fix(ml): deliver verified forecasts and portfolio opportunity analysis

.dockerignore

@@ -26,11 +26,11 @@ ENV/
 *.log
 logs/
 
-# User and runtime data must never be baked into an image
-data/
-cache/*.json
-*.db
-*.sqlite
+# User and runtime data must never be baked into an image
+data/
+cache/*.json
+*.db
+*.sqlite
 
 # Testing
 .pytest_cache/
@@ -61,4 +61,11 @@ Thumbs.db
 # Environment files (never include in image)
 .env
 .env.*
-*.env
+*.env
+
+# Private/generated development state must not enter future production rebuilds
+.venv/
+node_modules/
+.worktrees/
+outputs/
+cache/

.gitattributes

@@ -1,10 +1,18 @@
-# Force normalisation texte et prévenir les BOM accidentels
-* text=auto
-*.py text eol=lf
-*.js text eol=lf
-*.html text eol=lf
-*.css text eol=lf
-*.json text eol=lf
+# Force normalisation texte et prévenir les BOM accidentels
+* text=auto
+*.py text eol=lf
+*.js text eol=lf
+*.html text eol=lf
+*.css text eol=lf
+*.json text eol=lf
 *.md text eol=lf
 *.sh text eol=lf
 *.ps1 text eol=crlf
+
+# Validated artifact receipts fingerprint exact bytes; preserve across checkout platforms.
+services/ml/reliability.py -text whitespace=cr-at-eol
+services/ml/risk_evaluation.py -text whitespace=cr-at-eol
+api/schemas/ml_contract.py -text whitespace=cr-at-eol
+data/ml_verified/** -text whitespace=cr-at-eol
+models/validated_risk/** -text whitespace=cr-at-eol
+outputs/ml-reliability/evaluations/** -text whitespace=cr-at-eol

.gitignore

@@ -185,3 +185,8 @@ phase3_*_results.json
 # Pytest reports
 pytest_report.json
 junit_*.xml
+
+# Verified public datasets and generated validation/release artifacts
+/data/ml_verified/
+/models/validated_risk/
+/outputs/ml-reliability/

Dockerfile

@@ -40,6 +40,7 @@ COPY . .
 # Environment variables
 ENV CRYPTO_TOOLBOX_NEW=1
 ENV PYTHONUNBUFFERED=1
+ENV ML_AUTO_TRAIN=0 ML_DATA_REFRESH=1
 
 EXPOSE 8080
 

Dockerfile.prod

@@ -15,7 +15,9 @@ ENV PYTHONUNBUFFERED=1 \
     PIP_DISABLE_PIP_VERSION_CHECK=1 \
     DEBIAN_FRONTEND=noninteractive \
     PORT=${PORT} \
-    WORKERS=${WORKERS}
+    WORKERS=${WORKERS} \
+    ML_AUTO_TRAIN=0 \
+    ML_DATA_REFRESH=1
 
 # Install system dependencies for Playwright + curl for healthcheck
 RUN apt-get update && apt-get install -y --no-install-recommends \
@@ -55,7 +57,7 @@ RUN pip install --no-cache-dir -r requirements.txt
 
 # Install Playwright and browsers (only Chromium to save ~200MB vs all browsers)
 # This layer is expensive (~300MB), cached unless requirements change
-RUN pip install playwright && playwright install chromium --with-deps
+RUN playwright install chromium --with-deps
 
 # Copy application code (frequently changes, so last layer)
 COPY . .