Evidence¶
This page is the current proof pack for MageLift claims. The capability matrix is the summary; a cell is certified only when that matrix and a file here agree. Older attempt logs live in git history, not on this site.
Evidence files map to per-provider catalog cell IDs (certification-aws,
certification-gcp, certification-ovh, certification-scaleway). KEEP rows
are not certified until destroy plus orphan assert succeed.
Sealed JSONL for gencertdocs is under runs/. Maintainers seal candidates with magelift certification seal before publishing a new row here. Replace a file when a newer run is the current proof; do not append a ledger.
Certified Magento¶
| Claim | Current proof | Not claimed |
|---|---|---|
| AWS ECS Fargate Magento 2.4.9 preview, signed digest, seed import, runtime health, destroy | 20260813ai | ALB HTTP 200, custom-domain TLS, HA, DR |
| GCP GKE Autopilot Magento 2.4.9 preview catalog, Magento HTTP 200, destroy | gcap28 | GKE Standard, HA, or release-wide Adobe cache intersection |
gcap29 was a retained Autopilot KEEP on the same 2.4.9 digest. Destroy
emptied the prefix; it still does not replace
gcap28. See
gcap29. There is no signed
2.4.8-p5 image in that account (not-run).
Experimental (bounded)¶
| Claim | Current proof | Not claimed |
|---|---|---|
| AWS ECS Fargate packed KEEP (amazon-mq, AOSS, Aurora, HA), destroy | awsba | Certified-row replacement for 20260813ai; Managed Instances; EKS |
| AWS ECS Fargate packed (amazon-mq, provisioned OpenSearch, Aurora, HA), destroy | mlaw1 | Certified-row replacement for 20260813ai; AOSS/serverless; Managed Instances; EKS |
AWS ECS Managed Instances Magento KEEP (queueMode:db), destroy |
awsmi | Certified Managed Instances; mix with Fargate/ASG providers; EKS |
GCP GKE Autopilot preview-env loop (base 13/13, pr-999 lifecycle, guards, teardown) |
mldp7 | CI-generated workflow live run; multi-region previews |
| GCP operator verbs (health, logs, exec + deploy rejection, cost, reconcile) plus expired-YAML destroy, zero leftovers | mldp8 | Complete store upgrade (the deploy result was a rejection guard, not a full upgrade); GCP live unit prices; RDS/OpenSearch/MQ live shapes; live SQL delete |
AWS EKS Auto Mode Magento KEEP (queueMode:rabbitmq, search disabled), destroy |
awsek | Certified EKS; managed-node-groups / self-managed / EKS Fargate; OpenSearch |
| AWS EKS self-managed Magento 2.4.9, ELB HTTP, teardown | 20260817bf | Node loss, zone loss, edge, EKS as a certified target |
| GCP GKE Standard Magento 2.4.9 with Memorystore Valkey 9.0 | 20260815 | Public HTTP/TLS, HA, certified target |
| GCP GKE Standard HA Magento known-content (pod/node/zone loss) | gcha36 | Physical zone outage, regional DR, certified target |
| Scaleway Kapsule infrastructure-only | 2026-09-15 | Magento runtime (not-run), HA |
| OVH MKS infrastructure-only | 2026-08-12 | Magento runtime (not-run), HA |
| AWS CloudFront Magento-safe WAF | 2026-08-13 | EKS edge |
| AWS CloudFront alias HTTPS | 2026-08-13 | Magento origin |
| GCP URL-map failover HTTPS | 20260817bl | Magento origin, Armor, failback |
| Fastly adapter TLS/purge | 2026-08-13 | Magento origin, Magento edge certification |
| New Relic EU operations | 2026-08-13 | Provider collector composition |
| AWS VPC+RDS brownfield adopt | 2026-08-02 | Cloud SQL attach |
| GCP Cloud SQL known-row restore | 2026-08-15 | Regional DR |
| AWS Aurora known-row restore | 2026-08-17 | HA/DR |
Withheld¶
| Why | Proof |
|---|---|
Cloud Armor GA import drops Magento requestBodiesToExclude |
20260813af |
| AWS X-Ray Magento traces | typed unsupported: no ObservabilityAdapter registers X-Ray; YAML nativeProvider: xray is typed unavailable. An EKS IAM snippet is not a Magento cell. |
| Schema-mismatch rollback refuses when Magento epochs differ | gcap28 leftover |
| rc19-proof HTTP 500 was import-before-upgrade; owned resources deleted | 2026-09-22 |
Provenance notes¶
runs/gcp-operator-verbs-mldp8-20260915.sealed.jsonl: the original seal committed in77ae916(Order-12) was void on 2026-09-16. Forensics found all 13 cellrecordDigestvalues invalid at commit (the line-14 cleanup record verified; the other five sealed bundles verify; the sealing code is unchanged since). No field-subset variant reproduces the recorded digests, so the original seal inputs are unrecoverable. Content was corroborated against the independent live-run record: artifact digestsha256:8588b13f…fdb2be4, seedmagento-249-sanitized-definer-free.sql.gz, and the 13 PASS / 1 SKIP counts in mldp8 and the Order-12 verification report. The bundle was re-attested withmagelift certification seal(SealJSONL); only the 13 stale digests changed. The original attestation is void. This reseal is a new attestation over verified content, not a blessing of the original seal.