Require invited login and private downloads for the company pilot

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/evidence/2026-09-11-invited-pilot-access.json

@@ -0,0 +1,42 @@
+{
+  "schema": "vergabe.invited-pilot-source-acceptance.v1",
+  "date": "2026-09-11",
+  "source_base_commit": "56bf193193a4db635692ddd9e534c233b13f904e",
+  "regression_baseline": {
+    "failed": 9,
+    "passed": 3,
+    "anonymous_read_and_create_demonstrated": true
+  },
+  "application_suite": {
+    "passed": 94,
+    "database": "disposable SQLite",
+    "local": true,
+    "container": true,
+    "container_image_id": "sha256:6f85d039115d5412b77a65740baa741f37e9ac2bf5f28a7a216aebf8f3c428cc",
+    "static_files_collected": 139,
+    "vite_build": "passed",
+    "migration_drift": false,
+    "warning": "One existing naive-datetime warning"
+  },
+  "ruff_new_access_modules": "passed",
+  "browser": {
+    "status": "passed",
+    "checks": [
+      "Anonymous tender page redirects to login",
+      "Password input has a visible border and usable height",
+      "Invited member logs in and reaches password-change UI",
+      "User menu submits CSRF-protected logout and returns to login",
+      "Login fits a 390-pixel viewport without horizontal overflow",
+      "No browser JavaScript errors"
+    ],
+    "synthetic_users": true,
+    "disposable_sqlite": true,
+    "local_http_only": true,
+    "native_customer_admission": false
+  },
+  "native_customer_admission": false,
+  "live_customer_data_used": false,
+  "pricing_required_for_pilot": false,
+  "factory_attempts": 0,
+  "paid_model_calls": 0
+}