Docs: STATUS.json and README match production (2026-09-23)

OP OpenVibers committed 23 Sept 2026 · 0e0b593a96 · 2 files, +5 −3

Changes

ddiff --git a/README.md b/README.md
iindex 1fd447f..5e478a3 100644
---- a/README.md
++++ b/README.md
@@@ -202,8 +202,10 @@ test/public-surface.test.js, test/structure.test.js
  - A new developer goes from account creation to a working Media, event and capability
    integration using only public documentation, the SDK and scoped credentials: the platform path
    was verified in production on 2026-09-23 (see
--  [How the platform works](#how-the-platform-works-for-a-sandbox-app)); `npm run e2e` walks it with
--  these examples.
++  [How the platform works](#how-the-platform-works-for-a-sandbox-app)) by a curl script against the
++  public endpoints, not by the SDK or these examples, and that script is not committed to any
++  repository yet. `npm run e2e` walks three of the nine examples along the same path; it has not
++  been run against production. **Partly met.**
  - No example needs a loopback-only internal key or first-party database access: **yes**, enforced
    by `test/public-surface.test.js`.
  
ddiff --git a/STATUS.json b/STATUS.json
iindex 2da88a2..f8f4ae2 100644
---- a/STATUS.json
++++ b/STATUS.json
@@@ -8,7 +8,7 @@
    "contracts": "openvibe-contracts v0.28.0 (mod-manifest example)",
    "ci": "every example's smoke test runs on Node 22.22.1 against openvibe-sdk/testing's mock platform (developer-app rules for Events, Media and Tools as in production) plus a local Chat WebSocket mock; none reaches the network",
    "e2e": "npm run e2e runs media-uploader, event-subscriber (pull) and tool-job against the real platform with a sandbox app's OV_CLIENT_ID/OV_CLIENT_SECRET/OV_PROJECT_ID; on demand only, not in CI or npm test; not run against production as part of this release",
--  "platform": "sandbox developer path (projects, sandbox grants, app tokens for openvibe.media/events/tools, Media project tenant, Events app.<project_key>.* events, Tools jobs, CORS-open discovery) verified in production on 2026-09-23 by the platform's W20 exit check",
++  "platform": "sandbox developer path (projects, sandbox grants, app tokens for openvibe.media/events/tools, Media project tenant, Events app.<project_key>.* events, Tools jobs, CORS-open discovery) verified in production on 2026-09-23 by the platform's W20 exit check (a curl script against the public endpoints, not the SDK or these examples; not committed to a repository)",
    "not_working": [
      "no consent screen; no refresh tokens or identity for apps",
      "/oauth/token is not CORS-open: browser apps exchange codes server-side",

diff --git a/README.md b/README.md

index 1fd447f..5e478a3 100644

--- a/README.md

+++ b/README.md

@@ -202,8 +202,10 @@ test/public-surface.test.js, test/structure.test.js

- A new developer goes from account creation to a working Media, event and capability

integration using only public documentation, the SDK and scoped credentials: the platform path

was verified in production on 2026-09-23 (see

- [How the platform works](#how-the-platform-works-for-a-sandbox-app)); `npm run e2e` walks it with

- these examples.

+ [How the platform works](#how-the-platform-works-for-a-sandbox-app)) by a curl script against the

+ public endpoints, not by the SDK or these examples, and that script is not committed to any

+ repository yet. `npm run e2e` walks three of the nine examples along the same path; it has not

+ been run against production. **Partly met.**

- No example needs a loopback-only internal key or first-party database access: **yes**, enforced

by `test/public-surface.test.js`.

diff --git a/STATUS.json b/STATUS.json

index 2da88a2..f8f4ae2 100644

--- a/STATUS.json

+++ b/STATUS.json

@@ -8,7 +8,7 @@

"contracts": "openvibe-contracts v0.28.0 (mod-manifest example)",

"ci": "every example's smoke test runs on Node 22.22.1 against openvibe-sdk/testing's mock platform (developer-app rules for Events, Media and Tools as in production) plus a local Chat WebSocket mock; none reaches the network",

"e2e": "npm run e2e runs media-uploader, event-subscriber (pull) and tool-job against the real platform with a sandbox app's OV_CLIENT_ID/OV_CLIENT_SECRET/OV_PROJECT_ID; on demand only, not in CI or npm test; not run against production as part of this release",

- "platform": "sandbox developer path (projects, sandbox grants, app tokens for openvibe.media/events/tools, Media project tenant, Events app.<project_key>.* events, Tools jobs, CORS-open discovery) verified in production on 2026-09-23 by the platform's W20 exit check",

+ "platform": "sandbox developer path (projects, sandbox grants, app tokens for openvibe.media/events/tools, Media project tenant, Events app.<project_key>.* events, Tools jobs, CORS-open discovery) verified in production on 2026-09-23 by the platform's W20 exit check (a curl script against the public endpoints, not the SDK or these examples; not committed to a repository)",

"not_working": [

"no consent screen; no refresh tokens or identity for apps",

"/oauth/token is not CORS-open: browser apps exchange codes server-side",