G09 real-production release record

Classification: RELEASE Status: DEFERRED_UNTIL_APP_FUNCTIONAL Entry for mobile: G09-LOCAL integration, not production certification. Production prerequisite: G24-ANDROID-COMMERCIAL functional Android acceptance. Certification scope: Android/backend only; iOS DEFERRED_EXPLICIT_RESUME_ONLY. Historical multiplatform gate: G18_NOT_ACCEPTED.

User update 2026-10-01: ADR-016 scopes future Android/backend certification after commercial P19–P24 acceptance and explicitly archives iOS until a new request. Full production evidence remains mandatory.

Historical user decision dated 2026-09-30: real production starts only when the app is functional. ADR-014 supersedes the old P10 prohibition. This is neither COMPLETE nor RELEASE_CERTIFIED. Tracker: release issue #13; its number must match verified publication evidence.

Source and local entry evidence

Baseline c51fa03f57b0c9f0a429e41c51bbd21ff2dcbb9c includes merged PR #10. Correction commit 8c5e795 has local runtime evidence, source fingerprint 48dc47514dba28cb4862c63611d75dd1bf6367e154036ec9c2a182070cfd2e8c. G09-LOCAL requires those corrections integrated by a protected, verified current-head phase PR. Local tests alone are LOCAL_DONE; this record does not infer merge or production readiness.

Historical candidate: 4ce5aaf79aa3bf8d8cf31c05635dfa2b30714556. Original sign-off remains historical. Test services used this machine's IP, synthetic PostGIS/private S3 and internal-CA TLS; no real public server/provider was deployed.

Remaining production conditions

1. Fresh certification: after G24-ANDROID-COMMERCIAL and all backend extension merges, select an immutable candidate with verified head/base checks and reconcile the complete expected-result manifest. Accounts/feedback, revised media retention, location controls and Android/shared API contracts are included; iOS-specific certification is deferred. Known critical failures cannot wait until this gate.
2. Provisioned staging: real private storage/edge compatibility, tested 24-hour physical deletion of every media copy, accepted capacity/load, off-host backup/restore with measured RPO/RTO, real deployment and rollback. Local mocks/internal CA are distinct evidence.
3. Legal review: revised notices, account/social data inventory, 24-hour photos, rights processing and processor terms reviewed before the public pilot.
4. Wiki mirror: allowlisted docs synchronized from the verified merged source, preserving manual pages; failed publication remains WIKI_PENDING.
5. Functional commercial Android G24, release-specific security/privacy/sign-off and support window accepted before public rollout. No automatic deployment/tag/GitHub Release follows integration.

Operator rollback uses compatible binaries and append-only migrations; never destructively downgrade the applied ledger. scripts/check-g09.sh validates this deferred classification and refuses unsupported certification claims. It is a record validator, not a runtime certifier.