feat(access): complete visitor lifecycle and unify blueprint status

[JnyRoad]

Changes

Admission revocation and deletion entrypoints could remove local authorization relationships before devices confirmed revocation, while visitor checks and manual authorization did not consistently cover current eligibility and direct-connected devices. This change completes the requested lifecycle scope and preserves unresolved device outcomes for follow-up.

• Make admission revocation and reliable operation acceptance transactional; fence older ADD work, compensate late success, and prevent stale events from restoring terminal applications.
• Harden supplier soft deletion, certificate matching and concurrent eligibility checks. Visitor verification and entry/exit registration use real fellow/application identity and recheck validity at registration.
• Support public-person manual authorization across ISC, DIRECT and mixed targets, with frozen credentials, validity windows, route locking and operation-key progress.
• Persist ISC events before acknowledgment; add idempotent platform receipts, independent retries, instance-scoped reconciliation cursors and consecutive-page backfill.
• Retain employee, departure-card and supported vehicle relationships until trusted receipts permit precise cleanup; track reliable operations in automatic-deletion reports.
• Add incremental schema scripts and configuration examples. Normalize all 47 blueprint entries around one status ledger, collapsible historical plans and 16 deployment upgrade groups.

Validation

Previously executed against this implementation: 664 selected backend tests (zero failures/errors/skips), plus 4 actual SQLite 3.25.2 tests, 47 Web tests and 14 App tests. Evidence and suite details are in specs/012-reliable-auth-batch/continuation-validation.md and continuation-test-results.json.

The final documentation update passed unique-ID/link checks, 47-entry status/history consistency, inline JavaScript syntax, deterministic generation and git diff --check. Business tests were not rerun for the documentation-only follow-up.

Deployment prerequisites and remaining scope

• Do not enable by upgrading Java alone: the full production AUTH engine schema must first be prepared and validated against the target Oracle metadata. Test-resource schemas are not approved production migrations. Apply the relevant incremental scripts and validate park/instance/device routes before enabling feature and scheduler switches.
• Historical ISC reconciliation remains disabled by default. Real Oracle migration, ISC protocol/device receipts, PDA/NFC hardware, load and production deployment are not verified by this PR.
• Secret-exam integration, vehicle manual authorization and the complete 5.8 reconciliation/capacity scope remain incomplete. Unsupported ISC vehicle outcomes retain evidence and relationships. Empty ISC download details remain VERIFYING; central authorization listings are not proof of device-side absence.
• Application rollback must preserve operations, inbox events, receipts and audit records. See the blueprint upgrade index and continuation report for per-feature configuration and migration ordering.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 9a7a5497-73d0-4c6c-9421-4a985d0e1088

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[JnyRoad]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review skipped: 259 files exceed the limit of 100.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.