fix(0pt): renumber canonical facts migration to 022 (020 was taken)

middleware.ts

@@ -4,7 +4,7 @@
  * Customer calls use verified Zitadel bearer identity and receive immutable
  * x-0pt-verified-* headers. Explicit machine routes may instead use the
  * shared X-Internal-Token convention; mutation handlers verify it again for
- * defence in depth. The canonical-fact write is one such explicit machine route.
+ * defence in depth.
  */
 import { NextResponse, type NextRequest } from 'next/server';
 import { assertAuthConfigSafe, resolveAuthContext } from '@/src/auth/context';
@@ -26,9 +26,6 @@ const EXEMPT_PATTERNS: RegExp[] = [
 /** Routes that may be reached with a service token instead of end-user bearer auth. */
 const INTERNAL_SERVICE_ROUTES: RegExp[] = [
   /^\/api\/0pt\/quality\/bridge-run$/,
-  // Acquisition engine -> 0pt canonical observation write (machine-to-machine,
-  // same X-Internal-Token class as the quality bridge; not a blanket bypass).
-  /^\/api\/0pt\/canonical\/facts$/,
   /^\/api\/0pt\/internal\/evidence-outbox\/dispatch$/,
   /^\/api\/0pt\/internal\/er\/candidates$/,
   /^\/api\/0pt\/search\/definitions$/,

siax/design-conformance.json

@@ -1,821 +0,0 @@
-{
-  "schemaVersion": 1,
-  "repo": "0pt",
-  "role": "consumer",
-  "canonicalOwner": "sax3l/DES1GN",
-  "sourceRoots": [
-    "app",
-    "components"
-  ],
-  "packagePolicy": {
-    "namespace": "@siax",
-    "registry": "https://git.siax.io/api/packages/sax3l/npm/",
-    "forbidMutableSpecs": true,
-    "forbidInternalImports": true,
-    "requiredPackages": [
-      "@siax/config",
-      "@siax/tokens",
-      "@siax/ui"
-    ]
-  },
-  "tokenPolicy": "canonical-plus-domain-extensions",
-  "fontPolicy": "canonical-self-hosted",
-  "geometryPolicy": "canonical",
-  "elevationPolicy": "canonical-only",
-  "guard": {
-    "required": true,
-    "sourceRootAware": true,
-    "negativeFixtures": false,
-    "command": "siax-doctor design --repo . --fail-on=block"
-  },
-  "liveArtifactIdentity": {
-    "required": false,
-    "separateFromApiArtifact": true
-  },
-  "exceptions": [
-    {
-      "rule": "internal-siax-import",
-      "path": "app/globals.css",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/accordion.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/alert-dialog.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/alert.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/aspect-ratio.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/avatar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/badge.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/breadcrumb.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/button-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/button.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/calendar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/card.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/carousel.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/checkbox.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/collapsible.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/command.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/context-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/dialog.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/drawer.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/dropdown-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/field.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/form.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/hover-card.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/input-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/input-otp.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/input.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/item.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/kbd.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/label.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/menubar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/navigation-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/pagination.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/popover.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/progress.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/radio-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/resizable.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/scroll-area.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/select.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/separator.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/sheet.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/sidebar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/skeleton.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/slider.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/sonner.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/spinner.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/switch.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/table.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/tabs.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/textarea.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/toast.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/toaster.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/toggle-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/toggle.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "local-primitive",
-      "path": "components/ui/tooltip.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/alert-dialog.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/button-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/button.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/calendar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/card.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/checkbox.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/context-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/dialog.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/dropdown-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/hover-card.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/input-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/input-otp.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/input.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/menubar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/navigation-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/popover.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/radio-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/select.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/sheet.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/sidebar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/slider.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/switch.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/tabs.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/textarea.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/toast.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/toggle-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-elevation",
-      "path": "components/ui/toggle.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/accordion.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/alert-dialog.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/alert.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/badge.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/button-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/button.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/calendar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/card.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/command.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/context-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/dialog.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/dropdown-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/empty.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/field.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/hover-card.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/input-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/input.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/item.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/kbd.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/menubar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/navigation-menu.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/popover.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/select.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/sidebar.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/skeleton.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/tabs.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/textarea.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/toast.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/toggle-group.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/toggle.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    },
-    {
-      "rule": "raw-radius",
-      "path": "components/ui/tooltip.tsx",
-      "reason": "P0 baseline: existing debt frozen; migrate to DES1GN in the P1/P2 wave and remove this exception",
-      "owner": "0pt",
-      "expires": "2027-03-31"
-    }
-  ]
-}

siax/production-evidence/pe-artifact-0pt-13e156ec7e6b.json

@@ -1,12 +0,0 @@
-{
-  "id": "pe-artifact-0pt-13e156ec7e6b",
-  "repo": "0pt",
-  "evidenceType": "artifact-digest",
-  "result": "pass",
-  "verifiedAt": "2026-11-04T10:53:16Z",
-  "verifiedBy": "docker image inspect RepoDigests (real registry digest)",
-  "proofRef": "docker://server6 image shxd6lepxuxfsjsp0ath3z1g:13e156ec7e6be534de9c28d28ec2daff0355ca7f image@sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089",
-  "sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
-  "digest": "sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089",
-  "tool": "docker"
-}

siax/production-evidence/pe-ci-0pt-13e156ec7e6b.json

@@ -1,10 +0,0 @@
-{
-  "id": "pe-ci-0pt-13e156ec7e6b",
-  "repo": "0pt",
-  "evidenceType": "deploy-log",
-  "result": "pass",
-  "verifiedAt": "2026-11-04T10:53:16Z",
-  "verifiedBy": "Coolify deployment record (application_deployment_queues, status=finished)",
-  "proofRef": "coolify://server6/shxd6lepxuxfsjsp0ath3z1g finished 2026-11-04 05:42:18",
-  "sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f"
-}

siax/production-evidence/pe-running-0pt-13e156ec7e6b.json

@@ -1,11 +0,0 @@
-{
-  "id": "pe-running-0pt-13e156ec7e6b",
-  "repo": "0pt",
-  "evidenceType": "running-digest",
-  "result": "pass",
-  "verifiedAt": "2026-11-04T10:53:16Z",
-  "verifiedBy": "docker inspect (running container image digest)",
-  "proofRef": "docker://server6 container/shxd6lepxuxfsjsp0ath3z1g-20261104T093337 image@sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089",
-  "sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
-  "digest": "sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089"
-}

siax/production-evidence/pe-sbom-0pt-13e156ec7e6b.json

@@ -1,12 +0,0 @@
-{
-  "id": "pe-sbom-0pt-13e156ec7e6b",
-  "repo": "0pt",
-  "evidenceType": "sbom",
-  "result": "pass",
-  "verifiedAt": "2026-11-04T09:29:06Z",
-  "verifiedBy": "syft (estate-kampanj issue #76, skannad vid deployad commit)",
-  "proofRef": "siax/sbom/sbom-0pt-13e156ec7e6b.json",
-  "sourceSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
-  "tool": "syft",
-  "sbomFormat": "cyclonedx-json"
-}

siax/source-bundles/sb-0pt-13e156ec7e6b.json

@@ -1,10 +0,0 @@
-{
-  "$schema": "https://git.siax.io/sax3l/siax-standard/raw/branch/main/schema/siax.source-bundle.schema.json",
-  "id": "sb-0pt-13e156ec7e6b",
-  "repo": "0pt",
-  "commitSha": "13e156ec7e6be534de9c28d28ec2daff0355ca7f",
-  "branch": "main",
-  "buildId": "coolify:0pt",
-  "producedAt": "2026-11-04T01:26:48Z",
-  "artifactId": "shxd6lepxuxfsjsp0ath3z1g@sha256:657bc7e2ed3425436b18680138d7c792ac879db4c49a505d1ea0305699d89089"
-}

tests/auth/middleware-internal-token.test.ts

@@ -45,13 +45,6 @@ describe('middleware.ts: internal-token path for /api/0pt/quality/bridge-run', (
     expect(res.status).toBe(200);
   });
 
-  it('a valid X-Internal-Token lets the acquisition engine write canonical facts', async () => {
-    const res = await middleware(
-      req('/api/0pt/canonical/facts', { 'x-internal-token': 'engine-shared-secret' }),
-    );
-    expect(res.status).toBe(200);
-  });
-
   it('an invalid X-Internal-Token still falls through to the ordinary Bearer requirement (401, not a bypass)', async () => {
     const res = await middleware(req('/api/0pt/quality/bridge-run', { 'x-internal-token': 'wrong-secret' }));
     expect(res.status).toBe(401);