release: freeze V1.2 demo acceptance 2026-10-25

docs/Phase-V12-Task3-Completion-Report.md

@@ -0,0 +1,37 @@
+# V1.2 Task 3 Completion Report
+
+## Status
+
+Completed
+
+## Implemented
+
+- Added operator manual onboarding endpoint: `POST /api/v1/operator/users`.
+- Added CSV preview and commit endpoints with required header validation.
+- Preview stores temporary CSV content in Redis and does not write user or batch rows.
+- Commit persists import batch and row outcomes, rejects duplicate/invalid rows individually, and uses a 24-hour operator/idempotency-key guard.
+- Added `user.create` permission and granted it to platform/organization administrators.
+- Review approval now updates `published_profile_revision`; rejection and need-edit keep the prior published revision.
+- Account issuance checks verified phone, approved and published profile, and two agreed consent records before creating a hash-only credential.
+- Added admin manual-create and CSV import pages.
+
+## Automated Tests
+
+```text
+mvn -B -f backend/pom.xml test "-Dtest=UserImportServiceTest,UserCredentialIssuanceTest,UserRegistrationServiceTest,V12MigrationContractTest,MigrationValidationTest,EntityMigrationParityTest,ReviewServiceTest"
+26 tests passed, 0 failures, 0 errors
+
+pnpm --dir admin-web type-check
+passed
+```
+
+## Not Verified
+
+- Clean PostgreSQL V001-V066 migration was not run.
+- Real account delivery channel is not connected; only a credential reference is returned.
+- Full admin browser workflow and CSV download of failed rows are not implemented.
+- End-to-end review-to-issuance flow still needs Task 4 consent/login integration.
+
+## Next Phase
+
+Task 4: password login, forced initial password change, service consent gates, and authenticated profile revision enforcement.