Sync no-secret credential handoff f1d71c2

docs/assets/devpost-submission-preview.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.devpost_submission_preview.v1",
-  "created_at": "2026-06-29T14:05:09Z",
+  "created_at": "2026-06-30T04:37:54Z",
   "mode": "pre_live_preview_ready",
   "ok": true,
   "safe_to_share": true,
@@ -68,7 +68,7 @@
       {
         "id": "credential_handoff",
         "label": "Live credential handoff is ready",
-        "detail": "Credential handoff mode is missing_live_env; missing ids: storage_backend_mode, generation_backend_mode, b2_endpoint, b2_bucket, b2_key_id, b2_application_key, genblaze_api_key, genblaze_image_model.",
+        "detail": "Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key.",
         "evidence": "docs/assets/live-credential-handoff.json"
       },
       {

docs/assets/devpost-submission-preview.md

@@ -59,7 +59,7 @@ ProofFrame includes a Genblaze/GMICloud provider adapter built around the offici
 - `devpost_submission_checklist`: Final Devpost web submission checklist is ready - Devpost submission checklist mode is pre_submit_blocked; safe_to_submit is False.
 - `b2_live_proof`: live Backblaze B2 proof - T020 is doing; B2 evidence status is missing; final evidence status is missing.
 - `genblaze_live_proof`: live Genblaze proof - T021 is doing; final evidence status is missing.
-- `credential_handoff`: Live credential handoff is ready - Credential handoff mode is missing_live_env; missing ids: storage_backend_mode, generation_backend_mode, b2_endpoint, b2_bucket, b2_key_id, b2_application_key, genblaze_api_key, genblaze_image_model.
+- `credential_handoff`: Live credential handoff is ready - Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key.
 - `public_video`: final public video - Storyboard mode is mock_storyboard_ready; public video ready is False.
 - `public_video_check`: public video URL check - Public video check mode is pending_video_url; safe_to_submit is False.
 - `final_recording`: Final recording gate is ready - Demo readiness mode is pre_live_mock_ready; final recording ready is False.

docs/assets/final-closeout-status.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.final_closeout_status.v1",
-  "created_at": "2026-06-30T04:04:26Z",
+  "created_at": "2026-06-30T04:37:42Z",
   "ok": true,
   "mode": "waiting_for_credentials",
   "phase": "credential_entry",
@@ -34,6 +34,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 0
     },
     "credential_handoff": {
@@ -56,6 +57,11 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": [
+        "b2_key_id",
+        "b2_application_key",
+        "genblaze_api_key"
+      ],
       "findings_count": 0
     },
     "b2_evidence": {
@@ -98,6 +104,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 0
     },
     "video_publish_kit": {
@@ -120,6 +127,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 0
     },
     "devpost_checklist": {
@@ -142,6 +150,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 0
     },
     "devpost_preview": {
@@ -164,6 +173,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 0
     },
     "devpost_receipt": {
@@ -186,6 +196,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 3
     },
     "secret_scan": {
@@ -208,6 +219,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 0
     },
     "submission_audit": {
@@ -230,6 +242,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 17
     },
     "submission_bundle": {
@@ -252,6 +265,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": [],
+      "missing_ids": null,
       "findings_count": 0
     },
     "public_space_sync": {
@@ -274,6 +288,7 @@
       "public_video_ready": null,
       "project_url": null,
       "missing_artifacts": null,
+      "missing_ids": null,
       "findings_count": 0
     }
   },
@@ -296,7 +311,7 @@
       "id": "credential_handoff",
       "label": "Live credential handoff is ready",
       "ok": false,
-      "detail": "Credential handoff mode is missing_live_env.",
+      "detail": "Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key.",
       "evidence": "docs/assets/live-credential-handoff.json"
     },
     {

docs/assets/final-closeout-status.md

@@ -14,7 +14,7 @@ This closeout report stores only task statuses, report metadata, public URLs, an
 | --- | --- | --- | --- |
 | OK | `report_inventory` | All standing control reports are present; live evidence files may be absent before credentials. | `docs/assets/*.json` |
 | OK | `ci_and_public_demo` | Public Space sync mode is public_space_synced; ok is True. | `docs/assets/public-space-sync-report.json` |
-| BLOCKED | `credential_handoff` | Credential handoff mode is missing_live_env. | `docs/assets/live-credential-handoff.json` |
+| BLOCKED | `credential_handoff` | Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key. | `docs/assets/live-credential-handoff.json` |
 | BLOCKED | `b2_live_proof` | T020 is doing; evidence present is False. | `docs/assets/b2-live-proof-evidence.json` |
 | BLOCKED | `genblaze_live_proof` | T021 is doing; final evidence present is False. | `docs/assets/final-live-proof-evidence.json` |
 | BLOCKED | `public_video` | Public video mode is pending_video_url; video kit final_video_ready is False. | `docs/assets/public-video-check.json` |

docs/assets/final-launch-plan.json

@@ -1,15 +1,15 @@
 {
   "schema": "proofframe.final_launch_plan.v1",
-  "created_at": "2026-06-29T12:24:34Z",
+  "created_at": "2026-06-30T04:37:54Z",
   "ok": false,
-  "mode": "blocked_at_credential_entry",
+  "mode": "ready_for_credential_entry",
   "repo_root": "/Users/junhaocheng/working-dir/ai-competitions/backblaze-proofframe",
   "current_phase": "credential_entry",
   "summary": {
     "total": 6,
     "done": 0,
-    "ready": 0,
-    "blocked": 6
+    "ready": 1,
+    "blocked": 5
   },
   "task_statuses": {
     "T020": "doing",
@@ -23,8 +23,8 @@
     {
       "id": "credential_entry",
       "title": "Enter final credentials locally",
-      "status": "blocked",
-      "detail": "Credential handoff is missing unexpected setup values; regenerate .env.final.local prefill.",
+      "status": "ready",
+      "detail": "Only expected secret ids are missing; operator can enter them locally.",
       "command": "python scripts/final_env_wizard.py --output .env.final.local --missing-only --force",
       "expected_artifacts": [
         "docs/assets/b2-key-scope-checklist.md reviewed before key creation",
@@ -124,7 +124,7 @@
     }
   ],
   "next_command": "python scripts/final_env_wizard.py --output .env.final.local --missing-only --force",
-  "next_detail": "Credential handoff is missing unexpected setup values; regenerate .env.final.local prefill.",
+  "next_detail": "Only expected secret ids are missing; operator can enter them locally.",
   "safety_policy": {
     "no_secret_values_in_report": true,
     "never_commit": [

docs/assets/final-launch-plan.md

@@ -1,22 +1,22 @@
 # ProofFrame Final Launch Plan
 
-Mode: `blocked_at_credential_entry`
+Mode: `ready_for_credential_entry`
 Current phase: `credential_entry`
 Complete: `false`
-Progress: `0 / 6` done; `0` ready, `6` blocked.
+Progress: `0 / 6` done; `1` ready, `5` blocked.
 
 ## Next Command
 
 ```bash
 python scripts/final_env_wizard.py --output .env.final.local --missing-only --force
 ```
-Credential handoff is missing unexpected setup values; regenerate .env.final.local prefill.
+Only expected secret ids are missing; operator can enter them locally.
 
 ## Phases
 
 ### credential_entry - Enter final credentials locally
-- Status: `blocked`
-- Detail: Credential handoff is missing unexpected setup values; regenerate .env.final.local prefill.
+- Status: `ready`
+- Detail: Only expected secret ids are missing; operator can enter them locally.
 - Command:
 ```bash
 python scripts/final_env_wizard.py --output .env.final.local --missing-only --force

docs/assets/final-operator-brief.json

@@ -1,7 +1,7 @@
 {
   "schema": "proofframe.final_operator_brief.v1",
-  "mode": "needs_operator_setup",
-  "ready_for_secret_entry": false,
+  "mode": "credential_entry_ready",
+  "ready_for_secret_entry": true,
   "safe_to_submit": false,
   "task_statuses": {
     "T020": "doing",
@@ -30,27 +30,22 @@
     "present": true,
     "mode": "missing_live_env",
     "ready": false,
-    "source": "process environment",
+    "source": ".env.final.local",
     "missing_ids": [
-      "storage_backend_mode",
-      "generation_backend_mode",
-      "b2_endpoint",
-      "b2_bucket",
       "b2_key_id",
       "b2_application_key",
-      "genblaze_api_key",
-      "genblaze_image_model"
+      "genblaze_api_key"
     ],
-    "missing_only_expected_secrets": false,
+    "missing_only_expected_secrets": true,
     "required_presence": {
-      "storage_backend_mode": false,
-      "generation_backend_mode": false,
-      "b2_endpoint": false,
-      "b2_bucket": false,
+      "storage_backend_mode": true,
+      "generation_backend_mode": true,
+      "b2_endpoint": true,
+      "b2_bucket": true,
       "b2_key_id": false,
       "b2_application_key": false,
       "genblaze_api_key": false,
-      "genblaze_image_model": false
+      "genblaze_image_model": true
     }
   },
   "reports": {

docs/assets/final-operator-brief.md

@@ -1,7 +1,7 @@
 # ProofFrame Final Operator Brief
 
-Mode: `needs_operator_setup`
-Ready for secret entry: `false`
+Mode: `credential_entry_ready`
+Ready for secret entry: `true`
 Safe to submit: `false`
 
 ## Current Blockers
@@ -15,10 +15,10 @@ Safe to submit: `false`
 
 ## Credential Handoff
 
-- Source: `process environment`
+- Source: `.env.final.local`
 - Mode: `missing_live_env`
-- Missing ids: `storage_backend_mode, generation_backend_mode, b2_endpoint, b2_bucket, b2_key_id, b2_application_key, genblaze_api_key, genblaze_image_model`
-- Missing only expected secrets: `false`
+- Missing ids: `b2_key_id, b2_application_key, genblaze_api_key`
+- Missing only expected secrets: `true`
 
 ## B2 Setup
 

docs/assets/final-submission-control.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.final_submission_control.v1",
-  "created_at": "2026-06-29T14:05:09Z",
+  "created_at": "2026-06-30T04:35:43Z",
   "ok": true,
   "control_health_ok": true,
   "mode": "pre_live_control",
@@ -175,7 +175,7 @@
       "path": "docs/assets/final-launch-plan.json",
       "schema_ok": true,
       "schema": "proofframe.final_launch_plan.v1",
-      "mode": "blocked_at_credential_entry",
+      "mode": "ready_for_credential_entry",
       "ok": false,
       "score": null,
       "max_score": null,
@@ -188,7 +188,7 @@
       "public_video_ready": null,
       "current_phase": "credential_entry",
       "next_command": "python scripts/final_env_wizard.py --output .env.final.local --missing-only --force",
-      "next_detail": "Credential handoff is missing unexpected setup values; regenerate .env.final.local prefill.",
+      "next_detail": "Only expected secret ids are missing; operator can enter them locally.",
       "bus_status": null,
       "active_role_cwd_ok": null
     },
@@ -340,14 +340,9 @@
       "mode": "missing_live_env",
       "ready": false,
       "missing_ids": [
-        "storage_backend_mode",
-        "generation_backend_mode",
-        "b2_endpoint",
-        "b2_bucket",
         "b2_key_id",
         "b2_application_key",
-        "genblaze_api_key",
-        "genblaze_image_model"
+        "genblaze_api_key"
       ],
       "secret_policy": "Report records only variable names and presence; credential values are never printed."
     },
@@ -443,7 +438,7 @@
       "id": "final_launch_plan",
       "label": "Final launch plan exposes the current operator step",
       "ok": true,
-      "detail": "Launch plan mode is blocked_at_credential_entry; current phase is credential_entry; next command is python scripts/final_env_wizard.py --output .env.final.local --missing-only --force.",
+      "detail": "Launch plan mode is ready_for_credential_entry; current phase is credential_entry; next command is python scripts/final_env_wizard.py --output .env.final.local --missing-only --force.",
       "evidence": "docs/assets/final-launch-plan.json"
     },
     {
@@ -478,7 +473,7 @@
       "id": "credential_handoff",
       "label": "Live credential handoff is ready",
       "ok": false,
-      "detail": "Credential handoff mode is missing_live_env; missing ids: storage_backend_mode, generation_backend_mode, b2_endpoint, b2_bucket, b2_key_id, b2_application_key, genblaze_api_key, genblaze_image_model.",
+      "detail": "Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key.",
       "evidence": "docs/assets/live-credential-handoff.json"
     },
     {
@@ -557,7 +552,7 @@
       "id": "credential_handoff",
       "label": "Live credential handoff is ready",
       "ok": false,
-      "detail": "Credential handoff mode is missing_live_env; missing ids: storage_backend_mode, generation_backend_mode, b2_endpoint, b2_bucket, b2_key_id, b2_application_key, genblaze_api_key, genblaze_image_model.",
+      "detail": "Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key.",
       "evidence": "docs/assets/live-credential-handoff.json"
     },
     {
@@ -643,10 +638,10 @@
     "python scripts/submission_bundle.py --strict-final"
   ],
   "launch_plan": {
-    "mode": "blocked_at_credential_entry",
+    "mode": "ready_for_credential_entry",
     "current_phase": "credential_entry",
     "next_command": "python scripts/final_env_wizard.py --output .env.final.local --missing-only --force",
-    "next_detail": "Credential handoff is missing unexpected setup values; regenerate .env.final.local prefill.",
+    "next_detail": "Only expected secret ids are missing; operator can enter them locally.",
     "path": "docs/assets/final-launch-plan.json"
   },
   "claim_boundary": "Public demo remains local/mock and pre_live_safe until final live B2 plus Genblaze proof is captured."

docs/assets/final-submission-control.md

@@ -3,7 +3,7 @@
 Mode: `pre_live_control`
 Control health OK: `true`
 Safe to submit: `false`
-Created: `2026-06-29T14:05:09Z`
+Created: `2026-06-30T04:35:43Z`
 Public demo: https://adjcjh-backblaze-proofframe.hf.space/?judge=1
 Repository: https://github.com/adjcjh777/backblaze-proofframe
 
@@ -26,10 +26,10 @@ Repository: https://github.com/adjcjh777/backblaze-proofframe
 
 ## Launch Plan
 
-- Mode: `blocked_at_credential_entry`
+- Mode: `ready_for_credential_entry`
 - Current phase: `credential_entry`
 - Next command: `python scripts/final_env_wizard.py --output .env.final.local --missing-only --force`
-- Detail: Credential handoff is missing unexpected setup values; regenerate .env.final.local prefill.
+- Detail: Only expected secret ids are missing; operator can enter them locally.
 - Source: `docs/assets/final-launch-plan.json`
 
 ## Warnings
@@ -46,12 +46,12 @@ Repository: https://github.com/adjcjh777/backblaze-proofframe
 | OK | Official Devpost event snapshot is fresh | Snapshot checked at 2026-06-29T11:21:01Z; submission open is True; age days is 0. | `docs/assets/devpost-event-snapshot.json` |
 | OK | Agent handoff metadata points at the current repo | Agent handoff mode is handoff_ready; ok is True; bus status is skipped; active role cwd ok is None. | `docs/assets/agent-handoff-report.json` |
 | OK | Public Space is synced to the current judge-facing demo | Public Space sync mode is public_space_synced; ok is True. | `docs/assets/public-space-sync-report.json` |
-| OK | Final launch plan exposes the current operator step | Launch plan mode is blocked_at_credential_entry; current phase is credential_entry; next command is python scripts/final_env_wizard.py --output .env.final.local --missing-only --force. | `docs/assets/final-launch-plan.json` |
+| OK | Final launch plan exposes the current operator step | Launch plan mode is ready_for_credential_entry; current phase is credential_entry; next command is python scripts/final_env_wizard.py --output .env.final.local --missing-only --force. | `docs/assets/final-launch-plan.json` |
 | OK | Recording assets are ready | Recording assets mode is mock_recording_ready; public mock verified is False. | `docs/assets/recording-assets.json` |
 | OK | Control input reports match expected schemas | All input report schemas are current. | `docs/assets/*.json readiness reports` |
 | PENDING | Backblaze B2 live proof captured | T020 is doing; B2 evidence status is missing; final evidence status is missing. | `tasks.json, docs/assets/b2-live-proof-evidence.json, and docs/assets/final-live-proof-evidence.json` |
 | PENDING | Genblaze live proof captured | T021 is doing; final evidence status is missing. | `tasks.json and docs/assets/final-live-proof-evidence.json` |
-| PENDING | Live credential handoff is ready | Credential handoff mode is missing_live_env; missing ids: storage_backend_mode, generation_backend_mode, b2_endpoint, b2_bucket, b2_key_id, b2_application_key, genblaze_api_key, genblaze_image_model. | `docs/assets/live-credential-handoff.json` |
+| PENDING | Live credential handoff is ready | Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key. | `docs/assets/live-credential-handoff.json` |
 | PENDING | Final public demo video URL is ready | Storyboard mode is mock_storyboard_ready; public video ready is False. | `docs/assets/demo-storyboard.json` |
 | PENDING | Final public demo video URL is accessible and safe | Public video check mode is pending_video_url; safe_to_submit is False. | `docs/assets/public-video-check.json` |
 | PENDING | Final recording gate is ready | Demo readiness mode is pre_live_mock_ready; final recording ready is False. | `docs/assets/demo-readiness-report.json` |

docs/assets/final-video-publish-kit.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.final_video_publish_kit.v1",
-  "created_at": "2026-06-29T13:53:29Z",
+  "created_at": "2026-06-30T04:35:02Z",
   "ok": true,
   "mode": "ready_for_final_upload",
   "safe_to_share": true,

docs/assets/final-video-publish-kit.md

@@ -4,7 +4,7 @@ Mode: `ready_for_final_upload`
 OK: `true`
 Safe to submit: `false`
 Final video ready: `false`
-Created: `2026-06-29T13:53:29Z`
+Created: `2026-06-30T04:35:02Z`
 
 ## Upload Copy
 

docs/assets/judge-crosswalk.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.judge_crosswalk.v1",
-  "created_at": "2026-06-29T12:10:33Z",
+  "created_at": "2026-06-30T04:37:54Z",
   "mode": "pre_live_crosswalk_ready",
   "ok": true,
   "safe_to_submit": false,

docs/assets/judge-crosswalk.md

@@ -1,6 +1,6 @@
 # ProofFrame Judge Crosswalk
 
-Created: `2026-06-29T12:10:33Z`
+Created: `2026-06-30T04:37:54Z`
 Mode: `pre_live_crosswalk_ready`
 OK: `true`
 Safe to submit: `false`

docs/assets/judge-decision-brief.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.judge_decision_brief.v1",
-  "created_at": "2026-06-29T13:53:29Z",
+  "created_at": "2026-06-30T04:37:54Z",
   "ok": true,
   "mode": "pre_live_decision_ready",
   "safe_to_share": true,

docs/assets/judge-decision-brief.md

@@ -3,7 +3,7 @@
 Mode: `pre_live_decision_ready`
 OK: `true`
 Safe to submit: `false`
-Created: `2026-06-29T13:53:29Z`
+Created: `2026-06-30T04:37:54Z`
 
 ProofFrame turns generated media into auditable, approval-ready asset packets.
 

docs/assets/judge-evidence-index.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.judge_evidence_index.v1",
-  "created_at": "2026-06-29T13:53:29Z",
+  "created_at": "2026-06-30T04:37:54Z",
   "ok": true,
   "mode": "pre_live_evidence_index_ready",
   "safe_to_share": true,
@@ -96,7 +96,7 @@
       "path": "docs/assets/final-submission-control.md",
       "raw_url": "https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/final-submission-control.md",
       "present": true,
-      "bytes": 7203
+      "bytes": 7087
     },
     {
       "id": "final_closeout_status",
@@ -107,7 +107,7 @@
       "path": "docs/assets/final-closeout-status.md",
       "raw_url": "https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/final-closeout-status.md",
       "present": true,
-      "bytes": 2353
+      "bytes": 2467
     },
     {
       "id": "devpost_preview",
@@ -118,7 +118,7 @@
       "path": "docs/assets/devpost-submission-preview.md",
       "raw_url": "https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/devpost-submission-preview.md",
       "present": true,
-      "bytes": 5500
+      "bytes": 5407
     },
     {
       "id": "submission_checklist",

docs/assets/judge-evidence-index.md

@@ -3,7 +3,7 @@
 Mode: `pre_live_evidence_index_ready`
 OK: `true`
 Safe to submit: `false`
-Created: `2026-06-29T13:53:29Z`
+Created: `2026-06-30T04:37:54Z`
 Public demo: https://adjcjh-backblaze-proofframe.hf.space/?judge=1
 Repository: https://github.com/adjcjh777/backblaze-proofframe
 

docs/assets/live-credential-handoff.json

@@ -2,52 +2,60 @@
   "schema": "proofframe.live_credential_handoff.v1",
   "ok": false,
   "mode": "missing_live_env",
-  "source": "process environment",
+  "source": ".env.final.local",
   "required": [
     {
       "id": "storage_backend_mode",
       "label": "ProofFrame storage backend mode",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "PROOFFRAME_STORAGE_BACKEND"
       ],
-      "present_names": [],
+      "present_names": [
+        "PROOFFRAME_STORAGE_BACKEND"
+      ],
       "expected": "b2",
-      "remediation": "Set PROOFFRAME_STORAGE_BACKEND=b2."
+      "remediation": ""
     },
     {
       "id": "generation_backend_mode",
       "label": "ProofFrame generation backend mode",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "PROOFFRAME_GENERATION_BACKEND"
       ],
-      "present_names": [],
+      "present_names": [
+        "PROOFFRAME_GENERATION_BACKEND"
+      ],
       "expected": "genblaze",
-      "remediation": "Set PROOFFRAME_GENERATION_BACKEND=genblaze."
+      "remediation": ""
     },
     {
       "id": "b2_endpoint",
       "label": "Backblaze B2 S3 endpoint",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "B2_ENDPOINT_URL",
         "B2_S3_ENDPOINT_URL"
       ],
-      "present_names": [],
+      "present_names": [
+        "B2_ENDPOINT_URL"
+      ],
       "expected": null,
-      "remediation": "Set B2_ENDPOINT_URL from the Backblaze bucket S3 endpoint."
+      "remediation": ""
     },
     {
       "id": "b2_bucket",
       "label": "Backblaze B2 bucket",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "B2_BUCKET"
       ],
-      "present_names": [],
+      "present_names": [
+        "B2_BUCKET"
+      ],
       "expected": null,
-      "remediation": "Set B2_BUCKET to the dedicated demo bucket name."
+      "remediation": ""
     },
     {
       "id": "b2_key_id",
@@ -87,13 +95,15 @@
     {
       "id": "genblaze_image_model",
       "label": "Genblaze image model",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "GENBLAZE_IMAGE_MODEL"
       ],
-      "present_names": [],
+      "present_names": [
+        "GENBLAZE_IMAGE_MODEL"
+      ],
       "expected": null,
-      "remediation": "Set GENBLAZE_IMAGE_MODEL to the verified image model."
+      "remediation": ""
     }
   ],
   "optional": [
@@ -122,35 +132,34 @@
     {
       "id": "genblaze_aspect_ratio",
       "label": "Genblaze aspect ratio",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "GENBLAZE_ASPECT_RATIO"
       ],
-      "present_names": [],
+      "present_names": [
+        "GENBLAZE_ASPECT_RATIO"
+      ],
       "expected": null,
       "remediation": ""
     },
     {
       "id": "genblaze_timeout",
       "label": "Genblaze timeout seconds",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "GENBLAZE_TIMEOUT_SECONDS"
       ],
-      "present_names": [],
+      "present_names": [
+        "GENBLAZE_TIMEOUT_SECONDS"
+      ],
       "expected": null,
       "remediation": ""
     }
   ],
   "missing_ids": [
-    "storage_backend_mode",
-    "generation_backend_mode",
-    "b2_endpoint",
-    "b2_bucket",
     "b2_key_id",
     "b2_application_key",
-    "genblaze_api_key",
-    "genblaze_image_model"
+    "genblaze_api_key"
   ],
   "next_commands": [
     "python scripts/final_env_wizard.py --prefill-non-secret --output .env.final.local",

docs/assets/live-credential-handoff.md

@@ -2,35 +2,30 @@
 
 Mode: `missing_live_env`
 Ready for live proof: `false`
-Source: `process environment`
+Source: `.env.final.local`
 
 This report records only variable names and presence checks. It never prints, hashes, stores, or commits credential values.
 
 ## Required Values
 
-- MISSING ProofFrame storage backend mode: `PROOFFRAME_STORAGE_BACKEND`; present none; expected `b2`.
-  Remediation: Set PROOFFRAME_STORAGE_BACKEND=b2.
-- MISSING ProofFrame generation backend mode: `PROOFFRAME_GENERATION_BACKEND`; present none; expected `genblaze`.
-  Remediation: Set PROOFFRAME_GENERATION_BACKEND=genblaze.
-- MISSING Backblaze B2 S3 endpoint: `B2_ENDPOINT_URL`, `B2_S3_ENDPOINT_URL`; present none.
-  Remediation: Set B2_ENDPOINT_URL from the Backblaze bucket S3 endpoint.
-- MISSING Backblaze B2 bucket: `B2_BUCKET`; present none.
-  Remediation: Set B2_BUCKET to the dedicated demo bucket name.
+- OK ProofFrame storage backend mode: `PROOFFRAME_STORAGE_BACKEND`; present `PROOFFRAME_STORAGE_BACKEND`; expected `b2`.
+- OK ProofFrame generation backend mode: `PROOFFRAME_GENERATION_BACKEND`; present `PROOFFRAME_GENERATION_BACKEND`; expected `genblaze`.
+- OK Backblaze B2 S3 endpoint: `B2_ENDPOINT_URL`, `B2_S3_ENDPOINT_URL`; present `B2_ENDPOINT_URL`.
+- OK Backblaze B2 bucket: `B2_BUCKET`; present `B2_BUCKET`.
 - MISSING Backblaze B2 key id: `B2_KEY_ID`; present none.
   Remediation: Set B2_KEY_ID for a least-privilege application key.
 - MISSING Backblaze B2 application key: `B2_APPLICATION_KEY`, `B2_APP_KEY`; present none.
   Remediation: Set B2_APPLICATION_KEY or B2_APP_KEY.
 - MISSING Genblaze/GMI API key: `GENBLAZE_API_KEY`, `GMI_API_KEY`; present none.
   Remediation: Set GENBLAZE_API_KEY or GMI_API_KEY.
-- MISSING Genblaze image model: `GENBLAZE_IMAGE_MODEL`; present none.
-  Remediation: Set GENBLAZE_IMAGE_MODEL to the verified image model.
+- OK Genblaze image model: `GENBLAZE_IMAGE_MODEL`; present `GENBLAZE_IMAGE_MODEL`.
 
 ## Optional Values
 
 - UNSET B2 public base URL: `B2_PUBLIC_BASE_URL`; present none.
 - UNSET B2 region for Genblaze sink: `B2_REGION`; present none.
-- UNSET Genblaze aspect ratio: `GENBLAZE_ASPECT_RATIO`; present none.
-- UNSET Genblaze timeout seconds: `GENBLAZE_TIMEOUT_SECONDS`; present none.
+- SET Genblaze aspect ratio: `GENBLAZE_ASPECT_RATIO`; present `GENBLAZE_ASPECT_RATIO`.
+- SET Genblaze timeout seconds: `GENBLAZE_TIMEOUT_SECONDS`; present `GENBLAZE_TIMEOUT_SECONDS`.
 
 ## Next Commands
 

docs/assets/recording-assets.json

@@ -9,7 +9,7 @@
     {
       "path": "README.md",
       "present": true,
-      "bytes": 14783
+      "bytes": 15285
     },
     {
       "path": "docs/demo_script.md",
@@ -104,12 +104,12 @@
     {
       "path": "docs/assets/final-submission-control.json",
       "present": true,
-      "bytes": 24359
+      "bytes": 24404
     },
     {
       "path": "docs/assets/final-submission-control.md",
       "present": true,
-      "bytes": 7087
+      "bytes": 7110
     },
     {
       "path": "docs/assets/proofframe-local-ui-smoke.png",

docs/assets/submission-audit-report.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.submission_audit.v1",
-  "created_at": "2026-06-29T14:05:09Z",
+  "created_at": "2026-06-30T04:37:54Z",
   "mode": "pre_submit_audit_blocked",
   "ok": false,
   "root": ".",

docs/assets/submission-audit-report.md

@@ -2,7 +2,7 @@
 
 Mode: `pre_submit_audit_blocked`
 OK: `false`
-Created: `2026-06-29T14:05:09Z`
+Created: `2026-06-30T04:37:54Z`
 Final evidence: `docs/assets/final-live-proof-evidence.json`
 
 ## Task Statuses

docs/assets/submission-bundle-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.submission_bundle.v1",
-  "created_at": "2026-06-30T04:04:26Z",
+  "created_at": "2026-06-30T04:37:54Z",
   "project": "ProofFrame",
   "repository_url": "https://github.com/adjcjh777/backblaze-proofframe",
   "public_demo_url": "https://adjcjh-backblaze-proofframe.hf.space/?judge=1",
@@ -148,7 +148,7 @@
         "present": true,
         "schema": "proofframe.final_submission_control.v1",
         "schema_ok": true,
-        "created_at": "2026-06-29T14:05:09Z",
+        "created_at": "2026-06-30T04:35:43Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
@@ -162,7 +162,7 @@
         "present": true,
         "schema": "proofframe.final_closeout_status.v1",
         "schema_ok": true,
-        "created_at": "2026-06-30T04:04:26Z",
+        "created_at": "2026-06-30T04:37:42Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
@@ -176,7 +176,7 @@
         "present": true,
         "schema": "proofframe.final_video_publish_kit.v1",
         "schema_ok": true,
-        "created_at": "2026-06-29T13:53:29Z",
+        "created_at": "2026-06-30T04:35:02Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
@@ -190,12 +190,12 @@
         "present": true,
         "schema": "proofframe.final_launch_plan.v1",
         "schema_ok": true,
-        "created_at": "2026-06-29T12:24:34Z",
+        "created_at": "2026-06-30T04:37:54Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
           "Expected ok=True, got False.",
-          "Expected mode='submitted', got 'blocked_at_credential_entry'."
+          "Expected mode='submitted', got 'ready_for_credential_entry'."
         ]
       },
       {
@@ -204,7 +204,7 @@
         "present": true,
         "schema": "proofframe.devpost_submission_preview.v1",
         "schema_ok": true,
-        "created_at": "2026-06-29T14:05:09Z",
+        "created_at": "2026-06-30T04:37:54Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
@@ -218,7 +218,7 @@
         "present": true,
         "schema": "proofframe.judge_decision_brief.v1",
         "schema_ok": true,
-        "created_at": "2026-06-29T13:53:29Z",
+        "created_at": "2026-06-30T04:37:54Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
@@ -378,8 +378,8 @@
       "path": "scripts/public_space_sync.py",
       "label": "Public Hugging Face Space sync verifier",
       "present": true,
-      "bytes": 81453,
-      "sha256": "5225228afd83701bc69dbd5bffa4c9ae5d6db1a321c72eca96351317695745a0"
+      "bytes": 84344,
+      "sha256": "80b323e5a2df2661c97d2023b1d30c7a0436f1dd2a6a8460645a1cce696dbd3c"
     },
     {
       "id": "public_space_sync_json",
@@ -458,16 +458,16 @@
       "path": "docs/assets/devpost-submission-preview.json",
       "label": "Machine-readable Devpost preview",
       "present": true,
-      "bytes": 11704,
-      "sha256": "7168c8a968a382927a534e53500898fbeb86fa40116e529bace350b0dc4e5761"
+      "bytes": 11611,
+      "sha256": "39092feea8eb3ea846c8b67085c4b8e57679d6e656d1b6867c1d5a211b74a0b6"
     },
     {
       "id": "devpost_preview_md",
       "path": "docs/assets/devpost-submission-preview.md",
       "label": "Human-readable Devpost preview",
       "present": true,
-      "bytes": 5500,
-      "sha256": "1c7d8bb8a6b223b8b73adc2945a33aa6d2969eb5a7e68044f811042692730c50"
+      "bytes": 5407,
+      "sha256": "760d948b804fbe97cc61f437643c3f0b23748b864ed112076d3c2ed910b8a9fe"
     },
     {
       "id": "devpost_submission_checklist_script",
@@ -531,7 +531,7 @@
       "label": "Machine-readable judge crosswalk",
       "present": true,
       "bytes": 10219,
-      "sha256": "e26e13908b3c49772b3a1e3e5cacd8f9a4d693a98d6daf930eaa7175f4c78bb4"
+      "sha256": "cc69963305eb8fe13a5ca0c06bb07c2af58659768d89b17f11388192cd85a68c"
     },
     {
       "id": "judge_crosswalk_md",
@@ -539,7 +539,7 @@
       "label": "Human-readable judge crosswalk",
       "present": true,
       "bytes": 6157,
-      "sha256": "e1e713256f84dfbf9bd62524a7b3a36ddadfcbc2c94c7731502ac0a513ed856d"
+      "sha256": "5e9e3a621839dd8787c9c2e7c7d7f2d8c99687fa0a8faa491989a6e418d4f575"
     },
     {
       "id": "judge_decision_brief_script",
@@ -555,7 +555,7 @@
       "label": "Machine-readable judge decision brief",
       "present": true,
       "bytes": 8137,
-      "sha256": "bbff5925ade063f81fd40900351091513b721922b03daf7c4b413d648c08dcd0"
+      "sha256": "4a34a962a383da11b3d3a79f21cce707e717375c7772fff1d37b4000f5e2c2f7"
     },
     {
       "id": "judge_decision_brief_md",
@@ -563,7 +563,7 @@
       "label": "Human-readable judge decision brief",
       "present": true,
       "bytes": 3835,
-      "sha256": "229bced696b84abcae13a683426a0fad7033aa9b226aa58c337f5d9298b04c61"
+      "sha256": "cce02254cec75331bc7c0cd43912975db54c20df887d93a1204ad9e507a4e3b2"
     },
     {
       "id": "judge_evidence_index_script",
@@ -579,7 +579,7 @@
       "label": "Machine-readable judge evidence index",
       "present": true,
       "bytes": 10456,
-      "sha256": "4c6e43173ca9574294dc6285fb18a0bc35196617b7190a8b1a9eba7e695a6f14"
+      "sha256": "850436cba02ad7c2ab3831fb6435950b6e032692fba9a14ad25d9c87bfdea41d"
     },
     {
       "id": "judge_evidence_index_md",
@@ -587,15 +587,15 @@
       "label": "Human-readable judge evidence index",
       "present": true,
       "bytes": 4473,
-      "sha256": "4a2d727b6dbb823ba2ef577c045718d26c55eee9cabfe81bb7ea152ba3320e97"
+      "sha256": "d6557b290286eb6268c93bf80cd029ae26e0faf1b50548c7edd80dd6e4c95fe4"
     },
     {
       "id": "frontend_ui",
       "path": "apps/web/index.html",
       "label": "Browser proof ledger UI",
       "present": true,
-      "bytes": 69266,
-      "sha256": "82044f3d69e6bea41b15567e16dbf4e16d8e5e807ef41de087a6b48f20aeb7a2"
+      "bytes": 69407,
+      "sha256": "9259d14a3b671a977c2a81ec46771b05a84148ddfa8dd5b6bc1caf2e70cbf519"
     },
     {
       "id": "demo_script",
@@ -675,7 +675,7 @@
       "label": "Machine-readable final video publish kit",
       "present": true,
       "bytes": 5366,
-      "sha256": "344571b3ad5178c5b9d8cab6ee93c8d1e832924f94821bb9862bc848075d522f"
+      "sha256": "bca2ad3796f4c0674ead31a52b584a1816563307dcd83dad862e9a734d580e6c"
     },
     {
       "id": "final_video_publish_kit_md",
@@ -683,7 +683,7 @@
       "label": "Human-readable final video publish kit",
       "present": true,
       "bytes": 2727,
-      "sha256": "3ba376d90dc228dbfeda410aafe38b2701aa123b91604fd24bec6659da90c250"
+      "sha256": "411f69489c0e6e54dafc20bc34e67f9a8e75e2d30d2db0728dd3ba5c8dd5f10b"
     },
     {
       "id": "public_video_check_script",
@@ -778,40 +778,40 @@
       "path": "docs/assets/final-submission-control.json",
       "label": "Machine-readable final control report",
       "present": true,
-      "bytes": 24733,
-      "sha256": "787a19c2738f50e69d252afeb148adce79b45a70334dd6405b5e94138f940209"
+      "bytes": 24359,
+      "sha256": "063182a9b2c1515272ef53a0786b97ef2f5f66843625ee28e29062f4a6d0fc60"
     },
     {
       "id": "final_submission_control_md",
       "path": "docs/assets/final-submission-control.md",
       "label": "Human-readable final control report",
       "present": true,
-      "bytes": 7203,
-      "sha256": "e9683b1ba45a880ed91b5350bee619d1efc93c9d864b0d3fa02cac219b2022f9"
+      "bytes": 7087,
+      "sha256": "6121f44a7e9661d330a8a402c16a1b1136f1b7b217fa11deb8f917cac68ac5f1"
     },
     {
       "id": "final_closeout_status_script",
       "path": "scripts/final_closeout_status.py",
       "label": "No-secret final closeout status report",
       "present": true,
-      "bytes": 18713,
-      "sha256": "a223697809ac23c8d43dacab4b667304f17d9f0c06dc19be0249585e1105ed85"
+      "bytes": 19027,
+      "sha256": "fef94acd01449141de6c4961bdf75078489b58fbb70e05b9bf007e3d91a976d2"
     },
     {
       "id": "final_closeout_status_json",
       "path": "docs/assets/final-closeout-status.json",
       "label": "Machine-readable final closeout status",
       "present": true,
-      "bytes": 12150,
-      "sha256": "ec4dadf4a2ce5d1130a64bc340d79112a2cc793c517c92f51a89987de2e4be28"
+      "bytes": 12592,
+      "sha256": "6c0b30d08c1e48cea375560226a3e2ecdaa0de494d7c22d23e39701e505bc0fe"
     },
     {
       "id": "final_closeout_status_md",
       "path": "docs/assets/final-closeout-status.md",
       "label": "Human-readable final closeout status",
       "present": true,
-      "bytes": 2405,
-      "sha256": "0e4e126cd6981e0bc6e162596788a96d3435a3831471fad61c3106c23ad36461"
+      "bytes": 2467,
+      "sha256": "218ef848c482db5150c539b763a219b076ce5a3cb7a6ab939fa6b38a5afe4747"
     },
     {
       "id": "final_operator_brief_script",
@@ -826,16 +826,16 @@
       "path": "docs/assets/final-operator-brief.json",
       "label": "Machine-readable final operator brief",
       "present": true,
-      "bytes": 9688,
-      "sha256": "a476cd6d9cb063f278041d62159d029a35c2389c38e3fdcb83ee9b6e641c5b12"
+      "bytes": 9547,
+      "sha256": "e04883b31eb3872bbef8292478c42d40281f04c4f73e72babca3086eeba3ebae"
     },
     {
       "id": "final_operator_brief_md",
       "path": "docs/assets/final-operator-brief.md",
       "label": "Human-readable final operator brief",
       "present": true,
-      "bytes": 4081,
-      "sha256": "8695e2860f2eefc57c89d2a4a8d89938f5c8c2cdba1b8a79a678487f283dbd4f"
+      "bytes": 3985,
+      "sha256": "4e035a35fea178fa2d5dbe9e52f3e8368844d0ba5d88b4ea2e4651c24c1f5394"
     },
     {
       "id": "final_launch_plan_script",
@@ -850,16 +850,16 @@
       "path": "docs/assets/final-launch-plan.json",
       "label": "Machine-readable final launch plan",
       "present": true,
-      "bytes": 5735,
-      "sha256": "8f53b073baa10aa7435ea56a1db7a921d1b37b5c8ea929749516859538e4f616"
+      "bytes": 5690,
+      "sha256": "c5713815ec24421ac78d80e1bde143ecff476b2694ad2ee1c55b89c858769915"
     },
     {
       "id": "final_launch_plan_md",
       "path": "docs/assets/final-launch-plan.md",
       "label": "Human-readable final launch plan",
       "present": true,
-      "bytes": 4641,
-      "sha256": "0ced5df934a41bf969bee40bb212b65c5110981a1347aa169063dc6ba4096be3"
+      "bytes": 4596,
+      "sha256": "7747b3177be9562ad5c2568d812c55372564a4fbff17dd8e49e5d33e021aa810"
     },
     {
       "id": "final_rehearsal_script",
@@ -899,7 +899,7 @@
       "label": "Machine-readable submission audit report",
       "present": true,
       "bytes": 5925,
-      "sha256": "f0b9ef2fc3c40a818648c2c09e9746c65f471c21b82424a3ba430668d98eadea"
+      "sha256": "5bcad4983e67226d218d2348e25ec70af0a6d9722612b6732a2c602792660fa2"
     },
     {
       "id": "submission_audit_md",
@@ -907,7 +907,7 @@
       "label": "Human-readable submission audit report",
       "present": true,
       "bytes": 4459,
-      "sha256": "ba55928af98821d63a8aee9a842ababd7e9c8c9490d32412a495fc83f03d5d12"
+      "sha256": "4b6e04e23f6593ee017eba0fef76d2093e10634caed8f2da5f106d282b248b2f"
     },
     {
       "id": "devpost_receipt_script",
@@ -1074,16 +1074,16 @@
       "path": "docs/assets/live-credential-handoff.json",
       "label": "Machine-readable live credential handoff",
       "present": true,
-      "bytes": 4647,
-      "sha256": "fbc4ca9fa12a6882fc8477fd9c3d89df2e14c9121bc461bde42460eea9f455a3"
+      "bytes": 4548,
+      "sha256": "08b0b09e257f62535a0800e00c91a5ffb8537c9fef9015b7a7f1be1acbe95eb8"
     },
     {
       "id": "live_env_handoff_md",
       "path": "docs/assets/live-credential-handoff.md",
       "label": "Human-readable live credential handoff",
       "present": true,
-      "bytes": 2479,
-      "sha256": "46b34fc8e72589c21b3b7bf636420b127b7a0c1ce0f32c2696758a2a44f38529"
+      "bytes": 2261,
+      "sha256": "17742c751ea63313f1deccdd0c4260dddc539f190f4e0ff51db85e54bf9e590d"
     },
     {
       "id": "final_env_wizard",
@@ -1163,7 +1163,7 @@
       "label": "Machine-readable recording asset report",
       "present": true,
       "bytes": 7826,
-      "sha256": "4eb6792bdb0f7f6a00c6162574e766923a3b42ff7e334296862b689a632598a0"
+      "sha256": "568ec3fed5266f57bef28881d2e2e8af8218a865a98dc10efbf0fa853a91c375"
     },
     {
       "id": "recording_assets_md",
@@ -1194,8 +1194,8 @@
       "path": "tasks.json",
       "label": "Machine-readable task board",
       "present": true,
-      "bytes": 66140,
-      "sha256": "3aff88e0602af30c91dbaff3fcd7ba894036659c3617fc5ab5cc2b59d84d6e91"
+      "bytes": 67156,
+      "sha256": "3947c60f73ca33cd828ab8c9cd2e78bbf2b25a51bdde10a4ab8bfa8552575cbc"
     },
     {
       "id": "local_ui_smoke",

docs/assets/submission-bundle-manifest.md

@@ -1,6 +1,6 @@
 # ProofFrame Submission Bundle
 
-Created: `2026-06-30T04:04:26Z`
+Created: `2026-06-30T04:37:54Z`
 Repository: https://github.com/adjcjh777/backblaze-proofframe
 Public mock demo: https://adjcjh-backblaze-proofframe.hf.space/?judge=1
 Devpost packet mode: `pre_live_safe`
@@ -43,7 +43,7 @@ Final gate ready: `false`
 - `scripts/agent_handoff_check.py` (14559 bytes, sha256 `3ef180b6a92eb987...`) - Agent Bus and Codex handoff path checker
 - `docs/assets/agent-handoff-report.json` (2253 bytes, sha256 `87711b3b8a5b1515...`) - Machine-readable Agent handoff report
 - `docs/assets/agent-handoff-report.md` (1571 bytes, sha256 `b64f0c7769d5867c...`) - Human-readable Agent handoff report
-- `scripts/public_space_sync.py` (81453 bytes, sha256 `5225228afd83701b...`) - Public Hugging Face Space sync verifier
+- `scripts/public_space_sync.py` (84344 bytes, sha256 `80b323e5a2df2661...`) - Public Hugging Face Space sync verifier
 - `docs/assets/public-space-sync-report.json` (19087 bytes, sha256 `13a2b0ef06e5cc71...`) - Machine-readable public Space sync report
 - `docs/assets/public-space-sync-report.md` (8038 bytes, sha256 `0472c57e5efe9f18...`) - Human-readable public Space sync report
 - `scripts/public_demo_screenshot.py` (8926 bytes, sha256 `3eb5b0a003e383dd...`) - Public judge-mode screenshot verifier
@@ -53,8 +53,8 @@ Final gate ready: `false`
 - `docs/assets/devpost-form-kit.json` (12483 bytes, sha256 `96196519c036e0aa...`) - Machine-readable Devpost form kit
 - `docs/assets/devpost-form-kit.md` (7496 bytes, sha256 `f6beeb3fe9e7f94d...`) - Human-readable Devpost form kit
 - `scripts/devpost_submission_preview.py` (17329 bytes, sha256 `28ed8703ca6479fc...`) - One-page claim-safe Devpost preview
-- `docs/assets/devpost-submission-preview.json` (11704 bytes, sha256 `7168c8a968a38292...`) - Machine-readable Devpost preview
-- `docs/assets/devpost-submission-preview.md` (5500 bytes, sha256 `1c7d8bb8a6b223b8...`) - Human-readable Devpost preview
+- `docs/assets/devpost-submission-preview.json` (11611 bytes, sha256 `39092feea8eb3ea8...`) - Machine-readable Devpost preview
+- `docs/assets/devpost-submission-preview.md` (5407 bytes, sha256 `760d948b804fbe97...`) - Human-readable Devpost preview
 - `scripts/devpost_submission_checklist.py` (11252 bytes, sha256 `78b8e1b70da428fd...`) - No-secret final Devpost web submission checklist
 - `docs/assets/devpost-submission-checklist.json` (16428 bytes, sha256 `bea72137b1e7df2a...`) - Machine-readable final Devpost submission checklist
 - `docs/assets/devpost-submission-checklist.md` (9319 bytes, sha256 `e45546c7334e78e3...`) - Human-readable final Devpost submission checklist
@@ -62,15 +62,15 @@ Final gate ready: `false`
 - `docs/assets/judge-brief.json` (3734 bytes, sha256 `59bdfd6a30e05d49...`) - Machine-readable judge brief
 - `docs/assets/judge-brief.md` (3000 bytes, sha256 `b487a7644c255c45...`) - Human-readable judge brief
 - `scripts/judge_crosswalk.py` (17642 bytes, sha256 `d9153174e330fd53...`) - Official criteria to evidence crosswalk
-- `docs/assets/judge-crosswalk.json` (10219 bytes, sha256 `e26e13908b3c4977...`) - Machine-readable judge crosswalk
-- `docs/assets/judge-crosswalk.md` (6157 bytes, sha256 `e1e713256f84dfbf...`) - Human-readable judge crosswalk
+- `docs/assets/judge-crosswalk.json` (10219 bytes, sha256 `cc69963305eb8fe1...`) - Machine-readable judge crosswalk
+- `docs/assets/judge-crosswalk.md` (6157 bytes, sha256 `5e9e3a621839dd87...`) - Human-readable judge crosswalk
 - `scripts/judge_decision_brief.py` (14954 bytes, sha256 `8505d14ada46c7ac...`) - Public-safe judge decision brief builder
-- `docs/assets/judge-decision-brief.json` (8137 bytes, sha256 `bbff5925ade063f8...`) - Machine-readable judge decision brief
-- `docs/assets/judge-decision-brief.md` (3835 bytes, sha256 `229bced696b84abc...`) - Human-readable judge decision brief
+- `docs/assets/judge-decision-brief.json` (8137 bytes, sha256 `4a34a962a383da11...`) - Machine-readable judge decision brief
+- `docs/assets/judge-decision-brief.md` (3835 bytes, sha256 `cce02254cec75331...`) - Human-readable judge decision brief
 - `scripts/judge_evidence_index.py` (13831 bytes, sha256 `efbf5dee17eab7f8...`) - Public-safe judge evidence index builder
-- `docs/assets/judge-evidence-index.json` (10456 bytes, sha256 `4c6e43173ca95742...`) - Machine-readable judge evidence index
-- `docs/assets/judge-evidence-index.md` (4473 bytes, sha256 `4a2d727b6dbb823b...`) - Human-readable judge evidence index
-- `apps/web/index.html` (69266 bytes, sha256 `82044f3d69e6bea4...`) - Browser proof ledger UI
+- `docs/assets/judge-evidence-index.json` (10456 bytes, sha256 `850436cba02ad7c2...`) - Machine-readable judge evidence index
+- `docs/assets/judge-evidence-index.md` (4473 bytes, sha256 `d6557b290286eb62...`) - Human-readable judge evidence index
+- `apps/web/index.html` (69407 bytes, sha256 `9259d14a3b671a97...`) - Browser proof ledger UI
 - `docs/demo_script.md` (5856 bytes, sha256 `fbabf38ff87cca9b...`) - Video shot list and narration
 - `scripts/demo_storyboard.py` (11025 bytes, sha256 `e5d75956d6d4a20b...`) - Machine-checked demo video storyboard
 - `docs/assets/demo-storyboard.json` (4514 bytes, sha256 `192f9dc7f55eaaa1...`) - Machine-readable demo storyboard
@@ -80,8 +80,8 @@ Final gate ready: `false`
 - `docs/assets/demo-video-draft.md` (1562 bytes, sha256 `1b041908b73020d6...`) - Human-readable demo video draft report
 - `docs/assets/proofframe-demo-draft.mp4` (747727 bytes, sha256 `7c943ee37b96a865...`) - Public-safe mock demo video draft
 - `scripts/final_video_publish_kit.py` (12256 bytes, sha256 `651a73d338ae1f4b...`) - Final public video upload copy and gate kit
-- `docs/assets/final-video-publish-kit.json` (5366 bytes, sha256 `344571b3ad5178c5...`) - Machine-readable final video publish kit
-- `docs/assets/final-video-publish-kit.md` (2727 bytes, sha256 `3ba376d90dc228db...`) - Human-readable final video publish kit
+- `docs/assets/final-video-publish-kit.json` (5366 bytes, sha256 `bca2ad3796f4c067...`) - Machine-readable final video publish kit
+- `docs/assets/final-video-publish-kit.md` (2727 bytes, sha256 `411f69489c0e6e54...`) - Human-readable final video publish kit
 - `scripts/public_video_check.py` (14919 bytes, sha256 `ca4e127967c6b81d...`) - Public demo video URL verifier
 - `docs/assets/public-video-check.json` (2977 bytes, sha256 `63b844b631ff61b8...`) - Machine-readable public video check
 - `docs/assets/public-video-check.md` (1701 bytes, sha256 `990cd0e1a0bd4814...`) - Human-readable public video check
@@ -93,23 +93,23 @@ Final gate ready: `false`
 - `docs/assets/award-readiness-report.json` (11377 bytes, sha256 `66417f6e0c2a15d9...`) - Machine-readable award readiness report
 - `docs/assets/award-readiness-report.md` (4390 bytes, sha256 `5be57ca5d9cab53d...`) - Human-readable award readiness report
 - `scripts/final_submission_control.py` (32644 bytes, sha256 `6514cbdf2bfe8998...`) - Final submission control tower
-- `docs/assets/final-submission-control.json` (24733 bytes, sha256 `787a19c2738f50e6...`) - Machine-readable final control report
-- `docs/assets/final-submission-control.md` (7203 bytes, sha256 `e9683b1ba45a880e...`) - Human-readable final control report
-- `scripts/final_closeout_status.py` (18713 bytes, sha256 `a223697809ac23c8...`) - No-secret final closeout status report
-- `docs/assets/final-closeout-status.json` (12150 bytes, sha256 `ec4dadf4a2ce5d11...`) - Machine-readable final closeout status
-- `docs/assets/final-closeout-status.md` (2405 bytes, sha256 `0e4e126cd6981e0b...`) - Human-readable final closeout status
+- `docs/assets/final-submission-control.json` (24359 bytes, sha256 `063182a9b2c15152...`) - Machine-readable final control report
+- `docs/assets/final-submission-control.md` (7087 bytes, sha256 `6121f44a7e9661d3...`) - Human-readable final control report
+- `scripts/final_closeout_status.py` (19027 bytes, sha256 `fef94acd01449141...`) - No-secret final closeout status report
+- `docs/assets/final-closeout-status.json` (12592 bytes, sha256 `6c0b30d08c1e48ce...`) - Machine-readable final closeout status
+- `docs/assets/final-closeout-status.md` (2467 bytes, sha256 `218ef848c482db51...`) - Human-readable final closeout status
 - `scripts/final_operator_brief.py` (15305 bytes, sha256 `06367d7eddaf62ef...`) - No-secret final operator brief
-- `docs/assets/final-operator-brief.json` (9688 bytes, sha256 `a476cd6d9cb063f2...`) - Machine-readable final operator brief
-- `docs/assets/final-operator-brief.md` (4081 bytes, sha256 `8695e2860f2eefc5...`) - Human-readable final operator brief
+- `docs/assets/final-operator-brief.json` (9547 bytes, sha256 `e04883b31eb3872b...`) - Machine-readable final operator brief
+- `docs/assets/final-operator-brief.md` (3985 bytes, sha256 `4e035a35fea178fa...`) - Human-readable final operator brief
 - `scripts/final_launch_plan.py` (17492 bytes, sha256 `dc2766d5f424c1ac...`) - No-secret final launch phase plan
-- `docs/assets/final-launch-plan.json` (5735 bytes, sha256 `8f53b073baa10aa7...`) - Machine-readable final launch plan
-- `docs/assets/final-launch-plan.md` (4641 bytes, sha256 `0ced5df934a41bf9...`) - Human-readable final launch plan
+- `docs/assets/final-launch-plan.json` (5690 bytes, sha256 `c5713815ec24421a...`) - Machine-readable final launch plan
+- `docs/assets/final-launch-plan.md` (4596 bytes, sha256 `7747b3177be9562a...`) - Human-readable final launch plan
 - `scripts/final_rehearsal.py` (18265 bytes, sha256 `7b0b844fcce35158...`) - No-secret final submission rehearsal checklist
 - `docs/assets/final-rehearsal-checklist.json` (17425 bytes, sha256 `38baeca09639120d...`) - Machine-readable final rehearsal checklist
 - `docs/assets/final-rehearsal-checklist.md` (7493 bytes, sha256 `25d7183644dc714b...`) - Human-readable final rehearsal checklist
 - `scripts/submission_audit.py` (20684 bytes, sha256 `0f9a378c203bf7b6...`) - Pre-submit audit gate
-- `docs/assets/submission-audit-report.json` (5925 bytes, sha256 `f0b9ef2fc3c40a81...`) - Machine-readable submission audit report
-- `docs/assets/submission-audit-report.md` (4459 bytes, sha256 `ba55928af98821d6...`) - Human-readable submission audit report
+- `docs/assets/submission-audit-report.json` (5925 bytes, sha256 `5bcad4983e67226d...`) - Machine-readable submission audit report
+- `docs/assets/submission-audit-report.md` (4459 bytes, sha256 `4b6e04e23f6593ee...`) - Human-readable submission audit report
 - `scripts/devpost_submission_receipt.py` (9209 bytes, sha256 `76c55e8ff1aeaa52...`) - Public-safe Devpost submission receipt generator
 - `docs/assets/devpost-submission-receipt.json` (1298 bytes, sha256 `bf646cf968665c8c...`) - Machine-readable Devpost submission receipt
 - `docs/assets/devpost-submission-receipt.md` (996 bytes, sha256 `af2fa18349d5c017...`) - Human-readable Devpost submission receipt
@@ -130,8 +130,8 @@ Final gate ready: `false`
 - `docs/assets/genblaze-contract-report.md` (3166 bytes, sha256 `6bb4bdb7c7a39915...`) - Human-readable Genblaze SDK contract report
 - `scripts/run_b2_live_proof.py` (5781 bytes, sha256 `9678c0292a70cc0b...`) - One-command B2 storage proof runner
 - `scripts/live_env_handoff.py` (9451 bytes, sha256 `39c8de0b58c132c3...`) - Redacted live credential handoff gate
-- `docs/assets/live-credential-handoff.json` (4647 bytes, sha256 `fbc4ca9fa12a6882...`) - Machine-readable live credential handoff
-- `docs/assets/live-credential-handoff.md` (2479 bytes, sha256 `46b34fc8e72589c2...`) - Human-readable live credential handoff
+- `docs/assets/live-credential-handoff.json` (4548 bytes, sha256 `08b0b09e257f6253...`) - Machine-readable live credential handoff
+- `docs/assets/live-credential-handoff.md` (2261 bytes, sha256 `17742c751ea63313...`) - Human-readable live credential handoff
 - `scripts/final_env_wizard.py` (16314 bytes, sha256 `a22d696bc534a61f...`) - Local final credential env wizard
 - `scripts/post_credential_live_proof.py` (17108 bytes, sha256 `aec873007c4cb809...`) - Post-credential live proof sequence runner
 - `docs/assets/post-credential-live-proof-plan.json` (9127 bytes, sha256 `c98417e979fac562...`) - Machine-readable post-credential live proof plan
@@ -141,11 +141,11 @@ Final gate ready: `false`
 - `docs/assets/demo-readiness-report.json` (3893 bytes, sha256 `ebd13ea05535dba2...`) - Machine-readable demo readiness report
 - `docs/assets/demo-readiness-report.md` (1768 bytes, sha256 `39fcc67011a5eaa9...`) - Human-readable demo readiness report
 - `scripts/recording_assets.py` (18340 bytes, sha256 `8c15f362298fa92c...`) - Public-safe recording asset gate
-- `docs/assets/recording-assets.json` (7826 bytes, sha256 `4eb6792bdb0f7f6a...`) - Machine-readable recording asset report
+- `docs/assets/recording-assets.json` (7826 bytes, sha256 `568ec3fed5266f57...`) - Machine-readable recording asset report
 - `docs/assets/recording-assets.md` (3867 bytes, sha256 `e3d2ef5dd86dfe33...`) - Human-readable recording asset report
 - `scripts/run_final_live_proof.py` (5814 bytes, sha256 `c6b9dc2fc9d7c670...`) - One-command final B2 plus Genblaze proof runner
 - `docs/submission.md` (4000 bytes, sha256 `b702417f1345fe39...`) - Registration and submission plan
-- `tasks.json` (66140 bytes, sha256 `3aff88e0602af30c...`) - Machine-readable task board
+- `tasks.json` (67156 bytes, sha256 `3947c60f73ca33cd...`) - Machine-readable task board
 - `docs/assets/proofframe-local-ui-smoke.png` (364927 bytes, sha256 `cca671ad38bda4dc...`) - Local UI screenshot
 - `docs/assets/proofframe-review-console-smoke.png` (343618 bytes, sha256 `30620a33e3c7ab28...`) - Review console screenshot
 - `docs/assets/proofframe-hf-public-smoke.png` (741074 bytes, sha256 `5d6f68f7a4a2fdee...`) - Public mock demo screenshot

docs/todo.md

@@ -48,3 +48,4 @@ python3 scripts/task.py doing T020 --note "Live B2 proof in progress"
 | T089 | Review findings hardened: real live credential handoff output, T020/T021 done checks, public raw closeout validation, and strict bundle closeout freshness are covered. |
 | T090 | Final closeout status is now available through `/api/judge/final-closeout`, a judge-mode UI panel/link, API smoke, and public Space HTML marker validation. |
 | T091 | Final closeout public sync now accepts both pre-final fail-closed and final-ready all-green states, validates the API against raw evidence, and keeps the UI next command visible. |
+| T092 | No-secret live credential handoff regenerated from `.env.final.local`; remaining local credential blockers are narrowed to `b2_key_id`, `b2_application_key`, and `genblaze_api_key`. |

scripts/final_closeout_status.py

@@ -95,6 +95,7 @@ def report_status(root: Path, report_id: str, relative_path: str, schema: str) -
         "public_video_ready": report.get("public_video_ready"),
         "project_url": report.get("project_url"),
         "missing_artifacts": report.get("missing_artifacts"),
+        "missing_ids": report.get("missing_ids"),
         "findings_count": len(report.get("findings") or []),
     }
 
@@ -119,6 +120,12 @@ def credential_handoff_ready(report: dict[str, Any]) -> bool:
     return bool(report.get("ok") is True and report.get("mode") == "live_env_ready")
 
 
+def credential_handoff_detail(report: dict[str, Any]) -> str:
+    missing = [str(item) for item in report.get("missing_ids", []) if item]
+    suffix = f"; missing ids: {', '.join(missing)}" if missing else ""
+    return f"Credential handoff mode is {report.get('mode')}{suffix}."
+
+
 def submission_bundle_inputs_ready(report: dict[str, Any]) -> bool:
     return bool(
         report["present"]
@@ -182,7 +189,7 @@ def build_report(root: Path = ROOT) -> dict[str, Any]:
             "credential_handoff",
             "Live credential handoff is ready",
             credential_handoff_ready(credential_handoff),
-            f"Credential handoff mode is {credential_handoff.get('mode')}.",
+            credential_handoff_detail(credential_handoff),
             credential_handoff["path"],
         ),
         gate_item(

tasks.json

@@ -200,6 +200,15 @@
       "done_criteria": "",
       "notes": "Addressed independent reviewer finding: public Space sync now accepts both pre-final fail-closed and final_closeout_ready all-green status, validates /api/judge/final-closeout against raw closeout evidence, API smoke enforces required gates/secret policy, and the UI always shows the next command."
     },
+    {
+      "id": "T092",
+      "title": "Refresh no-secret live credential handoff from local env",
+      "phase": "P4 Submit",
+      "owner": "controller",
+      "status": "done",
+      "done_criteria": "",
+      "notes": "Generated docs/assets/live-credential-handoff.* from .env.final.local without printing values; non-secret B2 bucket/endpoint and backend modes are present, and remaining secret blockers are narrowed to b2_key_id, b2_application_key, and genblaze_api_key."
+    },
     {
       "id": "T030",
       "title": "Run browser smoke test",

tests/test_final_closeout_status.py

@@ -178,6 +178,8 @@ def test_closeout_status_waits_for_credentials_in_pre_live_state(tmp_path):
     assert report["mode"] == "waiting_for_credentials"
     assert report["phase"] == "credential_entry"
     assert ".env.final.local" in report["next_command"]
+    gates = {gate["id"]: gate for gate in report["gates"]}
+    assert "missing ids: storage_backend_mode, generation_backend_mode" in gates["credential_handoff"]["detail"]
 
 
 def test_closeout_status_can_be_final_ready(tmp_path):