# M15 v2.0 certification evidence

## Reference host and method

Current CI reference host: Linux 7.1.4, Python 3.14.6, 12 CPUs. Certification uses a deterministic synthetic metadata workload: 100 jobs, 1,000,000 declared entries, and 100,000 cataloged backups with 10 TiB **logical** bytes per backup. It does not claim a physical 10 TiB transfer.

`m15-scale-report.json` records 100,000 backup inserts in 0.57 s, a 100-row deep pagination query in 0.004209 s, and a 5.32 MB SQLite fixture.

## Capability certification

```text
python tools/assert_capabilities.py --release v2.0 \
  --include local,ssh,restore,webhook,email \
  --exclude postgresql,mysql,tar_download
```

Passed. The released contract exposes `local`, `ssh`, `restore`, `webhook`, and `email`; PostgreSQL, MySQL, and TAR download remain disabled.

SSH is private-key-only and requires a dedicated forced-SFTP chroot account; no password, shell, or remote-command path is released.

## Remaining certification gates

Run the full project, container E2E, SSH live integration, fault/security/leakage suites, and review the synthetic workload boundaries before a release commit is created.