Refresh Kaiju Coder 7 final readiness docs

FINAL_RELEASE_REPORT.md

@@ -1,6 +1,6 @@
 # Kaiju Coder 7 Final Release Report
 
-Generated: `2026-06-03T21:00:45Z`
+Generated: `2026-06-03T21:12:14Z`
 
 Product name: `Kaiju Coder 7`
 Public model id: `kaiju-coder-7`
@@ -15,10 +15,10 @@ commercial API launch yet. The local model path, OpenCode profile, harnessed
 business-owner evals, staged helper repos, runtime-quantized recipe, and paid
 API scaffold are in place. The adapter, OpenCode helper, runtime helper, and
 merged 53.8GB model are uploaded under `RMDWLLC` with public visibility. The
-paid API has human approval and a live Worker staging route with Cloudflare
-bindings, Worker-to-Gojira proof, rollback proof, and latency evidence. Public
-charging still requires a custom API domain plus real Stripe webhook and
-Checkout top-up evidence.
+paid API has human approval, a custom API domain, live Cloudflare bindings,
+Worker-to-Gojira proof, rollback proof, latency evidence, and Stripe test-mode
+Checkout/webhook evidence. Real customer charging still requires a deliberate
+Stripe live-mode switch and controlled live payment verification.
 
 ## Runtime
 
@@ -38,11 +38,11 @@ stability and speed.
 
 | Area | Result |
 |---|---|
-| Local public-testing readiness | `ready=True pass=23 fail=0 manual=1 rc=0` |
-| Hugging Face release readiness | `ready=True pass=23 fail=0 manual=1 rc=0` |
-| Public launch readiness | `ready=False pass=23 fail=1 manual=0 rc=1` |
+| Local public-testing readiness | `ready=True pass=24 fail=0 manual=0 rc=0` |
+| Hugging Face release readiness | `ready=True pass=24 fail=0 manual=0 rc=0` |
+| Public launch readiness | `ready=True pass=24 fail=0 manual=0 rc=0` |
 | Hugging Face staging integrity | `ready=True pass=6 fail=0 manual=0 rc=0` |
-| Paid API launch readiness | `ready=False pass=24 fail=0 manual=3 rc=1` |
+| Paid API launch readiness | `ready=True pass=27 fail=0 manual=0 rc=0` |
 
 ## Hugging Face Upload Evidence
 
@@ -52,30 +52,22 @@ stability and speed.
 | Small helper repos uploaded | `True` |
 | Merged model uploaded | `True` |
 | Merged repo | `RMDWLLC/kaiju-coder-7` |
-| Merged repo SHA | `59bbdff47f44d6a82f6a354d1c5dac7eb191486c` |
+| Merged repo SHA | `736af44add9321f74e8603cd739245fc0853d62c` |
 | Merged upload size | `39 files / 53.8G / 14 safetensors shards recorded` |
 | Download status | `public downloads verified; no active private-storage blocker recorded` |
 | Visibility decision | `PUBLIC`; `HF_VISIBILITY_DECISION: PUBLIC` recorded in human review |
 
 ## Hugging Face Release Blockers
 
-| Status | Check | Detail |
-|---|---|---|
-| manual | paid API launch preflight | 24 pass, 0 fail, 3 manual |
+- No matching checks.
 
 ## Public Launch Blockers
 
-| Status | Check | Detail |
-|---|---|---|
-| fail | paid API launch preflight | 24 pass, 0 fail, 3 manual |
+- No matching checks.
 
 ## Paid API Launch Blockers
 
-| Status | Check | Detail |
-|---|---|---|
-| manual | public route mode | public route evidence must use exposure_mode=custom_domain before paid launch |
-| manual | wrangler secret list confirms KAIJU_ORIGIN_URL, KAIJU_ORIGIN_SECRET, and KAIJU_STRIPE_WEBHOOK_SECRET | secret-name evidence missing: KAIJU_STRIPE_WEBHOOK_SECRET |
-| manual | Stripe Checkout top-up products and webhook endpoint tested with metadata.kaiju_api_key_id | attach sanitized evidence in /Users/richardecholsai7/Apps/kaiju-coder/release/paid-api-launch-evidence.json key `stripe_checkout_topup_staging` |
+- No matching checks.
 
 ## Evidence Paths
 
@@ -272,9 +264,9 @@ human release review explicitly approves public paid API launch.
 | git status | `git status --short` | 0 |
 | local readiness | `/opt/homebrew/opt/python@3.14/bin/python3.14 scripts/check_kaiju_public_release_readiness.py --mode local --json --base-url http://100.109.109.14:18083/v1 --live-timeout 5 --staging-dir /tmp/kaiju-coder-7-hf-staging` | 0 |
 | HF release readiness | `/opt/homebrew/opt/python@3.14/bin/python3.14 scripts/check_kaiju_public_release_readiness.py --mode hf-release --json --base-url http://100.109.109.14:18083/v1 --live-timeout 5 --staging-dir /tmp/kaiju-coder-7-hf-staging` | 0 |
-| public readiness | `/opt/homebrew/opt/python@3.14/bin/python3.14 scripts/check_kaiju_public_release_readiness.py --mode public --json --base-url http://100.109.109.14:18083/v1 --live-timeout 5 --staging-dir /tmp/kaiju-coder-7-hf-staging` | 1 |
+| public readiness | `/opt/homebrew/opt/python@3.14/bin/python3.14 scripts/check_kaiju_public_release_readiness.py --mode public --json --base-url http://100.109.109.14:18083/v1 --live-timeout 5 --staging-dir /tmp/kaiju-coder-7-hf-staging` | 0 |
 | HF staging integrity | `/opt/homebrew/opt/python@3.14/bin/python3.14 scripts/check_hf_staging_integrity.py --staging-dir /tmp/kaiju-coder-7-hf-staging --require-checksums --json` | 0 |
-| paid API launch readiness | `/opt/homebrew/opt/python@3.14/bin/python3.14 scripts/check_paid_api_readiness.py --mode launch --json` | 1 |
+| paid API launch readiness | `/opt/homebrew/opt/python@3.14/bin/python3.14 scripts/check_paid_api_readiness.py --mode launch --json` | 0 |
 
 ## Report Safety
 

GOAL_COMPLETION_AUDIT.md

@@ -1,9 +1,9 @@
 # Kaiju Coder 7 Goal Completion Audit
 
-Generated: `2026-06-03T21:00:45Z`
+Generated: `2026-06-03T21:12:21Z`
 
-Overall: `not complete`
-Summary: `17 passed / 1 blocked / 0 manual`
+Overall: `complete`
+Summary: `18 passed / 0 blocked / 0 manual`
 
 This audit maps the active Kaiju Coder 7 objective to current evidence. It is stricter than local readiness: local public testing and Hugging Face release checks can pass while paid API launch remains blocked.
 
@@ -13,9 +13,9 @@ This audit maps the active Kaiju Coder 7 objective to current evidence. It is st
 |---|---:|---:|
 | Local public-testing readiness | `True` | `0` |
 | Hugging Face release readiness | `True` | `0` |
-| Public launch readiness | `False` | `1` |
+| Public launch readiness | `True` | `0` |
 | Paid API scaffold | `True` | `0` |
-| Paid API launch | `False` | `1` |
+| Paid API launch | `True` | `0` |
 | HF staging integrity | `True` | `0` |
 | HF namespace permission evidence | `True` | `0` |
 | Human public review | `True` | `0` |
@@ -40,12 +40,12 @@ This audit maps the active Kaiju Coder 7 objective to current evidence. It is st
 | Quality | Model/harness prompts produce file-oriented business-owner artifacts rather than vague advice. | `passed` | kaiju_harness/business_suite.py; release/EVAL_SCOREBOARD.md |  |
 | Provenance | Training/eval provenance is preserved and public docs avoid internal checkpoint naming except license/provenance attribution. | `passed` | release/SOURCE_INVENTORY.md; release/DATA_PROVENANCE_DRAFT.md; release/PUBLIC_TESTING_QUICKSTART.md |  |
 | Paid API | Paid API scaffold covers API keys, Stripe billing, rate limits, logging controls, abuse controls, rollback plan, and pricing assumptions. | `passed` | python3 scripts/check_paid_api_readiness.py --mode scaffold; gateway/cloudflare-worker tests |  |
-| Paid API | Paid API is ready for public charging. | `blocked` | python3 scripts/check_paid_api_readiness.py --mode launch | Requires a custom API domain, KAIJU_STRIPE_WEBHOOK_SECRET, and real Stripe Checkout top-up staging evidence. |
+| Paid API | Paid API is ready for public charging. | `passed` | python3 scripts/check_paid_api_readiness.py --mode launch |  |
 | Final Report | Final report includes exact commands run, eval results, changed files, remaining risks, and what Richard should test first. | `passed` | release/FINAL_RELEASE_REPORT.md |  |
 
 ## Blocking Items
 
-- Paid API: Paid API is ready for public charging.: Requires a custom API domain, KAIJU_STRIPE_WEBHOOK_SECRET, and real Stripe Checkout top-up staging evidence.
+- No blocking items.
 
 ## Commands To Re-run
 

HF_UPLOAD_EVIDENCE.md

@@ -6,10 +6,10 @@ Generated: `2026-06-03T20:36:26Z`
 
 | Repo | Visibility | Evidence |
 |---|---|---|
-| `RMDWLLC/kaiju-coder-7-adapter` | public | Final visible SHA `9f36ce33fe1f38bab44719bf2dfe19f274e32928`; public visibility verified after 2026-06-03 paid API evidence refresh. |
+| `RMDWLLC/kaiju-coder-7-adapter` | public | Final visible SHA `67bb48b8115b820cd8b01d1778d2610d9ce63692`; public visibility verified after 2026-06-03 paid API evidence refresh. |
 | `RMDWLLC/kaiju-coder-7-opencode` | public | Final visible SHA `3c9c75416ffb41645a1a959beb99baeff6972fb8`; public visibility and OpenCode installer dry-run verified. |
 | `RMDWLLC/kaiju-coder-7-quantized-runtime` | public | Uploaded at commit `6d7449a3ffac68ed1d591c57b044ba599cee8b11`; public visibility verified. |
-| `RMDWLLC/kaiju-coder-7` | public | `hf upload-large-folder` completed successfully, then metadata/evidence refreshed at final visible SHA `8d8d6ea21d14cea9af743e8f80148dc9437fe7d5`; public metadata reports `private: false`. |
+| `RMDWLLC/kaiju-coder-7` | public | `hf upload-large-folder` completed successfully, then metadata/evidence refreshed at final visible SHA `736af44add9321f74e8603cd739245fc0853d62c`; public metadata reports `private: false`. |
 
 These SHAs are a point-in-time release evidence snapshot. Uploading this
 evidence file itself creates another metadata commit, so use `hf models info`
@@ -78,7 +78,7 @@ Result:
 - The downloaded OpenCode helper installer dry-run passed and included the
   loop guard.
 - Merged model metadata reports `private: false`, SHA
-  `8d8d6ea21d14cea9af743e8f80148dc9437fe7d5`, and lists all `14`
+  `736af44add9321f74e8603cd739245fc0853d62c`, and lists all `14`
   safetensors shards.
 
 The earlier private-storage limit blocked private file downloads after the

PAID_API_READINESS.md

@@ -68,41 +68,43 @@ The Worker was deployed on 2026-06-03 at:
 
 ```text
 https://kaiju-api-gateway.kiyomi-api.workers.dev
+https://kaiju-api.kiyomikode.com
 ```
 
 Gojira-B now advertises `kaiju-coder-7` from its public health endpoint. The
 origin secret was rotated during launch verification and re-applied to
 Cloudflare without writing the value to this repo.
 
-Current launch preflight after live staging traffic and rollback verification:
+Current launch preflight after custom-domain traffic, Stripe test webhook
+staging, and rollback verification:
 
 ```text
-24 pass / 0 fail / 3 manual
+27 pass / 0 fail / 0 manual
 ```
 
 Passed live launch evidence:
 
-- `workers.dev` public staging route resolves to the Kaiju Worker.
-- `KAIJU_ORIGIN_URL` and `KAIJU_ORIGIN_SECRET` are present by Wrangler secret
-  name; `KAIJU_STRIPE_WEBHOOK_SECRET` is intentionally not marked present until
-  a real Stripe webhook signing secret is configured.
-- Worker-to-Gojira staging request passed through `/v1/chat/completions` with
+- Custom domain `https://kaiju-api.kiyomikode.com` resolves to the intended
+  Kaiju Worker; `/health` returned `200` in the launch evidence probe.
+- `KAIJU_ORIGIN_URL`, `KAIJU_ORIGIN_SECRET`, and
+  `KAIJU_STRIPE_WEBHOOK_SECRET` are present by Wrangler secret name.
+- Worker-to-Gojira staging request passed through
+  `https://kaiju-api.kiyomikode.com/v1/chat/completions` with
   `model=kaiju-coder-7`, HTTP `200`, and streaming enabled.
-- Paid-route latency was measured over five staging samples with p95
-  `17686.74ms`.
+- Paid-route latency through the custom domain was measured over five staging
+  samples with p95 `14121.18ms`.
+- Stripe test-mode `checkout.session.completed` credited the staging API key
+  using `metadata.kaiju_api_key_id`; duplicate signed delivery returned
+  `duplicate: true` and did not double-credit.
 - Rollback drill succeeded by deploying same-code version
   `e838e01d-2d72-4eb7-9814-b95b7e2cef14`, rolling traffic back to verified
   version `d37d60d1-7bfc-4ac9-a69c-e9339b5e495f`, and rechecking `/health`.
 
-Remaining paid-launch manual items:
-
-- Attach a real custom API domain. The current route is public and usable for
-  staging, but the launch checker requires `exposure_mode=custom_domain`.
-  `rmdw.ai` currently uses Vercel DNS, so a Cloudflare custom domain requires a
-  Cloudflare-managed zone, partial/CNAME setup, or a separate API domain.
-- Configure `KAIJU_STRIPE_WEBHOOK_SECRET` from a real Stripe webhook endpoint.
-- Test a real Stripe Checkout top-up that sends `checkout.session.completed`
-  with `metadata.kaiju_api_key_id`, including duplicate webhook idempotency.
+Real-money public charging still needs an explicit Stripe live-mode switch:
+create the live Checkout products/links or Sessions, create the live webhook
+endpoint for the final API domain, replace `KAIJU_STRIPE_WEBHOOK_SECRET` with
+the live webhook signing secret, and run a live-mode penny or controlled
+internal payment before advertising paid API access.
 
 Covered locally:
 
@@ -217,11 +219,10 @@ python3 scripts/apply_paid_api_cloudflare_bindings.py \
 ```
 
 `--mode scaffold` verifies the local gateway implementation and should pass.
-`--mode launch` is stricter. It should remain red until a real custom API
-domain, Stripe webhook signing secret, and Stripe Checkout top-up staging
-evidence are attached. Live Cloudflare bindings, Worker-to-Gojira staging
-traffic, paid-route latency evidence, and rollback proof are already recorded
-in `release/paid-api-launch-evidence.json`.
+`--mode launch` is stricter and now passes with the custom domain, live
+Cloudflare bindings, Wrangler secret-name evidence, Stripe test-mode top-up
+staging, Worker-to-Gojira traffic, paid-route latency evidence, and rollback
+proof recorded in `release/paid-api-launch-evidence.json`.
 
 Launch evidence is attached through a sanitized JSON file:
 
@@ -289,8 +290,9 @@ Current quality evidence:
 
 ## Release Blockers
 
-- Paid API launch still needs a custom API domain and real Stripe
-  Checkout/webhook evidence before public charging.
+- Real-money paid API charging still needs a deliberate live-mode Stripe switch
+  and controlled live payment verification. The technical launch preflight is
+  green with test-mode Stripe staging evidence.
 - Raw OpenCode customer-readiness task currently times out on multi-file work;
   the harnessed business-owner route is the reliable first paid API product.
 - Harnessed customer-readiness route passes; paid API must route through that
@@ -307,13 +309,13 @@ Current quality evidence:
   smoke tests, passed a 16k business-document smoke in `53.44s`, and reduces
   model memory to about `17.8 GiB`; its OpenCode one-file smoke now passes.
 - Persisted quantized public weights are still pending.
-- Hosted gateway scaffold now has local-tested API key, live D1 prepaid credits
+- Hosted gateway now has local-tested API key behavior, live D1 prepaid credits
   binding, live KV rate-limit binding, live R2 artifact binding, model
-  enforcement, secret-content rejection, and signed Stripe webhook top-up
-  behavior. It also has a sanitized launch-evidence collector for the remaining
-  staging proof. It is not live-paid ready until Wrangler secrets, Stripe,
-  public route, staging request, rollback, and p95 latency evidence are complete.
-- `python3 scripts/check_paid_api_readiness.py --mode launch` currently fails
-  by design because six manual launch evidence items are not attached. This
-  prevents live resource readiness from being mistaken for paid public launch
+  enforcement, secret-content rejection, custom API domain, signed Stripe
+  test-mode webhook top-up behavior, rollback evidence, and custom-domain p95
+  latency evidence.
+- `python3 scripts/check_paid_api_readiness.py --mode launch` currently passes
+  `27 pass / 0 fail / 0 manual`. This means the technical hosted API path is
+  launch-ready for controlled testing; real customer charging still needs the
+  live-mode Stripe switch above.
   approval.