# MC 102165 — Bilko PR #186 Deploy Evidence

# Bilko PR #186 deploy evidence — MC #102165

Generated: 2026-05-26T15:30Z

## Source
- PR #186: https://github.com/johnatbasicas/bilko/pull/186
- PR HEAD reviewed: `c06e9ead2e2f69d5296f5990376fa511b07b13c0`
- Merge commit deployed: `d44d5e349645406ec629fc32d4d3e15b3595c127`
- Redzo review: `/tmp/redzo-review-pr186-102092-20260526T1505Z/review.md` — `VERDICT: APPROVE`, `DEPLOY_RECOMMENDATION: YES`
- Prior validation: `/tmp/alai/bilko-pr186-validation-102092-20260526T141818Z/VALIDATION-REPORT.md`

## Stage deploy
- Cloud Build: `67576e62-97b0-4dab-bca1-6f754a8e56a3`
- Status: `SUCCESS`
- Commit: `d44d5e349645406ec629fc32d4d3e15b3595c127`
- Stage web revision: `bilko-web-stage-00177-58c`
- Stage API revision: `bilko-api-stage-00339-huz`
- Stage web image: `europe-north1-docker.pkg.dev/tribal-sign-487920-k0/bilko/web:stage-d44d5e3@sha256:7516eb5061d54ab81a38be980347d78914d5ac2ebef5f87c3ed2fe28bdda2780`
- Stage API image: `europe-north1-docker.pkg.dev/tribal-sign-487920-k0/bilko/api:stage-d44d5e3@sha256:7bdd2994d5b9e24abb28878f8af6a1fdba1f982d4a7987603c903aa499d58843`
- Cloud Build gates: sanity, web build/push, API build/push, Trivy API image, DB migration, stage deploy, smoke, stage promotion all `SUCCESS`.

## Demo promotion
- Candidate API revision: `bilko-api-demo-00194-yay`, tag `candidate-d44d5e3`
- Candidate web revision: `bilko-web-demo-00069-nev`, tag `candidate-d44d5e3`
- Promoted to 100% traffic:
  - `bilko-api-demo-00194-yay`
  - `bilko-web-demo-00069-nev`
- Previous 100% rollback revisions captured before promotion:
  - API: `bilko-api-demo-00102-jh6`
  - Web: `bilko-web-demo-00067-vud`

## Verification
- Local mandatory pre-dispatch Docker build: `/tmp/alai/bilko-pr186-deploy-102165-20260526T1512Z/04-local-web-docker-build.log` — passed.
- Stage curl smoke: `/tmp/alai/bilko-pr186-deploy-102165-20260526T1512Z/11-stage-smoke-curl.log` — web 200, API health 200, CORS OPTIONS 200.
- Candidate demo smoke: `/tmp/alai/bilko-pr186-deploy-102165-20260526T1512Z/15-demo-candidate-capabilities-smoke.json` — login 200, HR market capabilities 200, honest provider blocks preserved.
- Deploy Gate: `/tmp/evidence-102165/browser-verification.json` — `all_passed: true`, `flows_passed: 2`, `flows_tested: 2`.
- Deploy Gate screenshots: `/tmp/evidence-102165/browser-screenshots/`
- Public smoke: `/tmp/alai/bilko-pr186-deploy-102165-20260526T1512Z/18-public-smoke.json` — pass.

## Public smoke highlights
- `https://bilko-demo.alai.no/login?country=HR` → HTTP 200
- `https://bilko-demo-api.alai.no/api/v1/health` → HTTP 200
- `https://app.bilko.cloud/` → HTTP 200
- `https://api.bilko.cloud/api/v1/health` → HTTP 200
- `https://app.bilko.company/` → HTTP 200
- `https://app.bilko.io/` → HTTP 200
- Demo HR login via API → HTTP 200, `organization.country=HR`
- `/api/v1/market/capabilities` → HTTP 200 with `EINVOICE_SUBMIT=BLOCKED_PROVIDER`, `EMAIL_SEND=NOT_IMPLEMENTED`.

## Notes
- No fake eRačun/banking/OCR/email/payroll claim was introduced; public capability API still blocks provider-backed submit/send without provider evidence.
- Deploy Gate console errors contained one expected unauthenticated `401` while checking auth redirect; no failed flows.