docs(ORCH-102): staging gate log — SUCCESS (8/10, C9a/C9b infra-waived)

docs/work-items/ORCH-102/15-staging-log.md

@@ -0,0 +1,36 @@
+---
+staging_status: SUCCESS
+work_item: ORCH-102
+stage: deploy-staging
+author_agent: deployer
+status: success
+created_at: 2026-06-11
+model_used: claude-opus-4-8
+timestamp: 2026-06-10T21:39:20Z
+base_url: http://localhost:8501
+---
+
+# Staging Gate Log
+
+Staging test suite completed. Canonical run **inside** the `orchestrator-staging` container
+(8501) via the Docker exec API (`scripts/staging_check.py --base-url http://localhost:8501
+--mode stub`). Exit code **0** → `staging_status: SUCCESS`.
+
+All REAL checks green. The only two failures are the known sandbox-infra checks C9a/C9b
+(depend on SANDBOX bot accounts being project members, not on the pipeline) and are
+waived under ORCH-061 tolerance (`staging_infra_tolerance_enabled=True`).
+
+```
+INFRA-WAIVED: C9a Branch appears in orchestrator-sandbox, C9b Analyst job enqueued in staging queue (known sandbox-infra; real checks green)
+VERDICT: SUCCESS (exit 0) — SUCCESS (infra-waived): ['C9a Branch appears in orchestrator-sandbox', 'C9b Analyst job enqueued in staging queue'] are known sandbox-infra checks; all real checks green
+```
+
+## Results
+- **Block A (SMOKE)**: PASS — A1 `/health` 200 ok, A2 `/queue` 200 with counts/max_concurrency/resilience, A3 `ORCH_STAGING=true`.
+- **Block B (ACCESS)**: PASS — B4 Plane sandbox accessible, B5 Gitea `orchestrator-sandbox` push=true, B6 registry isolation (sandbox present, prod ET/ORCH absent).
+- **Block C (E2E, mode=stub)**: C7 create issue PASS, C8 trigger pipeline PASS; C9a/C9b FAIL → **waived** (sandbox-infra, ORCH-061).
+
+RESULT: 8/10 checks PASS. REAL failed: none. SANDBOX_INFRA failed (waived): C9a, C9b.
+
+> Note: ORCH-102 is a docs+tests-only change (`src/**`/compose/Dockerfile/`scripts/**` untouched);
+> the staging gate is run as the mandatory self-hosting safety net before prod deploy.