docs(memory): handover HEAD 452bab6; production hardening started

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MPuJXQyAeWpFcTtcnxo1UN
This commit is contained in:
JSLMPR 2026-07-24 15:15:07 +02:00
parent 452bab6a1b
commit 846cb05aa5
1 changed files with 11 additions and 3 deletions

View File

@ -14,11 +14,19 @@ git status --short # uncommitted work may be the real current s
``` ```
- **Recorded HEAD when this was written: `9fb24e8`** ("R6 speed-ramp: ease into slow-motion"). The 2026-07-23/24 - **Recorded HEAD when this was written: `9fb24e8`** ("R6 speed-ramp: ease into slow-motion"). The 2026-07-23/24
session committed: `1da0661` two-tier director + source-adaptive rendering, `30c832e` loudness mastering, session's quality work: `1da0661` two-tier director + source-adaptive rendering, `30c832e` loudness mastering,
`f03d547` R6 crossfades, `67bdf68` R7 bold overlays, `407f6b5` Tier-2 caption-driven selection, `a2a7d7d` R8 `f03d547` R6 crossfades, `67bdf68` R7 bold overlays, `407f6b5` Tier-2 caption-driven selection, `a2a7d7d` R8
music swell, `4d2cea1` fix music-cut-off-early (separate video/audio crossfade passes), `9fb24e8` R6 speed-ramp. music swell, `4d2cea1` fix music-cut-off-early (separate video/audio crossfade passes), `9fb24e8` R6 speed-ramp.
**The cinematic ruleset R1R9 (docs/cinematic-quality-rules.md) is COMPLETE.** Remaining = production hardening **The cinematic ruleset R1R9 (docs/cinematic-quality-rules.md) is COMPLETE.**
(P5.8), commercial licensing (P5.7, audio models are CC-BY-NC), and a formal human Gate-B review (P5.6). - **Then production-hardening started (recorded HEAD `452bab6`):** `31efe33` CI (.github/workflows/ci.yml) + README,
`430d71f` render-approval gate on `POST /v1/edit-projects/{id}:render` (config `require-render-approval`,
default true, returns 409 without `approved.flag`), `452bab6` Dockerfile + .dockerignore (app image, models
mounted at runtime; NOT build-validated — no Docker daemon here). `mvn -o verify` (with the tmpdir workaround)
= 271 tests, 0 failures, coverage met.
- **Still remaining (large / decision-gated):** commercial licensing (P5.7 — audio models are CC-BY-NC), full
authN/Spring Security, PostgreSQL/Testcontainers, container build+no-egress certification, and a formal human
Gate-B review (P5.6). A pinned Maven Wrapper is also a small follow-up (the wrapper plugin wouldn't provision
offline here).
- **Env note (2026-07-24):** the sandbox began denying the default `$TMPDIR` and socket binds mid-session; see - **Env note (2026-07-24):** the sandbox began denying the default `$TMPDIR` and socket binds mid-session; see
[[highlight-e2e-render-runbook]] for the java.io.tmpdir + dangerouslyDisableSandbox workarounds. [[highlight-e2e-render-runbook]] for the java.io.tmpdir + dangerouslyDisableSandbox workarounds.
- If HEAD is newer than `8b68116`, or there are unfamiliar commits/uncommitted files, **this file is behind - If HEAD is newer than `8b68116`, or there are unfamiliar commits/uncommitted files, **this file is behind