From 621fc7b58cb3cf97333316373ca05c96ceb00a3a Mon Sep 17 00:00:00 2001
From: Tom Softreck <tom@sapletta.com>
Date: Tue, 8 Sep 2026 16:01:32 +0200
Subject: [PATCH] docs: adopt pinned local verification for Fixop

---
 .governance/docs.json                  |  7 ++++
 docs/README.md                         |  4 ++
 docs/information/local-verification.md | 54 ++++++++++++++++++++++++++
 project/ticket-004/README.md           | 12 ++++++
 project/ticket-004/intent.json         | 19 +++++++++
 5 files changed, 96 insertions(+)
 create mode 100644 .governance/docs.json
 create mode 100644 docs/README.md
 create mode 100644 docs/information/local-verification.md
 create mode 100644 project/ticket-004/README.md
 create mode 100644 project/ticket-004/intent.json

diff --git a/.governance/docs.json b/.governance/docs.json
new file mode 100644
index 0000000..1722987
--- /dev/null
+++ b/.governance/docs.json
@@ -0,0 +1,7 @@
+{
+  "schema": "wellmanifest.docs/adoption/v1",
+  "repository": "semcod/fixop",
+  "standard": "wellmanifest/docs",
+  "source_revision": "ebe7501063ef4f3e63ded610c2d3183010ca636e",
+  "policy_sha256": "f6ba9c011ea1d9260e7fac3a1638a767d5ebc9f7d9b32ed51cc3aea22fe95d8c"
+}
diff --git a/docs/README.md b/docs/README.md
new file mode 100644
index 0000000..5b405e4
--- /dev/null
+++ b/docs/README.md
@@ -0,0 +1,4 @@
+# Fixop documentation
+
+- [Local verification](information/local-verification.md) — protected Python matrix and documentation adoption.
+- [Dependencies](dependencies.md) — existing dependency notes.
diff --git a/docs/information/local-verification.md b/docs/information/local-verification.md
new file mode 100644
index 0000000..3983991
--- /dev/null
+++ b/docs/information/local-verification.md
@@ -0,0 +1,54 @@
+---
+{
+  "schema": "wellmanifest.docs/document/v1",
+  "id": "local-verification",
+  "kind": "information",
+  "version": 1,
+  "title": "Fixop local verification",
+  "status": "proposed",
+  "owner": "semcod/fixop",
+  "created": "2026-09-08",
+  "updated": "2026-09-08",
+  "review_after": "2026-09-15",
+  "source_revision": "9b24f634e9c50b35e9e768562bc7e915d69b5b36",
+  "affected_repositories": [
+    "semcod/fixop"
+  ],
+  "evidence": [
+    "https://github.com/semcod/fixop/issues/4",
+    "https://github.com/subactor/onedev-agent/issues/207"
+  ]
+}
+---
+
+# Fixop local verification
+
+<!-- docs:section purpose -->
+## Purpose
+
+Verify the existing supported Python matrix and canonical documentation through protected local CI and independent publication.
+
+<!-- docs:section scope -->
+## Scope
+
+The executor uses Python 3.10.19 and 3.13.15, the approved uv.lock and dev extras, matching the existing hosted test matrix. It verifies exact dependency input hashes before importing candidate source and running every pytest test without network access.
+
+<!-- docs:section evidence -->
+## Evidence
+
+The hosted workflow requires Python 3.10 and 3.13. Tests mock SSH and network interactions. The approved input revision is `9b24f634e9c50b35e9e768562bc7e915d69b5b36`; the executor implementation is tracked in subactor/onedev-agent issue #207.
+
+<!-- docs:section content -->
+## Documentation and publication
+
+The second protected gate runs Wellmanifest Docs revision `ebe7501063ef4f3e63ded610c2d3183010ca636e` against the exact trusted base. The adoption pin is .governance/docs.json. A child-only Git URL mapping supplies repository identity for local mirrors. The independent Validator must bind the exact PR head and merge result before publication. Existing hosted checks remain required.
+
+<!-- docs:section limitations -->
+## Limits
+
+Passing mocked Linux tests does not prove real infrastructure remediation, Windows/macOS behavior, wheel packaging or all IDE/LLM sessions. A changed dependency input needs an independently reviewed executor pin/image update. Source configuration, runtime deployment and observed verification are separate evidence.
+
+<!-- docs:section next_actions -->
+## Acceptance
+
+Observe the deployed executor on this unchanged canary head, retain both Python results and the documentation result, then independently require the local gate alongside both hosted checks. Publish through the trusted Validator adapter.
diff --git a/project/ticket-004/README.md b/project/ticket-004/README.md
new file mode 100644
index 0000000..73c7898
--- /dev/null
+++ b/project/ticket-004/README.md
@@ -0,0 +1,12 @@
+# ticket-004: Local verification canary
+
+Status: IN_PROGRESS / PUBLICATION.
+
+Session authorization: continue, push, test and deploy.
+Allocation: https://github.com/semcod/fixop/issues/4.
+
+AC-01: Adopt the exact documentation pin and canonical information document.
+AC-02: Preserve application inputs and hosted matrix; verify the deployed local profile.
+AC-03: Publish independently after all required checks pass.
+
+Canonical result: ../../docs/information/local-verification.md.
diff --git a/project/ticket-004/intent.json b/project/ticket-004/intent.json
new file mode 100644
index 0000000..72f6e02
--- /dev/null
+++ b/project/ticket-004/intent.json
@@ -0,0 +1,19 @@
+{
+  "schema": "new-project.intent/v3",
+  "ticket": "ticket-004",
+  "summary": "Adopt documented local verification and pinned documentation metadata",
+  "workstream": "integration",
+  "allowedPaths": [
+    ".governance/docs.json",
+    "docs/information/local-verification.md",
+    "docs/README.md",
+    "project/ticket-004/**"
+  ],
+  "forbiddenPaths": [
+    "pyproject.toml",
+    "uv.lock",
+    ".github/workflows/**"
+  ],
+  "dependsOn": [],
+  "conflictsWith": []
+}