| 1 | # Scoped inventory update explicitly approved by Paul on 2026-10-21. Final independent review remains required before merge. |
| 2 | # Classifications and fingerprints match the approved scan-demand-revival proposal; no prior seal is removed. |
| 3 | @legacy 8146905a78614e0e7277a93e00e283980b3877b009f92904d05b4dd8f193d35f cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader. data-literal@3913,data-literal@5014,data-literal@5251 c0aee9fd233d704a880d6b0171a967cae569ba7dd4281fe96f57d30914318841 |
| 4 | cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader. data-literal@3913,data-literal@5014,data-literal@5251 c0aee9fd233d704a880d6b0171a967cae569ba7dd4281fe96f57d30914318841 |
| 5 | @legacy c883cd26bd68aca00a7afb5be64d257e2a97efdbdfb0318a71cb1b276022401b internal/console/apiscan.go randomWebhookGeneration legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console grant and rotation call crypto/rand.Read for a callback generation. The Read selector is entropy, not a filesystem path or root decision. file:Read@77 930e00b0aec413b5fe0493b4f9c18f0129f1e364477140259cdb9955b80ba900 |
| 6 | internal/console/apiscan.go randomWebhookGeneration legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console grant and rotation call crypto/rand.Read for a callback generation. The Read selector is entropy, not a filesystem path or root decision. file:Read@77 930e00b0aec413b5fe0493b4f9c18f0129f1e364477140259cdb9955b80ba900 |
| 7 | @legacy eace68f47991dfedafeb070ff89309e4f1cc70dddf90a301a4b1106050783799 internal/console/apiscanstatus.go Server.handleAPIScanObject legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Authenticated console handler reads URL query parameters key and wait. Query is URL.Query, not database or filesystem I/O. file:Query@1119,file:Query@939 1976cc46a661732c3cf2f9352594b348b2c4c612e59bb25c912329338309a67f |
| 8 | internal/console/apiscanstatus.go Server.handleAPIScanObject legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Authenticated console handler reads URL query parameters key and wait. Query is URL.Query, not database or filesystem I/O. file:Query@1119,file:Query@939 1976cc46a661732c3cf2f9352594b348b2c4c612e59bb25c912329338309a67f |
| 9 | @legacy e49b2a0f2b89415b1b2d7cf9e6e3b8ee1053179b7bdf69fde2c61d8894b9a230 internal/console/scandeliver.go Server.scanCallbackHost legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console callback delivery reads registry routes to select an existing ready platform host for the same account and app, excluding canaries and sidecars. It changes no route and invokes no root operation. registry:App@427,registry:Canary@534,registry:Host@585,registry:Host@656,registry:Host@683,registry:Platform@519,registry:Status@491,whole:Route@413,whole:Route@469 161d32082b1b7bb3b91d1e036a0fc2708ea02ea2a3c7f4fa7b181735aa683c3a |
| 10 | internal/console/scandeliver.go Server.scanCallbackHost legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console callback delivery reads registry routes to select an existing ready platform host for the same account and app, excluding canaries and sidecars. It changes no route and invokes no root operation. registry:App@427,registry:Canary@534,registry:Host@585,registry:Host@656,registry:Host@683,registry:Platform@519,registry:Status@491,whole:Route@413,whole:Route@469 161d32082b1b7bb3b91d1e036a0fc2708ea02ea2a3c7f4fa7b181735aa683c3a |
| 11 | @legacy 5b070c711c544ef7e744306db7507ca7af9f92f222f489e192d4b1a1c6e3a58b internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console construction adds queue and notification state. The existing logs/data route literal moves; it is not a filesystem read. data-literal@9149 47c78e5384da30570e5db6cdac52ba088f4b33351e26326e08f33d4421762691 |
| 12 | internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console construction adds queue and notification state. The existing logs/data route literal moves; it is not a filesystem read. data-literal@9149 47c78e5384da30570e5db6cdac52ba088f4b33351e26326e08f33d4421762691 |
| 13 | @coverage . f242a3d0457c5968c2b3a368d638996e4826315f3ac0738ee6e9f03cf5dc44ce |
| 14 | @coverage cmd/console f96aab27a8a6c9c21e2884e2ad2bad65e97bf3cd5422cebeeb50cb202ff1eeba |
| 15 | @coverage internal/console c166c21992992ef7927d2a68d708f31c401b675975a192d2e23ccbbe8ac109b9 |
| 16 | @coverage internal/hostops 3d339a4a91b3fa6c0af58acefa96dc4387fb4f14722e17522c82a118bccd1af3 |
| 17 | @coverage internal/objstore 1bb476aee8d705d32231af68881c874458ee50b2e0009e30c67260c902208751 |
| 18 | @coverage internal/usage 91cc5f119bb2e8a67a8ccd8e9c88a1d622b273a49ff85a09dadb6ec8dc82832b |
| 19 | |
amadan