ISSUES.md 的 7 条已知项全部分类，P0=0、P1=0、audit findings=0；未完成的 GATE 仍继续阻止 Public Release |
| 83 | Production Packaging | PASS | Packaging report：Tauri 0.4.0 NSIS/MSI + sidecar 生成 |
| 84 | Clean Machine | NOT_VERIFIED | workflow 已新增独立 desktop-installed-smoke：先校验下载的 NSIS/MSI artifact manifest/hash/version/signature，再拒绝复用已占用的 8765、安装到 runner 临时目录、启动已安装 app、直连 127.0.0.1:8765/api/health 并严格核对 status=ok、service=OfferU、runtime=python、监听 owner 来自该安装目录、卸载并上传结果；本轮未执行远程 runner，仍不是无开发工具 clean OS/独立用户人工验收 |
| 85 | Python Sidecar | PASS | installed offeru-backend.exe、node.exe、agent-runtime、health/integrity/skills smoke 通过 |
| 86 | Installer lifecycle | PASS | uninstall → reinstall → launch/smoke → final uninstall 全通过，用户 appdata 保留 |
| 87 | Unified Versioning | PASS | backend/frontend/Tauri/Rust 当前均为 0.4.0，FastAPI health 使用的 backend/app/main.py 也纳入版本审计；audit_version_consistency.py 对五处声明做 fail-closed 机械核对，远程 Release runner 尚未重验 |
| 88 | Upgrade | NOT_VERIFIED | previous installer→current→migration→Golden Path 未跑 |
| 89 | Update Signing | NOT_VERIFIED | updater 未启用；启用时签名不可关闭 |
| 90 | Code Signing | BLOCKED_EXTERNAL | 代码/installer 尚未 ready；最终证书需要所有者 |
| 91 | Release Artifact set | NOT_VERIFIED | NSIS/MSI/sidecar、大小和 SHA-256 已记录；RELEASE_NOTES.md、THIRD_PARTY_NOTICES.md、LICENSE 已加入 CI 收集，收集前增加 artifact audit；新增 verify_release_artifacts.py 对 manifest、checksum、bytes、version、target、NSIS/MSI 集合、签名标记和 symlink root/metadata 做 fail-closed 校验；签名后的最终 artifact 尚未生成 |
| 92 | CI Release Pipeline | NOT_VERIFIED | workflow 已包含 backend/frontend/extension（typecheck、test、WXT build、生产依赖 audit）/RustSec strict unsound audit/product-claim/architecture audit（含 Automation/startup recovery boundary）、含 FastAPI health 的 release version consistency audit、7410 网页正文与 8765 版本/build mode 身份等待、empty/smoke/interview 三场景隔离 browser-smoke、独立 cross-process provider failure/restart recovery、10 个隔离 critical-browser-repeatability runner、独立 previous-release migration-browser-smoke、Windows NSIS+MSI package、独立 desktop-installed-smoke（8765 preflight、release 版本/build mode 与 installed-sidecar owner 验证）、100-cycle worker、CareerTask/AutomationEvent cross-process claim、bundle/sidecar/artifact/浏览器诊断 secret audit、正式 tag signing/verification、artifact hash、打包上传前和安装/Draft Release 下载后 manifest verification 与 secret audit，以及打包前和 Draft Release 前的 --require-ready fail-closed gate；未在远程 runner/tag 执行 |
| 93 | Release Candidate | NOT_VERIFIED | 尚未产生 vX.Y.Z-rc.1 |
| 94 | RC Iteration Loop | NOT_VERIFIED | 无每 RC 全量重验报告 |
| 95 | Three-perspective Self Review | PASS | Three-perspective review：Product、Architecture、Reliability/Security 三轮均记录当前证据、残余和 0 个新增 P0/P1；不替代最终人工发布批准 |
| 96 | Architecture Drift Scan | NOT_VERIFIED | Architecture audit 与正式 CI audit 覆盖 route mutation、Registry boundary、Provider execution branch、CLI/MCP/plugin boundary、Python cross-layer/import、唯一 Automation dispatcher 和 startup recovery boundary；2026-09-07 当前 checkout audit 为 0 finding，并覆盖本地 7410/8766 入口、固定 sidecar、WXT generated artifact、public-release endpoint guard、自动浏览器选择器和旧端口/入口；远程 runner、动态 browser/legacy runtime audit 和全部 drift 类别仍缺。详见 generated extension guard |
| 97 | Dependency Direction | PASS | Architecture audit：test_control_plane_global.py 对 app/models、app/agents、app/services 执行 lower-layer → route 与 model → application/control-plane import contract，结果为 0 违规；其它 surface 仍由对应边界测试覆盖 |
| 98 | Privacy Disclosure | NOT_VERIFIED | docs/PRIVACY_CONSENT.md 与 Email UI 已披露 local/cloud、邮箱只读、授权浏览器和媒体边界；最终公开法律政策与历史 retention 仍未完成 |
| 99 | Consent | NOT_VERIFIED | Security-06 覆盖 local/cloud Interview 类别、Gmail、IMAP 和 authorized browser 的 deterministic boundary；真实 OAuth/媒体授权、完整 outcome matrix 和最终政策仍缺 |
| 100 | Product Claims Gate | NOT_VERIFIED | backend/scripts/release/audit_product_claims.py 本轮扫描 119 个 README/Quickstart/Release Notes/前端 TS/TSX surface，当前高风险自动外部写入、无界实时市场和正向 Public Release claim 为 0，并接入 backend CI；仍需最终 installer/网站人工语义 review 与真实 live claim 验证 |
| 101 | README Update only after Final Gate | PASS | 当前仍明确为 Internal Beta，未提前宣称 Public Release |
| 102 | Public QUICKSTART / DEVELOPMENT split | NOT_VERIFIED | DEVELOPMENT.md 与不伪造 Public install 的 QUICKSTART 已存在；installer-first 普通用户文案仍需最终发布版完善 |
| 103 | Support Diagnostics | NOT_VERIFIED | Doctor、error_id、Agent SSE/CareerTask/projection failure correlation、startup recovery check、持久化 durable failure summary、diagnostic bundle 和 installed smoke 有证据；Doctor、扩展网页启动器和 public-release 五个 E2E 入口都会在网络探测/导航前拒绝 8080 及其它错误网页端口，当前入口/自动浏览器静态审计为 0 findings；Doctor 还验证 7410 HTML 的 OfferU 标识和 8765 的版本/build mode，前端启动门有界超时、可读错误和重试，前端/扩展探测拒绝重定向；完整支持人员 error_id 定位矩阵仍缺 |
| 104 | Doctor Release Gate | NOT_VERIFIED | Doctor --require-ready 本轮隔离运行返回 ok=true、backend/frontend ready、schema 2、integrity ok，并明确 CORE_READY 不代表 live provider/签名/公开发布 Gate；打包 sidecar health 另以 HTTP 200、status=ok、service=OfferU、version=0.4.0、runtime_mode=desktop-sidecar 通过；当前入口为 http://127.0.0.1:8766/api/health 与 http://127.0.0.1:7410，release-mode/clean-machine/远程 runner 仍未完成，故 Gate 保持 NOT_VERIFIED |
| 105 | Release Dashboard | PASS | STATUS.md 已更新七域当前证据、残余和下一动作 |
| 106 | Release Blocker Rule | PASS | 当前 FAIL/NOT_VERIFIED 已阻止发布 |
| 107 | Optional Integration Rule | PASS | Provider health matrix 验证 unprobed/ready/auth_required/blocked/unavailable 五种投影、四个 known Provider、read-side credential redaction；扩展 HTTP Adapter 另要求 OfferU/Python、非空版本和合法 build mode；真实 Provider availability 仍按 R25/R38 单独判定 |
| 108 | Final Human Acceptance | NOT_VERIFIED | 未在陌生用户 clean machine 执行 |
| 109 | Production Definition of Done | NOT_VERIFIED | 多项硬 Gate FAIL/NOT_VERIFIED |
| 110 | Final Status Rule | PASS | 当前保持 active，不因技术问题停止 |
| 111 | Completion Report | NOT_VERIFIED | 只在最终两种合法 verdict 产生 |
| 112 | Continuous Autonomous Instruction | PASS | STATUS/SCORE/next blocker 循环已开始 |
| 113 | Final Principle / user control | NOT_VERIFIED | 需最终人类验收、恢复与升级证据 |
此附录记录用户提出的 Local Agent Conformance & Real Career Golden Path，不改写上方 0–113 的 Public Release 映射。状态仍遵循本清单的五态规则。
| Gate | Status | Evidence / remaining proof |
|---|---|---|
| Agent capability matrix | PASS | 六个候选 Agent 已完成真实发现与能力投影；Codex live/lifecycle 全验证，其它 Provider 的 NOT_VERIFIED、UNAVAILABLE、BLOCKED_AUTH、ERROR 原样保留。见 H:\tmp\offeru\agent-matrix-final-20260910.json |
| Codex live model + lifecycle | PASS | 随机 nonce、JSON schema、streaming、同线程 resume、interrupt cancel、H 盘 cwd 和失败 kill recovery 均有证据。见 H:\tmp\offeru\codex-lifecycle-final-20260910.json |
| Codex → OfferU Registry | PASS | Agent 自行发现 doctor/manifest/playbook/operation list/schema，读取五个 Career 操作，mutation 0 且 grounding true。见 H:\tmp\offeru\codex-bridge-autodiscovery-career-20260909.json |
| Capability-aware provider selection + UI | PASS | resume/cancel/schema/web 声明 fail-closed；有持久化 VERIFIED 能力时优先选择；390px/1440px Agent dialog 显示同步和能力状态，无溢出或浏览器错误。见 H:\tmp\offeru\browser-agent-capability-state-20260910\report-v4.json |
| Resume → PROFILE_T0 | BLOCKED_EXTERNAL | 现有 fixture 流程通过，但真实用户 Resume PDF 尚未提供，不能升级为真实业务 PASS |
| Email read-only → observations | BLOCKED_EXTERNAL | IMAP fixture 的 search/list/read、去重和禁止 mutation 通过；真实邮箱 OAuth 尚未完成 |
| Longitudinal Profile evolution | BLOCKED_EXTERNAL | fixture 已验证 delta/dedup/conflict/hypothesis/reject 规则；真实分段邮箱输入和人工确认尚缺 |
| Profile → Job/Resume/Interview impact | BLOCKED_EXTERNAL | fixture 已证明 T0/Final 产生差异；真实 Profile Final 和真实 JD/下游闭环尚缺 |
| Resume import evidence review UI | PASS | ProfileOnboarding 最终步骤逐条展示候选来源与证据状态；接受走 confirm_profile_bullet，拒绝/稍后走 Memory review，未建立后端提案的真实文件候选 fail-closed；职业记忆/演化定向回归 21 passed，frontend typecheck/build PASS |
| First-run Resume evidence gate | PASS | OnboardingWizard 选中的本地文件候选先确认 MemoryProposal 再创建 Resume；无 OfferU session/来源提案的外部 AI JSON fail-closed；架构/技能投影定向回归 53 passed |
| Email sync status projection | PASS | 邮箱页轮询只读 EmailSyncRun 历史并展示真实状态、attempts、发现/候选/写入计数与有界错误；失败不会投影为 completed，frontend typecheck/build PASS |
| Regression / architecture / UI evidence | PASS | backend 506 passed, 9 skipped, 17 warnings, 11 subtests；frontend typecheck/build PASS；architecture 0 findings；390px/1440px browser errors/overflow 0。最新 H 盘回归见 H:\tmp\offeru\full-regression-profile-review-final-20260910.log |
| Test storage boundary | PASS | pytest 全局 tempfile、E2E helper、Smart Fill fixture、Agent CWD、browser profile、日志和数据库副本统一在 H:\tmp\offeru，Windows C 盘临时目录 fail-closed；边界回归 1 passed，完整策略证据见 H:\tmp\offeru\temp-policy-20260909.json。C 盘仅为既有 Provider executable/auth 路径，不承载测试临时数据 |
| Extension build / browser fixture | PARTIAL | Extension typecheck、WXT production build、Vitest 208 passed, 7 skipped 和 generated artifact guard 通过；动态 Smart Fill fixture 因 H 盘 managed Chromium CDN 下载 timeout/ECONNRESET 被外部阻塞，未使用系统 Chrome/Edge |
Release completion residual: historical privacy decision and full PII/artifact/retention audit; code signing; previous-release upgrade; clean-machine independent UI acceptance; CI/RC artifact verification; provider/network/restart reliability matrix
DATA_SAFETY_01 已通过 R45/R46/R49/R76，DATA_SAFETY_02 已通过 R43/R44，DATA_SAFETY_03 已通过 R47/R48。Data Safety 已完整通过，但 Security 及其他硬 Gate 未通过前不得宣称 Public Release PASS。
当前 Security 证据：Security 01 至 Security 08。Security-08 已清理正常工作区中确认属于本轮测试的合成邮箱数据，但历史旧正文与完整发布安全矩阵仍未完成。Public Release E2E、性能和 Packaging 证据见 E2E、Performance、Packaging；下一执行顺序继续隐私/发布工程、可靠性长时/worker 矩阵和独立 clean-machine 验收。