| 1 | # Independent review · 2026-09-12 |
| 2 | |
| 3 | Reviewer task `/root/native_review`, dispatched with this session's inherited |
| 4 | model (the orchestration response provides no concrete model ID). The reviewer |
| 5 | was not the implementation author. This is recorded as dispatched, without |
| 6 | inventing a model attribution. |
| 7 | |
| 8 | First pass found inherited auth context could substitute the exchange caller's |
| 9 | admission for the approved browser identity; fixed and independently chosen |
| 10 | mutations proved the regression. Second pass found Calendar gap-time editing, |
| 11 | all-day cross-zone membership, DST default times and Memoria same-title note |
| 12 | replacement. All fixed with regression tests. Third pass found no remaining |
| 13 | release blocker and passed both focused Go TestNative suites. The nonblocking |
| 14 | gap-field toggle issue was also fixed. Canary checks are recorded separately. |
| 15 | |
| 16 | Mac and iPhone/iPad screens were rendered from the actual Swift clients against |
| 17 | an authenticated Go fixture. Native approval/exchange creates the fixture client |
| 18 | credential. Memoria's available Apple Foundation Model generated a response on |
| 19 | this Mac. Calendar's three Swift civil-date tests and both Go CI suites pass. |
| 20 | |
| 21 | Final review was separately dispatched as `gpt-6-astra` with high reasoning, |
| 22 | without claiming independent evidence of runtime model identity. It found |
| 23 | cancelled/tentative status missing from Calendar's DTO and UI. The follow-up |
| 24 | carries status and labels it explicitly; regression tests pin both states. |
| 25 | A confirmed event with a failed reminder now returns its saved id and a warning, |
| 26 | so the native editor closes successfully instead of inviting a duplicate retry. |
| 27 | A database-trigger failure test verifies that persisted event and warning. |
| 28 | |
| 29 | Final merge `d3fedf1` reviewed against both parents (58863aa and 9c44bc1) by |
| 30 | `/root/canary_release_review`, dispatched as `gpt-6-astra` with high reasoning. |
| 31 | Runtime model identity was not independently verified. Code and deployed canary |
| 32 | review approved, with no remaining findings. Direct `/api/version` and the router |
| 33 | reported the exact reviewed version. Native pending exchanges returned 202 without |
| 34 | credentials; incorrect proofs returned 404, cross-origin requests 403, anonymous |
| 35 | approval was refused, and failed approval left the request pending. No email or |
| 36 | user-data mutation was performed. Existing credits access and branding remained |
| 37 | intact. The final Go CI passed, and XCTest exercised native form and navigation |
| 38 | against an isolated authenticated fixture. |
| 39 | |
amadan