Skip to content

ops: DEP_PROD_DISABLED evidence — v7.0.0 live with checkout off #671

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
devswha merged 1 commit into from
Aug 2, 2026
Merged

ops: DEP_PROD_DISABLED evidence — v7.0.0 live with checkout off #671

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
46 changes: 46 additions & 0 deletions docs/operations/dep-prod-disabled-20260803.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,46 @@
# DEP_PROD_DISABLED — production deployed with checkout disabled (2026-08-03)

> Exit-evidence record for the `DEP_PROD_DISABLED` blocker in
> [`v6.4-preflight-hold.json`](v6.4-preflight-hold.json). Immutable: append
> corrections as new dated sections.

## Deployment

| Fact | Value |
|---|---|
| Release merge | PR #670, dev → main (merge commit), v7.0.0 |
| Production deployment | `https://patina-klpr5q2jo-devshwas-projects.vercel.app`, status Ready, 2026-08-03 |
| Stable alias | `https://patina.vibetip.help` |
| Deployed version | 7.0.0 (`origin/main` package.json) |
| Binding table on board | Polar production tuple only (`PAY-B-20260729-POLAR-ea8385dc-4c9c3f17`) |

## Disabled launch shape (fetched from the alias post-deploy)

`/launch-config.js` served exactly the six-field disabled artifact:
`{schemaVersion: 1, channel: "disabled", enabled: false, checkoutOrigin: null,
checkoutPath: null, evidence: null}` — no checkout button is exposed.

## Gate probes (UTC 2026-08-03, against the alias)

| Probe | Result | Meaning |
|---|---|---|
| pro tier, no Authorization | **401** `license required` | fail closed |
| pro tier, unknown license | **403** `license not entitled` | Polar gate answering on 7.0.0 |
| free tier rewrite | 200 stream, `terminal_failed` | see the incident below |

## Fail-closed regression caught during the rollout

The first preview build of this change **failed by design**: the Preview
environment still carried `PATINA_PRO_CHECKOUT_ENABLED=true` with the retired
Lemon Squeezy URL, and `generate-launch-config.mjs` refused it
(`must exactly match a source-controlled checkout evidence binding`). The
preview flag was reset to `false` and the build went green — live proof that
environment values alone cannot resurrect a dead checkout route.

## Incident (open, blocks Gate-B health evidence)

The free-tier smoke returned `terminal_failed`: the server-side Gemini key is
rejected with **HTTP 429 "project has exceeded its monthly spending cap"**.
This predates and is independent of this deployment (same key served 6.3.4).
Owner action: raise/clear the spend cap in AI Studio, then re-run the free and
pro smokes before recording Gate-B health evidence.