docs(noema): converge #668 cancellation-liveness authority

[seonghobae]

Purpose

Converge protected Noema #668 into the canonical product/technical gap and release history without promoting source integration to immutable release, deployment, performance, or foreign-owner authority.

RED → repair

Test-only exact 06cd9f543809acb6578420eb129070358e76e1f0 required protected feature exact efaaebae161a71b1274f5aa0f26e27376a3edb3a, the external OIDC/GitHub 65,536-byte cancellation-liveness invariant, explicit release separation, CHANGELOG traceability, and executable source semantics. Hosted CI 34684831045 recorded the expected documentation RED: 1 failed / 4729 passed.

Exact 6e5dc3117d35c4131f55ac32f23260e61f9c597f added the protected merge identity main@b18e74a5278409b5c413b711cfff94a0381058fc, source-only liveness evidence, explicit authority/release limits, and the Unreleased entry.

Diff review then found the #668 foreign-authority sentence in the Cloudflare recovery paragraph rather than the bounded-reader lifecycle section. Test-only exact 5ff44cfc6683d419fb490910addc77fe4f714c50 bound that invariant to the lifecycle section and reproduced assertion:false against its exact tree. Exact 082927e4100f3353f7065b77b2527ed00832e840 moves the sentence to the canonical section; direct exact-tree predicates now report feature identity, liveness, release separation, and scoped foreign-authority boundary true, with no misplaced pre-lifecycle copy.

Base→head is behind 0. The diff is limited to CHANGELOG.md, docs/product-technical-gap-baseline.md, and one executable authority test; no runtime, dependency, provider/model, release, or foreign owner boundary changed.

Exact-head gates

Current exact-head workflows are pending and are not treated as passing:

• ci 34685115901
• reviewer-ci 34685115971
• Security Scan 34685115953
• patch-validator-image 34685115908

Fresh exact-head review and unresolved-thread state remain merge authority.

[coderabbitai]

Warning

Review limit reached

Next included review available in 10 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: d4ed2b5c-49bb-497b-b8f1-8991533c6d2e

📥 Commits

Reviewing files that changed from the base of the PR and between b18e74a and 082927e.

📒 Files selected for processing (3)

• CHANGELOG.md
• docs/product-technical-gap-baseline.md
• test/external-json-cancellation-authority.test.ts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Exact-head manual review on 082927e4100f3353f7065b77b2527ed00832e840: no actionable finding in the three-file documentation-authority patch. The CHANGELOG entry matches protected #668 semantics; the product-gap baseline keeps source integration separate from immutable release/deployment/p95 and keeps OIDC/GitHub/provider/outbound/quarantine/foreign-domain authority outside Noema; the executable test binds the protected feature exact and scopes the foreign-authority sentence to the bounded-reader lifecycle section. This is COMMENT-only review, not self-approval. Merge still requires the same exact head, fresh live base, terminal required checks, and zero unresolved threads.