# Certification status and known limits

This page summarizes **what actually ran** in M9 certification jobs. It is not a roadmap.

## Certification evidence index

| Job | Focus | Result (as recorded) |
|---|---|---|
| SOL-42 | Recovery / chaos / backup drill | Deterministic suite passed (isolated service) |
| SOL-43 | Auth matrix, tenancy, secrets, egress | 198/198 routes + tenant matrix on JWT service; live Supabase RLS **BLOCKED** |
| SOL-44 | WCAG 2.2 AA + multi-instance load | Journeys + load thresholds passed; live browser/axe **BLOCKED** |
| SOL-45 | Providers + billing | Invoice fixture variance 0; live paid metering **BLOCKED** |
| SOL-46 | Independent security review (Gate K) | Package assembled; Gate K **BLOCKED** (no independent attestor) |

## Provider certification (Gateway)

Current **recorded_replay** (and OpenAI live) receipts cover:

- OpenAI (gateway)
- Anthropic (gateway)
- Vercel AI Gateway (adapter receipt)
- Ollama (local read-only only — **not** Gateway launch-ready)

**Not launch-ready:** Gemini, Exa (no Gateway launch receipt). Documentation must say setup-required / not certified rather than Live.

## Pricing and billing limits

- Billable prices come only from dated `official_provider` records in `data/gateway-model-catalog/pricing/`.
- OCR-only or undated prices **cannot** back billable cost.
- Stale prices fail closed (no silent bill).
- Authorized invoice fixture reconciles within scorecard tolerance; **live provider invoices** are not yet proven.

## Security limits (honest)

- Admin surfaces fail closed without `ETHEN_ADMIN_ALLOWLIST`.
- Cross-tenant isolation is proven on the SOL-43 certification service; **live Postgres RLS with two Auth JWTs** is not yet proven in this environment.
- Independent security review (Gate K) is **not** complete.

## Payment

**Payment collection is implemented in code but is not live-certified or production-ready.** Do not document checkout, card capture, or subscription billing as generally available features.