# Ticket: Clarify SD qualifier readiness gates

Status: complete
Type: ticket
Updated: 2026-08-02
Next Action: none; return to expendable same-family A/B sample intake
Parent: work/wp/active/wp-build-standalone-pi-sd-qualification-operator-application.md

## Problem

The appliance-readiness UI mixes actionable configuration faults, future live
admission requirements, and intentionally disabled authorities as equivalent
red failures. The deployed HPT fixture image is present and read-only but its
reviewed SHA-256 is not configured, so the UI inaccurately reports that the
image itself is missing. Approval-anchor, controller-adapter, and combined
power/media gates are hard-coded roadmap states rather than dynamic probes.

## Expected Behavior

Keep every live capability fail-closed while making the operator meaning clear:

- distinguish required-now, required-before-live, and expected-disabled gates;
- report the present but untrusted fixture image accurately and admit it only
  after its reviewed SHA-256 is configured;
- identify the approval trust anchor as an unimplemented live-admission gate,
  not an approval that conversational authorization can satisfy;
- describe the controller adapter as expected disabled until an exact admitted
  run temporarily enables it; and
- split HPT2 controller/media-write authority from bench power and raw-media
  authority.

## Acceptance Criteria

- [x] The immutable HPT fixture image passes path, mode, and SHA-256 checks on
  the deployed Pi without granting physical-media access.
- [x] The UI displays a stable requirement class for every appliance gate.
- [x] Approval-anchor status truthfully reports the current implementation
  state and remains a live blocker.
- [x] HPT2 controller/media-write authority and power/raw-media authority are
  separate gates and both remain disabled.
- [x] Exact-run language replaces stale generic authorization wording.
- [x] Application tests pass on SQLite and PostgreSQL.
- [x] The published release is deployed and the live page/API are verified.

## Verification

Automated status/view tests, complete application regression on both supported
databases, deployment health, and live operator-page/API inspection.

Completed by Pi PR #31 and exact deployed release
`readiness-gates-32b636c`. See
`work/evidence/pi-readiness-gate-ui-deployment-20260802.md`.
