Propreneur sidecar release-candidate manifest (template)¶

Programme: keprix-propreneur-aiva-three-way (Prompt 10 RC template) Contract version: 1.0.0 Fill before any Contabo or production cutover.

Identity¶

Git pins (no dirty worktree)¶

Never rsync a dirty workstation tree. Never ship .env, credentials, logs, caches, databases, uploads, or dependency directories.

Topology¶

Configuration keys (names only)¶

• PROPRENEUR_PRODUCT_API_URL
• KEPRIX_PRODUCT_SIDECAR_TOKEN_SECRET
• Bootstrap shared token alias (document product name; value in vault)
• Soft-wall / engine selection keys as used by Propreneur bridge
• Compatibility aliases for legacy CARINA_* names and removal path

Migrations¶

List additive Propreneur migrations included in this RC:

1. 2.

Routes and middleware¶

List sidecar endpoints and required middleware (auth, CSRF, rate limit):

1. 2.

Build and test commands¶

# Keprix
cd <workspace-root>/keprix
python -m pytest tests/product_sidecar/test_propreneur_pack.py tests/product_sidecar/test_sidecar_foundation.py -q --tb=short

# Propreneur (fill exact filters used for the RC)
cd <workspace-root>/propreneur
php artisan test --filter=Keprix

Expected smoke¶

• [ ] Keprix /v1/products/propreneur/health 200
• [ ] /v1/products/propreneur/readiness reports operation counts (connectivity != CRUD readiness)
• [ ] Capabilities list includes property/contact/tenancy/deal and Soft Wall gated writes
• [ ] Live/approval_required nodes match matrix; forbidden stay intentionally_forbidden
• [ ] Health capability_honesty is ok or partial_fail_closed (not false live)
• [ ] Operator UI /settings/sidecars/propreneur loads readiness
• [ ] Provision dry_run plans without mutation
• [ ] Cross-product compose denied
• [ ] Disabling Keprix restores native Propreneur engine path
• [ ] Contabo: https://carinaai.uk/ returns 200 after deploy

Honesty note (2026-08-09, prompts 636-643)¶

Engine connectivity and Aiva v1 domain CRUD (live reads + Soft Wall writes) are built. Safe full CRUD is domain API access under Soft Wall, not raw DB, hard delete, or proxy. Sign RC only when readiness, matrix, and evidence agree.

Gap report (history): docs/architecture/propreneur-crud-remediation-gap-report.md Evidence: docs/architecture/propreneur-e2e-evidence.v1.json

Classification report (attach)¶

Remaining owner configuration¶

-¶

Sign-off¶

Extracted by ; reviewed by ; date ___