{
  "evidence": "business delivery lane — vergabe-teilnahme conformance snapshot",
  "workplan": "CUST-WP-0058-T07",
  "contract": "canon/standards/business-app-service-contract_v0.1.md",
  "captured_at": "2026-07-10",
  "captured_by": "custodian (Claude Code session)",
  "deployment": {
    "source_repo": "vergabe-teilnahme",
    "deployed_image": "gitea.coulomb.social/coulomb/vergabe-teilnahme:f95de14",
    "image_tag_style": "immutable commit SHA",
    "deployed_commit": "f95de14 (Fix CSRF 403 on all POSTs behind traefik)",
    "repo_head": "1061f3e",
    "drift_commits": 14,
    "release_values": "railiance-apps/helm/vergabe-teilnahme-values.yaml",
    "namespace": "vergabe-teilnahme",
    "pod_age_days": 49,
    "ingress": "vergabe-teilnahme.whywhynot.de (traefik, 92.205.130.254)",
    "tls": "cert-manager certificate READY=True"
  },
  "smoke": {
    "method": "curl HTTPS root",
    "result": "302 -> /ausschreibungen/dashboard/ -> 200",
    "latency_s": 0.15,
    "automated": "Forgejo CI smoke workflow present in repo (2cb8885), runner execution not verified in this snapshot"
  },
  "database": {
    "cluster": "apps-pg (cnpg, shared, 1 instance, healthy, 52d)",
    "backup_spec": null,
    "note": "NO cnpg backup configured — also true for gitea-db, net-kingdom-pg, state-hub-db"
  },
  "conformance": {
    "s1_shape_standalone": "PASS",
    "s1_tenancy_instance_per_client": "PASS (single pilot instance)",
    "s1_3_consolidation_ready_tenant_keying": "FAIL — no tenant key in any Django app model",
    "s2_app_local_identity": "PASS (Django accounts app)",
    "s3_build_evidence_immutable_tags": "PASS",
    "s3_registry": "PASS (gitea.coulomb.social/coulomb)",
    "s4_1_ops_hub_registration": "FAIL — not in ops-hub service inventory",
    "s4_2_backup_restore": "FAIL — no cnpg backup/scheduledbackup, no restore test evidence",
    "s4_3_runbook": "GAP — no runbook found in app repo",
    "s4_4_smoke": "PASS (manual); CI workflow present, runner evidence pending",
    "s5_cost_attribution_key": "FAIL — no client x app x instance key in fin-hub (FIN-WP-0002 G1)",
    "s6_data_protection_export_delete": "NOT ASSESSED (app-level feature review needed)"
  },
  "gap_owners": {
    "tenant_keying": "vergabe-teilnahme repo",
    "ops_hub_registration": "ops-hub repo",
    "cnpg_backups": "railiance-apps repo (cluster-wide, all four DB clusters)",
    "cost_attribution": "fin-hub repo (FIN-WP-0002)",
    "runbook": "vergabe-teilnahme repo"
  }
}