docs(result): clarify Django dependency scope

.agent/results/codex/RESULT-CODEX-V2R1-PERSONAL-WEIXIN-B6B7-IMPLEMENT.md

@@ -0,0 +1,87 @@
+# Codex Result — V2R1 Personal-Weixin B6/B7 Implementation
+
+## Summary
+
+| Field | Value |
+|---|---|
+| Task | `TASK-CODEX-V2R1-PERSONAL-WEIXIN-B6B7-IMPLEMENT` |
+| Agent | Codex |
+| Status | `BLOCKED` |
+| Source commit | `d5b51e1342541bf51887782f530c3d2971155996` |
+| Source branch | `patch/v2r1-personal-weixin-b6b7-impl-20260715T115309UTC8` |
+| Result branch | `result/codex/v2r1-personal-weixin-b6b7-implement-blocked-20260715T041504Z` |
+| Result commit reference | `HEAD` |
+| Baseline | `V1R4C6` |
+| Release state | `PAUSED` |
+| production_changed | `false` |
+| B6/B7 business source changed | `false` |
+
+## Machine-Readable Result
+
+```yaml
+task_id: TASK-CODEX-V2R1-PERSONAL-WEIXIN-B6B7-IMPLEMENT
+agent: codex
+status: BLOCKED
+source_commit: d5b51e1342541bf51887782f530c3d2971155996
+source_branch: patch/v2r1-personal-weixin-b6b7-impl-20260715T115309UTC8
+result_branch: result/codex/v2r1-personal-weixin-b6b7-implement-blocked-20260715T041504Z
+result_commit_ref: HEAD
+baseline: V1R4C6
+release_status: PAUSED
+production_changed: false
+b6_b7_business_source_changed: false
+database_changed: false
+secrets_or_tokens_changed: false
+tags_changed: false
+tests_executed: false
+test_status: NOT_RUN
+test_reason: entrypoint_fail_closed_precondition_failed
+implementation_attempted: false
+```
+
+## Fail-Closed Precondition
+
+No B6/B7 business code was written or tested. A clean, detached temporary worktree at the source commit failed the entrypoint precondition. Tests cannot establish a deployable B7 path without a Portal framework, package inclusion, and isolated candidate image-build contract.
+
+## Exact Blockers
+
+1. `PORTAL_FRAMEWORK_ENTRYPOINT_ABSENT` — `portal/` has no approved executable project entrypoint: no `manage.py`, settings module, root URL configuration, ASGI entrypoint, or WSGI entrypoint. The only active-runtime dependency manifest, `active-runtime/pyproject.toml`, declares `dependencies = []`. Repository overlays may contain Django imports, but they are outside the exact B7 allowlist and cannot supply an approved Portal process. B7 permits Portal app files but no approved Portal project can register, authenticate, CSRF-protect, or serve them.
+2. `RUNTIME_PACKAGE_CONFIG_EXCLUDES_B7_NESTED_PACKAGE` — `active-runtime/pyproject.toml` declares `package-dir = {"" = "app"}` and `packages = ["aios_v2r1"]`, excluding `aios_v2r1.personal_weixin`. B7's exact 13-path allowlist excludes `active-runtime/pyproject.toml` and `active-runtime/app/aios_v2r1/personal_weixin/__init__.py`.
+3. `CANDIDATE_IMAGE_BUILD_CONTRACT_ABSENT` — no runtime/candidate `Dockerfile`, candidate compose file, image tag/digest contract, or build target exists. The only compose file is `deploy/gitea/docker-compose.yml` for the sole `gitea` service; B6 has no reproducible isolated candidate build/runtime boundary.
+
+## Evidence
+
+- `find` for `manage.py`, `settings.py`, `urls.py`, `wsgi.py`, and `asgi.py` returned no files.
+- The only active-runtime dependency manifest is `active-runtime/pyproject.toml`; it contains `dependencies = []` and `packages = ["aios_v2r1"]`. Repository overlays may contain Django imports, but those paths are outside the exact B7 allowlist.
+- `active-runtime/app/aios_v2r1/` has no `personal_weixin/` directory.
+- The only compose file is `deploy/gitea/docker-compose.yml`, declaring only `gitea/gitea:1.22`.
+- The B7 amendment's exact allowlist excludes runtime packaging, Portal bootstrap, and image-build files. The bootstrap manifest permits Phase A only and forbids runtime, production, database, secrets, tags, baseline, and controller/ChatGPT worktree changes.
+
+## Minimal Requested Scope Expansion
+
+Before implementation resumes, obtain an owner-approved allowlist amendment for these currently unapproved paths:
+
+```text
+active-runtime/pyproject.toml
+active-runtime/app/aios_v2r1/personal_weixin/__init__.py
+portal/manage.py
+portal/aios_portal/__init__.py
+portal/aios_portal/settings.py
+portal/aios_portal/urls.py
+portal/aios_portal/asgi.py
+portal/aios_portal/wsgi.py
+portal/personal_weixin/__init__.py
+portal/personal_weixin/apps.py
+portal/personal_weixin/migrations/__init__.py
+portal/personal_weixin/migrations/0001_initial.py
+openclaw/candidates/personal-weixin-r10/Dockerfile
+openclaw/candidates/personal-weixin-r10/compose.candidate.yaml
+```
+
+The amendment must name the candidate image build command and immutable image/digest handoff, the Portal process and root-URL owner, Django dependency/package-discovery changes, and durable-challenge database/migration owner. This is an authorization request, not implementation approval.
+
+## Tests and Release
+
+`tests_executed: false`. No tests were executed because the entrypoint fail-closed precondition failed before either a deployable B7 test target or B6 isolated candidate build target existed.
+
+Release remains **PAUSED** at baseline `V1R4C6`. No merge, production deployment, database mutation, secret/token operation, tag, baseline promotion, controller/ChatGPT worktree modification, or OpenClaw runtime change occurred.