# G09 real-production release record

Classification: **RELEASE**
Status: **DEFERRED_UNTIL_APP_FUNCTIONAL**
Entry for mobile: **G09-LOCAL integration**, not production certification.
Production prerequisite: **G24-ANDROID-COMMERCIAL functional Android acceptance**.
Certification scope: **Android/backend only; iOS DEFERRED_EXPLICIT_RESUME_ONLY**.
Historical multiplatform gate: **G18_NOT_ACCEPTED**.

User update 2026-10-01: [ADR-016](docs-adr-016-android-commercial-community-ios-deferred.md) scopes future Android/backend certification after commercial P19–P24 acceptance and explicitly archives iOS until a new request. Full production evidence remains mandatory.

Historical user decision dated 2026-09-30: real production starts only when the app is functional. [ADR-014](docs-adr-014-functional-app-before-production-release.md) supersedes the old P10 prohibition. This is neither COMPLETE nor RELEASE_CERTIFIED. Tracker: [release issue #13](https://github.com/AlexandreZanata/brazil-fuel-prices/issues/13); its number must match verified publication evidence.

## Source and local entry evidence

Baseline c51fa03f57b0c9f0a429e41c51bbd21ff2dcbb9c includes merged PR #10. Correction commit 8c5e795 has [local runtime evidence](docs-release-evidence-p09-local-runtime-validation.md), source fingerprint 48dc47514dba28cb4862c63611d75dd1bf6367e154036ec9c2a182070cfd2e8c. G09-LOCAL requires those corrections integrated by a protected, verified current-head phase PR. Local tests alone are LOCAL_DONE; this record does not infer merge or production readiness.

Historical candidate: 4ce5aaf79aa3bf8d8cf31c05635dfa2b30714556. [Original sign-off](docs-release-evidence-g09-historical-4ce5aaf.md) remains historical. Test services used this machine's IP, synthetic PostGIS/private S3 and internal-CA TLS; no real public server/provider was deployed.

## Remaining production conditions

1. **Fresh certification:** after G24-ANDROID-COMMERCIAL and all backend extension merges, select an immutable candidate with verified head/base checks and reconcile the complete expected-result manifest. Accounts/feedback, revised media retention, location controls and Android/shared API contracts are included; iOS-specific certification is deferred. Known critical failures cannot wait until this gate.
2. **Provisioned staging:** real private storage/edge compatibility, tested 24-hour physical deletion of every media copy, accepted capacity/load, off-host backup/restore with measured RPO/RTO, real deployment and rollback. Local mocks/internal CA are distinct evidence.
3. **Legal review:** revised notices, account/social data inventory, 24-hour photos, rights processing and processor terms reviewed before the public pilot.
4. **Wiki mirror:** allowlisted docs synchronized from the verified merged source, preserving manual pages; failed publication remains WIKI_PENDING.
5. Functional commercial Android G24, release-specific security/privacy/sign-off and support window accepted before public rollout. No automatic deployment/tag/GitHub Release follows integration.

Operator rollback uses compatible binaries and append-only migrations; never destructively downgrade the applied ledger. scripts/check-g09.sh validates this deferred classification and refuses unsupported certification claims. It is a record validator, not a runtime certifier.