eudi: EBSI production-launch readiness (re-point live smoke, refresh fixtures)

[luisgf]

Deferred follow-up to #109. That issue
shipped only the offline part (the recursive-trust wildcard consistency fix, in v1.20.0); the
production-launch tracking was deferred because EBSI GA under EUROPEUM-EDIC is Q4 2026 and
the production endpoints do not exist yet (July 2026). Actionable once they do — not gated
forever.

Scope

• Re-point the opt-in live smoke (live-ebsi.yml, OPENVC_EBSI_LIVE=1) at the production
  ebsi.eu hosts; confirm the https host allow-list covers them.
• Refresh the recorded pilot fixtures (DID document + TIR entries) if the production TIR
  shape changed after the 2025-06-30 breaking changes — the golden fixtures are the drift alarm.
• Confirm the versioning adapters (openvc_ebsi/versioning.py) still cover the deployed API
  version; add a new adapter class + a golden fixture if the production version is new (one
  adapter per version — never scatter if version == …).
• Confirm VCDM 1.1 / 2.0 dual credentials from production verify end to end.

Gate

EBSI production launch (Q4 2026). Until then there is nothing to point at — do not manufacture
filler. Invariants: EBSI stays read-only; host allow-list on every request incl. redirects;
short client-side TTL cache (ADR-0001).

[luisgf]

2026-07-16 status check — gate holds; nothing to act on yet.

• Production is not launched: api.ebsi.eu / app.ebsi.eu already resolve in DNS (AWS) but drop public connections — provisioned and gated. The pilot remains the only public API environment (api-pilot / api-test / api-conformance respond normally).
• Timeline unchanged: ebsi.eu (the new canonical EUROPEUM-EDIC site — the Commission's EBSI pages now 302-redirect there) states "EBSI business launch in production planned for Q4 2026", with SLAs/pricing/onboarding docs "published ahead of the launch"; SWD(2026) 157 final (2026-06-17) confirms the Commission→EUROPEUM transfer completed by end of Q1 2026 and the production phase starting from Q2 2026. Both 2026 milestones on ebsi.eu/about-us still read "Upcoming".
• No API drift to absorb meanwhile: the latest entry in hub.ebsi.eu/api/changelog is still 2025-06-30 (docs otherwise current as of 2026-06-25); DID Registry and Trusted Issuers Registry remain v5.0.0, no v6 announced — the current versioning.py adapter still covers the deployed wire format.

Watch ebsi.eu and hub.ebsi.eu/api/changelog around September–October 2026; run this issue's checklist when the production onboarding docs land. Expect the new host to be api.ebsi.eu (already in DNS) for the allow-list item.

[luisgf]

Gate review 2026-07-17 — gate holds, nothing actionable yet. EBSI's business launch in production remains planned for Q4 2026 under EUROPEUM-EDIC (ebsi.eu is the new home; SLAs, pricing and production-onboarding docs "published ahead of the launch"). Pilot APIs are DID Registry v5.0.0 + TIR v5.0.0 — no v6 announced; the last breaking change remains 2025-06-30 (covered by our adapters/fixtures, incl. the TIR attribute-links shape). Expect new production base URLs → https host allow-list additions, and possibly paid onboarding. Next check at GA or on an EUROPEUM announcement.