Final Verification Report: agent-data-test — 2026-03-24

1. Workflow Status (Full Listing)

Active (12)

#	Workflow	ID
1	Dependabot Updates	175230908
2	Lint Only	175485775
3	Agent E2E	177931620
4	Pass Gate	178229666
5	sync-secrets.yml	180165783
6	Guard Bootstrap Scaffold	186110591
7	Cleanup Artifacts (Preview)	186175090
8	Data Lifecycle	187310751
9	Semantic Release	187310753
10	Quality Gate	192754632
11	Deploy Agent Data to VPS	233947089
12	Vector Audit & Cleanup	244569412

Disabled (9)

#	Workflow	ID	Reason
1	Secrets Audit (Monitor)	180165784	Placeholder stub
2	terraform-apply-gated.yml	181510744	GCP gated apply, retired
3	Artifact Audit (Monitor)	181985296	Placeholder stub
4	Backup Terraform State	186175089	GCS tfstate backup, retired
5	Live E2E Tests	186760855	Targets old GCP infra
6	Live Frontend E2E Tests	195852288	Targets old GCP infra
7	Terraform Apply on Main	202356249	GCP infra apply on push, retired
8	Artifact Registry CD (DISABLED)	242861638	Legacy AR push, retired
9	S109: PostgreSQL Setup on VPS	244536611	One-time migration, completed

2. GCS/GCP Scan Results

Active code with gs:// references (LEGITIMATE — ingest feature)

• agent_data/server.py:718 — GCS URI ingest handler (if text.startswith("gs://"))
• mcp_server/stdio_server.py:302 — MCP tool description for ingest
• mcp_server/server.py:172 — MCP tool description for ingest
• docs/api/openapi.yaml:282 — API documentation

These are application features (the ingest endpoint accepts GCS URIs as input), NOT infrastructure dependencies.

Active workflows with GCP references

• cleanup-artifacts.yml — gcloud --version || true (harmless probe)
• deploy-vps.yml — terraform in rsync exclude list (not a dependency)
• lint-only.yml — terraform validate/plan jobs, but only triggered on terraform/** path changes (lines 6, 13). Won't fire since terraform/ is not being modified.

Legacy/disabled code with GCP references (not in production path)

• functions/ directory — retired Cloud Functions
• api-service/ — retired API service using Firestore
• tools/manage_sql.sh — retired Cloud SQL tool
• scripts/deploy_cloud_run.sh — retired
• terraform/ — retired infra-as-code
• Various E2E test files — reference old GCP setup
• lark-token-tester/ — retired token testing scripts

Firestore references

• scripts/import_firestore_to_pg.py — migration script (completed, keep for reference)
• tests/e2e/test_live_gcs_to_firestore.py — has firestore = None # S109: Firestore removed
• api-service/ — retired service

Conclusion: No active production code depends on GCP infrastructure. All GCS URIs in active code are input-handling features. Legacy GCP code exists but is not in the production runtime path.

3. Production Verification (3/3 PASS)

Test 1

• Health: healthy, services: qdrant ok (202ms), postgres ok (2.3ms), openai ok
• Data: 532 documents, 777 vectors, ratio 1.46, sync_status: ok
• Session Ready: PASS, attempts: 1, latency: 1994ms
• Search: 1 result

Test 2

• Health: healthy, all services ok
• Data: 532 documents, sync_status: ok
• Session Ready: PASS, attempts: 1, latency: 1937ms
• Search: 1 result

Test 3

• Health: healthy, all services ok
• Data: 532 documents, sync_status: ok
• Session Ready: PASS, attempts: 1, latency: 227ms (cached embedding)
• Search: 1 result

4. Conclusion

Repo is clean and production-stable.

• All GCP-dependent workflows disabled
• No secrets exposed in public repo
• 0 open PRs (was 34)
• Agent Data production: 3/3 healthy, session readiness working
• Legacy GCP code exists in repo history but doesn't affect production runtime

Future cleanup opportunities (not blocking)

• Remove functions/, api-service/, lark-token-tester/, terraform/ directories (retired GCP code)
• Remove tools/manage_sql.sh (Cloud SQL tool)
• Clean up terraform-related jobs in lint-only.yml (lines 100-295)