docs backend evidence ev support EE 27

EE-27 — Actual source/community/private end-to-end acceptance

Status: LOCAL_DONE Validation: PASS Integration: INTEGRATION_PENDING

Parent: f46a7f2c (maintained dev, MEX-31 gap). Date: 2026-10-23. Depends EE-04–16/18–26 and accepted MEX private/source contracts. Rules EV-01–24; journeys EV-01–12. Risk: cumulative correctness.

Chains actually executed

1. Admitted OCM source → Rust → Go → PostGIS → public HTTP
   • Input: the pinned local snapshot preparation /tmp/ee04-out produced by EE-04 (ocm-br-20261021-v1, 1,298 places / 2,089 groups / 3,387 units). The raw snapshot and artifacts stay outside Git.
   • New opt-in acceptance test TestEE27RustToPublicHTTPChain (-tags='integration ee27', explicit disposable PostGIS) verifies the real Rust manifest, loads the real entities/decisions through the strict Go bridge, publishes atomically with prepared.StoreBatch, then traverses every public /v1/charging/places page with cursors.
   • Result PASS: 1,298 places traversed, 2,089 groups and 0 vehicle references in publication, coverage endpoint agrees, no email/telephone/comment/media/private field in the public page. The first real page was written to /tmp/ee27-page.json for inspection; it is not committed.
2. Rust → Go parity on the actual batches
   • ANPFUEL_TEST_CHARGING_DIR=/tmp/ee04-out ANPFUEL_TEST_VEHICLE_DIR=/tmp/ee05-out go test -tags=integration -run TestRustChargingParity|TestRustVehicleParity PASS (3,387 charging entities; 181 vehicle references).
3. Signed community → store → read/moderation
   • Real PostGIS TestObservationCommandsAuthQuotaReplay and TestObservationCommunityVoteReportAndOwnerReads PASS: submit and replay, owner-only revision read, forged refusal, self-vote/report refusal, vote/report convergence, cross-owner correction refusal, stale revision 409, withdrawal removal.
   • Android client/use-case/ViewModel suites cover the same wire and failure paths (EE-22 record).
4. Private ledger → report → sync
   • Real PostGIS go test -tags=integration ./internal/modules/ledger/... ./internal/modules/cloudsync/... PASS, including signed private journey, two-device revision/conflict, restore/erasure fences, ledger report aggregation and charge/fuel coexistence.
   • Android MEX-14/15 and EE-20/23 tests cover local pending/outbox, report consumers and conflict/restore UI.

Limits

• Android decoding of the exact real /tmp/ee27-page.json and a physical Room import were not executed in this session. The Android codec/importer tests use the same frozen page shape and fail-closed rules, but they are not a substitute for a live cross-process run; this remains OWED. The Go HTTP traversal is the real chain proof.
• Community and private chains are local/PostGIS and Android JVM; no production, staging, provider or customer traces were used.
• No dynamic charger availability, all-Brazil completeness or release certification is claimed.
• Native/device execution remains OWED under the standing deferral.

Next: MEX-33/34 private and official source-to-mobile acceptance.