Bind Vergabe pilot fixtures and prepare native recovery preflight

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1abf1-7e95-7141-87c9-ee78332bf790

docs/evidence/2026-11-05-vergabe-identified-page-gates.json

@@ -0,0 +1,35 @@
+{
+  "schema": "railiance.vergabe-pilot-anonymous-page-probes.v1",
+  "observed_at": "2026-11-05T21:27:44.219543+00:00",
+  "runtime_mutations": false,
+  "reads": [
+    {
+      "path": "/demo-company/ausschreibungen/1/",
+      "method": "GET",
+      "cookies_supplied": false,
+      "final_status": 200,
+      "final_host": "vergabe-teilnahme.coulomb.social",
+      "final_path": "/demo-company/accounts/login/",
+      "netkingdom_welcome_present": true
+    },
+    {
+      "path": "/demo-company/ausschreibungen/1/aufgaben/1/",
+      "method": "GET",
+      "cookies_supplied": false,
+      "final_status": 200,
+      "final_host": "vergabe-teilnahme.coulomb.social",
+      "final_path": "/demo-company/accounts/login/",
+      "netkingdom_welcome_present": true
+    },
+    {
+      "path": "/demo-company/ausschreibungen/1/dokumente/1/",
+      "method": "GET",
+      "cookies_supplied": false,
+      "final_status": 200,
+      "final_host": "vergabe-teilnahme.coulomb.social",
+      "final_path": "/demo-company/accounts/login/",
+      "netkingdom_welcome_present": true
+    }
+  ],
+  "binary_document_download_tested": false
+}

docs/evidence/2026-11-05-vergabe-local-issue-return.json

@@ -0,0 +1,23 @@
+{
+  "schema": "railiance.vergabe-pilot-user-return.v1",
+  "reported_on": "2026-11-05",
+  "workplan": "RAPPS-WP-0014",
+  "task": "RAPPS-WP-0014-T03",
+  "evidence_source": "User confirmation and application URLs in the active conversation",
+  "evidence_kind": "user_reported",
+  "company": "demo-company",
+  "local_issue_badge_visible_in_both_accounts": true,
+  "exact_issue_key_independently_verified": false,
+  "fixture": {
+    "ausschreibung_id": 1,
+    "aufgabe_id": 1,
+    "dokument_id": 1,
+    "task_url": "https://vergabe-teilnahme.coulomb.social/demo-company/ausschreibungen/1/aufgaben/1/",
+    "document_detail_url": "https://vergabe-teilnahme.coulomb.social/demo-company/ausschreibungen/1/dokumente/1/"
+  },
+  "document_ui_review": "pending",
+  "populated_restart_or_recovery_verified": false,
+  "personal_account_identifiers_recorded": false,
+  "credentials_or_tokens_recorded": false,
+  "runtime_mutations_by_agent": false
+}

docs/evidence/2026-11-05-vergabe-native-inventory.json

@@ -0,0 +1,20 @@
+{
+  "schema": "railiance.vergabe-pilot-native-inventory.v1",
+  "observed_at": "2026-11-05T21:25:35.760984+00:00",
+  "runtime_mutations": false,
+  "native_inventory_complete": false,
+  "cluster_read": "ok",
+  "cluster_matches_expected": true,
+  "nodes_read": "forbidden",
+  "deployment_read": "forbidden",
+  "claims": {
+    "media": {
+      "read": "forbidden"
+    },
+    "app-state": {
+      "read": "forbidden"
+    }
+  },
+  "database_cluster_read": "forbidden",
+  "helm_read": "request_failed"
+}

docs/proposals/2026-11-05-vergabe-recovery-preflight/README.md

@@ -0,0 +1,42 @@
+# Vergabe native recovery inventory
+
+Prepared under RAPPS-WP-0014-T03. The user has identified Ausschreibung 1,
+task 1 and document 1, and confirmed the local issue is visible to both accounts.
+This packet prepares the native metadata read needed before a populated restart
+and coherent three-store recovery action can be pinned.
+
+The [action](action.json) embeds the complete source of
+[`tools/vergabe_pilot_inventory.py`](../../../tools/vergabe_pilot_inventory.py)
+as one `python3 -c` argument, bound to `kube:railiance01`, profile `kube-admin`,
+agent `custodian-agt`, cwd `/` and an empty proposed environment.
+
+Action digest:
+`sha256:2014e62a84b0875fec155dbfd1be26963d9a39ab931092d26c5dfb9e627ffbd7`.
+Source SHA256:
+`b610059b5d7398138062de51edab3555b973cfbb61f02fa684184852805d7507`.
+
+The command reads the cluster UID, node conditions, the exact pilot Deployment,
+the two named PVCs, `databases/apps-pg` status and Helm release summaries. It
+checks the recorded immutable image, Recreate/single-writer readiness and exact
+mounts. Child output/errors are captured; the receipt contains booleans,
+read-status codes and Helm revision. It stops immediately on a different cluster.
+There are no resource mutations, pod exec, application queries or file captures.
+
+The current caller's [inventory receipt](../../evidence/2026-11-05-vergabe-native-inventory.json)
+is incomplete: the cluster UID matches, while node, Deployment, PVC and CNPG
+reads are forbidden and Helm listing fails. This caller did not execute a
+privileged proposal. The workstation has no installed `gexec` command; proposal
+preparation used the existing gated-executor source CLI/action format only.
+
+For attended execution, review this exact JSON with `gexec show` in the admitted
+founder runtime, sign it with that runtime's existing approver key and submit
+through its configured spool. The environment orientation §6 requires the
+gated executor for privileged actions. No signing key, elevated kubeconfig or
+new standing agent grant is requested by the packet. The result must report
+`native_inventory_complete: true` before using its expected release as the
+baseline of a separately reviewed capture/restart operation.
+
+Validation: source compilation and synthetic command responses cover success,
+immediate wrong-cluster refusal, image drift and exclusion of a private canary
+from the receipt. Ruff is unavailable in the current shell. No native pass,
+snapshot, restart, off-host publication or restore has occurred.

docs/vergabe-demo-company-acceptance.md

@@ -8,7 +8,10 @@ the other account after reload; see the [workflow return](evidence/2026-11-05-ve
 The user confirmed the uploaded file is available from the other account; see
 the [document return](evidence/2026-11-05-vergabe-document-return.json). The
 document UI still needs user review. File hash equality and signed-out download
-refusal are unverified. Task edits, local-issue workflow and recovery remain pending.
+refusal are unverified. The user also confirms the **LOKAL** issue badge is
+visible in both accounts; the [issue return](evidence/2026-11-05-vergabe-local-issue-return.json)
+binds Ausschreibung 1, task 1 and document 1 from their supplied URLs. Task
+edits, domain approval/submission and recovery remain pending.
 
 The other session does not update automatically, and a fresh login was needed
 after a short interval. The user wants a full working day without renewed login
@@ -74,6 +77,9 @@ confirms the recorded cluster UID, public health and the NetKingdom welcome
 gate. Node, Deployment and PVC reads are forbidden to the current agent identity;
 fresh image/release/claim status remains unverified. The binding's expected image
 and claims are historical reference values until a permitted native readback.
+The [native inventory packet](proposals/2026-11-05-vergabe-recovery-preflight/README.md)
+now provides the exact metadata-only action; its current-caller receipt remains
+incomplete. It prepares the baseline read, rather than a snapshot or restart.
 
 After the populated workflow, prepare the exact attended recovery action from
 the existing [pilot recovery contract](vergabe-teilnahme-pilot.md#persistence-and-recovery)