wave1: formally close provenance foundation production deployment

notes/trading/system-docs/wave1_provenance_closure.md

@@ -0,0 +1,173 @@
+# Wave 1 Provenance — Production Deployment Closure (FORMAL CLOSURE)
+
+**Status:** CLOSED / DEPLOYED / VERIFIED / DOCUMENTED
+**Datum:** 04.09.2026
+**Autor:** Red Queen (Rain Ocampo / Hermes)
+**Freigabe:** Christian List (Owner)
+
+---
+
+## 1. Scope
+
+Diese Mission persistiert ausschließlich die verifizierte Abschlussdokumentation des **Wave1-Provenance-Production-Deployments** in der autoritativen Git-/SoT-Historie. **KEINE Trading-/Runtime-/DB-Änderung.**
+
+Wave1 Provenance ist bereits erfolgreich produktiv deployed und unabhängig verifiziert. Diese Closure dokumentiert den finalen, verifizierten Zustand.
+
+---
+
+## 2. Deployment Chain (exakt)
+
+| Schritt | Wert |
+|---|---|
+| Backup | **1** |
+| Wave1 Migration | **1** |
+| WaveD Migration | **0** (ALREADY PRESENT / VERIFIED / SKIPPED) |
+| Production Recreate | **1** |
+| Rollback | **0** |
+| Restore | **0** |
+| Provider | **0** |
+| Backfill | **0** |
+| Git während Deployment | **0** |
+| Phase14 | **0** |
+
+---
+
+## 3. Wave1 Identity
+
+| Objekt | SHA / Wert |
+|---|---|
+| Wave1 Migration | `6983526da3ca51fd2ececffbef0ccbd66b048a3d11c228000011aaba3e1d6bc5` |
+| Candidate Image | `sha256:c70d47677c455963553280c7594d4005b3dcf1650ee99a49708997a624dee42f` |
+| Candidate Archive | `b3c72fb9ed78f0fb2e57292a90686fd9d49116953b23c976750ff4ffb8628c99` |
+| Application Manifest | `41b9032b694cdf958d7aefb06870fd181a284568447e06396c48cc915e19b06b` |
+| WaveD Historical Contract | `7aa4e2a10c98fa327e000a49f6a497efb5814c8808dba429dfebfc90c544a02b` |
+
+**Wichtig:** Die WaveD-Migration (`7aa4e2a1…`) wurde in diesem Deployment **NICHT ausgeführt**. Der WaveD-Runtime-Schema-Zustand war bereits vor dem Deployment vorhanden und wurde **PRESERVED** (nicht verändert).
+
+---
+
+## 4. Production State (final, verifiziert)
+
+| Feld | Wert |
+|---|---|
+| Container | `9eb3480e4395a549cb6e7c063cab7f812d90408bdf7101aaa7168f8f1221c7be` |
+| Image | `sha256:c70d47677c455963553280c7594d4005b3dcf1650ee99a49708997a624dee42f` |
+| running / RestartCount | `true` / `0` |
+| health / ready | `200` / `200` |
+| PostgreSQL | `16.13` |
+| database / schema | `historical` / `public` |
+
+### Final Schema Fingerprint
+
+| Tabelle | Spalten |
+|---|---|
+| historical_bar | 41 |
+| derived_bar | 35 |
+| data_ingestion_run | 29 |
+| dataset_version | 23 |
+| ingestion_provenance | PRESENT / 41 cols / 0 rows |
+
+### Canonical Fields
+
+| Feld | Typ |
+|---|---|
+| last_successful_chunk | `timestamp with time zone` (timestamptz) |
+| interrupt_reason | `text` / preserved |
+| technical_quality | `text` / nullable / default `'VALID'` |
+
+### Data Invariants
+
+| Check | Wert |
+|---|---|
+| dataset_version rows | 336 |
+| duplicate dataset_version_hash | 0 |
+| null identity | 0 |
+| FK orphans | 0 |
+| historical_bar rows | 80,680 |
+| derived_bar rows | 24,948 |
+| RUNNING ingestion | 0 |
+| Provider Calls | 0 |
+| Backfill | 0 |
+| Pilot | 0 |
+
+---
+
+## 5. Backup / Rollback
+
+| Objekt | Wert |
+|---|---|
+| Backup Path | `/opt/historical-v2/backups/pre_wave1_20260904_164812/` |
+| Full Dump SHA | `0f9c9bbc32fe24fb2fbb622b69356794ef0278c5f71032870323a7262d94b1e4` |
+| Schema Dump SHA | `71294b98483ee76cec2096505293a4a6cfd9ddf2565defdf032f365fb188861e` |
+| Compose SHA | `3c0cc9da53260b01f977d051fe3cb67ddbe29f62b3e07f5279942cb795908a52` |
+| Primary App Rollback | `sha256:21598a3597cfd53c4bc22c01cb7f7874259878ecd7608528ccd6327305ea07fc` |
+| Recovery Gold | `sha256:b93b0fe141d08d29a09861f5b4728e7816cfcf3e0c3ea36897ea826a9491eab9` |
+
+---
+
+## 6. Independent Checker Result
+
+**RED QUEEN Independent Post-Deploy Review: VERDICT A**
+
+- Wave1 Production Deployment Verified
+- Runtime healthy
+- Wave1 schema exact
+- Existing WaveD contract preserved
+- Data invariants intact
+- Backup/Restore verified
+- Primary rollback verified
+- No Provider/Backfill activity
+
+---
+
+## 7. Mutation Accounting
+
+| Mutation | Anzahl |
+|---|---|
+| Backup | 1 |
+| Wave1 Migration | 1 |
+| WaveD Migration | 0 |
+| Production Recreate | 1 |
+| Rollback | 0 |
+| Restore | 0 |
+| Provider | 0 |
+| Backfill | 0 |
+| Git während Deployment | 0 |
+| Phase14 | 0 |
+
+---
+
+## 8. Open Contract Debts (NICHT geschlossen)
+
+Diese Debts bleiben **OPEN** und sichtbar. Sie invalidieren den aktuellen Production-Zustand **NICHT**:
+
+- **A)** Historical V2 DDL provenance missing
+- **B)** `interrupt_reason` origin unknown
+- **C)** Historical WaveD migration artifact definiert `last_successful_chunk` als `text`, während der Owner-Canonical-Current-Production-Contract `timestamptz` ist.
+
+---
+
+## 9. Explicitly Excluded Work (NICHT autorisiert)
+
+Diese Closure autorisiert oder löst NICHT:
+
+- **kein Provider Pilot**
+- **kein Historical Backfill**
+- **kein Phase14**
+- **keine weitere Runtime-Mutation**
+- **kein weiterer Git-Commit / Git-Push**
+
+Der nächste Workstream erfordert separate Owner-Autorisierung.
+
+---
+
+## 10. Final Closure Statement
+
+> **WAVE1 PROVENANCE CLOSED — DEPLOYED — VERIFIED — DOCUMENTED — FAST-FORWARD PUSHED — REMOTE SOT PERSISTED — RUNTIME UNCHANGED**
+
+Wave1 Provenance ist formal geschlossen. Die autoritative Closure-Evidence wurde in Red-Queen-/Rain-Ocampo-Ausführungskontext erzeugt und verifiziert:
+
+- `/opt/data/rq_wave1_postdeploy_production_review_resume/` (Independent Post-Deploy Review, Verdict A)
+- `/opt/data/rq_wave1_closure_git_authority_recovery/` (Git-Authority-Recovery / diese Closure)
+
+**Git-Baseline vor dieser Closure:** `36916a073d57d9d236c87a23892ad072e9bedd65` (`phase13.6: formally close hardening repair`).