# Commercial Pilot Directive — Execution Status

**Product:** `1.0.0-pilot` (`controlled_validation_candidate`)  
**Schema floor:** 287  
**Updated:** 2026-07-19  

Honest claim: GDP-oriented wholesale ops + QMS **support** system. Not MHRA-approved. Not a compliance certificate.

## Phase 1 gate

| ID | Item | Status |
|----|------|--------|
| P1.0 | Release identity | Done — VERSION.txt `1.0.0-pilot` |
| P1.1 | Extended RBAC | Done (prior) |
| P1.2 | E-sign TX bind | Done (prior) |
| P1.3 | Universal stock ledger | Done (prior) |
| P1.4 | Dispatch dup-batch | Done (prior) |
| P1.5 | Evidence ACL fail-closed | Done — FileController + EvidenceService::authorizePathDownload/authorizeById |
| P1.6 | Evidence versioning / no unlink | Done — regulated `@unlink` removed; UploadHelper::deleteIfLocal retains |
| P1.7 | Fail-fast installer | Done — InstallController idempotent-only skip |
| P1.8 | Signed package / VERSION | Done — VERSION + SystemHealth floor 287 + releaseIdentity check; package scripts exist |
| P1.9 | Backup DB + evidence | Done — `backup_evidence.sh`, `backup_full.sh`, prove_restore EVIDENCE_CHECK |
| P1.10 | Delegation e-sign + MFA | Done — AuthorityDelegationService + Profile UI |
| P1.11 | Trade Gate conditions / no DDL | Done — evaluatePartnerConditions; no CREATE TABLE |
| P1.12 | Concurrency suite | Done — phase16 serial overdraw + trade conditions |

## Phase 2

| Item | Status |
|------|--------|
| Organisation config UI | Done — `/organisation-config` |
| De-hardcode brand defaults | Partial — config/MFA/SOPs/GoodsReceiving; some historical AARJAY strings remain in seeds/views |
| Onboarding wizard | Done — `/onboarding` checklist |
| Demo mode | Done — `app.env=demo` / `demo_mode` banner |
| Module lifecycle | Done — FeatureFlags::moduleLifecycle() |
| Role dashboards | Partial — existing RP/Inspector portals; generic dashboard retained |

## Phase 3

| Item | Status |
|------|--------|
| Hosted deployment / update / export / support docs | Done under `docs/` |
| Engineering Standard | Done — stub operational standard |
| Legal pack | Stub templates only — `docs/LEGAL_PACK_STUBS.md` (not lawyer advice) |
| Validation pack | Templates remain under `docs/validation/` — execute IQ/OQ/PQ in customer env |

## Tests to run

```bash
php scripts/run_migrations.php
php scripts/tests/phase11_extended_rbac_test.php
php scripts/tests/phase12_esign_bind_test.php
php scripts/tests/phase13_universal_ledger_test.php
php scripts/tests/phase14_dispatch_dup_batch_test.php
php scripts/tests/phase15_evidence_acl_test.php
php scripts/tests/phase16_trade_concurrency_test.php
```
