{
  "schema_version": "1.0",
  "audit_id": "AUD-SUBSTRATE-PARITY-2026-07-15-REAUDIT",
  "title": "AI-Collab shipped capability parity after PRD Plugin 0.16.0 implementation",
  "audited_at": "2026-07-15",
  "supersedes_findings_from": "docs/audits/substrate-capability-parity-2026-07-15.json",
  "scope": "All shipped AI-Collab tools and capability groups are classified through the executable contract-v2 adapter, unified configuration, deterministic workflows, repository service manifests, MCP/UTCP surfaces, skills, installer delivery, documentation, and conservative fallbacks.",
  "inventory": {
    "configured_capability_groups": 26,
    "classified_runtime_tools": 103,
    "intent_mappings": 31,
    "repository_service_manifest_copies": 3,
    "feature_to_skill_contracts": 20
  },
  "result": {
    "status": "ok",
    "critical": 0,
    "high": 0,
    "medium": 0,
    "low": 0,
    "unclassified_tools": 0,
    "unmapped_config_settings": 0
  },
  "implementation_boundaries": {
    "prd_plugin_authority": "Canonical PRD records, workflow validation, service declarations, configuration, test mapping, and result validation remain local and deterministic.",
    "ai_collab_authority": "AI-Collab owns runtime discovery, permission-scoped knowledge and memory recall, causal impact neighbours, model execution, bus/worker execution, hosted app operations, and specialist services.",
    "cross_boundary_rule": "Only versioned source/hash-bound requests and bounded validated receipts cross the boundary; unavailable or uncertain runtime capability follows the catalog fallback and never fabricates completion.",
    "deliberate_limits": "Administrative mutations, workspace export, app promotion, specialist cases, workers, threads, and visual operations remain discover-only or explicit opt-in according to the capability catalog and existing consent floor."
  },
  "resolved_findings": [
    {"ids": ["PAR-H-001", "PAR-M-001", "PAR-M-002", "PAR-M-004", "PAR-M-005"], "resolution": "Executable contract-v2 bridge, event export, live UTCP discovery/call, identity/health/index/freshness diagnostics, and valid package command."},
    {"ids": ["PAR-H-002", "PAR-M-010"], "resolution": "Runtime worker and MCP operations dispatch source-bound judgment/reporting requests, persist stable capsule links, and accept results only through deterministic workflow/report validation."},
    {"ids": ["PAR-H-003", "PAR-M-003", "PAR-M-006", "PAR-L-001", "PAR-L-005"], "resolution": "Federated knowledge, memory and context enrichment is workflow- and skill-routed with local canonical fallback, stable source references, HTML browse URL, and explicit discover-only classifications."},
    {"ids": ["PAR-H-004", "PAR-L-003", "PAR-L-004"], "resolution": "Duplicate-safe link registry binds optional remote goals, capsules, threads and watches while PRD remains the sole project-lifecycle authority; notices and goal observation are independently toggleable."},
    {"ids": ["PAR-M-007"], "resolution": "Fingerprint-bound verification executes exact changes plus AI-Collab impact neighbours, maps tests locally, uses argv-only commands, and widens to full verification on uncertainty."},
    {"ids": ["PAR-M-008", "PAR-L-002"], "resolution": "App Server, specialist and workspace-export tools are classified and available through guarded generic calls only for relevant explicit workflows."},
    {"ids": ["PAR-M-009"], "resolution": "Optional maintenance telemetry and runtime diagnostics are independently toggleable and produce bounded advisory receipts without silently changing profiles."}
  ],
  "verification": [
    "python scripts/prd_substrate_catalog.py --repo-root . audit",
    "python scripts/prd_services.py audit --repo-root . --json",
    "python scripts/prd_config.py --repo-root . --json audit",
    "python scripts/feature_skill_audit.py --repo-root . --format json",
    "python scripts/workflow_chml_audit.py --repo-root . --format json",
    "python scripts/prd_gate.py check --repo-root . --format json",
    "python scripts/gap_audit.py --target-version 0.16.0"
  ]
}