docs: preserve R11 evidence and prepare verified Root load point capture

2026-10-15 13:19:50 +09:00
parent f135814b8b
commit d1ac5ba065
29 changed files with 82400 additions and 11 deletions
@@ -0,0 +1,13 @@
+{
+  "archive": {
+    "id": "1kSecKHMC9WowsIMJKmQCgWRbt6MkZuIE",
+    "url": "https://drive.google.com/file/d/1kSecKHMC9WowsIMJKmQCgWRbt6MkZuIE/view?usp=drivesdk"
+  },
+  "manifest": {
+    "id": "1EHq6eDsWQbVuIRXTXFa6STlwjjKXbKl-",
+    "url": "https://drive.google.com/file/d/1EHq6eDsWQbVuIRXTXFa6STlwjjKXbKl-/view?usp=drivesdk"
+  },
+  "actual_readback_verified": true,
+  "archive_bytes": 65722730,
+  "archive_sha256": "94963ad1fd0841d7bf3c5baa5e33a3891772ef7fe70f28ccf92f6b617be47a47"
+}
@@ -0,0 +1,3 @@
+Archive: https://drive.google.com/file/d/1kSecKHMC9WowsIMJKmQCgWRbt6MkZuIE/view?usp=drivesdk
+Manifest: https://drive.google.com/file/d/1EHq6eDsWQbVuIRXTXFa6STlwjjKXbKl-/view?usp=drivesdk
+Verify bytes65722730 and SHA256 94963ad1fd0841d7bf3c5baa5e33a3891772ef7fe70f28ccf92f6b617be47a47. Extract selected paths under the manifest base; verify members and restore mode/mtime_ns. Current R11, accepted P08, sources/saves/assets retained.
@@ -0,0 +1,9 @@
+{
+  "retired_files": 1395,
+  "retired_logical_bytes": 364344399,
+  "free_before_bytes": 423555072,
+  "free_after_bytes": 859770880,
+  "scratch_files": 0,
+  "current_R11_retained": true,
+  "formal_credit": 0
+}
@@ -0,0 +1,26 @@
+[
+  {
+    "id": "13U9vQ0fDYlojFBEe_jWeLHu16m7q_tZs",
+    "name": "p23-r10-closed-os-streams.RESTORE.md",
+    "bytes": "433",
+    "url": "https://drive.google.com/file/d/13U9vQ0fDYlojFBEe_jWeLHu16m7q_tZs/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  },
+  {
+    "id": "1EHq6eDsWQbVuIRXTXFa6STlwjjKXbKl-",
+    "name": "p23-r10-closed-os-streams.manifest.json",
+    "bytes": "461319",
+    "url": "https://drive.google.com/file/d/1EHq6eDsWQbVuIRXTXFa6STlwjjKXbKl-/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  },
+  {
+    "id": "1kSecKHMC9WowsIMJKmQCgWRbt6MkZuIE",
+    "name": "p23-r10-closed-os-streams.tar.gz",
+    "bytes": "65722730",
+    "url": "https://drive.google.com/file/d/1kSecKHMC9WowsIMJKmQCgWRbt6MkZuIE/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  }
+]
@@ -0,0 +1,80 @@
+"""Lossless cloud preparation for eight explicitly closed diagnostic streams."""
+from pathlib import Path
+import datetime, hashlib, io, json, shutil, tarfile
+
+ROOT = Path(__file__).resolve().parents[5]
+BASE = ROOT / 'artifacts/original-completion-2026-10-02'
+DOC = Path(__file__).resolve().parent
+SCRATCH = Path('/private/tmp/the-tree-p23-r10-os-20261015')
+TRIALS = ('p23-03-native-os-atomic-336a8cd-r10',)
+NAME = 'p23-r10-closed-os-streams'
+
+def sha(path):
+    digest = hashlib.sha256()
+    with Path(path).open('rb') as stream:
+        for block in iter(lambda: stream.read(1048576), b''):
+            digest.update(block)
+    return digest.hexdigest()
+
+def inventory():
+    rows = []
+    for name in TRIALS:
+        ended = json.loads((BASE/name/'runner-ended.json').read_text())
+        assert not ended['cleanup_errors']
+        assert all(row['engine_ended'] for row in ended['cleanup'])
+        for label in ('os-pair', 'os-runs'):
+            root = BASE/name/label
+            assert root.is_dir() and not root.is_symlink()
+            for path in [root] + sorted(root.rglob('*')):
+                assert not path.is_symlink()
+                stat = path.stat()
+                row = dict(path=path.relative_to(BASE).as_posix(),
+                           mode=stat.st_mode & 0o7777, mtime_ns=stat.st_mtime_ns)
+                if path.is_file():
+                    row.update(type='file', bytes=stat.st_size, sha256=sha(path))
+                else:
+                    assert path.is_dir()
+                    row['type'] = 'directory'
+                rows.append(row)
+    return rows
+
+def build():
+    assert shutil.disk_usage(BASE).free > 400*1024**2
+    SCRATCH.mkdir(exist_ok=True)
+    archive = SCRATCH/(NAME+'.tar.gz')
+    assert not archive.exists()
+    rows = inventory()
+    metadata = dict(schema='p23-closed-streams-cloud-v1', name=NAME,
+                    base=str(BASE), roots=[f'{n}/{v}' for n in TRIALS for v in ('os-pair', 'os-runs')],
+                    members=rows, files=sum(r['type']=='file' for r in rows),
+                    logical_bytes=sum(r.get('bytes', 0) for r in rows),
+                    selection='Closed rejected R10 OS streams and owned process receipts only; current R11 and accepted P08 retained',
+                    created_at=datetime.datetime.now(datetime.timezone.utc).isoformat())
+    payload=(json.dumps(metadata, ensure_ascii=False, indent=2)+'\n').encode()
+    with tarfile.open(archive, 'w:gz', compresslevel=6, format=tarfile.PAX_FORMAT) as output:
+        for row in rows:
+            output.add(BASE/row['path'], arcname=row['path'], recursive=False)
+        info=tarfile.TarInfo('__P23_NATIVE_STREAM_ARCHIVE__.json')
+        info.size=len(payload)
+        output.addfile(info, io.BytesIO(payload))
+    with tarfile.open(archive, 'r:gz') as source:
+        assert len(source.getnames()) == len(rows)+1
+        assert source.extractfile('__P23_NATIVE_STREAM_ARCHIVE__.json').read() == payload
+        for row in rows:
+            member=source.getmember(row['path'])
+            if row['type']=='directory':
+                assert member.isdir()
+                continue
+            digest=hashlib.sha256()
+            with source.extractfile(member) as stream:
+                for block in iter(lambda: stream.read(1048576), b''):
+                    digest.update(block)
+            assert member.isfile() and member.size==row['bytes'] and digest.hexdigest()==row['sha256']
+    assert inventory()==rows
+    metadata.update(archive=str(archive), archive_bytes=archive.stat().st_size,
+                    archive_sha256=sha(archive), archive_members_verified=True)
+    (DOC/'MANIFEST.json').write_text(json.dumps(metadata, ensure_ascii=False, indent=2)+'\n')
+    print(json.dumps({k:v for k,v in metadata.items() if k!='members'}), flush=True)
+
+if __name__=='__main__':
+    build()
@@ -0,0 +1,13 @@
+{
+  "archive": {
+    "id": "1k-zMuWHhyyJOIbp4h_69GRTXAjcXplDF",
+    "url": "https://drive.google.com/file/d/1k-zMuWHhyyJOIbp4h_69GRTXAjcXplDF/view?usp=drivesdk"
+  },
+  "manifest": {
+    "id": "1bGPG4kKbjqBVj0wbiMW8xM600fwv6XaL",
+    "url": "https://drive.google.com/file/d/1bGPG4kKbjqBVj0wbiMW8xM600fwv6XaL/view?usp=drivesdk"
+  },
+  "actual_readback_verified": true,
+  "archive_bytes": 64489580,
+  "archive_sha256": "fc8e41b8fb43ac3f428b17b951741408fdcb9ac4aa5e4e259df971b95e5b9907"
+}
@@ -0,0 +1,3 @@
+Archive: https://drive.google.com/file/d/1k-zMuWHhyyJOIbp4h_69GRTXAjcXplDF/view?usp=drivesdk
+Manifest: https://drive.google.com/file/d/1bGPG4kKbjqBVj0wbiMW8xM600fwv6XaL/view?usp=drivesdk
+Verify archive bytes64489580 and SHA256 fc8e41b8fb43ac3f428b17b951741408fdcb9ac4aa5e4e259df971b95e5b9907. Extract selected paths under manifest base; verify members and restore mode/mtime_ns. R11 is failure history, no acceptance credit; no raw amendments or R12 splicing.
@@ -0,0 +1,11 @@
+{
+  "retired_files": 2984,
+  "retired_logical_bytes": 388939316,
+  "free_before_bytes": 705490944,
+  "free_after_bytes": 1168535552,
+  "scratch_files": 0,
+  "immutable_R11_history_preserved": true,
+  "current_source_unchanged": true,
+  "accepted_P08_retained": true,
+  "formal_credit": 0
+}
@@ -0,0 +1,26 @@
+[
+  {
+    "id": "150W-XtmWY0qh-qnNVZC3BDzMd0Ilg3ed",
+    "name": "p23-r11-a-closed-native-os.RESTORE.md",
+    "bytes": "460",
+    "url": "https://drive.google.com/file/d/150W-XtmWY0qh-qnNVZC3BDzMd0Ilg3ed/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  },
+  {
+    "id": "1bGPG4kKbjqBVj0wbiMW8xM600fwv6XaL",
+    "name": "p23-r11-a-closed-native-os.manifest.json",
+    "bytes": "995684",
+    "url": "https://drive.google.com/file/d/1bGPG4kKbjqBVj0wbiMW8xM600fwv6XaL/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  },
+  {
+    "id": "1k-zMuWHhyyJOIbp4h_69GRTXAjcXplDF",
+    "name": "p23-r11-a-closed-native-os.tar.gz",
+    "bytes": "64489580",
+    "url": "https://drive.google.com/file/d/1k-zMuWHhyyJOIbp4h_69GRTXAjcXplDF/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  }
+]
@@ -0,0 +1,80 @@
+"""Lossless cloud preparation for eight explicitly closed diagnostic streams."""
+from pathlib import Path
+import datetime, hashlib, io, json, shutil, tarfile
+
+ROOT = Path(__file__).resolve().parents[5]
+BASE = ROOT / 'artifacts/original-completion-2026-10-02'
+DOC = Path(__file__).resolve().parent
+SCRATCH = Path('/private/tmp/the-tree-p23-r11-a-20261015')
+TRIALS = ('p23-03-native-os-budgetfix-49445d4-r11',)
+NAME = 'p23-r11-a-closed-native-os'
+
+def sha(path):
+    digest = hashlib.sha256()
+    with Path(path).open('rb') as stream:
+        for block in iter(lambda: stream.read(1048576), b''):
+            digest.update(block)
+    return digest.hexdigest()
+
+def inventory():
+    rows = []
+    for name in TRIALS:
+        ended = json.loads((BASE/name/'runner-ended.json').read_text())
+        assert not ended['cleanup_errors']
+        assert all(row['engine_ended'] for row in ended['cleanup'])
+        for label in ('layout-A', 'os-pair/A', 'os-runs/A-writer', 'os-runs/A-reader'):
+            root = BASE/name/label
+            assert root.is_dir() and not root.is_symlink()
+            for path in [root] + sorted(root.rglob('*')):
+                assert not path.is_symlink()
+                stat = path.stat()
+                row = dict(path=path.relative_to(BASE).as_posix(),
+                           mode=stat.st_mode & 0o7777, mtime_ns=stat.st_mtime_ns)
+                if path.is_file():
+                    row.update(type='file', bytes=stat.st_size, sha256=sha(path))
+                else:
+                    assert path.is_dir()
+                    row['type'] = 'directory'
+                rows.append(row)
+    return rows
+
+def build():
+    assert shutil.disk_usage(BASE).free > 512*1024**2
+    SCRATCH.mkdir(exist_ok=True)
+    archive = SCRATCH/(NAME+'.tar.gz')
+    assert not archive.exists()
+    rows = inventory()
+    metadata = dict(schema='p23-closed-streams-cloud-v1', name=NAME,
+                    base=str(BASE), roots=[f'{n}/{v}' for n in TRIALS for v in ('layout-A', 'os-pair/A', 'os-runs/A-writer', 'os-runs/A-reader')],
+                    members=rows, files=sum(r['type']=='file' for r in rows),
+                    logical_bytes=sum(r.get('bytes', 0) for r in rows),
+                    selection='Closed R11 A native and OS failure history; exact current source, immutable R11 history index and accepted P08 retained; no acceptance credit',
+                    created_at=datetime.datetime.now(datetime.timezone.utc).isoformat())
+    payload=(json.dumps(metadata, ensure_ascii=False, indent=2)+'\n').encode()
+    with tarfile.open(archive, 'w:gz', compresslevel=6, format=tarfile.PAX_FORMAT) as output:
+        for row in rows:
+            output.add(BASE/row['path'], arcname=row['path'], recursive=False)
+        info=tarfile.TarInfo('__P23_NATIVE_STREAM_ARCHIVE__.json')
+        info.size=len(payload)
+        output.addfile(info, io.BytesIO(payload))
+    with tarfile.open(archive, 'r:gz') as source:
+        assert len(source.getnames()) == len(rows)+1
+        assert source.extractfile('__P23_NATIVE_STREAM_ARCHIVE__.json').read() == payload
+        for row in rows:
+            member=source.getmember(row['path'])
+            if row['type']=='directory':
+                assert member.isdir()
+                continue
+            digest=hashlib.sha256()
+            with source.extractfile(member) as stream:
+                for block in iter(lambda: stream.read(1048576), b''):
+                    digest.update(block)
+            assert member.isfile() and member.size==row['bytes'] and digest.hexdigest()==row['sha256']
+    assert inventory()==rows
+    metadata.update(archive=str(archive), archive_bytes=archive.stat().st_size,
+                    archive_sha256=sha(archive), archive_members_verified=True)
+    (DOC/'MANIFEST.json').write_text(json.dumps(metadata, ensure_ascii=False, indent=2)+'\n')
+    print(json.dumps({k:v for k,v in metadata.items() if k!='members'}), flush=True)
+
+if __name__=='__main__':
+    build()
@@ -0,0 +1,13 @@
+{
+  "archive": {
+    "id": "13tRNN1C1lhGJfEY9KooUwozUVC2bi3T6",
+    "url": "https://drive.google.com/file/d/13tRNN1C1lhGJfEY9KooUwozUVC2bi3T6/view?usp=drivesdk"
+  },
+  "manifest": {
+    "id": "1YkoXPDN597tffLxGPAoj_8cMzlc1E2l3",
+    "url": "https://drive.google.com/file/d/1YkoXPDN597tffLxGPAoj_8cMzlc1E2l3/view?usp=drivesdk"
+  },
+  "actual_readback_verified": true,
+  "archive_bytes": 63837114,
+  "archive_sha256": "17975e9c53d624e66d90c6be85841a7333475bec1a3ffe92af580e4a7d304275"
+}
@@ -0,0 +1,3 @@
+Archive: https://drive.google.com/file/d/13tRNN1C1lhGJfEY9KooUwozUVC2bi3T6/view?usp=drivesdk
+Manifest: https://drive.google.com/file/d/1YkoXPDN597tffLxGPAoj_8cMzlc1E2l3/view?usp=drivesdk
+Verify bytes63837114 and SHA256 17975e9c53d624e66d90c6be85841a7333475bec1a3ffe92af580e4a7d304275. Extract original selected paths under manifest base; verify all member hashes and preserve mode/mtime_ns. R11 is failure history, no acceptance credit or splicing.
@@ -0,0 +1,11 @@
+{
+  "retired_files": 2301,
+  "retired_logical_bytes": 381506467,
+  "free_before_bytes": 1167638528,
+  "free_after_bytes": 1620664320,
+  "scratch_files": 0,
+  "immutable_R11_history_preserved": true,
+  "current_source_unchanged": true,
+  "accepted_P08_retained": true,
+  "formal_credit": 0
+}
@@ -0,0 +1,26 @@
+[
+  {
+    "id": "1HFqcyEssfS-UUrcQ1Lk2k3DwHXZ4QjVG",
+    "name": "p23-r11-b-closed-native-os.RESTORE.md",
+    "bytes": "449",
+    "url": "https://drive.google.com/file/d/1HFqcyEssfS-UUrcQ1Lk2k3DwHXZ4QjVG/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  },
+  {
+    "id": "1YkoXPDN597tffLxGPAoj_8cMzlc1E2l3",
+    "name": "p23-r11-b-closed-native-os.manifest.json",
+    "bytes": "772061",
+    "url": "https://drive.google.com/file/d/1YkoXPDN597tffLxGPAoj_8cMzlc1E2l3/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  },
+  {
+    "id": "13tRNN1C1lhGJfEY9KooUwozUVC2bi3T6",
+    "name": "p23-r11-b-closed-native-os.tar.gz",
+    "bytes": "63837114",
+    "url": "https://drive.google.com/file/d/13tRNN1C1lhGJfEY9KooUwozUVC2bi3T6/view?usp=drivesdk",
+    "shared": false,
+    "visibility": "not_shared"
+  }
+]
@@ -0,0 +1,80 @@
+"""Lossless cloud preparation for eight explicitly closed diagnostic streams."""
+from pathlib import Path
+import datetime, hashlib, io, json, shutil, tarfile
+
+ROOT = Path(__file__).resolve().parents[5]
+BASE = ROOT / 'artifacts/original-completion-2026-10-02'
+DOC = Path(__file__).resolve().parent
+SCRATCH = Path('/private/tmp/the-tree-p23-r11-b-20261015')
+TRIALS = ('p23-03-native-os-budgetfix-49445d4-r11',)
+NAME = 'p23-r11-b-closed-native-os'
+
+def sha(path):
+    digest = hashlib.sha256()
+    with Path(path).open('rb') as stream:
+        for block in iter(lambda: stream.read(1048576), b''):
+            digest.update(block)
+    return digest.hexdigest()
+
+def inventory():
+    rows = []
+    for name in TRIALS:
+        ended = json.loads((BASE/name/'runner-ended.json').read_text())
+        assert not ended['cleanup_errors']
+        assert all(row['engine_ended'] for row in ended['cleanup'])
+        for label in ('layout-B', 'os-pair/B', 'os-runs/B-writer', 'os-runs/B-reader'):
+            root = BASE/name/label
+            assert root.is_dir() and not root.is_symlink()
+            for path in [root] + sorted(root.rglob('*')):
+                assert not path.is_symlink()
+                stat = path.stat()
+                row = dict(path=path.relative_to(BASE).as_posix(),
+                           mode=stat.st_mode & 0o7777, mtime_ns=stat.st_mtime_ns)
+                if path.is_file():
+                    row.update(type='file', bytes=stat.st_size, sha256=sha(path))
+                else:
+                    assert path.is_dir()
+                    row['type'] = 'directory'
+                rows.append(row)
+    return rows
+
+def build():
+    assert shutil.disk_usage(BASE).free > 512*1024**2
+    SCRATCH.mkdir(exist_ok=True)
+    archive = SCRATCH/(NAME+'.tar.gz')
+    assert not archive.exists()
+    rows = inventory()
+    metadata = dict(schema='p23-closed-streams-cloud-v1', name=NAME,
+                    base=str(BASE), roots=[f'{n}/{v}' for n in TRIALS for v in ('layout-B', 'os-pair/B', 'os-runs/B-writer', 'os-runs/B-reader')],
+                    members=rows, files=sum(r['type']=='file' for r in rows),
+                    logical_bytes=sum(r.get('bytes', 0) for r in rows),
+                    selection='Closed R11 B native and OS failure history; exact current source, immutable R11 history index and accepted P08 retained; no acceptance credit',
+                    created_at=datetime.datetime.now(datetime.timezone.utc).isoformat())
+    payload=(json.dumps(metadata, ensure_ascii=False, indent=2)+'\n').encode()
+    with tarfile.open(archive, 'w:gz', compresslevel=6, format=tarfile.PAX_FORMAT) as output:
+        for row in rows:
+            output.add(BASE/row['path'], arcname=row['path'], recursive=False)
+        info=tarfile.TarInfo('__P23_NATIVE_STREAM_ARCHIVE__.json')
+        info.size=len(payload)
+        output.addfile(info, io.BytesIO(payload))
+    with tarfile.open(archive, 'r:gz') as source:
+        assert len(source.getnames()) == len(rows)+1
+        assert source.extractfile('__P23_NATIVE_STREAM_ARCHIVE__.json').read() == payload
+        for row in rows:
+            member=source.getmember(row['path'])
+            if row['type']=='directory':
+                assert member.isdir()
+                continue
+            digest=hashlib.sha256()
+            with source.extractfile(member) as stream:
+                for block in iter(lambda: stream.read(1048576), b''):
+                    digest.update(block)
+            assert member.isfile() and member.size==row['bytes'] and digest.hexdigest()==row['sha256']
+    assert inventory()==rows
+    metadata.update(archive=str(archive), archive_bytes=archive.stat().st_size,
+                    archive_sha256=sha(archive), archive_members_verified=True)
+    (DOC/'MANIFEST.json').write_text(json.dumps(metadata, ensure_ascii=False, indent=2)+'\n')
+    print(json.dumps({k:v for k,v in metadata.items() if k!='members'}), flush=True)
+
+if __name__=='__main__':
+    build()
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P23-03",
+  "reason": "Judgment: the metadata repair is acceptable only under the conditions below. It is Root evidence post-processing. No worker, run, repair or source change. Stay in submitted/wait until Root has the amended evidence, the frozen strict checker output, full177 and the independent review.\n\nFindings from tools/check_p23_life_observation_evidence.py:238-274. screenshot_transform loops over every click event for the target PID. For each one it requires event['point'] with viewport, screen and viewport_to_screen. It then checks two things: affine(viewport_to_screen, viewport) ≈ screen, and the window matrix [s,0,0,s,0,titlebar] applied to screen ≈ the actual coordinates. So a missing point on any click is a hard KeyError. That is correct strictness and must not be relaxed.\n\n(1) First click (menu open). Faithful and sufficient. The engine load request's top-level viewport, screen and viewport_to_screen are what this click actually targeted. Copy them verbatim into point with source='engine_request:<request path>#sha256'. Check: screen [1397,764.5] + titlebar 32 at scale 1 = [1397,796.5], which equals the actual coordinates. This is a real, independent cross-check.\n\n(2) Second click (menu item). A derived point can be added, but it proves nothing independently. If screen is set to (coordinates - [0,32])/1 and viewport is set to inverse(viewport_to_screen)(screen), the checker's two close() checks pass by construction. Requirements:\n(a) Label it explicitly: point_provenance='derived:screenshot_to_content_inverse_of_independent_calibration'. Record the formula, the matrix, the viewport_to_screen source and engine_measured=false.\n(b) Do not describe it as a measured menu target, and do not count it toward independent calibration evidence.\n(c) Show the menu-item selection is correct from the actual facts instead: the preserved before/menu/after raw screenshots (the menu screenshot shows the item at [1300,771]), the raw actual_calls args for both call IDs, and the observer's later successful load status for the distinct PID.\n(d) The reviewer must confirm independent matches still exist without the derived point: the first click plus all the other engine-request clicks.\n\n(3) Required file method (keeps the spec's \"no raw receipt relabel\" rule).\n- Never overwrite or rename the original receipt, index or binding files. Keep them byte-identical and record their SHA-256 in an amendment manifest.\n- Write new derived files, e.g. reader-request-0001.cua-receipt.amended-1.json, plus a derived index/binding. The only difference from the original is the added point objects. Record a deterministic, field-level diff (JSON pointer list) showing nothing else changed: ACK, request, observed, timestamps, call IDs, args, events order, coordinates, calibration and raw image bytes all stay the same. Record full before/after SHA-256 for every amended file, plus the generator script path, its SHA and the exact argv.\n- The script must be pure and re-runnable, giving the same bytes from the originals. Keep it out of the frozen source tree, or record it as Root tooling. It is not a product change.\n- Update screenshot receipt-SHA bindings to the amended receipt SHAs and keep the original-SHA chain alongside.\n- Covers A PID78040 (call_8bbc0836…, call_73bfe7dc…) and B PID83980 (call_09143b9c…, call_db4b58e8…) only. No other receipts are touched.\n\n(4) Then:\n- Run the unchanged frozen strict checker at 49445d4 against the amended index. Record the full output whether it passes or fails. If it fails beyond this KeyError, report that and do not patch further ad hoc.\n- If the checker or required logic would need a provenance-aware change, that is a source change to an allowed path. It needs a new candidate plus a repair decision by Root/Opus and must not be slipped in here.\n- Then mandatory full177 regression on the exact frozen candidate, then an independent Opus all-condition review covering original and amended evidence and the amendment manifest. Then the ordinary Runner gates. The original R16 proof-method/review sequence, 7 conditions, 6 categories, 30/88 denominator and all-click geometry requirement all stay unchanged.\n\n(5) Alternative if the reviewer rejects the derived second-click point: a fresh Root OS run where the observer records point for both clicks. That needs an owner/Runner decision and is not authorized here.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "No Codex worker run is requested or warranted. This is a wait decision about Root evidence post-processing, so the default model is kept. Astra's extra cost and time are not justified, and choosing a model does not authorize a run."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "validate",
+  "task_id": "P23-03",
+  "reason": "My previous file method was wrong, and I'm withdrawing it. I checked tools/check_p23_life_observation_evidence.py:1424-1493 and your finding is right. inspect_os_requests reads ack['input_receipt'] directly (1444, 1486), binds its SHA (1471, 1493) and pins conversion png_path to the original absolute sips output (1478, with argv equality at 201). A derived index or binding cannot redirect those reads. A copied directory breaks the absolute conversion binding.\n\nDecision: (C). Do a fresh Root native/OS replay on the unchanged 49445d4, then the normal validation chain.\n\nWhy not (A): an overlay reader that maps the original metadata paths to sidecar bytes changes what the checker reads without changing its code. That is a provenance-aware logic change made through a side channel, which is exactly what my prior condition forbids. It is equivalent to a hidden monkeypatch, so I reject it.\n\nWhy not (B): it is legitimate but a worse value. It needs a same-task Codex repair (repair 22), a new candidate SHA and a new source map. The applicability-reuse argument must then show that the executed Godot code, settings and input are byte-identical. On top of that, full177 and the independent review must run again on the new candidate. That means more time, usage and review risk than C, and the core R11 evidence would still depend on a derived second point.\n\nWhy C: it costs about 20 minutes hands-on plus new proof disk. No source, spec or acceptance change is involved, and no full177 has been spent yet. It produces evidence whose point field exists at creation, so the unchanged strict checker consumes it through its public API. No relabel or overlay is needed.\n\nExact direction for Root:\n1. Preserve R11 untouched as failure history: all 4 normal-OS roles exit 0 / cleanup 0, all 4 semantic streams PASS, the strict-checker KeyError output, and the raw 2-call records, menu images and load status. Record their SHA-256 values in a history manifest. Do not splice R11 into the new run.\n2. Start a fresh, complete normal-OS run for both layouts A and B, all roles, on exact 49445d4. Use the same engine, settings, environment, seed and guarded profiles, the full collector request/ACK lifecycle, full CUA call IDs, args, screenshots and calibration from the start, and a distinct-PID formal load.\n3. Point schema at creation, for every click event:\n   - Load first click (menu open): copy point.viewport, screen and viewport_to_screen verbatim from the engine load request. Set source='engine_request:<path>#sha256'.\n   - Load second click (menu item): write point at capture time with point_provenance='derived:screenshot_to_content_inverse_of_independent_calibration', engine_measured=false, the formula and matrix, and the viewport_to_screen source. Do not claim measured menu geometry.\n   - Record a calibration summary that counts the independent matches (the first click plus the other engine-request clicks) and excludes the derived point.\n   - Keep the before/menu/after raw screenshots and the raw actual_calls args for both call IDs, and show successful load status for the distinct PID.\n4. Use the existing owned-process and audio teardown gates. Check engine end, cleanup and protection on every run.\n5. Run the unchanged frozen strict checker on the new index and record its full output.\n   - If it passes, run the mandatory full177 on exact 49445d4. Then run the independent Opus all-condition review, which must confirm the derived second point is not counted as independent and that independent matches remain. Then the ordinary Runner gates.\n   - If it fails for any other reason, stop and report the failing evidence. Do not patch ad hoc. Any checker logic change would go through (B) as an ordinary repair decision.\n\nUnchanged: the 7 conditions, 6 categories, the 30/88 denominator, the all-click geometry requirement, scope, permissions and billing.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "No Codex worker run is involved. This continuation is a Root native/OS replay on the unchanged 49445d4 plus the standard validation chain, with no source repair. I'm keeping the default gpt-6.1-sol. Astra's extra quality, time and usage are not justified because there is no implementation work, and choosing a model does not authorize a run."
+}
@@ -0,0 +1,43 @@
+{
+  "scope": "Root serialization preflight only, no gameplay or acceptance credit",
+  "checker_sha256": "927f8f63eef7d55c4a9f96783e7240adb05ad236c9252dd8b9e27e9beb996683",
+  "results": [
+    {
+      "layout": "A",
+      "original_sha256": "cf434518c60d7834bc2f6ee50eb4e74d309e8a731207c5a80da1c5b3abbfe3de",
+      "missing_point_reproduced": true,
+      "serialization_compatible": true,
+      "wrong_independent_point_rejected": true,
+      "independent_clicks": 1,
+      "derived_clicks_excluded_from_independence": 1,
+      "matrix": [
+        1,
+        0,
+        0,
+        1,
+        0,
+        32
+      ],
+      "original_bytes_unchanged": true
+    },
+    {
+      "layout": "B",
+      "original_sha256": "0f5fdbdf80f397a06c588e3985bd0e816774bbe6ec2234a09e96e9308bacb9f5",
+      "missing_point_reproduced": true,
+      "serialization_compatible": true,
+      "wrong_independent_point_rejected": true,
+      "independent_clicks": 1,
+      "derived_clicks_excluded_from_independence": 1,
+      "matrix": [
+        1,
+        0,
+        0,
+        1,
+        0,
+        32
+      ],
+      "original_bytes_unchanged": true
+    }
+  ],
+  "formal_credit": 0
+}
@@ -11,7 +11,7 @@
  "worker_source_clean": true,
  "scope": "diagnostic setup costs from existing construction definitions, candidate signing_cost and effective/base RAW_FOOD quote; checker static preflight and meaningful missing-spend negatives. No product values changed.",
  "native_os_evidence": "artifacts/original-completion-2026-10-02/p23-03-native-os-budgetfix-49445d4-r11",
-  "evidence_state": "collection running, not accepted",
+  "evidence_state": "R11 rejected for Root load point metadata; immutable originals/history archived. Actual Opus-directed R12 running on identical source with point schema at creation and frozen-checker pre-ACK gate.",
  "formal_credit": 0,
  "remaining": [
    "complete A/B native/normalOS/formal distinctPID resume and strict semantic/provenance/mechanical checks",
@@ -22,5 +22,30 @@
    "tests/fixtures/p23-03/observation.gd": "a9a0e611f1262151549ff033eae618436e52f661d52decbab5adb93efc4dcdf5",
    "tools/check_p23_life_observation_evidence.py": "927f8f63eef7d55c4a9f96783e7240adb05ad236c9252dd8b9e27e9beb996683",
    "tools/test_p23_life_observation_evidence.py": "721b187b86d45da7fd1d1815d466f6f34c1b941e7ffc9585fbffb5e7e1dc6eef"
-  }
+  },
+  "normal_os_actual_pids": {
+    "A_writer": 74506,
+    "A_reader": 78040,
+    "B_writer": 79195,
+    "B_reader": 83980
+  },
+  "actual_input_requests": {
+    "A_writer": 35,
+    "A_reader": 5,
+    "B_writer": 39,
+    "B_reader": 5
+  },
+  "setup_budget": {
+    "gold": 7610,
+    "materials": 82,
+    "construction_gold": 6460,
+    "signing_gold": 1030,
+    "raw_food_gold": 120,
+    "actual_A_B_budget_equal": true,
+    "failed_setup_commands_A": 0,
+    "failed_setup_commands_B": 0
+  },
+  "semantic_stream_recomputations": "A writer, A reader, B writer, B reader PASS",
+  "latest_evidence": "artifacts/original-completion-2026-10-02/p23-03-native-os-pointfix-49445d4-r12",
+  "R11_no_splice": true
 }
@@ -0,0 +1,69 @@
+"""Verify real load receipt point schema with frozen checker before atomic ACK."""
+import hashlib
+import importlib.util
+import json
+import os
+from pathlib import Path
+import sys
+import time
+sys.dont_write_bytecode = True
+
+ROOT = Path(__file__).resolve().parents[5]
+SOURCE = Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p23-03-code/P23-03-implement')
+PROOF = ROOT / 'artifacts/original-completion-2026-10-02/p23-03-native-os-pointfix-49445d4-r12'
+
+def sha(path):
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+def main():
+    assert len(sys.argv) == 2 and sys.argv[1] in ('A', 'B')
+    layout = sys.argv[1]
+    folder = PROOF / 'os-pair' / layout / 'reader-request-0001'
+    assert not (folder / 'ack.json').exists()
+    request = json.loads((folder / 'request.json').read_bytes())
+    receipt = json.loads((folder / 'cua-receipt.json').read_bytes())
+    started = json.loads((PROOF / 'os-runs' / (layout + '-reader') / 'process-started.json').read_bytes())
+    assert request['target_pid'] == receipt['target_pid'] == started['actual_pid']
+    assert request['action'] == 'load_menu' and request['sequence'] == 1
+    assert receipt['request_sha256'] == sha(folder / 'request.json')
+    assert len(receipt['actual_calls']) == 2 and len(receipt['events']) == 2
+    first, second = [event['point'] for event in receipt['events']]
+    assert all(first[key] == request[key] for key in ('viewport', 'screen', 'viewport_to_screen'))
+    assert first['engine_measured'] is True and first['point_provenance'] == 'engine_request'
+    assert second['engine_measured'] is False and second['independently_calibrating'] is False
+    assert second['point_provenance'] == 'derived:screenshot_to_content_inverse_of_independent_calibration'
+    summary = receipt['calibration_summary']
+    assert summary['independent_click_events'] == 1 and summary['derived_click_events'] == 1
+    assert summary['derived_events_excluded_from_independent_count'] is True
+    path = SOURCE / 'tools/check_p23_life_observation_evidence.py'
+    spec = importlib.util.spec_from_file_location('frozen_49445d4_checker', path)
+    checker = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(checker)
+    _, width, height = checker.image_kind((folder / 'screen-before.png').read_bytes())
+    matrix = checker.screenshot_transform(receipt['calibration'], request, (width, height), [receipt])
+    for shot in receipt['screenshots']:
+        assert sha(PROOF / shot['path']) == shot['raw_sha256']
+        assert shot['tool_call_id'] in {call['call_id'] for call in receipt['actual_calls']}
+    assert request['requested_unix_ns'] <= receipt['timestamp_ns'] <= time.time_ns()
+    result = dict(scope='Root serialization gate only; not game acceptance', passed=True,
+                  target_pid=request['target_pid'], checker_sha256=sha(path),
+                  receipt_sha256=sha(folder / 'cua-receipt.json'), request_sha256=sha(folder / 'request.json'),
+                  independent_click_events=1, derived_events_excluded_from_independent_count=1,
+                  matrix=matrix, actual_call_ids=[call['call_id'] for call in receipt['actual_calls']],
+                  generator_sha256=sha(Path(__file__)), argv=[sys.executable, str(Path(__file__).resolve()), layout])
+    with (folder / 'root-point-schema-check.json').open('x') as stream:
+        json.dump(result, stream, indent=2)
+        stream.write('\n')
+    ack = dict(target_pid=request['target_pid'], sequence=1,
+               request_sha256=sha(folder / 'request.json'),
+               input_receipt='os-pair/' + layout + '/reader-request-0001/cua-receipt.json',
+               timestamp_ns=time.time_ns())
+    pending = folder / '.ack.schema-checked.pending.json'
+    with pending.open('x') as stream:
+        json.dump(ack, stream)
+        stream.write('\n')
+    os.replace(pending, folder / 'ack.json')
+    print(json.dumps(dict(result, atomic_ack_published=True)))
+
+if __name__ == '__main__':
+    main()
@@ -0,0 +1,82 @@
+"""Root-only point serialization preflight. Does not amend original evidence."""
+import copy
+import hashlib
+import importlib.util
+import json
+from pathlib import Path
+import sys
+sys.dont_write_bytecode = True
+
+ROOT = Path(__file__).resolve().parents[5]
+SOURCE = Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p23-03-code/P23-03-implement')
+PROOF = ROOT / 'artifacts/original-completion-2026-10-02/p23-03-native-os-budgetfix-49445d4-r11'
+
+def points(request, calibration, coordinates, request_path, request_sha):
+    transform = request['viewport_to_screen']
+    first = {key: copy.deepcopy(request[key]) for key in ('viewport', 'screen', 'viewport_to_screen')}
+    first.update(source='engine_request:' + str(request_path) + '#sha256=' + request_sha,
+                 point_provenance='engine_request', engine_measured=True)
+    scale, title = calibration['backing_scale'], calibration['titlebar_pixels']
+    screen = [coordinates[0] / scale, (coordinates[1] - title) / scale]
+    a, b, c, d, tx, ty = transform
+    determinant = a * d - b * c
+    assert determinant != 0
+    x, y = screen[0] - tx, screen[1] - ty
+    viewport = [(d*x - c*y) / determinant, (-b*x + a*y) / determinant]
+    second = dict(viewport=viewport, screen=screen, viewport_to_screen=copy.deepcopy(transform),
+                  point_provenance='derived:screenshot_to_content_inverse_of_independent_calibration',
+                  engine_measured=False, independently_calibrating=False,
+                  formula='screen=(native_xy-[0,titlebar])/backing_scale; viewport=inverse(engine_viewport_to_screen)(screen)',
+                  screenshot_matrix=[scale, 0, 0, scale, 0, title],
+                  viewport_to_screen_source='engine_request:' + str(request_path) + '#sha256=' + request_sha)
+    return first, second
+
+def preflight():
+    path = SOURCE / 'tools/check_p23_life_observation_evidence.py'
+    spec = importlib.util.spec_from_file_location('frozen_49445d4_checker', path)
+    checker = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(checker)
+    results = []
+    for layout in ('A', 'B'):
+        folder = PROOF / 'os-pair' / layout / 'reader-request-0001'
+        request_path = folder / 'request.json'
+        request_bytes = request_path.read_bytes()
+        request = json.loads(request_bytes)
+        original_path = folder / 'cua-receipt.json'
+        original_bytes = original_path.read_bytes()
+        original = json.loads(original_bytes)
+        calibration = original['calibration']
+        try:
+            checker.screenshot_transform(calibration, request, calibration['screenshot_pixels'], [original])
+        except KeyError as error:
+            assert error.args == ('point',)
+        else:
+            raise AssertionError('original missing-point regression not reproduced')
+        derived = copy.deepcopy(original)
+        first, second = points(request, calibration, original['events'][1]['coordinates'], request_path,
+                               hashlib.sha256(request_bytes).hexdigest())
+        derived['events'][0]['point'] = first
+        derived['events'][1]['point'] = second
+        matrix = checker.screenshot_transform(calibration, request, calibration['screenshot_pixels'], [derived])
+        wrong = copy.deepcopy(derived)
+        wrong['events'][0]['point']['screen'][0] += 1
+        try:
+            checker.screenshot_transform(calibration, request, calibration['screenshot_pixels'], [wrong])
+        except ValueError:
+            pass
+        else:
+            raise AssertionError('wrong independent point accepted')
+        assert original_path.read_bytes() == original_bytes and request_path.read_bytes() == request_bytes
+        results.append(dict(layout=layout, original_sha256=hashlib.sha256(original_bytes).hexdigest(),
+                            missing_point_reproduced=True, serialization_compatible=True,
+                            wrong_independent_point_rejected=True, independent_clicks=1,
+                            derived_clicks_excluded_from_independence=1, matrix=matrix,
+                            original_bytes_unchanged=True))
+    output = dict(scope='Root serialization preflight only, no gameplay or acceptance credit',
+                  checker_sha256=hashlib.sha256(path.read_bytes()).hexdigest(), results=results, formal_credit=0)
+    destination = Path(__file__).with_name('ROOT_LOAD_POINT_SCHEMA_PREFLIGHT.json')
+    destination.write_text(json.dumps(output, indent=2) + '\n')
+    print(json.dumps(output))
+
+if __name__ == '__main__':
+    preflight()
@@ -244,7 +244,7 @@
    "facility_value_contracts_validation.json": "bf490a9ca585c48fc318e76c4a069ef244827d828d46e6415399f7710590dd16",
    "performance_audit.json": "0b630b15a392c3e0366f1362bfe4ddacb968f915f54549f82e4d6fa315384762",
    "progress_contract.json": "ccbdfce8c8365d5c13f59531955708834cce45acd0e136561c95295dfdb5df77",
-    "progress_snapshot.json": "a6f1dee80667ce45f928a74b8cd37c9e1d296f435daa1995738315c6ffe7039b",
+    "progress_snapshot.json": "e6a488185794bfaa730da2d1e5e6359ecf59d51860671312d80ff6a0bee71005",
    "progress_validator_guard_checks.json": "72ee513fcf1cad85c24bfd0a4b472f425f6acf117928ece0f6b41e29018da627",
    "progress_validator_guard_checks.r01.json": "14c26adffa5a1938241db4912e50ea54b660641ee6fee2e412d467dce14d0519",
    "requirement_coverage.json": "8b5788b22ae8f49ea7e5cf048a5f0d82b54f6f193623465e0b70496b5aadd09d",
@@ -254,6 +254,6 @@
    "validate_facility_value_contracts.py": "91640e2a76cd6cc9186f7b85c0bf379b24b6cac0d48962815235ee628e7ae43e",
    "validate_plan.py": "23678227d9b3c556f1bd903f4b5b3147c4a82ce5085e10055481026803451b80",
    "validator_update_checks.json": "f997d0f3de2cea29550840b1d5cb23647d64f81329de46758551e2b6c8fecc27",
-    "work_packages.json": "3d6454eb379a88a733d9bcbd35639b35a9570c513762d7bfb16fa6cc7ebc8853"
+    "work_packages.json": "a8528188be13ed9db909ea064f55bbd63ce6e0bc90471be9b9295743a263f967"
  }
 }
@@ -9709,7 +9709,7 @@
  "current_closure_targets": {
    "current": "P23-03",
    "previous_formally_completed": "P08-03",
-    "next_state": "genuine submitted49445d4 clean; Root51local PASS; exact R11 native/normalOS collection running; full177 and independent review still pending",
+    "next_state": "submitted49445d4; R11 rejected Root point metadata, immutable history/Drive archive retained; actual Opus-directed complete R12 running with correct point schema at creation and frozen pre-ACK gate, no product/source change or old-run splice",
    "current_conditions": "all7/all6; A/B native normalOS save/distinctPID, same-demand improvement, exact full177, separate independent direct-image/all-condition review, integration/final/ledger",
    "updated_at_jst": "2026-10-15T12:01:30.832000+09:00"
  },
@@ -9890,5 +9890,13 @@
    "B_writer": "11 fixture command failures, no B reader",
    "actual_current_model": "gpt-6.1-sol",
    "formal_credit": 0
+  },
+  "p23_r12_latest_progress": {
+    "source": "49445d4a4d38281eb29dab1c1f85dd2b8ffbed11",
+    "run": "artifacts/original-completion-2026-10-02/p23-03-native-os-pointfix-49445d4-r12",
+    "A_writer_pid": 95221,
+    "A_writer_requests": 39,
+    "full177": "not executed yet",
+    "formal_credit": 0
  }
 }
@@ -9852,7 +9852,7 @@
    },
    "legacy_state": "planned",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "P23-01正式完了。P23-02は性能・通常保持入力等の残条件を保持して着手中。P23-03も着手中で、提出候補336a8cdをRootが検証中。旧診断証跡r05〜r08は照合済みでDrive退避し、失敗履歴と現在必要なOS証跡を保持。P23-03のA配置は通常操作・保存・別PIDの通常メニュー読込を実行済みだが、B配置、厳格照合、独立画像レビュー、全177回帰、Runner全条件レビュー・統合・最終検証が未了。パッケージ全体は未受入。30／88・部分点なしを維持。 R10 is terminal with B fixture budget failures, not acceptance; Opus directed same-task fixture-only repair19 on Opus-selected gpt-6-astra. Current source336 retained. A writer/reader semantic audit passed. Latest corrected candidate49445d4 submitted/clean; Root51local PASS and exact R11 collection running, no unit credit.",
+    "current_summary": "P23-01 completed. P23-02 remains in_progress with separate performance/held-input/Windows conditions. P23-03 submitted49445d4 clean; no new product change after diagnostic-budget repair. R11 four-role normalOS collection exit0 and all four semantic streams PASS, but strict evidence rejected Root load click point metadata (not accepted). Actual Opus withdrew impossible sidecar method and directed complete R12 on identical source with point-at-creation and frozen-checker pre-ACK gate. R12 running; no splicing, no full177 spent yet. Original7 conditions/6 categories/30 packages/88 units, no partial credit; independent image and all-condition review/integration/final remain required.",
    "remaining_deliverables": [
      {
        "id": "P23-01",
@@ -16078,13 +16078,13 @@
            "current_game_acceptance_inferred": false
          }
        ],
-        "progress_summary": "2026-10-15: same submitted336a8cd; 48 local checker tests PASS. R09 import/319parse/A+B passed; exact same-state independent goods recomputation PASS (2 requests/2 deliveries). R09 OS failed on Root non-atomic ACK publication, not accepted. Root helper now publishes complete ACK via same-directory atomic rename; actual helper call and source retained. Fresh R10 in progress: A-writer56892 completed35 actual requests, passive500 checks/0 failures; A-reader60176 loaded formal save via ordinary menu and observed FRONT/BACK. No complete OS/all-condition acceptance yet. Old8 native layout dirs and obsolete mirror payload losslessly archived/readbackSHA verified; current proof retained. Product/7 conditions/6 categories/30-88 unchanged; formal0. R10 terminal: B writer61335 ended484checks/11failures because fixture budget omitted five signing costs and RAW_FOOD purchase; B reader notrun. A writer/reader semantic audit PASS. Opus confirmed fixture-only repair19; preparation selected Sol, actual run decision selected gpt-6-astra; managed worker dispatched. No full177 rerun before stabilized fixture. Root ACKrace did not recur. Repair19 first dispatch ended on missing readable concrete context, no source edits. Actual directions/failure facts mirrored into allowed task docs; Opus authorized same-task repair20 and latest run selected gpt-6.1-sol. Actual Runner implementing; no duplicate task. Preserved repair20 code passed51 local tests, then submit rejected only Root-generated untracked pycache scope. Cache moved with content SHA preservation outside checkout; Opus repair21/run uses Sol to reuse retained diff, no reimplementation. Additional3227 closed proof files/1,035,272,086 logical bytes archived in11 actual-readback-verified Drive parts; free1,144,098,816 after retirement, currentR10/acceptedP08 retained. Genuine new submitted49445d4, clean worktree. Root51local PASS. R11 exact-source native/normalOS collector started; no final acceptance or full177 yet. Previous R10 retains rejected B failure evidence.",
+        "progress_summary": "2026-10-15: submitted49445d4, clean, Opus-selected6.1-sol repair retained; Root51local PASS. Diagnostic setup budget construction6460+5 signing1030+RAW_FOOD120=7610gold/82materials, actual A/B equal and all hires/purchase succeed. R11 four-role actual normalOS save/distinctPID load exit0/cleanup0 and all4 semantic streams PASS; strict checker rejected missing point on Root manual-load receipts. No acceptance credit. Actual Opus direction chose fresh R12 on unchanged49445d4; original R11 history5364 nonstage files hashed and native/OS payloads cloud-preserved losslessly. R12 native import/319parse/A+B PASS, A writer95221 completed39 actual requests and normal save; conversion/reader/B/strict/full177/reviews/integration/final pending. New Root load schema preflight reproduced both missing-point failures, correct schema accepted and wrong independent point rejected; real reader receipts must pass frozen checker before ACK. No hidden overlay, raw receipt amendment or R11 splicing.",
        "remaining_gaps": [
-          "Exact submitted49445d4 R11 native/complete A/B normalOS, actual all-spend budget and successful hire/purchase receipts, strict semantic/provenance/mechanical and formal distinct-PID resume verification.",
-          "Independent Opus direct-image verdicts for all required eligible rows/categories/layouts/layers, generated in a separate managed read-only reviewer session; no fabricated verdicts.",
-          "Exact final177 regression, registered validation and independent Opus all-condition review, integration/final/ledger. Preserve separate Windows, finished-assets/all30 and undefined-value gaps."
+          "Finish exact49445d4 R12 normalOS A-reader/B-writer/B-reader, all6 categories on FRONT/BACK/pan/zoom, formal distinct-PID save/load and source/profile/owned-cleanup guards; unchanged strict checker on complete new evidence.",
+          "Independent managed Opus direct-image verdicts bound to each manifest; explicitly exclude derived menu-item points from independent calibration counts and verify menu screenshots/raw calls/load status.",
+          "Mandatory exact full177; ordinary registered validation, independent Opus all-condition review, integration/final and ledger. Separate Windows/finished-assets/all30/undefined-value gaps remain."
        ],
-        "updated_at_jst": "2026-10-15T12:10:09.582757+09:00"
+        "updated_at_jst": "2026-10-15T13:17:17.236708+09:00"
      }
    ],
    "estimate_person_days_historical_2026_09_29": [