Beta
Certification status and known limits
What M9 certification proved, what remains BLOCKED, and the operational limits operators must assume.
This page summarizes what actually ran in M9 certification jobs. It is not a roadmap.
Certification evidence index
| Job | Focus | Result (as recorded) |
|---|---|---|
| SOL-42 | Recovery / chaos / backup drill | Deterministic suite passed (isolated service) |
| SOL-43 | Auth matrix, tenancy, secrets, egress | 198/198 routes + tenant matrix on JWT service; live Supabase RLS BLOCKED |
| SOL-44 | WCAG 2.2 AA + multi-instance load | Journeys + load thresholds passed; live browser/axe BLOCKED |
| SOL-45 | Providers + billing | Invoice fixture variance 0; live paid metering BLOCKED |
| SOL-46 | Independent security review (Gate K) | Package assembled; Gate K BLOCKED (no independent attestor) |
Provider certification (Gateway)
Current recorded_replay (and OpenAI live) receipts cover:
- OpenAI (gateway)
- Anthropic (gateway)
- Vercel AI Gateway (adapter receipt)
- Ollama (local read-only only — not Gateway launch-ready)
Not launch-ready: Gemini, Exa (no Gateway launch receipt). Documentation must say setup-required / not certified rather than Live.
Pricing and billing limits
- Billable prices come only from dated
official_providerrecords indata/gateway-model-catalog/pricing/. - OCR-only or undated prices cannot back billable cost.
- Stale prices fail closed (no silent bill).
- Authorized invoice fixture reconciles within scorecard tolerance; live provider invoices are not yet proven.
Security limits (honest)
- Admin surfaces fail closed without
ETHEN_ADMIN_ALLOWLIST. - Cross-tenant isolation is proven on the SOL-43 certification service; live Postgres RLS with two Auth JWTs is not yet proven in this environment.
- Independent security review (Gate K) is not complete.
Payment
Payment collection is implemented in code but is not live-certified or production-ready. Do not document checkout, card capture, or subscription billing as generally available features.