Lesson 186: Regional Mock Audit Panel Timezone Roster for Follow-the-Sun Cert Windows (2026)

Direct answer: Lesson 179 names who owns US/EU/Asia ingestion for a cert week. Lesson 186 names who must be on the mock-audit panel for each rehearsal slot in local time before Lesson 181 exports ICS holds—Lesson 182 attendance receipts must match the roster row or mock_audit_log bootstrap stays blocked.

Why this matters now (Q1 2027 intake panel quorum)

Q1 2027 cert-intake rehearsals run follow-the-sun: US afternoon tabletop, EU morning readback, Asia evening closure. Partners now ask for panel quorum proof on the same evidence line as Lesson 176 reply packets—not “we had a calendar invite.”

Failure mode in late 2026 planning:

• Lesson 181 exports ICS holds with UTC labels only; EU panel lead thinks the slot is Tuesday local, shows up Wednesday.
• Lesson 182 panel_present_json lists four Lesson 172 roles, but Asia engineering was never on the roster—receipt validates, quorum does not.
• Lesson 179 handoff manifest shows green while no panel row exists for the Asia digest slot—false quorum on the leadership dashboard.

This lesson makes roster rows the contract between regional handoff, ICS export, and attendance bootstrap.

Lesson objectives

You will implement:

• mock_audit_panel_roster_slot — one row per rehearsal slot with slot_local_tz, slot_starts_at_utc, and required roles
• panel_roster_signer_binding — maps Lesson 172 roles to signer_id per slot
• forbid_ics_export_without_panel_roster — Lesson 181 guard extension
• validate_attendance_against_roster — Lesson 182 receipt validator
• panel_roster_gap_open publish-gate extension on Lesson 171
• regional_panel_quorum_manifest.json evidence artifact

Prerequisites

• Lesson 179 — regional_handoff_week owners and active_publish_tuple_hash
• Lesson 181 — ICS export and stable ics_uid
• Lesson 182 — cert_rehearsal_attendance + panel_present_json
• Lesson 172 — four panel roles and scoring rubric
• Lesson 185 — rubric rubric_version pin on holds (roster does not replace semver discipline)

mock_audit_panel_roster_slot table

CREATE TABLE mock_audit_panel_roster_slot (
  roster_slot_id        TEXT PRIMARY KEY,
  handoff_week_id       TEXT NOT NULL REFERENCES regional_handoff_week(handoff_week_id),
  cert_window_id        TEXT NOT NULL,
  cert_rehearsal_label  TEXT NOT NULL,
  slot_region           TEXT NOT NULL CHECK (slot_region IN ('us', 'eu', 'asia')),
  slot_local_tz         TEXT NOT NULL,
  slot_starts_at_utc    TIMESTAMPTZ NOT NULL,
  slot_ends_at_utc      TIMESTAMPTZ NOT NULL,
  ics_uid               TEXT UNIQUE,
  rubric_version        TEXT NOT NULL REFERENCES mock_audit_rubric_registry(rubric_version),
  publish_tuple_hash    TEXT NOT NULL,
  roster_status         TEXT NOT NULL DEFAULT 'draft'
    CHECK (roster_status IN ('draft','locked','cancelled')),
  CHECK (slot_ends_at_utc > slot_starts_at_utc)
);

Rules:

• handoff_week_id must match Lesson 179 active week for the same cert_window_id.
• publish_tuple_hash must equal regional_handoff_week.active_publish_tuple_hash at lock time.
• slot_local_tz must be one of the week’s us_business_tz, eu_business_tz, or asia_business_tz columns—not arbitrary IANA strings.

panel_roster_signer_binding table

CREATE TABLE panel_roster_signer_binding (
  roster_slot_id   TEXT NOT NULL REFERENCES mock_audit_panel_roster_slot(roster_slot_id),
  panel_role       TEXT NOT NULL CHECK (panel_role IN (
    'engineering_lead', 'governance_owner', 'partner_liaison', 'scribe'
  )),
  signer_id        TEXT NOT NULL,
  signer_email     TEXT NOT NULL,
  backup_signer_id TEXT,
  PRIMARY KEY (roster_slot_id, panel_role),
  CHECK (backup_signer_id IS NULL OR backup_signer_id <> signer_id)
);

Quorum rule: all four Lesson 172 roles present on the slot before roster_status = 'locked'.

Regional owner rule: governance_owner for a US slot should match us_owner_email on the handoff week unless a documented backup_promote_event from Lesson 174 is attached.

Lock procedure (before ICS export)

def assert_roster_locked(cert_window_id: str) -> None:
    gaps = query("""
      SELECT roster_slot_id FROM mock_audit_panel_roster_slot s
      WHERE s.cert_window_id = %s AND s.roster_status <> 'locked'
    """, [cert_window_id])
    if gaps:
        raise PanelRosterGap(f"Unlocked slots: {gaps}")
    missing = query("""
      SELECT s.roster_slot_id
      FROM mock_audit_panel_roster_slot s
      LEFT JOIN panel_roster_signer_binding b USING (roster_slot_id)
      GROUP BY s.roster_slot_id
      HAVING COUNT(b.panel_role) < 4
    """, [cert_window_id])
    if missing:
        raise PanelRosterGap(f"Incomplete quorum: {missing}")

Lesson 181 guard extension

def export_ics_hold(slot: RosterSlot) -> IcsEvent:
    if slot.roster_status != "locked":
        raise PanelRosterGap("Cannot export ICS for draft roster slot")
    local_label = format_local(slot.slot_starts_at_utc, slot.slot_local_tz)
    return IcsEvent(
        uid=slot.ics_uid or generate_uid(slot.roster_slot_id),
        summary=f"[{slot.rubric_version}] {slot.cert_rehearsal_label} — {local_label}",
        dtstart=slot.slot_starts_at_utc,
        dtend=slot.slot_ends_at_utc,
        description=render_roster_description(slot),
    )

ICS description must list local time + timezone + four signer emails so Lesson 185 semver re-export does not strip quorum proof.

Lesson 182 attendance validator

def validate_panel_present(attendance_id: str) -> None:
    att = load_attendance(attendance_id)
    slot = load_roster_slot_by_ics_uid(att.ics_uid)
    expected = load_bindings(slot.roster_slot_id)
    present = parse_panel_present_json(att.panel_present_json)
    for role, binding in expected.items():
        if present.get(role) != binding.signer_id:
            raise PanelRosterMismatch(
                f"Role {role}: expected {binding.signer_id}, got {present.get(role)}"
            )

No bootstrap until validator passes—extends forbid_mock_audit_log_without_attendance.

Publish-gate extension

Add to Lesson 171 allow-list:

• panel_roster_gap_open — any slot for active cert_window_id is draft, missing bindings, or ics_uid null after lock deadline.

Clears when all slots locked, ICS exported, and Lesson 184 conflicts = 0.

regional_panel_quorum_manifest.json

{
  "schema": "regional_panel_quorum_manifest_v1",
  "handoff_week_id": "q1_2027_meta_w02",
  "cert_window_id": "q1_2027_meta",
  "publish_tuple_hash": "a1b2…",
  "slots": [
    {
      "roster_slot_id": "us_t14_2027_01_14",
      "slot_region": "us",
      "slot_local_tz": "America/Los_Angeles",
      "slot_starts_at_utc": "2027-01-15T01:00:00Z",
      "signers_sha256": "…"
    }
  ],
  "manifest_sha256": "…"
}

Attach to Lesson 179 regional_handoff_manifest weekly bundle for partner replay.

Follow-the-sun slot template (Q1 2027)

Never reuse one roster row for two regions—quorum is per slot, not per window title string.

Common mistakes

• Locking roster after ICS export—receipts reference wrong signers.
• UTC-only ICS summaries—EU no-shows blamed on “calendar bug.”
• One governance_owner globally—breaks Lesson 179 regional accountability.
• Bootstrap with ad-hoc panel_present_json—fails Q1 2027 intake replay.
• Promoting tuple hash without re-locking roster rows.

Troubleshooting

Verification checklist

• [ ] Cannot export ICS when any slot draft
• [ ] Four bindings required per locked slot
• [ ] Attendance bootstrap rejects signer drift
• [ ] Local time appears in ICS description
• [ ] Manifest SHA-256 verifies in CI

Mini exercise (25 minutes)

Seed one regional_handoff_week row. Add US T-14 slot at 21:00 UTC with America/Los_Angeles label. Bind three roles only—confirm lock fails. Add scribe binding—lock—draft expected ICS summary line with local time string.

Continuity

• Lesson 179 — handoff week spine and ingestion owners.
• Lesson 181 — ICS UID stability; roster guard runs first.
• Lesson 182 — attendance receipt quorum validation.
• Lesson 185 — rubric version in ICS summary prefix.
• Next: Lesson 187 — red-team findings bind to deficiency tickets.
• Guide: Unity regional handoff manifest exporter preflight (pairs ingestion manifest discipline).

FAQ

Can one signer cover two regions?
Yes with explicit backup_promote_event and two roster bindings—never silent dual role without audit row.

Do we roster partner liaisons in every timezone?
Only slots where partners attend live; async review uses Lesson 179 ingestion, not panel roster.

How does this interact with Lesson 184 offsite conflicts?
Run conflict detector on locked slot UTC ranges before export.

Virtual panels only?
Still roster—all four roles need signer_id even if dial-in.

Follow-the-sun intake fails when the calendar speaks UTC and the panel speaks hope. Lock the roster in local time, export ICS once, and make Lesson 182 prove the right four people were in the room.