ARTIFACT-STORE-WP-0007 D7.2: deterministic local MinIO fixture, live compatibility pass

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

workplans/ARTIFACT-STORE-WP-0007-minio-maxio-sts-vending.md

@@ -90,7 +90,7 @@ Progress 2026-06-27:
 
 ```task
 id: ARTIFACT-STORE-WP-0007-T002
-status: progress
+status: done
 priority: high
 state_hub_task_id: "c826f3ac-2ed7-4150-aa7c-e778ae71a72b"
 ```
@@ -117,6 +117,22 @@ Progress 2026-06-27:
 - Remaining D7.2 gate: run the harness against an approved MinIO-compatible
   endpoint and capture the health/round-trip/multipart result.
 
+Completed 2026-07-02:
+
+- Added the deterministic local fixture `scripts/minio_local_smoke.sh` and
+  `make test-minio-local`: it starts a throwaway `minio/minio:latest`
+  container bound to `127.0.0.1:19000` with one-run generated credentials,
+  waits for `/minio/health/live` (HTTP 200), creates the smoke bucket via
+  `mc`, runs `make test-minio`, and tears the container down on exit.
+- Live run passed against MinIO server (image digest `sha256:14cea493...`):
+  `test_live_minio_round_trip_with_range` and
+  `test_live_minio_multipart_upload` — 2 passed. Health, round-trip with
+  range reads, and multipart upload are all verified against a real MinIO
+  endpoint; no credentials persisted anywhere.
+- This closes D7.2's bootstrap-path, live-run, and documentation acceptance.
+  Runs against a production/approved shared endpoint remain possible with the
+  same `make test-minio` env contract whenever an operator supplies one.
+
 ## D7.3 - STS Credential Vending Assessment For NetKingdom
 
 ```task