{
  "kind": "BEDROCK_CERTIFICATION_RECORD",
  "status": "BEDROCK_IS_ON_CERTIFIED",
  "release": "1.0.0.4",
  "contractRelease": "1.0.0.2",
  "auditId": "BR-AUD-2026-09-18-1.0.0.4-FINAL-01",
  "auditReport": "PARECER_15_CERTIFICACAO_BEDROCK_1_0_0_4_2026-09-18.md",
  "auditSha256": "53d8330865f014dcd88374247e9287892b2f7100aa28600e7e5345646ad7fe9b",
  "issuedAt": "2026-09-18T18:05:00Z",
  "issuedBy": "Independent designated audit task Auditoria Kwantu, Claude Code channel (AUTHORITY_AUDIT_THREAD_2026-09-18.json), continuing designation of task 01a0b03e-ffbf-7a33-8456-455110f51471",
  "decision": "PASS",
  "scope": "Corrective Bedrock runtime release for defect BEDROCK-W2-001 / BR-CAP-01 (scheduling persistence and capacity) under the approved RG-01 through RG-10 process; not historical 23-gate recertification, not Kwantu certification, not Kwantu W2 PASS",
  "candidate": "33b0867f3e3033626377abbf44d24139d46be45f",
  "baseCandidate": "2db10a10c14d824bcdfd0e5eaf9dbcf48bbe83e4",
  "candidateState": "corrective-candidate-frozen-reviewed-and-proven",
  "candidatePatchSha256": "d358431a598bde0af09ec785883b4ba5a9f891fbd583a3ad1adf675c2fdea46a",
  "contractLockRevision": 6,
  "contractLockSha256": "097d4268a45dd33d65ffa8c150a8dd8f62b0edd14c8fe2faff3bfe73ac94124a",
  "publicOpenapiSha256": "b78c3daa91808df1cbf6b01671ceedd1ad4d6855319ea4960d2292d3bd122a27",
  "migrationSha256": "3ff1ace2639d6fbc2d3beef80834f5727dc82d8c182fb8822f5d0f1130403024",
  "contractChanged": false,
  "databaseMigrationChanged": false,
  "runtimeImageDigest": "sha256:0223397c765e69e5115c1529bf757113a283ded4ecc636c0eba85c2cc6dca27f",
  "runtimeImage": "bedrockdevelopmentacr.azurecr.io/bedrock-runtime-candidates@sha256:0223397c765e69e5115c1529bf757113a283ded4ecc636c0eba85c2cc6dca27f",
  "runtimeImageTag": "kwantu-scheduling-33b0867f",
  "runtimeRevision": "bedrock-development-runtime--0000012",
  "previousRuntimeImageDigest": "sha256:6a5b961b8f06b0bc70e5497f059fbc1f2e661ad7a0ddb0f72f73d7102085fc8f",
  "previousCertification": {
    "release": "1.0.0.3",
    "recordSha256": "40317ac227c1a04cb153dbb5cd788e9e41efff793f86f11e886eae697e9edc1d",
    "state": "PRESERVED_HISTORICAL"
  },
  "imageModules": {
    "operation-service.js": "707bf9d7730aa26eb8fefd286f056e42b0c60d0a8cfb25075ee0e376c241a04d",
    "query-projections.js": "891558a0e7ce2f0079bd344d4634f749a894da7051deba025e2f3703d478b34a",
    "scheduling.js": "5f9e9b0914bc129bc41fd1d358d4781fd6c257eb29525e379f2e7435e9db9ab4"
  },
  "effectiveSettingsSha256": "bddf5a81ed5548408debf52b1b61ee877ff7921624c06340527948a69e2d7769",
  "effectiveSettingsHashDefinition": "Exact sanitized run/publication/after.json snapshot bytes (ENVIO_13), including timestamp/revision/image and named configuration/secret references, excluding secret values",
  "target": "azure-cloudflare",
  "environment": "development",
  "edge": "https://bedrock.coruss.com.br",
  "azure": {
    "app": "bedrock-development-runtime",
    "resourceGroup": "bedrock-development-rg",
    "subscription": "082a3018-c619-4b62-a122-505e97f9e487"
  },
  "sourceArchiveSha256": "a51e39baf5f09fbcec4262decb0f1c0ed631276f1f31c95717fa777046ae3871",
  "evidenceBundle": {
    "name": "ENVIO_14_PROVAS_DE_ESCRITA_BEDROCK_1_0_0_4_2026-09-18.zip",
    "sha256": "441c1590f517235b9334ccdc6767407691769abec2e6fa0a6c7cfb1058355ab0",
    "availability": "controlled audit storage (docs/audit/intake)"
  },
  "supportingEvidenceBundles": [
    {"name": "ENVIO_13_PUBLICACAO_CONTROLADA_BEDROCK_1_0_0_4_2026-09-18.zip", "sha256": "569adbaad804e9f224fbe14607dcca491da2c494e2dc2258c24a7684f02f1438"},
    {"name": "ENVIO_12_PROVAS_AZURE_BEDROCK_1_0_0_4_2026-09-18.zip", "sha256": "e34684bdc30b7c27f379acd05b7a4db74d3519a7d9b7ac72b35c2a4009db5671"},
    {"name": "ENVIO_11_CANDIDATA_LOCAL_R2_BEDROCK_1_0_0_4_2026-09-18.zip", "sha256": "185fa3ef24ed734d21124a40419a7d7e76bf21fa6802053df73f1586b93d46c0"}
  ],
  "publicationProofSha256": "2ead3eeba2e0b858b563f5ada83f951e876398f7a00e9d8c0819b610e9a43638",
  "publicationRecordSha256": "347bed9523d64743c7df0b8a058925e7256f88cc769acca83064398dc407dc6e",
  "publicationAuthorizationSha256": "65ea3ca3b321f774e45f54b1cf33bc251b6dd6539842f33a2fdf61abe281a544",
  "publicWriteProofAuthorizationSha256": "76c49909b959ae3d2e5766fcf569db58cc08b7b0e36ae6c3cece7bed64b6e399",
  "quantityDecisionSha256": "d784840905cb39c626784ef4aabc3f8bd782a85e82a7afa15b17e54380f329a6",
  "priorOpinions": {
    "PARECER_11_LOCAL_R2_RECHECK": "6bf3793bd5e82a5c67ff03e0900a4e552363b9115d006311a6763126cbf5a057",
    "PARECER_12_DESIGNATION": "c5e324d79908c7fda3b217d30eab649db2979f209e201fd899ca2c6f9c013011",
    "PARECER_13_READINESS": "4f33d8f45b19cb2cdcc185cee9179f26242ff10e4b9fddd0beb2850442119a58",
    "PARECER_14_PUBLICATION_RECHECK": "5106a966a8db1126fcf4e0475a74b85c9576f48ec242d0fe67994983c2d2a0a0"
  },
  "authority": {
    "auditChannelRecordSha256": "291a7a252f4b7802c294e1acf0f9ddadf86a4670cc694edc21412df586a9e639",
    "designationSha256": "64a136cf7efef47498d24b98df34e435fcd2ff9d2aef4341a74a359bb60ca1e6",
    "extensionSha256": "4929ea190a86a53bd4f13baec5d9d7fdbf50077e52cdb247d7666f95e5c1aca1",
    "process": "Approved RG-01 through RG-10; authorizations received as textual answers of the responsible recorded by the implementation and read by the auditor; not a digital signature"
  },
  "validation": {
    "method": "Independent offline review of captured evidence and source, execution of the producer verifier on an auditor copy, independent HMAC recomputation for integration (32) and rehearsal (70) receipts, read-only GET checks on the public domain; no auditor remote rerun of suites",
    "schedulingGroups": 31,
    "integrationCases": 29,
    "operationsCases": 95,
    "traceCases": 12,
    "isolatedTargetResponsesVerified": 371,
    "publicChecks": 12,
    "publicCheckComposition": {"capturedHttpResponses": 9, "readiness": 1, "openApi": 1, "remoteModuleSanitization": 1},
    "kwantuAccessChecks": 5,
    "publicWriteProof": {"runId": "WP-db9aa108-d4fb-4d51-8d62-ff468952bdbe", "checks": 13, "responses": 47, "compensation": "COMPENSATED", "temporaryGrantsOpened": 15, "temporaryGrantsActiveAfterClose": 0},
    "isolatedWriteRehearsal": {"runId": "WP-fe100963-f82f-4770-87cc-3fa125235246", "checks": 13, "responses": 48, "webhookReceipts": 70, "hmacValidRecomputed": 70, "eventsDeliveredAfterRetry": 35, "compensation": "COMPENSATED"},
    "publisherRollbackRehearsal": {"scope": "isolated app only", "stagesProbed": 3, "probeCasesPerStage": 9},
    "historicalAssetsPreserved": 5
  },
  "limitations": [
    "Unexpected 500 sanitization exercised through the actual image module, not HTTP fault injection.",
    "429/502 runtime producers absent; infrastructure error envelopes not certified.",
    "Routes outside the frozen contract answer 404 with the framework envelope {message,error,statusCode}; identical on 1.0.0.3; recorded, not a regression.",
    "Cross-Solution isolation with two populated Solutions proven on isolated targets with two real principals; not executed on the public database, which holds only the Kwantu Solution.",
    "Webhook signed delivery with retry proven on isolated targets (integration suite and write rehearsal); no subscription created on the public app.",
    "Distinct real identity denied on the public write proof is the public app's own managed identity, not a second consumer principal.",
    "Public write-proof structural fixtures (4 resources, 3 services, 2 requirements, 1 party, code KWANTU-WP-db9aa108) retained and identified; reservations, appointments and rules ended by public commands.",
    "Inherited composite-input gaps (ComposeService/ComposeResource members, WorkflowDefinitionVersion steps/transitions, RequestSignature participants) remain declared and unresolved; not covered by this certification.",
    "Quantitative/temporal requirement control certified for ACTIVE/REQUIRED/RESOURCE requirements only; no atomic Hold to Appointment conversion in the contract.",
    "Publication attempt 01 exposed the public app to 1.0.0.4 (~1 min) and to the rollback (~2 min) without probe; rollback path later rehearsed with the corrected publisher on the isolated app.",
    "Historical 23-gate definitions were not fully recovered; no claim of historical gate or Kwantu W0-W4 completion."
  ],
  "retention": {
    "resources": "Isolated validation app (restored to 1.0.0.3), database bedrock_kwantu_validation_2db10a10, MI/grants, ACR tag kwantu-scheduling-33b0867f",
    "owner": "Ricardo / implementation",
    "until": "2026-09-19T12:00:00Z",
    "state": "RETAINED_FOR_REVIEW_AND_ROLLBACK",
    "closedResources": "Four exclusive suite databases dropped with ownership check; migrations app removed and verified; temporary grants revoked (0 active) in both write proofs"
  },
  "downstream": {
    "certificateBytesPublication": "PENDING_AT_ISSUANCE",
    "kwantuDependencyAcquisition": "REQUIRES_SERVED_CERTIFICATE_HASH_CHECK_AND_OPENAPI_b78c3daa",
    "kwantuInit": "REQUIRES_REPEAT_OF_AFFECTED_GATES_WITH_NEW_DEPENDENCY",
    "kwantuW2": "BLOCKER_BR-CAP-01_RESOLVED_AT_RELEASE_LEVEL; W2 PASS NOT GRANTED",
    "kwantuCertification": "NOT_GRANTED"
  },
  "certified": true
}