{
  "evidenceId": "T03",
  "title": "Six native workflow regression suites",
  "originalRelativePath": "MR33_MIGRATION_WORK/security/acceptance-20261012/WORKFLOW_REGRESSION.json",
  "originalSha256": "18d48eed4db873a6ee3fd1f17921aa371eaa3af55884ba8dca615d8af79e2ac5",
  "boundary": "Historical source evidence; selected fields; no new application execution or live configuration readback in this revision.",
  "record": {
    "status": "PASS",
    "database": "kernel_acceptance_restore_20261012",
    "productionModified": false,
    "permissionContextFixtures": true,
    "externalEmailsSent": false,
    "scope": "Current restored main database functions with isolated, rolled-back native business and checkpoint fixtures. This is not end-to-end Java execution or real-user UAT for every workflow.",
    "suites": [
      {
        "suite": "IAM_TEST.sql",
        "status": "PASS",
        "sourceSha256": "3965909548154f5630e2842970576b68fdaf995df99c955210a451519d5ab5f3",
        "seconds": 6.53,
        "assertions": [
          {
            "status": "PASS",
            "checks": 17,
            "transactionRolledBack": true,
            "scope": "local fixture maker/checker, canonical policy and existing IAM routing"
          }
        ],
        "notes": [
          "NOTICE:  PASS: native IAM policy proposal, independent approval, versioning, retirement, Regulix default and decision emails"
        ]
      },
      {
        "suite": "TIMEVAULT_TEST.sql",
        "status": "PASS",
        "sourceSha256": "4238bd277f89311a874c822226aada8d98d032282ec8eadc1f80ff49d3f644a1",
        "seconds": 14.439,
        "assertions": [],
        "notes": [
          "NOTICE:  PASS: temporal split, bitemporal reads, idempotency, independent review, State dependency, stale update, rejection, inactivation, logical deletion, native-session isolation",
          "NOTICE:  PASS: legacy date-scenario parity and immutable history",
          "NOTICE:  PASS: TimeVault decisions queue emails to the owning master screen"
        ]
      },
      {
        "suite": "VISTA_TEST.sql",
        "status": "PASS",
        "sourceSha256": "9c73388719359b53d969c43e937d961304b6ac83218586d15173bcff409f5ca7",
        "seconds": 0.313,
        "assertions": [],
        "notes": [
          "NOTICE:  PASS: Vista lifecycle/version/replay/isolation domain regressions and Pulse events; context fixture isolated"
        ]
      },
      {
        "suite": "CUSTODIA_TEST.sql",
        "status": "PASS",
        "sourceSha256": "823b3f5d0ed4858eac3ace58813931ef381854e0dd9aef4fab7762dd0a19264c",
        "seconds": 0.364,
        "assertions": [],
        "notes": [
          "NOTICE:  PASS: Custodia native Regulix review handoff, ownership, replay, stale review and outcome notification; permission/context fixture isolated"
        ]
      },
      {
        "suite": "NEXORA_TEST.sql",
        "status": "PASS",
        "sourceSha256": "c9ede6b4d343957f76eee4f5f88cae97b88f516b5f00fd6434cc63972cc70c0c",
        "seconds": 24.548,
        "assertions": [
          {
            "checks": [
              "maker author permission",
              "governed lookups",
              "maker cannot self approve",
              "publication requires review",
              "learner never receives answer keys",
              "enrolment succeeds",
              "request replay returns same assignment",
              "completion requires assessment",
              "attempt hides marking answers",
              "written answers require manual review",
              "server-calculated final score",
              "passing required assessment completes learning",
              "certificate issued exactly once",
              "all primary query contracts"
            ],
            "status": "PASS"
          }
        ],
        "notes": [
          "NOTICE:  PASS: Native Nexora APIs, RBAC, independent decisions, stage email and Regulix result"
        ]
      },
      {
        "suite": "REGULIX_TEST.sql",
        "status": "PASS",
        "sourceSha256": "4786167c14262418a4cf611132c92c28b3a8e17ffc18d506971267582e832985",
        "seconds": 33.028,
        "assertions": [
          {
            "names": [
              "advance replay returns original version",
              "anonymous context rejected",
              "caller authority fields rejected",
              "changed replay payload rejected",
              "completion recorded",
              "create replay is idempotent",
              "decision execution remains external to persistence",
              "event wait checkpoint persists correlation",
              "native tenant checkpoint created",
              "pinned definition hash required",
              "receipt identity bound to native actor",
              "service wait survives checkpoint",
              "stale concurrent continuation rejected",
              "state survives separate read",
              "terminal receipt replay remains safe",
              "terminal state cannot reopen",
              "unpublished real pilot cannot execute"
            ],
            "checks": 17,
            "status": "PASS",
            "fixtures": "ROLLBACK_ONLY",
            "azureChanged": false,
            "liveBindingsPublished": false
          },
          {
            "checks": 38,
            "routes": 10,
            "status": "PASS",
            "nativeFeatures": true,
            "fixturesRolledBackByRunner": true
          }
        ],
        "notes": [
          "NOTICE:  PASS: native checkpoint and assignment/delegation/approval regression with durable Pulse notifications; external emails=0"
        ]
      }
    ],
    "at": "2026-10-12T05:31:53.746676+00:00"
  },
  "readerProjection": "Kernel-scoped projection. Legacy infrastructure identifiers are opaque operator references; original source SHA256 is retained. No runtime identifier was renamed."
}