[codex] Record shared Workspace review-state merge

docs/review-context/14-release-readiness-evidence-gate.md

@@ -99,10 +99,23 @@ Minimum verification:
 - migration or seed-data story for demo objects;
 - failure behavior when persistence fails.
 
+Current evidence:
+
+- Platform PR #32 adds local durable review state and release-owner audit trail
+  persistence for the Workspace preview.
+- Platform PR #34 adds a shared in-process backend review-state API and
+  frontend Workspace load/save mirroring, with backend-side
+  `public_ready=false` locking.
+
+Remaining boundary:
+
+- PR #34 does not prove production database-backed durability, authorization,
+  conflict handling, or multi-instance behavior.
+
 Blocked until:
 
-- the observed frontend/session-local preview is replaced or supplemented by
-  durable storage for the demo path.
+- the local/in-process slices are replaced or supplemented by production-grade
+  durable storage and access boundaries for the demo path.
 
 ### Gate 2: Artifact Ingestion
 
@@ -334,5 +347,6 @@ Acceptance:
 - `origin/master:docs/product/workspace-current-state-audit.md`
 - `docs/platform/release-readiness-status.md`
 - Platform Workspace baseline `6efef07 fix: align workspace context review controls`
-- Latest observed local Workspace preview `5f4a666 feat: add manual upload intake workflow`
+- Latest merged Workspace platform state
+  `d06a713bf490ad870fe9273f933c310e2955b4e9`
 - PPT proof lab source index entry and Run 2.93 public-blocked gate

docs/review-context/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 Vault status: append-only change log.
 
+## 2026-06-16
+
+### Recorded Platform Shared Workspace Review-State Merge
+
+- Recorded platform PR #34 as merged to `master` with shared backend
+  review-state API evidence for the Workspace page.
+- Clarified that #34 is an in-process shared persistence slice, not
+  production-grade database-backed, authorized, conflict-safe, or
+  multi-instance Workspace persistence.
+- Updated the M5 closeout, source index, manifest, and release-readiness gate
+  so future sessions inherit the same status boundary.
+
+Source basis:
+
+- `yha9806/vulca-platform` PR #34.
+- Merge commit `d06a713bf490ad870fe9273f933c310e2955b4e9`.
+- Remote checks: `Run Tests` and `security` passed on PR #34.
+
 ## 2026-06-15
 
 ### Recorded Platform CI Hygiene Merge

docs/review-context/MANIFEST.json

@@ -54,7 +54,8 @@
   "core_sources": {
     "sdk_mainline": "cb6d52fe",
     "workspace_context_baseline": "6efef07",
-    "workspace_latest_observed": "5f4a666",
+    "workspace_latest_observed": "d06a713b",
+    "workspace_shared_review_state_merge": "d06a713b",
     "artifact_bridge_spec": "11-artifact-bridge-spec.md",
     "m3_bridge_fixture": "artifact-bridge/m3-demo-bridge-fixture.json",
     "m3_durable_review_fixture": "workspace-durable/m3-durable-review-fixture.json",

docs/review-context/release-readiness/M5-CLOSEOUT.md

@@ -20,7 +20,7 @@ and a human release owner decision exist.
 
 ## Current Platform Merge State
 
-As of 2026-06-15:
+As of 2026-06-16:
 
 - Platform PR #31, `[codex] Workspace review product shell`, merged to
   `master` at `6810e67ca967a47782b5d9f83d751148d1eb6d26`. Its PR gate
@@ -31,6 +31,13 @@ As of 2026-06-15:
   `master` at `61da8e9f296b7c1e66f61720e487e8e42d4eb6ce`. It implements local
   durable review state and the release-owner audit trail, with local
   verification plus remote `Run Tests` and `security` gates.
+- Platform PR #34, `[codex] Shared Workspace review persistence`, merged to
+  `master` at `d06a713bf490ad870fe9273f933c310e2955b4e9` from head
+  `c6604cc3d59fb93f10c3267dc4ee4816bc63fc9e`. It implements a shared
+  `/api/v1/workspace/review-state/{repo_id}` API, frontend Workspace load/save
+  mirroring, backend-side `public_ready=false` locking, OpenAPI/module-boundary
+  updates, and E2E isolation for shared review state. Its PR gate passed
+  remote `Run Tests` and `security`.
 
 These PRs improve R5 evidence, but they do not change the product-level
 decision above.
@@ -52,7 +59,9 @@ decision above.
 
 ## Remaining R5 Blockers
 
-- production/shared Workspace persistence evidence beyond the local durable PR;
+- production-grade Workspace persistence beyond the local durable PR and
+  in-process shared backend slice, including durable storage,
+  authorization, conflict handling, and multi-instance behavior;
 - repeated bridge ingestion across more than one workflow;
 - production EvidencePack rendering evidence;
 - human-owned release workflow implementation evidence;
@@ -68,3 +77,4 @@ decision above.
 - `docs/review-context/copy-gates/website-ppt-copy-gate.json`
 - `yha9806/vulca-platform` PR #31.
 - `yha9806/vulca-platform` PR #32.
+- `yha9806/vulca-platform` PR #34.

docs/review-context/release-readiness/m5-closeout-summary.json

@@ -22,6 +22,11 @@
       "status": "indexed",
       "source": "docs/review-context/workspace-durable/m3-durable-review-fixture.json"
     },
+    {
+      "name": "shared Workspace review-state API evidence",
+      "status": "indexed",
+      "source": "docs/review-context/workspace-durable/README.md"
+    },
     {
       "name": "EvidencePack rendering test report",
       "status": "indexed",
@@ -53,10 +58,11 @@
     "max_allowed_level": "R4",
     "example_scope": "public-example-key-visual-v1",
     "human_owner": null,
-    "boundary_notes": "R4 example-specific public copy is allowed only within RR4/RR5 scope. Product-level R5 remains blocked."
+    "boundary_notes": "R4 example-specific public copy is allowed only within RR4/RR5 scope. Product-level R5 remains blocked. Platform PR #34 adds shared in-process review-state evidence, not production-grade release readiness."
   },
   "remaining_blockers": [
-    "production Workspace persistence evidence",
+    "production database-backed/multi-instance Workspace persistence evidence",
+    "Workspace authorization and conflict handling evidence",
     "repeated bridge ingestion evidence",
     "production EvidencePack rendering evidence",
     "human-owned release workflow implementation evidence",

docs/review-context/source-index.md

@@ -136,6 +136,8 @@ check before changing high-level VULCA claims.
   - `docs/review-context/workspace-durable/m3-durable-review-fixture.json`
   - Protected RR3 reference for reload-preserved review item, EvidencePack,
     release blockers, decision state, and human decision history.
+  - Platform PR #34 adds shared in-process backend review-state API evidence
+    for the Workspace page, while production persistence remains gated.
 - Public example gate:
   - `docs/review-context/public-examples/m3-public-example-gate.json`
   - Protected RR4 reference for one example-specific public artifact and copy
@@ -155,13 +157,16 @@ Workspace product code lives in the separate `vulca-platform` repository.
 - Branch: `master` in
   `/Users/yhryzy/.config/superpowers/worktrees/vulca-platform/workspace-interactive-demo`
 - Context baseline: `6efef07 fix: align workspace context review controls`
-- Latest observed local preview:
-  `5f4a666 feat: add manual upload intake workflow`
+- Latest merged platform master:
+  `d06a713bf490ad870fe9273f933c310e2955b4e9` from PR #34,
+  `[codex] Shared Workspace review persistence`.
 - Important files:
   - `wenxin-moyun/src/content/workspaceDemo.ts`
   - `wenxin-moyun/src/components/workspace/`
   - `wenxin-moyun/src/pages/WorkspacePage.tsx`
   - `wenxin-moyun/src/pages/WorkspaceManualPage.tsx`
+  - `wenxin-backend/app/api/v1/workspace_review_state.py`
+  - `wenxin-moyun/src/services/workspaceDurableReviewStore.ts`
   - `docs/superpowers/specs/2026-06-14-vulca-three-layer-review-workspace-design.md`
   - `docs/superpowers/specs/2026-06-15-vulca-creative-pr-typed-review-modes-design.md`
 - Verified in prior session:
@@ -172,6 +177,11 @@ Workspace product code lives in the separate `vulca-platform` repository.
 - Mainline audit:
   - `origin/master:docs/product/workspace-current-state-audit.md`
   - Merge commit: `cb6d52fe docs: surface VULCA Workspace product direction`
+- Shared review-state merge:
+  - `yha9806/vulca-platform` PR #34.
+  - Merge commit: `d06a713bf490ad870fe9273f933c310e2955b4e9`.
+  - Boundary: in-process shared backend state only; not production
+    database-backed, authorized, conflict-safe, or multi-instance persistence.
 
 ## Website
 

docs/review-context/workspace-durable/README.md

@@ -12,7 +12,7 @@ blocker, decision-state, and human-audit boundaries.
 
 ## Product Implementation Status
 
-As of 2026-06-15, the platform implementation has two merged PRs on
+As of 2026-06-16, the platform implementation has three merged PRs on
 `yha9806/vulca-platform` `master`:
 
 - PR #31, `[codex] Workspace review product shell`, merged at
@@ -23,9 +23,17 @@ As of 2026-06-15, the platform implementation has two merged PRs on
   `61da8e9f296b7c1e66f61720e487e8e42d4eb6ce`. It adds local durable review
   state, staged decision persistence, advisory-agent completion persistence,
   and the release-owner audit trail.
-
-PR #32 is intentionally a local durability slice. It does not certify shared
-production persistence or product-level release readiness.
+- PR #34, `[codex] Shared Workspace review persistence`, merged at
+  `d06a713bf490ad870fe9273f933c310e2955b4e9`. It adds
+  `/api/v1/workspace/review-state/{repo_id}`, frontend load/save mirroring for
+  the Workspace page, backend-side `public_ready=false` normalization, and
+  E2E isolation for the shared review-state API.
+
+PR #32 is intentionally a local durability slice. PR #34 is intentionally a
+shared in-process backend slice. Together they improve Workspace persistence
+evidence, but they do not certify production persistence, authorization,
+conflict handling, multi-instance durability, or product-level release
+readiness.
 
 ## Current Fixtures
 
@@ -50,3 +58,4 @@ production persistence or product-level release readiness.
 - `docs/review-context/artifact-bridge/m3-demo-bridge-fixture.json`
 - `yha9806/vulca-platform` PR #31.
 - `yha9806/vulca-platform` PR #32.
+- `yha9806/vulca-platform` PR #34.