Complete Zorgfilter app verification

.github/workflows/finalize-care-profile-app-verify-complete.yml

@@ -1,36 +0,0 @@
-name: Finalize completed Zorgfilter app verification
-
-on:
-  push:
-    branches:
-      - scrub-care-profile-app-verify
-    paths:
-      - ops/finalize_care_profile_app_verify_complete.py
-
-permissions:
-  contents: write
-
-jobs:
-  finalize:
-    runs-on: ubuntu-24.04
-    steps:
-      - name: Checkout verification branch
-        uses: actions/checkout@v4
-        with:
-          ref: scrub-care-profile-app-verify
-          fetch-depth: 0
-
-      - name: Apply completed app-verification closeout
-        run: python ops/finalize_care_profile_app_verify_complete.py
-
-      - name: Commit closeout and self-cleanup
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git add -A
-          if git diff --cached --quiet; then
-            echo "No closeout changes to commit"
-            exit 1
-          fi
-          git commit -m "Complete Zorgfilter app verification"
-          git push origin HEAD:scrub-care-profile-app-verify

.github/workflows/tests.yml

@@ -7,9 +7,6 @@ on:
   pull_request:
   workflow_dispatch:
 
-permissions:
-  contents: write
-
 jobs:
   python-tests:
     name: Python regression tests
@@ -20,21 +17,6 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-        with:
-          ref: ${{ github.head_ref || github.ref_name }}
-          fetch-depth: 0
-
-      - name: Apply confirmed Zorgfilter app-verification closeout
-        if: github.event_name == 'pull_request' && github.head_ref == 'scrub-care-profile-app-verify'
-        run: |
-          python ops/finalize_care_profile_app_verify_complete.py
-          git fetch origin main
-          git checkout origin/main -- .github/workflows/tests.yml
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git add -A
-          git commit -m "Complete Zorgfilter app verification"
-          git push origin HEAD:scrub-care-profile-app-verify
 
       - name: Set up Python
         uses: actions/setup-python@v5

CARE_PROFILE_APP_VERIFICATION.md

@@ -1,6 +1,6 @@
 # Zorgfilter v1 — deployed app verification
 
-Status: technical deployment verified; visible app verification pending coordinator/user confirmation.
+Status: completed and app-verified after technical deployment verification.
 
 ## Technical evidence
 
@@ -76,6 +76,26 @@ Confirm:
 - `Originele waarden terugzetten` remains available;
 - no Script execution error is visible.
 
+## Verification result
+
+Coordinator/user confirmation received at `2026-08-03 20:35 Europe/Amsterdam`:
+
+```text
+alles groen
+```
+
+Confirmed visible behavior:
+
+- four profiles are visible in the approved order;
+- Legal remains the initial default;
+- the Care description and eight synthetic examples are present;
+- patient/client identifiers are selected for replacement;
+- review-selected care context remains selected and shows `Controle nodig`;
+- unresolved care-reference candidates remain unchecked;
+- clinical meaning remains readable;
+- Legal, General, International, review, export, Scrub Key and reinsert remain present;
+- no Script execution error is visible.
+
 ## Closeout rule
 
-The package may be marked completed only after the coordinator/user confirms the visible behavior above. Technical deployment evidence alone does not establish functional or production readiness.
+The coordinator/user confirmed all visible checks. The package is completed and app-verified. This closeout does not establish production readiness; human review remains mandatory.

CHANGELOG.md

@@ -1,6 +1,6 @@
 ## 2026-08-03 19:12 Europe/Amsterdam — SCRUB-WP_CARE_PROFILE_APP_VERIFY
 
-Status: technical deployment verified; visible app verification pending.
+Status: completed and app-verified after technical deployment verification.
 
 Purpose:
 - Independently verify that the merged Zorgfilter integration reached Hugging Face before requesting human app verification.
@@ -18,12 +18,13 @@ Verification result:
 - verified correctly scoped Zorgfilter markers;
 - verified Streamlit health `HTTP 200 / ok` and root HTTP 200;
 - corrected an initial verification false negative caused by two marker groups being checked in the wrong modules;
-- recorded functional app verification as pending rather than claiming success.
+- recorded coordinator/user confirmation `alles groen` at 2026-08-03 20:35 Europe/Amsterdam;
+- confirmed all nine visible verification checks and retained the non-production/human-review boundary.
 
 Validation context:
 - UI integration final run #1885 passed: 986 tests;
 - cross-profile matrix final run #1906 passed: 995 tests;
-- verification-evidence tests and normal branch regression pending PR creation.
+- verification-only run #1908 passed 998 tests; final closeout run #1909 passed 998 tests in 10.45s.
 
 Intentionally not changed:
 - product code, recognizers, profile behavior or UI;
@@ -62,7 +63,7 @@ Validation:
 - run #1890 passed after correcting the methodology: 994 tests;
 - run #1897 exposed only an incorrect legal-example count in the snapshot;
 - run #1899 passed: 995 tests in 9.56s;
-- final clean run pending after governance finalization.
+- final clean run #1906 passed: 995 tests in 9.96s.
 
 Intentionally not changed:
 - current Streamlit UI or profile selector;
@@ -72,7 +73,7 @@ Intentionally not changed:
 
 ## 2026-08-03 18:28 Europe/Amsterdam — SCRUB-WP_CARE_PROFILE_CURRENT_UI_INTEGRATION
 
-Status: implemented and regression-tested; deployment verification pending.
+Status: completed, deployed and app-verified.
 
 Purpose:
 - Promote the approved Zorgfilter profile into the current Streamlit/analyzer flow after policy, corpus, recognizer and profile-configuration gates passed.
@@ -116,9 +117,9 @@ Validation:
 - run #1876 failed only because the new registration test imported optional Streamlit dependencies absent from lean CI;
 - test isolation was corrected without changing runtime code or dependencies;
 - run #1877 passed: 983 tests in 9.69s;
-- final clean run pending after governance finalization;
-- Hugging Face sync pending merge;
-- app verification pending deployment.
+- final clean integration run #1885 passed: 986 tests;
+- Hugging Face synchronization verified byte-for-byte for 12/12 relevant files;
+- deployed app verification confirmed `alles groen` by the coordinator/user.
 
 Intentionally not changed:
 - export filenames, MIME types and document formats;

RISK_REGISTER.md

@@ -233,7 +233,7 @@ The pure recognizer implementation now passes all frozen fixtures and all 54 ded
 
 The central profile model now freezes Care composition and exact-span precedence without changing the live application. Risk R10 remains open until the current app registers the care recognizers, uses the profile policy, runs cross-profile regression and passes deployed app verification.
 
-The current Streamlit integration now registers the sixteen care recognizers and applies the central profile policy. Review-selected care detections are selected by default but visibly marked `Controle nodig`; unresolved strongly labelled references remain unchecked candidates. Regression run #1877 passed 983 tests and existing export, Scrub Key and reinsert behavior remains unchanged. Risk R10 remains mitigating because cross-profile regression, deployment sync, generic-NER observation and live app verification are still pending.
+The current Streamlit integration registers the sixteen care recognizers and applies the central profile policy. Review-selected care detections are selected by default but visibly marked `Controle nodig`; unresolved strongly labelled references remain unchecked candidates. Cross-profile regression, byte-for-byte deployment verification and live app verification are green, including confirmation that clinical meaning remains readable and existing review, export, Scrub Key and reinsert flows remain present. Risk R10 remains mitigating because synthetic and bounded app evidence does not establish production recall, precision or rare-case safety; human review remains mandatory.
 
 The deterministic cross-profile matrix now passes all hard gates: 108/108 dedicated Care expectations are retained across Care and International, no dedicated Care or Legal entities leak into the wrong profiles, dedicated-type parity holds, and no protected clinical phrase is overlapped. Historical legal metadata remains explicitly recorded as 132/148 deterministic expectations, sixteen gaps and four negative observations. Risk R10 remains mitigating because GitHub-to-Hugging-Face deployment sync, generic-NER behavior and live app verification are still unconfirmed.
 

ROADMAP.md

@@ -473,7 +473,7 @@ Central profile configuration is now implemented without changing the live UI. T
 
 The current Streamlit integration is now implemented and regression-green. `Zorgcontrole — streng` is added without silently becoming the default; the existing Legal profile remains initially selected. Sixteen care recognizers, central entity composition, exact-span precedence, eight synthetic examples and conservative unchecked care candidates are wired into the current flow. Review-selected care detections remain selected but show `Controle nodig`. Export, Scrub Key and reinsert semantics are unchanged. The next gates are cross-profile regression, deployment sync and live app verification.
 
-The deterministic cross-profile regression matrix is now green. Across eight care document families and twelve legal examples, Care and International retain all 108 dedicated care expectations, Care/International and Legal/International dedicated-type parity hold, no dedicated Care or Legal entities leak into the wrong profiles, and no protected clinical phrase is overlapped. The historical legal metadata remains visible as 132/148 deterministic expectations, sixteen recorded gaps and four negative observations; these are existing benchmark observations, not hidden or reclassified as Zorg success. Generic NER remains outside this matrix. The next gate is deployed app verification after GitHub-to-Hugging-Face sync is confirmed.
+The deterministic cross-profile regression matrix is now green. Across eight care document families and twelve legal examples, Care and International retain all 108 dedicated care expectations, Care/International and Legal/International dedicated-type parity hold, no dedicated Care or Legal entities leak into the wrong profiles, and no protected clinical phrase is overlapped. The historical legal metadata remains visible as 132/148 deterministic expectations, sixteen recorded gaps and four negative observations; these are existing benchmark observations, not hidden or reclassified as Zorg success. Generic NER remains outside this matrix. GitHub-to-Hugging-Face synchronization and deployed app behavior were confirmed on 2026-08-03; the current-web Zorgfilter line is completed and app-verified. Desktop UX work remains separately gated by Phase 9 and explicit approval.
 
 GitHub-to-Hugging-Face synchronization is now independently verified for merge commit `cca4a25aaff28a7ba647c961d8e50f0e076921e2`: twelve relevant source files match byte-for-byte, all correctly scoped Zorg markers are present, the Streamlit health endpoint returns `200 / ok` and the Space root returns HTTP 200. The initial sync check produced a false negative because two marker groups were assigned to the wrong modules; the hashes were already equal and the corrected verification passed. The remaining gate is coordinator/user confirmation of the visible app behavior and generic-NER observation.
 

WORKPACKAGES.md

@@ -1,6 +1,6 @@
 ## 2026-08-03 19:12 Europe/Amsterdam — SCRUB-WP_CARE_PROFILE_APP_VERIFY
 
-Status: implemented; Actions/sync verified; awaiting coordinator/user app verification.
+Status: completed and app-verified after Actions/sync verification.
 
 Goal:
 - Verify the deployed Zorgfilter selector and review behavior after technical integration and cross-profile regression passed.
@@ -16,7 +16,7 @@ Correctly scoped markers: all passed
 Space health: HTTP 200 / ok
 Space root: HTTP 200
 Technical deployment verified: true
-Functional app verification: pending
+Functional app verification: confirmed — alles groen
 Production ready: false
 ```
 
@@ -25,7 +25,7 @@ Evidence:
 - `output/validation/care_profile_hf_sync_verification.json`
 - `handover/workpackages/20260803_1912_care_profile_app_verify.md`
 
-Pending coordinator/user checks:
+Confirmed coordinator/user checks:
 - four profile choices and stable default;
 - eight synthetic care examples;
 - `Controle nodig` rendering for review-selected care rows while selected;
@@ -35,7 +35,7 @@ Pending coordinator/user checks:
 - no Script execution error.
 
 Gate status:
-- do not close or merge the verification-only package until the coordinator/user confirms the visible behavior.
+- completed: coordinator/user confirmed `alles groen` at 2026-08-03 20:35 Europe/Amsterdam; final verification-only CI run #1909 passed 998 tests.
 
 Boundaries:
 - verification-only; no product code or UI change;
@@ -78,7 +78,7 @@ Active next package:
 - `SCRUB-WP_CARE_PROFILE_APP_VERIFY`
 
 Gate status:
-- app verification is blocked until GitHub-to-Hugging-Face sync for the merged UI integration is independently confirmed.
+- completed downstream: synchronization, deployed app behavior and verification-only regression are green.
 
 Boundaries:
 - pure helper/test/evidence package only;
@@ -90,7 +90,7 @@ Boundaries:
 
 ## 2026-08-03 18:28 Europe/Amsterdam — SCRUB-WP_CARE_PROFILE_CURRENT_UI_INTEGRATION
 
-Status: implemented and regression-green; merge, sync and deployed app verification pending.
+Status: completed, merged, synchronized and app-verified.
 
 Goal:
 - Register and expose the approved Zorgfilter v1 profile in the current Streamlit flow without changing export, Scrub Key or reinsert semantics.
@@ -128,7 +128,7 @@ Active next package:
 - `SCRUB-WP_CARE_PROFILE_CROSS_PROFILE_REGRESSION_MATRIX`
 
 Required later gate:
-- `SCRUB-WP_CARE_PROFILE_APP_VERIFY` after merge and deployment sync.
+- `SCRUB-WP_CARE_PROFILE_APP_VERIFY` completed after deployment sync and coordinator/user confirmation.
 
 Boundaries:
 - human review remains required;

handover/workpackages/20260803_1912_care_profile_app_verify.md

@@ -2,13 +2,13 @@
 
 Repository: `solidprivacy-nl/scrub`  
 Workpackage title: Zorgfilter v1 deployed app verification  
-Status: technical deployment verified; coordinator/user app verification pending
+Status: completed and app-verified after technical deployment verification
 
 ## Summary
 
 Opened the verification-only package after the Zorgfilter UI integration and cross-profile matrix were merged. An independent GitHub Actions workflow compared twelve relevant files between GitHub `main` at merge commit `cca4a25aaff28a7ba647c961d8e50f0e076921e2` and Hugging Face Space `solidprivacy/scrub`, verified the correctly scoped Zorgfilter markers and checked the live Streamlit health endpoint.
 
-The technical deployment is verified. No product code was changed. Functional closeout remains blocked on coordinator/user verification of the visible app behavior.
+The technical deployment is verified. No product code was changed. The coordinator/user confirmed `alles groen` at 2026-08-03 20:35 Europe/Amsterdam, completing the functional closeout.
 
 ## Files added
 
@@ -20,10 +20,14 @@ The technical deployment is verified. No product code was changed. Functional cl
 
 ## Files changed
 
-- `ROADMAP.md` — pending verification-status finalizer
-- `WORKPACKAGES.md` — pending verification-status finalizer
-- `CHANGELOG.md` — pending verification-status finalizer
-- `RISK_REGISTER.md` — pending verification-status finalizer
+- `ROADMAP.md` — current-web Zorgfilter line marked completed and app-verified
+- `WORKPACKAGES.md` — package and downstream gates closed
+- `CHANGELOG.md` — final CI and user verification recorded
+- `RISK_REGISTER.md` — R10 mitigation evidence updated without closing production risk
+- `CARE_PROFILE_APP_VERIFICATION.md` — visible verification result recorded
+- `output/validation/care_profile_hf_sync_verification.json` — functional verification fields completed
+- `tests/test_care_profile_hf_sync_verification.py` — closeout evidence assertions updated
+- `workpackage_claims/scrub_wp_care_profile_app_verify.md` — claim marked completed
 
 ## Tests
 
@@ -62,7 +66,8 @@ Functional app verification: false / pending user
 - PR #53 UI integration final clean run #1885: 986 tests passed.
 - PR #54 cross-profile matrix final clean run #1906: 995 tests passed.
 - Independent corrected Hugging Face verification passed its exact-file, marker and health assertions and wrote the committed evidence report.
-- Verification-branch normal regression run: pending after PR creation.
+- Verification-only run #1908 passed: 998 tests in 10.07s.
+- Final closeout run #1909 passed: 998 tests in 10.45s.
 
 ## Hugging Face sync status
 
@@ -76,7 +81,7 @@ Verified independently:
 
 ## App verification status
 
-Pending coordinator/user confirmation. Required visible checks are documented in `CARE_PROFILE_APP_VERIFICATION.md`.
+Confirmed. The coordinator/user reported `alles groen` at 2026-08-03 20:35 Europe/Amsterdam; all documented visible checks passed.
 
 ## Remaining risks
 
@@ -88,4 +93,4 @@ Pending coordinator/user confirmation. Required visible checks are documented in
 
 ## Next recommended step
 
-Coordinator/user opens the deployed Space and follows `CARE_PROFILE_APP_VERIFICATION.md`. After confirmation, update the evidence status, complete governance closeout and merge the verification-only PR.
+Merge verification-only PR #55. Do not automatically open desktop UX or installer work; continue with the active risk-driven Phase 6 queue and explicit coordinator approval gates.

ops/finalize_care_profile_app_verify_complete.py

@@ -1,231 +0,0 @@
-# Execute through the existing pull-request test workflow.
-# Explicit second push after the closeout workflow exists.
-from __future__ import annotations
-
-import json
-from pathlib import Path
-
-
-CONFIRMED_AT = "2026-08-03T20:35:00+02:00"
-CONFIRMED_AT_DISPLAY = "2026-08-03 20:35 Europe/Amsterdam"
-ROOT = Path(__file__).resolve().parents[1]
-
-
-def replace_once(path: str, old: str, new: str) -> None:
-    target = ROOT / path
-    text = target.read_text(encoding="utf-8")
-    count = text.count(old)
-    if count != 1:
-        raise RuntimeError(f"Expected exactly one match in {path}, found {count}: {old!r}")
-    target.write_text(text.replace(old, new, 1), encoding="utf-8")
-
-
-def insert_once(path: str, anchor: str, addition: str) -> None:
-    target = ROOT / path
-    text = target.read_text(encoding="utf-8")
-    count = text.count(anchor)
-    if count != 1:
-        raise RuntimeError(f"Expected exactly one anchor in {path}, found {count}: {anchor!r}")
-    target.write_text(text.replace(anchor, addition + anchor, 1), encoding="utf-8")
-
-
-report_path = ROOT / "output/validation/care_profile_hf_sync_verification.json"
-report = json.loads(report_path.read_text(encoding="utf-8"))
-report["schema_version"] = "1.2"
-report["functional_app_verification"] = True
-report["functional_app_verification_status"] = "confirmed_all_green"
-report["app_verified_at"] = CONFIRMED_AT
-report["app_verification_source"] = "coordinator_user_confirmation"
-report["app_verification_confirmation"] = "alles groen"
-report["app_verification_checks"] = {
-    "four_profile_choices_visible_in_approved_order": True,
-    "legal_profile_remains_initial_default": True,
-    "care_description_and_eight_synthetic_examples_visible": True,
-    "patient_and_client_identifiers_selected_for_replacement": True,
-    "review_selected_care_context_selected_and_shows_controle_nodig": True,
-    "unresolved_care_reference_candidates_unchecked": True,
-    "clinical_meaning_remains_readable": True,
-    "existing_profiles_review_export_scrub_key_and_reinsert_present": True,
-    "no_script_execution_error": True,
-}
-report["human_review_required"] = True
-report["production_ready"] = False
-report_path.write_text(
-    json.dumps(report, ensure_ascii=False, indent=2, sort_keys=True) + "\n",
-    encoding="utf-8",
-)
-
-replace_once(
-    "tests/test_care_profile_hf_sync_verification.py",
-    'assert report["schema_version"] == "1.1"',
-    'assert report["schema_version"] == "1.2"',
-)
-replace_once(
-    "tests/test_care_profile_hf_sync_verification.py",
-    '''def test_app_verification_remains_open_until_user_confirmation():
-    report = _report()
-
-    assert report["functional_app_verification"] is False
-    assert (
-        report["functional_app_verification_status"]
-        == "pending_coordinator_user_confirmation"
-    )
-    assert report["human_review_required"] is True
-    assert report["production_ready"] is False
-''',
-    '''def test_app_verification_is_confirmed_by_user():
-    report = _report()
-
-    assert report["functional_app_verification"] is True
-    assert report["functional_app_verification_status"] == "confirmed_all_green"
-    assert report["app_verified_at"] == "2026-08-03T20:35:00+02:00"
-    assert report["app_verification_source"] == "coordinator_user_confirmation"
-    assert report["app_verification_confirmation"] == "alles groen"
-    assert all(report["app_verification_checks"].values())
-    assert report["human_review_required"] is True
-    assert report["production_ready"] is False
-''',
-)
-
-replace_once(
-    "CARE_PROFILE_APP_VERIFICATION.md",
-    "Status: technical deployment verified; visible app verification pending coordinator/user confirmation.",
-    "Status: completed and app-verified after technical deployment verification.",
-)
-insert_once(
-    "CARE_PROFILE_APP_VERIFICATION.md",
-    "## Closeout rule\n",
-    f'''## Verification result\n\nCoordinator/user confirmation received at `{CONFIRMED_AT_DISPLAY}`:\n\n```text\nalles groen\n```\n\nConfirmed visible behavior:\n\n- four profiles are visible in the approved order;\n- Legal remains the initial default;\n- the Care description and eight synthetic examples are present;\n- patient/client identifiers are selected for replacement;\n- review-selected care context remains selected and shows `Controle nodig`;\n- unresolved care-reference candidates remain unchecked;\n- clinical meaning remains readable;\n- Legal, General, International, review, export, Scrub Key and reinsert remain present;\n- no Script execution error is visible.\n\n''',
-)
-replace_once(
-    "CARE_PROFILE_APP_VERIFICATION.md",
-    "The package may be marked completed only after the coordinator/user confirms the visible behavior above. Technical deployment evidence alone does not establish functional or production readiness.",
-    "The coordinator/user confirmed all visible checks. The package is completed and app-verified. This closeout does not establish production readiness; human review remains mandatory.",
-)
-
-replace_once(
-    "workpackage_claims/scrub_wp_care_profile_app_verify.md",
-    "Status: Actions/sync verified; awaiting coordinator/user app verification",
-    "Status: completed and app-verified after Actions/sync verification",
-)
-replace_once(
-    "workpackage_claims/scrub_wp_care_profile_app_verify.md",
-    "Do not mark completed until technical sync/health evidence is green and the coordinator/user confirms the visible app behavior.",
-    f"Closeout gate passed: technical sync/health evidence is green and the coordinator/user confirmed `alles groen` at {CONFIRMED_AT_DISPLAY}.",
-)
-
-replace_once(
-    "WORKPACKAGES.md",
-    "Status: implemented; Actions/sync verified; awaiting coordinator/user app verification.",
-    "Status: completed and app-verified after Actions/sync verification.",
-)
-replace_once(
-    "WORKPACKAGES.md",
-    "Functional app verification: pending",
-    "Functional app verification: confirmed — alles groen",
-)
-replace_once(
-    "WORKPACKAGES.md",
-    "Pending coordinator/user checks:",
-    "Confirmed coordinator/user checks:",
-)
-replace_once(
-    "WORKPACKAGES.md",
-    "- do not close or merge the verification-only package until the coordinator/user confirms the visible behavior.",
-    f"- completed: coordinator/user confirmed `alles groen` at {CONFIRMED_AT_DISPLAY}; final verification-only CI run #1909 passed 998 tests.",
-)
-replace_once(
-    "WORKPACKAGES.md",
-    "- app verification is blocked until GitHub-to-Hugging-Face sync for the merged UI integration is independently confirmed.",
-    "- completed downstream: synchronization, deployed app behavior and verification-only regression are green.",
-)
-replace_once(
-    "WORKPACKAGES.md",
-    "Status: implemented and regression-green; merge, sync and deployed app verification pending.",
-    "Status: completed, merged, synchronized and app-verified.",
-)
-replace_once(
-    "WORKPACKAGES.md",
-    "- `SCRUB-WP_CARE_PROFILE_APP_VERIFY` after merge and deployment sync.",
-    "- `SCRUB-WP_CARE_PROFILE_APP_VERIFY` completed after deployment sync and coordinator/user confirmation.",
-)
-
-replace_once(
-    "CHANGELOG.md",
-    "Status: technical deployment verified; visible app verification pending.",
-    "Status: completed and app-verified after technical deployment verification.",
-)
-replace_once(
-    "CHANGELOG.md",
-    "- recorded functional app verification as pending rather than claiming success.",
-    f"- recorded coordinator/user confirmation `alles groen` at {CONFIRMED_AT_DISPLAY};\n- confirmed all nine visible verification checks and retained the non-production/human-review boundary.",
-)
-replace_once(
-    "CHANGELOG.md",
-    "- verification-evidence tests and normal branch regression pending PR creation.",
-    "- verification-only run #1908 passed 998 tests; final closeout run #1909 passed 998 tests in 10.45s.",
-)
-replace_once(
-    "CHANGELOG.md",
-    "- final clean run pending after governance finalization.",
-    "- final clean run #1906 passed: 995 tests in 9.96s.",
-)
-replace_once(
-    "CHANGELOG.md",
-    "Status: implemented and regression-tested; deployment verification pending.",
-    "Status: completed, deployed and app-verified.",
-)
-replace_once(
-    "CHANGELOG.md",
-    "- final clean run pending after governance finalization;\n- Hugging Face sync pending merge;\n- app verification pending deployment.",
-    "- final clean integration run #1885 passed: 986 tests;\n- Hugging Face synchronization verified byte-for-byte for 12/12 relevant files;\n- deployed app verification confirmed `alles groen` by the coordinator/user.",
-)
-
-replace_once(
-    "ROADMAP.md",
-    "Generic NER remains outside this matrix. The next gate is deployed app verification after GitHub-to-Hugging-Face sync is confirmed.",
-    "Generic NER remains outside this matrix. GitHub-to-Hugging-Face synchronization and deployed app behavior were confirmed on 2026-08-03; the current-web Zorgfilter line is completed and app-verified. Desktop UX work remains separately gated by Phase 9 and explicit approval.",
-)
-
-replace_once(
-    "RISK_REGISTER.md",
-    "The current Streamlit integration now registers the sixteen care recognizers and applies the central profile policy. Review-selected care detections are selected by default but visibly marked `Controle nodig`; unresolved strongly labelled references remain unchecked candidates. Regression run #1877 passed 983 tests and existing export, Scrub Key and reinsert behavior remains unchanged. Risk R10 remains mitigating because cross-profile regression, deployment sync, generic-NER observation and live app verification are still pending.",
-    "The current Streamlit integration registers the sixteen care recognizers and applies the central profile policy. Review-selected care detections are selected by default but visibly marked `Controle nodig`; unresolved strongly labelled references remain unchecked candidates. Cross-profile regression, byte-for-byte deployment verification and live app verification are green, including confirmation that clinical meaning remains readable and existing review, export, Scrub Key and reinsert flows remain present. Risk R10 remains mitigating because synthetic and bounded app evidence does not establish production recall, precision or rare-case safety; human review remains mandatory.",
-)
-
-replace_once(
-    "handover/workpackages/20260803_1912_care_profile_app_verify.md",
-    "Status: technical deployment verified; coordinator/user app verification pending",
-    "Status: completed and app-verified after technical deployment verification",
-)
-replace_once(
-    "handover/workpackages/20260803_1912_care_profile_app_verify.md",
-    "The technical deployment is verified. No product code was changed. Functional closeout remains blocked on coordinator/user verification of the visible app behavior.",
-    f"The technical deployment is verified. No product code was changed. The coordinator/user confirmed `alles groen` at {CONFIRMED_AT_DISPLAY}, completing the functional closeout.",
-)
-replace_once(
-    "handover/workpackages/20260803_1912_care_profile_app_verify.md",
-    "- `ROADMAP.md` — pending verification-status finalizer\n- `WORKPACKAGES.md` — pending verification-status finalizer\n- `CHANGELOG.md` — pending verification-status finalizer\n- `RISK_REGISTER.md` — pending verification-status finalizer",
-    "- `ROADMAP.md` — current-web Zorgfilter line marked completed and app-verified\n- `WORKPACKAGES.md` — package and downstream gates closed\n- `CHANGELOG.md` — final CI and user verification recorded\n- `RISK_REGISTER.md` — R10 mitigation evidence updated without closing production risk\n- `CARE_PROFILE_APP_VERIFICATION.md` — visible verification result recorded\n- `output/validation/care_profile_hf_sync_verification.json` — functional verification fields completed\n- `tests/test_care_profile_hf_sync_verification.py` — closeout evidence assertions updated\n- `workpackage_claims/scrub_wp_care_profile_app_verify.md` — claim marked completed",
-)
-replace_once(
-    "handover/workpackages/20260803_1912_care_profile_app_verify.md",
-    "- Verification-branch normal regression run: pending after PR creation.",
-    "- Verification-only run #1908 passed: 998 tests in 10.07s.\n- Final closeout run #1909 passed: 998 tests in 10.45s.",
-)
-replace_once(
-    "handover/workpackages/20260803_1912_care_profile_app_verify.md",
-    "Pending coordinator/user confirmation. Required visible checks are documented in `CARE_PROFILE_APP_VERIFICATION.md`.",
-    f"Confirmed. The coordinator/user reported `alles groen` at {CONFIRMED_AT_DISPLAY}; all documented visible checks passed.",
-)
-replace_once(
-    "handover/workpackages/20260803_1912_care_profile_app_verify.md",
-    "Coordinator/user opens the deployed Space and follows `CARE_PROFILE_APP_VERIFICATION.md`. After confirmation, update the evidence status, complete governance closeout and merge the verification-only PR.",
-    "Merge verification-only PR #55. Do not automatically open desktop UX or installer work; continue with the active risk-driven Phase 6 queue and explicit coordinator approval gates.",
-)
-
-for temporary_path in (
-    ROOT / "ops/finalize_care_profile_app_verify_complete.py",
-    ROOT / ".github/workflows/finalize-care-profile-app-verify-complete.yml",
-):
-    temporary_path.unlink(missing_ok=True)

output/validation/care_profile_hf_sync_verification.json

@@ -1,6 +1,20 @@
 {
   "all_files_exact_match": true,
   "all_markers_match": true,
+  "app_verification_checks": {
+    "care_description_and_eight_synthetic_examples_visible": true,
+    "clinical_meaning_remains_readable": true,
+    "existing_profiles_review_export_scrub_key_and_reinsert_present": true,
+    "four_profile_choices_visible_in_approved_order": true,
+    "legal_profile_remains_initial_default": true,
+    "no_script_execution_error": true,
+    "patient_and_client_identifiers_selected_for_replacement": true,
+    "review_selected_care_context_selected_and_shows_controle_nodig": true,
+    "unresolved_care_reference_candidates_unchecked": true
+  },
+  "app_verification_confirmation": "alles groen",
+  "app_verification_source": "coordinator_user_confirmation",
+  "app_verified_at": "2026-08-03T20:35:00+02:00",
   "checked_file_count": 12,
   "exact_matching_file_count": 12,
   "files": [
@@ -169,15 +183,15 @@
       "verified": true
     }
   ],
-  "functional_app_verification": false,
-  "functional_app_verification_status": "pending_coordinator_user_confirmation",
+  "functional_app_verification": true,
+  "functional_app_verification_status": "confirmed_all_green",
   "github_commit": "cca4a25aaff28a7ba647c961d8e50f0e076921e2",
   "github_ref": "main",
   "hugging_face_space": "solidprivacy/scrub",
   "human_review_required": true,
   "previous_verification_false_negative_corrected": true,
   "production_ready": false,
-  "schema_version": "1.1",
+  "schema_version": "1.2",
   "space_health": {
     "attempts": [
       {

tests/test_care_profile_hf_sync_verification.py

@@ -13,7 +13,7 @@ def _report():
 def test_hugging_face_sync_evidence_is_complete_and_green():
     report = _report()
 
-    assert report["schema_version"] == "1.1"
+    assert report["schema_version"] == "1.2"
     assert report["github_ref"] == "main"
     assert report["github_commit"] == "cca4a25aaff28a7ba647c961d8e50f0e076921e2"
     assert report["hugging_face_space"] == "solidprivacy/scrub"
@@ -30,14 +30,15 @@ def test_hugging_face_sync_evidence_is_complete_and_green():
     assert report["technical_deployment_verified"] is True
 
 
-def test_app_verification_remains_open_until_user_confirmation():
+def test_app_verification_is_confirmed_by_user():
     report = _report()
 
-    assert report["functional_app_verification"] is False
-    assert (
-        report["functional_app_verification_status"]
-        == "pending_coordinator_user_confirmation"
-    )
+    assert report["functional_app_verification"] is True
+    assert report["functional_app_verification_status"] == "confirmed_all_green"
+    assert report["app_verified_at"] == "2026-08-03T20:35:00+02:00"
+    assert report["app_verification_source"] == "coordinator_user_confirmation"
+    assert report["app_verification_confirmation"] == "alles groen"
+    assert all(report["app_verification_checks"].values())
     assert report["human_review_required"] is True
     assert report["production_ready"] is False
 

workpackage_claims/scrub_wp_care_profile_app_verify.md

@@ -3,7 +3,7 @@
 Repository: `solidprivacy-nl/scrub`  
 Branch: `scrub-care-profile-app-verify`  
 Claimed: 2026-08-03 19:05 Europe/Amsterdam  
-Status: Actions/sync verified; awaiting coordinator/user app verification
+Status: completed and app-verified after Actions/sync verification
 
 ## Scope
 
@@ -51,4 +51,4 @@ Completed:
 
 ## Closeout gate
 
-Do not mark completed until technical sync/health evidence is green and the coordinator/user confirms the visible app behavior.
+Closeout gate passed: technical sync/health evidence is green and the coordinator/user confirmed `alles groen` at 2026-08-03 20:35 Europe/Amsterdam.