fix(epp): close post-merge lease identity

docs/programs/engineering-process-platform/evidence/states/program-state-revision-0078.json

@@ -0,0 +1,106 @@
+{
+  "$schema": "https://wright.local/programs/epp/program-state.schema.json",
+  "schema_version": "2.0",
+  "program_id": "EPP-2026",
+  "revision": 78,
+  "state": "PROGRAM_ACTIVE",
+  "baseline": {
+    "ref": "dev",
+    "commit": "9f961d52683e0e999fe29a7fed4c1e016de29620",
+    "tree": "3e7c5d929d321052f9a34f629f1f023b8a88c805",
+    "observed_clean": true
+  },
+  "prototype_evidence": {
+    "branch": "076-engineering-workflow-prototype",
+    "commit": "e7bb75c1d97e70e55b943e0c94a31ff85cf9f82d",
+    "remote_matches": true,
+    "registered_worktree": false,
+    "mode": "read_only_evidence",
+    "uncommitted_evidence_status": "none_detected"
+  },
+  "control_plane": {
+    "root": "docs/programs/engineering-process-platform",
+    "candidate_subject_resolution": "EPP-F01B replacement material-change and feature-implementation approvals bind commit e83a78f86c3e53157386c105a9a3b6f495b76fd4, tree 3a584940dfca227088c02b01aa74981baa847c06, program tree 8841bc1e0116fc2dd8950dd3e974f904d09d8edc, and the 17 TR-0072 artifact digests to local tasks T001 through T048 only. Direct user authority on 2026-08-29 additionally permits the bounded registry-routing and lifecycle-limit correction independently verified at 3bb076a7355dfc3cfd6469db05b40b54462a32b0; the specialized test-result path contract and checkpoint-bound test-history correction through 1a2cebb42e4ce7b24ed48dceda6281cd39c68e02; and one deterministic packaged-browser rebuild under lease revision 5 at only src/wright_engineering/static/web/** and src/wright_engineering/runtime-extra-lock.json. TR-0074 records other already-changed candidate paths only as historical T001-T048 evidence and grants no future edit authority for them. EPP-F01B integrated through PR #115 at dev commit 9f961d52683e0e999fe29a7fed4c1e016de29620 with exact candidate tree 3e7c5d929d321052f9a34f629f1f023b8a88c805; the implementation lease is released.",
+    "schema_status": "passed",
+    "audit_status": "passed"
+  },
+  "current_feature": "EPP-F01B",
+  "active_mutating_lease": null,
+  "last_transition": "TR-0077",
+  "readiness": {
+    "product": {
+      "status": "not_started",
+      "gate_file": "gates.md",
+      "blockers": [
+        "No customer product child feature is implemented or implementation-approved",
+        "The browser-accessible program-status page is integrated program-control capability and does not by itself advance product readiness"
+      ]
+    },
+    "benchmark": {
+      "status": "not_started",
+      "gate_file": "gates.md",
+      "blockers": [
+        "No 100-process collection has been generated or qualified",
+        "DEC-P0-007",
+        "DEC-P0-009",
+        "DEC-P0-010",
+        "DEC-P0-011",
+        "DEC-P0-012"
+      ]
+    },
+    "commercial": {
+      "status": "blocked",
+      "gate_file": "gates.md",
+      "blockers": [
+        "DEC-P0-001",
+        "DEC-P0-004",
+        "DEC-P0-006",
+        "DEC-P0-011",
+        "DEC-P0-012",
+        "Repository external controls remain evidence requirements"
+      ]
+    },
+    "program_health": {
+      "status": "blocked",
+      "gate_file": "gates.md",
+      "blockers": [
+        "EPP-F01 is complete and integrated through PR #114.",
+        "EPP-F01B is integrated through PR #115 at dev commit 9f961d52 with exact candidate tree 3e7c5d92; development deployment verification is pending a green correction build.",
+        "Product, benchmark, and commercial readiness remain independent; benchmark execution remains unauthorized at 0/100 and release eligibility remains false.",
+        "EPP-F02 planning is in progress and implementation remains subject to an exact human approval gate."
+      ]
+    }
+  },
+  "open_p0_decisions": [
+    "DEC-P0-001",
+    "DEC-P0-002",
+    "DEC-P0-003",
+    "DEC-P0-004",
+    "DEC-P0-005",
+    "DEC-P0-006",
+    "DEC-P0-007",
+    "DEC-P0-008",
+    "DEC-P0-009",
+    "DEC-P0-010",
+    "DEC-P0-011",
+    "DEC-P0-012"
+  ],
+  "next_eligible_actions": [
+    {
+      "action": "APPROVE_CURRENT_FEATURE_INTEGRATION_EVIDENCE",
+      "roadmap_item": "EPP-F01B",
+      "requires_human_approval": true,
+      "reason": "PR #115 is merged at exact dev commit 9f961d52 and tree 3e7c5d92, but durable dev-integration approval evidence and green post-merge deployment verification are not yet both present."
+    }
+  ],
+  "approval": {
+    "status": "approved",
+    "record": "evidence/approvals/APR-EPP-F01B-MC-002.json",
+    "required_records": [
+      "evidence/approvals/APR-EPP-F01B-MC-002.json",
+      "evidence/approvals/APR-EPP-F01B-IMPL-002.json"
+    ]
+  },
+  "feature_state": "BLOCKED",
+  "policy_version": "EPP-LIFECYCLE-1"
+}

docs/programs/engineering-process-platform/evidence/transitions/TR-0077.json

@@ -0,0 +1,147 @@
+{
+  "$schema": "../../schemas/transition-evidence.schema.json",
+  "schema_version": "2.0",
+  "transition_id": "TR-0077",
+  "program_id": "EPP-2026",
+  "feature_id": "EPP-F01B",
+  "state_domain": "repair",
+  "event_kind": "repair_checkpoint",
+  "from_state": "IMPLEMENTATION_AUTHORIZED",
+  "to_state": "BLOCKED",
+  "prior_revision": 77,
+  "new_revision": 78,
+  "state_digest_algorithm": "wright-json-c14n-v1-sha256",
+  "prior_state_digest": "e5391c79d72caac1f039665d960f0f0ec650f27ea24bb29c4bed87bf6d7adf36",
+  "new_state_digest": "e34e8637b1df8a1692f13f126398c206000cf300a1f8adca45435fa0cbe71030",
+  "actor": {
+    "role": "coordinator",
+    "identity": "Codex primary sole writer"
+  },
+  "action": "Record the exact PR #115 merge without claiming durable dev-integration approval or green deployment, release the completed implementation lease, and block at one explicit human integration-evidence gate.",
+  "started_at": "2026-08-30T16:47:16Z",
+  "finished_at": "2026-08-30T17:05:00Z",
+  "duration_ms": 1064000,
+  "classification": "blocked",
+  "git": {
+    "source_commit": "9f961d52683e0e999fe29a7fed4c1e016de29620",
+    "source_tree": "3e7c5d929d321052f9a34f629f1f023b8a88c805",
+    "source_program_tree": "a6d5849a0d61cb96528f10956fba3342c0096e3e",
+    "containing_commit": null,
+    "containing_commit_rule": "transition_blob_container",
+    "worktree_clean_before": true,
+    "worktree_clean_after": false,
+    "diff_check_passed": true,
+    "changed_paths_manifest": [
+      "docs/programs/engineering-process-platform/evidence/states/program-state-revision-0078.json",
+      "docs/programs/engineering-process-platform/evidence/transitions/TR-0077.json",
+      "docs/programs/engineering-process-platform/lifecycle-policy.json",
+      "docs/programs/engineering-process-platform/program-state.json",
+      "docs/programs/engineering-process-platform/roadmap.json",
+      "scripts/program_control/validation.py",
+      "tests/program_control_plane/test_roadmap_approval_and_lease.py",
+      "tests/program_control_plane/test_transition_chain.py"
+    ],
+    "transition_path": "evidence/transitions/TR-0077.json"
+  },
+  "inputs": [
+    {
+      "path": "evidence/states/program-state-revision-0077.json",
+      "sha256": "1e88cfb8d667982e0443ff50a102801d72ad76541cad904bf2f02614272860ea",
+      "schema_version": "2.0",
+      "role": "append_only_evidence"
+    }
+  ],
+  "outputs": [
+    {
+      "path": "evidence/states/program-state-revision-0078.json",
+      "sha256": "95580d9f83f58877b6aeb89d5623745809dc4e143f66fad076dee7e97dce2186",
+      "schema_version": "2.0",
+      "role": "append_only_evidence"
+    },
+    {
+      "path": "program-state.json",
+      "sha256": "95580d9f83f58877b6aeb89d5623745809dc4e143f66fad076dee7e97dce2186",
+      "schema_version": "2.0",
+      "role": "operational_state"
+    },
+    {
+      "path": "roadmap.json",
+      "sha256": "d3bd8fe56b4d95865e65df36b3a103ed60638b26e1a518595548ab114fd4c6c2",
+      "schema_version": "1.0",
+      "role": "immutable_policy"
+    },
+    {
+      "path": "lifecycle-policy.json",
+      "sha256": "6c1a8eeca1504c9d185183360cc04a4df0992b0d78caac0848934463d4b88fe7",
+      "schema_version": "1.0",
+      "role": "immutable_policy"
+    }
+  ],
+  "checks": [
+    {
+      "check_id": "EPP-F01B-DEV-SUBJECT-RECONCILIATION",
+      "method": "Require PR #115 to be merged at dev commit 9f961d52, require its tree to equal the frozen candidate tree 3e7c5d92, and release the implementation lease without claiming development deployment verification.",
+      "environment": "GitHub PR #115 terminal results plus exact local Git subjects; Windows integration lane",
+      "duration_ms": 0,
+      "result": "passed",
+      "failure_class": null,
+      "evidence": [
+        "https://github.com/burhop/wright/pull/115",
+        "merged_dev:9f961d52683e0e999fe29a7fed4c1e016de29620",
+        "merged_tree:3e7c5d929d321052f9a34f629f1f023b8a88c805"
+      ]
+    },
+    {
+      "check_id": "EPP-F01B-INTEGRATION-CLOSURE-NON-INTERFERENCE",
+      "method": "Require product, benchmark, commercial, and program-health statuses to remain unchanged; benchmark qualification remains 0/100 and release eligibility remains false.",
+      "environment": "Canonical revision 77 versus revision 78 comparison",
+      "duration_ms": 0,
+      "result": "passed",
+      "failure_class": null,
+      "evidence": [
+        "evidence/states/program-state-revision-0077.json",
+        "evidence/states/program-state-revision-0078.json"
+      ]
+    }
+  ],
+  "authority": {
+    "required_scopes": [
+      "material_change",
+      "feature_implementation"
+    ],
+    "approval_records": [
+      "evidence/approvals/APR-EPP-F01B-MC-002.json",
+      "evidence/approvals/APR-EPP-F01B-IMPL-002.json"
+    ],
+    "subject": {
+      "git_commit": "e83a78f86c3e53157386c105a9a3b6f495b76fd4",
+      "git_tree": "3a584940dfca227088c02b01aa74981baa847c06",
+      "program_tree": "8841bc1e0116fc2dd8950dd3e974f904d09d8edc",
+      "artifact_count": 17,
+      "manifest_transition": "TR-0072"
+    },
+    "legacy_checkpoint": {
+      "profile": "epp-bridge-v1-r10-r19",
+      "transition": "TR-0018",
+      "resolution_rule": "exact_material_change_approval_subject"
+    },
+    "migration": {
+      "from_schema_version": "1.0",
+      "to_schema_version": "2.0",
+      "sole_successor": true
+    }
+  },
+  "independent_verifier": "Bounded independent verification must pass before this transition is committed or pushed.",
+  "repair": {
+    "stable_cause_id": "EPP-F01B-DEV-CHECKOUT-LEASE-IDENTITY-001",
+    "attempt": 1,
+    "maximum": 2,
+    "remaining": 1
+  },
+  "blockers": [
+    "Durable dev-integration approval evidence is not bound to this transition.",
+    "Post-merge python-quality and test-windows are red on the branch/worktree lease-identity defect; development deployment is not verified."
+  ],
+  "rollback_subject": "evidence/states/program-state-revision-0077.json",
+  "next_action": "APPROVE_CURRENT_FEATURE_INTEGRATION_EVIDENCE"
+}

docs/programs/engineering-process-platform/lifecycle-policy.json

@@ -371,6 +371,12 @@
     }
   ],
   "action_rules": [
+    {
+      "program_state": "PROGRAM_ACTIVE",
+      "feature_state": "BLOCKED",
+      "action": "APPROVE_CURRENT_FEATURE_INTEGRATION_EVIDENCE",
+      "requires_human_approval": true
+    },
     {
       "program_state": "PROGRAM_ACTIVE",
       "feature_state": "BLOCKED",
@@ -419,10 +425,16 @@
       "action": "APPROVE_EXACT_RELEASE_SUBJECT",
       "requires_human_approval": true
     },
+    {
+      "program_state": "PROGRAM_ACTIVE",
+      "feature_state": "DEV_INTEGRATED",
+      "action": "VERIFY_CURRENT_FEATURE_DEV_DEPLOYMENT",
+      "requires_human_approval": false
+    },
     {
       "program_state": "PROGRAM_ACTIVE",
       "feature_state": "DEV_DEPLOYMENT_VERIFIED",
-      "action": "SELECT_EPP_F01B_PLANNING",
+      "action": "SELECT_NEXT_FEATURE_PLANNING",
       "requires_human_approval": false
     },
     {