{ "kind": "KWANTU_CERTIFICATION_RECORD", "status": "KWANTU_IS_ON_CERTIFIED", "solution": "kwantu", "release": "0.1.0", "auditId": "KW-AUD-2026-09-19-FINAL-01", "auditReport": "PARECER_26_FINAL_AUDIT_KWANTU_IS_ON_2026-09-19.md", "auditSha256": "ed43a7c6396ec38d0469ee0dea324b16fd9ec3ab0a2d565783851f2b8e963edd", "issuedAt": "2026-09-19T16:45:00Z", "issuedBy": "Independent designated audit task Auditoria Kwantu, Claude Code channel (AUTHORITY_AUDIT_THREAD_2026-09-18.json sha256 291a7a252f4b7802c294e1acf0f9ddadf86a4670cc694edc21412df586a9e639), continuing designation of task 01a0b03e-ffbf-7a33-8456-455110f51471", "decision": "PASS_COM_LIMITES_DECLARADOS", "scope": "Kwantu Core MVP host readiness and approved behaviour in the P.O. Spectrum (Instituto Virgolim, Okinawa Dojo, Agua Vida, Fabio Hiro) on the hosted development/demonstration target, over the certified Bedrock 1.0.0.4; does not certify future components, use beyond demonstration, or the declared debts", "candidate": { "runSourceSha256": "c1cfb9bdbf4f2898a8e842a4f7535950581dc1c83168141e9fd0bc429ea537f6", "runSourceFiles": 381, "runCommit": "851cb28ab27281c0b80d9b1e4ca91bd56af6a809", "w3BaseCommit": "672ef55c0841f89333d27a8c9c9f369492247966", "w3BaseSourceSha256": "f6ea27cfae64bf42991208dfa7ab8737e982a2585d4a4be2dbe78715a9029680", "amendedCommit": "3d01303cd496ce313247c3f141dadf976845bdf3", "amendmentDiffSha256": "c2cfb1ca846ce4cd21180479ca22e5ad75ebdca38555933fb46823c40113f0d1", "runtimeIdenticalToAmendedCommit": true, "buildId": "w4-c1cfb9bdbf4f", "bundleSha256": "7e331f5a892694209422fd99c9aa17599271999dcec4a1a45c66bf774b4f05b8", "workerSha256": "d05223bf4d44c84108a102ab62aa3bc9c5568f0c3ac2064c37be5cc65c64bc45" }, "target": { "provider": "Cloudflare Workers", "accountId": "e51331cb273e15fe2e0d334cf36bf593", "worker": "kwantu-demo", "origin": "https://app.kwantu.com.br", "deployedVersionId": "b7552af6-72bb-4060-9a1e-193789680c04", "previousVersionId": "f311daad-ac63-4ed3-9972-ba36203ec125", "database": { "name": "kwantu-demo", "id": "fffab7f7-4a2b-41e0-b96f-f963081f0522" }, "environment": "development/demonstration; not production with SLA", "mode": "live" }, "dependency": { "bedrockRelease": "1.0.0.4", "bedrockCertificationSha256": "7d61196d1159ebbef8613799f12add0c4a9cc10f1f376599607ae826765d2d8d", "bedrockRuntimeImageDigest": "sha256:0223397c765e69e5115c1529bf757113a283ded4ecc636c0eba85c2cc6dca27f", "bedrockRuntimeRevision": "bedrock-development-runtime--0000012", "contractRelease": "1.0.0.2", "contractLockSha256": "097d4268a45dd33d65ffa8c150a8dd8f62b0edd14c8fe2faff3bfe73ac94124a", "openapiSha256": "b78c3daa91808df1cbf6b01671ceedd1ad4d6855319ea4960d2292d3bd122a27" }, "ignition": { "runId": "2026-09-19T15-36-03-140Z-b0030388", "result": "IGNITION_COMPLETE_PENDING_FINAL_AUDIT", "checksPassed": 34, "checksMeasured": [ "W4-31-candidate-api-p95" ], "checksFailed": 0, "latency": { "p50Ms": 1296, "p95Ms": 2217, "targetP95Ms": 1500, "requests": 23, "targetMet": false }, "temporaryAuthority": { "operations": [ "ResolveSchedulingSlots", "ResolveAvailableCapacityWindow", "ResolvePrice" ], "partyGrants": 0, "activeAfterClose": 0 }, "bedrockCanonicalWrites": 0, "attempts": 9, "attemptsIndex": [ "876f4586 PRE_PUBLICATION_ABORT_NO_MUTATION", "71fed5c8 PRE_PUBLICATION_ABORT_NO_MUTATION", "90c498f6 POST_PUBLICATION_ROLLBACK_CONFIRMED", "f88ef4b3 POST_PUBLICATION_ROLLBACK_CONFIRMED", "91fbd57b POST_PUBLICATION_ROLLBACK_CONFIRMED", "e3b30973 POST_PUBLICATION_ROLLBACK_CONFIRMED", "b2d6a35f POST_PUBLICATION_ROLLBACK_CONFIRMED", "6aa36000 POST_PUBLICATION_MANUAL_ROLLBACK", "b0030388 IGNITION_COMPLETE" ] }, "lineage": { "w0": { "decision": "W0_PASS", "review": "PARECER_06 (Codex) c39e40fa55ffc81d63c5640445a6c6e4629b690846acce2db9602bf69db3c4d5" }, "w1": { "decision": "W1_PASS", "review": "PARECER_07 (Codex) d9869209a74f23a0c7282bb1b5660b9c50be5f7b66cce17baf596642642c2d82", "run": "2026-09-18T12-40-51-153Z-0c3fb19b" }, "w2": { "decision": "W2_PASS_COM_LIMITES", "review": "PARECER_16 fbc370dc7211e048f87ca5b32615ea62479299b2781f46b8707f8cdb6848cc75", "run": "2026-09-18T21-04-05-141Z-579987db" }, "w3": { "decision": "W3_PASS_COM_LIMITES / READY_FOR_SOLUTION_IGNITION", "review": "PARECER_18 5258eda8a37cf5e004afc0cc5febb62bd653d4da3fd681397679e676d110aacb", "run": "2026-09-18T23-58-06-098Z-35e12e26" }, "humanGate": { "decision": "P.O. authorized W4 preparation and governed execution", "sha256": "7d4dc93f41884d4ee3a32728fae6cde536e6d2db1bbbc7146edc87a598e34ca1" }, "w4Plan": { "version": 4, "planSha256": "fc7199a066d8759eed66f7293719ee6b85b0e9479eb2887fe5b51453d5d17132", "review": "PARECER_24 237376680ffcb6c995b836ead8d1345661373bb85dd3aa3066ca3556a1ae2508" }, "w4Amendment": { "review": "PARECER_21 ab602bfd324a5cfbdace226eefeff1c88f3203f9bd400c686517ad8213f8bdb6" }, "w4Retry": { "review": "PARECER_25 ac37209a3e41f42479574e781f2e4e808c5ee3bc8e22b066d4e74d8bf2b6f74d" }, "executionAuthorization": { "version": 12, "sha256": "4434377c8323f4c3c769de7b7775a479647ba13e8bcad343b83e9b50b36515f6", "acknowledgements": 7 } }, "evidenceBundle": { "name": "ENVIO_18_IGNITION_W4_2026-09-19.zip", "sha256": "32026f5f7cd333d526805c1655c7ea4ee4e606809ab61dd8956e3a7035e07434", "files": 1019, "availability": "controlled audit storage (docs/audit/intake)" }, "supportingEvidenceBundles": [ { "name": "ENVIO_16_PROVA_W3_2026-09-18.zip", "sha256": "0603dad9bf80f79dfae5a27a85c96287da3dcee739916e42695dc8cf04784320" }, { "name": "ENVIO_15_PROVA_W2_2026-09-18.zip", "sha256": "a2f6ba5ec0267e812bad1116af4808564c2ff89a57726c95edd400fce5bec679" } ], "verdicts": { "ktrace": "PASS (30/30 release cases in W3 on certified Bedrock 1.0.0.4)", "stress": "PASS (3 W3 stress tests; capacity concurrency also proven at Bedrock level)", "demo": "PASS_COM_LIMITES (9 Organizations, DEMO-AUTH 10/10 in W3 and 7 hosted in W4; five Organizations access/isolation only; demo account read-only on live)", "extensionReadiness": "PASS (EXT-RDY-001..010; reference components test-only, not enabled on the hosted target)", "integrationReadiness": "PASS (INT-RDY-001..010; manual fallback proven)", "boundaries": "PASS (configuration, permission and Organization scope enforced; forged requests denied before any Bedrock command)", "failSafe": "PASS (5 automatic rollbacks, 1 governed manual rollback, single status after fix f6933a7)", "evidenceCoherence": "PASS (hash lineage W0->W4; runs never edited; sidecar markers)" }, "limitations": [ "P2-W3-01: Fast Escova, IFCV, Sof.Town, Advocacia and Gabinete have access/isolation proofs only (P.O. Spectrum decision).", "P2-W4-13: the shared demo account holds only persistent operations:read on the live target (search yes; hold/commit/policy/finance no); persistent write authority only by a specific textual decision of the responsible.", "P2-W4-15 / P3-W3-02: candidate API p95 ~2.2 s measured remotely against a declared 1500 ms target; authorization read volume (~76 reads per request in W3); treat before any use beyond demonstration.", "P3-W3-06: financial definitions created outside the public contract and kept under retroactive authorization; allocation is Solution-owned.", "P3-W4-09: no W0-W3 proof ran the runtime on the Workers environment; smoke-test in an ephemeral Worker before future publications.", "Candidate amended after the Human Gate (3 lines, redirect manual) with its own regression; W3 PASS holds for base 672ef55.", "Hosted proof performs no canonical business write on the target; write paths proven in W2/W3 on the same Bedrock and runtime.", "Deploy exits non-zero only for the zone routes listing error (OAuth scope); activation and hosted identity are the publication evidence.", "Six short exposures of earlier candidates on the domain during attempts, all reverted and declared.", "Authorizations and acknowledgements given by generic instruction or option answers with structured fields filled by the implementation, as each record declares.", "Retained state: D1 additive migrations 0004-0008 and three proof identities; inactive Worker versions (6 reverted, 4 never deployed); Bedrock public database with dataset W3-V1 and declared W3 residues; app.kwantu.com.br is a development/demonstration environment.", "Out of gate (Spectrum W3): full Recurrence, Advanced Composer, advanced CRM, NFS-e, commercial variants, Node/Organization search." ], "demoCredentialRule": "The shared demo password is supplied through DEMO_LOGIN_PASSWORD and is absent from source, evidence and this record.", "retention": { "owner": "Ricardo / implementation", "state": "RETAINED_AS_DECLARED_DEMONSTRATION_ENVIRONMENT", "note": "Records retained on the target and on the public Bedrock are declared in RETENTION_AND_CLEANUP.json and confirmed by the read-only inventory v3; P3-F-01 closed." }, "downstream": { "certificateBytesPublication": "PENDING_AT_ISSUANCE (implementation transports these exact R1 bytes; the revision-0 record must not be published)", "changesRequiringNewReview": [ "runtime", "public contract or Bedrock dependency", "persistent authority on the public database", "demo dataset identity", "hosted target configuration" ], "openDebts": [ "P2-W3-01", "P2-W4-13", "P2-W4-15", "P3-W3-02", "P3-W3-06", "P3-W4-09", "P3-F-04" ] }, "certified": true, "kwantuIsOn": true, "revision": 1, "supersedesRecordSha256": "169286831689fc121cc34aa3b90f64f700de9335fc52a7ea9cf3691488fb1afc", "addendum": { "opinion": "PARECER_26A", "auditId": "KW-AUD-2026-09-19-FINAL-01A", "sha256": "c28b1b5527360994e6022b874bba0358d7729c641e1b9b247bc292b79e9db0dd" }, "supersededEvidenceBundle": { "sha256": "079f342fd23f7ae5d7972620d9c7e373407fe5453445a681208c3aba32e4ad48", "files": 1013, "state": "SUPERSEDED_AND_REMOVED_BY_IMPLEMENTATION; evidence/ byte-identical in the current bundle; copy retained by the auditor" }, "publicDatabaseInventory": { "version": 3, "file": "PUBLIC_DATABASE_RESIDUES/PUBLIC_DATABASE_RESIDUES_INVENTORY_2026-09-19.json", "snapshotProgramSha256": "372e566cc3e76a32bc603c4d0f3a9206a9bd998c2cf4121635062eeb32983192", "rowsSha256": "280dd6675eda8b41678fe54d153106e46f17a8335d278134a3ebdd605a56b4fd", "queried": 163, "present": 107, "absentExpected": 56, "unexpected": 0, "w1FixtureActiveRequiredRequirements": 0 } }