wireguard-admin/docs/evidence/milestone-24.md

Milestone 24 evidence — session-owned delivery scenarios

Run date: 2026-10-30T21:23:54+02:00. Baseline commit: ed602f0; the working tree contains the uncommitted M24 source and documentation changes listed below, plus coordinator-owned PLANS.md. Rust/Cargo: 1.97.1, host native target. Checks used synthetic fixtures. No production configuration, keys, VPN, or host service was accessed.

Integrated inputs

Input	SHA-256
src/app.rs	a337a6c25db64f0a1422e0efa1bf67ecae06f7c59e74f6144d2964345d06117d
src/app/first_delivery.rs	0814de038423a0b8886d216aa3cf2b0913337595fbde4624da93bdb610f1df62
src/app/first_file.rs	770f833c99c42ac2b138a071bf4df26bbcaffcc431733380b846d600d8be8b6b
src/app/reissue.rs	2bf5b2f967c55f08d53b6d1e5d3d727d2774d5ad97454b2c4eb2425fdacdd563
src/app/commit.rs	eac859338dd11b8cb2cac8db2dc621d6862215998ad89701f6eadd6a6c2609d8
src/app/restore.rs	1ac76556d31d3f1502c644195c3f479fa092c321ebb53e671911a632ecc91f35
docs/PROJECT_LAYOUT.md	302f2a7eb16def7e2c0810780a3e9805caea416915737ce4ab4033900a379306
target/release/wireguard-admin	3aa6c56f32ed3da82c25c6da1f209c6dc55293998e497f57de0a2bd2c6c7a39a

No dependency, manifest, or lockfile changes. The release artifact hash identifies the binary built from the current integrated source; it is not a production deployment.

Checks on integrated tree

Command	Result
cargo test --locked app::	Exit 0; 67 app tests passed.
cargo test --locked delivery::	Exit 0; 22 delivery tests passed.
cargo test --locked vault::	Exit 0; 24 vault tests passed.
cargo test --locked --test client_delivery	Exit 0; 5 tests passed.
cargo test --locked --test tui_workflow	Exit 0; 8 tests passed.
cargo fmt --all -- --check	Exit 0.
cargo clippy --locked --all-targets -- -D warnings	Exit 0.
cargo test --locked	Exit 0; library 337 passed, 2 ignored; integration and doc suites passed. Ignored Alpine suites were not selected.
cargo build --locked --release	Exit 0.
git diff --check	Exit 0.

Acceptance mapping and review

• M24-A1: FirstDeliverySession privately owns keys, bound context, stages and tokens. Existing app and client-delivery tests pass for pre-Commit, stale, consumed and reopened rights, Commit promotion, discard/delete, and independent rights across rename/restart.
• M24-A2: App tests pass for retry to a different directory, uncertain publication and explicit overwrite/manual cleanup acknowledgement, post-publication bookkeeping uncertainty, activation warnings, same-payload file/QR, and independent QR failure. The new owner and authorization have no ordinary Debug, Clone, or serialization; public errors and projections remain redacted.
• M24-A3: Reissue reads installed saved state, unlocks the selected record with the password supplied for that action, renders authoritative server values, writes the mandatory file before optional QR, and retains imported-record mismatch checks. client_delivery and vault tests pass.

Fresh independent reviewer /root/m24_review examined the combined implementation and ran the focused suites, formatting, Clippy, full tests, release build and diff check. No source correctness or security finding remained. M24-R1 was a missing evidence record named by PLANS.md; the coordinator created this file after independently rerunning the required checks. Independent re-review of this record and its source hashes remains the next action before acceptance.

This is host/synthetic evidence only. No fresh Alpine Testcontainers scenario or disposable systemd VM test was run; Alpine evidence would not establish systemd behavior. The retired M9 real-system acceptance limitation remains outside M24.