Case Study #2 · Client-Zero / Internal Demonstration

Governed replacement — WRAP of the public workspace path

One bounded internal workflow: the buyer-facing Trust Ledger workspace entry. Failed verification, repair, independent re-check, founder promotion, and a live receipt — without Fortune-500 claims.

Verdict: PUBLIC_CLIENT_ZERO_PROOF_READY Decision: WRAP Not external customer production

What was being replaced or improved?

The public entry path www.noetfield.com/workspace was supposed to open the Trust Ledger Workspace. Before repair it presented as a static / mock path — buyers could not reach the real Next.js governance console from that CTA.

Why WRAP instead of RETAIN or full REPLACE?

Option	Verdict
Retain	Rejected — keeping a mock on a buyer workspace path was a critical product regression (incident closed 2026-07-07).
Replace	Deferred for this surface — full Pages host swap was larger than needed; the real console already existed as a deployable sandbox service.
Wrap	Selected — keep the public URL; proxy to the live governance-console sandbox with independent live gates.

Before → after architecture

BEFORE
Buyer → www /workspace → static HTML / mock markers
                         (no Next.js app shell)

AFTER (WRAP)
Buyer → www /workspace (edge proxy)
      → gov-sandbox-web (Next.js Trust Ledger Workspace)
      → gov-sandbox-api (/tle + APIs)
      → independent verify scripts (fail-closed)

Policies and acceptance criteria

Public /workspace must serve Next.js _next assets.
Must not contain nf-workspace-mock.
Public /tle must return HTTP 2xx.
Sandbox API health must identify governance-console-api.
No interactive downgrade of live client sandbox surfaces (R-012).

Failure → repair → verification

2026-07-06  FAIL
  Detected by: founder review + live path inspection
  Failure: static / mock workspace on buyer CTA path

2026-07-07  REPAIR + PROMOTE
  Repair: sandbox runtime deploy + www proxy enablement
  Independent gates: verify-www-live-sandbox · verify-gov-sandbox-railway
  Authority: founder closed incident after live PASS

2026-07-14  RE-PROOF (this publication)
  Live capture run_id: CS2-GISF-2026-07-14T005554Z
  Independent gates: PASS · PASS
  Workspace HTML sha256: 17ada9e28c7d59bb4b80e25f384ba96fe4d17142b042ba701884bd804c0ceeef

Promotion and measurable value

Who authorized promotion? Founder — incident closed 2026-07-07 after independent live PASS (not an agent self-PASS).

What value is demonstrated? The public workspace path serves the real Trust Ledger Workspace shell; mock markers are absent; independent gates exit 0 on the publication capture.

What is not claimed? Fortune-500 deployment, license-cost displacement, or external customer ROI. Engineering hours and dollar cost remain not measured.

Limitations and next proof

This is Client-Zero / Internal Demonstration only. Next proofs: measure hours/cost on a second candidate; run one bounded Replace (not only Wrap) with the same fail→repair→promote pattern; generate a concise outreach memo from this public pack.

Related offer page (narrative, not this proof): Governed Application Factory. Case Study #1: Noetfield self-audit.