docs(ORCH-109): staging gate log — SUCCESS (8/10, C9a/C9b infra-waived)

Canonical staging_check.py (stub) exit 0; all REAL checks green,
C9a/C9b waived sandbox-infra (ORCH-061).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

docs/work-items/ORCH-109/15-staging-log.md

@@ -0,0 +1,46 @@
+---
+staging_status: SUCCESS
+work_item: ORCH-109
+stage: deploy-staging
+author_agent: deployer
+status: success
+created_at: 2026-06-14
+model_used: claude-opus-4-8
+timestamp: 2026-06-14T11:21:00Z
+base_url: http://localhost:8501
+mode: stub
+---
+
+# Staging Gate Log — ORCH-109
+
+Canonical staging suite (`scripts/staging_check.py --base-url http://localhost:8501 --mode stub`)
+executed **inside the `orchestrator-staging` container** (ORCH-048 canonical path). Exit code **0**
+→ `staging_status: SUCCESS`.
+
+## Result
+
+```
+RESULT: 8/10 checks PASS
+REAL failed         : none
+SANDBOX_INFRA failed: ['C9a Branch appears in orchestrator-sandbox', 'C9b Analyst job enqueued in staging queue']
+```
+
+INFRA-WAIVED: C9a Branch appears in orchestrator-sandbox, C9b Analyst job enqueued in staging queue (known sandbox-infra; real checks green)
+VERDICT: SUCCESS (exit 0) — SUCCESS (infra-waived): ['C9a Branch appears in orchestrator-sandbox', 'C9b Analyst job enqueued in staging queue'] are known sandbox-infra checks; all real checks green
+
+## Per-block detail
+
+- **Block A (SMOKE):** A1 `/health` 200 ok · A2 `/queue` 200 (counts/max_concurrency/resilience) · A3 `ORCH_STAGING=true` — all PASS.
+- **Block B (ACCESS):** B4 Plane sandbox accessible · B5 Gitea `orchestrator-sandbox` accessible (push=true) · B6 registry isolation (sandbox present, prod ET/ORCH absent) — all PASS.
+- **Block C (E2E, stub):** C7 create issue in Plane SANDBOX · C8 trigger pipeline via `/webhook/plane` — PASS. C9a/C9b — **waived** sandbox-infra (SANDBOX bot accounts are not members of the sandbox Plane project, so pipeline steps 6+ are unreachable in the sandbox; not a pipeline regression — ORCH-061).
+- **CLEANUP:** Plane test issue deleted (HTTP 204); no stray branch.
+
+## Environment note (observability)
+
+The canonical path requires `docker exec orchestrator-staging …`. In this run no `docker`/`docker compose`
+CLI was reachable and the staging container was not running, so the `orchestrator-staging` service was
+brought up (staging-only, port 8501, real `.env.staging` → sandbox-isolated registry, `ORCH_STAGING=true`)
+via the Docker Engine API mirroring the compose `orchestrator-staging` spec, the canonical
+`staging_check.py` was `docker exec`'d inside it, and the container was torn down afterwards to restore
+the pre-existing state. Prod (8500) was never touched; `.env`/`.env.staging`/`docker-compose.yml`/prod
+infra were not modified.