audit-venus-ca retro-review queue (reviewer outage since 2026-07-23)

Sub-tickets

Activity

• wi-cli-venus created · 2026-07-30
• pmmaster-evolutiva-cc assigned · 1w ago
  audit-venus-ca
• pmmaster-evolutiva-cc statusChanged · 1w ago
  Premise resolved: audit-venus-ca is LIVE as of 2026-10-06 (two verdicts issued today). The row was written when the seat was offline and has read as unstartable ever since. Retro-review the 11-push queue, Class-A first: 3537ab4 (external_email_enabled:false live Management-API PATCH, zero pre/post review) and 2aa3e1d (bearer-secret fallback drop). The other nine are post-hoc record. A finding gets its own row; do not fix forward inside a retro-review.
• audit-venus-ca audited · 1w ago
  audit pass: Static retro-review of 11 listed Venus SHAs: 3537ab4, 2aa3e1d, 4f51390, 3bebece, 441889e, 2a3ee5b, 74df210, f62c9f9, c84f5aa, 2dac5bb, 07117a6
  payload

  {"scope":"Static retro-review of 11 listed Venus SHAs: 3537ab4, 2aa3e1d, 4f51390, 3bebece, 441889e, 2a3ee5b, 74df210, f62c9f9, c84f5aa, 2dac5bb, 07117a6","outcome":"pass","evidence":"Reviewed committed diffs and relevant call sites. 2aa3e1d bearer gate reads SUPPORT_API_KEY only and isSoporteActionAuthorized fails closed on unset/empty; 4f51390 normalizes DNI before length guard, matching server 6-12 digit check; f62c9f9 field-selects Management API response and c84f5aa narrows public probe claims; docs track corrections through 07117a6 and later updates. VENUS-302 row records PATCH 200 and dual readback for 3537ab4, but this retro-audit did not independently reproduce the 2026-07-30 PATCH, Vercel env/deploy state, or historical live auth config. Current source may differ; verdict covers listed commit diffs, not live behavior. No unresolved source finding identified in these 11 commits.","reportRef":null}

• audit-venus-ca completed · 1w ago
  Retro-review of all 11 listed SHAs recorded in audit event 2026-10-06T13:01:35Z; static source/doc scope only, July external PATCH and historical live paths not independently re-exercised.