Record shared Vergabe visibility and defer session refinement

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1abf1-7e95-7141-87c9-ee78332bf790

docs/evidence/2026-11-05-vergabe-shared-workflow.json

@@ -0,0 +1,38 @@
+{
+  "schema": "railiance.vergabe-pilot-user-return.v1",
+  "reported_on": "2026-11-05",
+  "workplan": "RAPPS-WP-0014",
+  "task": "RAPPS-WP-0014-T03",
+  "evidence_source": "User confirmation in the active conversation",
+  "evidence_kind": "user_reported",
+  "company": "demo-company",
+  "confirmed": {
+    "ausschreibung_creation": true,
+    "anforderung_creation": true,
+    "created_records_visible_to_other_account_after_reload": true
+  },
+  "additional_created_item_user_label": "Pilot",
+  "additional_item_domain_type": "not independently established",
+  "observations": [
+    "The other session needs a manual reload; no automatic update observed",
+    "A new login was needed after a short, unspecified interval"
+  ],
+  "deferred_feedback": {
+    "requested_session_experience": "One full working day without a new login",
+    "requested_otp_experience": "No OTP at initial application sign-in",
+    "timing": "User explicitly deferred refinement until later",
+    "owners_for_later_review": ["net-kingdom", "key-cape"],
+    "session_or_assurance_policy_changed": false,
+    "specific_timeout_cause_established": false
+  },
+  "still_unverified": [
+    "Task edit saved by one account and seen by the other",
+    "Document upload and byte-identical download",
+    "Persisted local issue",
+    "Domain approval and demo submission recording",
+    "Populated restart, off-host recovery, isolated restore and rollback"
+  ],
+  "personal_account_identifiers_recorded": false,
+  "credentials_or_tokens_recorded": false,
+  "runtime_mutations_by_agent": false
+}

docs/vergabe-demo-company-acceptance.md

@@ -3,7 +3,15 @@
 Prepared 2026-11-05 for RAPPS-WP-0014-T03 and VERGABE-WP-0019-T04/T06.
 The user confirmed both demo-company accounts can sign in with username/password
 and OTP on 2026-11-05; see the [sign-in receipt](evidence/2026-11-05-vergabe-two-user-signin.json).
-The collaborative workflow and recovery steps below remain pending execution.
+The user also confirmed Ausschreibung/Anforderung creation and visibility from
+the other account after reload; see the [workflow return](evidence/2026-11-05-vergabe-shared-workflow.json).
+Task edits, document/local-issue workflow and recovery remain pending.
+
+The other session does not update automatically, and a fresh login was needed
+after a short interval. The user wants a full working day without renewed login
+and would prefer no OTP at initial app sign-in, with refinement explicitly
+deferred. NetKingdom/KeyCape session and assurance policy review remains later
+work; the timeout's cause is unestablished. No session or OTP policy changed.
 
 ## Sign in separately
 
@@ -85,8 +93,8 @@ and [deployment binding](vergabe-demo-company-binding.md). Its receipt must cove
 
 Existing database-only backup/restore targets default to historical `vergabe_db`
 and omit both file stores. They cannot establish this three-store recovery claim.
-Two-account sign-in is user-confirmed; the shared workflow remains pending.
-The attended restart, off-host
-capture, isolated restore and rollback action has not been prepared or executed.
+Two-account sign-in and cross-account visibility of newly created records are
+user-confirmed; the remaining shared workflow is pending. The attended restart,
+off-host capture, isolated restore and rollback action has not been prepared or executed.
 Logged-in account deactivation remains a separate owner-run access-control check
 from the pilot contract. No account is disabled as part of these walkthrough steps.

workplans/RAPPS-WP-0014-vergabe-invited-pilot.md

@@ -196,7 +196,7 @@ id: RAPPS-WP-0014-T03
 status: wait
 needs_human: true
 decision_id: d06307e5-2737-461a-a2f4-a12c3b492a9a
-intervention_note: "Both demo-company accounts can sign in with password and OTP (user-confirmed 2026-11-05). Next complete shared tender/task/document/local-issue acceptance, then the coherent off-host recovery, isolated restore, rollback and operating ownership evidence. railiance-platform owns storage/custody delivery."
+intervention_note: "Both accounts sign in with password/OTP; Ausschreibung/Anforderung creation and cross-account visibility after reload are user-confirmed 2026-11-05. Next: document round-trip, remaining task/local-issue workflow, then coherent off-host recovery, isolated restore, rollback and operating ownership. Session/OTP refinement is explicitly deferred. railiance-platform owns storage/custody delivery."
 priority: high
 assignee: the-custodian
 blocking_reason: "Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery point, isolated restored workflow, rollback evidence and support ownership. September 25 proves database restore and restart only."
@@ -270,6 +270,18 @@ Requested the shared task-edit result next. The broader decision
 `d06307e5-2737-461a-a2f4-a12c3b492a9a` and T03 remain open/wait; sign-in alone
 does not resolve the full workflow/recovery gate.
 
+2026-11-05 shared-workflow return: the user can create Ausschreibung, an item
+called Pilot and Anforderung, and see them with the other account after reload.
+Receipt: `docs/evidence/2026-11-05-vergabe-shared-workflow.json`. This confirms
+creation and cross-account visibility; a saved task edit and local issue are
+not inferred. The user observes no automatic refresh and a fresh login after a
+short, unspecified interval. Their desired full working day without renewed
+login and no OTP at initial app access is recorded for later NetKingdom/KeyCape
+session/assurance review, explicitly deferred at their request. No timeout cause
+or policy change is claimed, and this refinement does not hold the walkthrough.
+Requested the document upload/download result next. T03 remains wait for the
+remaining populated workflow and coherent recovery/rollback/ownership evidence.
+
 
 ## Validate synthetic sizing against the exact release and shared contention