docs(ORCH-009): staging gate log — SUCCESS (8/10, C9a/C9b infra-waived)

docs/work-items/ORCH-009/15-staging-log.md

@@ -0,0 +1,48 @@
+---
+staging_status: SUCCESS
+work_item: ORCH-009
+stage: deploy-staging
+author_agent: deployer
+status: success
+created_at: 2026-06-10
+model_used: claude-fable-5
+timestamp: 2026-06-10T13:07:10Z
+base_url: http://localhost:8501
+---
+
+# Staging Gate Log
+
+Staging test suite completed against the live staging environment
+(`orchestrator-staging`, 8501), run canonically inside the container
+(ORCH-048, ADR-001: `docker exec orchestrator-staging python3
+/repos/orchestrator/scripts/staging_check.py --base-url http://localhost:8501
+--mode stub`).
+
+**Verdict: SUCCESS** (exit code 0).
+
+## Results
+
+Result: 8/10 checks PASS. All REAL (pipeline) checks are green:
+
+- **Block A (SMOKE)**: A1 `/health` → 200 status=ok, A2 `/queue` → 200 with
+  counts/max_concurrency/resilience (incl. `serial_gate`, `coverage`,
+  `auto_labels`, `stop`, `bug_fast_track`, `lessons` blocks), A3
+  `ORCH_STAGING=true` — PASS
+- **Block B (ACCESS)**: B4 Plane sandbox accessible, B5 Gitea
+  `orchestrator-sandbox` accessible (push=true), B6 registry isolation
+  (sandbox present, prod ET/ORCH absent) — PASS
+- **Block C (E2E, mode=stub)**: C7 create issue in Plane SANDBOX (HTTP 201),
+  C8 trigger pipeline via `/webhook/plane` (HTTP 200, accepted) — PASS;
+  cleanup completed (Plane issue deleted, HTTP 204)
+
+REAL failed: none.
+
+The two failed checks (C9a/C9b) are known sandbox-infra checks (they depend on
+SANDBOX bot accounts being project members, not on the pipeline) and were
+waived per ORCH-061 (`staging_infra_tolerance_enabled=True`); the script still
+exited 0 fail-closed because every REAL check is green.
+
+```
+INFRA-WAIVED: C9a Branch appears in orchestrator-sandbox, C9b Analyst job enqueued in staging queue (known sandbox-infra; real checks green)
+VERDICT: SUCCESS (exit 0) — SUCCESS (infra-waived): ['C9a Branch appears in orchestrator-sandbox', 'C9b Analyst job enqueued in staging queue'] are known sandbox-infra checks; all real checks green
+```