feat(lab): CL-09 passive production evidence

devlog/_plan/260807_compatibility_lab/000_master_plan.md

@@ -263,19 +263,23 @@ request path.
 
 ## Programme phases
 
-Only CL-00 is authorized by this document at present.
+Programme authorization is tracked below. CL-09 contract drafting is authorized by merged CL-08; CL-09 runtime implementation remains gated on acceptance of the CL-09 contract.
 
 | Phase | Purpose | Authorization |
 |---|---|---|
-| CL-00 | Architecture authority, contracts, scenario catalogue, incident corpus | This PR |
-| CL-01 | Deterministic protocol-conformance runner and fixtures | Not started; requires CL-00 to be accepted |
-| CL-02 | Immutable JSONL ledger, artifacts and SQLite projection | Not started |
-| CL-03 | Bounded live-route probes | Not started |
-| CL-04 | Lab CLI and management read surfaces | Not started |
-| CL-05 | Compatibility Matrix UI | Not started |
-| CL-06 | Existing Routing Profile compatibility controls and Router Intelligence consumption | **ACCEPTED/CLOSED** — merged #1394 at `b66e33ce7207d91014644d99317e456c992a3418` |
-| CL-07 | Agent Fabric task-effectiveness ingestion | **ACCEPTED/CLOSED** — merged #1438 at `02e62fc8c7354c544ef71f8bb3db5ebba42cb600` |
-| CL-08 | Shadow/automatic/public evidence workflows | Not started |
+| CL-00 | Architecture authority, contracts, scenario catalogue, incident corpus | **ACCEPTED/CLOSED** - merged #1286 |
+| CL-01 | Deterministic protocol-conformance runner and fixtures | **ACCEPTED/CLOSED** - merged #1320 |
+| CL-02 | Immutable JSONL ledger, artifacts and SQLite projection | **ACCEPTED/CLOSED** - merged #1333 plus hardening/closure |
+| CL-03 | Bounded live-route probes | **ACCEPTED/CLOSED** - merged #1352 |
+| CL-04 | Lab CLI and management read surfaces | **MERGED** - #1378 |
+| CL-05 | Compatibility Matrix UI | **MERGED** - #1384 |
+| CL-06 | Existing Routing Profile compatibility controls and Router Intelligence consumption | **ACCEPTED/CLOSED** - merged #1394 at `b66e33ce7207d91014644d99317e456c992a3418` |
+| CL-07 | Agent Fabric task-effectiveness ingestion | **ACCEPTED/CLOSED** - merged #1438 at `02e62fc8c7354c544ef71f8bb3db5ebba42cb600` |
+| CL-08 | Bounded automatic evidence refresh/orchestration | **ACCEPTED/CLOSED** - merged #1447 at `3b8f9487676fe258d76295e49e7db75aca26a4cb` |
+| CL-09 | Passive production-evidence correlation with zero extra traffic and no routing feedback | **CONTRACT DRAFT** - #1489; implementation not authorized |
+| CL-10 | Public export/publishing/community evidence | Not started; separate privacy/trust boundary |
+
+The original CL-00 planning bucket combined shadow, automatic, and public evidence workflows. Accepted later plans split that bucket deliberately: CL-08 owns bounded automation, CL-09 defines passive production evidence, and public publishing remains separate CL-10 work.
 
 Phase numbering after CL-01 is programme planning, not implementation
 authorization. A later accepted plan may split a phase while preserving these

devlog/_plan/260807_compatibility_lab/001_pr_stack_status.md

@@ -27,6 +27,9 @@ independent review, blockers, and whether a later phase is authorized.
 | CL-05 | `feat/cl-05-compatibility-matrix-ui` | `d517161aeaa3a974ad3c0360ff0c97b03b4c4520` | `2a159b8b7` (Models tab placement) | [#1384](https://github.com/lidge-jun/opencodex/pull/1384) | MERGED TO `dev` at `1072b9c39c48a4982229131613ac300560740742` |
 | CL-06 | `feat/cl-06-routing-profile-compatibility` | `1072b9c39c48a4982229131613ac300560740742` | `b96eae83f2a6d1654472aeeef84799070743aeb8` | [#1394](https://github.com/lidge-jun/opencodex/pull/1394) | MERGED TO `dev` at `b66e33ce7207d91014644d99317e456c992a3418`; ACCEPTED/CLOSED |
 | CL-07 | `feat/cl-07-task-effectiveness-producer` | `b66e33ce7207d91014644d99317e456c992a3418` | `0efe2c69514d3baefee686383fe740e4ecb37d83` | [#1438](https://github.com/lidge-jun/opencodex/pull/1438) | MERGED TO `dev` at `02e62fc8c7354c544ef71f8bb3db5ebba42cb600`; ACCEPTED/CLOSED |
+| CL-08 | `feat/cl-08-lab-automation` | `da8ebd3135553c1d4dd85c1f258e998a5de14f28` | `bfaad5d01a975e8d48b9437bc0a0537077a04134` | [#1447](https://github.com/lidge-jun/opencodex/pull/1447) | MERGED TO `dev` at `3b8f9487676fe258d76295e49e7db75aca26a4cb`; ACCEPTED/CLOSED |
+| CL-09 | `feat/cl-09-passive-production-evidence` | `3b8f9487676fe258d76295e49e7db75aca26a4cb` | IMPLEMENTATION REVIEW CANDIDATE | [#1489](https://github.com/lidge-jun/opencodex/pull/1489) | IMPLEMENTED; independent final review and merge acceptance pending |
+
 The CL-01 starting SHA is the exact CL-00 tip recorded when CL-01 began. Its
 moving base-ref name is not a substitute for that historical SHA.
 
@@ -164,7 +167,8 @@ Claims cannot produce `PROBED`/`VERIFIED`.
 - CL-05: **MERGED** via #1384 at `1072b9c39c48a4982229131613ac300560740742`.
 - CL-06: **ACCEPTED/CLOSED** via [#1394](https://github.com/lidge-jun/opencodex/pull/1394), merged to `dev` at `b66e33ce7207d91014644d99317e456c992a3418`.
 - CL-07: **ACCEPTED/CLOSED** via [#1438](https://github.com/lidge-jun/opencodex/pull/1438), merged to `dev` at `02e62fc8c7354c544ef71f8bb3db5ebba42cb600`; accepted head `0efe2c69514d3baefee686383fe740e4ecb37d83`; plan `007_cl07_task_effectiveness.md`.
-- CL-08: **not started**.
+- CL-08: **ACCEPTED/CLOSED** via [#1447](https://github.com/lidge-jun/opencodex/pull/1447), merged to `dev` at `3b8f9487676fe258d76295e49e7db75aca26a4cb`; final source head `bfaad5d01a975e8d48b9437bc0a0537077a04134`; plan `008_cl08_automation.md`.
+- CL-09: **IMPLEMENTED / REVIEW PENDING** via [#1489](https://github.com/lidge-jun/opencodex/pull/1489); the phase started from CL-08 merge `3b8f9487676fe258d76295e49e7db75aca26a4cb`, runtime work was rebased to then-current `dev@e8db4e0365b12a314d1c08ec2cf81599efe5b2d3`, and independent final review plus merge acceptance remain pending.
 
 ## CL-06 closure log
 
@@ -179,7 +183,26 @@ Claims cannot produce `PROBED`/`VERIFIED`.
 - **Accepted / source head:** `0efe2c69514d3baefee686383fe740e4ecb37d83`
 - **Starting/base SHA:** `b66e33ce7207d91014644d99317e456c992a3418` (CL-06 merge #1394)
 - **Scope delivered:** bounded `src/lab/fabric/` task-effectiveness producer, exact-tree-diff verifier, scratch sandbox, trusted-route persistence boundary, isolated child producer with parent-owned IPC/timeouts.
-- **CL-08:** not started (explicit non-goal).
+- **CL-08:** completed and merged via #1447.
+
+## CL-08 closure log
+
+- **Merge commit on `dev`:** `3b8f9487676fe258d76295e49e7db75aca26a4cb` ([#1447](https://github.com/lidge-jun/opencodex/pull/1447))
+- **Final / source head:** `bfaad5d01a975e8d48b9437bc0a0537077a04134`
+- **Original starting/base SHA:** `da8ebd3135553c1d4dd85c1f258e998a5de14f28`; final source branch was rebased onto then-current `dev` before merge.
+- **Scope delivered:** bounded default-off Lab automation, deterministic planner/queue/recovery, budgets/cooldowns, CL-01 and trusted CL-03 dispatch, management API/CLI controls, owner-scoped server lifecycle, atomic policy/routes configuration, and adversarial regression coverage.
+- **Task-effectiveness background:** deliberately remained disabled; manual CL-07 execution unchanged.
+- **CL-09:** contract drafting authorized from exact CL-08 merge.
+
+## CL-09 start log (2026-08-11)
+
+- **Starting/base SHA:** `3b8f9487676fe258d76295e49e7db75aca26a4cb` (exact CL-08 merge #1447)
+- **Branch:** `feat/cl-09-passive-production-evidence`
+- **PR:** [#1489](https://github.com/lidge-jun/opencodex/pull/1489) (draft, contract-only at open)
+- **Plan:** `009_cl09_passive_production_evidence.md`
+- **Scope:** exact per-attempt local route-subject correlation for already-completed production traffic, bounded read-side passive signals, and additive Lab read surfaces with zero extra provider requests.
+- **Hard boundary:** V1 passive signals do not write CL-02 observations, change compatibility verdicts/freshness, affect CL-06 routing, or trigger CL-08 automation.
+- **Explicitly out of scope:** duplicated shadow requests, prompt/response capture, Shadow Call Intercept changes, direct passive-to-verdict promotion, and public publishing/CL-10.
 
 ## CL-07 start log