> For the complete documentation index, see [llms.txt](https://faction-os.gitbook.io/faction-os-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://faction-os.gitbook.io/faction-os-docs/.spec_system/archive/sessions/phase12-session02-release-closeout-and-rollout-readiness/release-readiness-evidence.md).

# Release Readiness Evidence

**Session ID**: `phase12-session02-release-closeout-and-rollout-readiness` **Package**: Cross-cutting **Date**: 2026-05-31 **Status**: Complete

***

## Evidence Rules

Allowed evidence in this file:

* Relative repo paths.
* Command names and status labels.
* Counts, booleans, owner labels, issue codes, and concise remediation notes.
* Source refs to prior spec artifacts and stable docs.

Excluded evidence:

* Raw prompts, patch bodies, command output, terminal output, transcripts, MCP argument bodies, tokens, credentials, hook config bodies, temp home paths, and broad local paths.

***

## Release Claim Under Review

FactionOS can release first-class local Codex CLI hook support through user-level hooks installed by `factionos init --cli codex` or `factionos init --cli all`.

Supported release wording:

* Direct user-level Codex hook install is supported.
* Users review loaded Codex hooks with `/hooks`.
* `factionos status --cli codex`, `factionos doctor --cli codex`, and `factionos uninstall --cli codex` are supported local posture and cleanup flows.
* Plugin packaging is explicitly deferred for this release.

Unsupported release wording:

* Codex plugin install, plugin cache refresh, plugin trust validation, or plugin uninstall passed.
* FactionOS bypasses Codex hook trust or creates project-local trusted `.codex` state.
* Hosted telemetry, hosted identity, hosted storage, production-hosted validation, remote execution, push/tunnel operation, public replay hosting, or broad trusted erasure is active.

***

## Gate Status Values

Use only these status values:

| Status           | Meaning                                                             |
| ---------------- | ------------------------------------------------------------------- |
| `pass`           | Ran in this session and passed.                                     |
| `fail`           | Ran in this session and failed.                                     |
| `blocked`        | Could not complete due to missing human-owned input or credentials. |
| `unavailable`    | Not available in this local environment.                            |
| `no-claim`       | Explicitly not claimed by this release.                             |
| `prior evidence` | Covered by a completed source-backed session artifact.              |
| `not run`        | Planned, not executed yet.                                          |

***

## Gate Plan

| Gate                                              | Owner                    | Planned evidence                                                                              |
| ------------------------------------------------- | ------------------------ | --------------------------------------------------------------------------------------------- |
| Spec prerequisites                                | Spec system              | Analyzer and prereq checker.                                                                  |
| Focused Codex installer and hook-map tests        | `apps/cli`, `apps/hooks` | `npx vitest run apps/cli/tests/codexInstaller.test.js apps/hooks/tests/codexHookMap.test.js`. |
| Direct install, status, doctor, uninstall posture | `apps/cli`, `apps/hooks` | Isolated CLI smoke and Phase 11 prior evidence.                                               |
| Format                                            | Root workspace           | `npm run format:check`.                                                                       |
| Lint                                              | Root workspace           | `npm run lint`.                                                                               |
| Workspace typecheck                               | Root workspace           | `npm run typecheck --workspaces --if-present`.                                                |
| Full tests                                        | Root workspace           | `npm test`.                                                                                   |
| Workspace build                                   | Root workspace           | `npm run build --workspaces --if-present`.                                                    |
| Media tooling                                     | Media scripts            | `npm run media:check`.                                                                        |
| Visual promotion                                  | Media scripts            | `npm run media:visual:check`.                                                                 |
| Public demo media                                 | Public demo              | `npm run media:demo:check`.                                                                   |
| Draft media manifest                              | Media scripts            | `npm run media:drafts:check`.                                                                 |
| Battlefield assets                                | App and public demo      | `npm run battlefield:check`.                                                                  |
| Media release gates                               | Media scripts            | `npm run media:gates:check`.                                                                  |
| Hosted smoke no-network                           | Release script           | `npm run release:hosted-smoke -- --no-network --json`.                                        |
| Live hosted smoke                                 | Release environment      | Unavailable/no-claim unless safe targets and credentials are present.                         |
| Secret scan                                       | Security script          | `npm run security:secrets`.                                                                   |
| Diff whitespace                                   | Git                      | `git diff --check`.                                                                           |
| Plugin package artifact check                     | Repo                     | Absence of `.codex-plugin/`, repo marketplace, and repo `plugins/`.                           |
| Prior Codex ingest and browser evidence           | Phase 11                 | Source-backed prior evidence.                                                                 |

***

## Prior Evidence Citations

| Source                                                                                                                   | Relevant evidence                                                                                                                                                                              |
| ------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `.spec_system/specs/phase11-session03-end-to-end-validation-and-integration-fixes/codex-e2e-validation-record.md`        | Direct Codex install, reinstall, status, doctor, uninstall, local ingest, browser replay, replay/export privacy, focused tests, typecheck, format, lint, diff, ASCII/LF, and sensitive review. |
| `.spec_system/specs/phase12-session01-codex-plugin-packaging/codex-plugin-packaging-decision.md`                         | Plugin packaging defer decision, direct-hook baseline, no-overclaim fields, and future reconsideration gate.                                                                                   |
| `.spec_system/specs/phase12-session01-codex-plugin-packaging/codex-plugin-validation-plan.md`                            | Deferral branch validation plan and N/A plugin install/cache/trust/uninstall status.                                                                                                           |
| `.spec_system/archive/sessions/phase10-session02-codex-hook-install-uninstall-and-diagnostics/IMPLEMENTATION_SUMMARY.md` | Original safe Codex install, uninstall, status, doctor, backup, and compact diagnostics implementation summary.                                                                                |
| `docs/release.md`                                                                                                        | Release gate commands and no-claim rules for hosted validation.                                                                                                                                |
| `docs/development.md`                                                                                                    | Local hook provider workflow and closeout command set.                                                                                                                                         |
| `docs/privacy-and-security.md`                                                                                           | Codex hook privacy boundary and no-erasure-overclaim wording.                                                                                                                                  |
| `docs/deployment.md`                                                                                                     | Hosted smoke, deployment status, and production-hosted no-claim wording.                                                                                                                       |

***

## Prior Evidence Closeout

| Surface                                | Status           | Source                                              | Release use                                                                                                                                                                    |
| -------------------------------------- | ---------------- | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Live Codex `/hooks` trust review       | `prior evidence` | Phase 11 validation record                          | Interactive trust review remains a manual user step. This session did not use trust-bypass flags and does not claim trusted-hook execution automation.                         |
| Direct install/status/doctor/uninstall | `pass`           | Phase 11 validation record plus T011 isolated smoke | Supports direct user-level hook release path.                                                                                                                                  |
| Codex fixture ingest replay            | `prior evidence` | Phase 11 validation record                          | Local ingest accepted lifecycle, Bash, `apply_patch`, MCP, permission, subagent, degraded, unknown, and Stop fixture steps without raw boundary leaks.                         |
| Codex browser replay                   | `prior evidence` | Phase 11 validation record                          | Desktop/mobile browser validation covered loading, empty, offline, error, connected lifecycle, mission detail, filters, tool usage, replay, privacy, and accessibility guards. |
| Codex plugin package                   | `no-claim`       | Session 01 decision and validation plan             | No plugin package exists. Plugin install, cache refresh, plugin trust, and plugin uninstall are N/A rather than passed.                                                        |
| Live hosted smoke                      | `unavailable`    | Environment review plus `docs/deployment.md`        | No safe credential-backed live hosted mode is available in this shell. Production-hosted validation remains no-claim.                                                          |
| Full live Codex trust in this session  | `unavailable`    | Phase 11 trust exception                            | Requires human review in an interactive Codex session and is not automated.                                                                                                    |

***

## Gate Matrix

| Gate                                 | Status        | Command or source                                                                                  | Notes                                                                                                                                                                |
| ------------------------------------ | ------------- | -------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Spec analyzer                        | `pass`        | Bundled `analyze-project.sh --json`                                                                | Current session resolved to Session 02.                                                                                                                              |
| Spec prereqs                         | `pass`        | Bundled `check-prereqs.sh --json --env`; bundled `check-prereqs.sh --json --tools node,npm,jq,git` | Environment and required tools passed.                                                                                                                               |
| Focused Codex tests                  | `pass`        | `npx vitest run apps/cli/tests/codexInstaller.test.js apps/hooks/tests/codexHookMap.test.js`       | Passed 2 files and 20 tests.                                                                                                                                         |
| Isolated rollout smoke               | `pass`        | Isolated `FACTIONOS_HOME` and `CODEX_HOME` CLI smoke                                               | Install, status, doctor, and uninstall passed with compact evidence.                                                                                                 |
| Format                               | `pass`        | `npm run format:check`                                                                             | Checked 465 files; no fixes applied.                                                                                                                                 |
| Lint                                 | `pass`        | `npm run lint`                                                                                     | Checked 467 files; no fixes applied.                                                                                                                                 |
| Workspace typecheck                  | `pass`        | `npm run typecheck --workspaces --if-present`                                                      | Workspace typecheck scripts passed.                                                                                                                                  |
| Full tests                           | `pass`        | `npm test`                                                                                         | 175 test files passed, 1 skipped; 2372 tests passed, 1 skipped.                                                                                                      |
| Workspace build                      | `pass`        | `npm run build --workspaces --if-present`                                                          | Workspace build passed, including web production build.                                                                                                              |
| Media and battlefield gates          | `pass`        | Media and battlefield gate commands                                                                | Media tooling, visual promotion, public demo media, draft manifest, battlefield, and media release gates passed; visual gate produced expected non-release warnings. |
| No-network hosted smoke              | `pass`        | `npm run release:hosted-smoke -- --no-network --json`                                              | Passed as no-network no-claim evidence with four unavailable targets and zero failures.                                                                              |
| Live hosted smoke                    | `unavailable` | Environment review                                                                                 | No safe credential-backed live hosted mode is available in the current shell.                                                                                        |
| Secret scan                          | `pass`        | `npm run security:secrets`                                                                         | 1091 tracked text files checked.                                                                                                                                     |
| Diff check                           | `pass`        | `git diff --check`                                                                                 | No whitespace errors reported.                                                                                                                                       |
| Plugin artifacts                     | `pass`        | Artifact absence check                                                                             | `.codex-plugin/`, `.agents/plugins/marketplace.json`, and repo `plugins/` are absent.                                                                                |
| Plugin install/cache/trust/uninstall | `no-claim`    | Session 01 decision                                                                                | No plugin package exists, so these are N/A rather than passed.                                                                                                       |

***

## Detailed Closeout Matrix

| ID  | Gate                                 | Owner                    | Status           | Command or source                                                                            | Exception                                                   | Remediation                                                                                                                                    |
| --- | ------------------------------------ | ------------------------ | ---------------- | -------------------------------------------------------------------------------------------- | ----------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
| G01 | Session prerequisites                | Spec system              | `pass`           | Analyzer plus prereq checker                                                                 | None                                                        | None.                                                                                                                                          |
| G02 | Tool availability                    | Workspace                | `pass`           | Tool prereq checker                                                                          | None                                                        | None.                                                                                                                                          |
| G03 | Focused Codex installer tests        | `apps/cli`               | `pass`           | `npx vitest run apps/cli/tests/codexInstaller.test.js apps/hooks/tests/codexHookMap.test.js` | None                                                        | Passed 11 installer tests.                                                                                                                     |
| G04 | Focused Codex hook-map tests         | `apps/hooks`             | `pass`           | Same focused Vitest command as G03                                                           | None                                                        | Passed 9 hook-map tests.                                                                                                                       |
| G05 | Direct install smoke                 | `apps/cli`               | `pass`           | Isolated CLI run                                                                             | None                                                        | Install produced 15 managed Codex hooks, preserved 1 unmanaged hook, preserved unknown state, and created backup state.                        |
| G06 | Direct status and doctor smoke       | `apps/cli`               | `pass`           | Isolated CLI run                                                                             | None                                                        | Status and doctor included `/hooks` guidance and no scanned private labels.                                                                    |
| G07 | Direct uninstall smoke               | `apps/cli`               | `pass`           | Isolated CLI run                                                                             | None                                                        | Uninstall removed managed hooks, preserved 1 unmanaged hook and unknown state, and cleared backup state.                                       |
| G08 | Format check                         | Root workspace           | `pass`           | `npm run format:check`                                                                       | None                                                        | Checked 465 files; no fixes applied.                                                                                                           |
| G09 | Lint check                           | Root workspace           | `pass`           | `npm run lint`                                                                               | None                                                        | Checked 467 files; no fixes applied.                                                                                                           |
| G10 | Workspace typecheck                  | Root workspace           | `pass`           | `npm run typecheck --workspaces --if-present`                                                | None                                                        | Workspace typecheck scripts passed.                                                                                                            |
| G11 | Full tests                           | Root workspace           | `pass`           | `npm test`                                                                                   | None                                                        | 175 files and 2372 tests passed; 1 file and 1 test skipped.                                                                                    |
| G12 | Workspace build                      | Root workspace           | `pass`           | `npm run build --workspaces --if-present`                                                    | None                                                        | Workspace build passed, including web production build.                                                                                        |
| G13 | Media tooling                        | Media scripts            | `pass`           | `npm run media:check`                                                                        | None                                                        | 23 media tooling checks passed.                                                                                                                |
| G14 | Visual promotion gate                | Media scripts            | `pass`           | `npm run media:visual:check`                                                                 | Expected warnings only                                      | 32 files, 12 mirrors, 15 service-worker cache entries, 7 docs, and 10 non-release records checked; 33 expected warnings.                       |
| G15 | Public demo media gate               | Public demo              | `pass`           | `npm run media:demo:check`                                                                   | None                                                        | 43 files, 12 lazy files, 31 service-worker cache entries, 3 manifest icons, 3 runtime files, and 5 docs checked.                               |
| G16 | Draft media manifest gate            | Media scripts            | `pass`           | `npm run media:drafts:check`                                                                 | None                                                        | Draft generation manifest passed.                                                                                                              |
| G17 | Battlefield asset gate               | App and public demo      | `pass`           | `npm run battlefield:check`                                                                  | None                                                        | 6 assets checked; app/demo runtime byte parity matched.                                                                                        |
| G18 | Media release gate                   | Media scripts            | `pass`           | `npm run media:gates:check`                                                                  | None                                                        | 14 catalog records, 2 approved records, 12 blocked records, 11 draft records, 6 docs, 3 browser evidence files, and 2 dependent gates checked. |
| G19 | Hosted smoke no-network              | Release script           | `pass`           | `npm run release:hosted-smoke -- --no-network --json`                                        | No-network no-claim mode                                    | 4 targets unavailable/no-claim, 0 failures.                                                                                                    |
| G20 | Live hosted smoke                    | Release environment      | `unavailable`    | `npm run release:hosted-smoke -- --json`                                                     | No safe credential-backed live hosted mode in current shell | Keep production-hosted validation no-claim.                                                                                                    |
| G21 | Secret scan                          | Security script          | `pass`           | `npm run security:secrets`                                                                   | None                                                        | 1091 tracked text files checked.                                                                                                               |
| G22 | Diff whitespace                      | Git                      | `pass`           | `git diff --check`                                                                           | None                                                        | No whitespace errors reported.                                                                                                                 |
| G23 | Plugin package absence               | Repo                     | `pass`           | Artifact absence check                                                                       | None                                                        | Keep plugin claims N/A.                                                                                                                        |
| G24 | Plugin install/cache/trust/uninstall | Codex plugin branch      | `no-claim`       | Session 01 decision                                                                          | No plugin package exists                                    | Do not represent plugin validation as passed.                                                                                                  |
| G25 | Live `/hooks` trust review           | User-owned Codex session | `prior evidence` | Phase 11 trust-review exception                                                              | Interactive human review cannot be automated safely         | Keep `/hooks` as manual review step.                                                                                                           |
| G26 | Codex ingest and browser replay      | Server and web           | `prior evidence` | Phase 11 validation record                                                                   | Rerun only if source changes touch these surfaces           | Cite prior fixture replay evidence.                                                                                                            |

***

## Initial No-Claim Outcomes

| Surface                              | Status        | Reason                                                                       |
| ------------------------------------ | ------------- | ---------------------------------------------------------------------------- |
| Codex plugin package                 | `no-claim`    | Session 01 explicitly defers plugin packaging.                               |
| Codex trust bypass                   | `no-claim`    | Users review loaded hooks with `/hooks`; no bypass is the normal setup path. |
| Project-local trusted `.codex` state | `no-claim`    | Direct installer writes user-level hooks only.                               |
| Hosted telemetry                     | `no-claim`    | Codex hooks remain local-first and do not add hosted telemetry.              |
| Production-hosted validation         | `unavailable` | No safe credential-backed live hosted smoke mode is available.               |
| Remote execution                     | `no-claim`    | Local Codex hook support is observational and does not add executors.        |
| Broad trusted erasure                | `no-claim`    | Uninstall edits hook configuration only.                                     |

***

## Remediation Log

No release-blocking failures have been found yet.

***

## Command Results

| Command                                                                                              | Status | Sanitized result                                                                                                                                                                                                   |
| ---------------------------------------------------------------------------------------------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `npx vitest run apps/cli/tests/codexInstaller.test.js apps/hooks/tests/codexHookMap.test.js`         | `pass` | 2 test files passed; 20 tests passed.                                                                                                                                                                              |
| Isolated Codex CLI rollout smoke                                                                     | `pass` | Install/status/doctor/uninstall passed with 15 managed hooks after install, 0 managed hooks after uninstall, preserved unmanaged state, `/hooks` guidance present, and no scanned private labels in status/doctor. |
| `npm run format:check`                                                                               | `pass` | 465 files checked; no fixes applied.                                                                                                                                                                               |
| `npm run lint`                                                                                       | `pass` | 467 files checked; no fixes applied.                                                                                                                                                                               |
| `npm run typecheck --workspaces --if-present`                                                        | `pass` | Workspace typecheck scripts passed.                                                                                                                                                                                |
| `npm test`                                                                                           | `pass` | 175 test files passed, 1 skipped; 2372 tests passed, 1 skipped.                                                                                                                                                    |
| `npm run build --workspaces --if-present`                                                            | `pass` | Workspace build passed, including web production build.                                                                                                                                                            |
| `npm run media:check`                                                                                | `pass` | 23 media tooling checks passed.                                                                                                                                                                                    |
| `npm run media:visual:check`                                                                         | `pass` | Visual media promotion passed with 33 expected warnings for metadata-pending and non-release records.                                                                                                              |
| `npm run media:demo:check`                                                                           | `pass` | Public demo media check passed.                                                                                                                                                                                    |
| `npm run media:drafts:check`                                                                         | `pass` | Draft generation manifest check passed.                                                                                                                                                                            |
| `npm run battlefield:check`                                                                          | `pass` | Battlefield asset check passed with app/demo runtime byte parity.                                                                                                                                                  |
| `npm run media:gates:check`                                                                          | `pass` | Media release gate passed.                                                                                                                                                                                         |
| `npm run release:hosted-smoke -- --no-network --json`                                                | `pass` | No-network mode passed as no-claim evidence: 4 unavailable targets, 0 failures.                                                                                                                                    |
| `npm run security:secrets`                                                                           | `pass` | 1091 tracked text files checked.                                                                                                                                                                                   |
| `git diff --check`                                                                                   | `pass` | No whitespace errors reported.                                                                                                                                                                                     |
| Targeted ASCII scan over Session 02 artifacts and `docs/api/README_api.md`                           | `pass` | No non-ASCII characters found.                                                                                                                                                                                     |
| Targeted LF scan over Session 02 artifacts and `docs/api/README_api.md`                              | `pass` | No CRLF line endings found.                                                                                                                                                                                        |
| Targeted sensitive-string and broad-path scan over Session 02 artifacts and `docs/api/README_api.md` | `pass` | No broad local paths or key-like secret patterns found.                                                                                                                                                            |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://faction-os.gitbook.io/faction-os-docs/.spec_system/archive/sessions/phase12-session02-release-closeout-and-rollout-readiness/release-readiness-evidence.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.