protocol

ci → green (offline Rust and CLI gates plus live SpiceDB, Keto, OIDC, and Jaeger suites)

Closed: PROTO-3

Live CI exposed and fixed SpiceDB subject-set wire encoding, Keto SubjectSet compiler output, and backend-neutral wildcard behavior. Stateful backend cases are isolated and Socket Firewall dependency bootstrap is retried without bypassing it.

sdk

ci → green (tokenless reusable-workflow caller plus language-local gates)

SDK adopted the shared private CI-mesh contract. No additional SDK gap is claimed closed by this coordination work.

cloud

ci → green (tokenless reusable-workflow caller plus backend/API gates)

Cloud adopted the shared CI-mesh contract on its backend master. Web migration remains owned by the concurrent Frontend SDK Federation.

market

ci → green (tokenless reusable-workflow caller with vendored Frauthy SDK artifact)

Market's single-repository CI no longer depends on a sibling checkout. Web migration remains owned by the concurrent Frontend SDK Federation.

admin

ci → green (tokenless reusable-workflow caller plus client and TUI gates)

The WebSocket LSP client contract and MemAdminClient mock landed. ADM-3 remains open because Monaco integration, the server bridge, preview/apply, and permission enforcement are UI-owned and incomplete.

infrastructure

ci → green (tokenless reusable-workflow caller plus Terraform and image gates)

Infrastructure adopted the shared private CI-mesh contract; no deployment target or human-gated infrastructure gap is claimed closed.

devops

ci → green (shared private reusable workflow, manual orchestration fallback, and token-aware dispatch)

Seven approved backend repositories call the shared tokenless contract. DEVOPS-1, DEVOPS-5, and DEVOPS-7 remain open until deferred Site/Brand/Research adoption, a dispatch token, and real coverage aggregation/enforcement are complete.

sandbox

ci → green (tokenless reusable-workflow caller plus offline integration gates)

Sandbox adopted the shared CI-mesh contract without changing federation-owned UI assets.

research

This v5 ledger update records only evidence-backed closure. Research UI and Brand adoption remain owned by the concurrent Frontend SDK Federation.

Program-wide

Wave 2 followed root/specs/08-CONCURRENT-PROGRAM-HANDOFF.md. Brand, Site, product packages/ui, Cloud/Market web migration, Admin editor composition, DevOps Portal, Research UI, and Sandbox UI were intentionally untouched.

GitHub Packages publication remains blocked on a registry-compatible PAT in the concurrent federation session; no package publication is claimed here.