Qualify signed-in Kinetic mailbox and model journeys after deployment #54

Current queue disposition — 11 September 2026

Real Google OAuth, mailbox search, semantic indexing/search and reload persistence passed. Account switching/token refresh, compatibility-host and broader sender/digest/ranking qualification remain follow-ups.

This remains an open repository backlog issue. Its outstanding acceptance criteria are not marked complete. The owner-approved minimum-use review has moved it out of the immediate project queue; the original requirements below and existing README references are preserved. To resume, remove queue: excluded and unarchive the project card.

Completed release work — 8 September

• Rerun the isolated browser mailbox workflow: real account-scoped IndexedDB, synthetic mail/embeddings, distinct account cursors, colliding IDs and delayed prior-account responses.
• Publish the checked account-isolation repair from 6a4eb83. Worker version 99493f23-22e2-431e-9ae3-78cd2e732063, deployment d6eae844-69a4-4df3-a0ac-6aaa2e5d7a9f, 100% traffic. Prior production was 274233b.
• Correct current deployment runbooks to pnpm run deploy; bare pnpm deploy invoked pnpm's unrelated built-in command and failed before deployment.
• Reproduce a live discovery-routing regression: GET auth session and mailbox routes returned discovery 404s; advertised OpenAPI returned asset 404. Three exported-Worker tests failed on original source and pass with 210e6ad. Product APIs now bypass public discovery; discovery endpoints are handled before static assets.
• Full local quality and docs pass after routing repair: 103 tests, unchanged coverage/complexity gates, 45 Markdown files checked.
• Exact-source CI 34223394319 passed. Published 210e6ad as Worker c8900fd9-0d92-4973-b2dd-7e1509427081, deployment 1cd0620c-d582-4262-a00c-070fda259190, 100% traffic. In a separate logged-out browser context: health 200, auth session 200, mailbox 401, agent catalog 200 and OpenAPI 200 (3.1.0). Canonical public terms also renders correctly at 390px.

Remaining qualification

• Owner-assisted real Google OAuth completion and account switching. The canonical sign-in button reaches Google's account form; this does not prove callback completion. Owner sign-in is pending in the open Kinetic tab.
• Read/search/sender/digest journey on permitted mailbox data.
• Client ONNX ranking quality and model download behavior.
• Verify compatibility-host and canonical OAuth callback completion.

Gmail remains read-only. No compose, draft, reply, archive or delete features. No private messages or unsubscribe requests were accessed/performed during this release check. Synthetic local cache/API tests do not qualify live mailbox or model quality. Keep shareability false until the required evidence exists.

Actual browser model evidence — 8 September

• Run the actual MiniLM fp32 model on synthetic messages in an isolated Chrome browser. Model file 90,387,606 bytes; 384 finite normalized dimensions.
• Reproduce application CSP blocking the current HF model redirect and pinned ONNX runtime. Source repair 9e4cca9 permits the observed model host, exact runtime CDN path, and cached blob module factory. The new pnpm verify:browser-model passes with zero CSP violations. Full local quality passes (104 tests); docs pass (46 files). Exact CI 34225523012 passed; release and live verification completed below.
• Compare BGE small q8 on the same eight synthetic messages and ten queries: intended target first for 10/10, versus MiniLM missing three flight queries. BGE model file 34,014,426 bytes. This tiny corpus is diagnostic evidence, not broad ranking qualification. Receipt and interpretation are in docs/knowledge/learnings/browser-model-2026-09-08.md.
• Publish 9e4cca9 at 100%: Worker c94fa462-d536-4080-a12a-f51976d25e90, deployment c8acbcec-3c3e-4e33-884e-a871aaf4d56e. Live app policy verified, health/session 200 and mail 401. Deployed Transformers bundle plus app MiniLM fp32 settings produced 384 finite normalized dimensions from synthetic text in 6195 ms with zero CSP violations. Model disposed and test tab closed. This does not qualify signed-in indexing or real mail.
• Qualify broader retrieval examples before replacing MiniLM. The 9 September 16-message/18-query diagnostic scored MiniLM 16/18 and BGE 17/18; MiniLM remains current.
• Pin existing MiniLM revision and persist matching model/config identity; exclude legacy/foreign/malformed/sparse vectors, preserve emails and stale vectors as pending, and validate before reindex writes. Actual IndexedDB sync/reindex/reload and 124 tests pass. Released 24142fe; receipts below.
• Remove the implication that cosine similarity is a calibrated match probability. Released 24142fe uses a numeric Similarity label.

No model replacement or mailbox access occurred in this check. Shareability remains false.

Indexing cancellation repair — 8 September

• Reproduce four completion-accounting regressions: pre-cancelled and mid-inference cancellation claimed a whole batch, cancellation during persistence miscounted completed work, and zero-sized batches claimed no pending mail.
• Repair 451b699 counts successful writes only, checks cancellation before model loading and after inference, and leaves unprocessed mail pending. Six focused tests plus actual browser IndexedDB cancellation/retry pass. Full quality passes 110 tests with unchanged gates; 46 docs pass.
• Published 451b699 after CI 34226441025 passed. Worker b42e2e27-b358-4ee7-a338-f9cc9d4cbc69, deployment b2eb7176-344c-46f6-9a62-3ac37e6281e0, 100% traffic. Fresh guest browser loads the new index-QyIj82F-.js bundle; app/health/session 200 and mail 401. This is separate from remaining ranking and owner-login qualification.