docs(problems): P042 → Verification Pending — Cloudflare Worker cut over (ADR 032, v2.6.12/13)

P042 (version-control the Cloudflare Worker via Terraform) is implemented,
deployed, and verified live (2026-05-25): worker imported in-place into TF
state, esbuild bundle + RAPIDAPI_KEY secret binding + fresh safeIps, ADR 016
Referer requirement removed. Transitions Open → Verification Pending directly
— P042 is a planned improvement task, not a defect, so the 'Known Error'
intermediate (diagnosed-bug-awaiting-fix) never applied (recorded in the
ticket's Fix Released / Lifecycle note for the audit trail).

Awaiting the 24h UptimeRobot observation window (shared verification gate with
P040) before close. README: P042 moved to a new Verification Queue section,
P044 added to rankings, Last-reviewed line refreshed. Risk 1/25.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: tompahoward

…-cloudflare-worker-via-terraform.open.md …dflare-worker-via-terraform.verifying.mddocs/problems/042-version-control-cloudflare-worker-via-terraform.open.md renamed to docs/problems/042-version-control-cloudflare-worker-via-terraform.verifying.md docs/problems/042-version-control-cloudflare-worker-via-terraform.open.md renamed to docs/problems/042-version-control-cloudflare-worker-via-terraform.verifying.md

@@ -1,11 +1,19 @@
 # Problem 042: Version-control the Cloudflare Worker via Terraform
 
-**Status**: Open
+**Status**: Verification Pending
 **Reported**: 2026-05-14
 **Priority**: 3 (Medium) — Impact: 3 x Likelihood: 1 (deferred — re-rate at next /wr-itil:review-problems)
 **Effort**: M (deferred — re-rate at next /wr-itil:review-problems)
 **Type**: technical
 
+## Fix Released
+
+- **Release marker**: v2.6.12 (worker cutover deploy) + v2.6.13 (clean green release); commit `4f26067`; deployed 2026-05-25.
+- **Fix**: the Cloudflare Worker is now version-controlled and Terraform-managed (ADR 032) — esbuild bundle, `cloudflare_workers_script` + route + `RAPIDAPI_KEY` secret binding, imported in-place into TF state (no edge outage). ADR 018 line 48/50/63 closed; ADR 016 Referer-header requirement removed.
+- **Lifecycle note**: P042 is a planned improvement task, not a defect, so it transitions `Open → Verification Pending` directly — the intermediate "Known Error" state (diagnosed-bug-awaiting-fix) never applied. (The transition skill's normal path is Open → Known Error → Verification Pending; that intermediate is skipped here as semantically inapplicable, recorded explicitly for the audit trail.)
+- **Exercise evidence (2026-05-25)**: live worker verified — module/bundle format, `RAPIDAPI_KEY` binding present, fresh `safeIps` (incl. `168.119.53.160`), `api.addressr.io`+Referer → 200 with real content, no-Referer → `no-origin not permitted`. Release pipeline green (2.6.13 deploy + smoke).
+- **Awaiting user verification**: the 24-hour UptimeRobot observation window — confirm the recurring 401 alerts cease (the verification gate shared with P040). Close P042 once that window is clean.
+
 ## Description
 
 Bring the Cloudflare Worker source described in ADR 018 (`cool-bush-ca66`, route bound to `api.addressr.io/*` and `cool-bush-ca66.addressr-key-provider.workers.dev`) into the repository as `worker.js` (or equivalent) and manage its deploy via the Cloudflare Terraform provider. Closes the "Bad" consequence at ADR 018 line 50 ("The worker is not version-controlled — it exists only in Cloudflare's platform") and the Reassessment Criterion at ADR 018 line 63 ("Version-controlling the worker script — currently only in Cloudflare dashboard").

docs/problems/README.md

@@ -1,6 +1,6 @@
 # Problem Backlog
 
-> Last reviewed: 2026-05-14 — Retro: P043 captured (wr-itil SID-helper fallback picks subagent UUID in multi-agent sessions; observed when capturing P042). BRIEFING.md gains diagnostic + workaround entry. P040 verified live via 6 probes; pending UR 24-hour observation window before user-initiated transition to verifying.
+> Last reviewed: 2026-05-25 — P042 → Verification Pending (Cloudflare Worker cut over to Terraform, ADR 032, v2.6.12/13 deployed + verified live); P044 captured (changesets swallows publish failure → deploy silently skips). P040 + P042 share the 24h UptimeRobot observation gate before close. WSJF re-rank deferred to next `/wr-itil:review-problems`.
 > Run `/wr-itil:review-problems` to refresh.
 
 ## WSJF Rankings
@@ -28,10 +28,19 @@
 | 2.5  | P023 | Cross-origin root `/` not browser-cached                              | 10 (High)  | Open        | L      | Multi-layer (origin CORS + RapidAPI gateway + SDK)                                             |
 | 1.5  | P039 | Decouple SaaS deployment from npm publish in release pipeline         | 3 (Low)    | Open        | M      | Captured 2026-05-14; deferred estimate; needs review-problems re-rank                          |
 | 1.5  | P041 | `/wr-itil:capture-problem` halts on pre-existing README drift         | 3 (Low)    | Open        | M      | Captured 2026-05-14; meta-ticket; deferred estimate                                            |
-| 1.5  | P042 | Version-control the Cloudflare Worker via Terraform                   | 3 (Low)    | Open        | M      | Captured 2026-05-14; structural follow-up to P040; pairs after option 2 worker patch lands     |
+| 1.5  | P044 | changesets/action swallows publish failure → deploy silently skips    | (defer)    | Open        | S      | Captured 2026-05-25; silent-green failure mode of the P039 publish-coupling                    |
 | 1.5  | P043 | `wr-itil` SID-helper fallback picks subagent UUID in multi-agent sess | 3 (Low)    | Open        | M      | Captured 2026-05-14 retro; upstream fix needed in @windyroad/itil; one-line bash workaround    |
 | 1.5  | P033 | Source-inspection tests are an anti-pattern in this codebase          | 6 (Medium) | Open        | L      | Deferred estimate; needs review-problems re-rank                                               |
 
+## Verification Queue
+
+<!-- VQ-SORT-DIRECTION: oldest-first per ADR-022 -->
+<!-- LIKELY-VERIFIED-CELL-SHAPE: evidence-based per P186 -->
+
+| ID   | Title                                               | Released   | Likely verified?  | Notes                                                                                    |
+| ---- | --------------------------------------------------- | ---------- | ----------------- | ---------------------------------------------------------------------------------------- |
+| P042 | Version-control the Cloudflare Worker via Terraform | 2026-05-25 | no — not observed | Worker cut over (ADR 032, v2.6.12/13); awaiting 24h UR observation (shared gate w/ P040) |
+
 ## Parked
 
 | ID   | Title                                                                   | Reason                                                            | Parked since |