quantmodel — Execute staged private-pilot preflight and record go/no-go

Objective

Execute staged private-pilot preflight and record go/no-go.

Notes: Recorded a fail-closed NO-GO: live auth/isolation and evaluator checks passed, but portable encrypted restore, full alert/kill evidence, deletion, and complete timed provider rollback remain unevidenced. Emptied public account configuration and added a fail-closed regression test; t296 audits the evidence next.

Approach

Reuses existing report research/findings/private-pilot-preflight-t295.md — tables/metrics preserved verbatim via source_report pointer. Body below summarizes grounded evidence from that report and adjacent artifacts.

Files / code / data changed

No commit SHA confidently associated with t295 in sampled log [reconstructed — uncertain].
Source report: research/findings/private-pilot-preflight-t295.md
Task-history entry: research/findings/task-history.json#t295

Results

Key table from source report (preserved):

Check	Result	Disposition
Credential-free health and alert delivery	Evaluator health was observed during t294; 60-check continuity and two-operator alert delivery were not evidenced.	Blocked / no-go.
Cold/warm reliability and latency	Five cold and 30 warm authenticated samples had zero failures; cold p95 48.559s and warm p95 5.617s. The operator accepted free-host warm p50 5.204s.	Pass for the explicitly accepted free pilot.
Authentication and two-user isolation	Missing/malformed bearer requests failed; exact-origin CORS and disposable two-owner CRUD/isolation passed.	Pass.
Encrypted export and accepted restore	Direct and pooler database connections were unreachable; no portable export, fresh restore, RPO, or RTO evidence exists.	Blocked / no-go.
Spend budget, alerts, and cap/kill behavior	No paid evaluator resource exists, but alert delivery and kill behavior were not fully rehearsed.	Blocked / no-go.
Account-data deletion	Deferred to t298's disposable-participant deletion and seven-day backup-expiry rehearsal.	Pending / no-go.
Rollback and local fallback	Browser remote entry points were disabled in version control and local tests pass; provider ingress shutdown, CDN propagation, and the complete timing envelope were not rehearsed.	Partial / no-go.

Conclusions and metrics are in research/findings/private-pilot-preflight-t295.md; see detail page for preserved tables/metrics.

Conclusions

[reconstructed — uncertain] Outcome inferred from status done and task note.

Problems / follow-ups

See source report or PR discussion for follow-ups. No unsupported follow-ups fabricated.