Execute post-Milestone 6 productization and release plan

[bordumb]

Source of truth

Post-Milestone 6 Productization and Release Plan

This issue tracks the transition from the completed formal and bounded-authorization program into a reproducible, independently reviewed, operable Auths Proof v1 platform.

Preconditions

Begin only after Milestones 0 through 6, the six-domain migration, canonical migration oracles, and full OpenTofu/PostgreSQL end-to-end criteria are complete.

Phase checklist

• Phase 7: close and freeze the research program in a reproducible release candidate
• Phase 8: publish the exact assurance claim
• Phase 9: complete independent formal, Rust/protocol, and stateful-execution reviews
• Phase 10: stabilize the platform thin waist and profile-authoring workflow
• Phase 11: productionize the enforcement runtime
• Phase 12: create executable profile certification
• Phase 13: operate the GitHub flagship, then the infrastructure flagship
• Phase 14: unify the six-domain workbench
• Phase 15: publish the platform contract and public v1 release
• Phase 16: resume controlled domain expansion

Guardrails

• Follow the exit gate for every phase in the source document.
• Follow the Profile and Domain Abstraction Boundary Plan.
• Keep provider semantics and exact effects profile-owned.
• Do not claim provider correctness from the formal authorization proofs.
• Do not add domains before the release, review, runtime, certification, and flagship-operation gates are complete.
• Open focused child issues for phase implementation and link them back here.