Current capability and evidence
Reviewed October 14, 2026 against the product implementation ledger and Alchemy deployment/binding contract. These are development docs, not a stable release or production-readiness claim. Current live bindings are recorded in the service map.
Evidence levels
- Source/local: implementation and local tests/runtime checks; not hosted acceptance.
- Bound/deployed: provider configuration includes the resource/binding; not proof the consumer works.
- Hosted qualified: a recorded real provider/browser/Git check for a bounded scenario.
- Ready/degraded/disabled: the running installation's capability state, which can change independently of historical proof.
Current bounded capabilities
| Capability | Evidence | Remaining boundary |
|---|---|---|
| Artifacts Git, source/history, public discovery | Bounded hosted Git/API/browser proof | Full forge parity, public writes and global scale |
| Native issues, PRs, reviews, collaboration | Source/local plus scoped hosted increments | Every adapter and role combination is not complete |
| Container tests and private reports | Exact-source passing/failing, denial/revocation hosted evidence | Full Actions/GitLab compatibility and general triggers |
| Clef advice and scoped proposals | Retained hosted Workers AI acceptance; GLM 5.3 Flash proposal passed tests | Advisory only; demo proposals edit approved calc.py only |
| Static and bounded app previews | Hosted protected R2/WfP, isolated D1/R2/Secrets Store checks | Arbitrary app builds/bindings, interactive QA and production CD |
| Preview environment policy | Hosted branch/version/lifetime/concurrency proof | Renewal/automatic/app-policy acceptance, immediate policy-change revocation |
| Native standard merge | Hosted merge + independent Git fetch/fsck | Ancestor-base only; no squash/diverged/fork/draft/locked merge |
| Repository values | Hosted exact-commit approval and secret-to-step masked output | Transformed-value masking, rotation, agent/customer-runner value release |
| Email Service | Retained provider acceptance after subscription/consent | Inbox delivery, bounce/reply/complaint and unsubscribe lifecycle |
| Webhooks | Hosted signatures and delivery; retained Slack test accepted | Full receiver/event/retry matrix and external guarantees |
| Managed image registry | Hosted job publication and digest evidence | Broader scanning/trust policy remains open |
| Native release assets / discussion attachments | Worker/workerd/D1/R2/browser source/local proof | Hosted acceptance; bounded 256 KiB files, no general package registry |
| Browser Run | Hosted script-free static PNG | Interactive app QA and wide load |
| Analytics / maintenance | Bindings and local checks; live Cron/analytics defects | Hosted ingest/collection; Cron delivery recovery |
| Portable Forgejo foundation | Fresh Compose/provider slices plus one-node Kubernetes core runtime proof | Retained migration fidelity, public ingress/TLS, multi-node failover, coordinated recovery and production HA |
Still required
Full native/portable feature parity, protected merge, broad production promotion/rollback, all harnesses, complete imports, multi-tenant/customer identity, quotas/fairness, disaster recovery and measured production scale remain open. KV, Hyperdrive/PlanetScale, Vectorize/AI Search, Workers Builds, CI SDK, Event Subscriptions, Tunnel and VPC are not current native dependencies.
Authority
The product ledger owns exact runnable evidence. product-authority.json records this content review revision; older detailed reference guides name their own source snapshots. The generated api/golf/v1 contract remains API authority. Do not treat an old source receipt as a proof for the current provider/deployment.
No repository CI workflows are added. Documentation builds, route checks and visual checks run locally; site deployment does not verify new product roadmap tasks.