admin

The non-UI `/ws/lsp` bridge now owns one `frauthy-lsp` process per connection, incrementally translates bounded Content-Length frames, enforces a browser-origin allowlist, and propagates shutdown in both directions. A real protocol binary completed initialize and returned entity/backend completions. ADM-3 remains open for the concurrently owned Monaco and schema-page composition.

cloud

Closed: CLOUD-8, CLOUD-14

Tenant eject now produces owner-gated asynchronous archives with source/compiled schema, store tuples, all retained OTLP traces, and recursively redacted configuration. Schema POST/GET compiles through the real frauthyc boundary, applies through the provisioned store gateway, persists under forced tenant RLS, and tracks lifecycle failures. Minute metrics, alert CRUD/history, threshold evaluation, and explicit route scopes are implemented; CLOUD-6 remains open for the unattended 60-second evaluator and live migration evidence.

infrastructure

Closed: INFRA-9

The local Keto metrics contract is verified at the actual v0.12 endpoint `/metrics/prometheus` on registered port 41006, with 47 Prometheus metric families observed. The lifecycle verifier starts no unrelated services and the exact test container/network were removed afterward.

market

Closed: MKT-1, MKT-2

Production authentication now fails closed without a configured OIDC issuer and validates signed RS256 JWTs through discovery/JWKS and the Frauthy TypeScript SDK; valid, tampered, and expired paths have loopback issuer evidence. Every route and domain service now uses one awaitable repository contract, while PostgreSQL runs an idempotent compatibility migration and persists opaque application IDs across process reconstruction. Concurrently owned web paths were untouched.