# Build verification — SITE-FINISH-FLOW-RUN-KN-b round 1

**Verdict:** pass  
**Frozen spec:** `~/scooling/docs/SITE-FINISH-FLOW-RUN-FREEZE.md` (`frozen: true`, review_stamp `pass`, digest `sha256:24f10167ca4ebbc564df61c985058aa1509cbe83afb22930e34bfe1952245e50`)  
**Diff scope:** Knowtation `feat/site-finish-flow-run-kn-b` — NEW `hub/bridge/flow-run-routes.mjs`, `test/site-finish-flow-run-kn-b.test.mjs`; MOD `hub/gateway/server.mjs` (run/consent proxies), `hub/bridge/server.mjs` (`registerBridgeFlowRunRoutes`), `lib/flow/flow-execution.mjs` (async `handleFlowRunSubmitReviewRequest` + `handleFlowRunMcpRequest`), callers (`hub/server.mjs`, `cli/index.mjs`, `mcp/tools/flow.mjs`, related tests), `hub/bridge/flow-routes.mjs` comment, `test/gateway-flow-authoring-proxy.test.mjs` (run proxies coexist)  
**Reviewer posture:** independent verifier against §FR.0.4 / §FR.9; not redesign

### Evidence

| type | sha256 | ref | notes |
| --- | --- | --- | --- |
| test_output | `0f6d17ac1e1dc990b44adc3e0a8cea12bb3f44b19f66adef2123e19197a7a8f8` | `node --test test/site-finish-flow-run-kn-b.test.mjs` | **10/10** pass (7 suites) |
| test_file | `fcb27c9ec695e093cf269201da81ce8f6475fab5748b0b687aacda5a64dca54f` | `test/site-finish-flow-run-kn-b.test.mjs` | Seven-tier source |

### Checklist

| # | Check | Evidence |
| --- | --- | --- |
| V1 | Frozen deliverables exist | Gateway proxies in `hub/gateway/server.mjs` for all §FR.0.4 routes; `hub/bridge/flow-run-routes.mjs` + `registerBridgeFlowRunRoutes` in `hub/bridge/server.mjs` |
| V2 | APIs match freeze | `POST …/runs`, `…/advance`, `…/evidence`, `…/execute-automatable`, `…/submit-review`, `…/consent`; `GET …/runs` + `GET …/flow-runs/:run_id`; env gates unchanged (default off) |
| V3 | Seven-tier matrix | unit/integration/e2e/stress/data-integrity/performance/security — **10/10** |
| V4 | No scope creep | No SC product/posture; no KN env ON; no consent-ledger blob expansion; no projection/Delegation/WEB-FINISH/Apple/F7 |
| V5 | No silent deletion | Authoring + capture proxies retained; authoring unit assertion updated to require coexistence |
| V6 | Governance truthful after this pass | ROADMAP/HANDOVER updated in closing commit with DONE + NEXT = SITE-FINISH-FLOW-RUN-flip (product relay) |
| V7 | No secrets / unsafe defaults | Envs default off (runtime assert `{run:false, auto:false}`); security tier source-scans; no SESSION_SECRET / SCOOLING flips |
| V8 | Claims match evidence | Tests green with digests above; §FR.0.4 family covered by integration (8 routes → mock bridge) |

### Findings

None.

### Honest summary

Knowtation SITE-FINISH-FLOW-RUN-KN-b ships gateway→bridge proxies for the Hub run/consent
family (§FR.0.4) and bridge handlers that call existing `flow-execution.mjs` facades with
`hub_flow_store.json` blob sync for runs. `FLOW_RUN_WRITES_ENABLED` and
`FLOW_AUTOMATABLE_EXECUTION_ENABLED` remain default **off**. Submit-review now awaits
`Promise.resolve(createProposal(…))` so hosted canister create works (capture precedent).
Consent ledger files stay process-local this slice. No Scooling posture/env flip; no
feature→GitHub-main. Hosted SMOKE remains Tier 3 after flip + coordinated env ON.