feat(plating): close 2 workflow gaps surfaced by workforce E2E simulation

Built a comprehensive simulator (scripts/fp_e2e_workforce.py) that
role-plays 10 employees driving an order quote → invoice using real
operator timers (button_start / button_finish with elapsed time.sleep).

Initial run: 31 PASS / 2 WARN / 0 FAIL exposed two gaps that would
hurt a real shop:

**Gap 1 — Thickness readings never reached the CoC**
The Fischerscope readings inspectors take during post-plate inspection
had no path to the CoC. The cert came out empty, useless for AS9100
or aerospace audits.

Fixes:
- New tablet endpoint `/fp/shopfloor/log_thickness_reading` so the
  inspector can record one reading at a time during the inspection WO
  (auto-numbers, defaults the operator, supports microscope image).
- mrp_production._fp_mark_done_post_actions now bulk-links any
  orphan thickness readings (those with production_id=mo.id but no
  certificate_id) to the freshly-created CoC. So inspectors can log
  during inspection AND the cert PDF picks them up automatically.

**Gap 2 — Operator queue leaked other people's work + simulator missed it**
fusion.plating.operator.queue.build_for_user pulled EVERY ready /
in-progress WO regardless of assignment. Tom would see John's masking
WO in his "Up Next" list — bad for aerospace traceability where you
want strict per-operator accountability.

Fix: build_for_user now filters MRP WOs by
`(x_fc_assigned_user_id == user_id OR x_fc_assigned_user_id == False)`.
Operators see their own assigned tasks first, plus any unassigned
tasks anyone can grab. Other operators' assigned WOs no longer leak
through.

Also caught: simulator was using wrong field name on the queue model.
Fixed and added a "queue isolation" check that verifies no operator
sees another operator's assigned WOs.

After fixes: **39 PASS / 2 WARN / 0 FAIL** (out of 41 checks).
Remaining WARNs are both expected behaviour:
  - bake-window auto-create: this coating doesn't require_bake_relief
    (the recipe has an inline Oven step instead)
  - first-piece gate: same — coating-driven, only fires when needed

Areas validated end-to-end:
- quote → SO with PO# carried into client_order_ref
- SO confirm → MO + portal job auto-created
- receiving qty prefill + accept
- 9 WOs generated from recipe + assigned to specific operators
- All 9 WOs ran with real elapsed timers + 17 productivity records
  across 4 distinct operators
- MO done triggers CoC auto-issue with 5 thickness readings linked,
  319 KB rich PDF, customer-slug filename
- Delivery auto-created with prefilled date + driver + CoC link
- Delivery delivered, 2 chain-of-custody entries
- Invoice posted (NOT auto-paid)
- All 5 customer notifications fired (so_confirmed +
  parts_received + mo_complete + shipped + invoice_posted) with
  correct attachments
- Portal job → complete, SO workflow_stage → invoicing
- Chemistry log persisted, operator proficiency tracked

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

fusion_plating/fusion_plating_bridge_mrp/__manifest__.py

@@ -5,7 +5,7 @@
 
 {
     "name": "Fusion Plating — MRP Bridge",
-    'version': '19.0.6.2.0',
+    'version': '19.0.6.3.0',
     'category': 'Manufacturing/Plating',
     'summary': 'Bridge Fusion Plating facilities, baths and tanks to Odoo MRP work orders.',
     'description': """

fusion_plating/fusion_plating_bridge_mrp/models/mrp_production.py

@@ -600,6 +600,19 @@ class MrpProduction(models.Model):
                     if not coc_cert:
                         coc_cert = Certificate.create({**base_vals, 'certificate_type': 'coc'})
 
+                # Pull in any thickness readings the inspector logged
+                # against this MO so they show up on the CoC PDF.
+                # Aerospace/Nadcap customers require these — without them
+                # the cert is just a piece of paper.
+                ThicknessReading = self.env.get('fp.thickness.reading')
+                if coc_cert and ThicknessReading is not None:
+                    orphan_readings = ThicknessReading.search([
+                        ('production_id', '=', mo.id),
+                        ('certificate_id', '=', False),
+                    ])
+                    if orphan_readings:
+                        orphan_readings.write({'certificate_id': coc_cert.id})
+
                 # Skip thickness cert when CoC also wanted — the CoC
                 # template already embeds thickness readings, so creating
                 # a separate thickness cert just produces a duplicate PDF.

fusion_plating/fusion_plating_shopfloor/__manifest__.py

@@ -5,7 +5,7 @@
 
 {
     'name': 'Fusion Plating — Shop Floor',
-    'version': '19.0.14.1.0',
+    'version': '19.0.14.2.0',
     'category': 'Manufacturing/Plating',
     'summary': 'Shop-floor tablet stations, QR scanning, bake window enforcer, '
                'first-piece inspection gates.',

fusion_plating/fusion_plating_shopfloor/controllers/shopfloor_controller.py

@@ -256,6 +256,75 @@ class FpShopfloorController(http.Controller):
             'duration': wo.duration,
         }
 
+    # ----------------------------------------------------------------------
+    # Thickness reading — Fischerscope log entry from inspection station
+    # ----------------------------------------------------------------------
+    @http.route('/fp/shopfloor/log_thickness_reading', type='jsonrpc', auth='user')
+    def log_thickness_reading(self, production_id, nip_mils=None,
+                              ni_percent=None, p_percent=None,
+                              position_label=None, reading_number=None,
+                              equipment_model=None, calibration_std_ref=None,
+                              microscope_image=None,
+                              microscope_image_filename=None):
+        """Record a single Fischerscope reading against an MO.
+
+        Auto-links to the CoC certificate later when the MO is marked
+        done (see mrp_production._fp_mark_done_post_actions). Keeps the
+        endpoint simple so the inspector can fire-and-forget per reading.
+        """
+        Reading = request.env.get('fp.thickness.reading')
+        if Reading is None:
+            return {'ok': False, 'error': 'Certificates module not installed'}
+        mo = request.env['mrp.production'].browse(int(production_id))
+        if not mo.exists():
+            return {'ok': False, 'error': f'MO {production_id} not found'}
+
+        # Auto-number if caller didn't pass one.
+        if not reading_number:
+            existing = Reading.search_count([('production_id', '=', mo.id)])
+            reading_number = existing + 1
+
+        vals = {
+            'production_id': mo.id,
+            'reading_number': int(reading_number),
+            'nip_mils': float(nip_mils or 0.0),
+            'ni_percent': float(ni_percent or 0.0),
+            'p_percent': float(p_percent or 0.0),
+            'position_label': position_label or '',
+            'operator_id': request.env.user.id,
+        }
+        if equipment_model:
+            vals['equipment_model'] = equipment_model
+        if calibration_std_ref:
+            vals['calibration_std_ref'] = calibration_std_ref
+        # If the inspector snapped a microscope image, attach it.
+        if microscope_image:
+            import base64 as _b64
+            att = request.env['ir.attachment'].create({
+                'name': microscope_image_filename or f'thickness_{reading_number}.jpg',
+                'datas': microscope_image,
+                'res_model': 'fp.thickness.reading',
+                'mimetype': 'image/jpeg',
+            })
+            vals['microscope_image_id'] = att.id
+
+        # Auto-link to existing CoC if one already exists for this MO.
+        Cert = request.env.get('fp.certificate')
+        if Cert is not None:
+            existing_cert = Cert.search([
+                ('production_id', '=', mo.id),
+                ('certificate_type', '=', 'coc'),
+            ], limit=1)
+            if existing_cert:
+                vals['certificate_id'] = existing_cert.id
+
+        reading = Reading.create(vals)
+        return {
+            'ok': True,
+            'reading_id': reading.id,
+            'reading_number': reading.reading_number,
+        }
+
     # ----------------------------------------------------------------------
     # Quality hold — partial qty split
     # ----------------------------------------------------------------------

fusion_plating/fusion_plating_shopfloor/models/fp_operator_queue.py

@@ -81,11 +81,22 @@ class FpOperatorQueue(models.TransientModel):
             })
 
         # ----- MRP work orders (if fusion_plating_bridge_mrp installed) -----
+        # Show two buckets, in this order:
+        #   1) WOs explicitly assigned to this operator (their named tasks)
+        #   2) WOs with NO assignment (open for any operator to grab)
+        # Skip WOs assigned to OTHER operators — strict per-aerospace
+        # accountability (no one should "borrow" someone else's job).
         MrpWO = self.env.get('mrp.workorder')
         if MrpWO is not None:
-            wo_domain = [('state', 'in', ('ready', 'progress'))]
+            base = [('state', 'in', ('ready', 'progress'))]
             if facility_id:
-                wo_domain.append(('workcenter_id.x_fc_facility_id', '=', facility_id))
+                base.append(('workcenter_id.x_fc_facility_id', '=', facility_id))
+            assignment_filter = (
+                '|',
+                ('x_fc_assigned_user_id', '=', user_id),
+                ('x_fc_assigned_user_id', '=', False),
+            ) if 'x_fc_assigned_user_id' in MrpWO._fields else ()
+            wo_domain = list(assignment_filter) + base
             work_orders = MrpWO.search(wo_domain, order='sequence, date_start')
             for wo in work_orders:
                 rows.append({

fusion_plating/scripts/fp_e2e_workforce.py

@@ -0,0 +1,591 @@
+# -*- coding: utf-8 -*-
+"""Comprehensive E2E simulator — workforce edition.
+
+Role-plays each employee touching a job from quote → invoice. For
+each work order:
+  • The assigned operator clocks in (button_start)
+  • Real time elapses (time.sleep)
+  • Chemistry / quality data is logged where relevant
+  • The operator clocks out (button_finish)
+
+Then audits:
+  • Per-WO duration captured (mrp.workorder.duration)
+  • mrp.workcenter.productivity records exist with operator user
+  • Chemistry log entries on bath
+  • Certificate state, attachment, thickness readings
+  • Chain-of-custody entries on delivery
+  • Notification log with attachment names
+  • Portal job final state + SO workflow_stage
+
+Findings printed at the end as PASS/FAIL/WARN — each FAIL/WARN is a
+gap that needs fixing before this can ship to a real shop floor.
+"""
+from datetime import datetime
+import time
+import base64
+
+env = env  # noqa  injected by odoo shell
+from odoo import fields  # noqa
+
+
+def banner(label):
+    print(f'\n{"="*76}\n  {label}\n{"="*76}')
+
+
+def step(actor, action):
+    print(f'  → [{actor:<14}] {action}')
+
+
+def show(label, value):
+    print(f'      {label:<32} {value}')
+
+
+FINDINGS = []
+
+
+def finding(level, area, msg):
+    """level: PASS | WARN | FAIL"""
+    FINDINGS.append((level, area, msg))
+    sym = {'PASS': '✓', 'WARN': '⚠', 'FAIL': '✗'}[level]
+    print(f'      {sym} {level:<5} [{area}] {msg}')
+
+
+stamp = datetime.now().strftime('%y%m%d-%H%M%S')
+
+# =====================================================================
+banner(f'PHASE 0 — Set up cast of employees ({stamp})')
+# =====================================================================
+
+# Reuse existing users when present so we don't bloat the DB on reruns.
+# Each persona gets a real res.users so with_user() exercises permission
+# checks the way an operator would experience them on the iPad.
+PERSONAS = {
+    'sandra':  ('Sandra Kim',     'Sales rep / estimator'),
+    'carlos':  ('Carlos Reyes',   'Receiving clerk'),
+    'hannah':  ('Hannah Patel',   'Production planner / manager'),
+    'john':    ('John Murphy',    'Masking operator'),
+    'maria':   ('Maria Lopez',    'Rack / handler'),
+    'tom':     ('Tom Wright',     'Plater'),
+    'ana':     ('Ana Silva',      'De-mask / clean'),
+    'frank':   ('Frank Bauer',    'QC / inspector'),
+    'dave':    ('Dave Chen',      'Driver'),
+    'linda':   ('Linda Brown',    'Accounting'),
+}
+
+users = {}
+mgr_group = env.ref('fusion_plating.group_fusion_plating_manager', raise_if_not_found=False)
+op_group = env.ref('fusion_plating.group_fusion_plating_operator', raise_if_not_found=False)
+internal_group = env.ref('base.group_user')
+for key, (name, desc) in PERSONAS.items():
+    login = f'fp_{key}'
+    u = env['res.users'].search([('login', '=', login)], limit=1)
+    if not u:
+        u = env['res.users'].sudo().create({
+            'name': name,
+            'login': login,
+            'email': f'{login}@enplating.example',
+            'group_ids': [(6, 0, [internal_group.id])],
+        })
+    # Put managers in the manager group, operators in the operator group
+    extra = mgr_group if key in ('hannah',) else op_group
+    if extra and extra not in u.group_ids:
+        u.sudo().write({'group_ids': [(4, extra.id)]})
+    users[key] = u
+    # Make sure each has an hr.employee record (proficiency tracking
+    # writes to employee records).
+    emp = env['hr.employee'].search([('user_id', '=', u.id)], limit=1)
+    if not emp:
+        emp = env['hr.employee'].sudo().create({
+            'name': name,
+            'user_id': u.id,
+        })
+    show(f'{key:<8}', f'{u.name} ({desc}) — uid={u.id}, emp={emp.id}')
+
+# =====================================================================
+banner('PHASE 1 — Sandra builds a quote (estimator)')
+# =====================================================================
+
+customer = env['res.partner'].sudo().create({
+    'name': f'Beacon Aerospace {stamp}',
+    'company_type': 'company',
+    'email': f'orders-{stamp}@beacon.example',
+    'phone': '+1-416-555-0199',
+    'street': '500 University Ave',
+    'city': 'Toronto', 'zip': 'M5G 1V7',
+    'country_id': env.ref('base.ca').id,
+})
+
+step('SANDRA', f'Receives RFQ from {customer.name}')
+
+rfq = env['fusion.plating.quote.request'].with_user(users['sandra']).sudo().create({
+    'partner_id': customer.id,
+    'contact_name': 'Procurement',
+    'contact_email': customer.email,
+    'company_name': customer.name,
+    'part_description': '<p>40 housings, AMS 2404, 50µin ENP, rush.</p>',
+    'quantity': 40,
+    'state': 'new',
+})
+show('RFQ', f'{rfq.name}')
+
+step('SANDRA', 'Builds configurator quote with PO# and override price')
+coating = env['fp.coating.config'].search([], limit=1)
+part_cat = env['fp.part.catalog'].search([], limit=1)
+po_number = f'PO-BCN-{stamp}'
+quote = env['fp.quote.configurator'].with_user(users['sandra']).sudo().create({
+    'partner_id': customer.id,
+    'part_catalog_id': part_cat.id,
+    'coating_config_id': coating.id,
+    'quantity': 40,
+    'po_number_preliminary': po_number,
+    'estimator_override_price': 3200.00,
+    'rush_order': True,
+})
+result = quote.with_user(users['sandra']).sudo().action_create_quotation()
+so = env['sale.order'].browse(result.get('res_id'))
+show('SO', f'{so.name} ({so.amount_total:,.2f})')
+finding('PASS' if so.client_order_ref == po_number else 'FAIL',
+        'quote→SO PO#', f'client_order_ref="{so.client_order_ref}"')
+
+# =====================================================================
+banner('PHASE 2 — Customer accepts → SO confirm → auto-MO + portal job')
+# =====================================================================
+
+step('CUSTOMER', 'Accepts quote — Sandra confirms SO')
+so.with_user(users['sandra']).sudo().action_confirm()
+finding('PASS' if so.state == 'sale' else 'FAIL', 'SO confirm', f'state={so.state}')
+
+mo = env['mrp.production'].search([('origin', '=', so.name)], limit=1)
+finding('PASS' if mo else 'FAIL', 'auto-MO', mo.name if mo else 'MISSING')
+if mo and mo.state == 'draft':
+    mo.with_user(users['hannah']).sudo().action_confirm()
+finding('PASS' if mo and mo.state == 'confirmed' else 'WARN',
+        'MO confirm', f'state={mo.state if mo else "n/a"}')
+
+job = mo.x_fc_portal_job_id if mo else False
+finding('PASS' if job else 'FAIL', 'portal job', job.name if job else 'MISSING')
+
+# =====================================================================
+banner('PHASE 3 — Carlos receives parts')
+# =====================================================================
+
+step('CARLOS', 'Logs receiving — 40 housings in 2 boxes from FedEx')
+recv = env['fp.receiving'].with_user(users['carlos']).sudo().create({
+    'partner_id': customer.id,
+    'sale_order_id': so.id,
+    'received_date': fields.Datetime.now(),
+    'expected_qty': 40,
+    'carrier_name': 'FedEx',
+    'carrier_tracking': f'FX{stamp}',
+    'line_ids': [(0, 0, {
+        'description': '40 stainless aero housings',
+        'expected_qty': 40,
+        'received_qty': 40,
+    })],
+})
+finding('PASS' if recv.received_qty == 40 else 'FAIL',
+        'receiving prefill', f'expected={recv.expected_qty} received={recv.received_qty}')
+
+step('CARLOS', 'Inspects → accepts')
+recv.with_user(users['carlos']).sudo().action_start_inspection()
+recv.with_user(users['carlos']).sudo().action_accept()
+finding('PASS' if recv.state == 'accepted' else 'FAIL',
+        'receiving accept', f'state={recv.state}')
+
+# =====================================================================
+banner('PHASE 4 — Hannah plans the job')
+# =====================================================================
+
+step('HANNAH', 'Assigns recipe + generates work orders')
+recipe = env['fusion.plating.process.node'].search(
+    [('node_type', '=', 'recipe')], limit=1)
+mo_h = mo.with_user(users['hannah']).sudo()
+if not mo_h.x_fc_recipe_id:
+    mo_h.x_fc_recipe_id = recipe.id
+    mo_h._generate_workorders_from_recipe()
+n_wos = len(mo.workorder_ids)
+finding('PASS' if n_wos > 0 else 'FAIL', 'WOs generated', f'{n_wos} work orders from {recipe.name}')
+
+# Map operations to operators by station/role hints
+WO_OPERATORS = {
+    'masking':    'john',
+    'racking':    'maria',
+    'ready':      'maria',
+    'plating':    'tom',
+    'enickel':    'tom',
+    'nickel':     'tom',
+    'demask':     'ana',
+    'de-mask':    'ana',
+    'clean':      'ana',
+    'rinse':      'ana',
+    'inspect':    'frank',
+    'qc':         'frank',
+}
+
+step('HANNAH', 'Assigns each WO to a specific operator')
+assignments = []
+for wo in mo.workorder_ids:
+    name_l = (wo.name or '').lower()
+    operator_key = None
+    for kw, k in WO_OPERATORS.items():
+        if kw in name_l:
+            operator_key = k
+            break
+    operator_key = operator_key or 'john'  # fallback
+    op_user = users[operator_key]
+    wo.sudo().x_fc_assigned_user_id = op_user.id
+    assignments.append((wo, op_user, operator_key))
+    show(f'  WO {wo.id}', f'"{wo.name}" → {op_user.name}')
+
+assigned_count = sum(1 for w, _, _ in assignments if w.x_fc_assigned_user_id)
+finding('PASS' if assigned_count == n_wos else 'FAIL',
+        'WO assignment', f'{assigned_count}/{n_wos} have x_fc_assigned_user_id')
+
+# =====================================================================
+banner('PHASE 5 — Operators run their work orders (REAL-TIME timers)')
+# =====================================================================
+
+# Pick a bath for the plating step so chemistry logging has somewhere
+# to land.
+bath = env['fusion.plating.bath'].search([], limit=1)
+if bath:
+    show('test bath', f'{bath.name} (id={bath.id})')
+
+batch = None  # will hold the rack batch if batch model is present
+FpBatch = env.get('fusion.plating.batch')
+if FpBatch is not None and recipe:
+    step('HANNAH', 'Creates a rack batch for the plating step')
+    batch_vals = {'production_id': mo.id, 'part_count': 40}
+    if bath:
+        batch_vals['bath_id'] = bath.id
+    facility = env['fusion.plating.facility'].search([], limit=1)
+    if facility:
+        batch_vals['facility_id'] = facility.id
+    try:
+        batch = FpBatch.with_user(users['hannah']).sudo().create(batch_vals)
+        show('batch', f'{batch.name}')
+    except Exception as e:
+        finding('WARN', 'batch create', str(e))
+        batch = None
+
+WO_DURATIONS_BEFORE = {wo.id: wo.duration for wo in mo.workorder_ids}
+
+for wo, op_user, op_key in assignments:
+    actor = PERSONAS[op_key][0].split()[0].upper()
+    step(actor, f'Picks up "{wo.name}" on iPad — taps START')
+    wo_op = wo.with_user(op_user).sudo()
+    started_state = wo_op.state
+    try:
+        if wo_op.state in ('pending', 'waiting', 'ready'):
+            wo_op.button_start()
+    except Exception as e:
+        finding('WARN', f'WO start ({op_key})', f'{wo.name}: {e}')
+        continue
+    show(f'  state', f'{started_state} → {wo_op.state}')
+
+    # Real-time work — sleep 2s for non-plating, 4s for plating
+    work_seconds = 4 if 'plating' in (wo.name or '').lower() else 2
+    show(f'  working...', f'{work_seconds}s elapsed')
+    time.sleep(work_seconds)
+
+    # Tom logs chemistry mid-bath
+    if 'plating' in (wo.name or '').lower() and bath and op_key == 'tom':
+        step(actor, 'Logs bath chemistry while plating')
+        params = env['fusion.plating.bath.parameter'].search([], limit=2)
+        if params:
+            log = env['fusion.plating.bath.log'].with_user(op_user).sudo().create({
+                'bath_id': bath.id,
+                'shift': 'day',
+                'notes': 'Mid-bath check during E2E run',
+                'line_ids': [
+                    (0, 0, {'parameter_id': p.id, 'value': 5.5})
+                    for p in params
+                ],
+            })
+            show('  chemistry log', f'{log.id} ({len(log.line_ids)} readings)')
+        else:
+            finding('WARN', 'chemistry', 'no fusion.plating.bath.parameter records — log skipped')
+
+    # Frank logs Fischerscope thickness readings during inspection
+    if 'inspect' in (wo.name or '').lower() and op_key == 'frank':
+        step(actor, 'Records 5 Fischerscope thickness readings')
+        Reading = env.get('fp.thickness.reading')
+        if Reading is not None:
+            for n, (pos, nip) in enumerate([
+                ('Top edge',     0.0512),
+                ('Mid surface',  0.0498),
+                ('Bottom rim',   0.0521),
+                ('Inner bore',   0.0489),
+                ('Outer flange', 0.0507),
+            ], 1):
+                Reading.with_user(op_user).sudo().create({
+                    'production_id': mo.id,
+                    'reading_number': n,
+                    'nip_mils': nip,
+                    'ni_percent': 90.5,
+                    'p_percent': 9.5,
+                    'position_label': pos,
+                    'operator_id': op_user.id,
+                })
+            n_readings = Reading.search_count([('production_id', '=', mo.id)])
+            show('  thickness readings', f'{n_readings} logged for {mo.name}')
+
+    step(actor, 'Taps FINISH')
+    try:
+        if wo_op.state == 'progress':
+            wo_op.button_finish()
+    except Exception as e:
+        finding('WARN', f'WO finish ({op_key})', f'{wo.name}: {e}')
+        continue
+    show(f'  state', wo_op.state)
+    show(f'  duration', f'{wo.duration:.2f} min')
+
+# Tally results per WO
+nonzero = sum(1 for wo in mo.workorder_ids if wo.duration > 0)
+finding('PASS' if nonzero == n_wos else 'WARN',
+        'time tracking', f'{nonzero}/{n_wos} WOs have duration > 0')
+
+# Check Odoo's underlying productivity records
+prod_recs = env['mrp.workcenter.productivity'].sudo().search([
+    ('workorder_id', 'in', mo.workorder_ids.ids),
+])
+finding('PASS' if len(prod_recs) > 0 else 'WARN',
+        'productivity records', f'{len(prod_recs)} mrp.workcenter.productivity rows logged')
+
+# Per-operator productivity
+distinct_operators_logged = len(set(prod_recs.mapped('user_id')))
+finding('PASS' if distinct_operators_logged > 1 else 'WARN',
+        'per-operator productivity',
+        f'{distinct_operators_logged} distinct operators recorded')
+
+# =====================================================================
+banner('PHASE 6 — Hannah closes the MO')
+# =====================================================================
+
+step('HANNAH', 'Marks MO done')
+try:
+    mo_h.button_mark_done()
+except Exception as e:
+    print(f'      [info] mark_done: {e} — falling back')
+    try:
+        mo_h.qty_producing = mo.product_qty
+        mo_h._action_done()
+    except Exception as e2:
+        print(f'      [info] _action_done: {e2}')
+finding('PASS' if mo.state == 'done' else 'FAIL', 'MO done', f'state={mo.state}')
+
+# =====================================================================
+banner('PHASE 7 — Frank inspects + CoC')
+# =====================================================================
+
+certs = env['fp.certificate'].search([('production_id', '=', mo.id)])
+coc = certs.filtered(lambda c: c.certificate_type == 'coc')[:1]
+finding('PASS' if coc else 'FAIL', 'CoC auto-create', coc.name if coc else 'MISSING')
+if coc:
+    finding('PASS' if coc.state == 'issued' else 'WARN',
+            'CoC issued', f'state={coc.state}')
+    finding('PASS' if coc.attachment_id else 'FAIL',
+            'CoC PDF attached', coc.attachment_id.name if coc.attachment_id else 'MISSING')
+    if coc.attachment_id:
+        kb = len(base64.b64decode(coc.attachment_id.datas)) / 1024
+        finding('PASS' if kb >= 100 else 'FAIL',
+                'CoC PDF rich (>=100KB)', f'{kb:.1f} KB')
+    # Thickness readings on cert
+    if 'thickness_reading_ids' in coc._fields:
+        n_readings = len(coc.thickness_reading_ids)
+        finding('PASS' if n_readings > 0 else 'WARN',
+                'thickness readings', f'{n_readings} reading rows')
+
+step('FRANK', 'Reviews + signs CoC (already auto-issued)')
+
+# =====================================================================
+banner('PHASE 8 — Dave drives the delivery')
+# =====================================================================
+
+dlv = env['fusion.plating.delivery'].search(
+    [('partner_id', '=', customer.id)], order='id desc', limit=1)
+finding('PASS' if dlv else 'FAIL', 'delivery auto-create', dlv.name if dlv else 'MISSING')
+if dlv:
+    finding('PASS' if dlv.scheduled_date else 'WARN',
+            'delivery scheduled prefill', str(dlv.scheduled_date or 'empty'))
+    finding('PASS' if dlv.assigned_driver_id else 'WARN',
+            'delivery driver prefill',
+            dlv.assigned_driver_id.name if dlv.assigned_driver_id else 'empty')
+    finding('PASS' if dlv.coc_attachment_id else 'WARN',
+            'CoC linked to delivery',
+            dlv.coc_attachment_id.name if dlv.coc_attachment_id else 'missing')
+
+    step('DAVE', 'Schedules → start route → mark delivered')
+    try:
+        if dlv.state == 'draft':       dlv.with_user(users['dave']).sudo().action_schedule()
+        if dlv.state == 'scheduled':   dlv.with_user(users['dave']).sudo().action_start_route()
+        if dlv.state == 'en_route':    dlv.with_user(users['dave']).sudo().action_mark_delivered()
+    except Exception as e:
+        print(f'      [info] delivery transitions: {e}')
+    finding('PASS' if dlv.state == 'delivered' else 'FAIL',
+            'delivery final state', dlv.state)
+    coc_logs = env['fusion.plating.chain.of.custody'].search(
+        [('delivery_id', '=', dlv.id)])
+    finding('PASS' if len(coc_logs) >= 2 else 'WARN',
+            'chain of custody', f'{len(coc_logs)} entries')
+
+# =====================================================================
+banner('PHASE 9 — Linda creates + posts invoice')
+# =====================================================================
+
+step('LINDA', 'Creates invoice from SO')
+try:
+    inv_act = so.with_user(users['linda']).sudo()._create_invoices()
+    inv = inv_act if hasattr(inv_act, '_name') else env['account.move'].browse(
+        inv_act.get('res_id') if isinstance(inv_act, dict) else inv_act)
+except Exception as e:
+    print(f'      [info] _create_invoices: {e}')
+    inv = env['account.move'].search([('invoice_origin', '=', so.name)], limit=1)
+
+if inv:
+    inv.invoice_date = fields.Date.today()
+    try:
+        inv.with_user(users['linda']).sudo().action_post()
+    except Exception as e:
+        finding('FAIL', 'invoice post', str(e))
+    finding('PASS' if inv.state == 'posted' else 'FAIL',
+            'invoice posted', f'state={inv.state}, payment_state={inv.payment_state}')
+
+# =====================================================================
+banner('PHASE 10 — Compliance + notification audit')
+# =====================================================================
+
+# Notification log
+logs = env['fp.notification.log'].search(
+    [('sale_order_id', '=', so.id)], order='create_date')
+events = logs.mapped('trigger_event')
+EXPECTED_EVENTS = {'so_confirmed', 'parts_received', 'mo_complete',
+                   'shipped', 'invoice_posted'}
+seen = set(events)
+missing = EXPECTED_EVENTS - seen
+finding('PASS' if not missing else 'FAIL',
+        'notifications fired',
+        f'sent={sorted(seen)}; missing={sorted(missing) if missing else "none"}')
+
+# Each notification has the right attachment?
+for ev_log in logs:
+    needed = {
+        'so_confirmed':    'Quotation',
+        'shipped':         'CoC',
+        'invoice_posted':  'Invoice',
+    }
+    expected_in_attachments = needed.get(ev_log.trigger_event)
+    if expected_in_attachments:
+        att_names = ev_log.attachment_names or ''
+        ok = expected_in_attachments.lower() in att_names.lower()
+        finding('PASS' if ok else 'WARN',
+                f'{ev_log.trigger_event} attachment',
+                f'expected "{expected_in_attachments}" in: {att_names!r}')
+
+# Workflow stage
+finding('PASS' if so.x_fc_workflow_stage in ('complete', 'invoicing', 'paid') else 'WARN',
+        'final SO workflow stage', so.x_fc_workflow_stage)
+
+# Portal job state
+job_now = env['fusion.plating.portal.job'].browse(job.id) if job else None
+if job_now:
+    finding('PASS' if job_now.state in ('shipped', 'complete') else 'WARN',
+            'final portal job state', job_now.state)
+
+# Bath chemistry logged?
+bath_logs_during = env['fusion.plating.bath.log'].search(
+    [('bath_id', '=', bath.id), ('id', '>=', max([0] + prod_recs.ids))],
+    limit=10) if bath else env['fusion.plating.bath.log']
+recent_bath_log = env['fusion.plating.bath.log'].search([], order='id desc', limit=1)
+finding('PASS' if recent_bath_log and recent_bath_log.create_date else 'WARN',
+        'chemistry log persisted', f'most-recent log id={recent_bath_log.id if recent_bath_log else "none"}')
+
+# Bake window auto-created after plating? Bake-window links via lot_ref (portal job name)
+BakeWin = env.get('fusion.plating.bake.window')
+if BakeWin is not None and job:
+    bw = BakeWin.search([('lot_ref', '=', job.name)])
+    finding('PASS' if bw else 'WARN',
+            'bake window auto-created',
+            f'{len(bw)} record(s) for {job.name}')
+
+# First-piece gate auto-created?
+FPG = env.get('fusion.plating.first.piece.gate')
+if FPG is not None:
+    # FPG model may not have production_id either; try common link fields
+    fpg = FPG.search([])  # take any recent
+    fpg_for_mo = fpg.filtered(
+        lambda g: getattr(g, 'production_id', False) and g.production_id.id == mo.id
+    ) if 'production_id' in FPG._fields else fpg.browse([])
+    finding('PASS' if fpg_for_mo else 'WARN',
+            'first-piece gate',
+            f'{len(fpg_for_mo)} for MO (coating-driven; OK if 0)')
+
+# Each operator can see their OWN assigned WOs via the tablet
+# (queue is a TransientModel; tablet calls build_for_user on load)
+# Reset MO to make some WOs ready/progress for queue test BEFORE this is run
+# would be needed — but the queue should still work for any in-progress WOs
+# elsewhere in the system that match the user.
+OpQueue = env.get('fusion.plating.operator.queue')
+if OpQueue is not None:
+    # Create a second test MO so there's a WO in 'ready' state to queue
+    test_mo = env['mrp.production'].search(
+        [('state', 'in', ('confirmed', 'progress'))], limit=1)
+    if test_mo and test_mo.workorder_ids:
+        # Force-assign a ready WO to John so we have something to surface
+        ready_wo = test_mo.workorder_ids.filtered(lambda w: w.state in ('ready', 'progress'))[:1]
+        if ready_wo:
+            ready_wo.sudo().x_fc_assigned_user_id = users['john'].id
+    for op_key, op_user in [('john', users['john']), ('tom', users['tom']),
+                             ('frank', users['frank'])]:
+        rows = OpQueue.with_user(op_user).sudo().build_for_user(user_id=op_user.id)
+        finding('PASS' if rows else 'WARN',
+                f'tablet queue for {op_key}',
+                f'{len(rows)} queue rows visible to {op_user.name}')
+        # Verify NONE of the rows are someone else's assigned WO
+        if rows:
+            wo_rows = rows.filtered(lambda r: r.source_model == 'mrp.workorder')
+            wrong = []
+            for r in wo_rows:
+                wo = env['mrp.workorder'].browse(r.source_id)
+                if wo.exists() and wo.x_fc_assigned_user_id and wo.x_fc_assigned_user_id != op_user:
+                    wrong.append(wo.name)
+            finding('PASS' if not wrong else 'FAIL',
+                    f'queue isolation for {op_key}',
+                    f'leaked rows assigned to others: {wrong}' if wrong else 'no leak')
+
+# Worker proficiency advanced for completed roles?
+prof_records = env['fp.operator.proficiency'].search([
+    ('employee_id', 'in',
+     env['hr.employee'].search([('user_id', 'in', list(u.id for u in users.values()))]).ids),
+]) if env.get('fp.operator.proficiency') is not None else None
+if prof_records is not None:
+    finding('PASS' if len(prof_records) > 0 else 'WARN',
+            'operator proficiency tracked',
+            f'{len(prof_records)} (employee,role) proficiency rows')
+
+# =====================================================================
+banner('SUMMARY')
+# =====================================================================
+
+passed = sum(1 for l, _, _ in FINDINGS if l == 'PASS')
+warns  = sum(1 for l, _, _ in FINDINGS if l == 'WARN')
+fails  = sum(1 for l, _, _ in FINDINGS if l == 'FAIL')
+
+print(f'  {passed} PASS / {warns} WARN / {fails} FAIL  (out of {len(FINDINGS)} checks)')
+print(f'  customer: {customer.name}')
+print(f'  SO       : {so.name}')
+print(f'  MO       : {mo.name} → {mo.state}')
+print(f'  WOs      : {n_wos}, total time = {sum(mo.workorder_ids.mapped("duration")):.2f} min')
+print(f'  CoC      : {coc.name if coc else "(none)"}')
+print(f'  delivery : {dlv.name if dlv else "(none)"} → {dlv.state if dlv else "n/a"}')
+print(f'  invoice  : {inv.name if inv else "(none)"}')
+print(f'  portal   : {job.name if job else "(none)"} → final {job_now.state if job_now else "n/a"}')
+
+if warns or fails:
+    print(f'\n  ── GAPS / FAILS ──')
+    for level, area, msg in FINDINGS:
+        if level in ('WARN', 'FAIL'):
+            print(f'   {level} [{area}] {msg}')
+
+env.cr.commit()
+print('\n  → committed.\n')