[pranems]

Summary

Prepare 0.55.67 for the tenant 10 dev-and-canary migration under the operator's explicit, documented performance-admission exception.

Performance remains UNQUALIFIED. Every other gate remains mandatory. Customer production must not change.

Operator authorization, decision T10-0.55.67-PERF-EXCEPTION-2026-11-03:

I authorize a documented performance-admission exception for this 0.55.67 dev-and-canary migration only. Performance remains unqualified. Keep every other security, data-integrity, functional, browser and migration gate mandatory. Do not change customer production.

This is a release-only boundary based on reviewed master a80fafb219c07628c7cd0b4fb67bed983570e7cf, not qualification-method research. The complete API/web trees match integrated candidate 5823a225ea08b0a2d7af51e6dd7bc9cc3b5fc69e. Only four version-bearing blobs differ from master in those trees: the API/web manifests and their existing lockfiles. No dependency graph, runtime source, database schema, workflow, qualification program or threshold changes.

PR #251 stays draft. Its ready_for_review event starts qualification/diagnostic campaigns; this release does not need to publish that separate research or change its rules. Failed qualification evidence stays failed. This exception is not inferred from source equality.

Normal review and exact-tip validation remain required. After merging, bind the decision to the exact merged commit, 0.55.67 version and immutable scanned image digest before deployment. Target acceptance, verified source-writer freeze, fresh final carry and cutover remain pending. No target deployment or customer-production change is claimed.

Linked Defect / Plan Reference

• DELIVERY_PLAN.md defect ID: N/A: scheduled tenant migration, not a new product defect.
• Audit doc reference: docs/TENANT_10_MIGRATION_EXECUTION_2026_10_30.md, decision T10-0.55.67-PERF-EXCEPTION-2026-11-03.
• ADR (if applicable): N/A: bounded operational authorization; no runtime architecture change.

TDD Process

No runtime behavior is introduced. Existing regression suites remain mandatory; the intended source/version identity and preservation checks passed. The coupled-documentation audit initially rejected missing release notes and passed after the explanatory entry was added.

• RED test written first; observed it fail for the expected reason - N/A for new runtime tests; existing F4 audit observed the intended missing-release-notes failure.
• GREEN: minimal implementation that turns the test green - N/A for runtime implementation; F4 now passes for all 27 documents.
• Refactor (if any) keeps the test green - N/A: no refactor.
• Permanent regression guard added (where applicable - see existing patterns in api/src/security/) - N/A: existing coupled-doc, provenance, source identity and normal release gates are retained.

Feature / Bug-Fix Commit Checklist (standing rule)

Every behavioral change must include all that apply. Tick or strike through with N/A + reason.

• Unit Tests - service-level and controller-level coverage of the new behavior - No new behavior; protected suite PASS, 6,254 tests / 216 suites.
• E2E Tests - end-to-end spec under api/test/e2e/ exercising the feature through HTTP - No new API behavior; protected inmemory suite PASS, 2,514 tests / 118 suites; 42 tests / 2 suites explicitly skipped by the existing runner.
• Live Integration Tests - new section in scripts/live-test.ps1 runnable against local + Docker + Azure - No new API behavior; existing full form-factor validation remains mandatory after artifact publication.
• Feature Documentation - dedicated doc in docs/ with architecture, RFC references, Mermaid diagrams, test coverage - Updated the existing migration execution record; no new protocol or diagram.
• INDEX.md Update - add the new doc reference to docs/INDEX.md - Existing migration entry retained; source-version metadata updated by the normal freshness tool.
• CHANGELOG.md Update - [Unreleased] entry with full test counts and feature summary - Scope entry added; fresh protected/hosted and eventual target counts remain pending, not borrowed from parent runs.
• Session & Context Updates - Session_starter.md and docs/CONTEXT_INSTRUCTIONS.md - Explicit authorization, release-only scope, pending artifact binding and mandatory gates recorded.
• Version Management - bump api/package.json (and any other version refs) when behavior changed - Imported existing 0.55.67 manifest/lock blobs without regenerating locks; source-facing documentation updated.
• Response Contract Tests - API responses contain ONLY documented fields (key allowlist assertion at unit + E2E + live) - No response changes; existing mandatory contract tests and target validation remain required.

Validation Output

Complete API/web identity versus integrated candidate: PASS
No runtime/schema/workflow/root dependency changes: PASS
Owned root/web dependency restore: PASS; manifest/lock bytes unchanged
Owned API Prisma generation: PASS
Full lock provenance: PASS; public registry only; 157/684/395 sha512 entries
Coupled document freshness: PASS; 27 documents after intended F4 failure/fix
Whitespace and added em-dash checks: PASS
Exact published tip: d629628e9869bbfbfe9cc6cd8ea1c3ba9ddd842d
Protected Validate pre-push: PASS; 29/29 gates in 935.5s; no bypass
Unit: PASS; 6254 tests / 216 suites
E2E inmemory: PASS; 2514 tests / 118 suites; 42 tests / 2 suites skipped
Web Vitest: PASS; 1661 tests / 125 files
Lint: PASS; API ESLint gate
Build/type checks: PASS; API build, web tsc and web production build
Mermaid render: PASS
Exact-tip hosted checks and independent review: PENDING
Final merged commit/image digest binding: PENDING
Actual dev/canary live, browser and migration gates: PENDING
Performance: UNQUALIFIED; migration-only operator-authorized admission exception

Exact validation commands and results:

• pwsh -NoProfile -File scripts\audit-doc-freshness.ps1: PASS, 27 documents.
• node scripts\audit-doc-content.mjs: PASS after the intended C13 stale-badge failure was corrected.
• node scripts\check-lockfile-provenance.mjs: PASS, all three lockfiles.
• $env:PREPUSH_MODE='Validate'; $env:DATABASE_URL='postgresql://localhost:5432/scim_codegen?schema=public'; git push --set-upstream origin ops/tenant10-release-exception-20261103: PASS, all 29 gates, 935.5 seconds.
• git diff --quiet 5823a225ea08b0a2d7af51e6dd7bc9cc3b5fc69e -- api web: PASS, complete API/web candidate identity.
• git diff --quiet origin/master -- scripts .github Dockerfile package.json package-lock.json: PASS at reviewed master a80fafb; no qualification/tooling/workflow/root graph change.

The interrupted first attempt and C13-blocked attempt are retained separately; neither is counted as a passing full run. Full protected logs are retained under the owned worktree's ignored test-results directory. Actual PostgreSQL/target/browser acceptance and immutable image evidence remain separate mandatory claims.

Standing Rules Acknowledgment

• No em-dash (Unicode U+2014) anywhere in the diff. Verified via Select-String -Pattern ([char]0x2014).
• No git commit --amend on history that has been pushed.
• No new credentials, tokens, or secrets committed to source. Forbidden patterns regression spec at api/src/security/forbidden-source-patterns.spec.ts will catch known anti-patterns.
• Migrations are additive-only (expand-contract for column changes). Migration linter at api/src/scripts/lint-migrations.ts enforces this. N/A: no migration changes.

Destructive Migration Override (skip if not applicable)

• This PR contains a NEW destructive Prisma migration (DROP TABLE/COLUMN, ALTER COLUMN ... TYPE, RENAME, INSERT ... SELECT FROM)
• I have set ALLOW_DESTRUCTIVE_MIGRATION=1 in the CI environment for this PR
• Justification (required if box above is ticked):

  <!-- Why this destructive change is necessary, what the rollback path is, and which release window it ships in -->
  N/A: no database schema or migration changes.
  

Reviewer Hint

Diff areas worth special attention from the reviewer:

• Verify the exact operator exception is bounded to this version, operation, dev and canary; performance must remain unqualified and customer production excluded.
• Check that the four imported version-bearing blobs preserve the full dependency graphs and that no qualification workflow, threshold or runtime code changed.
• Most remaining paths have mechanically updated source-version headers. Substantive documentation explains the exception, unchanged default gates, pending artifact binding and pending target/freeze/carry acceptance.
• Do not infer deployment approval from ordinary source checks or report skipped/failed performance evidence as green.
• Self-improvement applied: explicit scope/artifact binding, honest pending statuses, and separate release/research units. Design/architecture disposition accepted: no general gate bypass or speculative abstraction.

[Copilot]

🟢 Approval recommended

No active review issues are reported for the version-metadata and migration-documentation updates.

No open issues 🎉

2 files not reviewed

• api/package-lock.json: Generated file
• web/package-lock.json: Generated file

What changed in this PR

Prepares SCIMServer 0.55.67 for the tenant 10 dev-and-canary migration under a documented, migration-only performance-admission exception. Performance remains unqualified, all other gates remain mandatory, and customer production is excluded. Artifact binding, target acceptance and cutover remain pending.

Changes:

• Advances API and web version metadata to 0.55.67 without changing dependencies, runtime source, schemas or workflows.
• Documents the exception’s scope, required evidence and separation from draft qualification research in PR #251.
• Updates release notes, handoff records and reference-document version headers.

File	Description
web/​package.json	Bumps web version to 0.55.67.
web/​package-lock.json	Aligns root lockfile version metadata.
Session_starter.md	Records exception scope and pending release steps.
README.md	Explains migration preparation and updates version labels.
docs/​UI_GUIDE.md	Updates product-version headers.
docs/​TENANT_10_MIGRATION_EXECUTION_2026_10_30.md	Records authorization, mandatory gates and preparation issues.
docs/​SOVEREIGN_AND_GOV_CLOUD_DEPLOYMENT.md	Updates product-version headers.
docs/​SCHEMA_CUSTOMIZATION_GUIDE.md	Updates product-version header.
docs/​SCHEMA_ATTRIBUTE_CUSTOMIZATION_GUIDE.md	Updates product-version header.
docs/​REMOTE_DEBUGGING_AND_DIAGNOSIS.md	Updates product-version header.
docs/​RELEASE_NOTES.md	Adds scoped migration notes and pending acceptance status.
docs/​PROD_TO_DEV_MIRRORING_AND_FIXTURES.md	Updates product-version headers.
docs/​PATCH_OPERATIONS_COMPLETE_GUIDE.md	Updates product-version header.
docs/​OBSERVABILITY_TRACEABILITY_AND_DIAGNOSTICS.md	Updates product-version header.
docs/​MULTI_ENDPOINT_GUIDE.md	Updates product-version headers.
docs/​LOGGING_AND_OBSERVABILITY.md	Updates product-version header.
docs/​INDEX.md	Aligns documentation index version metadata.
docs/​GLOBAL_NAVIGATION_AND_WORKFLOW_CONTEXT.md	Updates product-version header.
docs/​ENDPOINT_PROFILE_ARCHITECTURE.md	Updates product-version header.
docs/​ENDPOINT_LIFECYCLE_AND_USAGE.md	Updates product-version headers.
docs/​ENDPOINT_CREATION_WIKI.md	Updates product-version headers.
docs/​ENDPOINT_CONFIG_FLAGS_REFERENCE.md	Updates product-version headers.
docs/​DOCKER_GUIDE_AND_TEST_REPORT.md	Updates product-version headers.
docs/​CUSTOM_EXTENSIONS_RFC_GUIDE.md	Updates product-version header.
docs/​CONTEXT_INSTRUCTIONS.md	Records bounded release authorization and pending evidence.
docs/​COMPLETE_API_REFERENCE.md	Updates product-version headers.
docs/​AZURE_DEPLOYMENT_AND_USAGE_GUIDE.md	Updates product-version headers.
docs/​AUTHENTICATION_GUIDE.md	Updates product-version header.
DEPLOYMENT.md	Updates product-version header.
CHANGELOG.md	Adds migration release scope and preparation status.
api/​package.json	Bumps API version to 0.55.67.
api/​package-lock.json	Aligns root lockfile version metadata.

_{Review effort: Balanced}

[pranems]

Merged normally at 6102aff after all exact-tip hosted checks passed. Independent review 5759073624 matches d629628 and reports no open issues with approval recommended; formal state COMMENTED, not APPROVED. No protection or approval override. Authoritative merged-source full validation and image build is run 41714210347, verified head 6102aff, unique tag test-tenant10-release-0.55.67-6102aff4a168. Immutable digest and actual target gates remain pending. Decision T10-0.55.67-PERF-EXCEPTION-2026-11-03 binds this source to the migration-only performance-admission exception; performance remains UNQUALIFIED. All other gates stay mandatory and customer production is excluded.

[pranems]

Authoritative merged-source run 41714210347 PASS at 6102aff: validation, real PostgreSQL copy/snapshot fixtures, build/push, container smoke and HIGH/CRITICAL Trivy gating pass. Merged-source CodeQL 41714183722 and dependency pins review 41714184178 also PASS. Decision T10-0.55.67-PERF-EXCEPTION-2026-11-03 is now bound to product version 0.55.67, merged commit 6102aff and immutable image ghcr.io/pranems/scimserver@sha256:4a00b5421a8d5290506091fe856f3dbb4cc185e0bb799d272cb724651de9aeeb (unique tag test-tenant10-release-0.55.67-6102aff4a168). Producer manifest digest and independent smoke pull agree. Performance remains UNQUALIFIED; this is only the authorized dev/canary migration admission exception. Actual target functional/live/browser/migration gates, source-writer freeze, final carry and cutover remain mandatory and pending. Customer production is untouched.