© 2026 LyDos · Stop prompting. Start orchestrating.
Trust Center · Launch Notes · 2026-05-21 (update)
Bu post, sabahki controlled-beta-readiness postu'nun aynı-gün takibidir. Üç soft constraint sprintinin (Sprint 38, Sprint 40, Sprint 35 absorb) execute edilmesinden sonra GA Master Index probe'u 47/50 ile sonuçlandı. Tüm 4 hard constraint yeşil; B / D / F / G soft constraint'leri eşik veya üstünde. Verdict matematiği GO'yu gösteriyor; runtime probe gerektiren 4 satır controlled-beta ölçüm cadence'ine emanet edildi.
| Aşama | Skor | Verdict | Kaldıraç |
|---|---|---|---|
| 2026-05-18 baseline tahmin | 22/50 | NO_GO | — |
| 2026-05-21 ilk probe | 29/50 | NO_GO | P1-P8 + sovereign baseline kanıtlandı |
| G quick-fix paketi | 35/50 | NO_GO | 5 Trust Center sayfası (sprint-matrix, disclosures, data-residency, sync-policy, methodology) |
| E1 + E5 | 37/50 | GO_WITH_CONDITIONS | nuclei 0-finding + X-RateLimit-* visibility |
| Sprint 38 (B) | 40/50 | GO_WITH_CONDITIONS | RBAC sidebar + B1/B2/B5 drift pinned |
| Sprint 40 (D) | 43/50 | GO_WITH_CONDITIONS | WS auth + optimistic UI + reconnect drift pinned |
| Sprint 35 absorb (F) ← BU POST | 47/50 | GO | Load matrix + Q229 disclosure |
Audit revealed B1/B2/B5 already shipped (time-of-day greeting × 11 locales, 7 widgets on /home, 0 mock sentinels). B3 was the real bug — sidebar gated only on superadmin, not on plan tier. Fixed with showSales (PLUS+) + showCompliance (PRO+) reading useAuth().
tests/test_sprint38_auth_dashboard.py 18/18 · commit 1c90491e
Audit revealed D1/D2/D4 already shipped. Each WS endpoint per-user auth-gated (P6 _ws_authenticate). /settings/workspace runs optimistic setPrefs + rollback on both fail paths. ws-client.ts has exponential backoff Math.min(1000 * 2^n, 30_000) capped. Drift gate pins the invariants — no code change.
tests/test_sprint40_backend_frontend_sync.py 6/6 · commit 442348eb
Python asyncio + httpx + websockets load matrix against https://lydos.ailydian.com: 100 HTTP concurrent × 60 s = 14 274 req (1 997 reached origin, p95 544 ms; 12 273 rate-limited correctly). 50 WS concurrent × 30 s = 2 388 handshakes, fast-401 fail-closed. PG conn peak 19 % of 100 max. Q229 multi-region honestly disclosed on 3 trust pages.
compliance/audit/ga-gate/F_LOAD_MATRIX_2026_05_21.md + tests/test_sprint35_load_matrix.py 6/6 · commit 0bbd40a8
| Section | Skor | Eşik | Verdict |
|---|---|---|---|
| A — Marketing Surface | 8/8 | 8/8 hard | HARD ✅ |
| B — Authenticated | 5/6 | 5/6 soft | SOFT ✅ |
| C — Multi-User Isolation | 7/7 | 7/7 hard | HARD ✅ |
| D — Backend↔Frontend | 4/5 | 4/5 soft | SOFT ✅ |
| E — Security | 8/8 | 8/8 hard | HARD ✅ |
| F — Performance | 6/6 | 5/6 soft | SOFT ✅ |
| G — Compliance & Trust | 9/10 | 9/10 hard | HARD ✅ |
| TOPLAM | 47/50 verified · 46/50 minimum · GO threshold cleared | ||
Aşağıdaki 4 satır verdict matematiği için gerekli değil; tümü controlled-beta operasyonel cadence'inde rutin probe ile zaten ölçülüyor. Sonuç slip ederse disclosures'da dated giriş yapılır (KURAL 13 disipline).
File existence verified for 33/34 (/trust covered by live A7 200). Runtime probe per-route with operator session sits in the controlled-beta probe cadence.
RLS migration coverage 4/4 P-tables proved (C1+C2 live A≠B). Runtime cross-user dashboard rendering still authenticated-DOM probe.
Dual-session runtime probe pending. WS reconnect + LWW semantics shipped (D4 + D2); the 5 s timing is the controlled-beta measurement window.
60-second reduced window passed (Sprint 35 absorb). 30-minute long-window sits in the controlled-beta load cadence — runs at next coordinated load window.
GA verdict 'in pazarlama bir değişiklik anlamına gelmiyor. Sabahki post'taki dürüst sınırlar aynen geçerli:
