Code does not match docs/usermanuals/en/operations/air-gap.md: --offline: W&B/MLflow/Comet Disabled; OpenAI/Anthropic judges Disabled; Webhooks Disabled (or restricted via webhook… (CR-MISC-004) #100

Wave 0 · theme D0-5: Documented controls that are not implemented · highest severity High · 1 finding(s) · effort not estimated

Summary

The document states: --offline: W&B/MLflow/Comet Disabled; OpenAI/Anthropic judges Disabled; Webhooks Disabled (or restricted via webhook.allow_private). Observed in the code: apply_offline_flag only sets the HF*_OFFLINE env vars (forgelm/cli/_config_load.py:50-57). judge.py and webhook.py contain no 'offline' check, and WANDB_MODE is never set. The field is webhook.allow_private_destinations (config.py:1488).

Primary finding

CR-MISC-004 — Code does not match docs/usermanuals/en/operations/air-gap.md: --offline: W&B/MLflow/Comet Disabled; OpenAI/Anthropic judges Disabled; Webhooks Disabled (or restricted via webhook.allow_private)

severity High · reachability default · intent contract-violation · confidence confirmed · independently confirmed · already tracked: KNOWN-OPEN CLI-04 (inferred) — docs/roadmap/phase-16-trust-surface-hardening.md:483-489,509-510

What happens. air-gapped operators rely on --offline to stop judge, webhook and tracker traffic, but it only sets the HF_*_OFFLINE variables; whether the code or the page is wrong is for the refuters

Where.

• docs/usermanuals/en/operations/air-gap.md:57-66
• docs/usermanuals/tr/operations/air-gap.md:57-66
• forgelm/cli/_config_load.py:50-57
• forgelm/judge.py:248
• forgelm/webhook.py:157
• forgelm/synthetic.py:240
• forgelm/config.py:1488
• forgelm/cli/_parser.py:1368-1372
• docs/usermanuals/en/operations/air-gap.md:79
• forgelm/cli/_dispatch.py:243

Acceptance criteria

• A regression test reproduces the failure scenario and asserts the corrected behaviour.
• Documentation listed above is corrected in English and in its Turkish mirror in the same PR.
• Every finding in this issue is resolved or explicitly closed with a reason.
• The release note names the contract this fix restores.

_{Found by the October 2026 ForgeLM code and documentation review against commit cab2947. Code links point at that commit; line numbers may have moved since. Finding IDs (CR-…, DOC-…, TECH-…) are stable references for this backlog.}