[Oionos]

Increment 9: shipment exceptions

• Add durable, deduplicated exception episodes, resolved history and owner acknowledgement.
• Evaluate planned arrival, checkpoint activity / At Checkpoint intervals, and receiving-handler follow-up with explicit meanings and configurable owner policy.
• Pause inference when indexing is disabled, stale, catching up or changed; preserve uncertain observations. Serialize evaluation and writes with the canonical indexer transaction lock.
• Add public mobile exception list, shipment evidence links, owner policy UI and typed API contracts.
• Add additive migration e93a107bd624, isolated PostgreSQL regression schemas, and exception tables in recovery fingerprints.

Validation

• 493 backend tests passed, 5 intentional skips (full SQLite/PostgreSQL matrix in disposable schemas).
• 293 frontend unit tests, 37 Playwright browser tests, 40 contract tests passed.
• Real local PostgreSQL/wallet/chain journey, reorg, interrupted-write restart/replay and backup/restore checks passed. Owner policy persisted after reload; another wallet's policy edit was denied.
• Hosted testing and production database-copy migration rehearsals preserved all existing business/journal table fingerprints. Retained pre-migration checkpoint branches expire October 26; rehearsal branches expire October 20.
• Hosted testing deployed the exact reviewed tree as 9c281e5: evaluator completed against current confirmed evidence; public mobile list/history/shipment links and anonymous policy denial passed with zero browser errors.
• A separate pre-existing testing receipt lookup currently returns pending/awaiting_receipt for PROD-31CBA002 while all six canonical events and delivery remain intact. Registration code is unchanged and the verification UI retains the unconfirmed state; a new hosted registration receipt was not claimed.
• Exact-main CI and integration passed, and Hosted API Readiness run 39222756745 passed. Both production hosts serve 7adb990.

Release constraints

Production INDEXER_ENABLED remains false; production inference/backfill is not enabled. No external notifications, paid resource upgrade, database reset or destructive downgrade. Old API artifacts cannot restart against the new strict schema head; use a compatible corrective release. See SHIPMENT_EXCEPTIONS.md and RELEASE_RUNBOOK.md.

Production rollout observation

Production schema migrated transactionally with unchanged business/journal fingerprints. PR merged normally as 7adb990 after all eight trusted checks passed. The exact-main CI/deployment gate remains in force.

A cold start of the previous API image at 08:18 UTC rejected the new schema head while the new image was waiting for main CI. The migration was applied too early for a sleeping free service. The compatible replacement restored liveness/readiness HTTP 200 at 08:27:55 UTC; no data loss or schema downgrade occurred. For future additive releases, stage the admitted replacement and coordinate migration immediately with rollout, accounting for cold starts and strict schema-head admission. Recovery and acceptance evidence follows below.

Final production acceptance

• Main CI: https://github.com/Oionos/Veritras/actions/runs/39221362085 — success (all required checks).
• Main isolated integration: https://github.com/Oionos/Veritras/actions/runs/39221362116 — success.
• Hosted API Readiness: https://github.com/Oionos/Veritras/actions/runs/39222756745 — success.
• Render dep-dbat2p142hec73dvgbe0 is live; Vercel dpl_7p7wEAEkirYFeUwqraq3ciTxzJdU is READY. API liveness/readiness HTTP 200 and frontend release attestation all report main 7adb990 with the matching main CI/integration run IDs. No new-instance runtime error logs found.
• Production mobile exception list/history filters, shipment links, default policy read and anonymous policy denial passed with zero browser errors. Production evaluation remains explicitly paused because indexing is disabled; exception/evaluation tables remain empty.
• Production public verification/QR independent decode and download, mobile shipment detail/wallet dialog, keyboard access, missing-route recovery and fresh-document simulated demo (zero business API requests) passed. The legacy production item still correctly has no canonical registration evidence; no data was fabricated.
• Existing production product/shipment/journal counts remain 1/1/0. Migration rehearsals and the production migration preserved all pre-existing business/journal fingerprints. The temporary cold-start outage is resolved. A later testing receipt follow-up timed out during the free-service wake; the previous pending receipt observation remains unconfirmed and is not claimed as a new hosted registration pass.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
veritras	Ready	Preview	Oct 19, 2026 8:01am UTC

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.