docs mobile p38 t01 code regression

P38-T01 — Integrated code journey regression

Status: LOCAL_DONE on codex/phase-38-app-acceptance. Task: P38-T01. Scope: Explore → station/community → free login → capture/review → queued status → comment/vote/report → deletion/export-where-implemented, with empty city, no price, bad auth, offline/restart, revoked identity, media expiry, migration/search and server outage. No device run; end manual/device batch stays OWED.

Regression sweep (one pass, failures retained — none occurred)

• Backend unit (affected P34–P37 contracts): go test ./internal/platform/apicontract/... ./internal/platform/health/... ./internal/modules/directory/... ./internal/modules/account/... ./internal/modules/identity/... ./internal/modules/feedback/... ./internal/modules/moderation/... ./internal/modules/evidence/... ./internal/modules/privacy/... → all ok (0 failures).
• Backend real-PostGIS integration (-tags=integration, disposable 127.0.0.1:5434): health + directory + account + feedback + moderation + evidence + privacy → every package ok, zero non-ok lines (400 invalid-lat / 404 unknown-UUID honesty, deletion-revocation atomicity, vote/report replay, expiry jobs all green).
• Android: ./gradlew :domain:test :application:test :data:testDebugUnitTest :app:testDebugUnitTest :app:assembleDebug --no-daemon → BUILD SUCCESSFUL (89 tasks). Covers: UUID discovery/cache/fallback (P35), staging origin guard + auth + discussion wiring (P36), contextual capture + outbox submit (P37), plus untouched legacy suites (search, ANP browsing, OCR, outbox, moderation, onboarding — no regressions).
• Contracts: vacuum lint PASS (0 errors, 27 informs, 97/100); apicontract PASS. git diff --check PASS; scan-secrets.sh PASS.
• Live (no bypass): staging curl 60 on health/ready/nearby (Fortinet middlebox CA, per P34-T01); server JSON UNVERIFIED, no -k/ trust-all/HTTP fallback anywhere in data/src/main.

Journey coverage (code-level, live owed)

• Explore/list/nearby/detail with UUIDs + last-known recovery: unit + ViewModel suites green; live reads BLOCKED_LIVE.
• Free login/session/key flows + denial/replay/revocation/deletion: backend + app suites green; provider delivery/device callbacks OWED.
• Capture/review with station context + outbox submit + worker retry: suites green; camera/low-end encode/device recovery OWED.
• Ratings/comments/replies/votes/reports on UUID targets + abuse matrices: suites green; device-level discussion proof OWED.
• Export: contract frozen, implementation OWED (P36-T03 decision).
• Media: 24h all-copy matrix green in isolation; live path BLOCKED_MEDIA (no attached VPS storage).

Limits and next

• No failures to retain; no thresholds reduced, no skips added, no errors suppressed. Owed live/device/provider/media rows are listed, not waived.
• Next: P38-T02 consolidated end manual matrix (plan only, no runs until all selected source phases complete).