# Local hardening evidence — 2026-08-25

## Scope

- Environment: Windows development workstation, Python 3.12 virtual environment, bundled Node
  24 runtime, local SQLite test databases, real local Playwright/Chromium where selected tests run.
- Branch: `codex/foundation-phase-1`.
- Responsible implementer/reviewer: Codex primary engineering agent.
- Independence: none. This evidence does not satisfy independent Security or QA approval.
- External systems: no provider credentials, external accounts, or live side effects used.

## Passed evidence

```text
python -m ruff check .
All checks passed!

python -m pytest -q
73 passed in 134.81s

python -m pip check
No broken requirements found.

pnpm typecheck
passed

pnpm test
3 files, 6 tests passed

pnpm build
passed; 1,811 modules transformed
```

The suite covers one-time bootstrap, login throttling, password/session/MFA/reset lifecycle,
workspace isolation and denial, approval binding/replay, agent/tool authorization, append-only audit
behavior, signed Computer capabilities, unknown-write reconciliation, lease/approval/idempotency/
artifact maintenance, SSRF guards, persistent real Chromium behavior, migrations, and static
deployment policy.

`git diff --check` passed after this evidence file was added. Frontend output is generated from the
locked dependency graph and is not committed.

## Blocked evidence

`docker version` and `docker compose ... config` could not run because the `docker` command is not
installed. Therefore this evidence does not verify container builds, effective Compose merge, live
PostgreSQL runtime grants, Redis ACL behavior, TLS, ports, Linux filesystem/capabilities, browser
egress, encrypted backups, or restore.

The GitHub CI/security workflows are defined but were not run against a configured remote. No image
scan, secret scan, CodeQL result, SBOM artifact, branch protection, load test, host hardening,
monitoring, alert, backup, restore, incident drill, or independent review evidence exists locally.

## Release interpretation

This record supports checked application-level items in `PRODUCTION_CHECKLIST.md`. It does not
approve a production release. Target-host and independent evidence in
`FINAL_PRODUCTION_REPORT.md` remains mandatory.