photoanalyzer/delivery_backlog/stories/US07-01-donor-archive.md

US07-01 — Complete Donor Migration and Freeze the CLI Archive

Epic: E07

As a maintainer, I want all useful legacy behavior resolved and original CLIs frozen with provenance so production has one implementation without losing historical evidence.

Acceptance criteria

• Every in-scope donor-ledger row has a target, characterization test, parity result, and documented intentional delta where applicable.
• Remaining CSV state is migrated and reconciled into SQLite with a report.
• Original sources, docs, dependency lock, schema/config notes, version, and checksums are placed in the read-only legacy archive with secrets removed.
• Production imports and runtime paths cannot load or execute archived scripts.

Automated tests

• Ledger/archive lint verifies completeness, checksums, redaction, and non-importability.
• Full parity and database migration/reconciliation suites pass.

Dependencies

• E01–E06 complete