정식 승격 상태판과 증거를 동기화

docs/ops/evidence/avatar-decode-audit-2026-08-29.json

@@ -0,0 +1,73 @@
+{
+  "schema_version": "vignette.avatar-decode-audit.v1",
+  "generated_at": "2026-08-29T21:18:49+09:00",
+  "status": "deployment_blocked",
+  "method": {
+    "runtime": "Python 3.11",
+    "decoder": "Pillow 12.2.0 Image.verify",
+    "extension_contract": [
+      "png",
+      "jpg",
+      "jpeg",
+      "webp"
+    ],
+    "privacy": {
+      "raw_filenames_recorded": false,
+      "raw_paths_recorded": false,
+      "user_ids_recorded": false,
+      "emails_recorded": false,
+      "avatar_urls_recorded": false
+    }
+  },
+  "source_union": {
+    "source_root_count": 3,
+    "object_count": 93,
+    "inventory_sha256": "9d703126f78d4fc8330408835d76a7d680276240dc578d6fc9ca420c2f25e6aa",
+    "total_size_bytes": 52973,
+    "maximum_object_size_bytes": 28208,
+    "same_name_content_conflicts": 0,
+    "missing_database_references": 0,
+    "decode_valid_count": 3,
+    "decode_invalid_count": 90,
+    "extension_mismatch_count": 0,
+    "valid_formats": {
+      "JPEG": 2,
+      "PNG": 1
+    },
+    "valid_dimension_counts": {
+      "1x1": 1,
+      "225x225": 1,
+      "512x512": 1
+    }
+  },
+  "connected_database": {
+    "database_target_sha256": "81fe4a2844b7340f21396931fa18580e24358f857a08cc60540ddf8a4f8789b5",
+    "reference_count": 8,
+    "unique_object_count": 8,
+    "reference_set_sha256": "70926cf36ceb2375dd6c471bc59a38138460d8e4895ad1f2bddbcf1a49210d2b",
+    "active_private_audio_count": 0,
+    "found_object_count": 8,
+    "missing_object_count": 0,
+    "decode_valid_count": 2,
+    "decode_invalid_count": 6,
+    "valid_formats": {
+      "JPEG": 2
+    },
+    "valid_dimension_counts": {
+      "225x225": 1,
+      "512x512": 1
+    },
+    "invalid_signature_counts": {
+      "PNG": 6
+    },
+    "invalid_size_counts": {
+      "70": 6
+    },
+    "invalid_unique_content_count": 1,
+    "all_invalid_objects_have_identical_content": true
+  },
+  "release_gate": {
+    "allowed": false,
+    "reason": "Six of eight database-referenced avatar objects have a PNG signature but fail full image decoding. Preserve the bytes and database references until the owner chooses a recovery policy; do not claim the broken-image incident is resolved or deploy the current storage candidate."
+  }
+}