Record cross-account document availability and pending UI review

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1abf1-7e95-7141-87c9-ee78332bf790

docs/evidence/2026-11-05-vergabe-document-return.json

@@ -0,0 +1,23 @@
+{
+  "schema": "railiance.vergabe-pilot-user-return.v1",
+  "reported_on": "2026-11-05",
+  "workplan": "RAPPS-WP-0014",
+  "task": "RAPPS-WP-0014-T03",
+  "evidence_source": "User confirmation in the active conversation",
+  "evidence_kind": "user_reported",
+  "company": "demo-company",
+  "user_return": "The file is there fine on the other account; the UI around documents still needs review.",
+  "uploaded_document_available_to_other_account": true,
+  "download_sha256_independently_verified": false,
+  "document_ui_review": {
+    "status": "pending",
+    "requested_by_user": true,
+    "owner": "vergabe-teilnahme",
+    "observed_discoverability_issue": "Upload is reached through phase 6 Unterlagen finalisieren, then Dokumente / + Hochladen"
+  },
+  "anonymous_download_denial_verified": false,
+  "populated_restart_or_recovery_verified": false,
+  "personal_account_identifiers_recorded": false,
+  "credentials_or_tokens_recorded": false,
+  "runtime_mutations_by_agent": false
+}

docs/vergabe-demo-company-acceptance.md

@@ -5,7 +5,10 @@ The user confirmed both demo-company accounts can sign in with username/password
 and OTP on 2026-11-05; see the [sign-in receipt](evidence/2026-11-05-vergabe-two-user-signin.json).
 The user also confirmed Ausschreibung/Anforderung creation and visibility from
 the other account after reload; see the [workflow return](evidence/2026-11-05-vergabe-shared-workflow.json).
-Task edits, document/local-issue workflow and recovery remain pending.
+The user confirmed the uploaded file is available from the other account; see
+the [document return](evidence/2026-11-05-vergabe-document-return.json). The
+document UI still needs user review. File hash equality and signed-out download
+refusal are unverified. Task edits, local-issue workflow and recovery remain pending.
 
 The other session does not update automatically, and a fresh login was needed
 after a short interval. The user wants a full working day without renewed login

workplans/RAPPS-WP-0014-vergabe-invited-pilot.md

@@ -196,7 +196,7 @@ id: RAPPS-WP-0014-T03
 status: wait
 needs_human: true
 decision_id: d06307e5-2737-461a-a2f4-a12c3b492a9a
-intervention_note: "Both accounts sign in with password/OTP; Ausschreibung/Anforderung creation and cross-account visibility after reload are user-confirmed 2026-11-05. Next: document round-trip, remaining task/local-issue workflow, then coherent off-host recovery, isolated restore, rollback and operating ownership. Session/OTP refinement is explicitly deferred. railiance-platform owns storage/custody delivery."
+intervention_note: "Both accounts sign in; created records and uploaded document are visible from the other account (user-confirmed 2026-11-05). Next: remaining task/local-issue and negative-access checks, then populated restart, coherent off-host recovery, isolated restore, rollback and ownership. Document UI review stays pending; session/OTP refinement is deferred. railiance-platform owns storage/custody delivery."
 priority: high
 assignee: the-custodian
 blocking_reason: "Await populated two-user/document workflow, coherent PostgreSQL/media/issue-state off-host recovery point, isolated restored workflow, rollback evidence and support ownership. September 25 proves database restore and restart only."
@@ -292,6 +292,14 @@ walkthrough with the actual labels and requested confirmation that the upload
 form is reachable. No backend upload failure or successful upload is inferred;
 no product source, deployment or access policy was changed.
 
+2026-11-05 document return: the user confirms the file is available from the
+other account and requests a later review of the document UI. Receipt:
+`docs/evidence/2026-11-05-vergabe-document-return.json`. This resolves the upload
+navigation obstacle and confirms cross-account availability; document UI
+acceptance, byte/hash equality, anonymous refusal and populated recovery are
+not inferred. Requested the task's local issue badge/key check from both
+sessions next. T03 retains its remaining workflow, recovery and ownership scope.
+
 
 ## Validate synthetic sizing against the exact release and shared contention