P04-01: 同時発生の更新規約

2026-10-19 00:12:04 +09:00 · 2026-10-18 21:01:07 +09:00 · 2026-10-18 20:16:38 +09:00 · 2026-10-18 18:11:13 +09:00 · 2026-10-18 16:51:45 +09:00 · 2026-10-18 16:43:06 +09:00
123 changed files with 36212 additions and 1092 deletions
@@ -0,0 +1,2 @@
 __pycache__/
 *.pyc
@@ -1,177 +1,34 @@
-# 初期監査の検証器
+# Checker protocol — historical repair29 description
-## repair7 定義（以前の版識別説明に優先）
+Repair30 is a partial, blocked implementation. CURRENT_STATUS.md and
 REPAIR30_STATUS.md supersede the current-role, authority and execution claims
 below. M is c0ea009; product manifests exclude checker, selected native/full
 SourceRefs include it. Q is the actual recomputed merge-tree; C requires separate
 normal-integration qualification. All four remaining D05 policies are approved.
 Do not run the old collection/index recipe as fresh-Q evidence. No 500000-byte
 limit applies. The historical protocol text below is retained for provenance.
-registered は deb1bcb、execution_origin は 9767b0a、checker は実際に
+Worker **SOURCE-READY / NOTRUN**. [CURRENT_STATUS.md](CURRENT_STATUS.md) is canonical for execution facts; creation-time NOT RUN in REPAIR22–28 and runbooks is historical. [ORDER_AUDIT.md](ORDER_AUDIT.md) and order-audit.json give the eleven-phase/seven-domain audit. [D05_REMAINING_ORDER_CANDIDATE.md](D05_REMAINING_ORDER_CANDIDATE.md) is approval material only.
 実行したcheckerのcommitとbytes、product_target は
 `{main_anchor, submitted, composed_tree}` とする。checkerのSHAを製品版に
 代用しない。提出後にしか確定しない自己blob照合は未実施としてRootが検証する。
-`duty_payments` は決算日のpayroll settlement取引のうち、
+B = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
-ShiftInstance.record_duty_minute の勤務recordとstaff_id/day単位で
+The checker remains a61 (`a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`), with its registry unchanged. Fifteen conditions + EV, seven domains, three safety outcomes and30/88 denominator remain fixed. Original credit13/88 unchanged; P04 remains incomplete.
 結合できる取引の件数。期待値は1のまま。独立した通貨項目ではない。
 collectorはpayroll行と勤務recordの実rawを結合し、結合不能なら失敗する。
-融資の公開返済API `repay_loan_principal` とledger分類
+| Evidence | Root-measured current fact |
-`LOAN_PRINCIPAL_REPAID` / `financing_principal_outflows` は存在する。
+| --- | --- |
-自動返済や全UIの完成は主張しない。「融資機構がない」という説明は撤回する。
+| B/p04-s4-native-r28 | 4/4 PASS; PIDs49940,50044,50078,50105 all ended; guards0; cleanup0. |
 | B/audit-support/p04-root-fb8b-s4-r01 | S4 controls and native receipts PASS. |
 | B/audit-support/p04-root-fb8b-local-r01 | Local8 PASS and registered validation fb8b PASS28.095s. |
 | B/audit-support/p04-raw-collect-r22 | Current collection, preserving raw and exact relocation/series SHA256 bindings. |
 | B/p04-evidence/index.json | Schema2; missing_conditions=[]; all15 conditions + EV mechanically verified. |
-midnight_replayは同minuteの決算API再呼出しによる実測までpending。
+Root-measured native product5f6bc11d/main9b1a18c1. Current product is B/audit-support/p04-r17-full-inputs-r01/product, not deb11300. Static current hashes and handler/function lines, plus exact proof pins, are in REPAIR29_STATIC_SOURCE.json. The index preserves source/config/input/environment applicability and native ownership joins; mechanical PASS does not grant D05 approval or original completion.
 1442完了やservice request再送を1440売上・決算API再呼出しの証明にしない。
 shift_completionはapproved-shift-current-r01.gdの1080観測を使う。
 D05のEV停止帰属、停電と休業の厳密な順序、費用時点の未確定部分はpending。
 全case収集、登録validate、独立whole review、統合準備の順序を維持する。
 本修理での試験・engine実行はworkerでは行わない。
-## repair6 現在値（2026-10-16）
+C NATIVE_RUNS/native_ownership/verify_native remains unchanged. C shift proof joins actual owned start/end PIDs, serviceID, original priceSnapshot, service.payment key and receipt entries; no fixed PID or ledger number. S1 typed raw joins pre-travel ACTIVE reservation/task/staff/cell to boarded trip; JSON summaries do not replace typed evidence.
-旧値: C全体は `native ordering bytes` によりblocked、実applicabilityは拒否、
+Only S4 supplies isolated power_stop. It preserves native ownership, full product1338 plus sole QA override, Writer/Reader packages, exact Runtime typed restoration and replay, actual NO_POWER, operating dependency, powered/ACTIVE kitchen, positive global mana and open operator. Raw graph/revision, source-derived hold, intervening held minutes, zero stopped charge, original identity and one recovery sale are joined without canonicalization or dropped fields. S4 causes NO_POWER by directly calling disconnect_nodes; it is not global-depletion proof. Global depletion appears only in B1 combined diagnostic; B1 has RELATED_FACILITY_INACTIVE and supplies neither isolated power_stop nor priority approval.
 whole native未確認。以下の「今回のPython確認と入力不整合」は旧bundleの履歴。
 新値: 補正済み `build_dir/audit-support/native-first-current/` に対し
 verify_native、ownership/save/ledger個別検査、applicabilityが成功した。
 checker_native_fixtures.py、checker_negative_fixtures.py、
 checker_applicability_fixtures.py --native-bundle は各1回実行しexit 0。
 旧23負例と新2負例（signature行だけのSHA、後続コメントを除いたSHA）を全て拒否。
 既存fixture14件も拒否、A/Bの登録版・production版・行移動正対照成功、3負例拒否。
 正規bundleを合成補正せず検査し、結果・旧値・新版SHAはc-native-validation.jsonに保存。
 全文rawの `old == new` および
 `sha256(new[function]) == production_body_sha256 == registered_body_sha256` が必須。
 whole gateは未実行。原15条件+EV、7領域、安全性3結果、30/88の分母、予算、
 repair上限は変更せず、formal_original_credit=0。正式受入はRunner・独立レビュー・
 オーナー判断待ち。以下の旧blocked記述を現在のC検査結果として扱わない。
-## C段階追補（本節がrepair4以前の状態説明に優先）
+The low authority finding remains explicit: destruction_stop is bound to BASELINE:183, a mana-depletion line, not destruction authority. An explicit D05 destruction rule is required; pin/registry correction only after approval through normal repair. Observation and mechanical verification do not resolve this gap. A01 midnight ownership upkeep, dependency hold and18:00 are approved and are not re-asked. Other mandatory priorities remain pending under D05(a–d).
-`verify_native(base)` は供給済み `native-first-current` 形式の有限adapter。
+Full178 used checker f5 (`f5b44827958f2ae352fe5c4bc3a1ffd4211ec7a41fc4c0759c8b954891662324`),21615 checks; exact receipt preserved at B/audit-support/p18-regression-support-final-r01/native-full178/runner-ended.json (runner-input.json selected_source_map preserves all1339 selected inputs; source-start.json records initial product sources). **No full1339 run against a61 exists.** Suites/parse not executing Python support checker-independent product applicability only. Static full178 selected-map comparison found one test-source difference (tests/business/test_required_kitchen.gd: full3a9c92f8…, current5dcc86d6…); no game-source difference. Runner must preserve that test applicability binding; no blanket1338 identity is claimed. Do not relabel the old full proof as a61 validation.
 Rootのprobe/Reader/wrapperは起動・再実装しない。A/B、verify、coverage、
 boundary_conditions、15条件、reachable EV、7領域、3安全性結果は維持する。
 既存scalar検査は宣言の整合性検査として残すが、これだけでは成功しない。
-whole gateのindexには追加で `native_bundle` が必要。
+Remaining Runner work: owner D05 decisions after review, any subsequent normal repair, support53cb normal registered rebind, final full run and final applicability binding, formal independent review, integration P04 first then support on main9b1a18c1, and individually applicable nativeWindows obligations. Missing original authority or unknown mandatory rules remain gaps regardless of mechanical PASS. No probe or test is requested or run by this docs-only repair.
 `manifest` は evidence directory相対の `OWNERSHIP_RAW_PROVENANCE.json`、
 `sha256` はその実SHA。manifestの親をbundle rootとして以下を照合する。
 絶対パス・親参照・symlinkは既存safe規則で拒否する。
 native production_commitはtested HEADと一致させる。別版資料をA/Bの一致だけで
 流用しない。今回のproduction版とworker checkoutは区別したまま保持する。
 1. SOURCE_MANIFESTの76 fileとOWNERSHIP_RAW_PROVENANCEの96 fileは、
   各bytesとSHAを実体から再計算する。由来のsource絶対パスは開かない。
   3 runのimport/parse/repro、formalのwriter/reader、合計10プロセスは
   started→process→endedのPID、owner、argv、時刻順、実終了codeを照合する。
   execution・phase receipt・actual phase・cleanupのPID集合と埋込記録も一致必須。
   stdout/stderr/native logのSHA、通常終了、cleanupのwait結果とerrors空を要求する。
   Writer/Readerは別PID・別profileで、profile receipt・環境・5 slotのパスも結合する。
 2. production_commitは3結果資料とapplicabilityで一致し、specの6登録pinと
   production Git blobから計算した6 current pinを区別する。各runのsource_beforeと
   selected_source_mapにも結合する。20関数は既存A/Bと同じ全文raw比較を行う。
   後続トップレベルdoc commentを含む抽出全文rawのSHAだけを許可する。
   signature行のみ、コメント除外prefix等の候補は許可しない。
 3. `observations.json` の5点と対応 `midnight-*.json` を結合する。
   receiptはtransaction IDを一意にし、row重複を拒否し、順序・多重度を保持した
   台帳差分との完全一致を要求する。Readerの生receipt、first/replayも同じ行に結合する。
   SERVICE_SALEにservice_idを要求しない。after snapshotの
   `/systems/runtime/economy/idempotency` の `service.payment.<service_id>` から
   transaction_idを得て、sale・guest wallet・facility revenue・cash sweepを結合する。
   固定のPID・価格・transaction番号を使わない。元価格と時間はproduction Gitの
   facility .tres、run inputのpin、初期facility/service/requestと照合する。
   PAUSEDはstateに加え `interruption_reason=RELATED_FACILITY_INACTIVE` を要求し、
   進捗・service ID・予約IDを保持、売上0、財布差分0を再計算する。
   request存在系列、予約requester/facility/ACTIVE→CONSUMED、復帰1回課金を照合する。
   最後のGuest despawn時は残存台帳から財布を再計算し、Guest辞書の存在を偽定しない。
   maintenanceは同一transaction・施設・金額のaccrual/paymentを対にする。
   発生1439と支払い1440は同分扱いせず、観測したmidnightとその直前として照合する。
 4. 正式保存は5点×4member×writer/reader=40実ファイルを照合する。
   execution.formal_before/afterの20 member map一致と実SHA/bytes一致を要求する。
   typed 14件はwriter-persisted 5、reader-loaded 5、reader-replayed 4（before以外）。
   原order-evidence .varおよびrun固定input pinと実SHAを照合する。
   .var decodeは行わず、値の判定はnative JSON receipt/stateを根拠とする。
 このadapterが返す条件はdependency_stop/recovery_completion/paused_midnightの
 有限系列だけ。正式保存member同一性は、全save_restore条件達成を意味しない。
 whole gateは固定15条件+EVとこの結果の差集合を未収集としてfailする。
 非ゼロ給与×シフト交代×00:00、command再送、停電→閉店同Tick、退出/予約解放、
 破壊、EV等をscalar=trueで埋めることはできない。原条件の加点は常に0。
 ### 今回のPython確認と入力不整合
 供給rawのownership/save/ledger個別検査は成功。applicability資料は
 `native ordering bytes` で拒否する。4関数のbody SHAが複数行シグネチャの
 途中までしか含まないためで、詳細はEVIDENCE_COLLECTION.mdに記録した。
 実raw全体を合格とは報告しない。
 checker_native_fixtures.pyはallowed_paths内の一時コピーで23負例を検査する。
 通常の負例ではmanifest SHAも再計算し、hashだけを理由とする失敗を避ける。
 1byte改竄、member欠落、PID/profile同一化、ended異常、cleanup欠落、
 receipt二重化/削除、PAUSED売上、予約孤立、財布差分、idempotency誤結合、
 commit/pin不一致、typed/member変更、scalar自己申告を全て拒否する。
 PAUSED売上と予約孤立にはJSON側も同時変更する対抗例を含む。
 一時コピーのapplicabilityのみGit全文hashへ差し替えた合成正対照はあるが、
 これを正規native証拠として保存・採用しない。
 旧synthetic_controlはnative rawを持たないため現在はexit 1が正しい。
 既存13負例も維持し、全14件を拒否。A/Bの正対照と3負例も維持する。
 本番の未収集indexに対する重複validateは行わない。
 ## repair4差分（未完成・blocked）
 今回のA/B実装では、以下の旧説明の「6不変pin=実checkout」および
 reachabilityのstart/end/text形式を置き換えた。詳細と未供給入力は
 `EVIDENCE_COLLECTION.md` を参照。Cのowned_outer/raw台帳結合とD/Eの残項目が
 未完成のため、このcheckerを正式受入には使用しない。
 - `registered_pins` はspec.current_source_pinsと一致し、登録Git blob SHAをcheckerが再計算する。
 - `versions` はexecution_origin（9767b0aの完全SHA）、registered（deb1bcbの完全SHA）、
  tested（HEAD）、integration（null）の4キー。candidate_commitもHEADを維持。
 - `applicability_delta` は登録版..HEADのautoload/scriptsのGD変更関数の
  path/function配列。checkerの計算順と完全一致。`delta_cases` は
  `path:function` → 条件ID → engine case ID。条件集合はchecker内固定の保守的判定。
 - 全autoload/scripts GDがsource_map必須で、実checkoutとHEADのraw一致も必須。
 - reachability.source_refsはpath/sha256/function/anchor_sha256/line_count。
  絶対行位置は使用せず、関数内のraw本文アンカーを一意に解決する。
 - 20順序関数は固定抽出規則で登録Git blobとtestedをraw比較する。
 Python確認結果: 既存合成正対照1件exit 0、負例13件exit 1。
 別のA/B対照は登録=testedと実production Git blobの合法delta（25変更単位）の
 2件成功、両版で+7行のアンカー解決成功、delta欠落/境界case欠落/版誤表示の
 3負例を拒否した。全てengine証拠ではなくPython検証のみ。
 owned/count/restore/別候補receipt流用の新負例は未実装であり、上記に含めない。
 以下はrepair3時点の記録。置換対象以外もC修正完了の証明として扱わない。
 `python3 tools/check_p04_order_evidence.py --verify-only` は環境変数 `BUILD_OUTPUT_DIR` の `p04-evidence/index.json` を読み、書込み・試験・Runner操作をしない。欠落時は非0。原30/88の受入・完了を確定しない。
 D05-P04-DEPENDENCYとD05-P04-SHIFT-1800は承認済み。固定必須条件と証拠が揃えばmachine_verified=true、formal_acceptance=false、exit 0。残るD05の帰属pendingを一括failにしない。必須authority pending・証拠欠落は非0。独立レビュー・通常統合までは正式受入0。
 内部JSON形式は `P04_ORDER_EVIDENCE_PROTOCOL.json` を基に次の有限サブセットを実装した。重複JSONキー、NaN/Infinity、絶対・親参照・symlink・重複artifact pathを拒否する。全ハッシュは生バイトSHA256。indexに合格booleanや試験数があっても判定には使用しない。
 - `schema_version: 1`, `task_id: P04-01`, checkout HEADと一致する `candidate_commit`, `formal_acceptance: false`。
 - `source_map`: repository相対パス→SHA256。specの6不変pinと旧map内autoload/scriptsの全GDScript依存を必須とする。追加sourceも実ファイルと照合する。
 - `environment`: 非空 `os` と `engine`, `configuration`, `inputs` の証拠ディレクトリ相対パス→SHA256 map。engineは実行バイナリのコピー。OSの自己申告だけではnative証明にならない。
 - `artifacts`: ID→`path`, `bytes`（整数）, `sha256`, `type`。typeは observation/state/receipt/stdout/native_log/save/authority のいずれか。
 - `authority`: ref→`status`（original/approved）, `artifact_id`。raw文書の存在を確認するが内容の原規約適合は独立レビューを要する。pendingは失敗。
 - `domains`: 正確な7領域名→`source_refs`, `authority_refs`, `cases`, `invariants`, `applicability`。source_refは `path/function/sha256`。applicabilityはindexと同じ `source_map/environment`。
 - 各caseは一意な `id` とartifact IDの `input/before/operation/after/receipt`。receipt JSONは正整数 `start_pid`、同じ `end_pid`、整数 `exit_code: 0`、`engine_ended: true`、一致する `source_map/environment`、raw `stdout/native_log` artifact IDを要求する。receiptのcase_idとinput/before/operation/afterのartifact_hashesを照合する。caseにもraw_origin=engineを要求する。ログの意味と実行由来の独立確認はRoot/reviewerが行う。
 - 各invariantは `artifact_id/json_pointer/operator/authority_ref/raw_origin`。raw_originはengineのみ。root derivationはformula検証未対応のため拒否する。RFC6901 pointerでraw JSONから値を読む。eqはexpectedとの型を含むliteral一致、nonnegativeはboolean以外の数値が0以上、count_eqは配列/辞書長と整数expectedの一致。same_literal/distinctは `paired_artifact_id/paired_json_pointer` の値との型を含む比較。未知operatorは失敗。
 ## 固定必須条件
 checkerのREQUIREDが唯一の必須条件定義であり、indexから条件を受け取らない。conditionsはそのIDと完全一致するmap。各値はcase_id、固定順のauthority_refs、nativeWindows: pending。各条件は指定domainのengine caseと全metricのeq invariantを必要とする。観測はcase.afterの /conditions/<condition_id>/<metric> に置き、invariantのcase_id、artifact_id、pointer、expectedを固定定義と照合する。pass booleanや試験数は使わない。測定値は実際のengine観測から出すこと。手書き合成fixtureはchecker分岐検証専用であり、受入証拠には使用不可。
 - 停止課金0: power_stop / destruction_stop / dependency_stop。依存先停止は進捗差分0・予約とservice ID保持も必要。
 - 完了・課金1回: shift_completion（1080、交代前）/ recovery_completion / same_minute_replay（再送・重複生成0）。
 - 孤立0: closure_release / exit_release / patience_release / paused_midnight。直接休業ではD-034の開始済み継続と待機予約解放を区別。停止日跨ぎは停止中課金0と復帰完了課金各1回。
 - 決算1回: midnight_settlement / midnight_replay / save_restore。売上・給与・維持費・勤務分の支払い各1回、非ゼロ給与を必須とし、帰属先は新しく決めない。
 - night_staff_absent: 1081、夜番0、WAITING_FOR_STAFF。
 - overtime_task: 既存interrupt_level=0の残業と勤務分記録1回（staff_service:1409-1412）。
 authorityの参照名はREQUIREDに固定。BASELINE文書、D-034文書、既存A01を記録した入力草案のraw bytesをcheckoutと照合する。A01を再承認しない。承認2条件はauthority typeの同梱D05_OWNER_APPROVAL.jsonと同一SHA256（4583ee9aad45c4db183d72df4420df48aa8e0897e3b5efda13016f0b5cdbd68e）を要求する。origin=direct_user_reply、formal_acceptance=falseと承認IDも確認する。
 save_restore条件にはsave_artifact（type=save）とrestore_receiptを追加する。元caseのreceiptのsaved_sha256、readerのrestored_sha256を保存raw hashと照合し、別の正整数PID・終了・exit 0・source/environment一致・stdout/native_logを要求する。保存packageの意味的完全性・正式保存APIの利用は生証拠の独立レビュー対象。
 reachabilityはEV/transportのみ。各source_refはpath/sha256/start/end/textで、固定REACH_REFSの経路を全て含み、実際の行本文と一致すること。reason必須。救護搬送は課金予約reach=false。EVはスタッフ移動前予約経路があるためreach=trueとcase_idを必要とする。停電domainのengine case.afterのev.reserved_before_travel=true、power_stopped=true、orphan_reservations=0のeq invariantを要求する。客の到着後予約だけを根拠にEV全体を除外できない。
 specは契約文字列hashと照合し、checkoutの末尾LF一つの表現差だけを許容する。その他のraw hashは正規化しない。
 ## worker確認
 checker_negative_fixtures.pyはallowed_paths内の一時ディレクトリをBUILD_OUTPUT_DIRに使用し、終了後削除する。py_compile、対照用合成index（exit 0、正式受入false）、指定10負例（各exit 1、対応エラー）を確認済み。実engine試験・Runner操作は0。Runnerがp04-acceptanceを正式実行し、Rootが現版適用性、別セッションのreviewerが生証拠由来と意味を独立確認する。
@@ -0,0 +1,79 @@
 # P04-01 REPAIR51 canonical handoff
 ACTUAL S50 historical evidence complete; S51 docs-only resubmission; S51 native admission pending at worker handoff (fresh native on Q51 required by S-binding, checker:368-371); post-submit admission determined only by Root version-pinned receipts; formal_acceptance false; P04=0.
 ACTUAL S50: native6 / 24 phases PASS (historical; bound to S50/Q50).
 ACTUAL S50: collector 15+EV, missing 0 (historical; bound to S50/Q50).
 ACTUAL S50 receipts: build/audit-support/p04-root-acceptance-a9ef681f/.
 ACTUAL S47: full184 retains its original label; conditional reuse only under the existing checker and applicability map. r22 remains historical.
 S51 native admission is pending AT HANDOFF. After submission, only Root version-pinned receipts under build/audit-support/p04-root-acceptance-<S>/ and build/p04-evidence/index.json determine admission. Worker-time NOT RUN / UNDETERMINED / unexecuted text below is historical and never a reason to rebuild. Fresh native6 on Q51 is required by S/Q binding, not by that text. No future S51 SHA, Q51 or receipt is claimed.
 All six D05 IDs remain approved; pending D05 is empty. PAUSE-REASON: S5B proves same-tick onset from ACTIVE gives RELATED. Power-first then dependency closure shows NO_POWER statically at M facility_service.gd:860-864; that sequential case is EXPLICITLY UNRESOLVED/UNPROVEN under the unchanged approval. It is not a defect, cured, proven, or silently narrowed. The :569 gate preserves P04 safety regardless of label. Any later product change needs a separate owner-authorised task; do not amend the contract or re-ask the owner.
 Remaining Root gates:
 - Root fixes Q51; compare actual hashes with REPAIR51_APPLICABILITY_MAP.json; stop reuse on executable differences
 - clean exact-Q check-only; capacity and PID check; one heavy lease for fresh native6 on Q51
 - reader/adapters then collector; full184 conditional reuse check; order CLI/complete_B conditional reuse or rerun once
 - index regeneration; one p04-acceptance validate; separate Opus whole-unit independent review
 - prepare / exactC / integration / final / RootDB join / ledger / main push
 - nativeWindows individually pending
 Scope: documentation-only repair within the original P04-01/W unit. Original total 30/88, formal 16, P04 credit 0; formal_acceptance false; unit incomplete. No partial credit. See REPAIR51_APPLICABILITY_MAP.json for hashes and reuse conditions.
 # Historical, superseded
 All older text below, including its current/status headings and worker-time execution statements, is superseded historical material.
 ## REPAIR49 current correction
 Source-ready only; original 30/88, formal 16, P04=0, no partial credit.
 REPAIR48's specification-mismatch blocker below is historical and corrected:
 the immutable 7000-byte original has SHA256
 d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f;
 removing its single EOF LF gives
 9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881.
 This is the existing Git/Runner strip/checker one-EOF-LF pin contract.
 No specification, approval or normalization change. Older contradictory wording
 below is superseded history, including blanket full-reuse prohibitions and
 all-controls-unexecuted wording. Q47 admission/index failures remain failures.
 See REPAIR49_STATUS.md for closure audit and verbatim complete_B FileNotFoundError.
 Root handoff reports payload(B), all53, series/join/power PASS; order-typed remains
 UNDETERMINED. Worker did not rerun them. Corrected complete_B remains unexecuted.
 Old native/full successes confer no new-S acceptance or credit.
 REPAIR48 current source status: see [REPAIR48_STATUS.md](REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
 RUN47 current harness status: see REPAIR47_STATUS.md, REPAIR47_PLAN.json and REPAIR47_VALIDATION.json. Original unit remains unaccepted; earlier status below is historical.
 # Historical P04-01 status — repair31
 **BLOCKED: partial implementation; do not start the once-only native/full run.**
 Formal completed status is **16/88**, with **zero P04 credit**.
 D05 is six of six actually approved; adoption and exact-Q verification are pending.
 All four later D05 policies were approved by the actual human on 2026-10-18.
 D05_REMAINING_APPROVAL.json preserves exact answers and binds both supplied
 records by path/SHA256. Dependency hold, 18:00 and A01 upkeep remain approved.
 The old candidates are superseded, not deleted.
 Frozen M is c0ea009b28a7649aca6a433a1a24dc0be5e7ab81. Actual tree enumeration
 found 1368 product files excluding the checker and 3644 metadata paths.
 Native/full selected SourceRefs must additionally include the checker.
 Final S, genuine non-production Q and later normal C are not supplied by this
 worker. No Git writes, engine execution, Runner operations or delegation.
 The checker has partial authority/role corrections; the seven-domain audit uses
 M source. S5 executable probes, fresh-Q collector/wrapper/index plumbing,
 full-proof joins and independent normal-C qualification remain incomplete.
 Normal C now fails closed without the authoritative Root/Runner receipt contract.
 The isolated Git fixtures remain Root-run because `/tmp` creation was denied.
 See [REPAIR31_STATUS.md](REPAIR31_STATUS.md) for precise remaining work and the
 corrected Root execution order; [s5/PENDING.md](s5/PENDING.md) records S5 gaps.
 Historical S1–S4/r22, old registered validation and f5 full178 retain their
 original identities. They are not fresh Q evidence. All 15 conditions plus EV
 still require exact-version evidence; nativeWindows remains individually
 pending. Static fixture results confer no original acceptance credit.
@@ -0,0 +1,53 @@
 {
  "task_id": "P04-01",
  "origin": "direct_user_reply",
  "formal_acceptance": false,
  "source_bindings": [
    {
      "path": "build/owner-handoff/p04-after-p26-closure-r01/D05_ACTUAL_HUMAN_APPROVAL.json",
      "sha256": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96"
    },
    {
      "commit": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01-owner-approval-20261018/D05_ACTUAL_HUMAN_APPROVAL.json",
      "sha256": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96"
    }
  ],
  "approved_choices": [
    {
      "id": "D05-P04-DESTRUCTION",
      "source_id": "destruction_completion_order",
      "answer_exact": "現行順序を承認する（Opus推奨）",
      "approved_question_policy": "コマンド破壊をサービス完了前に処理。事故・襲撃による破壊は完了・課金後に処理してその分の売上を有効とし、次の分で失敗処理と予約解放。"
    },
    {
      "id": "D05-P04-MIDNIGHT-DAY",
      "source_id": "midnight_revenue_day",
      "answer_exact": "新しい日に計上し、前日決算・維持費を完了より先に確定する（Opus推奨・現状維持）",
      "approved_question_policy": "00:00完了のサービス売上は新しい日に計上。前日決算・維持費は完了より先に確定。既承認の維持費規則と18:00交代順序を維持。"
    },
    {
      "id": "D05-P04-PAUSE-REASON",
      "source_id": "pause_reason_priority",
      "answer_exact": "2点とも現行動作を確定する（Opus推奨）",
      "approved_question_policy": "停電と依存先休業が同時なら休業を理由表示の優先とする。どちらも進捗・課金停止、予約保持。"
    },
    {
      "id": "D05-P04-EXIT",
      "source_id": "exit_command_ai_order",
      "answer_exact": "2点とも現行動作を確定する（Opus推奨）",
      "approved_question_policy": "退出コマンドは完了前、AIの予定退出は判断中の客だけを対象として完了後に処理。"
    }
  ],
  "prior_approved_rules_preserved": [
    "依存先休業中は進捗・課金停止、予約保持、復帰後1回だけ完了",
    "17:59→18:00昼番作業を先に確定し完了・課金後に交代",
    "既承認維持費規則"
  ],
  "supersedes": [
    "D05_REMAINING_ORDER_CANDIDATE.md",
    "D05_REMAINING_ORDER_CANDIDATE.json"
  ],
  "original_unit_complete": false
 }
@@ -0,0 +1,131 @@
 {
  "task_id": "P04-01",
  "revision": "repair29",
  "status": "superseded by D05_REMAINING_APPROVAL.json; candidate text below is historical",
  "approval": "D05_REMAINING_APPROVAL.json",
  "apply_to_product_or_checker": false,
  "review_flow": "Root asks owner after review. This document neither requests approval from worker nor records it.",
  "proof_legend": {
    "R": "B/audit-support/p04-raw-collect-r22",
    "I": "B/p04-evidence/index.json schema2",
    "pins": "REPAIR29_STATIC_SOURCE.json; R/MANIFEST.json and I raw_references/versions"
  },
  "choices": [
    {
      "id": "a",
      "topic": "Power vs closure/dependency",
      "status": "pending D05",
      "observation": {
        "status": "observed-current",
        "behavior": "RELATED_FACILITY_INACTIVE selected before NO_POWER; both pause service with no charge.",
        "source": "FacilityService _prepare_service_for_tick:853–874, phase FACILITY_COMPLETION after MANA projection",
        "proof": "Root-measured R/s4.json isolated NO_POWER; R/s3.json B1 combined RELATED diagnostic; REPAIR29_STATIC_SOURCE.json source pins"
      },
      "inputs": "Same service and minute, related facility inactive and power unavailable; include direct closure separately under D-034.",
      "A": {
        "recommended": true,
        "rule": "Keep current RELATED-first reason selection.",
        "outcome": "Service held, progress/payment paused, reservation and serviceID retained.",
        "side_effects": "Reason reports dependency while both causes apply; no new hold limit.",
        "dependencies": "Approved dependency hold, D-034 direct closure, existing MANA-before-completion order."
      },
      "B": {
        "rule": "NO_POWER wins reason selection when both conditions fail.",
        "outcome": "Same no-charge hold safety; reason reports power.",
        "side_effects": "Reason/event and recovery-precedence semantics would change; concrete implementation and exact-version proof require normal repair.",
        "dependencies": "Must retain no-charge while either legitimate hold persists; preserve approved dependency reservation/identity behavior."
      }
    },
    {
      "id": "b",
      "topic": "Destruction",
      "status": "pending D05",
      "observation": {
        "status": "observed-current",
        "behavior": "Command destruction in APPLY precedes completion. Incident destruction in INCIDENTS follows it; B4a shows25G charge then destruction in same tick.",
        "source": "Runtime _process_tick_commands:5743, _advance_facilities:8482, _advance_defense:8577 / _apply_defense_outcome_boundary:9804",
        "proof": "Root-measured R/s3.json B4a/B4b; REPAIR29_STATIC_SOURCE.json"
      },
      "inputs": "A service due for completion in a minute with command or incident destruction of its facility.",
      "A": {
        "recommended": true,
        "rule": "Keep command-before-completion and incident-after-completion behavior.",
        "outcome": "Command destruction prevents completion; incident may follow a valid completion/charge that minute; next-tick broken failure/release remains.",
        "side_effects": "Completion and destruction can coexist in one tick as B4a; not a universal no-sale-on-destruction rule.",
        "dependencies": "P04 stopped-charge and orphan-reservation safety; explicit D05 destruction authority required."
      },
      "B": {
        "rule": "An incident in the same minute suppresses that minute completion (or voids it if already posted).",
        "outcome": "No retained completion/sale for the incident-destruction minute.",
        "side_effects": "Would require preemption or atomic reversal of completion, inventory, payment and rewards; no unapproved numbers or refund amounts supplied.",
        "dependencies": "Owner must specify the suppress/void transaction semantics; preserve idempotency, no orphan reservations and approved shift/hold rules; normal implementation and new proof required."
      }
    },
    {
      "id": "c",
      "topic": "Exit",
      "status": "pending D05",
      "observation": {
        "status": "observed-current",
        "behavior": "Command exit APPLY before completion/charging; AI PLANNED_EXIT after them; LEAVING despawns later.",
        "source": "Runtime _execute_leave_facility_queue:7553; _advance_guest_ai_decisions:8738–8762",
        "proof": "Root-measured R/s3.json B2a/B2b/B3 and B1 departure history; source pins REPAIR29_STATIC_SOURCE.json"
      },
      "inputs": "Exit command or AI exit due at a minute with a completion-ready service. Current AI PLANNED_EXIT applies to DECIDING guests; do not assume it preempts an active service.",
      "A": {
        "recommended": true,
        "rule": "Keep current command/AI distinction and state predicates.",
        "outcome": "Command leave/release happens first; eligible AI planned exit follows completion/charging and queue processing.",
        "side_effects": "AI due time alone does not universally cancel current-minute completion; later despawn remains separate.",
        "dependencies": "D-034, reservation ownership/release, phase6 completion before phase10 AI."
      },
      "B": {
        "rule": "An exit due this minute preempts completion.",
        "outcome": "Applicable due exits release/cancel before completion and no completion sale occurs for that preempted service.",
        "side_effects": "Changes eligibility for exit and service cancellation; would change simultaneous completion/payment observations.",
        "dependencies": "Owner must define applicable due-exit states; preserve no orphan reservation, no duplicate charge and approved dependency/shift behavior; normal repair and exact proof required."
      }
    },
    {
      "id": "d",
      "topic": "Cost time/day attribution beyond A01 and18:00",
      "status": "pending D05",
      "observation": {
        "status": "observed-current",
        "behavior": "Sale dated at post-increment minute. At00:00 TIME_BOUNDARIES settlement/upkeep precede completions;00:00 sales go to new day because daily-close period_end is exclusive.",
        "source": "Kernel advance_one_minute:122; Runtime _apply_service_transaction:11785 /11826–11838; coordinator _process_daily_close:1125 /1136",
        "proof": "Root-measured R/s2a.json paid midnight/replay; I C; REPAIR29_STATIC_SOURCE.json"
      },
      "inputs": "Service completes on calendar boundary; account period ends at boundary minute. A01 ownership upkeep and18:00 shift interval remain fixed.",
      "A": {
        "recommended": true,
        "rule": "Keep post-increment sale time and new-day attribution for00:00 sales.",
        "outcome": "Closing day excludes boundary-minute completion; new day receives sale.",
        "side_effects": "Closing summary is finalized before those sales; upkeep ownership rule unchanged.",
        "dependencies": "Exclusive daily-close interval, sale timestamp, idempotent close/replay; P04 mandatory timing/attribution separate from D04/P05 numeric cost math."
      },
      "B": {
        "rule": "Boundary-minute sales belong to closing day.",
        "outcome": "Closing day includes those sales.",
        "side_effects": "Would require a distinct accounting attribution or revised boundary transaction sequencing; affects daily summaries/reconciliation/replay. No numeric cost policy is invented.",
        "dependencies": "Owner must settle attribution mechanics and same-boundary replay; preserve A01 and18:00, all P04 safety criteria; normal repair and exact-version proof required."
      }
    }
  ],
  "bundle": {
    "label": "accept current-behavior A for a-d",
    "status": "pending D05",
    "recommended": true,
    "coupling_notes": [
      "a preserves the approved hold and no-charge safety independent of reason priority.",
      "b and c use the same completion boundary: commands before, incidents and AI after. Changing either requires separate applicability and replay checks.",
      "d relies on TIME_BOUNDARIES before completion; changing attribution can affect the transaction history used by b/c and settlement idempotency.",
      "A01 ownership upkeep, dependency hold and18:00 interval are already approved and are excluded from renewed approval.",
      "Owner may explicitly rule some remaining items non-mandatory; no such ruling exists here. Unknowns stay pending; mandatory acceptance is never relaxed."
    ]
  },
  "authority_gap": "destruction_stop currently binds BASELINE:183, which is mana depletion, not destruction authority. Explicit D05 destruction rule required. Pin/registry repair only after approval through normal repair.",
  "power_scope": "S4 NO_POWER uses direct disconnect_nodes; not proof of global depletion, which exists only in B1 combined diagnostic.",
  "original_unit_complete": false,
  "superseded_by": "D05_REMAINING_APPROVAL.json"
 }
@@ -0,0 +1,95 @@
 > Superseded: D05_REMAINING_APPROVAL.json records the actual human approval of all four policies. The candidate text below is retained as history.
 # D05 remaining order candidate — repair29
 **Approval candidate only. SOURCE-READY / NOTRUN.** Root asks the owner after review. Nothing is applied to product, checker or registry; observation is not approval. A01 midnight ownership upkeep, dependency hold and18:00 are already approved and are not re-asked.
 Structured choices: [D05_REMAINING_ORDER_CANDIDATE.json](D05_REMAINING_ORDER_CANDIDATE.json). Source path/line/SHA256 pins: [REPAIR29_STATIC_SOURCE.json](REPAIR29_STATIC_SOURCE.json); phase map: [ORDER_AUDIT.md](ORDER_AUDIT.md). R = B/audit-support/p04-raw-collect-r22; I = B/p04-evidence/index.json. These are Root-measured exact-version proof references, with raw/provenance pins in R/MANIFEST.json, I and the static manifest.
 ## (a) Power vs closure/dependency — pending D05
 **Observed-current:** RELATED_FACILITY_INACTIVE selected before NO_POWER; both pause service with no charge. Source: FacilityService _prepare_service_for_tick:853–874, phase FACILITY_COMPLETION after MANA projection. Proof: Root-measured R/s4.json isolated NO_POWER; R/s3.json B1 combined RELATED diagnostic; REPAIR29_STATIC_SOURCE.json source pins.
 **Inputs:** Same service and minute, related facility inactive and power unavailable; include direct closure separately under D-034.
 **Option A (recommended; keep current behavior):** Keep current RELATED-first reason selection.
 - Outcomes: Service held, progress/payment paused, reservation and serviceID retained.
 - Side effects: Reason reports dependency while both causes apply; no new hold limit.
 - Dependencies: Approved dependency hold, D-034 direct closure, existing MANA-before-completion order.
 **Option B:** NO_POWER wins reason selection when both conditions fail.
 - Outcomes: Same no-charge hold safety; reason reports power.
 - Side effects: Reason/event and recovery-precedence semantics would change; concrete implementation and exact-version proof require normal repair.
 - Dependencies: Must retain no-charge while either legitimate hold persists; preserve approved dependency reservation/identity behavior.
 ## (b) Destruction — pending D05
 **Observed-current:** Command destruction in APPLY precedes completion. Incident destruction in INCIDENTS follows it; B4a shows25G charge then destruction in same tick. Source: Runtime _process_tick_commands:5743, _advance_facilities:8482, _advance_defense:8577 / _apply_defense_outcome_boundary:9804. Proof: Root-measured R/s3.json B4a/B4b; REPAIR29_STATIC_SOURCE.json.
 **Inputs:** A service due for completion in a minute with command or incident destruction of its facility.
 **Option A (recommended; keep current behavior):** Keep command-before-completion and incident-after-completion behavior.
 - Outcomes: Command destruction prevents completion; incident may follow a valid completion/charge that minute; next-tick broken failure/release remains.
 - Side effects: Completion and destruction can coexist in one tick as B4a; not a universal no-sale-on-destruction rule.
 - Dependencies: P04 stopped-charge and orphan-reservation safety; explicit D05 destruction authority required.
 **Option B:** An incident in the same minute suppresses that minute completion (or voids it if already posted).
 - Outcomes: No retained completion/sale for the incident-destruction minute.
 - Side effects: Would require preemption or atomic reversal of completion, inventory, payment and rewards; no unapproved numbers or refund amounts supplied.
 - Dependencies: Owner must specify the suppress/void transaction semantics; preserve idempotency, no orphan reservations and approved shift/hold rules; normal implementation and new proof required.
 ## (c) Exit — pending D05
 **Observed-current:** Command exit APPLY before completion/charging; AI PLANNED_EXIT after them; LEAVING despawns later. Source: Runtime _execute_leave_facility_queue:7553; _advance_guest_ai_decisions:8738–8762. Proof: Root-measured R/s3.json B2a/B2b/B3 and B1 departure history; source pins REPAIR29_STATIC_SOURCE.json.
 **Inputs:** Exit command or AI exit due at a minute with a completion-ready service. Current AI PLANNED_EXIT applies to DECIDING guests; do not assume it preempts an active service.
 **Option A (recommended; keep current behavior):** Keep current command/AI distinction and state predicates.
 - Outcomes: Command leave/release happens first; eligible AI planned exit follows completion/charging and queue processing.
 - Side effects: AI due time alone does not universally cancel current-minute completion; later despawn remains separate.
 - Dependencies: D-034, reservation ownership/release, phase6 completion before phase10 AI.
 **Option B:** An exit due this minute preempts completion.
 - Outcomes: Applicable due exits release/cancel before completion and no completion sale occurs for that preempted service.
 - Side effects: Changes eligibility for exit and service cancellation; would change simultaneous completion/payment observations.
 - Dependencies: Owner must define applicable due-exit states; preserve no orphan reservation, no duplicate charge and approved dependency/shift behavior; normal repair and exact proof required.
 ## (d) Cost time/day attribution beyond A01 and18:00 — pending D05
 **Observed-current:** Sale dated at post-increment minute. At00:00 TIME_BOUNDARIES settlement/upkeep precede completions;00:00 sales go to new day because daily-close period_end is exclusive. Source: Kernel advance_one_minute:122; Runtime _apply_service_transaction:11785 /11826–11838; coordinator _process_daily_close:1125 /1136. Proof: Root-measured R/s2a.json paid midnight/replay; I C; REPAIR29_STATIC_SOURCE.json.
 **Inputs:** Service completes on calendar boundary; account period ends at boundary minute. A01 ownership upkeep and18:00 shift interval remain fixed.
 **Option A (recommended; keep current behavior):** Keep post-increment sale time and new-day attribution for00:00 sales.
 - Outcomes: Closing day excludes boundary-minute completion; new day receives sale.
 - Side effects: Closing summary is finalized before those sales; upkeep ownership rule unchanged.
 - Dependencies: Exclusive daily-close interval, sale timestamp, idempotent close/replay; P04 mandatory timing/attribution separate from D04/P05 numeric cost math.
 **Option B:** Boundary-minute sales belong to closing day.
 - Outcomes: Closing day includes those sales.
 - Side effects: Would require a distinct accounting attribution or revised boundary transaction sequencing; affects daily summaries/reconciliation/replay. No numeric cost policy is invented.
 - Dependencies: Owner must settle attribution mechanics and same-boundary replay; preserve A01 and18:00, all P04 safety criteria; normal repair and exact-version proof required.
 ## Bundle: accept current-behavior A for a-d
 Recommended candidate, not approved.
 - a preserves the approved hold and no-charge safety independent of reason priority.
 - b and c use the same completion boundary: commands before, incidents and AI after. Changing either requires separate applicability and replay checks.
 - d relies on TIME_BOUNDARIES before completion; changing attribution can affect the transaction history used by b/c and settlement idempotency.
 - A01 ownership upkeep, dependency hold and18:00 interval are already approved and are excluded from renewed approval.
 - Owner may explicitly rule some remaining items non-mandatory; no such ruling exists here. Unknowns stay pending; mandatory acceptance is never relaxed.
 destruction_stop currently binds BASELINE:183, which is mana depletion, not destruction authority. Explicit D05 destruction rule required. Pin/registry repair only after approval through normal repair.
 S4 NO_POWER uses direct disconnect_nodes; not proof of global depletion, which exists only in B1 combined diagnostic.
 P04 timing/attribution remains mandatory; D04/P05 numeric cost math is separate. No acceptance criterion is relaxed. P04 remains incomplete; original13/88 unchanged.
@@ -1,233 +1,41 @@
-# P04-01: C段階の結合とrepair4収集契約の履歴
+## RUN47 harness repair; original unit remains unaccepted
-## repair6 現在値（2026-10-16、以下の旧blocked記述に優先）
+Q46 S4 failed before engine startup: `AssertionError: complete 316-script parse roster`.
 Secondary guard: `AssertionError: exact source and planned UID set`. Captured S4
 PIDs: `[]`; phases: `[]`; passed: `false`. No game verification ran. This failure
 is historical reference only, never adopted as a pass. Current S4 admission derives
 exact roster/sets from real selection; check-only and native share it. Import-not-
 attempted cleanup requires the original inventory without generated UIDs.
 REPAIR47_PLAN.json and REPAIR47_STATUS.md supersede earlier current-run count and
 reuse instructions. Immutable spec, REQUIRED/REACH_REFS, product, caps, denominator,
 permissions and historical raw are unchanged. Option B: Root freezes new final Q,
 then fresh all-series runs once; no receipt rewriting or reuse adopter.
-旧値: 実applicabilityは `native ordering bytes` で拒否、C全体blocked、
+# Evidence collection — historical repair29 description
 whole native未確認。新値: 補正済みbundleのverify_native成功、
 ownership/save/ledger個別検査とapplicability成功。供給bundleへの書込みは0。
 全文rawの登録版/production一致と両body SHAの全文SHA一致だけを認める。
 後続コメント除外prefixを許す暫定処理は削除した。
-下記3本のPythonコマンドを各1回実行しexit 0を確認。
+Repair30 supersedes current-use claims below: existing S1–S4/r22/full178 records
-native fixtureは既存23負例+signature行SHA/コメント除外SHAの2負例を全て拒否。
+remain historical. New Q evidence is required, with checker explicitly selected.
-合成補正コピーは廃止し、補正済み供給rawをそのまま正対照に使用。
+The fresh-Q collection path and S5 drivers are not ready in this partial repair.
-既存fixture14件拒否、A/Bの登録版・production版・行移動正対照成功、3負例拒否、
+See REPAIR30_STATUS.md; do not start native/full or formal acceptance yet.
 native applicability成功。実行結果、旧検査値、新旧bundle pin、検査コードSHAは
 c-native-validation.jsonに記録。verify_nativeは有限C検査でありwhole gateは未実行。
 原未達の条件、formal_original_credit=0、15条件+EV/7領域/安全性3結果、
 30/88の分母、予算、repair上限を維持する。Root追加paid/再送は今回の範囲外。
 engine、全回帰、製品、Runner、config、DB、git書込み、他agentは全て0。
 正式検証・独立レビュー・オーナー判断待ち。以下の「今回」は旧検査履歴を指す。
-## C段階の追補対象
+Worker **SOURCE-READY / NOTRUN** (static Read/SHA256 only). No probes, tests, engine or Runner execution in this repair. [CURRENT_STATUS.md](CURRENT_STATUS.md) overrides historical creation-time NOT RUN entries in REPAIR22–28 and runbooks, which remain untouched. Do not repeat their completed execution steps merely because their original prose says pending.
-供給rawの現在位置は `build_dir/audit-support/native-first-current/`。
+B = `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
 所有権、台帳・service・予約、正式保存の結合を追加する対象であり、
 この資料の存在だけでは原受入を満たさない。formal_original_creditは0を維持する。
-## 今回のC実装と入力blocker
+| Completed material | Current fact (Root-measured) |
 | --- | --- |
 | B/p04-s4-native-r28 | Four phases PASS; PIDs49940,50044,50078,50105 all ended, guards0, cleanup0. |
 | B/audit-support/p04-root-fb8b-s4-r01 | S4 control/native receipts preserved. |
 | B/audit-support/p04-root-fb8b-local-r01 | Local8 PASS; registered validation on fb8b PASS28.095s. |
 | B/audit-support/p04-raw-collect-r22 | Completed collection of preserved C/series applicability; no new C/S1/S2a/S2b/S3 native runs. |
 | B/p04-evidence | Current schema2 index/generation invocation, missing_conditions=[], all15 conditions + EV mechanically verified. |
-変更はchecker、Python fixtureと本ディレクトリ内のdocsだけ。
+Native product5f6bc11d and main9b1a18c1 remain the Root-measured versions. REPAIR29_STATIC_SOURCE.json hashes current B/audit-support/p04-r17-full-inputs-r01/product (1338 files), not old deb11300, and pins current collection/index. Per-series raw/source/config/input/environment joins remain in the immutable collection and schema2 index; this worker neither regenerates nor normalizes raw.
 Root helperはコピー・再実装せず、既存native成果物を読む。
 結合の正確な規則はCHECKER_PROTOCOL.mdのC追補を参照。
 新規engine/全回帰/Runner操作/git書込み/他agent起動は全て0。
 旧39rawを読了・採用した数も0。repair4-context.jsonの旧履歴は保持した。
-供給rawでは次の個別Python検査が成功した。
+S4 is isolated NO_POWER from direct disconnect_nodes, not global mana depletion. Global depletion is observed only in B1 combined diagnostic. B1 supplies no isolated power_stop or priority approval. Destruction authority BASELINE:183 is a known wrong category (mana depletion); explicit owner D05 destruction rule is required before normal registry/pin repair. Product/checker/registry remain unchanged here.
- OWNERSHIP_RAW_PROVENANCEの96 fileのbytes/SHAと10プロセスのlifecycle/cleanup。
+Full178 used checker **f5**,21615 checks; exact receipt preserved at B/audit-support/p18-regression-support-final-r01/native-full178/runner-ended.json and exact selected inputs at runner-input.json selected_source_map (source-start.json records initial product sources). f5 SHA256 is f5b44827958f2ae352fe5c4bc3a1ffd4211ec7a41fc4c0759c8b954891662324. Product suites/316-file GDScript parse do not execute Python; this does not establish an exact1339 proof against a61. Static comparison with the full178 selected_source_map found one test-source difference (tests/business/test_required_kitchen.gd: full3a9c92f8…, current5dcc86d6…) and no game-source difference. Runner must retain explicit applicability for that test; no blanket product1338 identity with that full178 receipt is claimed. **No full1339 run exists against a61** (a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850). Keep the old full and partial receipts distinct and intact.
 - Writer/Readerの5点×4member、元20member不変、typed .var 14件の実SHA結合。
 - 生receipt 8行、service.paymentのidempotency経由での1回課金、財布差分、
  PAUSED時の進捗・予約保持、復帰後の消費、維持費発生1439→支払い1440。
-ただし `POST_P18_CURRENT_SOURCE_APPLICABILITY.json` の4関数の
+Remaining steps belong to Runner: review this repair; Root obtains owner D05(a–d) decisions or explicit non-mandatory rulings; unknown mandatory rules remain pending. Any approved checker/registry/product change uses a normal repair. Perform support53cb normal registered rebind, final full run against the final source/checker and final source/config/input/environment applicability binding, independent review and integration (P04 first, then support on main9b1a18c1). NativeWindows obligations stay individually pending if required. This document does not launch or authorize duplicate probes and does not replace Runner scheduling.
 registered_body_sha256/production_body_sha256は本文を含まない。
 実Git blobで検算すると、以下の関数先頭からのprefix SHAに一致した。
-| path | function | hash対象のbyte数（本文を含まない） |
+A01 midnight ownership upkeep, dependency hold and18:00 are already approved. P04 timing/attribution remains mandatory, separate from D04/P05 numeric cost math. Original13/88 credit,15 conditions + EV, seven domains, three safety outcomes and30/88 denominator remain unchanged. Original unit is incomplete.
 |---|---|---:|
 | autoload/simulation_runtime.gd | _complete_service_transaction | 140 |
 | scripts/facility/facility_service.gd | _prepare_service_for_tick | 87 |
 | scripts/facility/facility_service.gd | _complete_service | 113 |
 | scripts/facility/facility_service.gd | _fail_service | 119 |
 4つとも複数行引数の後の `) -> ...` より前で終わる。全文比較は別途成立するが、
 報告されたbody hashとの一致は成立しないため、実bundleは
 `native ordering bytes` でfailする。workerはこの供給資料もmanifestも変更していない。
 Root側で同じproduction Git blobの全文を対象にapplicabilityとそのmanifestを
 再生成する必要がある。engineの再起動を必要とする不整合ではない。
 旧暫定処理では後続トップレベルdoc commentの有無だけの2関数差をraw prefix一致
 として扱っていた。repair6で撤去し、現在は全文SHA一致のみ必須とする。
 この入力不整合が残るため、C段階の実raw全体の成功は未確認（blocked）。
 これは原P04-01未達とは別のblockerであり、修正済みの合成コピーで全C検査が
 通ることを原証拠の合格へ換算しない。
 ## 有限の検証
 実行したのは次のPython確認のみ。全て一時ファイルをallowed_paths内へ限定し削除する。
 ```sh
 python3 -B docs/plans/original-completion-2026-10-02/execution/p04-01/checker_native_fixtures.py /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/native-first-current
 python3 -B docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py
 python3 -B docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py --native-bundle /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/native-first-current
 ```
 Cの結果は `c-native-validation.json`。23負例を拒否し、実rawの3個別検査成功、
 実applicability拒否、修正した合成applicabilityの組合せ正対照成功を区別する。
 既存fixtureはscalarのみの旧正対照を含む14件を拒否。
 A/Bは登録版・production版の正対照と行移動の正対照、3負例、C資料の拒否を確認した。
 未収集indexに対するwhole gate/validateは再実行していない。
 ## 固定の原未達
 非ゼロ給与のシフト交代×00:00、command再送、停電→閉店同Tick、退出/予約孤立、
 破壊、EVは未収集。正式保存のSHA同一性は全原条件のsave_restore証明とは別。
 15条件、reachable EV、7領域、安全性3結果を減らさず、未収集をfalse/pending扱いとする。
 原30/88のformal_original_credit=0、独立レビュー・通常統合未実施を維持する。
 以下はrepair4時点の履歴であり、C追補の実装・検証状態には上記が優先する。
 本修正は未完成であり、収集開始・machine gate・原受入の承認ではない。
 原30/88、7領域、部分点0を維持する。D05全体はpending、既存の承認2条件を
 超える規則は作らない。D-034/A01の再承認は求めない。
 ## 読取確認
 `.review-material` はこのcheckoutには存在しない。指定された実体
 `build_dir/audit-support/p04-native-existing-sources/` のwrapper 4本とGD probe
 6本、および `tools/run_all_tests.py`、`tools/regression/owned_outer.py` を確認した。
 10本のraw SHA/sizeは配布SOURCE_MANIFEST.jsonと一致し、`repair4-context.json`
 に保存した。外部旧worktreeのartifactパスは由来としてのみ扱った。
 実checkout HEADは `9767b0a28ca8d252520307dbbac60a1d8cfb87ab`、Runtimeは
 `d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39`。
 提供されたproduction資料の版は `5f6bc11d6bb6e92d22d787989b219fef3a435bc1`、
 Runtimeは `7f01b2dcdf28bc965c7588173c2dc70054633faf7204b1ac38ba0f4369331b47`。
 productionのGit objectも存在する。production資料を実checkoutのsource_mapとして
 流用しない。登録版は `deb1bcb2374eb378b840ca345db952bd8572cb6e`。
 ## A/Bの変更
 checkerはspecのcurrent_source_pinsを登録pinとして保持し、登録Git blobのSHAを
 独立計算する。indexはregistered_pinsとversionsのexecution_origin/registered/
 tested/integrationを分離する。integrationは未統合のためnullのみ。
 testedのautoload/scripts全GDはcheckoutとHEAD blobの一致を必須にする。
 20関数の抽出はchecker内固定。行頭func/static funcから次の行頭関数までの
 raw bytesを比較し、コメント・空白・改行を正規化しない。先頭宣言は
 `<top-level>` 単位としてdiffに含める。追加・削除関数も含む。
 `git diff --no-ext-diff --no-renames --name-only -z base..HEAD -- autoload/ scripts/`
 で変更GDを列挙し、Git blobから変更関数を計算する。applicability_deltaは
 path/function順の配列と完全一致させる。未知の変更も無影響と推定せず、
 delta_casesに保守的な全条件被覆を要求する。境界case IDの存在は後続coverageで
 検証するが、**Cの生証拠結合は未実装なので、この段階では適用可の最終判断に使えない**。
 REACH_REFSはpath/function/anchor_sha256/line_countに変更。実tested関数内で
 本文raw bytesのアンカーを一意に解決する。旧固定範囲が隣接関数へ跨がる
 reserve/rescue箇所は関数単位に分割した。行位置が7行移動しても解決し、
 本文変更・欠落・重複アンカーは失敗する。
 ## 新collectorを作らず残す既存実行パターン
 Root側の既存wrapper修正で保持すべき順序は、`r.source_refs(R)` →
 明示QA上書きしたrefs → `r.copy_source` によるprivate stage → bootstrap →
 cacheの `cp -c` と別inode確認 → parse-paths/contracts → `execute_phase` →
 finallyの `owned_outer.finish_captured` → fixed_guardと不変性確認。
 このworkerはwrapperを起動・変更していない。適用可能なパラメータ化patchと
 全不足probeはまだ提出できていないため、以下は実行済みの契約ではなく残作業である。
 - R/OUT/QA/testpath/cache/input manifestは最終tested checkoutに対して固定する。
  1299件数や旧source-after.json一致をauthorityにしない。現r.source_refsがauthority。
 - checkout mapと、testpathにQAを明示上書きしたselected mapを別に記録する。
  source_map=tested、probeの元pathとSHA、QA_overrides、実stageの同SHAを結合する。
  候補製品source overrideは持ち込まない。
 - source_before/after、default_player_before/after、doc4_before/after、stage inventory、
  parse-paths、contracts、wrapper raw、phase receipt、started/ended、
  outer-owned-finally、execution.jsonを保存する。booleanだけでは不変性の代用にならない。
 - case receiptはphaseのactual_pidとexecution.actual_captured_PIDs、cleanupの全PID集合に
  結合する。cleanup_errorsが空、全childのengine_ended、終了codeを実成果物間で照合する。
 - 各条件のscalarに加え、生台帳・service/settlement ID・予約配列とのcount_eqまたは
  same_literalが必要。save_restoreはWriter保存直前と正式Reader復元直後の
  台帳・予約のsame_literal、および別PIDを要求する。nonceやログ文言では代用しない。
 ## 負履歴（起動禁止）
 10本すべてのSHAはrepair4-context.jsonに記録した。特に以下を再実行しない。
 - shift-end-repro-r03.gdは1080で「課金なし・予約保持」を期待し、承認済みの
  完了段階先行と矛盾する。対応native-r03.pyには旧1299 pinもある。
 - formal-boundary-reload-native-r03.pyは旧candidate sealと製品2件overrideを使う。
  SHAを書換えて別候補receiptとして使わない。
 - formal-boundary-reload-r01.gdのmanifest.source_refs==1299も旧前提。
 - midnight native-r01とpower native-r04も固定1299と旧full-run cacheに依存する。
  power readerは旧Writerの二つの正式保存slotに依存し、fresh Writerではない。
 ## 15+EVの被覆確認（未収集）
 同一プロセス内でも条件ごとのseed、before/after、case receiptを保持する。
 以下のartifact名は既存probeが出すもの。不足欄を合格扱いにしない。
 | 条件 | 既存probe / phase / artifact | 不足 |
 |---|---|---|
 | midnight_settlement, midnight_replay | midnight-boundary-r01 / repro / observations.json, midnight-*.var | countとraw台帳の結合、同minute再送の明示 |
 | paused_midnight | midnight-boundary-r01は開業サービスのみ | 停止した同一serviceの日跨ぎ系列 |
 | night_staff_absent | shift-end-repro-r03 / repro / 18-01観測 | 旧誤期待を除いた独立caseと非完了service |
 | power_stop, recovery_completion | power-formal-recovery-r04 / reader-a,b / recovery-*.var | fresh停止入力、台帳JSON、旧Writer依存の解消 |
 | dependency_stop | 供給6 probe内に専用系列なし | 関連施設停止・進捗/予約/service ID保持 |
 | exit_release | exit-boundary-r01 / repro / queued-*.var, observations.json | raw stateとcount結合 |
 | patience_release, closure_release | 供給6 probe内に専用系列なし | 待機解放、開始済み継続を区別したcase |
 | same_minute_replay | exit/destruction/midnightはsnapshot巻戻し再実行 | 同minuteコマンド再送の独立条件 |
 | shift_completion | shift-end-repro-r03 / repro / 18-00各phase観測 | 誤期待の修正、課金1回のraw結合 |
 | overtime_task | 供給6 probe内に専用系列なし | interrupt_level=0残業・勤務記録1回 |
 | destruction_stop | destruction-completion-boundary-r02 / repro / unfinished-*.var | raw台帳結合。completeは別帰結として維持 |
 | save_restore | formal-boundary-reload-r01 / writer,reader / *.var, writer.json, reader.json | final版の入力seal、JSON台帳/予約、owned PID結合 |
 | EV | 供給6 probe内に専用系列なし | staff予約→EV移動→停止→到着の実状態 |
 transportはreach=falseのソース根拠のみで、別engine条件は追加しない。
 ## 再利用の有限条件と未供給資料
 input.jsonのevidence_refsは旧証拠の参照であり、生証拠そのものではない。
 今回の供給先で確認できたのはsource、監査、適用性診断とgate失敗ログである。
 旧39件のraw receipt/state/packageを照合して採用した件数は0。
 「20関数一致」だけで39件を採用することは禁止する。
 必要な追加のローカルraw資料:
 1. 旧39件のexecution/phase/started/ended/outer-owned-finally/log/state一式と
   元source/config/input/environment pin。既存input.jsonのreference SHAで照合する。
 2. formal-boundary-reload-input-r02.json
   （wrapper記録SHA `195cb767e597008d1767aa0b6c8300711b83e8cf101863166e7932d9bd4ed612`）
   と、そのwhole_typed_inputs、元exact_execution、保存package全4メンバー。
 3. power original writer.json
   （wrapper記録SHA `cf3850c262012e5e52743bfb8b41af7ef5608689fb10c059c8a494216b0aff52`）
   と参照slot。旧candidateは比較用負履歴に限定する。
 原則は最終の正確な版で再実行する。登録版証拠を再利用する有限条件は、A(i)の
 20関数raw一致、A(ii)の全delta一致、A(iii)の変更境界をtested engine caseで被覆し、
 さらに当該旧caseのsource/config/input/environmentとraw状態を独立照合できること。
 relationship restore/schema変更は正式Writer/Reader再実行、build/path/arrivalに
 関係する変更は当該経路に到達するcaseの再実行が必要。今回の資料だけでは再利用0。
 ## Rootのコマンドと残る作業
 現在実行できるのは次のPython確認のみ（engineプロセス0）。
 ```sh
 python3 docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py
 python3 docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py
 BUILD_OUTPUT_DIR=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build python3 tools/check_p04_order_evidence.py --verify-only
 ```
 最後のコマンドはindex未収集ならexit 1が期待値。Python正対照はengine証明ではない。
 **Cのchecker強化、Dのparameter patch/不足probe、Eのowned/count/restore/他候補流用負例は未完成。**
 旧checkerのscalar/receipt自己申告を受入可能な証拠とみなしてはならない。
 現在のcheckerを正式受入に使用せず、修正全体をblockedとしてRootへ返す。
 native収集の正確なコマンド列は、上記入力と未完成patchがないため提示できない。
 仮のコマンドを実行可能と偽って提示しない。共有stageでimport+parseを2プロセス、
 midnight/power/exit/shift/destruction/save Writer/save Reader/EVを8プロセスに
 束ねられれば計10プロセスが計画目安になるが、これは確定数・目標数ではない。
 条件ごとに必要な状態系列とguard成立を優先する。
 Rootのnative収集→validate→別セッション独立レビュー→通常統合は未実施。
@@ -0,0 +1,33 @@
 # Concrete32 external Runner-record boundary
 The supplied normal-gate reference was read directly: verify, has_evidence,
 prepare_integration, approve and integrate (893–1092), and the SQL schema
 (474–483). P26 normal-candidate-example files are format samples only.
 `normal_c_join.py` uses read-only SQLite transactions over actual Root-selected
 Runner records. It joins submitted S, candidate C, frozen main_base M, approval,
 validation/review on S and integration/final on C. It checks the exact validation
 roster, raw review result and referenced validation logs, and hashes evidence
 inputs and the logical record snapshot. Root must establish that both databases
 are actual Runner records: arbitrary SQLite files cannot authenticate themselves.
 Runner integrate deletes approvals after final verification. Root retains an
 actual consistent Runner snapshot after approve, supplied as
 `--approved-runner-db`; `--runner-db` supplies later final evidence. These are
 read-only inputs, not a new Runner API. The worker creates neither snapshot.
 Missing records fail. No Git, Runner or engine is invoked. Outputs confer no
 acceptance or Git/Q/source/settings/markers/policy/engine/input qualification.
 All partial31 files, including the existing checker, remain unchanged as directed.
 Its NORMAL_C_RECEIPT_CONTRACT fail-closed path therefore still blocks formal C
 qualification. This new join is not wired into that gate and cannot bypass it.
 Integration of the boundary remains an implementation gap. No actual Q/C or
 ordinary-gate proof was produced. This is not a new human D05 policy question.
 Root runs `normal_c_join_fixtures.py --scratch DIR`: synthetic positive, wrong
 C/M, missing kind, failed check, extra/missing validation ID, task mismatch,
 medium review, missing artifact, wrong approval and missing final. Unexecuted.
 `scratch_fixture_adapter.py --scratch DIR --fixture NAME -- ...` routes preserved
 fixture TemporaryDirectory calls to explicit external scratch and clears inherited
 GIT_* routing. Existing assertions are unchanged; candidate/role fixtures still
 exercise partial31 semantics. No fixture output belongs in source.
@@ -1,52 +1,171 @@
-# P04-01 監査状態
+# P04-01 REPAIR51 canonical handoff
-原単位は未完了。D05-P04-DEPENDENCY と D05-P04-SHIFT-1800 は direct_user_reply により承認済み（同梱 D05_OWNER_APPROVAL.json、SHA256 4583ee9aad45c4db183d72df4420df48aa8e0897e3b5efda13016f0b5cdbd68e）。承認は試験合格を意味しない。A01の00:00保有時間按分維持費は承認済みで再確認しない。
+ACTUAL S50 historical evidence complete; S51 docs-only resubmission; S51 native admission pending at worker handoff (fresh native on Q51 required by S-binding, checker:368-371); post-submit admission determined only by Root version-pinned receipts; formal_acceptance false; P04=0.
-正式試験はRunnerが実行する。旧証跡参照は来歴であり、現版の生証跡・ソース・設定・入力・環境の適用性確認なしに合格として再利用しない。
+ACTUAL S50: native6 / 24 phases PASS (historical; bound to S50/Q50).
 ACTUAL S50: collector 15+EV, missing 0 (historical; bound to S50/Q50).
 ACTUAL S50 receipts: build/audit-support/p04-root-acceptance-a9ef681f/.
 ACTUAL S47: full184 retains its original label; conditional reuse only under the existing checker and applicability map. r22 remains historical.
-## 現行ソースの観測
+S51 native admission is pending AT HANDOFF. After submission, only Root version-pinned receipts under build/audit-support/p04-root-acceptance-<S>/ and build/p04-evidence/index.json determine admission. Worker-time NOT RUN / UNDETERMINED / unexecuted text below is historical and never a reason to rebuild. Fresh native6 on Q51 is required by S/Q binding, not by that text. No future S51 SHA, Q51 or receipt is claimed.
-`scripts/core/simulation_kernel.gd:123-153` の順序は APPLY_COMMANDS → 時計増分・日境界signal → TIME_BOUNDARIES → MANA → CONSTRUCTION → LOGISTICS → FACILITY_COMPLETION → VITALS_AND_ENVIRONMENT → INCIDENTS_AND_EVENTS → FACILITY_QUEUES → AI_DECISIONS → PUBLISH_SNAPSHOT。同phase内はhandler IDの辞書順（242行）。Runtimeの登録は364-427行。時計や製品ロジックは変更していない。
+All six D05 IDs remain approved; pending D05 is empty. PAUSE-REASON: S5B proves same-tick onset from ACTIVE gives RELATED. Power-first then dependency closure shows NO_POWER statically at M facility_service.gd:860-864; that sequential case is EXPLICITLY UNRESOLVED/UNPROVEN under the unchanged approval. It is not a defect, cured, proven, or silently narrowed. The :569 gate preserves P04 safety regardless of label. Any later product change needs a separate owner-authorised task; do not amend the contract or re-ask the owner.
-| 領域 | 現行呼出しと先後 | 原本・承認・不足 |
+Remaining Root gates:
 | --- | --- | --- |
 | 閉店 | `_advance_facilities` の後、`_advance_guest_queues` が `_release_closed_business_queues` を実行し、patienceより先に予約解放を試みる。 | 直接休業はD-034の開始済サービス継続。依存先休業は承認済D05の進捗・課金停止、予約・ID保持、復帰後1回完了。旧business試験は部分候補。open serviceの00:00証拠を代用しない。 |
 | 停電 | `_advance_mana` → `mana_power_projection.apply` → FacilityService `_prepare_service_for_tick`。NO_POWERはpause、復電はresume。 | 草案の961停止/962復電/963不変は生証跡未確認。進捗・予約・帳簿・通知を現版で確認する必要がある。 |
 | 破壊 | commandはAPPLY_COMMANDSで先行。`_advance_defense` は完了後のINCIDENTS。BROKENはサービス準備時に失敗。 | 先行破壊44と後段完了45を区別。失敗診断も保持し、原本適合と断定しない。 |
 | 退出 | 公開queue leave → 完了 → INCIDENTS → queue patience解放 → AI再計画/予定退出。LEAVINGのdespawnは入状態分より後。 | 公開leave・自動patience・overdue退出の正式保存/別PID証跡は参照のみ。孤立0を現版で証明する必要がある。 |
 | 課金 | `_complete_service` callback → `_complete_service_transaction` → `_apply_service_transaction`。予約消費後、service IDによるpayment keyで記帳し、通知scopeを終了。 | 原価格・時間を変えない。静的なidempotency keyの存在や試験数だけで二重課金・二重生成なしとしない。 |
 | シフト交代 | 完了後の `_advance_staff_ai` 内でstaff更新・commute・staffing投影。 | 原本64/67行の18:00交代を保持。承認済D05により[17:59,18:00)は昼番、18:00完了・課金後に交代。夜番は[18:00,18:01)から。1080診断を承認規約に格上げしない。 |
 | 00:00決算 | TIME_BOUNDARIESのweather/upkeep/operationsが完了より先。OperationsCoordinatorのdaily closeと同分service売上は別区間。 | 原本71/72行、承認済A01を保持。1440一回/1441不変の生証跡と適用性が必要。給与0fixtureを非ゼロ給与証拠に数えない。 |
-## 再利用の制限
+- Root fixes Q51; compare actual hashes with REPAIR51_APPLICABILITY_MAP.json; stop reuse on executable differences
 - clean exact-Q check-only; capacity and PID check; one heavy lease for fresh native6 on Q51
 - reader/adapters then collector; full184 conditional reuse check; order CLI/complete_B conditional reuse or rerun once
 - index regeneration; one p04-acceptance validate; separate Opus whole-unit independent review
 - prepare / exactC / integration / final / RootDB join / ledger / main push
 - nativeWindows individually pending
-詳細ハッシュ・7領域の不足は `order-audit.json` に記録した。ローカル旧mapはSHA256 `df8328ea8b6a7bc400caad8a52f6ead710c01942a726e5a6b530b82411c55da5`、1299件、欠落0件。主要6ソースの指定pinは一致。旧mapとの差は14件で、契約記載のRuntime/main/preview/performance/path/2試験の7件に加え、Kenney同梱サンプル/URL7件がバイト不一致だった。追加7件は後述のRunner支援入力で分類し、素材を編集していない。
+Scope: documentation-only repair within the original P04-01/W unit. Original total 30/88, formal 16, P04 credit 0; formal_acceptance false; unit incomplete. No partial credit. See REPAIR51_APPLICABILITY_MAP.json for hashes and reuse conditions.
-修正入力で旧Runtimeのローカルrawコピーを受領し、SHA256 `2d7e2cea5424585e9aa4302ab66d1fc4dbaefe743ce4328fccc1efa2f19b82e4` を確認した。`git diff --no-index` による現Runtimeとの差分は4箇所で、客候補経路batch、施設入口の経路費用比較、客/スタッフの移動時間推定、connector credit helper抽出に関わる。Runtime内のphase登録・施設完了順序はこの差分では変わらないが、変更されたPathServiceと到達性・選択・到着・勤務見積りへの影響を個別確認する必要がある。追加7素材差分はRunner supportがCRLF→LFのみと報告し、現raw hashを照合した。旧raw素材は未供給のため正規化一致を独立再現したとは扱わない。
+# Historical, superseded
-ローカル入力は旧summary/map/draftであり、生の保存package・stdout・engineログ・開始終了記録・設定・入力・環境証拠は提供されていない。外部worktreeのartifactパスは来歴に留め、読んでいない。正式保存8境界27状態、fresh Reader A/B、P04-02/fullの成功記載は未検証参照で、P04-01受入を意味しない。
+All older text below, including its current/status headings and worker-time execution statements, is superseded historical material.
-## 提出状態と有限検証計画
+## REPAIR49 normal-gate handoff
-今回の承認2条件と既存権限（BASELINE:64/67/71/72/183、D-034、A01）を分け、checker内の固定条件レジストリに対応付けた。費用時点・日跨ぎの帰属など残るD05はpendingのまま補完しないが、一括failの理由にはしない。売上・給与・維持費・勤務分の各1回、非ゼロ給与、停止の00:00またぎでも完了課金1回・予約孤立0は必須である。全条件を満たすとmachine_verified=true、formal_acceptance=false、exit 0。必須条件のauthorityがpendingなら失敗する。
+Required materials: exact B/native-first-current and fresh-run registry; each
 runner-input/ended/source/UID/formal/raw/lifecycle receipt; original recorded Q
 and engine context; B/p04-evidence/runner-materials and RELOCATION.json; matching
 collection/MANIFEST and separate dependency invocation; original full run and
 full_suite binding/raw receipts; final index and invocation receipt; immutable
 authorities in frozen checkout. No raw or historical receipt is rewritten.
 Two-placement identity requires the explicit closure in repair48_identity_controls.py,
 missing-file rejection, and original/A/B complete path/bytes/SHA tables and tree
 hash equality before and after positive execution. See REPAIR49_STATUS.md.
 Submission is followed by new Q freeze, affected pure controls (complete_B included),
 clean exact-Q check-only, capacity/PID checks, one fresh native lease for
 S1/S2a/S2b/S3/S4 and all ten S5 cases, readers/adapters, 15EV collector, full
 verification/binding under the conditions below (or one final full184 if any
 condition fails), index generation, p04-acceptance once, separate Opus whole-unit
 review, normal prepare/C/integration/final/Root DB join/ledger/main push.
 If order-typed fails, preserve its result and stop before heavy execution.
 Only whole-unit acceptance grants credit.
 承認4文書は全てバイト数とSHA256を再計算し、SOURCE_MANIFESTと一致。必要な承認JSONのみ2073 bytesを同梱した。初期空き容量約1.8GiB、旧39 artifactの複製なし。39件の原パスは来歴であり、今回のミラーは承認4文書のみ。生証拠・入力・設定・環境が不足しているので、境界の適用性合格は宣言しない。
-順序関数20本は今回個別に本文を再ハッシュし、供給されたhistorical_body_sha256と20/20一致した（詳細はJSON repair3）。旧監査の29本とは合算しない。旧Runtime rawも再ハッシュし、git diff --no-indexでは5個の@@区間（候補batchの開始・終了が別区間）、論理的な変更は記録の4箇所と確認した。関数一致は経路・候補・到着の適用性を保証しない。PathService変更を含め、停電・破壊・退出の影響ケースはRootが生証拠と設定を照合し、不適用の場合だけ新しい有限境界証拠を作る。production Runtime 4696df4aとcheckout d52a995の差も統合前にRootが確認する。
+## REPAIR49 full184 conditional reuse candidate — all conditions UNVERIFIED
-### 到達性
+Native reuse is forbidden: all six series require fresh M/S/Q_tree provenance
 (p04_native_series.py:1287; checker:370). Full uses the existing separate binding
 (checker:1175-1186); no adopter or checker change is authorized.
 The following are requirements, not results or approval:
- 営業時間による閉店: autoload/scriptsの検索ではset_opening_hoursの定義とサービスの委譲のみ。既定[0,1440)で製品呼出しなし。直接休業と依存先休業の証拠は引き続き必須。
+1. New S5 source_before must equal old full selected_source_map: all 1369 keys
- 客の通常EV移動: Runtime:8898-8922の到着後にqueueを要求し、7421-7445で予約する。この移動前予約経路は対象外。
+   and SHA values, not counts alone.
- スタッフEV: 対象外にできない。公開create_staff_task（Runtime:329、6733-6742）でrequired_itemsを渡せる。task_dispatcher:256-261、293-294、309-314が移動前に予約し、Runtime:9141-9170が在庫予約を実施、12009-12013で移動へ進み、8755-8763、8946-8987からEVを利用する。set_powered（elevator_service:279-284）による停電はこの予約保持経路に到達する。checkerはEV全体のreach=falseを拒否し、予約保持中停電のengine caseと孤立0 invariantを要求する。EV停止規則や期限は新設しない。
+2. Old project_root must remain unchanged: source-start == current source_refs
- 救護搬送: Runtime:12023-12030は治療状態を更新するだけ、12976-13050は救護タスク生成・移動・取消でrequired_items・課金処理を持たない。物理搬送自体でなく、課金・予約の到達性がfalse。静的根拠の行・本文・hashを必須とし、7領域の分母に加えない。
+   == post-verification source_refs (full_suite_verifier.py:115).
 3. selected_source_map, roster184, parse329, settings, runner/marker module,
   marker contract, suite-policy and UID plan/stage must all match (116-152,225).
 4. inputs.engine must match current engine_pin (124-125).
 5. Revalidate every phase PID, cleanup, marker and diagnostics (154-228).
 6. Current s5/run_s5_native.py and full_suite_verifier.py SHA must equal the
   Root rehearsal versions.
 7. Never relabel old S/oldQ/project_root/PIDs/time. Describe reuse only as
   revalidating the exact-source-identical old full through the existing
   full_suite route; never claim full ran on new S.
 8. A separate Opus whole-unit review must independently confirm applicability.
-### 有限検証と残件
+Conditions 1–6 require actual checks after final freeze. If any predicate is
 unproved or differs, reject reuse and execute full184 once on the final version.
 SourceRefs (tools/run_all_tests.py:40-45) excludes docs/private package, but that
 fact is no substitute for complete source equality. No reuse is approved here.
 workerはpython3 -m py_compileとchecker_negative_fixtures.pyを実行。index欠落、重複キー、symlink、hash不一致、stale pin、未実行receipt、pending authority、必須条件欠落、根拠なしreach=false、承認hash不一致の10例が期待した理由でexit 1。合成対照のみexit 0であり、エンジン由来の製品証拠ではない。最初の対照実行はspec pinで失敗した。契約のspec文字列は末尾LFなし、checkout JSONは末尾LF一つ付きであり、その厳密な表現差のみ許容後、上記確認が通った。仕様ファイルは変更していない。
-1. Runnerがp04-acceptanceを正式実行する。
+## REPAIR49 current correction
 2. Rootが旧証拠の適用性と不足を独立確認する。非ゼロ給与の00:00、停止の00:00またぎ、再送、正式保存→別PID復元、夜番不在18:01、既存残業タスク、予約保持中EV停電の証拠を揃える。
 3. 別セッション独立レビューと通常統合のfinalまで正式受入加算0。nativeWindowsは条件ごとにpending。
-エンジン実行・Runner操作・Git書込み・他エージェント起動は0。原30パッケージ/88成果の既存1単位内の準備であり、成果追加0、正式完了0。
+Source-ready only; original 30/88, formal 16, P04=0, no partial credit.
 REPAIR48's specification-mismatch blocker below is historical and corrected:
 the immutable 7000-byte original has SHA256
 d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f;
 removing its single EOF LF gives
 9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881.
 This is the existing Git/Runner strip/checker one-EOF-LF pin contract.
 No specification, approval or normalization change. Older contradictory wording
 below is superseded history, including blanket full-reuse prohibitions and
 all-controls-unexecuted wording. Q47 admission/index failures remain failures.
 See REPAIR49_STATUS.md for closure audit and verbatim complete_B FileNotFoundError.
 Root handoff reports payload(B), all53, series/join/power PASS; order-typed remains
 UNDETERMINED. Worker did not rerun them. Corrected complete_B remains unexecuted.
 Old native/full successes confer no new-S acceptance or credit.
 REPAIR48 current source status: see [REPAIR48_STATUS.md](REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
 ## RUN47 harness repair; original unit remains unaccepted
 Q46 S4 failed before engine startup: `AssertionError: complete 316-script parse roster`.
 Secondary guard: `AssertionError: exact source and planned UID set`. Captured S4
 PIDs: `[]`; phases: `[]`; passed: `false`. No game verification ran. This failure
 is historical reference only, never adopted as a pass. Current S4 admission derives
 exact roster/sets from real selection; check-only and native share it. Import-not-
 attempted cleanup requires the original inventory without generated UIDs.
 REPAIR47_PLAN.json and REPAIR47_STATUS.md supersede earlier current-run count and
 reuse instructions. Immutable spec, REQUIRED/REACH_REFS, product, caps, denominator,
 permissions and historical raw are unchanged. Option B: Root freezes new final Q,
 then fresh all-series runs once; no receipt rewriting or reuse adopter.
 # Historical P04-01 order audit — repair31
 Formal status is **16/88, P04 credit 0**. Policy approvals are recorded; implementation and exact-Q evidence remain incomplete. No original-unit completion is claimed.
 D05 is **six of six actually approved**; adoption into raw enforcement and
 verification are pending. Normal-C qualification now rejects matching-parent/tree
 commits without the authoritative Root/Runner receipt contract. That contract's
 path, SHA256 and provenance verification remain a concrete context gap.
 M is `c0ea009b28a7649aca6a433a1a24dc0be5e7ab81`. Source hashes, full product inventory, metadata membership and function line numbers were read from its actual Git tree in [REPAIR30_SOURCE_FACTS.json](REPAIR30_SOURCE_FACTS.json). Product manifest excludes the checker; native/full selected SourceRefs must include it. Q and C do not yet exist for this worker revision.
 The four actual human answers are preserved verbatim in [D05_REMAINING_APPROVAL.json](D05_REMAINING_APPROVAL.json), bound to both supplied copies by path and SHA256. Existing dependency, 18:00 and A01 approvals remain unchanged. The candidate documents are superseded history.
 | Domain | Approved rule | Current M source | Evidence |
 | --- | --- | --- | --- |
 | 閉店 | D-034 preserves started services on direct closure and releases waiting requests. Dependency closure stops progress and charging, retains reservations/service identity, and completes once after recovery. RELATED_FACILITY_INACTIVE wins over NO_POWER when both apply. | autoload/simulation_runtime.gd:5765 _process_tick_commands; scripts/facility/facility_service.gd:853 _prepare_service_for_tick; autoload/simulation_runtime.gd:12672 _release_closed_business_queues | Fresh Q pending; nativeWindows pending |
 | 停電 | BASELINE:183 covers real mana depletion. Legitimately stopped service has no progress or charge and preserves reservations. D05-P04-PAUSE-REASON makes dependency closure the displayed reason when dependency closure and power loss coincide. | autoload/simulation_runtime.gd:10716 _advance_mana; scripts/facility/facility_service.gd:853 _prepare_service_for_tick | Fresh Q pending; nativeWindows pending |
 | 破壊 | Command destruction precedes completion. Accident/raid destruction follows completion and charging in minute N; that sale remains valid. Failure and reservation release for affected unfinished service occurs in N+1. D05-P04-DESTRUCTION is the authority, not BASELINE:183. | autoload/simulation_runtime.gd:5765 _process_tick_commands; autoload/simulation_runtime.gd:8599 _advance_defense; autoload/simulation_runtime.gd:9826 _apply_defense_outcome_boundary; scripts/facility/facility_service.gd:853 _prepare_service_for_tick | Fresh Q pending; nativeWindows pending |
 | 退出 | D-034 release safety remains. Command exit precedes completion; AI planned exit follows completion and only applies to a deciding guest. Later despawn is distinct. | autoload/simulation_runtime.gd:7575 _execute_leave_facility_queue; autoload/simulation_runtime.gd:8760 _advance_guest_ai_decisions | Fresh Q pending; nativeWindows pending |
 | 課金 | Charge only completed service, once per idempotency key; retain original price snapshot and reservation/ledger joins. At 00:00 prior-day settlement and upkeep precede completion; the sale belongs to the new day. | autoload/simulation_runtime.gd:1876 _advance_facility_upkeep; autoload/simulation_runtime.gd:11817 _complete_service_transaction; autoload/simulation_runtime.gd:11833 _apply_service_transaction; scripts/operations/operations_coordinator.gd:1125 _process_daily_close | Fresh Q pending; nativeWindows pending |
 | シフト交代 | Approved 18:00 order remains: completion and payment before handover. No renewal of prior approval. | autoload/simulation_runtime.gd:8504 _advance_facilities; autoload/simulation_runtime.gd:8680 _advance_staff_ai | Fresh Q pending; nativeWindows pending |
 | 00:00決算 | A01 ownership-based upkeep is unchanged. Prior-day settlement/upkeep precede 00:00 service completion; its sale belongs to the new day. Replay/restore must not duplicate settlement. | scripts/core/simulation_kernel.gd:254 _handle_time_boundaries; autoload/simulation_runtime.gd:1919 _advance_operations_time; scripts/operations/operations_coordinator.gd:882 _process_minute_boundaries; scripts/operations/operations_coordinator.gd:1125 _process_daily_close | Fresh Q pending; nativeWindows pending |
 The preserved S1–S4, r22 index, old registered validation and f5 full178 run retain their historical identities. Current runtime deltas conservatively require fresh proof for all 15 conditions plus EV. A test count, approval record or byte-equal ordering function alone does not establish original acceptance. No thresholds or original unknown values are changed.
 The eleven phases remain APPLY_COMMANDS, TIME_BOUNDARIES, MANA, CONSTRUCTION, LOGISTICS, FACILITY_COMPLETION, VITALS_AND_ENVIRONMENT, INCIDENTS_AND_EVENTS, FACILITY_QUEUES, AI_DECISIONS, PUBLISH_SNAPSHOT. See the structured audit for preserved phase analysis and the new source manifest for exact M references.
 See [CURRENT_STATUS.md](CURRENT_STATUS.md) and [REPAIR31_STATUS.md](REPAIR31_STATUS.md) before any Root execution.
 ## REPAIR50 source preparation (2026-10-18; no acceptance claim)
 The commander handoff reports an identity order mutation on an all-equal array
 (`recent_events/17/payload/current_cell = [0,0,0]`), raw SHA prefix
 `bb0ccb1d…`, and 761.085 seconds elapsed. These are supplied observations,
 not measurements repeated by this worker; the full raw SHA/log remains Root
 material. The old control reversed every multi-element array and classified
 the resulting identical bytes as a negative. The oracle correctly accepted
 that identity. Existing failure records remain unchanged.
 REPAIR50 separates byte-identical identity positives from negatives, swaps the
 first unequal typed byte pair, and lists collections with no genuine order
 variant. All AFTER keys/values, journal/body fields and both copied modes
 remain traversed. Type-invalid mutations still require ValueError rejection
 and are also listed as parser rejections; copied records contain the changed
 bytes in both AFTER and EXPECTED even when an intermediate parse is invalid.
 The oracle, adapters, public checker, native-series implementation and R49
 closure roster are unchanged. No Node patch optimization is used.
 The temporary expected memo keys full BEFORE/command/guard bytes by SHA256
 and length plus oracle/parser source SHA256. Its cache contains only genuine
 derivation output bytes. It reconstructs fresh Nodes on each return, restores
 the wrapper with finally, and retains verify for each parseable mutation.
 Self-controls compare hit/nonmemo bytes for first/last and each mutated kind,
 require a one-byte BEFORE miss and reject, and check normal/exception cleanup.
 The SHA fixture now streams 1 MiB implementation chunks without changing
 file selection, traversal, relative keys or digest semantics.
 Worker validation: AST parsing only; pure, stream, native and formal checks
 are unexecuted. See [REPAIR50_STATUS.md](REPAIR50_STATUS.md) for Root commands,
 static estimation and reuse prerequisites. Original 30/88, formal 16 and P04
 credit 0 remain unchanged; the whole unit is incomplete.
@@ -61,5 +61,77 @@
    "unexecuted proof, incomplete7domain or required boundary coverage",
    "selfreported pass/test count as substitute for actual state invariants"
  ],
-  "implementation_note": "Implement this finite mechanical protocol and document exact supported predicates. If evidence is absent, output actual missing IDs and exit nonzero. No requirement to create fake pass evidence. Do not change source/Clock/game numbers; no engine/test run by worker."
+  "implementation_note": "Implement this finite mechanical protocol and document exact supported predicates. If evidence is absent, output actual missing IDs and exit nonzero. No requirement to create fake pass evidence. Do not change source/Clock/game numbers; no engine/test run by worker.",
  "revision": "repair29",
  "status": "Worker SOURCE-READY / NOTRUN; Root-measured S4r28/local8/r22/schema2 index/registered validation PASS on fb8b; no original acceptance",
  "accepted_index_schema_versions": [
    1,
    2
  ],
  "schema2_note": "Current candidate-role/index binding uses the existing schema2 implementation. Legacy field descriptions below are not a replacement schema.",
  "current_order_table": "order-audit.json",
  "series_collection": "BUILD_OUTPUT_DIR/audit-support/p04-raw-collect-r22",
  "power_stop_binding": {
    "only_series": "S4",
    "status": "Root-measured S4r28 4/4 PASS; all four owned PIDs ended; guards0 cleanup0",
    "required_reason": "NO_POWER",
    "related_facility_operating": true,
    "kitchen_power_available": true,
    "global_mana": ">0",
    "operator_open": true,
    "formal_points": [
      "boundary",
      "held",
      "recovered"
    ],
    "canonicalization": false,
    "dropped_fields": false,
    "native_path": "B/p04-s4-native-r28",
    "controls_path": "B/audit-support/p04-root-fb8b-s4-r01",
    "PIDs": [
      49940,
      50044,
      50078,
      50105
    ],
    "cause": "probe calls disconnect_nodes directly; isolated NO_POWER, not proof of global depletion",
    "global_depletion_scope": "Only B1 combined diagnostic observes global depletion; B1 supplies no isolated power_stop or priority approval"
  },
  "B1": {
    "scope": "combined dependency/closure diagnostic only",
    "power_stop_evidence": false,
    "priority_approval": false
  },
  "D05_power_vs_closure": "pending D05(a); observation RELATED before NO_POWER is not approval; choices in D05_REMAINING_ORDER_CANDIDATE.json",
  "history": "Creation-time NOT RUN in REPAIR22–28 and runbooks is historical; CURRENT_STATUS.md canonical table overrides execution status. Historical files untouched.",
  "version_policy": "Full178 used checker f5,21615 checks, exact receipt preserved. No full1339 against a61 exists. Product-only reuse is distinct from current-checker validation. support53cb normal rebind, final full run, independent review and P04-then-support integration on main9b remain Runner steps.",
  "root_measurements": {
    "label": "Root-measured",
    "local8": "B/audit-support/p04-root-fb8b-local-r01 PASS",
    "collection": "B/audit-support/p04-raw-collect-r22",
    "index": "B/p04-evidence/index.json schema2; missing_conditions=[];15 conditions + EV verified",
    "registered_validation": "fb8b PASS28.095s; local-r01/registered-validation.result.json",
    "native_product": "5f6bc11d",
    "main": "9b1a18c1",
    "canonical_status": "CURRENT_STATUS.md",
    "exact_sha256_pins": "REPAIR29_STATIC_SOURCE.json"
  },
  "destruction_stop_binding": {
    "status": "pending D05",
    "current_registry_authority": "BASELINE:183",
    "gap": "mana depletion, not destruction authority",
    "action": "No checker or registry edits before owner approval; explicit destruction rule and subsequent normal repair required"
  },
  "remaining_order_choices": "D05_REMAINING_ORDER_CANDIDATE.json; pending, not applied",
  "full178_applicability_context": {
    "selected_map": "B/audit-support/p18-regression-support-final-r01/native-full178/runner-input.json",
    "difference": [
      {
        "path": "tests/business/test_required_kitchen.gd",
        "current_sha256": "5dcc86d66bdc47003472d6c30d6889eb514e016003265965bdd8496d123d5ca5",
        "full178_sha256": "3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f"
      }
    ],
    "status": "SOURCE-READY / NOTRUN; test-source applicability retained as Runner responsibility; no blanket1338 identity claim"
  }
 }
@@ -0,0 +1,92 @@
 # REPAIR17 — blocked on required raw access
 This is not accepted or completed. Stage R is not implemented. No new condition
 is claimed as proven. This document records an observed input-access blocker,
 not a replacement implementation or a proposal to trust Root summaries.
 ## Checkout and scope
 - Observed HEAD: `accd07c91d4e34d9b7c7fc20e389df2424b167e1` (the requested reused checkout).
 - Registered contract base: `deb1bcb2374eb378b840ca345db952bd8572cb6e`.
 - Only this status file was created. The checker, `verify_native`, C checks,
  existing fixtures, probes, originals, and logs were not modified.
 - No git writes, Runner operations, engine runs, or other agents were used.
 ## Reproduced blocker
 Let `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
 The four `B/<series>/raw/{writer,reader}.json` files are readable. Their literal
 `slots` mappings locate the formal packages. Attempting `Path.read_bytes()` on
 every `journal.log`, `manifest.json`, `thumbnail.png`, and `world.bin` in those
 slots returned `PermissionError: [Errno 1] Operation not permitted`:
 | Series | Slots per role | Unreadable original + copy members |
 | --- | ---: | ---: |
 | `p04-s1-native-r02` | 14 | 112 |
 | `p04-s2a-native-r03` | 1 | 8 |
 | `p04-s2b-native-r02` | 6 | 48 |
 | `p04-s3-native-r01` | 22 | 176 |
 For example, this exact required S3 original cannot be read:
 ```text
 /Users/korizatou114/Library/Application Support/TheTree-PCK-tests-078167a92c6e4888a6b4ee4a005fd858-standard-runtime-writer/saves/p04_s3/B1-after/world.bin
 ```
 Its Reader counterpart is also inaccessible:
 ```text
 /Users/korizatou114/Library/Application Support/TheTree-PCK-tests-b1fd1956bd28493cbac1e00f3a775232-standard-runtime-reader/saves/p04_s3/B1-after/world.bin
 ```
 Searching each series directory for `world.bin` found only the unrelated
 `stage/tests/fixtures/required_kitchen_legacy14/formal-package/world.bin`.
 There is no `.review-material` directory in this checkout. Root result SHA
 fields cannot replace re-hashing the actual original and Reader member bytes.
 Current-game source access also fails: reading the first source_before entry,
 `/Users/korizatou114/Projects/とりにく工房ゲーム制作部/AGENTS.md`, returned the same error.
 Each run's fixed_input_pins contains three inaccessible entries. The remaining
 entries re-hashed successfully (S1: 13, S2a: 14, S2b: 10, S3: 15).
 Each staged source tree has 1337 hashes matching source_before and one differing
 test script (`tests/s3/test_runtime_staff_assignment.gd`); this is not a proof
 that the current game's full 1338-file source set still matches.
 Required unblock: make these declared original inputs readable to the worker,
 or supply an authorized, provenance-bound relocation of their full bytes,
 including both formal roles and the current-game source/fixed inputs. No new
 engine run is requested. Permission denial must not be interpreted as missing
 files, matching hashes, or failed product behavior.
 ## Evidence and remaining conditions
 Readable raw locations were inspected under all four series, including
 runner-input/source_before, lifecycle receipts, raw inventory, and raw Writer
 and Reader records. D05 supplement bytes were read. ROOT result files were
 used to inspect locators, never as proof of passing conditions.
 - S1: EV remains unverified in this run; no paid-service power claim.
 - S2a: midnight_settlement, midnight_replay, save_restore remain unverified.
 - S2b: night_staff_absent, overtime_task and same-minute rejection remain unverified.
 - S3: closure_release, exit_release, patience_release and B4 release-once remain unverified.
 - power_stop, destruction_stop, shift_completion, same_minute_replay remain unverified.
 - Existing C verification was neither changed nor rerun; no fresh C result is claimed.
 - Required native-Windows conditions remain pending individually; this run supplies no Windows proof.
 Stage A remains pending: actual HEAD + filesystem candidate binding, the known
 `MAIN_ANCHOR` `9694...`, candidate_tree trust, and `3139` metadata holes are
 untouched. No final index or composition was generated.
 ## Footprint and verification
 Read-only `df -h` reported about 3.1 GiB available. No evidence payload was
 copied. `B/audit-support/p04-raw-collect-r17/` did not exist at the access audit
 and was not created. A trustworthy collection footprint cannot be finalized
 without access to the required member bytes; no collector was run.
 Only Python read/hash/access diagnostics were executed. Fixture suites were
 not run and are not reported as passing. `p04_native_series.py`,
 `collect_p04_native.py`, and `checker_series_fixtures.py` were not created, so
 there are no valid Root collector/new-fixture commands to advertise yet.
 Implementation and its required positive/adversarial checks remain outstanding
 after the required inputs become readable.
@@ -0,0 +1,2 @@
 {"estimated_payload_bytes": 2970454, "files": 5, "available_disk_bytes": 4596576256, "large_payloads_copied": 0}
 {"collection": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-raw-collect-r17", "manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "actual_payload_bytes": 2970454, "formal_acceptance": false}
@@ -0,0 +1 @@
 {"C_provenance_sha256": "51d746879b4197445a09cd44a88dd918c365fa98025d9cd652a740cee09a9040", "C_source_manifest_sha256": "dbaab3c293c191eb5f3aff34854945e2d564f824df50a92802b3a7eda55321a8", "error": "candidate binding stage A pending; uncollected original boundaries: power_stop, save_restore, shift_completion", "formal_acceptance": false, "machine_verified": false, "missing_conditions": ["power_stop", "save_restore", "shift_completion"], "nativeWindows": {"EV": "pending", "closure_release": "pending", "dependency_stop": "pending", "destruction_stop": "pending", "exit_release": "pending", "midnight_replay": "pending", "midnight_settlement": "pending", "night_staff_absent": "pending", "overtime_task": "pending", "patience_release": "pending", "paused_midnight": "pending", "power_stop": "pending", "recovery_completion": "pending", "same_minute_replay": "pending", "save_restore": "pending", "shift_completion": "pending"}, "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8", "series_bindings": {"s1": "9792569af9c8ecef177ffdeb880b814fb2878231f23e77c3749e18c228ff0ceb", "s2a": "746b58cf1aff95b082c35f6cc2c29556f146a7c56cce0475f4f2c091168605a7", "s2b": "e6d5412c14809825cf368af1d93972bc9c4e41f4c09afa414732b007c9cc7589", "s3": "a9b4b80d54c18ae2a1dc82514052e22d6174ff79999c76fa622282709759b433"}, "series_manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "stage_A": "candidate binding stage A pending", "task_id": "P04-01", "verified_conditions": ["EV", "closure_release", "dependency_stop", "destruction_stop", "exit_release", "midnight_replay", "midnight_settlement", "night_staff_absent", "overtime_task", "patience_release", "paused_midnight", "recovery_completion", "same_minute_replay"]}
@@ -0,0 +1,153 @@
 {
  "s1": {
    "facts": {
      "paid_service_power_claim": false
    },
    "formal_acceptance": false,
    "owned_pids": [
      64745,
      64788,
      64818,
      64850
    ],
    "phase_pairs": 0,
    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
    "raw_reference_count": 97,
    "relocated_reference_count": 1464,
    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
    "series": "s1",
    "source_files": 1338,
    "verified_conditions": [
      "EV"
    ],
    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
  },
  "s2a": {
    "facts": {
      "paid_originals": {
        "completed_service_id": "service_00000027",
        "same_minute_replay": "request resend, not advance_to settlement replay",
        "shift_completion": "missing: zero SERVICE_SALE rows at 1080",
        "transaction_id": "ledger_00000085"
      },
      "payroll_gold": 255,
      "raw_getter_bytes_equal": false,
      "sales_gold": 25,
      "save_restore_gap": "Raw getter also changes typed arrays to untyped arrays; authorized normalization permits only StringName/String and ordering",
      "settlement_replay_is_request_resend": false,
      "upkeep_gold": 5
    },
    "formal_acceptance": false,
    "owned_pids": [
      85229,
      85263,
      85303,
      85425
    ],
    "phase_pairs": 0,
    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
    "raw_reference_count": 486,
    "relocated_reference_count": 1362,
    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
    "series": "s2a",
    "source_files": 1338,
    "verified_conditions": [
      "midnight_replay",
      "midnight_settlement",
      "same_minute_replay"
    ],
    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
  },
  "s2b": {
    "facts": {
      "same_minute_rejection": "MINUTE_ALREADY_APPLIED"
    },
    "formal_acceptance": false,
    "owned_pids": [
      98696,
      98744,
      98770,
      98810
    ],
    "phase_pairs": 12,
    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
    "raw_reference_count": 163,
    "relocated_reference_count": 1397,
    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
    "series": "s2b",
    "source_files": 1338,
    "verified_conditions": [
      "night_staff_absent",
      "overtime_task"
    ],
    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
  },
  "s3": {
    "facts": {
      "B1": {
        "amount": 0,
        "reservation_states": [
          "ACTIVE",
          "RELEASED"
        ],
        "sales": 0
      },
      "B2a": {
        "amount": 25,
        "reservation_states": [
          "CONSUMED"
        ],
        "sales": 1
      },
      "B2b": {
        "amount": 0,
        "reservation_states": [
          "RELEASED"
        ],
        "sales": 0
      },
      "B3": {
        "amount": 0,
        "reservation_states": [
          "RELEASED"
        ],
        "sales": 0
      },
      "B4a": {
        "amount": 25,
        "reservation_states": [
          "CONSUMED"
        ],
        "sales": 1
      },
      "B4b": {
        "amount": 0,
        "reservation_states": [
          "RELEASED"
        ],
        "sales": 0
      }
    },
    "formal_acceptance": false,
    "owned_pids": [
      10448,
      10493,
      10523,
      10578
    ],
    "phase_pairs": 352,
    "product_content": "5f6bc11d6bb6e92d22d787989b219fef3a435bc1",
    "raw_reference_count": 891,
    "relocated_reference_count": 1530,
    "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8",
    "series": "s3",
    "source_files": 1338,
    "verified_conditions": [
      "closure_release",
      "destruction_stop",
      "exit_release",
      "patience_release"
    ],
    "verifier_sha256": "61f6647be4d2ec95db0599b94a3c6acb5f91ca43501256548f5ae161ab2f0e4f"
  }
 }
@@ -0,0 +1,367 @@
 {
  "formal_acceptance": false,
  "results": [
    {
      "class": "small_synthetic_positive",
      "result": "pass",
      "series": "shared"
    },
    {
      "class": "full_body_positive",
      "result": "pass",
      "series": "s1"
    },
    {
      "class": "wrong_source_pin",
      "error": "SHA drift: native /native/body.gd",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "signature_only_pin",
      "error": "full-function-body pin mismatch",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "symlink",
      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "traversal",
      "error": "raw traversal",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "unmapped_original_path",
      "error": "unmapped original path: /native/unknown.gd",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "relocated_manifest_native_mismatch",
      "error": "byte length drift: native /native/body.gd",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "relocated_byte_manifest_mismatch",
      "error": "SHA drift: relocation /native/body.gd",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "JSON_only_getter_substitute",
      "error": "unsupported Variant flags 8827:25959 at 0",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "forged_scalar",
      "error": "SHA drift: p04-s1-native-r02/raw/writer.json",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "changed_raw_byte",
      "error": "SHA drift: p04-s1-native-r02/raw/writer.json",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "formal_member_SHA_drift",
      "error": "SHA drift: p04-s1-native-r02/execution.json",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "unowned_missing_PID_end",
      "error": "missing PID end",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "altered_phase_pair",
      "error": "SHA drift: p04-s1-native-r02/raw/reader-landing-held.var",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "relabeled_interruption_reason",
      "error": "SHA drift: p04-s1-native-r02/raw/writer-landing-depleted.json",
      "result": "rejected",
      "series": "s1"
    },
    {
      "class": "full_body_positive",
      "result": "pass",
      "series": "s2a"
    },
    {
      "class": "wrong_source_pin",
      "error": "SHA drift: native /native/body.gd",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "signature_only_pin",
      "error": "full-function-body pin mismatch",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "symlink",
      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "traversal",
      "error": "raw traversal",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "unmapped_original_path",
      "error": "unmapped original path: /native/unknown.gd",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "relocated_manifest_native_mismatch",
      "error": "byte length drift: native /native/body.gd",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "relocated_byte_manifest_mismatch",
      "error": "SHA drift: relocation /native/body.gd",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "JSON_only_getter_substitute",
      "error": "unsupported Variant flags 8827:25959 at 0",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "forged_scalar",
      "error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "changed_raw_byte",
      "error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "formal_member_SHA_drift",
      "error": "SHA drift: p04-s2a-native-r03/execution.json",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "unowned_missing_PID_end",
      "error": "missing PID end",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "altered_phase_pair",
      "error": "SHA drift: p04-s2a-native-r03/raw/reader-C3-recall.var",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "relabeled_interruption_reason",
      "error": "SHA drift: p04-s2a-native-r03/raw/writer-C1-midnight.json",
      "result": "rejected",
      "series": "s2a"
    },
    {
      "class": "full_body_positive",
      "result": "pass",
      "series": "s2b"
    },
    {
      "class": "wrong_source_pin",
      "error": "SHA drift: native /native/body.gd",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "signature_only_pin",
      "error": "full-function-body pin mismatch",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "symlink",
      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "traversal",
      "error": "raw traversal",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "unmapped_original_path",
      "error": "unmapped original path: /native/unknown.gd",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "relocated_manifest_native_mismatch",
      "error": "byte length drift: native /native/body.gd",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "relocated_byte_manifest_mismatch",
      "error": "SHA drift: relocation /native/body.gd",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "JSON_only_getter_substitute",
      "error": "unsupported Variant flags 8827:25959 at 0",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "forged_scalar",
      "error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "changed_raw_byte",
      "error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "formal_member_SHA_drift",
      "error": "SHA drift: p04-s2b-native-r02/execution.json",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "unowned_missing_PID_end",
      "error": "missing PID end",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "altered_phase_pair",
      "error": "SHA drift: p04-s2b-native-r02/raw/reader-night_absent-1080-before-facility.var",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "relabeled_interruption_reason",
      "error": "SHA drift: p04-s2b-native-r02/raw/writer-night_absent-1081.json",
      "result": "rejected",
      "series": "s2b"
    },
    {
      "class": "full_body_positive",
      "result": "pass",
      "series": "s3"
    },
    {
      "class": "wrong_source_pin",
      "error": "SHA drift: native /native/body.gd",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "signature_only_pin",
      "error": "full-function-body pin mismatch",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "symlink",
      "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/.series-fixtures-ici55vnl/symlink.gd",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "traversal",
      "error": "raw traversal",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "unmapped_original_path",
      "error": "unmapped original path: /native/unknown.gd",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "relocated_manifest_native_mismatch",
      "error": "byte length drift: native /native/body.gd",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "relocated_byte_manifest_mismatch",
      "error": "SHA drift: relocation /native/body.gd",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "JSON_only_getter_substitute",
      "error": "unsupported Variant flags 8827:25959 at 0",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "forged_scalar",
      "error": "SHA drift: p04-s3-native-r01/raw/writer.json",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "changed_raw_byte",
      "error": "SHA drift: p04-s3-native-r01/raw/writer.json",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "formal_member_SHA_drift",
      "error": "SHA drift: p04-s3-native-r01/execution.json",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "unowned_missing_PID_end",
      "error": "missing PID end",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "altered_phase_pair",
      "error": "SHA drift: p04-s3-native-r01/raw/reader-B1-phase-960-TIME_BOUNDARIES.var",
      "result": "rejected",
      "series": "s3"
    },
    {
      "class": "relabeled_interruption_reason",
      "error": "SHA drift: p04-s3-native-r01/raw/writer-B1-after.json",
      "result": "rejected",
      "series": "s3"
    }
  ],
  "scope": "file-only Stage R controls; immutable descriptor and primitive negatives"
 }
@@ -0,0 +1,211 @@
 # REPAIR18 — executable Stage R, blocked on remaining conditions
 This is **not accepted or completed**. Executable R artifacts and a reference-only
 collection were produced and the file-only checks were run. The whole gate
 fails. Original completion credit remains **13/88**, with no additional credit.
 The repair counter and `max_repair_attempts: null` were not changed.
 ## Scope and preservation
 - Checkout: `accd07c91d4e34d9b7c7fc20e389df2424b167e1`; registered base:
  `deb1bcb2374eb378b840ca345db952bd8572cb6e`.
 - Changed `tools/check_p04_order_evidence.py` only to add R composition and its
  separate read-only CLI, call composition from the whole missing-check, and
  retain an unconditional Stage A failure.
 - Created `p04_native_series.py`, `collect_p04_native.py`,
  `checker_series_fixtures.py`, this status, and the four output files listed below.
 - All existing checker functions except `verify` and `main` were compared with
  HEAD and are byte-unchanged, including `verify_native` and all C helpers.
  All three existing fixture files are byte-unchanged. Their failures were not
  hidden by editing assertions or Stage A code.
 - `REPAIR17_STATUS.md` was never written. Its SHA256 is
  `6497c335739f266c9026aa6499cf5c49ae80d590d6aa2d0f90d32adc08018061`.
 - No git writes, new worktree/branch, agents, Runner operations, engine runs,
  full regression, permission requests, production edits, input edits, or final
  `B/p04-evidence/index.json` writes occurred. This did not revalidate accd.
 ## Inputs and actual collection
 Here `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`,
 `R=B/audit-support/p04-r17-full-inputs-r01`, and
 `E=docs/plans/original-completion-2026-10-02/execution/p04-01`.
 The first input identity check verified `R/MANIFEST.json`: **1,244,135 bytes**,
 SHA256 `a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8`.
 All **1,721** relocated members were used and rehashed across the series,
 covering 71,488,772 logical bytes. All four complete native `source_before`
 sets equal the supplied 1,338-file product set at content anchor
 `5f6bc11d6bb6e92d22d787989b219fef3a435bc1`. The one native QA override is checked
 separately against its supplied probe bytes; it is not represented as product
 content. Full-function-body pins include trailing comments and declarations.
 External original paths remain provenance strings. The resolver uses exact
 `original_to_relocated` keys, and checks each used file against both native
 descriptors and relocation descriptors. There is no prefix substitution or
 external-path fallback. Formal slot membership, directory membership, separate
 Writer/Reader paths and inodes, symlinks, traversal and duplicates are checked.
 All **344** formal members in **86** original/Reader slots were rehashed.
 The collector created only `B/audit-support/p04-raw-collect-r17/`. It did not
 exist before creation. It contains four series reference manifests and one
 collection manifest; no large evidence snapshots were copied.
 Actual collector output (exit 0):
 ```json
 {"estimated_payload_bytes":2970454,"files":5,"available_disk_bytes":4596576256,"large_payloads_copied":0}
 {"actual_payload_bytes":2970454,"manifest_sha256":"953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975","formal_acceptance":false}
 ```
 The estimate was printed before directory creation or output writes. The
 collection is deterministic and refuses an existing destination on rerun.
 Per-series manifests bind native raw references, relocation references, and
 verifier bytes by SHA. Composition reruns C and all series verifiers and
 compares the recomputed results and references with those manifests; editing a
 `verified_conditions` list cannot add credit.
 ## Conditions derived from literal raw
 | Verifier | Native raw | Relocated formal members | Conditions proved |
 | --- | --- | --- | --- |
 | S1 | `B/p04-s1-native-r02/raw/` | `R/formal/p04-s1-native-r02/{writer,reader}/` | `EV` |
 | S2a | `B/p04-s2a-native-r03/raw/` | `R/formal/p04-s2a-native-r03/{writer,reader}/C3/` | `midnight_settlement`, `midnight_replay` |
 | S2b | `B/p04-s2b-native-r02/raw/` | `R/formal/p04-s2b-native-r02/{writer,reader}/` | `night_staff_absent`, `overtime_task` |
 | S3 | `B/p04-s3-native-r01/raw/` | `R/formal/p04-s3-native-r01/{writer,reader}/` | `closure_release`, `exit_release`, `patience_release`, `destruction_stop` (B4b) |
 | Paid/resend supplement, collected with S2a | `B/audit-support/p04-current-native-series-r01/p04-idempotency-paid-midnight-native-r01/order-evidence/` | Manifest pin resolved through `R/MANIFEST.json`, full raw already inside B | `same_minute_replay` (request resend) |
 | Unchanged C | `B/audit-support/native-first-current/` | Existing C bundle, unchanged | `dependency_stop`, `recovery_completion`, `paused_midnight` |
 All product reads resolve to `R/product/` through manifest keys. Fixed-input
 relocations and every original formal provenance string are retained in the
 four generated series manifests; they are not replaced with guessed paths.
 Owned import/parse/Writer/Reader PIDs checked against starts, ends, owners,
 commands, raw stream hashes, exit gates and cleanup/guard records:
 | Series | PIDs | Formal slots per role | Exact raw phase pairs |
 | --- | --- | ---: | ---: |
 | S1 | 64745, 64788, 64818, 64850 | 14 | 0 (14 exact typed snapshot restore points instead) |
 | S2a | 85229, 85263, 85303, 85425 | 1 | 0 (typed settlement/replay and formal Runtime restore comparisons) |
 | S2b | 98696, 98744, 98770, 98810 | 6 | 12 |
 | S3 | 10448, 10493, 10523, 10578 | 22 | 352 JSON/typed phase files |
 - S1 checks task/trip/resource identity, safe landing, no-safe-landing hold,
  preserved reservation identity and release. It makes no paid-service power claim.
 - S2a derives a 25G sale/one transaction, 255G payroll/one transaction
  (Akane 120, Bardo 135 joined to actual staff and shifts), and 5G upkeep in
  three rows/one transaction. `advance_to(1440)` has processed minutes 0 and
  daily closes 0, with entire typed Runtime bytes unchanged. Formal Reader
  Runtime restore and recall bytes match exactly.
 - The supplemental request-resend raw preserves typed economy, facilities,
  inventory, guests and staff at the same minute, and joins the one completed
  service `service_00000027` to sale transaction `ledger_00000085`. This is not
  settlement-replay proof; S2a supplies that distinct proof.
 - S2b derives `STAFF_UNAVAILABLE`/`WAITING_FOR_STAFF`, the absent night workers,
  overtime task/staff/shift joins and one duty minute. Its same-minute call is
  rejected as `MINUTE_ALREADY_APPLIED`, with entire typed Runtime unchanged.
 - S3 retains `RELATED_FACILITY_INACTIVE` in B1, never relabeling it `NO_POWER`.
  The directly closed facility retains its started service while the dependent
  facility interruption pauses it; the queued reservation is released.
  B2a completes/consumes once; B2b and B3 release without a sale.
  B4b's queued event completes, durability becomes 0/`BROKEN`, then the service
  fails with `BROKEN` at 961, releases its reservation and has zero sale rows.
 ## Unresolved raw/specification gaps
 1. **`power_stop` missing.** EV evidence is not a paid-service power proof;
   B1 is a dependency interruption. No relabeling or invented D05 rule was used.
 2. **`shift_completion` missing.** The actual supplied paid-shift originals at
   `B/audit-support/p04-current-native-series-r01/p04-paid-shift-midnight-native-r01/order-evidence/`
   have zero `SERVICE_SALE` rows in all three 17:59/completion-phase/18:00
   snapshots. The `paid` filenames do not establish a charged completion at 1080.
 3. **`save_restore` withheld under the fixed normalization restriction.** The
   entire formal Runtime does restore exactly. However, the getter comparison
   changes not only StringName/String and dictionary order but typed arrays to
   untyped arrays. Examples are `/anomalies`, `/anomalies/0/allocations`,
   `/anomalies/0/unallocated_by_staff`, `/anomalies/0/facility_ids`,
   `/settlement/input_payments` and `/settlement/rows`. Native array headers
   include `1c000100...` versus `1c000000...`. The raw getter byte inequality is
   preserved and parsed from `.var`; JSON is not substituted. Normalization was
   not broadened beyond the instruction, so this condition remains missing.
 4. **B4a zero-charge assertion is unsupported.**
   `B/p04-s3-native-r01/raw/writer-B4a-next.{json,var}` contains one 25G sale at
   960 and a completed service with consumed reservation. B4b has zero sales.
   The implementation records both facts, rather than declaring B4a charge 0.
   Destruction-stop credit above is specifically the B4b failed-service branch.
 D05 approval and supplement full bytes in `p04-whole-closure-r01` were read.
 They approve dependency closure and the 18:00 ordering choice, not an invented
 blanket policy for all D05 domains. The supplied raw discrepancies require
 owner-level resolution or appropriate evidence; this worker did not amend scope.
 Each of these native-Windows conditions remains individually **pending**:
 `EV`, `power_stop`, `destruction_stop`, `dependency_stop`, `shift_completion`,
 `recovery_completion`, `same_minute_replay`, `closure_release`, `exit_release`,
 `patience_release`, `paused_midnight`, `midnight_settlement`, `midnight_replay`,
 `save_restore`, `night_staff_absent`, `overtime_task`. The machine output also
 contains an explicit per-condition pending map.
 ## Actual validation outputs
 - Static Python compilation: **4 files passed** (in-memory compile; no engine).
 - Existing C fixture: **exit 0**, 5 positive controls passed and 25 negatives
  rejected. `verify_native` reports 10 owned processes and its original three
  conditions. No C condition names were edited.
 - Existing negative fixture: **exit 1**, at `synthetic_scalar_only_rejected`:
  `AssertionError: ('synthetic_scalar_only_rejected', {'task_id': 'P04-01', 'machine_verified': False, 'formal_acceptance': False, 'error': "'product_binding'"})`.
 - Existing applicability fixture: **exit 1**:
  `AssertionError: negative fixture accepted: wrong_tested_revision`.
  These two suites therefore could not be confirmed to pass/reject as requested.
  Their files and the functions involved were unchanged; they were not repaired
  by touching the deferred A holes, and no baseline rerun is claimed.
 - New series fixtures: **exit 0**, **5 small positive controls and 56 rejected
  negatives**, 14 negative classes per series. Controls cover immutable raw and
  descriptor overlays, source/body pins, PID endings, paths, relocation byte
  drift and typed-vs-JSON rejection. Immutable descriptor hashes are deliberately
  not refreshed; the tests do not claim to be new engine evidence.
 - Real series verifiers ran successfully during collection and were rerun by
  composition. Outputs are recorded in `REPAIR18_REAL_SERIES_OUTPUT.json`.
 - Separate composition CLI: **exit 1**, with 13 raw-derived conditions and:
 ```text
 candidate binding stage A pending; uncollected original boundaries: power_stop, save_restore, shift_completion
 ```
 Full new outputs: `REPAIR18_COLLECTOR_OUTPUT.jsonl`,
 `REPAIR18_SERIES_FIXTURE_OUTPUT.json`, `REPAIR18_REAL_SERIES_OUTPUT.json`,
 `REPAIR18_COMBINED_OUTPUT.json`. The 13 verified boundary conditions are not
 13 newly accepted units and do not change the original 13/88 credit.
 ## Exact Root commands
 Run from this existing checkout. These commands perform file-only work:
 ```sh
 B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
 E=docs/plans/original-completion-2026-10-02/execution/p04-01
 python3 -B "$E/collect_p04_native.py" --build "$B"
 python3 -B "$E/checker_series_fixtures.py" --build "$B"
 python3 -B "$E/p04_native_series.py" --build "$B"
 python3 -B "$E/checker_negative_fixtures.py"
 python3 -B "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
 python3 -B "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
 BUILD_OUTPUT_DIR="$B" python3 -B tools/check_p04_order_evidence.py --verify-series-only
 ```
 The collector command above was already executed successfully; another execution
 must refuse the now-existing destination. Review the existing collection rather
 than overwriting it. The final command is intentionally failing; it does not
 need or generate a final index and never performs candidate composition.
 ## Stage A and subsequent dependencies
 Stage A remains pending: actual HEAD/filesystem candidate binding,
 `MAIN_ANCHOR` `9694...`, `candidate_tree` trust and the `3139` metadata holes
 are untouched. `--verify-only` still requires the actual final evidence index;
 its missing-check unions recomputed C/R results and still fails for any missing
 condition, and it cannot succeed while Stage A is pending.
 Required sequence remains **R → A → final index → mandatory whole validation →
 independent review → ordinary integration**. Outstanding raw/specification gaps
 and the two existing fixture failures prevent representing this dispatch as a
 completed or accepted implementation.
@@ -0,0 +1,58 @@
 # Repair19 persistence explanation corrigendum
 This corrects the old Root explanation that the live day-summary comparison
 differed only in StringName/String and dictionary order. That explanation missed
 generic Array headers. It also corrects the superseded proposal to explain this
 path using `_to_snapshot_variant`.
 The exact relocated source is
 `B/audit-support/p04-r17-full-inputs-r01/product/scripts/operations/operations_coordinator.gd`.
 Its 130891 bytes have SHA256
 `871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90`.
 Full bodies, including bytes through the next named function, were read directly
 and compared with `T/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`, where
 `T=B/audit-support/p04-repair19-close-r01`. All five bodies, lengths and hashes
 match that supplied file:
 | Function | Line | Bytes | SHA256 |
 | --- | ---: | ---: | --- |
 | `get_day_summary` | 577 | 153 | `449eef926054cf76c39d6b4c016da3d775d41f2b343b4f8ad57b62c594cb32bb` |
 | `create_snapshot` | 620 | 3988 | `8c6e4f000e6df6f0f996445a57c4c17223cae4e1df57a9c2e3a605cf4d9f5309` |
 | `_snapshot_root_report` | 2943 | 2062 | `96084d76beeac11d165753a82160f789cd47b4dec4b6bb8cd6599a4f5ed08efe` |
 | `_visit_snapshot_tree` | 2992 | 3045 | `70792369c05882b813632a3c96f934928e9a089d420700cfc0d4c8fa971972a0` |
 | `_to_snapshot_variant` | 3083 | 550 | `f7db3cf2d495bb117fc7f6795633daa272c03d8eb7f99977e462e0a9df20cd8a` |
 `get_day_summary` returns `_day_summaries[day].duplicate(true)` directly. It
 exposes an internal API representation; the product getter need not change.
 `create_snapshot` first validates with capture=true. In that pass,
 `day_summaries` is not among the reusable encoded fields. It then assembles
 `saved_days` and calls `_snapshot_root_report(raw_snapshot, field_cache, false)`.
 That report invokes `_visit_snapshot_tree` with encoding enabled. The visitor
 creates untyped arrays, converts StringName to String, stringifies permitted
 dictionary keys and sorts the resulting String keys with native sorting.
 The separate `_to_snapshot_variant` helper is not on this call chain. Its
 `sort_custom(_variant_string_less)`, lack of finite-float/budget checks and
 pass-through of unsupported types prevent using it as a general equivalent.
 The supplied `T/ROOT_S2A_TYPED_ARRAY_HEADER_AUDIT.json` lists the following six
 changes. These are explicitly attributed to that diagnostic; they have not been
 independently rerun by a repair19 fixture in this dispatch.
 | Path below `day_summary` | Writer header | Writer element kind | Reader header | Length |
 | --- | --- | --- | --- | ---: |
 | `/anomalies` | `1c000100` | Dictionary (27) | `1c000000` | 1 |
 | `/anomalies/0/allocations` | `1c000100` | Dictionary (27) | `1c000000` | 1 |
 | `/anomalies/0/facility_ids` | `1c000100` | String (4) | `1c000000` | 3 |
 | `/anomalies/0/unallocated_by_staff` | `1c000100` | Dictionary (27) | `1c000000` | 0 |
 | `/settlement/input_payments` | `1c000100` | Dictionary (27) | `1c000000` | 5 |
 | `/settlement/rows` | `1c000100` | Dictionary (27) | `1c000000` | 5 |
 Every listed Reader array is untyped. Raw getter byte equality remains **false**.
 This diagnostic is separate from the source-defined persisted snapshot.
 Neither this explanation nor an optional projection may weaken exact native
 expected/restored typed-byte comparison, entire Runtime equality, formal 4+4
 member equality, settlement counts, duplicate-payment checks or replay checks.
 No projection implementation or new save_restore verification is claimed here.
 The executable R18 normalization gate is still unchanged, so save_restore is
 still open pending the exact encoder port and its required validation.
@@ -0,0 +1,78 @@
 # Repair19 — incomplete; execution constraint clarification pending
 This is not a ready submission and not formal acceptance. Original credit stays
 13/88. All 15 conditions plus EV retain their existing scope; nativeWindows
 remains pending for each. No product, acceptance, domain or outcome was changed.
 ## Blocking instruction conflict
 The recorded repair19 direction requires local fixture reruns, isolated temp-Git
 negative and positive controls, and removing the Stage-A refusal only after
 those tests pass. The final worker instructions prohibit Git writes and say
 tests are formally executed by Runner. This dispatch has requested clarification
 on whether that prohibition exempts the specifically requested file-only and
 isolated temp-Git fixtures. There is no answer at the time of this report.
 No exemption has been assumed. This is an execution-constraint blocker, not a
 claim that pending formal acceptance itself blocks implementation.
 ## Changes actually made in this dispatch
 - `p04_native_series.py`: retain both JSON and Variant Writer/Reader phase-byte
  comparisons, but increment the S3 pair metric only for `.var`. The requested
  interpretation is 352 checked file pairs representing 176 observations. A
  new execution output confirming that count has not been generated.
 - `p04_native_series.py`: add the B1 `power_stop` join for the five observations
  at 959–963, positive finite original reserve, actual public mana and power
  flags, direct closure, same service identity/progress/reservations, queued B
  release/stock/patience, recovery payment and unchanged next ledger. Bind the
  saved 961 recovery command and the APPLY_COMMANDS phase. Preserve the actual
  `RELATED_FACILITY_INACTIVE` reason. This code is untested; its addition to the
  verifier's returned conditions is conditional on every assertion succeeding
  when Runner executes it. No successful power_stop result is claimed here.
 - `REPAIR19_CORRIGENDUM.md`: correct the StringName/order-only explanation,
  distinguish raw getter from public persistence, list all six supplied typed
  Array header changes, and record the actual source call-chain full-body pins.
 ## Static observations and preservation
 - In-memory Python `compile` of the edited series module succeeded. No fixture,
  native, Godot, full-regression or Runner run occurred.
 - The exact relocated operations source was read. All five complete function
  bodies, lengths and hashes equal
  `B/audit-support/p04-repair19-close-r01/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`.
  The hash table and exact call-chain explanation are in the corrigendum.
 - The checker region from `NATIVE_RUNS` through `verify_native`, inclusive of
  the C constants and helpers, equals its HEAD bytes. Region SHA256:
  `5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b`.
 - No R17/R18 output or status file was edited. The existing uncommitted R18
  checker changes remain. No Git write, agent, integration or Runner operation
  occurred. No native evidence was created or modified.
 - No collector was run. Both the existing r17 collection and the required fresh
  r19 destination remain untouched by this dispatch. Since the series verifier
  bytes changed, the old r17 collection cannot validate these new verifier bytes;
  it must never be overwritten or represented as a repair19 collection.
 ## Remaining implementation and validation
 Repair19 is incomplete. R2's C-backed paid shift join, R3's exact encoder port
 and fixtures, Stage A's actual Git-role verifier, new index generator, fixture
 protocol repairs and all requested fixture executions remain to be completed.
 The old Stage-A unconditional refusal remains in place. The old
 `verify_product_target` has not been edited or replaced in this dispatch.
 The 9b1a18c anchor resolves to
 `9b1a18c1eb25ca1300dcd59da78423c0dda2f498`; the old checker constant has not yet
 been changed as part of a complete Stage-A repair.
 No new output JSON is reported, and no old fixture success is reused as success
 for the edited module. B4a/B4b semantics, frozen save_restore measurements and
 its current open result remain unchanged. The 25 C negatives and 56 series
 negatives have not been rerun.
 There are no valid repair19 index-generation or submitted/merged-candidate Root
 commands yet: the required generator and role verifier are not implemented.
 Providing plausible commands for nonexistent functionality would be misleading.
 The completed follow-up must supply those exact commands after implementing and
 validating the protocol, retain all existing outputs, and collect exclusively
 into the fresh `B/audit-support/p04-raw-collect-r19` destination.
 Here `B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build`.
@@ -0,0 +1,40 @@
 # Repair20 persistence corrigendum
 The old Root explanation, “StringName/order only”, omitted six generic Array
 header changes. `get_day_summary` returns the internal day's `duplicate(true)`;
 it does not return the canonical persisted representation. Its raw Writer and
 Reader bytes remain unequal. All original raw files and values are retained.
 No product getter change is proposed.
 | Path under day_summary | Writer header | Element kind | Reader header | Length |
 | --- | --- | --- | --- | ---: |
 | anomalies | 1c000100 | Dictionary (27) | 1c000000 | 1 |
 | anomalies/0/allocations | 1c000100 | Dictionary (27) | 1c000000 | 1 |
 | anomalies/0/facility_ids | 1c000100 | String (4) | 1c000000 | 3 |
 | anomalies/0/unallocated_by_staff | 1c000100 | Dictionary (27) | 1c000000 | 0 |
 | settlement/input_payments | 1c000100 | Dictionary (27) | 1c000000 | 5 |
 | settlement/rows | 1c000100 | Dictionary (27) | 1c000000 | 5 |
 These are the six entries in `T/ROOT_S2A_TYPED_ARRAY_HEADER_AUDIT.json`.
 The new code derives them again from typed nodes and compares the list to that
 diagnostic. This execution is **NOT RUN** in repair20.
 The persistence chain is `create_snapshot` (620) →
 `_snapshot_root_report(raw_snapshot, field_cache, false)` (2943) →
 `_visit_snapshot_tree(..., encode=true)` (2992). The earlier capture=true pass
 does not cache encoded day_summaries. `_to_snapshot_variant` is not on this path.
 The projection is confined to raw getter → persisted day1. It retains all
 scalar Variant bytes, including numeric type, rejects nonfinite floats and
 unsupported values, stringifies permitted keys, rejects canonical collisions,
 sorts String keys, rebuilds untyped Arrays, and enforces collection, depth, node,
 single-string and aggregate-string limits. Unsupported dictionary-key types
 are rejected, never silently normalized. The optional admitted subset does not
 include composite-key Godot stringification. No projection is allowed on the
 native persisted expected/restored comparison.
 Full Runtime Writer/Reader/restored equality, formal 4+4 member equality,
 settlement/duplicate-payment checks and the actual advance_to replay checks
 remain independent strict requirements. If getter projection still differs
 from the native canonical_day1 bytes, `save_restore` remains open and reports
 that exact mismatch. No new successful equality is claimed without Root's run.
@@ -0,0 +1,183 @@
 # Repair20 — source submission; tests NOT RUN
 Source-only repair. No Git command, fixture, collector, series, Godot/native,
 Runner, agent, commit, branch or integration operation was executed. The only
 code validation performed was Python `compile(..., 'exec')` in memory, without
 imports/execution of the edited modules. No acceptance is claimed. Original
 credit remains 13/88; all 15 conditions + EV, seven domains and three safety
 outcomes retain their scope. nativeWindows remains pending for every condition.
 The next submission SHA is assigned by Runner and is not predeclared here.
 Changed files:
 - `tools/check_p04_order_evidence.py`: real checkout/role binding, isolated
  object stores under B, first-1080 R2 join, schema2 recomputation and r20 collection.
 - `p04_native_series.py`: B1 departure/despawn/full-state joins, explicit 352/176
  S3 checks, confined getter projection, persistence pins and six-header diagnostic.
 - `collect_p04_native.py`: exclusive new collection at
  `B/audit-support/p04-raw-collect-r20`.
 - `checker_negative_fixtures.py`: retain existing content-case IDs and meanings;
  isolate their content layer explicitly in the test harness, while the separate
  real-Git fixture exercises production role binding without a bypass.
 - New `build_p04_index.py`, `checker_role_fixtures.py`,
  `checker_encoder_fixtures.py`, `checker_join_fixtures.py`.
 - New `REPAIR20_STATUS.md` and `REPAIR20_CORRIGENDUM.md`.
 In-memory compilation: all eleven Python files (checker plus ten modules in E)
 compile. This is syntax validation only; every test below is **NOT RUN**.
 The retained C region, `NATIVE_RUNS` through `verify_native`, is byte-for-byte
 equal to T's retained source, SHA256
 `5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b`.
 `verify_product_target` itself is also byte-for-byte retained and no longer called.
 Existing repair17/18/19 status, corrigendum, raw outputs and T's retained archives
 were not modified. Existing C 25 negatives and series 56 negatives remain required.
 ## R3 source pins
 Product source: `scripts/operations/operations_coordinator.gd`, 130891 bytes,
 SHA256 `871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90`.
 Runtime verification checks the complete bodies and cross-checks the actual
 body bytes, lengths and hashes against `T/ROOT_ACTUAL_PERSISTENCE_CALL_CHAIN.json`.
 | Function | SHA256 |
 | --- | --- |
 | get_day_summary | 449eef926054cf76c39d6b4c016da3d775d41f2b343b4f8ad57b62c594cb32bb |
 | create_snapshot | 8c6e4f000e6df6f0f996445a57c4c17223cae4e1df57a9c2e3a605cf4d9f5309 |
 | _snapshot_root_report | 96084d76beeac11d165753a82160f789cd47b4dec4b6bb8cd6599a4f5ed08efe |
 | _visit_snapshot_tree | 70792369c05882b813632a3c96f934928e9a089d420700cfc0d4c8fa971972a0 |
 The corrigendum lists all six Array header changes. Native persisted comparisons
 are direct typed-byte comparisons. Raw getter inequality remains diagnostic.
 The optional projection admits only the supported persistence subset; unsupported
 composite dictionary keys fail closed. Its negative controls include field loss,
 extra fields, both numeric-type directions, value changes, nonfinite floats,
 invalid keys, collisions, unsaveable values, wrong call chain and use on native
 persisted comparisons. The positive changes only Array headers and StringName.
 ## Condition disposition on this untested source
 No condition is newly proven by this dispatch. All tests are **NOT RUN**.
 | Condition | State and reason pending Root execution |
 | --- | --- |
 | power_stop | Open: new B1 959–963 join; real B at 959/960, normal recorded departure then absence, unchanged one-time release, stock 1, wallet 50, no B charge; recovery 25 at 962 and no extra 963 charge. |
 | destruction_stop | Pending: retained S3 B4b BROKEN failure and zero-sale/release predicates. |
 | dependency_stop | Pending: unchanged C paused service identity/progress/reservation proof. |
 | shift_completion | Open: new C first-1080 join; PIDs 77462/77504/77536 ended, 1338-file content 5f, 44→45, ledger_00000006/25G, DAY2 present before handover and zero after, no extra at 1081. |
 | recovery_completion | Pending: unchanged C recovery transaction/idempotency join. |
 | same_minute_replay | Pending: retained real paid request-resend join; never substituted for settlement replay. |
 | closure_release | Pending: retained S3 closure/release plus despawn-aware B1 checks. |
 | exit_release | Pending: retained S3 B2 release/completion ordering. |
 | patience_release | Pending: retained S3 B3 patience expiration and release. |
 | paused_midnight | Pending: unchanged C paused-midnight series. |
 | midnight_settlement | Pending: retained S2a nonzero sales/payroll/upkeep/duty joins. |
 | midnight_replay | Pending: actual advance_to replay, zero processed minutes and zero daily closes, exact Runtime bytes. |
 | save_restore | Open: direct full typed Runtime and formal 4+4 equality remain mandatory; optional getter projection must equal actual persisted day1. A remaining mismatch is explicitly reported, never projected out of native restore. |
 | night_staff_absent | Pending: retained S2b WAITING_FOR_STAFF at 1081. |
 | overtime_task | Pending: retained S2b interrupt-level-zero task/staff/shift and once-only duty joins. |
 | EV | Pending: retained S1 reachable reserved staff power-stop proof and pinned static chain. |
 Stage A is implemented but **NOT RUN**. Submission is inferred from actual Git
 ancestry and scoped diff; the composed product is labelled prospective, not a
 tested worker game. Integration/final requires an actual two-parent merge and
 exact recomputed merge tree, native product map/modes and submitted checker/doc
 patch. Every tracked file and executing module must match HEAD bytes/mode;
 untracked/ignored files and symlinks fail. Unknown/deleted sources and candidate,
 code-only or phase declarations cannot authorize a role. Metadata membership
 comes from the real 9b1a18c tree, without the old count assumptions.
 Schema2 retains native source/config/input/environment, real lifecycle PIDs,
 formal proofs, complete raw references, authority and original-audit uncertainty,
 domain and reachability mappings. Its entire payload is recomputed from raw by
 the same checker. It contains no candidate==HEAD pin or Root-passed flag.
 `generation-invocation.json` separately records the actual invocation/HEAD.
 ## Root execution order (all commands below NOT RUN)
 Run from the clean, actual auto-submitted checkout. Root supplies actual clean
 merged/final checkout paths later; do not substitute invented SHAs. Preserve all
 prior output directories and use exclusive fresh output destinations.
 ```sh
 export B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
 export E=docs/plans/original-completion-2026-10-02/execution/p04-01
 export BUILD_OUTPUT_DIR="$B"
 export PYTHONDONTWRITEBYTECODE=1
 ```
 1. Local file-only and fixture controls on the actual new SHA:
 ```sh
 python3 "$E/checker_negative_fixtures.py"
 python3 "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
 python3 "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
 python3 "$E/checker_series_fixtures.py" --build "$B"
 python3 "$E/checker_encoder_fixtures.py"
 python3 "$E/checker_join_fixtures.py" --build "$B"
 ```
 2. Real series against B, then the exclusive r20 collection:
 ```sh
 python3 "$E/p04_native_series.py" --build "$B"
 python3 "$E/collect_p04_native.py" --build "$B"
 ```
 3. After auto-submit, generate the fresh normal Runner index. B/p04-evidence was
 absent at static inspection. If it is now occupied, retain it and choose an
 explicit fresh directory with P04_EVIDENCE_DIR for manual checks; do not overwrite.
 The normal Runner uses B/p04-evidence and must receive that actual generated index.
 ```sh
 python3 "$E/build_p04_index.py" --build "$B" --output "$B/p04-evidence" \
  --invocation validate \
  --registered-ref deb1bcb2374eb378b840ca345db952bd8572cb6e \
  --tested-ref 5f6bc11d6bb6e92d22d787989b219fef3a435bc1
 ```
 4. Checker on submitted, merged and final actual checkouts. Real temp-Git fixtures
 need the generated index, so their execution follows step 3, not a fabricated
 pre-submission index. They create throwaway repositories/objects only under B.
 ```sh
 python3 "$E/checker_role_fixtures.py" --build "$B" --evidence "$B/p04-evidence"
 python3 tools/check_p04_order_evidence.py --verify-only
 python3 "$P04_MERGED_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
 python3 "$P04_FINAL_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
 ```
 The same index works in all three roles. For separate invocation records, the
 generator also accepts `--invocation prepare-integration` and `--invocation final`
 with explicit fresh output paths while executing from those actual checkouts.
 These labels are receipt metadata and grant no role. Root must respect the normal
 Runner state machine: its prepare_integration requires prior formal review.
 An isolated local prospective-merge control does not replace that review or move
 Runner state. `runner.validate("P04-01")`, `runner.prepare_integration("P04-01")`
 and `runner.integrate("P04-01")` remain Root operations only.
 5. Mandatory whole validation and full 178-game regression once on exact final
 sources. The supplied Runner core exposes
 `runner.verify("P04-01", final_checkout, actual_final_sha, "final")`; retain every
 configured mandatory validation, then run the existing guarded full-game runner:
 ```sh
 python3 "$P04_FINAL_CHECKOUT/tools/run_all_tests.py" \
  --project-root "$P04_FINAL_CHECKOUT" --output "$B/p04-final-product-full-r01"
 ```
 Do not change timeout, marker contracts or suite policy, splice phases, or reuse
 historical 177-suite proof. Confirm the final selected source map and 178-suite
 roster, and preserve source/default-profile invariance. This command is the one
 full run, not permission for an additional `make test` native run.
 6. Independent Opus review using Root's existing reviewer route, with exact
 source/validation materials mirrored into the frozen checkout's .review-material.
 The supplied core's formal method is `runner.review("P04-01")`; that method reviews
 the actual submitted revision and requires its validation evidence. Any additional
 final-composition Opus review must explicitly receive the actual final revision.
 The external commander/Opus CLI entry point and installed Runner configuration
 were not supplied in this checkout, so no guessed shell command is asserted for
 them. Root retains its existing formal validation/review/integration workflow.
 The absent external entry-point/configuration details are handoff context gaps,
 not evidence of a pass, and not a blocker solely because Root testing is pending.
@@ -0,0 +1,95 @@
 # Repair21 — source submission; tests NOTRUN
 P04-01 source-only performance repair. Changes are restricted to the checker,
 the new `bulk_reader_equivalence.py` fixture, and this status file. No Git
 command, test, fixture, collector, Runner, native/Godot run, agent, commit,
 branch or integration operation was executed by the worker.
 `read_blobs` validates full lowercase 40-hex OIDs before starting a process,
 deduplicates/sorts them, and uses one `git cat-file --batch` process per nonempty
 request. Empty requests start no process. `check_output` inherits stderr and
 raises for nonzero exit status just like `git_bytes`. The separately injectable
 byte parser verifies ordered OIDs, blob type, decimal size, exact framing and
 complete output consumption. There is deliberately no blob cache, so no object
 can be reused across `_GIT_ENV` namespaces. The two bulk call sites preserve
 selected-path sorted manifests and every actual-file byte/mode comparison.
 No existing require message or assertion was removed. The `NATIVE_RUNS` through
 `verify_native` region, commit-type checks, ancestry, merge-tree isolation,
 status/untracked/symlink/module checks, schema/encoder, six existing suites and
 role case IDs were not edited. Checker self-blob reads remain unchanged.
 The fixture source covers binary NUL/CR/LF/trailing LF, empty and large blobs,
 unicode `ls-tree -z` path resolution, duplicates, empty input, malformed/short
 OIDs, missing objects, tree/commit objects, invalid/truncated/oversized/garbage
 responses, process failure, one-process sorted input, and private object
 visibility inside versus outside and across isolated namespaces. It has not run.
 Static validation: `ast.parse` and in-memory `compile(..., 'exec')` completed for
 the checker and new fixture. Neither module was imported or executed. This is
 syntax validation only. Tests: **NOTRUN**. Runtime equivalence and completion
 within the registered 180 seconds remain for Root to measure.
 The existing schema2 index at B/p04-evidence/index.json was read as data, along
 with the existing builder and role fixture. Its registered/execution/tested
 roles remain deb1bcb/9767b0a/5f6bc11 and original_credit remains 13/88.
 The existing index and r20 collection are untouched. No new generation is
 needed if Root confirms the recomputed payload is identical. If generation is
 needed, use a new explicit destination, never overwrite existing evidence.
 Original P04-01 remains incomplete; criteria and nativeWindows pending status
 are unchanged. No original credit or acceptance is claimed.
 ## Root execution order — all NOTRUN
 Use the clean new auto-submitted checkout, whose SHA is assigned after this
 source submission. Do not use the registered base SHA as the new submission.
 ```sh
 export B=/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build
 export E=docs/plans/original-completion-2026-10-02/execution/p04-01
 export BUILD_OUTPUT_DIR="$B"
 export PYTHONDONTWRITEBYTECODE=1
 python3 "$E/bulk_reader_equivalence.py"
 python3 "$E/checker_negative_fixtures.py"
 python3 "$E/checker_applicability_fixtures.py" --native-bundle "$B/audit-support/native-first-current"
 python3 "$E/checker_native_fixtures.py" "$B/audit-support/native-first-current"
 python3 "$E/checker_series_fixtures.py" --build "$B"
 python3 "$E/checker_encoder_fixtures.py"
 python3 "$E/checker_join_fixtures.py" --build "$B"
 python3 "$E/checker_role_fixtures.py" --build "$B" --evidence "$B/p04-evidence"
 ```
 Next run the registered validation on the **new auto-submitted SHA**, retaining
 its existing 180-second timeout and actual timed receipt. The supplied formal
 API call is exactly:
 ```python
 runner.validate("P04-01")
 ```
 The external Runner launcher/configuration is not present in the supplied task
 context; use Root's already registered invocation, without substituting an
 invented CLI, changing timeout, or treating direct checker timing as registered
 validation. Record actual SHA, elapsed time and exit status from that invocation.
 Then run direct real-candidate controls from actual clean submitted, merged and
 final checkouts, preserving the formal review/integration state machine:
 ```sh
 python3 tools/check_p04_order_evidence.py --verify-only
 python3 "$P04_MERGED_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
 python3 "$P04_FINAL_CHECKOUT/tools/check_p04_order_evidence.py" --verify-only
 ```
 After required formal validation/review and exact final-source binding, run the
 full178 product regression once, using a fresh output destination:
 ```sh
 python3 "$P04_FINAL_CHECKOUT/tools/run_all_tests.py" \
  --project-root "$P04_FINAL_CHECKOUT" --output "$B/p04-final-product-full-r21"
 ```
 Do not regenerate raw collections, overwrite index/r20 evidence, alter existing
 case semantics, or run an additional native/full suite to compensate for a
 timeout. Any unrelated improvement is deferred. Pending Root execution is not
 a worker specification gap and does not change this submission's scope.
@@ -0,0 +1,73 @@
 {
  "scope": "AST/static source checks and in-memory compile ONLY; no module imports or execution of task code",
  "python": [
    {
      "path": "tools/check_p04_order_evidence.py",
      "bytes": 78399,
      "sha256": "a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850",
      "AST": "parsed",
      "in_memory_compile": "compiled; not executed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py",
      "bytes": 72591,
      "sha256": "667c95e10c451239292b08589706bfef978de730b321151ae7845dd10a06c411",
      "AST": "parsed",
      "in_memory_compile": "compiled; not executed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
      "bytes": 7888,
      "sha256": "f89ee6b835a8b0dc47f804686f7e338e7178c24a5a30a8a25bcd8bf59dfbea0c",
      "AST": "parsed",
      "in_memory_compile": "compiled; not executed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
      "bytes": 6779,
      "sha256": "f91b2d7003fd5c8cd196f849ad392d37479317e7d109eb584ccde5e5073e5bee",
      "AST": "parsed",
      "in_memory_compile": "compiled; not executed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/collect_p04_native.py",
      "bytes": 2996,
      "sha256": "d727230de0af94dfc7e68bec40e84ecaa86a5b98d5e5bc16c2a35fe9c67fa12d",
      "AST": "parsed",
      "in_memory_compile": "compiled; not executed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/build_p04_index.py",
      "bytes": 9246,
      "sha256": "47ae05b7bec617063e5d4fca2d8687f25e2eee0f809b5676ec91cf21c3223773",
      "AST": "parsed",
      "in_memory_compile": "compiled; not executed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
      "bytes": 18623,
      "sha256": "03a0aaab7e824d1b516ee4c6b456913439515c03daa687b5822cdfefb4d54c46",
      "AST": "parsed",
      "in_memory_compile": "compiled; not executed"
    }
  ],
  "gd_validation": "static text/declaration review only; engine parse NOT RUN",
  "gd_sha256": "ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7",
  "C_frozen": {
    "exact_equal_to_immutable_full_stage": true,
    "bytes": 20918,
    "sha256": "5d778b3cfab7c139ca03812489508ce9aae90c1d17f8c2249c340f30d1496b3b",
    "body_with_one_final_LF_sha256": "33ae2af6afb98b48919ed679ab8519b7da7ddfda68c00f71c557d5cc9aad4a6c"
  },
  "required_registry_unchanged": true,
  "required_conditions": 15,
  "EV": "additional existing obligation, unchanged",
  "domains": 7,
  "product_input_files": 1338,
  "parse_gd_files": 316,
  "native_runs": 0,
  "fixture_runs": 0,
  "tests": "NOT RUN",
  "S4_raw": "pending Root execution",
  "formal_acceptance": false
 }
@@ -0,0 +1,82 @@
 # Repair22 — source-ready submission; NOT RUN
 This batch changes only `tools/check_p04_order_evidence.py` and this P04-01
 documentation subtree. No Git command, test/fixture, engine, Runner operation,
 agent, manual commit or integration was performed. The normal autosubmit owns
 the submitted revision; the contract base SHA is not a new evidence version.
 S3 B1 no longer supplies `power_stop`. Its full diagnostic checks remain under
 `dependency_closure_diagnostic`, including the actual dependency reason,
 closure/release, departure history and recovery sale. It approves no priority.
 Strict power-vs-closure order remains D05 pending/unknown. The existing approvals
 cover dependency hold and the18:00 shift interval only; A01 is not reopened.
 S4 is a new minimal single-case QA probe using the existing ActorHardening,
 physical-kitchen and guarded Writer/Reader pattern. It cuts the actual sole
 cafeteria edge at959, waits for normal evaluation/projection at960, retains the
 held state at961, reconnects that same edge, and waits normally through the
 source-derived hold until970. Source constants were re-read as10/10. No forced
 evaluation, hold bypass, direct power/progress/patience/capacity writes or
 product edits are introduced. Kitchen Facility.OPEN / network ACTIVE, positive
 mana, operating dependency and open operator distinguish it from B1.
 Three formal Writer points and separate-process Reader restores retain every
 typed Runtime field and all four SaveService members. Reconnect resend at970
 must leave the full Runtime unchanged; normal971 and Reader replay add no
 extra sale/completion. Full intermediate phase raw is preserved. All graph
 nodes, cut/restored edge sets, revisions, allocation and derived dependency
 restoration are checked. Normal post-completion guest redecision/despawn is
 retained, not forced or concealed; no exit accompanies the outage/hold.
 R now derives shift PID and sale IDs from the existing full raw joins. S1 joins
 the existing pre-travel reservation/task/staff cell to the boarded task/trip,
 and checks actual mana0 and elevator loss of power. The existing join fixtures
 are retained and extended with the requested semantic negatives and consistent
 dynamic-ID positive controls. Existing C25 and all other fixture sources remain
 in place. No fixture result is claimed: S4 positives await actual Root raw.
 ORDER_AUDIT.md and order-audit.json are one current seven-domain table with
 normative rules, source, C/S1/S2a/S2b/S3 evidence, pending S4, approved authority
 and pending D05. REPAIR17–21 remain untouched historical documents and outputs;
 their current-status claims are superseded by repair22. The current protocol,
 collection plan and this status agree: no final acceptance.
 Static validation is recorded in REPAIR22_STATIC_VALIDATION.json:
 - Seven Python files parsed with AST and compiled in memory; none imported or
  executed. GDScript received static text/source review only; engine parse NOT RUN.
 - The entire frozen C region is byte-identical to the preserved full-stage
  checker. Its one-final-LF body hash is
  `33ae2af6afb98b48919ed679ab8519b7da7ddfda68c00f71c557d5cc9aad4a6c`, matching
  the supplied repair21 C_FULL_BLOCK_EXACT receipt. Existing C checks are intact.
 - The complete15-condition registry matches that immutable source; EV, seven
  domains and three safety outcomes are unchanged. Product1338 inputs and the
 316-file `.gd` parse roster were counted from the actual relocation manifest.
 - The five supplied public power bodies were compared to their actual relocated
  source. Full bodies, hashes, timing and restore analysis are retained in
  REPAIR22_SOURCE_FACTS.json.
 The exact finite Root plan is `s4/S4_ROOT_RUN.md`: one fresh own-B four-phase
 collection, with explicit arguments and full input/QA/source footprints. All
 old C/S1/S2a/S2b/S3 raw and all R17 sources remain accessible and are not rerun.
 S4 remains **missing/pending Root execution**. Future native/index/cross-gate
 work does not block this source submission. The updated collector/index
 references use a fresh r22 destination; no r17/r20 evidence is overwritten.
 Preserve the21615-check proof. Static full-map comparison found exactly the
 unchanged product1338 plus the old checker in its1339 map. The new checker hash
 differs; never claim1339 byte identity. The178 product suites do not invoke the
 checker and `.py` is excluded from the316 parse roster, so reuse requires the
 explicit QA-only source/config/input/environment applicability argument in
 EVIDENCE_COLLECTION.md. New-checker validation and S4 are separate, pending.
 Root must rebind support53cb through its normal registered task once the new
 source is known, without metadata bypass. Only if an exact final1339 full proof
 is required, perform one run after all fixes, S4 raw, local checks, eight suites
 and rebind are bundled; do not splice versions or perform a blanket full now.
 No required source context is missing for this preparation. Remaining D05
 choices are explicitly pending and not silently implemented. Formal validation,
 independent review, exact final-source applicability and normal integration
 remain pending. CurrentAlphaScope,30 packages/88 deliveries, original13/88 and
 P04 main9b are unchanged. P04 receives no credit; nothing is integrated.
@@ -0,0 +1,34 @@
 # Repair 23 — submitted, NOT RUN
 S4 source preparation only. The wrapper now defaults to fresh import without
 accessing cache receipts or cache directories. It checks that private `.godot`
 is absent immediately before import and requires the complete 316-script parse
 roster. The complete 1338-file source check and sole QA override remain intact.
 Optional cache mode retains the original registered-path, passed-run, source
 identity, engine identity and original-cache preservation guards.
 Engine identity is independently pinned to
 `c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf`.
 Read-only SHA256 inspection found identical bytes in the installed executable
 and the preserved r22 staged executable; neither was launched.
 Current wrapper SHA256:
 `6d5f4e05e87607413bfb5498dc9c9e17c2bfd96bf751c9e645050ca6f8e69d5c`.
 The current runbook binds this SHA. The series verifier already binds the wrapper
 to current checkout bytes dynamically, so no series metadata change is needed.
 Historical REPAIR22_STATIC_VALIDATION.json is preserved as historical evidence,
 not rewritten to claim validation of the new wrapper.
 Root must use fresh staging `audit-support/p04-s4-source-r23` and fresh plan
 `p04-s4-plan-r23.json`. Output remains `p04-s4-native-r22`. Old staging and plan
 are preserved. All R22 fixes and other suite wrappers/checks are retained.
 Checker SHA256 remains
 `a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`;
 S4 probe SHA256 remains
 `ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7`.
 No game input file was edited. Review was limited to source reading and hashes.
 No Git, tests, fixtures, check-only execution, engine, Runner, agents or manual
 commit were run. Native S4 evidence, root native/data/index work, independent
 review and formal acceptance remain pending. The expected validate MANIFEST
 failure is unchanged. Original P04-01 completion is not claimed.
@@ -0,0 +1,77 @@
 # Repair24 — source-ready submission
 Bounded continuation of P04-01 request-repair24; tests NOT RUN.
 Existing wrapper edits and the untracked identity fixture were read first and
 preserved/corrected. Only this execution subtree was written. No Git, engine,
 Runner, agent, commit or integration operation was performed.
 Changed source/runbook SHA256 (exact bytes):
 | File | SHA256 |
 | --- | --- |
 | s4/run_s4_native.py | dda495d33566eae14c8a707e77f8ec9dc6c7bd043076a091e90dd53f6a7490db |
 | p04_native_series.py | 348197759c169c2094db3b1114ca3abe5525b8d4bc9aca611d4579871a130b40 |
 | s4/engine_identity_negative_fixtures.py | f9148ef79cb62ec6631e7e3f23e1d3b062434f7152977aab3b9d18d82672255e |
 | s4/S4_ROOT_RUN.md | c1a00e3dad8d91d28df1a7f868f6e4e905f1df721baac964865e341c84356135 |
 This new status document records the hashes above; its own hash must be taken
 from the submitted checkout, outside its own contents.
 Wrapper pins changed: the own-B bare Godot copy is replaced with exactly
 `/Applications/Godot.app/Contents/MacOS/Godot`, rejecting symlinks and any
 different resolved path. Its constant SHA remains
 `c7cccbf8fb143e34e02fd6521e09be2c2b974f0d5db080b19071c9c570718ccf`.
 Engine identity no longer depends on an old cache runner-input. Fresh NO-CACHE
 is the default at plan and native collection. Optional explicit cache mode
 rejects failed receipts before reading their inputs or cache contents.
 No default cache or cache PASS is required. No engine is copied, re-signed or
 modified, and no codesign/xattr/security operation is added.
 Before-launch, during-collection and explicit after-cleanup re-pins retain the
 full runtime descriptor (path/resolved path, bytes, SHA, device, inode, mode,
 mtime and ctime). Runner-input and execution retain equal before/during/after
 identity records and execution retains labeled observations. fixed_guard still
 re-pins the engine. The verifier permits only this exact installed engine
 outside B, reads/hashes it exactly and checks the recorded identities.
 Fixed inputs and QA remain own-B only; actual command[0] must equal the pin.
 Defaults and Root staging are now:
 `p04-s4-native-r24`, `p04-s4-plan-r24.json`,
 `audit-support/p04-s4-source-r24`. Only RUNS S4 changes to r24.
 C/S1-S3 bindings, other series and the frozen C block (20916) are unchanged.
 Source1338, parse316, sole QA override, default-player protection, owned
 four-distinct-PID capture, live-engine refusal, disk admission, fresh output,
 cleanup-before-fixed-guard, formal Writer/Reader, NO_POWER, typed declarations,
 forbidden mutations/bypasses and mana constants guards remain.
 Untouched checker: SHA256
 `a61c5b496e656f60c66898e42500bc9a2d45f947690ce8f5f19a03984ebbc850`,
 78399 B. Untouched probe: SHA256
 `ceb592d853fd50063f20496c7b6df05257528dbe1c0d0d80bc6a8ccb1f9dd6d7`.
 All 1338 game files are unchanged; no game source was written. No new claim of
 executed 1338-file verification is made.
 The formal reviewer's five findings are carried forward unchanged, with no
 closure claimed. Their individual review text was not supplied in this dispatch
 or found in the local execution records searched; it is not reconstructed here.
 Main 9b remains frozen at original 13/88. Support 53cb remains review pending.
 D05 remains pending. No acceptance denominator, specification, main integration
 or original completion state changes.
 r22 is an immutable failed proof and remains ineligible. Diagnostics:
 `audit-support/p04-root-d393-s4-r01/ENGINE_STAGING_DIAGNOSTICS.json`.
 Its pre-banner staged-copy failure is an environment/staging fault; no product
 logic or probe/checker repair is claimed. Root uses the installed executable
 directly and preserves r22. Do not rerun S1-S3, C or full178.
 Validation: static AST parsing and in-memory compile completed for the wrapper,
 series verifier and identity fixture; no module was imported or executed.
 Read-only SHA/byte inspection completed for the four listed files, checker and
 probe. These are source checks only. Tests NOT RUN: identity fixtures, all other
 fixtures/suites, check-only plan generation, native S4, full178, registered
 validation and independent review. No unexecuted result is reported as passed.
 Registered validation stays exit 2 until Root generates the current
 MANIFEST.json collection; the gate is not changed. This is the carried-forward
 expected gate state, not a newly executed validation result. Root execution,
 current exact-version evidence and formal independent review remain pending.
@@ -0,0 +1,71 @@
 {
  "task_id": "P04-01",
  "scope": "Worker static controls only; no engine/registered validation/acceptance",
  "formal_acceptance": false,
  "original_credit": 0,
  "results": [
    {
      "check": "checker_approval_fixtures",
      "status": "pass",
      "positive": 6,
      "negative": 24,
      "scope": "path/hash/status + literal human answers"
    },
    {
      "check": "checker_negative_fixtures",
      "status": "pass"
    },
    {
      "check": "checker_applicability_fixtures",
      "status": "pass",
      "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
      "changed_function_units": 58
    },
    {
      "check": "checker_native_fixtures",
      "status": "pass",
      "scope": "mutations of historical supplied raw; not a native engine run"
    },
    {
      "check": "checker_series_fixtures",
      "status": "pass",
      "scope": "historical/synthetic controls"
    },
    {
      "check": "checker_encoder_fixtures",
      "status": "pass"
    },
    {
      "check": "checker_join_fixtures",
      "status": "pass",
      "scope": "historical/synthetic controls"
    },
    {
      "check": "bulk_reader_equivalence",
      "status": "not_run",
      "reason": "Contains git init/hash-object -w and isolated-object writes; worker Git writes prohibited"
    },
    {
      "check": "checker_role_fixtures",
      "status": "not_run",
      "reason": "Contains clone/checkout/add/commit/merge/reset; worker Git writes prohibited; fresh Q index is also not available"
    },
    {
      "check": "Python AST / top-level execution JSON",
      "status": "pass"
    },
    {
      "check": "git diff --check",
      "status": "pass"
    }
  ],
  "exclusions": [
    "No fresh-Q positive fixture claimed",
    "No fake-normal-C qualification claimed",
    "No S5 native execution",
    "No full184/329",
    "No p04-acceptance on current S"
  ],
  "note": "Recorded fixture outcomes are not exact-version native proofs. Final comment/document edits do not alter executed fixture semantics. Final source is unqualified for native admission; see REPAIR30_STATUS.md."
 }
@@ -0,0 +1,67 @@
 # Repair 30 — BLOCKED / partial implementation
 This revision is **not ready for Root native admission**. Formal status remains
 **16/88, P04=0**. Outstanding items include unfinished implementation, not merely
 the fresh evidence Root is expected to produce after submission.
 Implemented within allowed_paths:
 - Four actual human approvals, exact answer/policy text, both source paths and
  SHA256 bindings; candidate documents marked superseded.
 - Per-ID path/hash authority binding for six D05 IDs; required authority refs
  corrected without changing the 15-condition + EV roster or thresholds.
 - Frozen M is c0ea009b28a7649aca6a433a1a24dc0be5e7ab81. Counts/membership derive
  from Git objects: 1368 product files excluding checker, 3644 metadata paths.
  Ordering functions retain registered byte equality; applicability has 58
  changed function units. Full details are in REPAIR30_SOURCE_FACTS.json.
 - Q must equal the recomputed merge-tree object. A commit cannot impersonate Q.
  C must have frozen M as first parent, legal S as second parent and the same
  entire tree as Q. Selected native sources explicitly include the checker;
  product equality continues to exclude it.
 - Seven-domain audit refreshed with actual M hashes/function lines. All
  condition-specific nativeWindows obligations remain pending.
 Implementation/context gaps blocking readiness:
 1. S5's four executable drivers and raw semantic adapters are **not written**.
   s5/PENDING.md records concrete source constraints. Additional approved
   destruction/day/pause-reason/exit measurements are not enforced from S5 raw
   bytes yet. REQUIRED retains the existing safety metrics.
 2. p04_native_series.py, collect_p04_native.py, S1–S4 wrappers and parts of the
   schema2 builder still bind historical run names/manifests/raw pins. Connect
   fresh Q material without replacing historical records or inventing future
   hashes. The builder now reads tested revision from native provenance and
   includes the checker, so the old bundle cannot satisfy the new role check.
 3. Full184/329 runner-input has no source_before or QA_overrides, unlike native
   QA inputs. It needs its own exact source/settings/markers/policy/engine/input
   and ended-receipt join. The native input loop is not a full-proof verifier.
 4. Parent/tree equality alone cannot establish normal prepare-integration
   provenance: a synthetic commit can have identical parents/tree. The supplied
   plan does not define the concrete normal-candidate qualification receipt,
   path and hash contract. Independent qualification remains pending; no
   invented Runner API or authority has been added.
 5. Bulk and role fixtures perform Git writes, including temporary objects,
   commits and merges. They were not run under the worker Git-write prohibition.
   Updated role negatives are unexecuted; genuine fresh-Q positive and
   fake-normal-C rejection remain unqualified.
 Static results are in REPAIR30_STATIC_CHECKS.json. Historical/synthetic fixture
 success is not new game evidence. No engine, formal registered gate, Runner
 operation, Git write or other agent was invoked. Product/test-tree/Clock/values
 remain unchanged.
 Required Root order after remaining implementation is repaired:
 1. All eight static controls plus role/applicability/approval negatives.
 2. Genuine Q from final S and frozen M; fresh real native S1–S5 once.
 3. Inspect free disk and verified CoW, then full184/329 once on the same final Q
   including final checker; bind test_required_kitchen separately.
 4. Truthful index from exact raw material.
 5. Registered p04-acceptance on S with --verify-only.
 6. Independent whole-unit review.
 7. Normal prepare-integration/final on independently qualified C, equal to Q for
   source/settings/markers/policy/engine/inputs.
 Keep live Root records under .runtime while M is frozen. Old S1–S4/r22 and f5
 full178 remain historical. No known-fail formal gate is a progress check.
 No sources/evidence are removed for the obsolete 500000-byte cap.
@@ -0,0 +1,94 @@
 {
  "task_id": "P04-01",
  "scope": "Worker static controls only; no native run or formal gate",
  "formal_acceptance": false,
  "original_credit": 0,
  "results": [
    {
      "check": "checker_approval_fixtures",
      "status": "pass",
      "exit_code": 0,
      "scope": "six positive and 24 negative authority controls"
    },
    {
      "check": "checker_negative_fixtures",
      "status": "pass",
      "exit_code": 0,
      "scope": "historical/synthetic control only; no fresh Q proof"
    },
    {
      "check": "checker_applicability_fixtures",
      "status": "pass",
      "exit_code": 0,
      "scope": "historical/synthetic control only; no fresh Q proof"
    },
    {
      "check": "checker_native_fixtures",
      "status": "pass",
      "exit_code": 0,
      "scope": "historical/synthetic control only; no fresh Q proof"
    },
    {
      "check": "checker_series_fixtures",
      "status": "pass",
      "exit_code": 0,
      "scope": "historical/synthetic control only; no fresh Q proof"
    },
    {
      "check": "checker_encoder_fixtures",
      "status": "pass",
      "exit_code": 0,
      "scope": "historical/synthetic control only; no fresh Q proof"
    },
    {
      "check": "checker_join_fixtures",
      "status": "pass",
      "exit_code": 0,
      "scope": "historical/synthetic control only; no fresh Q proof"
    },
    {
      "check": "Python AST / execution JSON",
      "status": "pass",
      "python_files": 22,
      "json_files": 17
    },
    {
      "check": "git diff --check",
      "status": "pass"
    },
    {
      "check": "normal C fail-closed in-memory controls",
      "status": "pass",
      "cases": [
        "missing authority contract rejected",
        "caller-forged authority contract rejected"
      ],
      "scope": "not a Git role fixture"
    },
    {
      "check": "bulk_reader_equivalence",
      "status": "blocked",
      "exit_code": 1,
      "reason": "/tmp directory creation raised PermissionError (Operation not permitted), before any Git invocation",
      "execution": "fixture body unexecuted; Root-run"
    },
    {
      "check": "checker_role_fixtures",
      "status": "unexecuted",
      "reason": "isolated temporary directory unavailable; fresh-Q evidence also unavailable; Root-run"
    },
    {
      "check": "checker_candidate_fixtures",
      "status": "unexecuted",
      "reason": "isolated temporary directory unavailable; Root-run"
    }
  ],
  "exclusions": [
    "S5 drivers and adapters not implemented",
    "fresh-Q pipeline not implemented",
    "full184/329 verifier not implemented",
    "normal-C authoritative receipt path/hash/provenance contract not supplied",
    "no genuine-Q or qualified-C positive claimed"
  ],
  "note": "Existing REPAIR30_SOURCE_FACTS and REPAIR30_STATIC_CHECKS were reused without modification. Counts here describe static file parsing, not acceptance or runtime source membership."
 }
@@ -0,0 +1,59 @@
 # Repair 31 — BLOCKED / incomplete implementation
 Formal status remains **16/88, P04 credit 0**. **Do not admit the once-only
 native/full batch.** This revision does not finish BF35.
 D05 is **six of six actually approved**. There is no policy question for the
 human. Adoption into enforced raw evidence and exact-Q verification are pending.
 A01 remains approved. The per-ID path/SHA256 bindings in the checker and the
 superseded candidate documents are preserved. The authority fixtures exercise
 positive, missing, wrong-hash, pending-status and wrong-path cases for every ID.
 Repair30's SOURCE_FACTS and STATIC_CHECKS remain historical, unchanged inputs.
 This repair adds a fail-closed normal-C qualification boundary and records the
 receipt content requirements in `NORMAL_C_RECEIPT_FIELDS`. Even a commit with
 the correct two parents and Q tree is insufficient. The authoritative Root/Runner
 receipt path, digest and provenance verification contract have not been supplied;
 `NORMAL_C_RECEIPT_CONTRACT` remains unset. No Runner API or authority is inferred.
 An index-provided receipt cannot resolve this gap. This blocks every C, including
 a legitimate C, until that concrete contract and its verifier are supplied.
 The schema2 builder's undefined `tested` reference is fixed by checking the CLI
 reference against the constructed payload's tested version. This does not make
 its historical pipeline usable for fresh Q.
 Bulk and role fixtures now allocate under `/tmp`, outside the source repository,
 with inherited Git routing removed. Role fixtures reject unqualified no-ff merges
 and synthetic commits with identical parents/tree. The additional candidate
 fixture constructs such a commit only in a temporary bare clone. These Git
 fixtures are **Root-run / unexecuted**: the worker's bulk attempt failed on
 temporary directory creation with `PermissionError: Operation not permitted`,
 before any Git invocation. They were not redirected into the worktree.
 Remaining implementation, separate from the genuine authority context gap:
 1. Four executable S5 drivers and their raw semantic adapters are still missing.
   `s5/PENDING.md` remains accurate. All approved destruction/day/reason/exit
   policies must be enforced alongside the existing safety conditions.
 2. Fresh-Q run identity/provenance plumbing in native series, collector, S1–S4
   wrappers and schema2 builder is unfinished. Historical names, pins and source
   manifests have not been relabeled.
 3. The separate full184/329 verifier and its exact source/settings/markers/policy/
   engine/input/ended-receipt joins, including separate test_required_kitchen
   binding, are unfinished. The native input loop is not a substitute.
 4. Normal-C positive qualification needs the actual authoritative receipt contract
   described above; matching Git structure alone is deliberately rejected.
 5. Genuine-Q positive and fake-Q/full-role fixtures remain unexecuted. The new
   synthetic-C Git fixture also remains unexecuted; static parsing is not proof
   that it ran.
 See REPAIR31_STATIC_CHECKS.json for actual worker results. No engine, formal gate,
 Runner operation, repository Git write, integration or other agent was invoked.
 Product code, Clock, values, tests, spec, denominator, thresholds and permissions
 are unchanged. No material was removed for the obsolete byte cap.
 After the missing implementation and context are resolved, Root retains the
 recorded order: static controls; genuine Q and fresh S1–S5 once; disk/verified CoW
 then full184/329 once on final Q with final checker; truthful index; verify-only
 on S; independent whole-unit review; prepare-integration/final on qualified C.
 Live records stay under `.runtime`. No known-failing gate is a progress check.
@@ -0,0 +1,63 @@
 {
  "task_id": "P04-01",
  "scope": "new concrete32 static preparation only",
  "results": [
    {
      "path": "normal_c_join.py",
      "check": "AST and in-memory compile",
      "exit_code": 0,
      "status": "pass",
      "sha256": "3156e1df928ae15ab311b61eb27e21ef27cf123cb7097646a81a3f836c30ba33"
    },
    {
      "path": "normal_c_join_fixtures.py",
      "check": "AST and in-memory compile",
      "exit_code": 0,
      "status": "pass",
      "sha256": "fba1634aafbb5c6030bec073b75b609a20d10d5ca6a6f0eddc270a12023830a3"
    },
    {
      "path": "scratch_fixture_adapter.py",
      "check": "AST and in-memory compile",
      "exit_code": 0,
      "status": "pass",
      "sha256": "4994101754c38568007f2d7e1e0c8a2221d26216f464c496a7258ff89c601994"
    },
    {
      "path": "s5/run_s5_native.py",
      "check": "AST and in-memory compile",
      "exit_code": 0,
      "status": "pass",
      "sha256": "928409e17984330498b2637e33957740bcdd91d427df5ee60d21a86671646fa2"
    },
    {
      "path": "s5/s5_power_adapter.py",
      "check": "AST and in-memory compile",
      "exit_code": 0,
      "status": "pass",
      "sha256": "6b77e1ac7f1bdfd031321f106d8a6fcf465a3c1dd30e697d2b1e7c7285139f15"
    },
    {
      "path": "s5/p04_s5_power_probe.gd",
      "check": "text-only forbidden operation and declaration controls",
      "exit_code": 0,
      "status": "pass",
      "godot_parse": "unexecuted",
      "sha256": "248da3f1dbca644e2fd62fcf283a4e499e0631ff23f8dc44dc77b872ef1be5ba"
    },
    {
      "check": "normal-gate reference supplied index SHA256",
      "status": "pass",
      "exit_code": 0,
      "sha256": "4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856"
    }
  ],
  "fixtures": "unexecuted",
  "formal_validation": "unexecuted",
  "engines_launched": 0,
  "git_commands": 0,
  "runner_operations": 0,
  "whole_goal_accepted": false,
  "original_credit": 0,
  "existing_partial31_files_edited": 0
 }
@@ -0,0 +1,44 @@
 # Repair 32 — partial implementation submitted; no acceptance claim
 Only new concrete32 files were added. Existing partial31 files, including the
 checker and s5/PENDING.md, were not edited. No condition credit is claimed:
 formal 16/88, original 30/88, P04 credit 0, all 15 conditions plus EV, frozen
 Mc0 and all six approved D05 items remain unchanged.
 Implemented, unexecuted:
 - S5 power driver pair and S4-derived wrapper: public bath pure depletion and
  cafeteria/kitchen reason-priority depletion; public spend/recovery commands;
  observed completion; same-key replay; full typed/JSON phase points; formal
  save/independent Reader load/replay. No disconnect or direct resource mutation.
 - Hashed raw semantic adapter for existing power_stop, dependency_stop and
  recovery_completion measurement keys. It does not qualify native provenance.
 - Read-only normal_c_join over actual Runner task/candidate/main_base, approval,
  validation/review and integration/final records. No future C hash is frozen.
  Root must retain an actual approved Runner snapshot before integrate deletes
  approval; later final records come from the current Runner database.
 - Root-run synthetic normal join controls and explicit-scratch adapter for
  preserved Git fixtures. No fixtures were executed.
 - S5_ROOT_RUN.md and NORMAL_C_BOUNDARY32.md explain boundaries and limitations.
 Actual verification: Python AST/compile for five new Python files and textual
 probe controls passed. No pycache, engine, Godot parse, Git command, Runner
 operation, fixture, formal validation, independent review or integration ran.
 The shell rejected a here-document temporary-file allocation; subsequent commands
 used python -c. An attempted documentation addition at the repository root was
 rejected and no file was created there; the document was added within allowed_paths.
 Remaining implementation limitations:
 1. The old checker still deliberately rejects normal C: preserving partial31
   means this standalone Runner-record join is not connected to its role output.
   It does not assert Git structure/Q equivalence and cannot bypass that gate.
 2. The S5 wrapper retains historical S4 template identity/count bindings. Fresh-Q
   plumbing is outside this step and remains pending; this is not batch admission.
 3. S5 destruction/midnight/exit, fresh-Q/full184/329, truthful collection/index,
   exact-version applicability, independent review and ordinary gates remain
   pending. None was attempted together or counted as a new unit.
 4. Scratch adapters preserve the old fixtures' assertions; positive normal-C
   structure fixtures under the eventual integrated boundary are still pending.
 Runner/Root must run the permitted static fixtures in external scratch, review
 the added source, and resolve boundary integration before the established
 once-only genuine-Q/native/full sequence. No evidence or completion is invented.
@@ -0,0 +1,112 @@
 {
  "task_id": "P04-01",
  "status": "blocked",
  "checks": [
    {
      "kind": "py_compile",
      "path": "tools/check_p04_order_evidence.py",
      "output": "compiled without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
      "output": "compiled without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
      "output": "compiled without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join.py",
      "output": "compiled without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join_fixtures.py",
      "output": "compiled without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
      "output": "compiled without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "pure_static_ast",
      "observation": "normal_c_join.verify parameters",
      "output": [
        "database",
        "approved_database",
        "candidate",
        "submission",
        "hashes"
      ]
    },
    {
      "kind": "pure_static_source",
      "observation": "checker contains runner_inputs",
      "output": true
    }
  ],
  "fixtures": [
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_approval_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_encoder_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_native_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/engine_identity_negative_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/receipt_lifecycle_fixtures.py",
      "execution": "unexecuted; Root only"
    }
  ],
  "engine_runs": 0,
  "fixture_runs": 0,
  "condition_credit": 0,
  "original_completion": false
 }
@@ -0,0 +1,51 @@
 # REPAIR33 — blocked, no implementation or acceptance claim
 P04-01 remains incomplete. Only this status and REPAIR33_STATIC_CHECKS.json
 were added. Checker, fixtures, wrapper and S5 run documents remain unchanged.
 No Git writes, Runner operations, fixture execution or engine runs occurred.
 The instruction to return blocked for missing specifications applies to these
 unresolved input contracts:
 - The Root-supplied Q descriptor has no supplied schema or existing definition
  in the inspected checker, S5 wrapper or local execution documentation.
  `verify_roles` requires `product_binding` to contain exactly `tested_product`
  and `runner_inputs`. Each runner input references an existing native receipt,
  wrapper and materials; it does not define M/S fields or the wrapper's fresh-Q
  configuration input. Specify the descriptor fields/types and how M, S, Q,
  staged product, settings, markers, policy and material bindings are obtained
  without inventing another input contract. Future hashes are not requested.
 - The requested combined control includes matching Runner/Root records, but
  `normal_c_join.verify(database, approved_database, candidate, submission,
  hashes)` accepts only Runner databases and caller-supplied commit strings.
  Its CLI has no Root exact-candidate record input or verification. Specify
  that record's schema and binding, or explicitly confirm that Root performs
  this join outside this verifier and define the combined control boundary.
  The verifier was neither weakened nor called from the checker.
 These are contract questions, not requests for permission expansion. Runner
 core, Owner CLI and the reference core were not read. No dependency on them
 was introduced. No speculative partial implementation was made.
 Actual verification: six existing Python files compiled with py_compile;
 generated bytecode was placed under the allowed execution directory and
 removed. Pure AST inspection confirmed the normal_c_join parameter list;
 a source assertion confirmed runner_inputs is present. Actual outputs are
 recorded in REPAIR33_STATIC_CHECKS.json. All twelve discovered fixture files
 are individually listed there as unexecuted; Root runs them later with its
 own scratch directory. No test or acceptance result is inferred from syntax.
 An initial shell here-document command failed before Python started with
 `can't create temp file for here document: operation not permitted`.
 It produced no verification result. The checks were then run using python3
 `-c`, without shell temporary-file redirection.
 Explicitly pending: this REPAIR33 implementation; S5 destruction, midnight
 and exit drivers; fresh-Q plumbing for S1–S4 and the collector; all 184
 executable suites and the 329 parse verifier; the truthful index; Root's
 fixed run order, independent review and normal integration/final joins.
 Formal 16/88, original 30/88, seven domains plus EV, all six D05 approvals
 and P04 credit 0 remain fixed. M remains
 `c0ea009b28a7649aca6a433a1a24dc0be5e7ab81`. No condition credit, original
 completion, self-reported acceptance or cap change is claimed.
@@ -0,0 +1,95 @@
 {
  "task_id": "P04-01",
  "status": "submitted",
  "checks": [
    {
      "kind": "py_compile",
      "path": "tools/check_p04_order_evidence.py",
      "output": "tools/check_p04_order_evidence.py: py_compile completed without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
      "output": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py: py_compile completed without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
      "output": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py: py_compile completed without syntax errors",
      "exit_code": 0
    },
    {
      "kind": "ast",
      "output": "AST: documentation roster is definition-only; qualifier retains identity require and structural return with provenance false; role candidate initialized, assigned and returned; pure control function has no subprocess/Git calls.",
      "exit_code": 0
    },
    {
      "kind": "py_compile",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
      "output": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py: py_compile completed without syntax errors (final literal inputs)",
      "exit_code": 0
    },
    {
      "kind": "ast",
      "output": "AST: pure candidate controls contain four literal 40-hex inputs.",
      "exit_code": 0
    }
  ],
  "fixtures": [
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_approval_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_encoder_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_native_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_role_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/normal_c_join_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/engine_identity_negative_fixtures.py",
      "execution": "unexecuted; Root only"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/receipt_lifecycle_fixtures.py",
      "execution": "unexecuted; Root only"
    }
  ],
  "pure_candidate_controls": "unexecuted; Root may use checker_candidate_fixtures.py --pure-only",
  "engine_runs": 0,
  "fixture_runs": 0,
  "condition_credit": 0,
  "original_completion": false
 }
@@ -0,0 +1,49 @@
 # REPAIR34 — structural step submitted
 P04-01 remains incomplete. This step changes only the checker structural C
 qualification and the two local fixture boundaries, plus this status and the
 static-check record. The checker returns structure_qualified true and
 provenance_verified_by_checker false with C/S/M/C_tree/Q joins. Prospective
 roles return candidate_structure null. The provenance roster is documentation
 only, never consumed. Other parent, tree, checker-blob and binding guards
 were left unchanged.
 Candidate fixtures now expect honest structural qualification for a manufactured
 same-tree C. A separate --pure-only path contains three identity negatives and
 one exact positive with literal 40-hex inputs; it requires no Git or engine.
 The two role cases expect structural verification and separately record actual
 downstream --verify-only returncode/stdout/stderr without asserting acceptance.
 Both boundaries assert stderr has no 'qualification context gap'. Other
 negative expectations remain unchanged. These fixtures have not been executed;
 their downstream outcomes are pending Root execution, not inferred here.
 Actual verification is limited to py_compile for the three changed Python
 files and AST checks recorded with their real output in
 REPAIR34_STATIC_CHECKS.json. Temporary compilation bytecode was created only
 inside the allowed execution directory and removed. Every discovered fixture,
 including the pure candidate controls, is unexecuted. An initial editing
 command failed with a Python SyntaxError before any file writes; edits were
 then applied in place. That command was not a validation check.
 Explicitly pending in this same unit:
 - normal_c_join and its fixtures: unchanged and unexecuted here; post-final
  Root SQL candidate/M/S/approval/validation/review/integration/final joins
  remain mandatory before original credit.
 - Wrapper/descriptor: separate pre-run configuration with Root-derived M/S/Q
  and pinned source/material references, not after-run binding.runner_inputs
  receipts. Root JSON and exact-candidate qualification remain pending.
 - S5 destruction, midnight and exit drivers; S1–S4 and collector fresh Q.
 - All 184 executable suites / 329 parse verification; truthful index.
 - Root run order, independent review, integration/final and provenance joins.
 scratch_fixture_adapter.py routing is unchanged. No Git commands or writes,
 engine runs, fixture runs, Runner operations, permissions or cap changes were
 performed. Runner core and Owner CLI were not read; this step does not depend
 on them. External provenance remains a required pending context, not a reason
 to block the authorized structural step.
 All seven domains plus EV, all six D05 approvals, formal 16/88, original 30/88
 and P04 credit 0 remain fixed. Frozen M is
 c0ea009b28a7649aca6a433a1a24dc0be5e7ab81. No condition credit, self-reported
 acceptance, original completion or new counted unit is claimed.
@@ -0,0 +1,72 @@
 {
  "validation": "py_compile and ast only",
  "results": [
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
      "py_compile": "passed",
      "ast.parse": "passed",
      "ast.required_functions": "passed",
      "ast.no_fixed_counts": "passed"
    },
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_wrapper_fixtures.py",
      "py_compile": "passed",
      "ast.parse": "passed"
    }
  ],
  "fixtures": [
    {
      "name": "partial-triple",
      "status": "unexecuted"
    },
    {
      "name": "non-hex",
      "status": "unexecuted"
    },
    {
      "name": "short",
      "status": "unexecuted"
    },
    {
      "name": "mixed-modes",
      "status": "unexecuted"
    },
    {
      "name": "historical-native",
      "status": "unexecuted"
    },
    {
      "name": "no-flags",
      "status": "unexecuted"
    },
    {
      "name": "fresh-q",
      "status": "unexecuted"
    },
    {
      "name": "historical-check-only",
      "status": "unexecuted"
    },
    {
      "name": "git-dirty-file",
      "status": "unexecuted"
    },
    {
      "name": "git-untracked-file",
      "status": "unexecuted"
    },
    {
      "name": "git-wrong-head-tree",
      "status": "unexecuted"
    },
    {
      "name": "git-wrong-submission",
      "status": "unexecuted"
    },
    {
      "name": "git-wrong-main",
      "status": "unexecuted"
    }
  ],
  "accepted": false
 }
@@ -0,0 +1,37 @@
 # REPAIR35 — submitted preparation, no acceptance credit
 Scope is the S5 wrapper fresh-Q mode, pure mode-selection fixtures and status
 documents only. The wrapper now binds M/S/Q_tree, the clean checkout carrier,
 selection authority, selected source bytes and Q marker contracts. Fixed-input
 rechecks require identical provenance. Cache comparisons remove only checker
 and TEST from both maps and otherwise compare keys and hashes. R17 is explicitly
 check-only/read-only. Fresh-Q counts are derived; historical material is listed
 as historical_not_inputs rather than pinned as fresh-Q input.
 R34 structural C, Root normal_c_join, probe, adapter, ownership/PID/cleanup,
 Writer/Reader, formal mirror and inventory remain unchanged. Product, Clock,
 values, tests/, Runner, core and Owner CLI were read-only. No Git commands,
 engines, Runner operations or fixture execution were performed. No /tmp or
 permission additions were used. A shell heredoc could not be created by the
 environment; that edit attempt exited before running Python or changing files.
 Edits were then applied directly in place.
 Only py_compile and AST static validation are recorded in
 REPAIR35_STATIC_CHECKS.json. Pure fixtures (partial triple, non-hex, short,
 mixed modes, historical native, no flags, full triple, historical check-only)
 and all five Root Git negatives are **unexecuted**. No functional pass is claimed.
 Pending: S5 destruction/midnight/exit drivers; fresh Q for S1–S4 and collector;
 184 suites / 329 parse; truthful index; Root run order; Root exact-candidate
 qualification. Root next builds Qt and parentless X, stages under its own B,
 then runs check-only, pure fixtures and Git negatives as described in
 s5/S5_ROOT_RUN.md. No native/batch admission until the pending prerequisites
 are ready.
 All 7 domains + EV, formal 16/88, original 30/88, P04 credit 0, all six D05
 approvals, frozen M c0ea009b28a7649aca6a433a1a24dc0be5e7ab81 and allowed_paths
 remain fixed. This is an internal step of P04-01, no new counted unit and no
 completion claim. Unchanged support gates including owned_outer.py were not
 read or executed; their qualification remains with Root, as recorded in the
 direction. Source commit identity was not independently checked because Git
 commands are prohibited for this worker.
@@ -0,0 +1,41 @@
 {
  "py_compile_ast": [
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
      "sha256": "e96b2793d7352ac52e16505c9c4cde3d151497763be3cb47926338df070b05e5",
      "py_compile": "passed",
      "ast": "passed",
      "top_level_functions": [
        "r17_relocation_guard",
        "probe_guard",
        "module",
        "pin",
        "load_uid_helper",
        "make_uid_policy",
        "engine_pin",
        "select_mode",
        "fresh_q_guard",
        "main"
      ]
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_uid_controls.py",
      "sha256": "17069b87b98c385e1298152c9c5c2f23c8710b79eb19aef073c64ce215f6c902",
      "py_compile": "passed",
      "ast": "passed",
      "top_level_functions": [
        "module",
        "main"
      ]
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_wrapper_fixtures.py",
      "sha256": "1a4daebf46051e975a9cc740660c4672371ea6a9e6cb04cbc1d458ece5f0151d",
      "py_compile": "passed",
      "ast": "passed",
      "top_level_functions": [
        "main"
      ]
    }
  ]
 }
@@ -0,0 +1,28 @@
 # REPAIR36 — bounded preparation submitted, no acceptance credit
 Changes are limited to the S5 wrapper, new pure UID controls and these documents.
 Actual-Q AST helper loading, finite derived UID planning, import sealing,
 private-globals phase instrumentation, phase receipts and cleanup rechecks
 supplement the existing expected inventory. Historical selection, existing
 require gates, ownership/PID, engine, cache and formal mirror rules remain.
 The helper is loaded from real Q before controls construct synthetic refs.
 Only py_compile and AST checks are executed and recorded in
 REPAIR36_STATIC_CHECKS.json. Wrapper fixtures, UID controls, check-only plans,
 Git negatives and every native diagnostic are unexecuted. No functional pass,
 full regression, 15+EV batch, original credit or completion is claimed.
 No Git, engine, Runner or other agent operations were performed. A shell
 heredoc edit failed before Python execution; edits then used apply_patch.
 Context gap: Q runner API was read from
 build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference;
 Root must confirm the actual Q runner matches that mirror (320ca668…)
 at runtime. Helper implementation was read from the adjacent P13 reference;
 runtime loading uses only the actual pinned Q, never either mirror.
 Pending: S5 destruction/midnight/exit drivers; S1–S4/collector fresh Q;
 derived 184 suites / 329 parse; truthful index; Root exact-candidate qualification.
 Root order is py_compile → wrapper fixtures → UID controls with explicit scratch
 → fresh check-only plan → exactly one new-name diagnostic. The failed r35
 diagnostic is preserved. All 7 domains + EV, formal 16/88, original 30/88,
 P04 credit 0, all six D05 approved in the actual human record; adoption verification pending, M c0ea009 and allowed_paths stay fixed.
@@ -0,0 +1,23 @@
 {
  "checks": [
    {
      "path": "s5/s5_power_adapter.py",
      "sha256": "448f7a99cd08ead1d4e2b91907a66e8805261c9d24c9f55eed9a047fac48b57c",
      "py_compile": "pass",
      "ast_parse": "pass"
    },
    {
      "path": "s5/s5_power_adapter_controls.py",
      "sha256": "32d71db80994052b905829e6a2da38448ae789825c44570a901e67fe2d07fd33",
      "py_compile": "pass",
      "ast_parse": "pass"
    }
  ],
  "executed": [
    "py_compile",
    "ast.parse"
  ],
  "functional_controls_executed": false,
  "native_executed": false,
  "accepted": false
 }
@@ -0,0 +1,15 @@
 # REPAIR37 — bounded preparation submitted; no acceptance
 Two probe corrections preserve recovery inputs/save/restore: typed String snapshot staff versus StringName live staff, and rejected duplicate enqueue bound to the completed resource command. The completion hook still requires success; duplicate rejection must not emit command_completed. All payment, reservation, receipt, ledger, phase roster and Reader assertions remain unchanged.
 The adapter loads the existing series parser by spec_from_file_location and records its SHA256. Typed staff and duplicate checks bind both roles to their own completed commands. New pure controls verify every INDEX member sha/bytes before scratch creation, use the actual q36 pair, and require ValueError for the specified mutations including JSON-equal typed changes. Controls remain unexecuted.
 Read dependencies: local q36-writer-contract INDEX, TYPED_AUDIT, SAFETY_REAUDIT, command_queue.gd.reference, facility_instance.gd.reference, both before/resource-replay JSON records; series Node/variant and checker loader pattern. Raw fixture decoding and controls are reserved to Root. A shell heredoc failed before Python execution because shell temporary-file creation was denied; subsequent edits used python -c with no temporary files.
 Only py_compile and AST parsing are run, as recorded in REPAIR37_STATIC_CHECKS.json. No engine, Git, Runner, native run, other agent or /tmp operation was performed. No functional pass is claimed. Source basis remains 8e25213; counters remain 37, original 30/88, formal 16/88, P04 credit 0 and M c0ea009 frozen. p04-s5-DIAG-r36 remains FAILED without retrospective pass. All six D05 decisions are approved in the actual human record; adoption verification remains pending.
 Root order: py_compile → s5_uid_controls → adapter controls with explicit fresh BUILD scratch → fresh check-only plan → at most one fresh source-pinned diagnostic under a new name. UID sources/settings are unchanged. No full184 until the whole batch is ready.
 Context gap: whether current runtime submit_command emits command_completed on enqueue rejection is grounded only by the command_queue reference and TYPED_AUDIT raw. Root must observe this in the diagnostic; any emission remains a failure.
 Pending: S5 destruction/midnight/exit; S1–S4/collector fresh Q; full 184/329; whole independent Opus review; normal prepare/exact candidate/integration/final/Root join/ledger. No acceptance or completion is claimed.
@@ -0,0 +1,54 @@
 # REPAIR38 — superseded by REPAIR39_STATUS.md
 The shared-helper constraint below is historical and was explicitly resolved
 by the REPAIR39 direction: generalize `_queue` and `_reader` through one
 CASE_TABLE while preserving S5A/S5B behavior. It is no longer an open question.
 See REPAIR39_STATUS.md for the current batch status and missing source context.
 ## Historical REPAIR38 record
 No implementation or acceptance is submitted by this attempt. No Python or
 GDScript source was changed. The A–F batch remains outstanding, not complete
 or admitted for native execution.
 The direction both freezes `_queue` and `_reader` as shared helpers and asks
 for new reservation-bearing cases with before/boundary/next/replay points.
 The existing helpers contain case-specific assertions and replay dispatch:
 - `s5/p04_s5_power_probe.gd::_queue` requires exactly one reserved inventory ID
  only when `_case == "S5B_DEPENDENCY"`; every other case must have zero.
  Using this unchanged helper for the required reservation-bearing S5C/S5F
  queued request would fail its assertion even with correct runtime behavior.
 - `_reader` unconditionally calls `_assert_stopped` after loading boundary,
  then replays the literal labels `held`, `recovered`, `duplicate_guard`.
  Per-case `_labels` does not control that replay loop. New next/replay points
  cannot be independently replayed through this loop as written.
 Required clarification: does “shared helpers stay unchanged” allow replacing
 these case-specific predicates/dispatch with case-table lookups while keeping
 S5A/S5B behavior and every existing assertion equivalent? Alternatively, are
 separate new-case queue/replay helpers authorized while the existing helpers
 remain exclusively the power-case implementation? No selection between these
 interpretations was silently made. This is an implementation-constraint
 question, not a request to reopen D05 or A01.
 Read context includes AGENTS.md, REPAIR37_STATUS.md, the existing S5 probe and
 wrapper, S5_ROOT_RUN.md, PENDING.md, D05_REMAINING_APPROVAL.json, Root's local
 q37-remaining-source-map/SOURCE_MAP.json and referenced facility and automatic
 defense sources. Root's M runtime reference is present; the worktree runtime
 is a different version and must not substitute for that reference.
 Only read-only source inspection and this status documentation were performed.
 No pure controls, py_compile, AST validation, probe_guard, engine, Git, Runner,
 native run, other agent, integration or /tmp operation was performed. No
 REPAIR38_STATIC_CHECKS.json claiming validation is supplied because no source
 checks were run. PENDING.md is not marked superseded: cases remain unimplemented.
 r35/r36 remain FAILED; Q37 remains a successful local diagnostic only. M
 c0ea009, original 30/88, formal 16/88 and P04 credit 0 remain unchanged. The
 15+EV requirements, seven domains, all six D05 decisions and A01 are unchanged.
 After clarification and completion of the entire source batch, Root's required
 order remains pure controls, check-only S1–S5 plan, focused fresh native S1–S5,
 fresh collect, full184/329 on final Q, index, --verify-only, independent review,
 and normal gates with Root join. None of these steps is authorized or claimed
 as performed by this worker status record.
@@ -0,0 +1,11 @@
 {
  "task_id": "P04-01",
  "repair": 39,
  "status": "blocked",
  "source_files_modified": [],
  "checks_run": [],
  "reason": "Documentation-only blocked record; required exact-version source context missing. No py_compile, AST, probe_guard or functional validation executed.",
  "accepted": false,
  "native_admissible": false,
  "unit_accepted": false
 }
@@ -0,0 +1,63 @@
 # REPAIR39 — blocked: required exact-version source context unavailable
 The REPAIR38 engineering constraint is resolved. The authorized implementation
 choice is one CASE_TABLE with reserved-ID counts, replay labels and per-case
 dispatch; `_queue` and `_reader` may be generalized without forking them.
 No private-refactor or policy question remains open.
 The complete A–F batch remains unimplemented in this attempt. No executable
 source was changed, no partial batch is submitted, and no native admission or
 acceptance is claimed. PENDING.md and S5_ROOT_RUN.md remain unchanged because
 the cases and whole-batch prerequisites have not been implemented.
 ## Required context gap
 REPAIR38 records reading Root's `q37-remaining-source-map/SOURCE_MAP.json`
 and an M runtime reference, explicitly distinguishing that reference from
 the worker runtime. Those materials are not present in this checkout or the
 registered runtime directory in this session. Recursive file enumeration used
 hidden and ignored files as well. The checkout has no `.review-material`.
 The previous owner-handoff references documented in REPAIR36/37 are likewise
 absent from the enumerated runtime files.
 Direct reads establish:
 | Available input | SHA256 / result |
 | --- | --- |
 | checkout autoload/simulation_runtime.gd | d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39 |
 | relocated R17 product autoload/simulation_runtime.gd | 7f01b2dcdf28bc965c7588173c2dc70054633faf7204b1ac38ba0f4369331b47 |
 | tools/run_all_tests.py in both locations | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 |
 | tools/run_p13_reference_tests.py in both locations | missing |
 The matching runner file is available; it is not itself a missing dependency.
 Neither available runtime is established here as the frozen M c0ea009 source.
 The phase facts in the direction do not supply the missing function bodies,
 exact source mapping or UID helper contract. Substituting the historical R17
 product or the worker runtime would not meet exact-version grounding.
 Required to resume the same full batch: restore the locally readable,
 hash-bound M source map and its referenced source bodies (including runtime,
 facility and defense dependencies), and the Q UID helper reference used by
 REPAIR36/37. Restore the q36-writer-contract INDEX and its referenced typed
 materials for the existing adapter-control dependency. These are context
 requirements, not requests for a new policy, acceptance waiver or native run.
 ## Work and validation actually performed
 Read-only file discovery, relevant existing status/probe/wrapper inspection,
 local input inspection and SHA256 computation were performed. Only this status,
 REPAIR39_STATIC_CHECKS.json and the REPAIR38 supersession notice were written.
 No Python or GDScript was modified, so no py_compile, AST or probe_guard check
 was run. No controls, engine, Git, Runner, native execution, other agent,
 integration or /tmp operation was performed.
 r35 and r36 remain FAILED; Q37 remains a successful local diagnostic only.
 M c0ea009, formal 16/88, original 30/88, P04 credit 0, the 15+EV membership
 and thresholds, seven domains, six D05 decisions, A01 and allowed_paths remain
 unchanged. No original-unit completion is asserted.
 After the complete source batch, Root's order remains: pure controls;
 check-only S1–S5 plan; one heavy lease for fresh S1–S5 with capacity/PID checks
 and verified restore manifest; fresh collect; full184/329 once on final Q;
 index; --verify-only; independent review; normal prepare/final and Root join.
 This blocked attempt does not authorize starting that sequence.
@@ -0,0 +1,118 @@
 {
  "task_id": "P04-01",
  "repair": 40,
  "scope": "static only; no execution of probes, wrappers, adapters, controls, engine or Runner",
  "python": [
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s1/run_s1_native.py",
      "sha256": "bb7afc6cabc4f515318c30adcce5ab30a8932a893d1d358b8c05ff4750f4688f",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s2/run_s2a_native.py",
      "sha256": "101431b3a84eeb9aaf8d6a1171a4ebdbba884ffb10fee32a709f04a28b8a1547",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s2b/run_s2b_native.py",
      "sha256": "13398072583f9be02a2db3182298f572d77782ab39da8123c503ae8b951c9851",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py",
      "sha256": "118843aa5bc69548634f958cb31f359777577239b54351e59df367f7d0a5e409",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
      "sha256": "cb43895ee8ee5b22e81aca633dbe9621000f14aaa6999d4e0b77ca8eb0b5602f",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
      "sha256": "9cfd1b7a4db638c65c0a66a4350b8acae5237d3aee568e72f8fe9fd3c451d2ad",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_power_adapter.py",
      "sha256": "307438660ec5ffbbb24e7a12a87374ddf3b0d0db7d0c0fd06e4841622e677525",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_order_adapter.py",
      "sha256": "abe02702027946778717aa0139b99d6986d3d03605c1afcd38763c65424b3c01",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_order_adapter_controls.py",
      "sha256": "58a13df13f01c5d46268c68a7e969cc38608f97f9990f79b1b77d56b1712736a",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py",
      "sha256": "2155e697a08bc5f4c38f320a08aedb4ded1fb6c5fcb046482312e1819829da98",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/collect_p04_native.py",
      "sha256": "662387af72d2bd7681b81ffff7ec2e54a0019c50e981f86c7cfcf1ed61440e04",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/full_suite_verifier.py",
      "sha256": "df3768b7755d603fc079e899da8f06ae4ebb529ae531824a30add0f4d6773a6e",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/build_p04_index.py",
      "sha256": "d9be9e773d84bf30f086cc25c157c089025896279e30c8db2eb2995d6616715c",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
      "sha256": "5ec725ad77313287f4f86ab30332012e2092caccafde2d91594ddd2013d8f418",
      "AST": "passed",
      "py_compile": "passed"
    },
    {
      "path": "tools/check_p04_order_evidence.py",
      "sha256": "8f288c127217a9586ddaeba9b97d21351ee4b3dfc6c199632f66e4cdc0554042",
      "AST": "passed",
      "py_compile": "passed"
    }
  ],
  "gdscript": {
    "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/p04_s5_power_probe.gd",
    "sha256": "496dc6a9c828ae355fc129c4886ec83c6c6dcc9a9cd5e484b42060517059b1de",
    "probe_guard_regexes": [
      "\\bvar\\s+\\w+\\s*=",
      "\\bfor\\s+\\w+\\s+in\\b",
      "\\.(?:patience_remaining|elapsed_minutes|power_available|capacity|hold_until)\\s*=(?!=)"
    ],
    "result": "passed",
    "case_table_static_dispatch": "passed"
  },
  "not_run": [
    "pure controls",
    "Godot parse/native",
    "S1-S5 check-only plans",
    "fresh collection",
    "full suite",
    "index/verify-only",
    "independent review"
  ],
  "formal_acceptance": false
 }
@@ -0,0 +1,173 @@
 # REPAIR40 status
 Step 0: context index SHA-256 verified: 6f0ee990b95a5a897511425cd86ae57ba0364c5b326afdeb9f556fabfea6915c.
 | Absolute path | Expected SHA-256 | Observed SHA-256 |
 | --- | --- | --- |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_ABSOLUTE_CONTEXT_INDEX.json | 6f0ee990b95a5a897511425cd86ae57ba0364c5b326afdeb9f556fabfea6915c | 6f0ee990b95a5a897511425cd86ae57ba0364c5b326afdeb9f556fabfea6915c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_NEXT_P04_PLAN.json | 217d9bf4ef593fb95a5e726fee0e4497863a0b06663d27ba20e742d81bb9c049 | 217d9bf4ef593fb95a5e726fee0e4497863a0b06663d27ba20e742d81bb9c049 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR30_DIRECT_CHECKER_PLAN.json | 77801cc6db2a4deb9f76118a746b32eb5e629b2d6980850b8813a12b45016806 | 77801cc6db2a4deb9f76118a746b32eb5e629b2d6980850b8813a12b45016806 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR30_RUN_DECISION.json | be7be3bfaa5a5ab412db8aecd1d951c213894e485b7869fcc12ab1c75b037c7f | be7be3bfaa5a5ab412db8aecd1d951c213894e485b7869fcc12ab1c75b037c7f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR31_CONCRETE_PLAN.json | 857e1acaed2093de56afdd851e69b3129bf9edce72b5da3cdd160ce4b7bfc18a | 857e1acaed2093de56afdd851e69b3129bf9edce72b5da3cdd160ce4b7bfc18a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR32_CONCRETE_PLAN.json | 5b69f850f835bd7af37e9c728c484c236c28efb0bd32113bb53bcbaf7d252c0a | 5b69f850f835bd7af37e9c728c484c236c28efb0bd32113bb53bcbaf7d252c0a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/CURRENT_ROOT_P04_RESUME_FACTS.json | c826726368844a823c54c1df1cdaff43fde5a94a17e638bfc60d8fb2559f8d85 | c826726368844a823c54c1df1cdaff43fde5a94a17e638bfc60d8fb2559f8d85 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/D05_ACTUAL_HUMAN_APPROVAL.json | cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96 | cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_FRESH_Q_INPUT_APPROACH_AFTER34.json | 7a7b91cbf04bb84cdef8e7a99ca2140a9eac2ac6a385570b4f0aa0d474e7da92 | 7a7b91cbf04bb84cdef8e7a99ca2140a9eac2ac6a385570b4f0aa0d474e7da92 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_P04_PRESERVED_TO_CURRENT_SOURCE_AUDIT.json | 6bb86959b06acb62d5cd3c5fd00bb6802a80b66184e69abca3f75c46ddeb7a12 | 6bb86959b06acb62d5cd3c5fd00bb6802a80b66184e69abca3f75c46ddeb7a12 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_PLAN_VERSION_NOTES.json | b4336f900a87f9bf0daa1e86728c3a913aed7c09425569e104cc01290be1c62f | b4336f900a87f9bf0daa1e86728c3a913aed7c09425569e104cc01290be1c62f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/INDEX.json | b2ad602b7bd22dbc4778b60b4a015b1d2f8f06b71278959fb52910f2ee1af57a | b2ad602b7bd22dbc4778b60b4a015b1d2f8f06b71278959fb52910f2ee1af57a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_CHECK_ONLY.json | aab7dcbfcc934f3bda7d937feb4e7638109ddf645da6ebd57f6190588b55287c | aab7dcbfcc934f3bda7d937feb4e7638109ddf645da6ebd57f6190588b55287c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_GIT.json | e63b1b27244cd042f522a63b4392dea8c7211ce5ca5a927e91856115dfaa9f56 | e63b1b27244cd042f522a63b4392dea8c7211ce5ca5a927e91856115dfaa9f56 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_dirty.log | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_untracked.log | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-main.log | 006b9e83c3e106bada560371dda1fb9b4326e3f31fa48fa0c46e7d4903a91e55 | 006b9e83c3e106bada560371dda1fb9b4326e3f31fa48fa0c46e7d4903a91e55 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-submission.log | 6fefa0256b2dbc1596043fbff65fbaf87279baaa770a04d65a5fe70a6476671d | 6fefa0256b2dbc1596043fbff65fbaf87279baaa770a04d65a5fe70a6476671d |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-tree.log | 7fb7a1e4f00f201b7008b6d72957b3d4db450be156a1174b26a22c36d48b5e8f | 7fb7a1e4f00f201b7008b6d72957b3d4db450be156a1174b26a22c36d48b5e8f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_RESOURCE_ADMISSION.json | 18ef80f33f36cdd6ab664c862a9ae651a649a532bd32c4c35a81640cb4f078a0 | 18ef80f33f36cdd6ab664c862a9ae651a649a532bd32c4c35a81640cb4f078a0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_STAGE.json | f143045846cf06d79b81a0e52035300251fa576cde9a2d5eeda97d6610fd8591 | f143045846cf06d79b81a0e52035300251fa576cde9a2d5eeda97d6610fd8591 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_check-only.log | 4418f4b6bbe3d88cbf7f0b988084e05b5f0f52c15fe0f466ba82e584408427ce | 4418f4b6bbe3d88cbf7f0b988084e05b5f0f52c15fe0f466ba82e584408427ce |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_pure.log | f77640e0629497389baefc6424cf164d164fb96bbbd48cee6c4d83ed96c253c1 | f77640e0629497389baefc6424cf164d164fb96bbbd48cee6c4d83ed96c253c1 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_REPAIR30_EXECUTION_ORDER_FACTS.json | e18b031e790622929ec2c80ab9a6d5c3d883a364d625b58372fe33fd280ca93f | e18b031e790622929ec2c80ab9a6d5c3d883a364d625b58372fe33fd280ca93f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_REPAIR31_ACTUAL_FACTS.json | 0ea352b442e88263b899d28d58422afed39855393233c35ed3a962fcab67e136 | 0ea352b442e88263b899d28d58422afed39855393233c35ed3a962fcab67e136 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/INDEX.json | ff43786d898ef3475c267cf22758074a001b3d46dbc2bea52782a3782dd5571e | ff43786d898ef3475c267cf22758074a001b3d46dbc2bea52782a3782dd5571e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/autoload/simulation_runtime.gd | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scenes/main/main.gd | 92677e4ac57ed8d418a4a716bf0874cbbaea79cff893e5163c82ad1f75e7140a | 92677e4ac57ed8d418a4a716bf0874cbbaea79cff893e5163c82ad1f75e7140a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scenes/main/world_preview.gd | 4bc49a19a38b9c3b4d6bfc243ddf46f1f25469a8273adb5e812911ef9424a1f2 | 4bc49a19a38b9c3b4d6bfc243ddf46f1f25469a8273adb5e812911ef9424a1f2 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/core/save_service.gd | f4c270632225dd046bbff92f9472761d64d63740e93f274828c92dcf912db6a9 | f4c270632225dd046bbff92f9472761d64d63740e93f274828c92dcf912db6a9 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/relationship/relationship_service.gd | d2f6304aa643b98914c5d65bf3eb673ca8cc427476187f43e76b4b941410b1d3 | d2f6304aa643b98914c5d65bf3eb673ca8cc427476187f43e76b4b941410b1d3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/ui/guest_observation_panel.gd | f5de1004fce5445bbfd3ee8d6ec37b325e7a9813d47c19beaeeeb411f27a50a5 | f5de1004fce5445bbfd3ee8d6ec37b325e7a9813d47c19beaeeeb411f27a50a5 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/ui/room_presentation.gd | 2eda851534777575298ea005e2e6d0ee90785a81357d5b9c34cfb95f615a8181 | 2eda851534777575298ea005e2e6d0ee90785a81357d5b9c34cfb95f615a8181 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/tests/business/test_required_kitchen.gd | 3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f | 3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/tools/regression/suite-policy.json | 7eb085d7e7a383785b4faedb503d0f6002bcad431e3188785aef901ce123769f | 7eb085d7e7a383785b4faedb503d0f6002bcad431e3188785aef901ce123769f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/INDEX.json | a7a3299c4d70ea033368a707882856fd5c7f7f4d5a0d5f86bf2fb9b2fe2e53d1 | a7a3299c4d70ea033368a707882856fd5c7f7f4d5a0d5f86bf2fb9b2fe2e53d1 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/controller-input.json | 24d10b3a91553df54b3b2fd4b1a57dce683cc72a55576e0c73c9e142b335ad40 | 24d10b3a91553df54b3b2fd4b1a57dce683cc72a55576e0c73c9e142b335ad40 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/controller.py | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/003-receipt.json | 4ce015c160859612c89e215517826aa1da3582534d27c4688af6a44e37f1b641 | 4ce015c160859612c89e215517826aa1da3582534d27c4688af6a44e37f1b641 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/parse-receipt.json | 1ad82022669a3f197f53ed1e23f23aadc927220f0ba1f857c41f80721bafa443 | 1ad82022669a3f197f53ed1e23f23aadc927220f0ba1f857c41f80721bafa443 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/runner-ended.json | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/runner-input.json | 2a76506e923a3a95288ce826b81ed9eab49d4ecee613a2c82ae35e970c68f961 | 2a76506e923a3a95288ce826b81ed9eab49d4ecee613a2c82ae35e970c68f961 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/INDEX.json | 942181cc3efc8207e728233f89626b66eb0c34b582e5c9b0fae294dcf1600c00 | 942181cc3efc8207e728233f89626b66eb0c34b582e5c9b0fae294dcf1600c00 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_EXACT_NORMAL_CANDIDATE_72A50A4A.json | 5614c9b1c9eb222dbbcfd9ae1c3b438cc4129c779deba2841d660a8c96b6cfe6 | 5614c9b1c9eb222dbbcfd9ae1c3b438cc4129c779deba2841d660a8c96b6cfe6 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_NORMAL_FINAL_72A50A4A.json | b41069126e029c30ab644a62a54cb45ca2e0e504add150020500acba4e249469 | b41069126e029c30ab644a62a54cb45ca2e0e504add150020500acba4e249469 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_NORMAL_INTEGRATION_72A50A4A.json | 2f47d39d3f05b3735f0fb3e01adaabf1c66c6a784d60af247063bd90e5ec0d5c | 2f47d39d3f05b3735f0fb3e01adaabf1c66c6a784d60af247063bd90e5ec0d5c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/INDEX.json | a23f17336a5e701100c224ebcb69f37a8de95aca82658675b692d503798a5232 | a23f17336a5e701100c224ebcb69f37a8de95aca82658675b692d503798a5232 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/OWNER_CLI_REFERENCE.json | 1e360ad1d8057ef649fabe97ac3e98263d2f8c1c4d976d8b6e0a907a49e9158e | 1e360ad1d8057ef649fabe97ac3e98263d2f8c1c4d976d8b6e0a907a49e9158e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/ROOT_SOURCE_REVIEW_REJECTION_20D0AE5.json | d028dd3862ae663586d49b5843e88d9da82ad7985fa082551438e4a81311073e | d028dd3862ae663586d49b5843e88d9da82ad7985fa082551438e4a81311073e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/SOURCE_REWORK_ADAPTER_LOCAL_CHECKS.json | 580f2f19d680a23ee4efe6beab68a1aad69e067bc551f623cc7531c6915d7a78 | 580f2f19d680a23ee4efe6beab68a1aad69e067bc551f623cc7531c6915d7a78 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/SOURCE_REWORK_CURRENT_REFERENCE_INDEX.json | b0ecce7ae523527fdc6272e9784eba6109d67c0cd3745a8aaab64d913ca8adbd | b0ecce7ae523527fdc6272e9784eba6109d67c0cd3745a8aaab64d913ca8adbd |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/core.py.reference | 4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856 | 4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/current-owner-cli.py.reference | 0cfd9634e4a59755b89d2927d60b6092368529f2ca7188d949da7f88080359aa | 0cfd9634e4a59755b89d2927d60b6092368529f2ca7188d949da7f88080359aa |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/owner-cli.py.reference | 52c327e624334b51612ea3cb1653aeff4a7a192502d1ba9407ce874af1d92410 | 52c327e624334b51612ea3cb1653aeff4a7a192502d1ba9407ce874af1d92410 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/owner-source-rework-20d0ae5.py.reference | 9ecf7bebf666a67a8f13357d66e9c1d8d76940ef8212f0055537b728c75e0cbc | 9ecf7bebf666a67a8f13357d66e9c1d8d76940ef8212f0055537b728c75e0cbc |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_EXECUTION.json | 6e48da89ce852dacdbff2d0f93a8903583dccd9e05f5e34bb68be0d63f540332 | 6e48da89ce852dacdbff2d0f93a8903583dccd9e05f5e34bb68be0d63f540332 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_IMPORT_COMBINED.log | cd39b1711f530454b0ec263ab2d076d714f674d5a36e26f9ef16788799b76764 | cd39b1711f530454b0ec263ab2d076d714f674d5a36e26f9ef16788799b76764 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_OUTER_OWNED_FINALLY.json | ee14a347724aedb2ae8afecc0775250b1e014c17e726210e2535d6108e57edc0 | ee14a347724aedb2ae8afecc0775250b1e014c17e726210e2535d6108e57edc0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/INDEX.json | 0e4334442ce89b0388e10a4b62b5e00acbce2013e3ef1967508a3c48d72dc9c1 | 0e4334442ce89b0388e10a4b62b5e00acbce2013e3ef1967508a3c48d72dc9c1 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/P13_CONTROLLER_REFERENCE_INDEX.json | 48434362232d6b58cca720868c6d87f2af48675f365855b8a4a97eb5071dfee3 | 48434362232d6b58cca720868c6d87f2af48675f365855b8a4a97eb5071dfee3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/P13_FULL_CONTROLLER_PATTERN.py.reference | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/ROOT_Q35_DIAGNOSTIC_IMPORT_SOURCE_DELTA.json | 1994e59a498f3dbca1fd589b16b5bc6305d2786c0fa730ac489590469f08b05d | 1994e59a498f3dbca1fd589b16b5bc6305d2786c0fa730ac489590469f08b05d |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/ROOT_Q35_FAILED_IMPORT_UID_CLASSIFICATION.json | bc0a863e52db4f98b4b2ee4bc0b513c73f841726789a2ca99521c1b8618dc6c3 | bc0a863e52db4f98b4b2ee4bc0b513c73f841726789a2ca99521c1b8618dc6c3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_p13_reference_tests.py.reference | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/INDEX.json | cef78b200268e27a6e73ccd926ac95d0b2b6e30b9338a8412da9ab48b68ca82a | cef78b200268e27a6e73ccd926ac95d0b2b6e30b9338a8412da9ab48b68ca82a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/SAFETY_REAUDIT.json | 8edf11fe7893ced7c6450feb1ee3db45ab0a145db572254d2102ee70e26ac26e | 8edf11fe7893ced7c6450feb1ee3db45ab0a145db572254d2102ee70e26ac26e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/TYPED_AUDIT.json | e1800e1679b570ecdd9d7537e87e0730c089fa3b4c6197d3e279e60959aad016 | e1800e1679b570ecdd9d7537e87e0730c089fa3b4c6197d3e279e60959aad016 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/command_queue.gd.reference | 09b22e6212fa3ce1bf08f5d6b52224a2d3362b3bc63f03a8c98e89af1c6f5895 | 09b22e6212fa3ce1bf08f5d6b52224a2d3362b3bc63f03a8c98e89af1c6f5895 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/facility_instance.gd.reference | 0c6aa493f3299611e05dd26aa429dda8cf7b5c479e4d09632036fb862f79a324 | 0c6aa493f3299611e05dd26aa429dda8cf7b5c479e4d09632036fb862f79a324 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-before.json | af7b1f0099b37298b1bf0d683f98c0ec84fae96b74f16c33af310cab2efa955b | af7b1f0099b37298b1bf0d683f98c0ec84fae96b74f16c33af310cab2efa955b |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-before.var | 61f749b6a10ddc8e70f6e5b1d6378fcf1c0ae5127161a10c9704d76bcf64813a | 61f749b6a10ddc8e70f6e5b1d6378fcf1c0ae5127161a10c9704d76bcf64813a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-resource-replay.json | 56a7fc36e0972eb64abb19189f1664b87d6a058511bbec0ef7e1497abd2c511e | 56a7fc36e0972eb64abb19189f1664b87d6a058511bbec0ef7e1497abd2c511e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-resource-replay.var | 92aa8694939e2b8b678b556227cce1cf4cda661b6fb1f5a478ac37deba1a072e | 92aa8694939e2b8b678b556227cce1cf4cda661b6fb1f5a478ac37deba1a072e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-before.json | 0f821748eb7f12a8ac196c61bca34a7fe55af6adb3ab43d1acf8748fd2be8652 | 0f821748eb7f12a8ac196c61bca34a7fe55af6adb3ab43d1acf8748fd2be8652 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-before.var | 06b03c6a50a8832a9cab621b908332199e9ab4d10d4e547111a8860c70535bd2 | 06b03c6a50a8832a9cab621b908332199e9ab4d10d4e547111a8860c70535bd2 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-resource-replay.json | 49fb4df6bdaadd9c5146f716a108902c533b137427e2f90f86116393f12c6ea0 | 49fb4df6bdaadd9c5146f716a108902c533b137427e2f90f86116393f12c6ea0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-resource-replay.var | 464b589fa206427a1becd6dd484fc9be05da1b619ffb26ca559dde83e7b09309 | 464b589fa206427a1becd6dd484fc9be05da1b619ffb26ca559dde83e7b09309 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/INDEX.json | a8f44235dc8a74e67c3463698619611131224de5048868259a729791614cf9a9 | a8f44235dc8a74e67c3463698619611131224de5048868259a729791614cf9a9 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q36_REJECTED_ENQUEUE_STATIC_PATH.json | e8adc79d506491973289084c5ade7c3affe9e3e517896ef191f01cad6dcaed92 | e8adc79d506491973289084c5ade7c3affe9e3e517896ef191f01cad6dcaed92 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_DIAGNOSTIC_SAFETY_REAUDIT.json | 4d4b059576b3b6d28f71d054eeaf367ead54a74bb499d64bf450d625a137cfa5 | 4d4b059576b3b6d28f71d054eeaf367ead54a74bb499d64bf450d625a137cfa5 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_POWER_ADAPTER_RESULT.json | cce1132503457675b50d566ad1afc3f67e902a28135550a8e72b647dacd7d70d | cce1132503457675b50d566ad1afc3f67e902a28135550a8e72b647dacd7d70d |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_PREFLIGHT.json | 3554d8f246c0d117c774ecfabcd9eb48eed311155e3a5a3b15413f3e663b6fd7 | 3554d8f246c0d117c774ecfabcd9eb48eed311155e3a5a3b15413f3e663b6fd7 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_R37_ADAPTER_CONTROLS.json | f62fc981f3935bd969ea5c6fafa5d44a111b1264ad0d04fdb08b07fe4f27429e | f62fc981f3935bd969ea5c6fafa5d44a111b1264ad0d04fdb08b07fe4f27429e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/ROOT_MANA_ADOPTION_CURRENT_APPLICABILITY_C0.json | 57ba42e1c92db194a5ddcb8dc80c8e0249bbab817e35a3ae00bd12b0f4c57731 | 57ba42e1c92db194a5ddcb8dc80c8e0249bbab817e35a3ae00bd12b0f4c57731 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/ROOT_Q37_FULL_ROSTER_PREPARE_ONLY.json | c547dcff95184d04bf7089e7c9f6a2cda800a91359c9ec318f48ad4ecf2887c0 | c547dcff95184d04bf7089e7c9f6a2cda800a91359c9ec318f48ad4ecf2887c0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/SOURCE_MAP.json | d1333fc891342be5cc16795973fa71e7910a8c8af06ef4a3e51662537fed63c3 | d1333fc891342be5cc16795973fa71e7910a8c8af06ef4a3e51662537fed63c3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/core/simulation_kernel.gd | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/economy/economy_service.gd | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/facility/facility_service.gd | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/guest/guest_service.gd | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/operations/operations_coordinator.gd | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_autonomy.gd | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_cycle.gd | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tools/run_all_tests.py | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/core/simulation_kernel.gd | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/autoload/simulation_runtime.gd | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/facility/facility_service.gd | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/economy/economy_service.gd | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/operations/operations_coordinator.gd | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/guest/guest_service.gd | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_autonomy.gd | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_cycle.gd | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_p13_reference_tests.py.reference | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c |
 ## Source batch and helper choice
 REPAIR38's helper restriction and REPAIR39's missing-context blocker text are
 superseded for this attempt: the exact absolute context was readable and every
 hash matched. The old status files and their stops are retained unchanged.
 A: one CASE_TABLE dispatches all six S5 cases with reserved-ID counts and ordered
 labels. _queue generalizes only its count predicate. _reader loads each boundary,
 dispatches its stop assertion, then replays table labels. A/B keep recovery,
 duplicate_guard and resource replay. C–F share private preparation/advancement
 helpers using public commands, including the operations-enabled paid-midnight
 path and the automatic-breach source fixture. No forced guest transition is used.
 New-case receipt buffers are restored after formal load; _fresh/_cmd/_capture,
 write/read, phase observation and resource replay implementations stay unchanged.
 B: wrapper cases/labels/slots derive from the table. New order adapter reuses
 Raw, typed parsing, staff_check, duplicate_check and series.variant by file spec;
 its output records dependency SHA values. The typed mutation control program
 uses explicit absent BUILD scratch and requires actual Root raw for positives.
 The existing wrapper/UID controls do not read CASES and were left unchanged.
 C: five wrappers select fresh Q through CLI arguments and shared S5 helpers.
 UID policies preserve the original execute_phase code object. Historical mode
 is read-only. FreshSeries verifies actual Root receipt pins, complete source,
 UID/engine/PID/cleanup/formal material and recomputes existing semantic adapters.
 Historical RUNS/NATIVE_PINS remain unchanged. Fresh collection is exclusive.
 D: full_suite_verifier imports actual Q run_all_tests.py, derives the roster and
 parse paths, rejoins raw markers/PIDs/logs/cleanup/source/settings/policy/engine
 and UID seals, and binds required-kitchen separately. No totals imply original
 acceptance. Its condition entries remain boundary-pending; checker uses fresh
 boundary derivations. Normal C provenance is not an input to this verifier.
 E: checker/index consume all FRESH_RUNS, enforce S5 approved-order gates and full
 suite verification, and retain historical collection separately without union.
 The index uses the fresh tested Q and fresh runner material descriptors.
 The series fixture retains its existing negatives and adds the fresh roster.
 F: this status, REPAIR40_STATIC_CHECKS.json, S5_ROOT_RUN.md and the narrowly
 superseded PENDING.md describe the actual batch and Root's unchanged order.
 ## Verification and remaining evidence
 Only static Python AST/py_compile and existing GDScript probe_guard regex checks
 are permitted here. See REPAIR40_STATIC_CHECKS.json for checks actually executed.
 No pure controls, engine, Git, Runner, native, integration or other agent was run.
 The first shell here-document attempt was rejected before execution because the
 shell could not create its temporary file; subsequent reads used python -c.
 No /tmp file was created or used.
 Native behavior, mutation controls, full suite, index verification and independent
 review remain unexecuted. No required condition receives credit from this source
 submission. In particular, absent fresh shift_completion/same_minute_replay/
 paused_midnight evidence remains a failing gate rather than historical reuse.
 S5 patience_release and paused_midnight remain pending unless actually observed.
 A failed alignment, restore or typed assertion must remain a native failure.
 Frozen: M c0ea009; formal 16/88; original 30/88; P04 credit 0; counters 40/unlimited;
 seven domains; six D05 decisions and A01; REQUIRED membership/thresholds; product,
 Clock, API, values and tests; allowed_paths; permissions, billing and policy.
 r35/r36 are FAILED; Q37 is only local diagnostic evidence. No old proof relabelled.
@@ -0,0 +1,259 @@
 [
  {
    "name": "checker_negative_fixtures",
    "exit_code": 0,
    "result": {
      "scope": "Synthetic checker checks only; no engine evidence or formal acceptance",
      "py_compile": true,
      "results": [
        {
          "fixture": "synthetic_scalar_only_rejected",
          "exit_code": 1,
          "result": {
            "error": "native bundle required; self-reported scalar evidence is insufficient"
          }
        },
        {
          "fixture": "forged_registered_pin",
          "exit_code": 1,
          "result": {
            "error": "registered pin declaration"
          }
        },
        {
          "fixture": "false_delta",
          "exit_code": 1,
          "result": {
            "error": "git diff/applicability_delta mismatch"
          }
        },
        {
          "fixture": "wrong_reach_anchor",
          "exit_code": 1,
          "result": {
            "error": "unknown reachability anchor"
          }
        },
        {
          "fixture": "missing_index",
          "exit_code": 1,
          "result": {
            "error": "missing/outside file: index.json"
          }
        },
        {
          "fixture": "duplicate_key",
          "exit_code": 1,
          "result": {
            "error": "duplicate JSON key: schema_version"
          }
        },
        {
          "fixture": "symlink",
          "exit_code": 1,
          "result": {
            "error": "symlink: stdout.json"
          }
        },
        {
          "fixture": "hash_mismatch",
          "exit_code": 1,
          "result": {
            "error": "artifact hash: stdout"
          }
        },
        {
          "fixture": "stale_pin",
          "exit_code": 1,
          "result": {
            "error": "tested game differs from Git: autoload/simulation_runtime.gd"
          }
        },
        {
          "fixture": "unexecuted_receipt",
          "exit_code": 1,
          "result": {
            "error": "unexecuted/incomplete receipt"
          }
        },
        {
          "fixture": "pending_authority",
          "exit_code": 1,
          "result": {
            "error": "pending/missing authority"
          }
        },
        {
          "fixture": "missing_condition",
          "exit_code": 1,
          "result": {
            "error": "mandatory conditions missing: paused_midnight; unknown: "
          }
        },
        {
          "fixture": "unsupported_reach_false",
          "exit_code": 1,
          "result": {
            "error": "unsupported reach=false: transport"
          }
        },
        {
          "fixture": "owner_hash_mismatch",
          "exit_code": 1,
          "result": {
            "error": "owner approval hash mismatch: D05-P04-SHIFT-1800"
          }
        }
      ]
    }
  },
  {
    "name": "checker_join_fixtures",
    "exit_code": 0,
    "result": {
      "scope": "semantic controls only; no new native execution",
      "results": [
        {
          "case": "B1_cannot_supply_power_stop",
          "result": "rejected",
          "error": "power_stop requires S4; B1 is dependency/closure diagnostic only"
        },
        {
          "case": "B1_real_despawn_positive",
          "result": "accepted"
        },
        {
          "case": "dependency_reason_relabelled_as_NO_POWER",
          "result": "rejected",
          "error": "B1 power Runtime facility/service join"
        },
        {
          "case": "B1_missing_at_closure",
          "result": "rejected",
          "error": "B1 real B before/at closure"
        },
        {
          "case": "B1_synthetic_later_guest",
          "result": "rejected",
          "error": "B1 normal despawn after departure"
        },
        {
          "case": "B1_wrong_release_minute",
          "result": "rejected",
          "error": "B1 immutable reservation join"
        },
        {
          "case": "B1_changed_wallet",
          "result": "rejected",
          "error": "B1 B wallet/no economy charge"
        },
        {
          "case": "B1_missing_departure_history",
          "result": "rejected",
          "error": "B1 persisted departure join"
        },
        {
          "case": "R2_real_first_1080_positive",
          "result": "accepted"
        },
        {
          "case": "R2_paid_midnight_substitution",
          "result": "rejected",
          "error": "shift raw service join"
        },
        {
          "case": "R2_wrong_transaction",
          "result": "rejected",
          "error": "native receipt transaction"
        },
        {
          "case": "R2_missing_DAY2",
          "result": "rejected",
          "error": "shift DAY2 before/after handover"
        },
        {
          "case": "R2_after_staff_still_present",
          "result": "rejected",
          "error": "shift DAY2 before/after handover"
        },
        {
          "case": "R2_next_extra_receipt",
          "result": "rejected",
          "error": "native duplicate/empty receipt"
        },
        {
          "case": "R2_dynamic_PID_and_transaction_positive",
          "result": "accepted"
        },
        {
          "case": "R2_wrong_PID_join",
          "result": "rejected",
          "error": "native PID chain"
        },
        {
          "case": "S1_pre_travel_mismatch",
          "result": "rejected",
          "error": "S1 pre-travel staff cell/task/raw reservation join"
        },
        {
          "case": "S1_no_actual_outage",
          "result": "rejected",
          "error": "S1 actual reserve exhaustion/tick"
        },
        {
          "case": "historical_receipt_checked_against_current_wrapper",
          "result": "rejected",
          "error": "S4 historical pin in fresh receipt"
        },
        {
          "case": "current_wrapper_used_as_historical_receipt",
          "result": "rejected",
          "error": "S4 historical receipt wrapper pin"
        },
        {
          "case": "fresh_receipt_carrying_historical_pin",
          "result": "rejected",
          "error": "S4 historical pin in fresh receipt"
        },
        {
          "case": "tampered_historical_pinned_copy",
          "result": "rejected",
          "error": "S4 tampered historical wrapper pin"
        },
        {
          "case": "S4_real_NO_POWER_positive",
          "result": "accepted"
        },
        {
          "case": "S4_related_facility_operating_false",
          "result": "rejected",
          "error": "S4 related facility must remain operating/powered"
        },
        {
          "case": "S4_kitchen_unpowered",
          "result": "rejected",
          "error": "S4 related facility must remain operating/powered"
        },
        {
          "case": "S4_closure_confound",
          "result": "rejected",
          "error": "S4 closure/damage/shift confound"
        },
        {
          "case": "S4_no_actual_outage",
          "result": "rejected",
          "error": "S4 actual NO_POWER path, not relabelled dependency"
        },
        {
          "case": "S4_wrong_transaction_join",
          "result": "rejected",
          "error": "S4 transaction/service join"
        },
        {
          "case": "S4_dynamic_service_and_sale_positive",
          "result": "accepted"
        }
      ]
    }
  }
 ]
@@ -0,0 +1,65 @@
 {
  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
  "sources": {
    "scripts/core/command_queue.gd": {
      "sha256": "09b22e6212fa3ce1bf08f5d6b52224a2d3362b3bc63f03a8c98e89af1c6f5895",
      "functions": {
        "enqueue": {
          "line": 15,
          "body_sha256": "56a1fe8a5dfd00ad81f9844bc8e6f4a6ce9009dadbc9cd2b7ff07d14bff1938c",
          "full_body": "func enqueue(command: SimulationCommand) -> CommandResult:\n\tif command == null:\n\t\treturn CommandResult.failed(\n\t\t\tCommandResult.Code.INVALID_COMMAND,\n\t\t\t0,\n\t\t\t\"Command is null.\"\n\t\t)\n\n\tvar validation_error := command.validation_error()\n\tif not validation_error.is_empty():\n\t\treturn CommandResult.failed(\n\t\t\tCommandResult.Code.INVALID_COMMAND,\n\t\t\tcommand.command_id,\n\t\t\tvalidation_error\n\t\t)\n\n\tif _known_command_ids.has(command.command_id):\n\t\treturn CommandResult.failed(\n\t\t\tCommandResult.Code.DUPLICATE_COMMAND_ID,\n\t\t\tcommand.command_id,\n\t\t\t\"command_id has already been accepted.\",\n\t\t\t{\"original_command_id\": command.command_id}\n\t\t)\n\n\tif not command.idempotency_key.is_empty():\n\t\tvar key := command.idempotency_key\n\t\tif _idempotency_to_command_id.has(key):\n\t\t\tvar original_id: int = _idempotency_to_command_id[key]\n\t\t\tvar duplicate_details := {\n\t\t\t\t\"idempotency_key\": String(key),\n\t\t\t\t\"original_command_id\": original_id,\n\t\t\t\t\"processed\": _processed_results.has(original_id),\n\t\t\t}\n\t\t\tif _processed_results.has(original_id):\n\t\t\t\tvar prior: CommandResult = _processed_results[original_id]\n\t\t\t\tduplicate_details[\"original_result\"] = prior.to_dictionary()\n\t\t\treturn CommandResult.failed(\n\t\t\t\tCommandResult.Code.DUPLICATE_IDEMPOTENCY_KEY,\n\t\t\t\tcommand.command_id,\n\t\t\t\t\"idempotency_key has already been accepted.\",\n\t\t\t\tduplicate_details\n\t\t\t)\n\n\tvar queued_command := command.copy()\n\t_pending.append(queued_command)\n\t_known_command_ids[queued_command.command_id] = true\n\t_accepted_metadata[queued_command.command_id] = {\n\t\t\"command_id\": queued_command.command_id,\n\t\t\"idempotency_key\": String(queued_command.idempotency_key),\n\t}\n\tif not queued_command.idempotency_key.is_empty():\n\t\t_idempotency_to_command_id[queued_command.idempotency_key] = queued_command.command_id\n\t_pending.sort_custom(_comes_before)\n\treturn CommandResult.succeeded(queued_command.command_id)\n\n\n"
        },
        "execute_ready": {
          "line": 83,
          "body_sha256": "d8c534217e704cd892401904768a883c9a3ec2f3852ae7c0438f2eb854b4f7aa",
          "full_body": "func execute_ready(current_tick: int, executor: Callable) -> Array[CommandResult]:\n\tvar results: Array[CommandResult] = []\n\tfor command in drain_ready(current_tick):\n\t\tvar accepted_command_id := command.command_id\n\t\tvar result: CommandResult\n\t\tif not executor.is_valid():\n\t\t\tresult = CommandResult.failed(\n\t\t\t\tCommandResult.Code.EXECUTOR_FAILED,\n\t\t\t\tcommand.command_id,\n\t\t\t\t\"Executor is not callable.\"\n\t\t\t)\n\t\telse:\n\t\t\tvar returned: Variant = executor.call(command)\n\t\t\tif returned is CommandResult:\n\t\t\t\tresult = returned\n\t\t\telif returned is bool and returned:\n\t\t\t\tresult = CommandResult.succeeded(command.command_id)\n\t\t\telse:\n\t\t\t\tresult = CommandResult.failed(\n\t\t\t\t\tCommandResult.Code.EXECUTOR_FAILED,\n\t\t\t\t\tcommand.command_id,\n\t\t\t\t\t\"Executor did not return a successful CommandResult.\"\n\t\t\t\t)\n\n\t\tvar completed_result := complete(accepted_command_id, result)\n\t\tresults.append(completed_result)\n\treturn results\n\n\n"
        },
        "complete": {
          "line": 112,
          "body_sha256": "4290ebfe68d9245b4e8ebb6d8a09ba6172f16bcacb6e4294299ad6dc06c56ed7",
          "full_body": "func complete(command_id: int, result: CommandResult) -> CommandResult:\n\tif not _in_flight.has(command_id):\n\t\treturn CommandResult.failed(\n\t\t\tCommandResult.Code.NOT_FOUND,\n\t\t\tcommand_id,\n\t\t\t\"Command is not in flight.\"\n\t\t)\n\tif result == null:\n\t\treturn CommandResult.failed(\n\t\t\tCommandResult.Code.INVALID_COMMAND,\n\t\t\tcommand_id,\n\t\t\t\"Result is null.\"\n\t\t)\n\n\tvar stored_result := result.copy()\n\tstored_result.command_id = command_id\n\t_processed_results[command_id] = stored_result\n\t_in_flight.erase(command_id)\n\treturn stored_result.copy()\n\n\n"
        },
        "get_accepted_command_metadata": {
          "line": 174,
          "body_sha256": "60841dbff80282e95460e8dfeaeb6ae37a0cc05f2c7654130e8b8c51729e5b39",
          "full_body": "func get_accepted_command_metadata() -> Array[Dictionary]:\n\tvar result: Array[Dictionary] = []\n\tvar command_ids: Array = _accepted_metadata.keys()\n\tcommand_ids.sort()\n\tfor command_id: Variant in command_ids:\n\t\tresult.append((_accepted_metadata[command_id] as Dictionary).duplicate(true))\n\treturn result\n\n\n"
        },
        "create_snapshot": {
          "line": 189,
          "body_sha256": "15737e59018ae93092c1aca3ce268d2bc354c28a8261d4ffada4aba63af3d241",
          "full_body": "func create_snapshot() -> Dictionary:\n\tvar pending_data: Array[Dictionary] = []\n\tfor command in _pending:\n\t\tpending_data.append(command.to_dictionary())\n\tvar in_flight_ids: Array = _in_flight.keys()\n\tin_flight_ids.sort()\n\tvar in_flight_data: Array[Dictionary] = []\n\tfor command_id: Variant in in_flight_ids:\n\t\tvar command: SimulationCommand = _in_flight[command_id]\n\t\tin_flight_data.append(command.to_dictionary())\n\tvar processed_ids: Array = _processed_results.keys()\n\tprocessed_ids.sort()\n\tvar processed_data: Array[Dictionary] = []\n\tfor command_id: Variant in processed_ids:\n\t\tvar result: CommandResult = _processed_results[command_id]\n\t\tprocessed_data.append(result.to_dictionary())\n\tvar idempotency_data := {}\n\tvar idempotency_keys: Array = _idempotency_to_command_id.keys()\n\tidempotency_keys.sort_custom(func(a: Variant, b: Variant) -> bool: return String(a) < String(b))\n\tfor key: Variant in idempotency_keys:\n\t\tidempotency_data[String(key)] = int(_idempotency_to_command_id[key])\n\treturn {\n\t\t\"version\": SNAPSHOT_VERSION,\n\t\t\"pending\": pending_data,\n\t\t\"in_flight\": in_flight_data,\n\t\t\"processed\": processed_data,\n\t\t\"idempotency\": idempotency_data,\n\t\t\"accepted\": get_accepted_command_metadata(),\n\t}\n\n\n"
        }
      }
    },
    "scripts/core/stable_id_generator.gd": {
      "sha256": "78e0dd691ba18d1f159d9d7abba5894d2e10d36885aa6dc5be02a27f9edd5013",
      "functions": {
        "next_id": {
          "line": 9,
          "body_sha256": "cf1cf036adab2eb36acab25a069b5dfc42e7aa281c491bd89ade6d91f6eb2c1d",
          "full_body": "func next_id(prefix: StringName) -> StringName:\n\tif not _is_valid_prefix(String(prefix)):\n\t\tpush_error(\"Stable ID prefix must be lowercase ASCII snake_case\")\n\t\treturn &\"\"\n\tvar next_value := int(_counters.get(prefix, 0)) + 1\n\tif next_value > MAX_COUNTER:\n\t\tpush_error(\"Stable ID counter exhausted for '%s'\" % prefix)\n\t\treturn &\"\"\n\t_counters[prefix] = next_value\n\treturn StringName(\"%s.%012d\" % [prefix, next_value])\n\n"
        },
        "create_snapshot": {
          "line": 23,
          "body_sha256": "cab243cf59d5d56ff03beb305070f83b66d7a55cce7f3f2f889c0d9a5303e76a",
          "full_body": "func create_snapshot() -> Dictionary:\n\tvar counters := {}\n\tvar prefixes: Array = _counters.keys()\n\tprefixes.sort()\n\tfor prefix: Variant in prefixes:\n\t\tcounters[String(prefix)] = int(_counters[prefix])\n\treturn {\n\t\t\"version\": SNAPSHOT_VERSION,\n\t\t\"counters\": counters,\n\t}\n\n"
        }
      }
    },
    "scripts/core/domain_event_stream.gd": {
      "sha256": "f9b57a4b4b53cf7d67132a159ea90378c633b4f19d8de28dbe7a33ebce8e3d79",
      "functions": {
        "publish_batch": {
          "line": 40,
          "body_sha256": "275be0d68c99217732ea3dc2821cf7dcec24a695035e455af7f716d901147167",
          "full_body": "func publish_batch(events: Array) -> bool:\n\tif events.size() > MAX_BATCH_SIZE:\n\t\treturn false\n\tvar committed: Array[SimulationDomainEvent] = []\n\tvar batch_ids: Dictionary = {}\n\tfor event_value: Variant in events:\n\t\tif not event_value is SimulationDomainEvent:\n\t\t\treturn false\n\t\tvar event: SimulationDomainEvent = event_value\n\t\tif event == null or not event.is_valid() \\\n\t\tor _published_ids.has(event.event_id) or batch_ids.has(event.event_id):\n\t\t\treturn false\n\t\tbatch_ids[event.event_id] = true\n\t\tcommitted.append(event.copy())\n\tif not committed.is_empty():\n\t\t_snapshot_ids_dirty = true\n\tfor event: SimulationDomainEvent in committed:\n\t\t_published_ids[event.event_id] = true\n\t\t_recent_events.append(event.copy())\n\t\tif _recent_events.size() > RECENT_EVENT_LIMIT:\n\t\t\t_recent_events.pop_front()\n\t\t_pending_deliveries.append(event.copy())\n\t_drain_deliveries()\n\treturn true\n\n\n"
        },
        "create_snapshot": {
          "line": 96,
          "body_sha256": "94fc2dd3ef1a953ba7d9b3d3728c0d158bf0f69935874f48722a3c6025447dbf",
          "full_body": "func create_snapshot() -> Dictionary:\n\tif _snapshot_ids_dirty:\n\t\t_snapshot_ids.clear()\n\t\tfor event_id: Variant in _published_ids:\n\t\t\t_snapshot_ids.append(String(event_id))\n\t\t_snapshot_ids.sort()\n\t\t_snapshot_ids_dirty = false\n\tvar saved_ids: Array[String] = _snapshot_ids.duplicate()\n\tvar saved_recent: Array[Dictionary] = []\n\tfor event in _recent_events:\n\t\tsaved_recent.append(event.to_dictionary())\n\treturn {\n\t\t\"version\": SNAPSHOT_VERSION,\n\t\t\"published_ids\": saved_ids,\n\t\t\"recent_events\": saved_recent,\n\t}\n\n"
        }
      }
    }
  }
 }
@@ -0,0 +1,463 @@
 {
  "repair": 45,
  "status": "ready",
  "scope": "Worker implementation ready for submission only; whole unit incomplete",
  "repair44_attempt": {
    "repair": 44,
    "status": "blocked",
    "scope": "Actual worker checks only; no native or formal acceptance",
    "blocker": {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r43-eb94e1d7/tools/run_all_tests.py",
      "operation": "UID pure control module read",
      "error": "PermissionError: [Errno 1] Operation not permitted",
      "stop_authority": "REPAIR44: stop for an actually unreadable file"
    },
    "approval_sha256": {
      "expected": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96",
      "actual": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96",
      "result": "PASS"
    },
    "spec": {
      "raw_bytes": 7000,
      "raw_sha256": "d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f",
      "one_final_LF_removed_sha256": "9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881",
      "existing_protocol": "PASS"
    },
    "q43_handoff_INDEX": {
      "entries": 14,
      "exact_raw_bytes_and_sha256": "PASS"
    },
    "pure_controls": [
      {
        "name": "negative",
        "exit_code": 0
      },
      {
        "name": "join",
        "exit_code": 0
      },
      {
        "name": "encoder",
        "exit_code": 0
      },
      {
        "name": "approval",
        "exit_code": 0
      },
      {
        "name": "candidate",
        "exit_code": 0
      },
      {
        "name": "series",
        "exit_code": 0
      },
      {
        "name": "wrapper",
        "exit_code": 0
      },
      {
        "name": "full-suite-negatives",
        "exit_code": 0
      },
      {
        "name": "guard-mutations",
        "exit_code": 0
      },
      {
        "name": "UID",
        "exit_code": 1
      },
      {
        "name": "power-adapter",
        "exit_code": 0
      },
      {
        "name": "repair44",
        "exit_code": 0
      }
    ],
    "pure_results": {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR44_PURE_RESULTS.json",
      "sha256": "4a702903f9d3189af50b68383cc5bc7829a7480b3a0199459e5b9b3ed710733e"
    },
    "new_controls": {
      "source": "s5/repair44_controls.py",
      "synthetic_only": true,
      "paid_mutations_rejected": 17,
      "roster_name_sync_probe_regex_self_check": "PASS",
      "no_pyc": "PASS"
    },
    "not_run": [
      "AST and explicit build-cfile py_compile on every touched Python file (stopped before this stage)",
      "Check-only S1-S5 plan (stopped before this stage)",
      "Fresh native S1-S5 and independent Reader",
      "Fresh collect, full184, index, verify-only, registered validation, independent whole-unit review and integration"
    ],
    "formal_acceptance": false
  },
  "compile_checks": [
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/11.pyc"
    },
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/12.pyc"
    },
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/repair44_controls.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/16.pyc"
    },
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/17.pyc"
    },
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_order_adapter.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/18.pyc"
    },
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_order_adapter_controls.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/19.pyc"
    },
    {
      "file": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_power_adapter.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/20.pyc"
    },
    {
      "file": "tools/check_p04_order_evidence.py",
      "AST_exit_code": 0,
      "py_compile_exit_code": 0,
      "cfile": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/21.pyc"
    }
  ],
  "uid": {
    "name": "UID-repair45",
    "argv": [
      "python3",
      "-B",
      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_uid_controls.py",
      "--project-root",
      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/verified-m-engine-free-r45",
      "--scratch",
      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/uid"
    ],
    "exit_code": 0,
    "stdout": "{\"accepted\": false, \"Root-only\": true, \"controls\": [\"positive\", \"extra\", \"original\", \"owner\", \"existing-collision\", \"generated-collision\", \"no-newline\", \"crlf\", \"uppercase\", \"too-long\", \"hardlink\", \"symlink\", \"missing\", \"post-seal-reports\"], \"uid_helper\": {\"helper_path\": \"tools/run_p13_reference_tests.py\", \"helper_sha256\": \"9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c\", \"helper_bytes\": 13957, \"functions\": {\"uid_plan\": \"c9b094e12e3ace11b4c81365d134f7a218dd73ca8e6501f5f860acd2af0e980d\", \"uid_snapshot\": \"2987194db9bcfaf781e25808c755a9d8c8b87cb7f57f92a8f8e4292c2823c4e9\"}, \"shared_module\": \"tools/run_all_tests.py\", \"shared_sha256\": \"320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4\"}, \"scratch\": \"/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/uid\"}\n",
    "stderr": ""
  },
  "no_pyc": {
    "exit_code": 0,
    "files": [],
    "scope": "execution/p04-01/**/*.pyc and tools/check_p04_order_evidence.py source only"
  },
  "check_only_initial_argument_refusals": [
    {
      "series": "s1",
      "argv": [
        "python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s1/run_s1_native.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
        "--main",
        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
        "--submission",
        "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
        "--check-only",
        "--plan",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s1-plan.json",
        "--output",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s1-native"
      ],
      "exit_code": 2,
      "stdout": "",
      "stderr": "ValueError: fresh-q requires a full HEX40 triple without --historical-r17\n"
    },
    {
      "series": "s2a",
      "argv": [
        "python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s2/run_s2a_native.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
        "--main",
        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
        "--submission",
        "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
        "--check-only",
        "--plan",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2a-plan.json",
        "--output",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2a-native"
      ],
      "exit_code": 2,
      "stdout": "",
      "stderr": "ValueError: fresh-q requires a full HEX40 triple without --historical-r17\n"
    },
    {
      "series": "s2b",
      "argv": [
        "python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s2b/run_s2b_native.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
        "--main",
        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
        "--submission",
        "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
        "--check-only",
        "--plan",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2b-plan.json",
        "--output",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2b-native"
      ],
      "exit_code": 2,
      "stdout": "",
      "stderr": "ValueError: fresh-q requires a full HEX40 triple without --historical-r17\n"
    },
    {
      "series": "s3",
      "argv": [
        "python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
        "--main",
        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
        "--submission",
        "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
        "--check-only",
        "--plan",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s3-plan.json",
        "--output",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s3-native"
      ],
      "exit_code": 2,
      "stdout": "",
      "stderr": "ValueError: fresh-q requires a full HEX40 triple without --historical-r17\n"
    },
    {
      "series": "s4",
      "argv": [
        "python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
        "--main",
        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
        "--submission",
        "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
        "--check-only",
        "--plan",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s4-plan.json",
        "--output",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s4-native"
      ],
      "exit_code": 2,
      "stdout": "",
      "stderr": "ValueError: fresh-q requires a full HEX40 triple without --historical-r17\n"
    },
    {
      "series": "s5",
      "argv": [
        "python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
        "--main",
        "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
        "--submission",
        "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
        "--check-only",
        "--plan",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s5-plan.json",
        "--output",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s5-native"
      ],
      "exit_code": 2,
      "stdout": "",
      "stderr": "ValueError: fresh-q requires a full HEX40 triple without --historical-r17\n"
    }
  ],
  "check_only": {
    "tree_argument_scope": "Actual HEAD tree only; W is dirty, not a final Q or C claim",
    "results": [
      {
        "series": "s1",
        "argv": [
          "python3",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s1/run_s1_native.py",
          "--project-root",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
          "--main",
          "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
          "--submission",
          "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
          "--check-only",
          "--plan",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s1-plan.json",
          "--output",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s1-native",
          "--tested-tree",
          "af5256155815214dc73620d5a2ad04cbcd139274"
        ],
        "exit_code": 2,
        "stdout": "",
        "stderr": "ValueError: checkout is not clean\n"
      },
      {
        "series": "s2a",
        "argv": [
          "python3",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s2/run_s2a_native.py",
          "--project-root",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
          "--main",
          "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
          "--submission",
          "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
          "--check-only",
          "--plan",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2a-plan.json",
          "--output",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2a-native",
          "--tested-tree",
          "af5256155815214dc73620d5a2ad04cbcd139274"
        ],
        "exit_code": 2,
        "stdout": "",
        "stderr": "ValueError: checkout is not clean\n"
      },
      {
        "series": "s2b",
        "argv": [
          "python3",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s2b/run_s2b_native.py",
          "--project-root",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
          "--main",
          "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
          "--submission",
          "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
          "--check-only",
          "--plan",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2b-plan.json",
          "--output",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s2b-native",
          "--tested-tree",
          "af5256155815214dc73620d5a2ad04cbcd139274"
        ],
        "exit_code": 2,
        "stdout": "",
        "stderr": "ValueError: checkout is not clean\n"
      },
      {
        "series": "s3",
        "argv": [
          "python3",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py",
          "--project-root",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
          "--main",
          "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
          "--submission",
          "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
          "--check-only",
          "--plan",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s3-plan.json",
          "--output",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s3-native",
          "--tested-tree",
          "af5256155815214dc73620d5a2ad04cbcd139274"
        ],
        "exit_code": 2,
        "stdout": "",
        "stderr": "ValueError: checkout is not clean\n"
      },
      {
        "series": "s4",
        "argv": [
          "python3",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
          "--project-root",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
          "--main",
          "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
          "--submission",
          "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
          "--check-only",
          "--plan",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s4-plan.json",
          "--output",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s4-native",
          "--tested-tree",
          "af5256155815214dc73620d5a2ad04cbcd139274"
        ],
        "exit_code": 2,
        "stdout": "",
        "stderr": "ValueError: checkout is not clean\n"
      },
      {
        "series": "s5",
        "argv": [
          "python3",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
          "--project-root",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement",
          "--main",
          "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
          "--submission",
          "eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97",
          "--check-only",
          "--plan",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s5-plan.json",
          "--output",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair45-1792309312161922000/s5-native",
          "--tested-tree",
          "af5256155815214dc73620d5a2ad04cbcd139274"
        ],
        "exit_code": 2,
        "stdout": "",
        "stderr": "ValueError: checkout is not clean\n"
      }
    ]
  },
  "retained_passes": "REPAIR44 roster positives/negatives, all-consumer name-sync, probe_guard regex self-check, 17 paid-before-incident mutations; no source changed in REPAIR45",
  "pure_results": {
    "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR44_PURE_RESULTS.json",
    "sha256": "569063467403bd004ff5b342486a822bba430f6e81a3e8081ed44cb50d23e5dd"
  },
  "formal_acceptance": false,
  "not_run": [
    "Clean exact-Q check-only after automatic submission (Root)",
    "Fresh native S1-S4 and ten S5 cases; independent Reader and fresh order positives",
    "Fresh adapters/collect/full184/index/verify-only/registered validation/independent whole-unit review/integration"
  ]
 }
@@ -0,0 +1,468 @@
 # REPAIR41 history and REPAIR45 status
 ## REPAIR45 — implementation ready for submission
 The supplied byte-verified M engine-free context resolved the REPAIR44 UID dependency.
 UID controls: all 14 PASS, exit 0. Both supplied helper SHA-256 pins match exactly.
 AST and explicit fresh BUILD-cfile py_compile passed for all eight touched Python
 files, with python3 -B and PYTHONDONTWRITEBYTECODE=1. No source was changed in
 REPAIR45; retained passing controls were not rerun. The no-pyc static check
 passed again (exit 0); generated compile files exist only under allocated BUILD.
 The prior UID failure remains recorded as failed, not replaced with a PASS.
 Sequential check-only S1, S2a, S2b, S3, S4 and S5 each returned exit 2:
 `ValueError: checkout is not clean`
 The initial missing-tested-tree argument refusals are also retained. The later
 attempt used the actual HEAD tree solely as a guard input, not a claim of final
 Q, clean source or C. No engine started. Root executes clean exact-Q check-only
 after automatic submission. Full argv/stdout/stderr and compile paths are in
 REPAIR41_STATIC_CHECKS.json. No Git writes, Runner or native run were performed.
 Implementation is ready; the whole original unit remains incomplete and P04
 credit remains 0. Deferred Root conditions, in order: freeze final Q; affected
 pure controls; clean exact-Q check-only; capacity check; one heavy lease with
 fresh native S1–S4 and all ten S5 cases; independent Reader and adapters on actual
 raw (including fresh Reader order positives); fresh collect; full 184 suite once;
 index; --verify-only; registered validation before review; independent whole-unit
 Opus review; normal prepare / exact C / integration / final / Root DB join /
 ledger / main push. Native Reader and acceptance remain pending.
 patience_release stays pending unless fresh S3 raw shows it. Product freeze,
 M, allowed paths, REQUIRED membership/thresholds, all seven domains, G1/G2,
 R40–R44 and the existing one-trailing-LF spec protocol remain unchanged.
 ## REPAIR44
 **Worker stopped: unreadable required check dependency.** The UID pure control
 cannot read `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r43-eb94e1d7/tools/run_all_tests.py`:
 `PermissionError: [Errno 1] Operation not permitted`. REPAIR44 explicitly requires
 stopping for an actually unreadable file. No permission bypass or alternate
 positive is claimed. REPAIR44_PURE_RESULTS.json retains the failed invocation.
 Eleven other pure programs completed successfully (including the new 17 paid
 mutation negatives and roster/name-sync/regex/no-pyc controls). The already
 launched sequential batch finished power-adapter and repair44 controls after
 the UID failure; these results are recorded within their limited scope.
 AST/build-cfile compilation of all touched Python files and check-only S1–S5
 were not reached. The implementation below is work in progress, not a completed
 REPAIR44 submission. Resume requires a readable verified check dependency.
 Same original unit, W and submitted S=eb94e1d7dbae3b0be84171b4ef0024b4f6b0ae97;
 M=c0ea009b28a7649aca6a433a1a24dc0be5e7ab81. No reset or new counted work.
 Original whole unit remains incomplete, formal 16/88, P04 credit 0.
 R43 import/parse/Writer passed (2749/0), then run_s5_native.py:525 compared
 sorted receipt branches to insertion-order CASES. G/H preceded E/F; all nine
 cases were present but Reader never started. R43 native remains FAILED,
 alongside r35/r36/R40 native. Q37 remains its own-version local PASS only.
 Seven Writer-only typed derivers/G1/G2 and twelve pure/six check-only passes
 are not independent Reader, replay or acceptance.
 The canonical wrapper roster is now sorted(CASE_TABLE). LABELS, SLOTS and
 receipt comparisons derive from it, with exact lengths, uniqueness and set
 membership. Reader independently enumerates CASE_TABLE. The new pure controls
 reproduce the old failure, accept insertion/reverse order and reject missing,
 duplicate or unknown cases and missing/extra/duplicate slots. The ten cases are
 `S5A_PURE`, `S5B_DEPENDENCY`, `S5C_DESTRUCTION_COMMAND`, `S5D_DESTRUCTION_RAID`,
 `S5D_IN_FLIGHT`, `S5D_PAID_BEFORE_INCIDENT`, `S5E_MIDNIGHT`, `S5F_EXIT`,
 `S5G_SHIFT_1080`, `S5H_PAUSED_MIDNIGHT`.
 New fixture: primary queues at N-duration-1, starts at N-duration and completes
 at N. Secondary queues at N-2 and starts at N-1, holding its own reservation;
 two meals are stocked through _stock. Cafeteria definition capacity=12 (line22),
 staff_min=2 (line18), base_service_minutes=45 (line24), base_price=25 (line26),
 inventory_inputs=one meal (line27), exact file sha256
 86d540fe2d78b9dcdbe5a0af6e4a001f4cec54934636ed01deb25a943c79128a.
 Staff setup derives staff_min; prices/duration subsequently bind to the primary
 service snapshot. Capacity permits the concurrent secondary; no product value
 is changed. Seed 420558 is a distinct deterministic fixture seed following the
 existing 42055x private-QA family, not a product RNG policy change.
 M source proof (full bodies, file hashes and line ranges in
 REPAIR44_SOURCE_FACTS.json): simulation_kernel.advance_one_minute line122,
 body sha b9587ef722d8c8640248025462819374ae5eca1c3d8bbe600b6bc9c328567777,
 runs FACILITY_COMPLETION, VITALS_AND_ENVIRONMENT, INCIDENTS_AND_EVENTS,
 FACILITY_QUEUES in that order. _run_phase line236, body sha
 52461eeb288892a4bb4b6a99570185af08a30758ef88b0046a911baaa6f318e1,
 emits phase-start observations before handlers; therefore completion is
 observed as ACTIVE at FACILITY_COMPLETION start and COMPLETED with one receipt
 at VITALS_AND_ENVIRONMENT start. Receipt phase is FACILITY_COMPLETION.
 Runtime registers the handlers at lines400–428. _advance_relationship_events
 line8637, body sha 20ca7abfdcbbc914f91545c3eded46e3e87035ff4153541ffcbf92471b02b03f,
 starts the queued automatic event in INCIDENTS_AND_EVENTS. Public registration
 and enqueue functions are at lines6878/6887 (full hashes in the source facts).
 _validate_event_action line9991, body sha
 83e0cce3b59244440b11acdee6f87dd521859701769b1689ff2775db5c92c5f5,
 allows SET_FACILITY_STATE for this non-Defense-owned facility. _apply_event_action
 line10040, body sha d79e7aca02eed06f500ffc632c6160cd80d76c3d7c5c90dc097f71b60380d365,
 calls set_operational_status with durability=0 and suspension_reason=DESTROYED.
 The fixture never registers the busy facility as a Defense asset and expects no
 guard. FacilityService.start_next_service line449 (body sha
 2eb1cf1226fb1496b6b96c39184ad6a767b4fde747923df599097372435ffa4c) checks the
 actual instance capacity and starts secondary work with ordinary active staff.
 ServiceInstance.mark_failed line128 stores completed_at for failure timing,
 body sha 178c6879e64385f0e3ff99fa98ae6ceb4dc67f6c2c981b0effb229f5d4d647fa.
 The independent adapter retains payment/release/sales/phase helpers. It proves
 the pre-completion state, single typed receipt/Runtime-ledger/idempotency joins,
 surviving identical boundary/held sale, one primary wallet debit, financial day
 from ledger absolute_minute, positive pre-event durability and BROKEN/DESTROYED
 afterward. Secondary stays active/reserved through N and fails/releases once at
 N+1 with unchanged wallet, no remaining request/reservation or generated service.
 The checker adds this raw-recomputed sub-gate inside D05-P04-DESTRUCTION.
 All previous gates and REQUIRED names/thresholds stay intact. Pure mutations
 cover every requested failure, including AFTER-copy; they are serializer units,
 not substitutes for fresh native Writer/Reader raw.
 The six explicitly named __pycache__/*.repair43.pyc were read, byte sizes,
 headers and SHA-256 inspected, then deleted; no source/evidence was deleted.
 Execution-scope .gitignore now excludes __pycache__/ and *.pyc. Python checks
 use -B and explicit py_compile cfile under allocated build. The static control
 rejects any remaining *.pyc in the allowed execution tree.
 All existing R40–R43 cases, G1/G2 shadow oracle and negatives, R41 diagnostic,
 historical/fresh S4 pin separation, 43+ controls and the Step 0 table below are
 preserved. Product source/values/guards, permissions, billing, all seven domains
 and 15+EV thresholds are unchanged. Approval raw SHA-256 exactly matches
 cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96.
 The spec raw is 7000 bytes, sha
 d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f;
 stripping exactly its one final LF gives the registered
 9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881.
 This is the existing spec-only EOF protocol; all other hashes compare raw bytes.
 REPAIR41_STATIC_CHECKS.json records actual worker checks only. Native Reader,
 formal acceptance and patience_release remain pending (the last needs fresh S3).
 Root freezes final Q and follows the twelve steps in s5/S5_ROOT_RUN.md.
 ## REPAIR42/43 implementation submission
 REPAIR43 supplies the coherent remaining QA batch for the same original unit.
 Native applicability and acceptance are **not established**. Formal 16/88,
 original 30/88 and P04 credit 0 are unchanged. r35, r36 and R40 native remain
 FAILED; Q37 remains PASS only for its own version. D05 x6 and A01 stay approved.
 The product, Clock, API, values, product tests, contract and 15+EV criteria are
 unchanged. No Git write, engine, Runner, full regression or agent launch occurred.
 R42 superseded the closed journal-field list and the literal QA file freeze.
 The R41 mandatory-membership diagnostic and historical/fresh S4 pin separation
 remain in place. Their 14 negative and 29 join controls passed again. The
 118-entry Step 0 table below is retained unchanged; all 118 raw hashes were
 recomputed and matched in this turn. The R42 directions were both read in full.
 ### Oracle and source bindings
 `REPAIR43_SOURCE_FACTS.json` stores full function bodies read with `git show`
 at M `c0ea009b28a7649aca6a433a1a24dc0be5e7ab81`, not signatures or excerpts.
 The boundary is the declaration through the bytes before the next function,
 including intervening blank lines, matching the R41 source-fact convention.
 | Function | M line | Full-body SHA-256 |
 | --- | --- | --- |
 | CommandQueue.restore_snapshot | 220 | 60e76b45be29068cff5ba29d2006642ed447eea6daf832c75757103a0c70cfe3 |
 | StableIdGenerator.restore_snapshot | 34 | 3142b592d4a54b4455949a69b775e280a2fe72b6592fc646644ec7c443b8718b |
 | DomainEventStream.restore_snapshot | 113 | 934648473a09fd4276187ced78d51d551a4047d884bbe279722d798f1b94ef96 |
 | Runtime.submit_command | 473 | 85e8d94bd933c11d1b7b2e88344b7f8839069d1b96930aa4ad4c76c7356a2e68 |
 | Runtime._process_commands | 5737 | 6e2b20f73eeaa73882081526f8be566a484f11e1aa9fbfd697df22b4fc034aca |
 | Runtime._publish_domain_event | 2389 | 6253ddb30d5470673285aef922a7caaff7611adaa855bb068e1d52e89b0761a1 |
 | Runtime._execute_create_service_request | 7413 | 084a741b5590c691aafde9b8cf978674428cb21d4deb930a783a5039106da6fa |
 | Runtime._execute_register_defense_asset | 7229 | 4834ecafd948ad0db04ef0230b4ecff733f3008679c903363ae577dd43e95a95 |
 The private `_guard_failure` helper captures a deep typed BEFORE with the
 public Clock paused. Public submit_command executes these guards immediately;
 they are not tick-only commands, so a twin tick is unnecessary. Operations are
 disabled and pending/in-flight queues are empty. Detached public restores feed
 enqueue -> execute_ready -> complete. The independently constructed failed
 result uses each exact M message, an empty target, fixed command payload, and
 G1's independently known raid_id details. The M failed-result site publishes
 exactly one COMMAND_FAILED through the shadow event stream and ID generator.
 It increments Runtime.next_command_id once. Normal accepted/processed/
 idempotency, sorting, ID counters, ring-buffer and drained delivery behavior
 come from those public objects. No journal fields are masked or discarded.
 EXPECTED is serialized before the actual command is submitted. Whole typed
 Runtime bytes must then match, including all business domains. Consequently
 there can be no new reservation/request, charge, wallet change or orphan.
 G2's existing active service/reservation remains unchanged. An expected-failure
 callback checks the exact failed result once; every other command still must
 succeed. `s5_guard_oracle.py` independently derives the serializer output from
 BEFORE and the fixed command for the pure adapter. It accepts no AFTER input.
 The adapter binds G1 to the non-terminal raid asset and G2 to an actual active
 service in BEFORE. Copied AFTER/EXPECTED corruptions fail the independent
 derivation. Synthetic serializer controls exercise 968 typed mutations across
 G1/G2; the same traversal is also applied to fresh native guard raw by Root.
 ### S5D reachability and coverage
 A lawful in-flight path exists. Runtime `_validate_event_action` L9991
 (`83e0cce3b59244440b11acdee6f87dd521859701769b1689ff2775db5c92c5f5`)
 accepts SET_FACILITY_STATE conditions for an existing non-Defense-owned facility;
 it does not reject active_services. `_execute_event_action_boundary` L9957
 (`c53cf8153418237ebd0c45ba6eb4672a925fd06998c3cff8392657a5e3e019e0`)
 validates and dispatches `_apply_event_action` L10040
 (`d79e7aca02eed06f500ffc632c6160cd80d76c3d7c5c90dc097f71b60380d365`).
 That calls FacilityService.set_operational_status L132
 (`10275169f4a71ad490c432443c34068d1951f099e11132b3c18b48647e7845c8`),
 which publicly accepts durability 0 and suspension_reason DESTROYED.
 FacilityInstance.set_operational_conditions L165
 (`8574adb2957c69e76219c8d34838cacc4df4ff660d5ccd649bbb577b6d60feea`)
 evaluates the BROKEN state without completing/failing active services there.
 EventService.start_next_event L273 and Runtime._advance_relationship_events
 L8637 execute automatic actions in INCIDENTS_AND_EVENTS, after completion.
 Their full bodies and hashes are in the source-facts file.
 `S5D_IN_FLIGHT` schedules public enqueue_event for N, with natural completion
 due at N+1. It requires active service at N after destruction, N+1 BROKEN
 failure, one reservation release, zero charge, and formal snapshot replay.
 FacilityService._prepare_service_for_tick L853
 (`b35c2c0fb23a04258b71995dd7c3b6dfacbbcdf36106e2e3348acef0e18d21cc`)
 defines that next-tick failure. This is a new S5 observation, not S3 B4 reuse.
 `S5D_DESTRUCTION_RAID` retains its name/slots for a separate idle OBJECTIVE.
 Public get_due_rounds L114
 (`c8b469d4bd304e8325b60c17a63de07146a0040f9a1b5dde7f2aae60104bf34f`)
 must report earliest_minute exactly N. Runtime._advance_defense L8599
 (`db38b51531276d2620999d57eed7a6219b73f8b8d9ff3706cf569f4797918527`)
 performs the automatic breach. The adapter requires G1, G2 and the idle breach
 together, plus the independent in-flight case. All destruction_stop derivations
 remain charges 0. No unreachable criterion or fabricated native PASS is claimed.
 ### Other cases and private abstractions
 - S5G_SHIFT_1080 retains the six historical first-18:00 observation labels on
  the current typed phase points. The receipt captures actual DAY staff before
  handover; the adapter joins its shift ending at 1080 and subsequent OFF_DUTY
  state. Exactly one snapshot-priced sale/payment ID and no extra 1081
  completion/charge are required. M ShiftInstance.create_standard L71 and
  StaffService._update_shift_states L1398 are included in source facts.
 - S5H_PAUSED_MIDNIGHT depletes mana before the last pre-midnight MANA evaluation,
  retaining the S5B RELATED_FACILITY_INACTIVE pattern. It checks elapsed,
  reservation IDs and request preservation through DAILY_CLOSE, no paused
  sale, one joined upkeep/payroll settlement, and one new-day recovered sale
  with CONSUMED reservations. The boundary slot is formally restored/replayed.
 - S5E Writer and restored Reader call the public coordinator advance_to at the
  paid boundary minute and record is_replay plus entire typed BEFORE/AFTER.
  This supplies same_minute_replay only after actual raw equality; rejected
  enqueue is not used as that proof.
 - The literal CASE_TABLE continues to define wrapper CASES/LABELS/SLOTS. The
  shared Writer/Reader formal-slot machinery is reused for all nine cases.
  Fresh verification and combination call the adapters again over fresh raw.
  paused_midnight leaves the adapter's pending list only when derivation
  succeeds; patience_release still requires fresh S3 evidence.
 `REPAIR43_PURE_RESULTS.json` contains actual command outputs. UID controls first
 failed because this base checkout lacks the M helper. The retry used a temporary
 QA-only copy of exact `git show M` helper bytes, independently matching the
 supplied raw pins; all 14 helper controls passed. That is pure-helper evidence,
 not final-Q/native applicability. No product or tool file was added to the
 checkout. `REPAIR41_STATIC_CHECKS.json` records only checks actually executed.
 Fresh order positives and mutations requiring future Writer/Reader raw remain
 Root-only; no such positive has been claimed here.
 ## REPAIR43 spec identity precheck
 The complete recorded REPAIR42 and RUN42 files were read and their exact raw
 SHA-256 values match the supplied pins. The R42 raw-only spec stop is withdrawn.
 The existing `tools/check_p04_order_evidence.py::verify` condition accepts the
 spec: raw SHA-256 is
 `d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f`;
 removing its single final LF gives the registered
 `9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881`.
 This protocol applies only to the spec. All other material pins remain exact
 raw comparisons. Root's protocol and six controls are recorded in
 `build/owner-handoff/p04-after-p26-closure-r01/q43-spec-pin-protocol/ROOT_SPEC_PIN_EOF_PROTOCOL.json`.
 The former closed journal-field restriction below is superseded by R42/R43;
 allowed QA files may be extended while preserving existing behavior.
 Historical REPAIR41 batch status: **BLOCKED**, partial independent fixes only. No native result,
 worker-success claim, new counted unit or completion claim. Formal 16/88,
 original 30/88 and P04 credit 0 remain unchanged. r35, r36 and R40 remain FAILED;
 Q37 remains a local PASS for its own version only. D05 x6 and A01 remain approved.
 ## Historical source/immutable-oracle conflict (superseded by R42/R43 above)
 The clarified G1/G2 oracle permits only the processed-result and idempotency
 entries within `command_queue`. M also necessarily adds an `accepted` row.
 `CommandQueue.enqueue` records `{ "command_id": command.command_id,
 "idempotency_key": String(command.idempotency_key) }` before execution.
 `complete` retains this metadata even for a failed result. `create_snapshot`
 serializes it as the separate `accepted` array. Consequently an EXPECTED tree
 restricted to the enumerated deltas cannot equal AFTER for either guard.
 This is a deterministic source-contract conflict, not a routine refactor or a
 product defect. No field has been masked and no product change is proposed.
 Required clarification: explicitly include the single source-defined `accepted`
 metadata row in delta (ii), with exact typed fields derived from the submitted
 command, preserving sorted command IDs and every prior row. The row is fully
 computable; the blocker is permission to include this additional serialized
 delta under the instruction “only these ... deltas.” It is not a missing-file
 or hash failure, nor a claim that the serializer is unknowable. The worker has
 not silently broadened that oracle.
 `REPAIR41_QUEUE_SOURCE_FACTS.json` preserves the full bodies obtained using
 read-only `git show` at M `c0ea009b28a7649aca6a433a1a24dc0be5e7ab81`:
 | Source function | M line | Full-body SHA-256 |
 | --- | --- | --- |
 | command_queue.gd enqueue | 15 | 56a1fe8a5dfd00ad81f9844bc8e6f4a6ce9009dadbc9cd2b7ff07d14bff1938c |
 | command_queue.gd execute_ready | 83 | d8c534217e704cd892401904768a883c9a3ec2f3852ae7c0438f2eb854b4f7aa |
 | command_queue.gd complete | 112 | 4290ebfe68d9245b4e8ebb6d8a09ba6172f16bcacb6e4294299ad6dc06c56ed7 |
 | command_queue.gd get_accepted_command_metadata | 174 | 60841dbff80282e95460e8dfeaeb6ae37a0cc05f2c7654130e8b8c51729e5b39 |
 | command_queue.gd create_snapshot | 189 | 15737e59018ae93092c1aca3ce268d2bc354c28a8261d4ffada4aba63af3d241 |
 | stable_id_generator.gd next_id | 9 | cf1cf036adab2eb36acab25a069b5dfc42e7aa281c491bd89ade6d91f6eb2c1d |
 | stable_id_generator.gd create_snapshot | 23 | cab243cf59d5d56ff03beb305070f83b66d7a55cce7f3f2f889c0d9a5303e76a |
 | domain_event_stream.gd publish_batch | 40 | 275be0d68c99217732ea3dc2821cf7dcec24a695035e455af7f716d901147167 |
 | domain_event_stream.gd create_snapshot | 96 | 94fc2dd3ef1a953ba7d9b3d3728c0d158bf0f69935874f48722a3c6025447dbf |
 ## Independent repairs implemented
 - Mandatory membership is checked before applicability can dereference a missing
  condition; the diagnostic names `paused_midnight`. REQUIRED is unchanged.
 - Historical S4 receipt verification reads only
  `s4/historical/run_s4_native_r28.py.reference`. Provenance:
  `befa0ef1f634e734ee156347e8fd02e82eddea49:docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py`.
  The unchanged copy hashes to
  `2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b`.
  Fresh S4 verification binds the current wrapper and rejects the historical pin.
 - Private helpers centralize mandatory membership and choose historical/current
  wrapper verification explicitly. They preserve the required membership and all
  existing join negatives; four additional version/pin negatives were added.
 - Negative fixtures (14) and join fixtures (29) passed. These are pure controls,
  not current native evidence. Full results: `REPAIR41_PURE_RESULTS.json`.
  Touched Python AST/py_compile and the unchanged GDScript probe regex check passed.
 ## Historical REPAIR41 unimplemented work / source search status
 S5D re-scope, G1/G2, automatic breach revisions, S5G, S5H, same-minute replay,
 adapter derivations/mutations and fresh-condition wiring remain unimplemented.
 The initial M runtime search found `EventAction.Type.SET_FACILITY_STATE` handling
 in `_validate_event_action` around line 10012; this is a candidate requiring
 public/natural triggering and phase-alignment analysis. No conclusion that an
 in-flight destruction path exists or is absent is claimed. G1/G2 coverage cannot
 be claimed before the exact permitted journal envelope is resolved and checked.
 No adapter positive raw or future final-Q helper was invented. The full worker
 check set has not passed. No engine, Runner, Git mutation or agent launch occurred.
 ## Step 0
 Step 0 precheck: PASS.
 q40/q41 INDEX digests are observed baselines; no independent expected digest was supplied for those indexes. Child expected digests come from their indexes.
 | Absolute path | Expected SHA-256 | Observed SHA-256 |
 | --- | --- | --- |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_ABSOLUTE_CONTEXT_INDEX.json | 6f0ee990b95a5a897511425cd86ae57ba0364c5b326afdeb9f556fabfea6915c | 6f0ee990b95a5a897511425cd86ae57ba0364c5b326afdeb9f556fabfea6915c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_NEXT_P04_PLAN.json | 217d9bf4ef593fb95a5e726fee0e4497863a0b06663d27ba20e742d81bb9c049 | 217d9bf4ef593fb95a5e726fee0e4497863a0b06663d27ba20e742d81bb9c049 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR30_DIRECT_CHECKER_PLAN.json | 77801cc6db2a4deb9f76118a746b32eb5e629b2d6980850b8813a12b45016806 | 77801cc6db2a4deb9f76118a746b32eb5e629b2d6980850b8813a12b45016806 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR30_RUN_DECISION.json | be7be3bfaa5a5ab412db8aecd1d951c213894e485b7869fcc12ab1c75b037c7f | be7be3bfaa5a5ab412db8aecd1d951c213894e485b7869fcc12ab1c75b037c7f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR31_CONCRETE_PLAN.json | 857e1acaed2093de56afdd851e69b3129bf9edce72b5da3cdd160ce4b7bfc18a | 857e1acaed2093de56afdd851e69b3129bf9edce72b5da3cdd160ce4b7bfc18a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR32_CONCRETE_PLAN.json | 5b69f850f835bd7af37e9c728c484c236c28efb0bd32113bb53bcbaf7d252c0a | 5b69f850f835bd7af37e9c728c484c236c28efb0bd32113bb53bcbaf7d252c0a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/CURRENT_ROOT_P04_RESUME_FACTS.json | c826726368844a823c54c1df1cdaff43fde5a94a17e638bfc60d8fb2559f8d85 | c826726368844a823c54c1df1cdaff43fde5a94a17e638bfc60d8fb2559f8d85 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/D05_ACTUAL_HUMAN_APPROVAL.json | cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96 | cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_FRESH_Q_INPUT_APPROACH_AFTER34.json | 7a7b91cbf04bb84cdef8e7a99ca2140a9eac2ac6a385570b4f0aa0d474e7da92 | 7a7b91cbf04bb84cdef8e7a99ca2140a9eac2ac6a385570b4f0aa0d474e7da92 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_P04_PRESERVED_TO_CURRENT_SOURCE_AUDIT.json | 6bb86959b06acb62d5cd3c5fd00bb6802a80b66184e69abca3f75c46ddeb7a12 | 6bb86959b06acb62d5cd3c5fd00bb6802a80b66184e69abca3f75c46ddeb7a12 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_PLAN_VERSION_NOTES.json | b4336f900a87f9bf0daa1e86728c3a913aed7c09425569e104cc01290be1c62f | b4336f900a87f9bf0daa1e86728c3a913aed7c09425569e104cc01290be1c62f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/INDEX.json | b2ad602b7bd22dbc4778b60b4a015b1d2f8f06b71278959fb52910f2ee1af57a | b2ad602b7bd22dbc4778b60b4a015b1d2f8f06b71278959fb52910f2ee1af57a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_CHECK_ONLY.json | aab7dcbfcc934f3bda7d937feb4e7638109ddf645da6ebd57f6190588b55287c | aab7dcbfcc934f3bda7d937feb4e7638109ddf645da6ebd57f6190588b55287c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_GIT.json | e63b1b27244cd042f522a63b4392dea8c7211ce5ca5a927e91856115dfaa9f56 | e63b1b27244cd042f522a63b4392dea8c7211ce5ca5a927e91856115dfaa9f56 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_dirty.log | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_untracked.log | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 | 3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-main.log | 006b9e83c3e106bada560371dda1fb9b4326e3f31fa48fa0c46e7d4903a91e55 | 006b9e83c3e106bada560371dda1fb9b4326e3f31fa48fa0c46e7d4903a91e55 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-submission.log | 6fefa0256b2dbc1596043fbff65fbaf87279baaa770a04d65a5fe70a6476671d | 6fefa0256b2dbc1596043fbff65fbaf87279baaa770a04d65a5fe70a6476671d |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-tree.log | 7fb7a1e4f00f201b7008b6d72957b3d4db450be156a1174b26a22c36d48b5e8f | 7fb7a1e4f00f201b7008b6d72957b3d4db450be156a1174b26a22c36d48b5e8f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_RESOURCE_ADMISSION.json | 18ef80f33f36cdd6ab664c862a9ae651a649a532bd32c4c35a81640cb4f078a0 | 18ef80f33f36cdd6ab664c862a9ae651a649a532bd32c4c35a81640cb4f078a0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_STAGE.json | f143045846cf06d79b81a0e52035300251fa576cde9a2d5eeda97d6610fd8591 | f143045846cf06d79b81a0e52035300251fa576cde9a2d5eeda97d6610fd8591 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_check-only.log | 4418f4b6bbe3d88cbf7f0b988084e05b5f0f52c15fe0f466ba82e584408427ce | 4418f4b6bbe3d88cbf7f0b988084e05b5f0f52c15fe0f466ba82e584408427ce |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_pure.log | f77640e0629497389baefc6424cf164d164fb96bbbd48cee6c4d83ed96c253c1 | f77640e0629497389baefc6424cf164d164fb96bbbd48cee6c4d83ed96c253c1 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_REPAIR30_EXECUTION_ORDER_FACTS.json | e18b031e790622929ec2c80ab9a6d5c3d883a364d625b58372fe33fd280ca93f | e18b031e790622929ec2c80ab9a6d5c3d883a364d625b58372fe33fd280ca93f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_REPAIR31_ACTUAL_FACTS.json | 0ea352b442e88263b899d28d58422afed39855393233c35ed3a962fcab67e136 | 0ea352b442e88263b899d28d58422afed39855393233c35ed3a962fcab67e136 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/INDEX.json | ff43786d898ef3475c267cf22758074a001b3d46dbc2bea52782a3782dd5571e | ff43786d898ef3475c267cf22758074a001b3d46dbc2bea52782a3782dd5571e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/autoload/simulation_runtime.gd | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scenes/main/main.gd | 92677e4ac57ed8d418a4a716bf0874cbbaea79cff893e5163c82ad1f75e7140a | 92677e4ac57ed8d418a4a716bf0874cbbaea79cff893e5163c82ad1f75e7140a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scenes/main/world_preview.gd | 4bc49a19a38b9c3b4d6bfc243ddf46f1f25469a8273adb5e812911ef9424a1f2 | 4bc49a19a38b9c3b4d6bfc243ddf46f1f25469a8273adb5e812911ef9424a1f2 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/core/save_service.gd | f4c270632225dd046bbff92f9472761d64d63740e93f274828c92dcf912db6a9 | f4c270632225dd046bbff92f9472761d64d63740e93f274828c92dcf912db6a9 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/relationship/relationship_service.gd | d2f6304aa643b98914c5d65bf3eb673ca8cc427476187f43e76b4b941410b1d3 | d2f6304aa643b98914c5d65bf3eb673ca8cc427476187f43e76b4b941410b1d3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/ui/guest_observation_panel.gd | f5de1004fce5445bbfd3ee8d6ec37b325e7a9813d47c19beaeeeb411f27a50a5 | f5de1004fce5445bbfd3ee8d6ec37b325e7a9813d47c19beaeeeb411f27a50a5 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/ui/room_presentation.gd | 2eda851534777575298ea005e2e6d0ee90785a81357d5b9c34cfb95f615a8181 | 2eda851534777575298ea005e2e6d0ee90785a81357d5b9c34cfb95f615a8181 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/tests/business/test_required_kitchen.gd | 3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f | 3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/tools/regression/suite-policy.json | 7eb085d7e7a383785b4faedb503d0f6002bcad431e3188785aef901ce123769f | 7eb085d7e7a383785b4faedb503d0f6002bcad431e3188785aef901ce123769f |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/INDEX.json | a7a3299c4d70ea033368a707882856fd5c7f7f4d5a0d5f86bf2fb9b2fe2e53d1 | a7a3299c4d70ea033368a707882856fd5c7f7f4d5a0d5f86bf2fb9b2fe2e53d1 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/controller-input.json | 24d10b3a91553df54b3b2fd4b1a57dce683cc72a55576e0c73c9e142b335ad40 | 24d10b3a91553df54b3b2fd4b1a57dce683cc72a55576e0c73c9e142b335ad40 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/controller.py | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/003-receipt.json | 4ce015c160859612c89e215517826aa1da3582534d27c4688af6a44e37f1b641 | 4ce015c160859612c89e215517826aa1da3582534d27c4688af6a44e37f1b641 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/parse-receipt.json | 1ad82022669a3f197f53ed1e23f23aadc927220f0ba1f857c41f80721bafa443 | 1ad82022669a3f197f53ed1e23f23aadc927220f0ba1f857c41f80721bafa443 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/runner-ended.json | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/runner-input.json | 2a76506e923a3a95288ce826b81ed9eab49d4ecee613a2c82ae35e970c68f961 | 2a76506e923a3a95288ce826b81ed9eab49d4ecee613a2c82ae35e970c68f961 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/INDEX.json | 942181cc3efc8207e728233f89626b66eb0c34b582e5c9b0fae294dcf1600c00 | 942181cc3efc8207e728233f89626b66eb0c34b582e5c9b0fae294dcf1600c00 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_EXACT_NORMAL_CANDIDATE_72A50A4A.json | 5614c9b1c9eb222dbbcfd9ae1c3b438cc4129c779deba2841d660a8c96b6cfe6 | 5614c9b1c9eb222dbbcfd9ae1c3b438cc4129c779deba2841d660a8c96b6cfe6 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_NORMAL_FINAL_72A50A4A.json | b41069126e029c30ab644a62a54cb45ca2e0e504add150020500acba4e249469 | b41069126e029c30ab644a62a54cb45ca2e0e504add150020500acba4e249469 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_NORMAL_INTEGRATION_72A50A4A.json | 2f47d39d3f05b3735f0fb3e01adaabf1c66c6a784d60af247063bd90e5ec0d5c | 2f47d39d3f05b3735f0fb3e01adaabf1c66c6a784d60af247063bd90e5ec0d5c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/INDEX.json | a23f17336a5e701100c224ebcb69f37a8de95aca82658675b692d503798a5232 | a23f17336a5e701100c224ebcb69f37a8de95aca82658675b692d503798a5232 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/OWNER_CLI_REFERENCE.json | 1e360ad1d8057ef649fabe97ac3e98263d2f8c1c4d976d8b6e0a907a49e9158e | 1e360ad1d8057ef649fabe97ac3e98263d2f8c1c4d976d8b6e0a907a49e9158e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/ROOT_SOURCE_REVIEW_REJECTION_20D0AE5.json | d028dd3862ae663586d49b5843e88d9da82ad7985fa082551438e4a81311073e | d028dd3862ae663586d49b5843e88d9da82ad7985fa082551438e4a81311073e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/SOURCE_REWORK_ADAPTER_LOCAL_CHECKS.json | 580f2f19d680a23ee4efe6beab68a1aad69e067bc551f623cc7531c6915d7a78 | 580f2f19d680a23ee4efe6beab68a1aad69e067bc551f623cc7531c6915d7a78 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/SOURCE_REWORK_CURRENT_REFERENCE_INDEX.json | b0ecce7ae523527fdc6272e9784eba6109d67c0cd3745a8aaab64d913ca8adbd | b0ecce7ae523527fdc6272e9784eba6109d67c0cd3745a8aaab64d913ca8adbd |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/core.py.reference | 4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856 | 4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/current-owner-cli.py.reference | 0cfd9634e4a59755b89d2927d60b6092368529f2ca7188d949da7f88080359aa | 0cfd9634e4a59755b89d2927d60b6092368529f2ca7188d949da7f88080359aa |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/owner-cli.py.reference | 52c327e624334b51612ea3cb1653aeff4a7a192502d1ba9407ce874af1d92410 | 52c327e624334b51612ea3cb1653aeff4a7a192502d1ba9407ce874af1d92410 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/owner-source-rework-20d0ae5.py.reference | 9ecf7bebf666a67a8f13357d66e9c1d8d76940ef8212f0055537b728c75e0cbc | 9ecf7bebf666a67a8f13357d66e9c1d8d76940ef8212f0055537b728c75e0cbc |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_EXECUTION.json | 6e48da89ce852dacdbff2d0f93a8903583dccd9e05f5e34bb68be0d63f540332 | 6e48da89ce852dacdbff2d0f93a8903583dccd9e05f5e34bb68be0d63f540332 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_IMPORT_COMBINED.log | cd39b1711f530454b0ec263ab2d076d714f674d5a36e26f9ef16788799b76764 | cd39b1711f530454b0ec263ab2d076d714f674d5a36e26f9ef16788799b76764 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_OUTER_OWNED_FINALLY.json | ee14a347724aedb2ae8afecc0775250b1e014c17e726210e2535d6108e57edc0 | ee14a347724aedb2ae8afecc0775250b1e014c17e726210e2535d6108e57edc0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/INDEX.json | 0e4334442ce89b0388e10a4b62b5e00acbce2013e3ef1967508a3c48d72dc9c1 | 0e4334442ce89b0388e10a4b62b5e00acbce2013e3ef1967508a3c48d72dc9c1 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/P13_CONTROLLER_REFERENCE_INDEX.json | 48434362232d6b58cca720868c6d87f2af48675f365855b8a4a97eb5071dfee3 | 48434362232d6b58cca720868c6d87f2af48675f365855b8a4a97eb5071dfee3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/P13_FULL_CONTROLLER_PATTERN.py.reference | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b | 9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/ROOT_Q35_DIAGNOSTIC_IMPORT_SOURCE_DELTA.json | 1994e59a498f3dbca1fd589b16b5bc6305d2786c0fa730ac489590469f08b05d | 1994e59a498f3dbca1fd589b16b5bc6305d2786c0fa730ac489590469f08b05d |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/ROOT_Q35_FAILED_IMPORT_UID_CLASSIFICATION.json | bc0a863e52db4f98b4b2ee4bc0b513c73f841726789a2ca99521c1b8618dc6c3 | bc0a863e52db4f98b4b2ee4bc0b513c73f841726789a2ca99521c1b8618dc6c3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_p13_reference_tests.py.reference | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/INDEX.json | cef78b200268e27a6e73ccd926ac95d0b2b6e30b9338a8412da9ab48b68ca82a | cef78b200268e27a6e73ccd926ac95d0b2b6e30b9338a8412da9ab48b68ca82a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/SAFETY_REAUDIT.json | 8edf11fe7893ced7c6450feb1ee3db45ab0a145db572254d2102ee70e26ac26e | 8edf11fe7893ced7c6450feb1ee3db45ab0a145db572254d2102ee70e26ac26e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/TYPED_AUDIT.json | e1800e1679b570ecdd9d7537e87e0730c089fa3b4c6197d3e279e60959aad016 | e1800e1679b570ecdd9d7537e87e0730c089fa3b4c6197d3e279e60959aad016 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/command_queue.gd.reference | 09b22e6212fa3ce1bf08f5d6b52224a2d3362b3bc63f03a8c98e89af1c6f5895 | 09b22e6212fa3ce1bf08f5d6b52224a2d3362b3bc63f03a8c98e89af1c6f5895 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/facility_instance.gd.reference | 0c6aa493f3299611e05dd26aa429dda8cf7b5c479e4d09632036fb862f79a324 | 0c6aa493f3299611e05dd26aa429dda8cf7b5c479e4d09632036fb862f79a324 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-before.json | af7b1f0099b37298b1bf0d683f98c0ec84fae96b74f16c33af310cab2efa955b | af7b1f0099b37298b1bf0d683f98c0ec84fae96b74f16c33af310cab2efa955b |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-before.var | 61f749b6a10ddc8e70f6e5b1d6378fcf1c0ae5127161a10c9704d76bcf64813a | 61f749b6a10ddc8e70f6e5b1d6378fcf1c0ae5127161a10c9704d76bcf64813a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-resource-replay.json | 56a7fc36e0972eb64abb19189f1664b87d6a058511bbec0ef7e1497abd2c511e | 56a7fc36e0972eb64abb19189f1664b87d6a058511bbec0ef7e1497abd2c511e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-resource-replay.var | 92aa8694939e2b8b678b556227cce1cf4cda661b6fb1f5a478ac37deba1a072e | 92aa8694939e2b8b678b556227cce1cf4cda661b6fb1f5a478ac37deba1a072e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-before.json | 0f821748eb7f12a8ac196c61bca34a7fe55af6adb3ab43d1acf8748fd2be8652 | 0f821748eb7f12a8ac196c61bca34a7fe55af6adb3ab43d1acf8748fd2be8652 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-before.var | 06b03c6a50a8832a9cab621b908332199e9ab4d10d4e547111a8860c70535bd2 | 06b03c6a50a8832a9cab621b908332199e9ab4d10d4e547111a8860c70535bd2 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-resource-replay.json | 49fb4df6bdaadd9c5146f716a108902c533b137427e2f90f86116393f12c6ea0 | 49fb4df6bdaadd9c5146f716a108902c533b137427e2f90f86116393f12c6ea0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-resource-replay.var | 464b589fa206427a1becd6dd484fc9be05da1b619ffb26ca559dde83e7b09309 | 464b589fa206427a1becd6dd484fc9be05da1b619ffb26ca559dde83e7b09309 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/INDEX.json | a8f44235dc8a74e67c3463698619611131224de5048868259a729791614cf9a9 | a8f44235dc8a74e67c3463698619611131224de5048868259a729791614cf9a9 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q36_REJECTED_ENQUEUE_STATIC_PATH.json | e8adc79d506491973289084c5ade7c3affe9e3e517896ef191f01cad6dcaed92 | e8adc79d506491973289084c5ade7c3affe9e3e517896ef191f01cad6dcaed92 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_DIAGNOSTIC_SAFETY_REAUDIT.json | 4d4b059576b3b6d28f71d054eeaf367ead54a74bb499d64bf450d625a137cfa5 | 4d4b059576b3b6d28f71d054eeaf367ead54a74bb499d64bf450d625a137cfa5 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_POWER_ADAPTER_RESULT.json | cce1132503457675b50d566ad1afc3f67e902a28135550a8e72b647dacd7d70d | cce1132503457675b50d566ad1afc3f67e902a28135550a8e72b647dacd7d70d |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_PREFLIGHT.json | 3554d8f246c0d117c774ecfabcd9eb48eed311155e3a5a3b15413f3e663b6fd7 | 3554d8f246c0d117c774ecfabcd9eb48eed311155e3a5a3b15413f3e663b6fd7 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_R37_ADAPTER_CONTROLS.json | f62fc981f3935bd969ea5c6fafa5d44a111b1264ad0d04fdb08b07fe4f27429e | f62fc981f3935bd969ea5c6fafa5d44a111b1264ad0d04fdb08b07fe4f27429e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/ROOT_MANA_ADOPTION_CURRENT_APPLICABILITY_C0.json | 57ba42e1c92db194a5ddcb8dc80c8e0249bbab817e35a3ae00bd12b0f4c57731 | 57ba42e1c92db194a5ddcb8dc80c8e0249bbab817e35a3ae00bd12b0f4c57731 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/ROOT_Q37_FULL_ROSTER_PREPARE_ONLY.json | c547dcff95184d04bf7089e7c9f6a2cda800a91359c9ec318f48ad4ecf2887c0 | c547dcff95184d04bf7089e7c9f6a2cda800a91359c9ec318f48ad4ecf2887c0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/SOURCE_MAP.json | d1333fc891342be5cc16795973fa71e7910a8c8af06ef4a3e51662537fed63c3 | d1333fc891342be5cc16795973fa71e7910a8c8af06ef4a3e51662537fed63c3 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/core/simulation_kernel.gd | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/economy/economy_service.gd | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/facility/facility_service.gd | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/guest/guest_service.gd | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/operations/operations_coordinator.gd | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_autonomy.gd | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_cycle.gd | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tools/run_all_tests.py | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/core/simulation_kernel.gd | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb | 341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/autoload/simulation_runtime.gd | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 | 45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/facility/facility_service.gd | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 | ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/economy/economy_service.gd | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e | 95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/operations/operations_coordinator.gd | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 | 871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/guest/guest_service.gd | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e | 56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_autonomy.gd | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 | 28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 | 320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_cycle.gd | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 | a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_p13_reference_tests.py.reference | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c | 9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/INDEX.json | 1e72f10784d639ff509e8175f73c46e8e2479dda8263365f51dd9f67c753709e | 1e72f10784d639ff509e8175f73c46e8e2479dda8263365f51dd9f67c753709e |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_Q40_NATIVE_FAILURE_AUDIT.json | 622edabc16a3e9ef6528b4009d44d8307f998bf9aa0c441b4b223bf5a40efeb5 | 622edabc16a3e9ef6528b4009d44d8307f998bf9aa0c441b4b223bf5a40efeb5 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_R40_CURRENT_SOURCE_GAPS.json | 306195acb5661f9c4c087428ba16f0a46fe54cf1f8b2dea9933c035b90ad7511 | 306195acb5661f9c4c087428ba16f0a46fe54cf1f8b2dea9933c035b90ad7511 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_R40_AFFECTED_PURE_CONTROLS.json | 736860fe730d7b7fa744783f74a0de875afe8ba3ff65e74598bd4c07e29d955a | 736860fe730d7b7fa744783f74a0de875afe8ba3ff65e74598bd4c07e29d955a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_R40_ALL_CHECK_ONLY.json | ffec08fd3ed45d346ae27de4c502fbc7768fc51ccadce433ca30805faf127a68 | ffec08fd3ed45d346ae27de4c502fbc7768fc51ccadce433ca30805faf127a68 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer-stderr.log | 75ddd2af006162c702751853f9f3931086bded7544a8addd0d65383c47a59a67 | 75ddd2af006162c702751853f9f3931086bded7544a8addd0d65383c47a59a67 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer-stdout.log | eebf10b3f84916338ab651af117852cbe852bef28f79032472fdb01342ac0608 | eebf10b3f84916338ab651af117852cbe852bef28f79032472fdb01342ac0608 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer.json | ceb971f39afe131fbeccb0fbe06be37ada0d31ef3ee86f216701a1618abe444a | ceb971f39afe131fbeccb0fbe06be37ada0d31ef3ee86f216701a1618abe444a |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer-S5D_DESTRUCTION_RAID-commands.json | 19be61a849204ce72731d586f9685ad129231a55fca57a006ddbc723d52d9879 | 19be61a849204ce72731d586f9685ad129231a55fca57a006ddbc723d52d9879 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/execution.json | 7c00af3acee008927faf7f1b99b6a7407671674668674f30acc3504ea6ee21d9 | 7c00af3acee008927faf7f1b99b6a7407671674668674f30acc3504ea6ee21d9 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q41-oracle-source-facts/INDEX.json | 903601cfec6be397f99c30aeba9301f2312c1f659a73f30d5d8a04e1f07ef468 | 903601cfec6be397f99c30aeba9301f2312c1f659a73f30d5d8a04e1f07ef468 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q41-oracle-source-facts/ACTUAL_FAILED_COMMAND_JOURNAL_SOURCE.json | 27d39ab2b01e1e73d4bd38e335a87fe26ddbea3e748fc9c95d82c886dfd14187 | 27d39ab2b01e1e73d4bd38e335a87fe26ddbea3e748fc9c95d82c886dfd14187 |
 | /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q41-oracle-source-facts/HISTORICAL_S4_WRAPPER_R28.py.reference | 2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b | 2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b |
@@ -0,0 +1,631 @@
 {
  "spec": {
    "raw_sha256": "d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f",
    "one_LF_stripped_sha256": "9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881",
    "accepted": true,
    "controls": [
      {
        "case": "canonical_without_LF",
        "accepted": true,
        "expected": true
      },
      {
        "case": "tracked_single_LF",
        "accepted": true,
        "expected": true
      },
      {
        "case": "double_final_LF",
        "accepted": false,
        "expected": false
      },
      {
        "case": "CRLF_final",
        "accepted": false,
        "expected": false
      },
      {
        "case": "BOM",
        "accepted": false,
        "expected": false
      },
      {
        "case": "interior_mutation",
        "accepted": false,
        "expected": false
      }
    ]
  },
  "step0": [
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_ABSOLUTE_CONTEXT_INDEX.json",
      "expected": "6f0ee990b95a5a897511425cd86ae57ba0364c5b326afdeb9f556fabfea6915c",
      "observed": "6f0ee990b95a5a897511425cd86ae57ba0364c5b326afdeb9f556fabfea6915c"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_NEXT_P04_PLAN.json",
      "expected": "217d9bf4ef593fb95a5e726fee0e4497863a0b06663d27ba20e742d81bb9c049",
      "observed": "217d9bf4ef593fb95a5e726fee0e4497863a0b06663d27ba20e742d81bb9c049"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR30_DIRECT_CHECKER_PLAN.json",
      "expected": "77801cc6db2a4deb9f76118a746b32eb5e629b2d6980850b8813a12b45016806",
      "observed": "77801cc6db2a4deb9f76118a746b32eb5e629b2d6980850b8813a12b45016806"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR30_RUN_DECISION.json",
      "expected": "be7be3bfaa5a5ab412db8aecd1d951c213894e485b7869fcc12ab1c75b037c7f",
      "observed": "be7be3bfaa5a5ab412db8aecd1d951c213894e485b7869fcc12ab1c75b037c7f"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR31_CONCRETE_PLAN.json",
      "expected": "857e1acaed2093de56afdd851e69b3129bf9edce72b5da3cdd160ce4b7bfc18a",
      "observed": "857e1acaed2093de56afdd851e69b3129bf9edce72b5da3cdd160ce4b7bfc18a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ACTUAL_OPUS_REPAIR32_CONCRETE_PLAN.json",
      "expected": "5b69f850f835bd7af37e9c728c484c236c28efb0bd32113bb53bcbaf7d252c0a",
      "observed": "5b69f850f835bd7af37e9c728c484c236c28efb0bd32113bb53bcbaf7d252c0a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/CURRENT_ROOT_P04_RESUME_FACTS.json",
      "expected": "c826726368844a823c54c1df1cdaff43fde5a94a17e638bfc60d8fb2559f8d85",
      "observed": "c826726368844a823c54c1df1cdaff43fde5a94a17e638bfc60d8fb2559f8d85"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/D05_ACTUAL_HUMAN_APPROVAL.json",
      "expected": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96",
      "observed": "cd365ded1b777a0327d090709f0a4161f5005562819183455d9f2e106fba3e96"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_FRESH_Q_INPUT_APPROACH_AFTER34.json",
      "expected": "7a7b91cbf04bb84cdef8e7a99ca2140a9eac2ac6a385570b4f0aa0d474e7da92",
      "observed": "7a7b91cbf04bb84cdef8e7a99ca2140a9eac2ac6a385570b4f0aa0d474e7da92"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_P04_PRESERVED_TO_CURRENT_SOURCE_AUDIT.json",
      "expected": "6bb86959b06acb62d5cd3c5fd00bb6802a80b66184e69abca3f75c46ddeb7a12",
      "observed": "6bb86959b06acb62d5cd3c5fd00bb6802a80b66184e69abca3f75c46ddeb7a12"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_PLAN_VERSION_NOTES.json",
      "expected": "b4336f900a87f9bf0daa1e86728c3a913aed7c09425569e104cc01290be1c62f",
      "observed": "b4336f900a87f9bf0daa1e86728c3a913aed7c09425569e104cc01290be1c62f"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/INDEX.json",
      "expected": "b2ad602b7bd22dbc4778b60b4a015b1d2f8f06b71278959fb52910f2ee1af57a",
      "observed": "b2ad602b7bd22dbc4778b60b4a015b1d2f8f06b71278959fb52910f2ee1af57a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_CHECK_ONLY.json",
      "expected": "aab7dcbfcc934f3bda7d937feb4e7638109ddf645da6ebd57f6190588b55287c",
      "observed": "aab7dcbfcc934f3bda7d937feb4e7638109ddf645da6ebd57f6190588b55287c"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_GIT.json",
      "expected": "e63b1b27244cd042f522a63b4392dea8c7211ce5ca5a927e91856115dfaa9f56",
      "observed": "e63b1b27244cd042f522a63b4392dea8c7211ce5ca5a927e91856115dfaa9f56"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_dirty.log",
      "expected": "3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53",
      "observed": "3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_untracked.log",
      "expected": "3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53",
      "observed": "3ad8ef5d71175bc265f93395fe64a39b05ab65252ad509abc108de15a2b9ab53"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-main.log",
      "expected": "006b9e83c3e106bada560371dda1fb9b4326e3f31fa48fa0c46e7d4903a91e55",
      "observed": "006b9e83c3e106bada560371dda1fb9b4326e3f31fa48fa0c46e7d4903a91e55"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-submission.log",
      "expected": "6fefa0256b2dbc1596043fbff65fbaf87279baaa770a04d65a5fe70a6476671d",
      "observed": "6fefa0256b2dbc1596043fbff65fbaf87279baaa770a04d65a5fe70a6476671d"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_NEGATIVE_wrong-tree.log",
      "expected": "7fb7a1e4f00f201b7008b6d72957b3d4db450be156a1174b26a22c36d48b5e8f",
      "observed": "7fb7a1e4f00f201b7008b6d72957b3d4db450be156a1174b26a22c36d48b5e8f"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_RESOURCE_ADMISSION.json",
      "expected": "18ef80f33f36cdd6ab664c862a9ae651a649a532bd32c4c35a81640cb4f078a0",
      "observed": "18ef80f33f36cdd6ab664c862a9ae651a649a532bd32c4c35a81640cb4f078a0"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_STAGE.json",
      "expected": "f143045846cf06d79b81a0e52035300251fa576cde9a2d5eeda97d6610fd8591",
      "observed": "f143045846cf06d79b81a0e52035300251fa576cde9a2d5eeda97d6610fd8591"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_check-only.log",
      "expected": "4418f4b6bbe3d88cbf7f0b988084e05b5f0f52c15fe0f466ba82e584408427ce",
      "observed": "4418f4b6bbe3d88cbf7f0b988084e05b5f0f52c15fe0f466ba82e584408427ce"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_Q35_LOCAL_DIAGNOSTIC_INPUTS/ROOT_Q35_pure.log",
      "expected": "f77640e0629497389baefc6424cf164d164fb96bbbd48cee6c4d83ed96c253c1",
      "observed": "f77640e0629497389baefc6424cf164d164fb96bbbd48cee6c4d83ed96c253c1"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_REPAIR30_EXECUTION_ORDER_FACTS.json",
      "expected": "e18b031e790622929ec2c80ab9a6d5c3d883a364d625b58372fe33fd280ca93f",
      "observed": "e18b031e790622929ec2c80ab9a6d5c3d883a364d625b58372fe33fd280ca93f"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/ROOT_REPAIR31_ACTUAL_FACTS.json",
      "expected": "0ea352b442e88263b899d28d58422afed39855393233c35ed3a962fcab67e136",
      "observed": "0ea352b442e88263b899d28d58422afed39855393233c35ed3a962fcab67e136"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/INDEX.json",
      "expected": "ff43786d898ef3475c267cf22758074a001b3d46dbc2bea52782a3782dd5571e",
      "observed": "ff43786d898ef3475c267cf22758074a001b3d46dbc2bea52782a3782dd5571e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/autoload/simulation_runtime.gd",
      "expected": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0",
      "observed": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scenes/main/main.gd",
      "expected": "92677e4ac57ed8d418a4a716bf0874cbbaea79cff893e5163c82ad1f75e7140a",
      "observed": "92677e4ac57ed8d418a4a716bf0874cbbaea79cff893e5163c82ad1f75e7140a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scenes/main/world_preview.gd",
      "expected": "4bc49a19a38b9c3b4d6bfc243ddf46f1f25469a8273adb5e812911ef9424a1f2",
      "observed": "4bc49a19a38b9c3b4d6bfc243ddf46f1f25469a8273adb5e812911ef9424a1f2"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/core/save_service.gd",
      "expected": "f4c270632225dd046bbff92f9472761d64d63740e93f274828c92dcf912db6a9",
      "observed": "f4c270632225dd046bbff92f9472761d64d63740e93f274828c92dcf912db6a9"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/relationship/relationship_service.gd",
      "expected": "d2f6304aa643b98914c5d65bf3eb673ca8cc427476187f43e76b4b941410b1d3",
      "observed": "d2f6304aa643b98914c5d65bf3eb673ca8cc427476187f43e76b4b941410b1d3"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/ui/guest_observation_panel.gd",
      "expected": "f5de1004fce5445bbfd3ee8d6ec37b325e7a9813d47c19beaeeeb411f27a50a5",
      "observed": "f5de1004fce5445bbfd3ee8d6ec37b325e7a9813d47c19beaeeeb411f27a50a5"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/scripts/ui/room_presentation.gd",
      "expected": "2eda851534777575298ea005e2e6d0ee90785a81357d5b9c34cfb95f615a8181",
      "observed": "2eda851534777575298ea005e2e6d0ee90785a81357d5b9c34cfb95f615a8181"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/tests/business/test_required_kitchen.gd",
      "expected": "3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f",
      "observed": "3a9c92f80c24064ef0858fba10bd7caab63203932942837f7e142349578f6b2f"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/tools/regression/suite-policy.json",
      "expected": "7eb085d7e7a383785b4faedb503d0f6002bcad431e3188785aef901ce123769f",
      "observed": "7eb085d7e7a383785b4faedb503d0f6002bcad431e3188785aef901ce123769f"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/INDEX.json",
      "expected": "a7a3299c4d70ea033368a707882856fd5c7f7f4d5a0d5f86bf2fb9b2fe2e53d1",
      "observed": "a7a3299c4d70ea033368a707882856fd5c7f7f4d5a0d5f86bf2fb9b2fe2e53d1"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/controller-input.json",
      "expected": "24d10b3a91553df54b3b2fd4b1a57dce683cc72a55576e0c73c9e142b335ad40",
      "observed": "24d10b3a91553df54b3b2fd4b1a57dce683cc72a55576e0c73c9e142b335ad40"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/controller.py",
      "expected": "9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b",
      "observed": "9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/003-receipt.json",
      "expected": "4ce015c160859612c89e215517826aa1da3582534d27c4688af6a44e37f1b641",
      "observed": "4ce015c160859612c89e215517826aa1da3582534d27c4688af6a44e37f1b641"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/parse-receipt.json",
      "expected": "1ad82022669a3f197f53ed1e23f23aadc927220f0ba1f857c41f80721bafa443",
      "observed": "1ad82022669a3f197f53ed1e23f23aadc927220f0ba1f857c41f80721bafa443"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/runner-ended.json",
      "expected": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "observed": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/full-standard-schema-example/run/runner-input.json",
      "expected": "2a76506e923a3a95288ce826b81ed9eab49d4ecee613a2c82ae35e970c68f961",
      "observed": "2a76506e923a3a95288ce826b81ed9eab49d4ecee613a2c82ae35e970c68f961"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/INDEX.json",
      "expected": "942181cc3efc8207e728233f89626b66eb0c34b582e5c9b0fae294dcf1600c00",
      "observed": "942181cc3efc8207e728233f89626b66eb0c34b582e5c9b0fae294dcf1600c00"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_EXACT_NORMAL_CANDIDATE_72A50A4A.json",
      "expected": "5614c9b1c9eb222dbbcfd9ae1c3b438cc4129c779deba2841d660a8c96b6cfe6",
      "observed": "5614c9b1c9eb222dbbcfd9ae1c3b438cc4129c779deba2841d660a8c96b6cfe6"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_NORMAL_FINAL_72A50A4A.json",
      "expected": "b41069126e029c30ab644a62a54cb45ca2e0e504add150020500acba4e249469",
      "observed": "b41069126e029c30ab644a62a54cb45ca2e0e504add150020500acba4e249469"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/normal-candidate-example/ROOT_NORMAL_INTEGRATION_72A50A4A.json",
      "expected": "2f47d39d3f05b3735f0fb3e01adaabf1c66c6a784d60af247063bd90e5ec0d5c",
      "observed": "2f47d39d3f05b3735f0fb3e01adaabf1c66c6a784d60af247063bd90e5ec0d5c"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/INDEX.json",
      "expected": "a23f17336a5e701100c224ebcb69f37a8de95aca82658675b692d503798a5232",
      "observed": "a23f17336a5e701100c224ebcb69f37a8de95aca82658675b692d503798a5232"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/OWNER_CLI_REFERENCE.json",
      "expected": "1e360ad1d8057ef649fabe97ac3e98263d2f8c1c4d976d8b6e0a907a49e9158e",
      "observed": "1e360ad1d8057ef649fabe97ac3e98263d2f8c1c4d976d8b6e0a907a49e9158e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/ROOT_SOURCE_REVIEW_REJECTION_20D0AE5.json",
      "expected": "d028dd3862ae663586d49b5843e88d9da82ad7985fa082551438e4a81311073e",
      "observed": "d028dd3862ae663586d49b5843e88d9da82ad7985fa082551438e4a81311073e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/SOURCE_REWORK_ADAPTER_LOCAL_CHECKS.json",
      "expected": "580f2f19d680a23ee4efe6beab68a1aad69e067bc551f623cc7531c6915d7a78",
      "observed": "580f2f19d680a23ee4efe6beab68a1aad69e067bc551f623cc7531c6915d7a78"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/SOURCE_REWORK_CURRENT_REFERENCE_INDEX.json",
      "expected": "b0ecce7ae523527fdc6272e9784eba6109d67c0cd3745a8aaab64d913ca8adbd",
      "observed": "b0ecce7ae523527fdc6272e9784eba6109d67c0cd3745a8aaab64d913ca8adbd"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/core.py.reference",
      "expected": "4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856",
      "observed": "4c6067bbd57034764873a468ff161a6882d232503043d5640fc83dea0b455856"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/current-owner-cli.py.reference",
      "expected": "0cfd9634e4a59755b89d2927d60b6092368529f2ca7188d949da7f88080359aa",
      "observed": "0cfd9634e4a59755b89d2927d60b6092368529f2ca7188d949da7f88080359aa"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/owner-cli.py.reference",
      "expected": "52c327e624334b51612ea3cb1653aeff4a7a192502d1ba9407ce874af1d92410",
      "observed": "52c327e624334b51612ea3cb1653aeff4a7a192502d1ba9407ce874af1d92410"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/owner-normal-gates-reference/owner-source-rework-20d0ae5.py.reference",
      "expected": "9ecf7bebf666a67a8f13357d66e9c1d8d76940ef8212f0055537b728c75e0cbc",
      "observed": "9ecf7bebf666a67a8f13357d66e9c1d8d76940ef8212f0055537b728c75e0cbc"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_EXECUTION.json",
      "expected": "6e48da89ce852dacdbff2d0f93a8903583dccd9e05f5e34bb68be0d63f540332",
      "observed": "6e48da89ce852dacdbff2d0f93a8903583dccd9e05f5e34bb68be0d63f540332"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_IMPORT_COMBINED.log",
      "expected": "cd39b1711f530454b0ec263ab2d076d714f674d5a36e26f9ef16788799b76764",
      "observed": "cd39b1711f530454b0ec263ab2d076d714f674d5a36e26f9ef16788799b76764"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/FAILED_OUTER_OWNED_FINALLY.json",
      "expected": "ee14a347724aedb2ae8afecc0775250b1e014c17e726210e2535d6108e57edc0",
      "observed": "ee14a347724aedb2ae8afecc0775250b1e014c17e726210e2535d6108e57edc0"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/INDEX.json",
      "expected": "0e4334442ce89b0388e10a4b62b5e00acbce2013e3ef1967508a3c48d72dc9c1",
      "observed": "0e4334442ce89b0388e10a4b62b5e00acbce2013e3ef1967508a3c48d72dc9c1"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/P13_CONTROLLER_REFERENCE_INDEX.json",
      "expected": "48434362232d6b58cca720868c6d87f2af48675f365855b8a4a97eb5071dfee3",
      "observed": "48434362232d6b58cca720868c6d87f2af48675f365855b8a4a97eb5071dfee3"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/P13_FULL_CONTROLLER_PATTERN.py.reference",
      "expected": "9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b",
      "observed": "9e03ecba1819c449c83a9dfba0f60c0e01f94aad728c46f60dd1db179224a89b"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/ROOT_Q35_DIAGNOSTIC_IMPORT_SOURCE_DELTA.json",
      "expected": "1994e59a498f3dbca1fd589b16b5bc6305d2786c0fa730ac489590469f08b05d",
      "observed": "1994e59a498f3dbca1fd589b16b5bc6305d2786c0fa730ac489590469f08b05d"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/ROOT_Q35_FAILED_IMPORT_UID_CLASSIFICATION.json",
      "expected": "bc0a863e52db4f98b4b2ee4bc0b513c73f841726789a2ca99521c1b8618dc6c3",
      "observed": "bc0a863e52db4f98b4b2ee4bc0b513c73f841726789a2ca99521c1b8618dc6c3"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference",
      "expected": "320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4",
      "observed": "320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_p13_reference_tests.py.reference",
      "expected": "9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c",
      "observed": "9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/INDEX.json",
      "expected": "cef78b200268e27a6e73ccd926ac95d0b2b6e30b9338a8412da9ab48b68ca82a",
      "observed": "cef78b200268e27a6e73ccd926ac95d0b2b6e30b9338a8412da9ab48b68ca82a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/SAFETY_REAUDIT.json",
      "expected": "8edf11fe7893ced7c6450feb1ee3db45ab0a145db572254d2102ee70e26ac26e",
      "observed": "8edf11fe7893ced7c6450feb1ee3db45ab0a145db572254d2102ee70e26ac26e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/TYPED_AUDIT.json",
      "expected": "e1800e1679b570ecdd9d7537e87e0730c089fa3b4c6197d3e279e60959aad016",
      "observed": "e1800e1679b570ecdd9d7537e87e0730c089fa3b4c6197d3e279e60959aad016"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/command_queue.gd.reference",
      "expected": "09b22e6212fa3ce1bf08f5d6b52224a2d3362b3bc63f03a8c98e89af1c6f5895",
      "observed": "09b22e6212fa3ce1bf08f5d6b52224a2d3362b3bc63f03a8c98e89af1c6f5895"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/facility_instance.gd.reference",
      "expected": "0c6aa493f3299611e05dd26aa429dda8cf7b5c479e4d09632036fb862f79a324",
      "observed": "0c6aa493f3299611e05dd26aa429dda8cf7b5c479e4d09632036fb862f79a324"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-before.json",
      "expected": "af7b1f0099b37298b1bf0d683f98c0ec84fae96b74f16c33af310cab2efa955b",
      "observed": "af7b1f0099b37298b1bf0d683f98c0ec84fae96b74f16c33af310cab2efa955b"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-before.var",
      "expected": "61f749b6a10ddc8e70f6e5b1d6378fcf1c0ae5127161a10c9704d76bcf64813a",
      "observed": "61f749b6a10ddc8e70f6e5b1d6378fcf1c0ae5127161a10c9704d76bcf64813a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-resource-replay.json",
      "expected": "56a7fc36e0972eb64abb19189f1664b87d6a058511bbec0ef7e1497abd2c511e",
      "observed": "56a7fc36e0972eb64abb19189f1664b87d6a058511bbec0ef7e1497abd2c511e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5A_PURE-resource-replay.var",
      "expected": "92aa8694939e2b8b678b556227cce1cf4cda661b6fb1f5a478ac37deba1a072e",
      "observed": "92aa8694939e2b8b678b556227cce1cf4cda661b6fb1f5a478ac37deba1a072e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-before.json",
      "expected": "0f821748eb7f12a8ac196c61bca34a7fe55af6adb3ab43d1acf8748fd2be8652",
      "observed": "0f821748eb7f12a8ac196c61bca34a7fe55af6adb3ab43d1acf8748fd2be8652"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-before.var",
      "expected": "06b03c6a50a8832a9cab621b908332199e9ab4d10d4e547111a8860c70535bd2",
      "observed": "06b03c6a50a8832a9cab621b908332199e9ab4d10d4e547111a8860c70535bd2"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-resource-replay.json",
      "expected": "49fb4df6bdaadd9c5146f716a108902c533b137427e2f90f86116393f12c6ea0",
      "observed": "49fb4df6bdaadd9c5146f716a108902c533b137427e2f90f86116393f12c6ea0"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract/writer-S5B_DEPENDENCY-resource-replay.var",
      "expected": "464b589fa206427a1becd6dd484fc9be05da1b619ffb26ca559dde83e7b09309",
      "observed": "464b589fa206427a1becd6dd484fc9be05da1b619ffb26ca559dde83e7b09309"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/INDEX.json",
      "expected": "a8f44235dc8a74e67c3463698619611131224de5048868259a729791614cf9a9",
      "observed": "a8f44235dc8a74e67c3463698619611131224de5048868259a729791614cf9a9"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q36_REJECTED_ENQUEUE_STATIC_PATH.json",
      "expected": "e8adc79d506491973289084c5ade7c3affe9e3e517896ef191f01cad6dcaed92",
      "observed": "e8adc79d506491973289084c5ade7c3affe9e3e517896ef191f01cad6dcaed92"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_DIAGNOSTIC_SAFETY_REAUDIT.json",
      "expected": "4d4b059576b3b6d28f71d054eeaf367ead54a74bb499d64bf450d625a137cfa5",
      "observed": "4d4b059576b3b6d28f71d054eeaf367ead54a74bb499d64bf450d625a137cfa5"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_POWER_ADAPTER_RESULT.json",
      "expected": "cce1132503457675b50d566ad1afc3f67e902a28135550a8e72b647dacd7d70d",
      "observed": "cce1132503457675b50d566ad1afc3f67e902a28135550a8e72b647dacd7d70d"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_Q37_PREFLIGHT.json",
      "expected": "3554d8f246c0d117c774ecfabcd9eb48eed311155e3a5a3b15413f3e663b6fd7",
      "observed": "3554d8f246c0d117c774ecfabcd9eb48eed311155e3a5a3b15413f3e663b6fd7"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-power-result/ROOT_R37_ADAPTER_CONTROLS.json",
      "expected": "f62fc981f3935bd969ea5c6fafa5d44a111b1264ad0d04fdb08b07fe4f27429e",
      "observed": "f62fc981f3935bd969ea5c6fafa5d44a111b1264ad0d04fdb08b07fe4f27429e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/ROOT_MANA_ADOPTION_CURRENT_APPLICABILITY_C0.json",
      "expected": "57ba42e1c92db194a5ddcb8dc80c8e0249bbab817e35a3ae00bd12b0f4c57731",
      "observed": "57ba42e1c92db194a5ddcb8dc80c8e0249bbab817e35a3ae00bd12b0f4c57731"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/ROOT_Q37_FULL_ROSTER_PREPARE_ONLY.json",
      "expected": "c547dcff95184d04bf7089e7c9f6a2cda800a91359c9ec318f48ad4ecf2887c0",
      "observed": "c547dcff95184d04bf7089e7c9f6a2cda800a91359c9ec318f48ad4ecf2887c0"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/SOURCE_MAP.json",
      "expected": "d1333fc891342be5cc16795973fa71e7910a8c8af06ef4a3e51662537fed63c3",
      "observed": "d1333fc891342be5cc16795973fa71e7910a8c8af06ef4a3e51662537fed63c3"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/core/simulation_kernel.gd",
      "expected": "341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb",
      "observed": "341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/economy/economy_service.gd",
      "expected": "95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e",
      "observed": "95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/facility/facility_service.gd",
      "expected": "ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77",
      "observed": "ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/guest/guest_service.gd",
      "expected": "56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e",
      "observed": "56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/operations/operations_coordinator.gd",
      "expected": "871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90",
      "observed": "871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_autonomy.gd",
      "expected": "28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403",
      "observed": "28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_cycle.gd",
      "expected": "a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357",
      "observed": "a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tools/run_all_tests.py",
      "expected": "320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4",
      "observed": "320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/core/simulation_kernel.gd",
      "expected": "341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb",
      "observed": "341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/current-main-source/autoload/simulation_runtime.gd",
      "expected": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0",
      "observed": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/facility/facility_service.gd",
      "expected": "ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77",
      "observed": "ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/economy/economy_service.gd",
      "expected": "95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e",
      "observed": "95aedd0a0421c93e8fa39f0f76fa890cd0a46905d9a25c88c8b17c4d6d47728e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/operations/operations_coordinator.gd",
      "expected": "871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90",
      "observed": "871a248ee101b6df543fd5cf0440b5d4b0f02c21fa145a99f0687888c1bc6f90"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/scripts/guest/guest_service.gd",
      "expected": "56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e",
      "observed": "56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_autonomy.gd",
      "expected": "28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403",
      "observed": "28ca81ddde4da49442b427ed4c55ddcf213ecb389712db585b64cd416636c403"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_all_tests.py.reference",
      "expected": "320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4",
      "observed": "320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q37-remaining-source-map/source/tests/s5/test_runtime_defense_cycle.gd",
      "expected": "a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357",
      "observed": "a909e2af73aae43590cdd91d07ed2548f4fd2f675d26fa63aa74f6a5cda34357"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q35-uid-diagnostic/run_p13_reference_tests.py.reference",
      "expected": "9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c",
      "observed": "9adc8aa2a7662df8dd70386ddb0bff34574e44d7411de3b6128ddd15eb24675c"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/INDEX.json",
      "expected": "1e72f10784d639ff509e8175f73c46e8e2479dda8263365f51dd9f67c753709e",
      "observed": "1e72f10784d639ff509e8175f73c46e8e2479dda8263365f51dd9f67c753709e"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_Q40_NATIVE_FAILURE_AUDIT.json",
      "expected": "622edabc16a3e9ef6528b4009d44d8307f998bf9aa0c441b4b223bf5a40efeb5",
      "observed": "622edabc16a3e9ef6528b4009d44d8307f998bf9aa0c441b4b223bf5a40efeb5"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_R40_CURRENT_SOURCE_GAPS.json",
      "expected": "306195acb5661f9c4c087428ba16f0a46fe54cf1f8b2dea9933c035b90ad7511",
      "observed": "306195acb5661f9c4c087428ba16f0a46fe54cf1f8b2dea9933c035b90ad7511"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_R40_AFFECTED_PURE_CONTROLS.json",
      "expected": "736860fe730d7b7fa744783f74a0de875afe8ba3ff65e74598bd4c07e29d955a",
      "observed": "736860fe730d7b7fa744783f74a0de875afe8ba3ff65e74598bd4c07e29d955a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/ROOT_R40_ALL_CHECK_ONLY.json",
      "expected": "ffec08fd3ed45d346ae27de4c502fbc7768fc51ccadce433ca30805faf127a68",
      "observed": "ffec08fd3ed45d346ae27de4c502fbc7768fc51ccadce433ca30805faf127a68"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer-stderr.log",
      "expected": "75ddd2af006162c702751853f9f3931086bded7544a8addd0d65383c47a59a67",
      "observed": "75ddd2af006162c702751853f9f3931086bded7544a8addd0d65383c47a59a67"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer-stdout.log",
      "expected": "eebf10b3f84916338ab651af117852cbe852bef28f79032472fdb01342ac0608",
      "observed": "eebf10b3f84916338ab651af117852cbe852bef28f79032472fdb01342ac0608"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer.json",
      "expected": "ceb971f39afe131fbeccb0fbe06be37ada0d31ef3ee86f216701a1618abe444a",
      "observed": "ceb971f39afe131fbeccb0fbe06be37ada0d31ef3ee86f216701a1618abe444a"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/writer-S5D_DESTRUCTION_RAID-commands.json",
      "expected": "19be61a849204ce72731d586f9685ad129231a55fca57a006ddbc723d52d9879",
      "observed": "19be61a849204ce72731d586f9685ad129231a55fca57a006ddbc723d52d9879"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q40-source-and-native-findings/execution.json",
      "expected": "7c00af3acee008927faf7f1b99b6a7407671674668674f30acc3504ea6ee21d9",
      "observed": "7c00af3acee008927faf7f1b99b6a7407671674668674f30acc3504ea6ee21d9"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q41-oracle-source-facts/INDEX.json",
      "expected": "903601cfec6be397f99c30aeba9301f2312c1f659a73f30d5d8a04e1f07ef468",
      "observed": "903601cfec6be397f99c30aeba9301f2312c1f659a73f30d5d8a04e1f07ef468"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q41-oracle-source-facts/ACTUAL_FAILED_COMMAND_JOURNAL_SOURCE.json",
      "expected": "27d39ab2b01e1e73d4bd38e335a87fe26ddbea3e748fc9c95d82c886dfd14187",
      "observed": "27d39ab2b01e1e73d4bd38e335a87fe26ddbea3e748fc9c95d82c886dfd14187"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/q41-oracle-source-facts/HISTORICAL_S4_WRAPPER_R28.py.reference",
      "expected": "2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b",
      "observed": "2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b"
    }
  ]
 }
@@ -0,0 +1,131 @@
 {
  "M": "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81",
  "files": {
    "scripts/core/simulation_kernel.gd": {
      "sha256": "341c0c878c4894adbac628d0db6362ff69fc3347bdd9e61e50936e15dc2d1edb",
      "bytes": 7602,
      "functions": {
        "advance_one_minute": {
          "line": 122,
          "end_line": 158,
          "sha256": "b9587ef722d8c8640248025462819374ae5eca1c3d8bbe600b6bc9c328567777",
          "body": "func advance_one_minute() -> void:\n\t_abort_current_tick_requested = false\n\t_last_tick_advanced = false\n\ttick_started.emit(absolute_minute)\n\t_run_phase(TickPhase.APPLY_COMMANDS)\n\t# A Runtime gate can reject the tick before the Clock changes.  This is\n\t# distinct from an ordinary pause raised by a command that already committed\n\t# for the upcoming minute.\n\tif _abort_current_tick_requested:\n\t\t_abort_current_tick_requested = false\n\t\treturn\n\n\tvar previous_absolute_minute := absolute_minute\n\tabsolute_minute += 1\n\t_sync_calendar_fields()\n\t_handle_time_boundaries(previous_absolute_minute)\n\t_run_phase(TickPhase.TIME_BOUNDARIES)\n\n\tfor phase in [\n\t\tTickPhase.MANA,\n\t\tTickPhase.CONSTRUCTION,\n\t\tTickPhase.LOGISTICS,\n\t\tTickPhase.FACILITY_COMPLETION,\n\t\tTickPhase.VITALS_AND_ENVIRONMENT,\n\t\tTickPhase.INCIDENTS_AND_EVENTS,\n\t\tTickPhase.FACILITY_QUEUES,\n\t\tTickPhase.AI_DECISIONS,\n\t\tTickPhase.PUBLISH_SNAPSHOT,\n\t]:\n\t\t_run_phase(phase)\n\n\tsnapshot_version += 1\n\ttick_completed.emit(absolute_minute)\n\t_emit_current_time()\n\t_abort_current_tick_requested = false\n\t_last_tick_advanced = true\n\n"
        },
        "_run_phase": {
          "line": 236,
          "end_line": 249,
          "sha256": "52461eeb288892a4bb4b6a99570185af08a30758ef88b0046a911baaa6f318e1",
          "body": "func _run_phase(phase: TickPhase) -> void:\n\ttick_phase_started.emit(phase, absolute_minute)\n\tif not _phase_handlers.has(phase):\n\t\treturn\n\tvar handlers: Dictionary = _phase_handlers[phase]\n\tvar handler_ids: Array = handlers.keys()\n\thandler_ids.sort_custom(func(left: Variant, right: Variant) -> bool:\n\t\treturn String(left) < String(right)\n\t)\n\tfor handler_id: Variant in handler_ids:\n\t\tvar callback: Callable = handlers[handler_id]\n\t\tif callback.is_valid():\n\t\t\tcallback.call(absolute_minute)\n\n"
        }
      }
    },
    "autoload/simulation_runtime.gd": {
      "sha256": "45514aea9367ff678f4dc05166bb9b58121f240d4b5565edeb7ab258e3ded8e0",
      "bytes": 616434,
      "functions": {
        "_execute_register_event_definition": {
          "line": 6878,
          "end_line": 6886,
          "sha256": "6c271786ca52115a233f9c3ad2d19f93ef101f2da533672118165757aac3347d",
          "body": "func _execute_register_event_definition(command: SimulationCommand) -> CommandResult:\n\tvar raw_definition: Variant = command.payload.get(&\"definition\", command.payload.get(\"definition\", null))\n\tvar definition := EventDefinition.from_variant(raw_definition)\n\tif definition == null:\n\t\treturn CommandResult.failed(CommandResult.Code.INVALID_PAYLOAD, command.command_id, \"Event definition is malformed.\")\n\tvar result := event_service.register_definition(definition)\n\tresult.command_id = command.command_id\n\treturn result\n\n"
        },
        "_execute_enqueue_event": {
          "line": 6887,
          "end_line": 6895,
          "sha256": "5e5d5fb5e225dbcb09aeb2addb92c0011965c7e8f6b12cda91ca05d98e240c08",
          "body": "func _execute_enqueue_event(command: SimulationCommand) -> CommandResult:\n\tvar event_id := StringName(command.payload.get(&\"event_id\", command.payload.get(\"event_id\", \"\")))\n\tvar actor_ids := _name_array(command.payload.get(&\"actor_ids\", command.payload.get(\"actor_ids\", [])))\n\tvar raw_options: Variant = command.payload.get(&\"options\", command.payload.get(\"options\", {}))\n\tvar options: Dictionary = raw_options.duplicate(true) if raw_options is Dictionary else {}\n\tvar result := event_service.enqueue_candidate(event_id, actor_ids, _runtime_event_minute(), options)\n\tresult.command_id = command.command_id\n\treturn result\n\n"
        },
        "_advance_relationship_events": {
          "line": 8637,
          "end_line": 8655,
          "sha256": "20ca7abfdcbbc914f91545c3eded46e3e87035ff4153541ffcbf92471b02b03f",
          "body": "func _advance_relationship_events(absolute_minute: int) -> void:\n\tif _operations_tick_blocked:\n\t\treturn\n\tif _operations_morning_already_processed(absolute_minute):\n\t\treturn\n\tevent_service.process_expired(absolute_minute)\n\tevent_service.audit_actor_availability(absolute_minute)\n\t_enqueue_pending_relationship_candidates()\n\tif event_service.get_foreground_instance() == null:\n\t\tvar started := event_service.start_next_event(\n\t\t\tabsolute_minute,\n\t\t\t_build_event_context(absolute_minute)\n\t\t)\n\t\tif started.is_success() and bool(started.details.get(&\"waiting_for_choice\", false)):\n\t\t\t_clock.set_paused(true)\n\tif event_service.pause_requested:\n\t\t_clock.set_paused(true)\n\n\n"
        },
        "_validate_event_action": {
          "line": 9991,
          "end_line": 10039,
          "sha256": "83e0cce3b59244440b11acdee6f87dd521859701769b1689ff2775db5c92c5f5",
          "body": "func _validate_event_action(action: EventAction) -> Dictionary:\n\tmatch action.type:\n\t\tEventAction.Type.ADD_LEDGER_ENTRY:\n\t\t\tvar from_account := StringName(action.payload.get(&\"from_account\", action.payload.get(\"from_account\", PLAYER_CASH_ACCOUNT)))\n\t\t\tvar to_account := StringName(action.payload.get(&\"to_account\", action.payload.get(\"to_account\", OPERATING_EXPENSE_ACCOUNT)))\n\t\t\tvar amount := int(action.payload.get(&\"amount\", action.payload.get(\"amount\", 0)))\n\t\t\tif amount <= 0 or not economy_service.has_account(from_account) or not economy_service.has_account(to_account):\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Ledger Action has invalid accounts or amount.\"}\n\t\t\tif not economy_service.account_allows_negative(from_account) and economy_service.get_balance(from_account) < amount:\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Ledger Action source cannot fund the amount.\"}\n\t\tEventAction.Type.ADD_OR_REMOVE_ITEM:\n\t\t\tvar inventory_id := StringName(action.payload.get(&\"inventory_id\", action.payload.get(\"inventory_id\", \"\")))\n\t\t\tvar item_id := StringName(action.payload.get(&\"item_id\", action.payload.get(\"item_id\", \"\")))\n\t\t\tvar delta := int(action.payload.get(&\"quantity_delta\", action.payload.get(\"quantity_delta\", 0)))\n\t\t\tif inventory_id.is_empty() or item_id.is_empty() or delta == 0:\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Inventory Action requires inventory, item and non-zero delta.\"}\n\t\t\tif delta < 0 and inventory_service.available_quantity(inventory_id, item_id) < -delta:\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Inventory Action stock is unavailable.\"}\n\t\tEventAction.Type.CREATE_TASK:\n\t\t\tif StringName(action.payload.get(&\"task_type\", action.payload.get(\"task_type\", \"\"))).is_empty():\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"CREATE_TASK requires task_type.\"}\n\t\tEventAction.Type.SET_FACILITY_STATE:\n\t\t\tvar facility_id := StringName(action.payload.get(&\"facility_id\", action.payload.get(\"facility_id\", \"\")))\n\t\t\tvar conditions_value: Variant = action.payload.get(&\"conditions\", action.payload.get(\"conditions\", null))\n\t\t\tif not facility_service.has_instance(facility_id) or not conditions_value is Dictionary:\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Facility Action target or conditions are invalid.\"}\n\t\t\tvar defense_owner: StringName = _defense_lock_owner(facility_id, &\"ASSET\")\n\t\t\tif not defense_owner.is_empty() \\\n\t\t\t\t\tand (conditions_value.has(&\"durability\") or conditions_value.has(\"durability\")):\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Event Action cannot mutate Defense-owned Facility durability.\"}\n\t\tEventAction.Type.TELEPORT_ENTITY_FOR_RECOVERY:\n\t\t\tvar entity_id := StringName(action.payload.get(&\"entity_id\", action.payload.get(\"entity_id\", \"\")))\n\t\t\tvar cell_value: Variant = _parse_world_cell(\n\t\t\t\taction.payload.get(&\"cell\", action.payload.get(\"cell\", null))\n\t\t\t)\n\t\t\tif not _event_actor_exists(entity_id) or cell_value == null:\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Recovery teleport target is invalid.\"}\n\t\t\tvar target_cell: Vector3i = cell_value\n\t\t\tvar traffic := path_service.get_cell_traffic(target_cell)\n\t\t\tvar actor_id := (\n\t\t\t\t_guest_path_actor_id(entity_id)\n\t\t\t\tif guest_service.has_guest(entity_id)\n\t\t\t\telse _staff_path_actor_id(entity_id)\n\t\t\t)\n\t\t\tif traffic.is_empty() or bool(traffic.get(&\"temporary_block\", false)) \\\n\t\t\t\t\tor not path_service.has_actor_projection(actor_id):\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Recovery teleport requires a projected actor and an unblocked walkable target.\"}\n\treturn {&\"ok\": true}\n\n"
        },
        "_apply_event_action": {
          "line": 10040,
          "end_line": 10123,
          "sha256": "d79e7aca02eed06f500ffc632c6160cd80d76c3d7c5c90dc097f71b60380d365",
          "body": "func _apply_event_action(action: EventAction, context: Dictionary) -> Dictionary:\n\tvar instance_id := StringName(context.get(&\"event_instance_id\", \"\"))\n\tmatch action.type:\n\t\tEventAction.Type.CREATE_DEFENSE_RAID:\n\t\t\treturn _apply_event_defense_raid(action, context)\n\t\tEventAction.Type.ADD_LEDGER_ENTRY:\n\t\t\tvar from_account := StringName(action.payload.get(&\"from_account\", action.payload.get(\"from_account\", PLAYER_CASH_ACCOUNT)))\n\t\t\tvar to_account := StringName(action.payload.get(&\"to_account\", action.payload.get(\"to_account\", OPERATING_EXPENSE_ACCOUNT)))\n\t\t\tvar amount := int(action.payload.get(&\"amount\", action.payload.get(\"amount\", 0)))\n\t\t\tvar result := economy_service.transfer(\n\t\t\t\tfrom_account, to_account, amount, _runtime_event_minute(),\n\t\t\t\t&\"EVENT_ACTION\", instance_id,\n\t\t\t\tStringName(\"event.action.%s.%s\" % [instance_id, action.action_id])\n\t\t\t)\n\t\t\treturn {&\"ok\": result.is_success(), &\"error\": result.message}\n\t\tEventAction.Type.ADD_OR_REMOVE_ITEM:\n\t\t\tvar inventory_id := StringName(action.payload.get(&\"inventory_id\", action.payload.get(\"inventory_id\", \"\")))\n\t\t\tvar item_id := StringName(action.payload.get(&\"item_id\", action.payload.get(\"item_id\", \"\")))\n\t\t\tvar delta := int(action.payload.get(&\"quantity_delta\", action.payload.get(\"quantity_delta\", 0)))\n\t\t\tif delta > 0:\n\t\t\t\tvar added := inventory_service.add_stack(inventory_id, item_id, delta, 100, -1, _runtime_event_minute())\n\t\t\t\treturn {&\"ok\": bool(added.get(&\"ok\", false)), &\"error\": added.get(&\"message\", \"\")}\n\t\t\tvar reserved := inventory_service.reserve_item(\n\t\t\t\tinventory_id, item_id, -delta, instance_id, &\"event_action\",\n\t\t\t\t_runtime_event_minute(), _runtime_event_minute() + 1,\n\t\t\t\tStringName(\"event.item.reserve.%s.%s\" % [instance_id, action.action_id])\n\t\t\t)\n\t\t\tif not bool(reserved.get(&\"ok\", false)):\n\t\t\t\treturn {&\"ok\": false, &\"error\": reserved.get(&\"message\", \"Item reservation failed.\")}\n\t\t\tvar consumed := inventory_service.consume_reservations(\n\t\t\t\t_name_array(reserved.get(&\"reservation_ids\", [])),\n\t\t\t\tStringName(\"event.item.consume.%s.%s\" % [instance_id, action.action_id]),\n\t\t\t\t_runtime_event_minute()\n\t\t\t)\n\t\t\treturn {&\"ok\": bool(consumed.get(&\"ok\", false)), &\"error\": consumed.get(&\"message\", \"\")}\n\t\tEventAction.Type.CREATE_TASK:\n\t\t\tvar raw_options: Variant = action.payload.get(&\"options\", action.payload.get(\"options\", {}))\n\t\t\tvar options: Dictionary = raw_options.duplicate(true) if raw_options is Dictionary else {}\n\t\t\tvar created := staff_service.create_task(\n\t\t\t\tStringName(action.payload.get(&\"task_type\", action.payload.get(\"task_type\", \"\"))),\n\t\t\t\tint(action.payload.get(&\"priority\", action.payload.get(\"priority\", 50))),\n\t\t\t\t_runtime_event_minute(),\n\t\t\t\toptions,\n\t\t\t\tStringName(action.payload.get(&\"task_id\", action.payload.get(\"task_id\", \"\")))\n\t\t\t)\n\t\t\treturn {&\"ok\": created.is_success(), &\"error\": created.message}\n\t\tEventAction.Type.SET_FACILITY_STATE:\n\t\t\tvar updated := facility_service.set_operational_status(\n\t\t\t\tStringName(action.payload.get(&\"facility_id\", action.payload.get(\"facility_id\", \"\"))),\n\t\t\t\taction.payload.get(&\"conditions\", action.payload.get(\"conditions\", {})),\n\t\t\t\t_runtime_event_minute()\n\t\t\t)\n\t\t\treturn {&\"ok\": updated.is_success(), &\"error\": updated.message}\n\t\tEventAction.Type.TELEPORT_ENTITY_FOR_RECOVERY:\n\t\t\tvar entity_id := StringName(action.payload.get(&\"entity_id\", action.payload.get(\"entity_id\", \"\")))\n\t\t\tvar cell: Vector3i = _parse_world_cell(action.payload.get(&\"cell\", action.payload.get(\"cell\", null)))\n\t\t\tvar guest := guest_service.get_guest(entity_id)\n\t\t\tvar actor_id: StringName\n\t\t\tvar moved := false\n\t\t\tif guest != null:\n\t\t\t\tactor_id = _guest_path_actor_id(entity_id)\n\t\t\t\tmoved = guest_service.record_path_success(\n\t\t\t\t\tentity_id, cell, _runtime_event_minute()\n\t\t\t\t)\n\t\t\telse:\n\t\t\t\tvar staff := staff_service.get_staff(entity_id)\n\t\t\t\tactor_id = _staff_path_actor_id(entity_id)\n\t\t\t\tstaff.current_cell = cell\n\t\t\t\tmoved = true\n\t\t\tif not moved or not path_service.project_actor_position(\n\t\t\t\tactor_id, cell, _runtime_event_minute()\n\t\t\t):\n\t\t\t\treturn {&\"ok\": false, &\"error\": \"Recovery teleport could not commit its Path projection.\"}\n\t\t\t_movement_credits[actor_id] = {\n\t\t\t\t&\"credit\": 0,\n\t\t\t\t&\"updated_at\": _runtime_event_minute(),\n\t\t\t}\n\t\t\t_publish_actor_event(&\"ENTITY_RECOVERY_TELEPORTED\", &\"event_service\", [entity_id, actor_id], {\n\t\t\t\t&\"cell\": cell,\n\t\t\t\t&\"path_actor_id\": actor_id,\n\t\t\t})\n\t\t\treturn {&\"ok\": true}\n\treturn {&\"ok\": false, &\"error\": \"Unsupported Event Action.\"}\n\n"
        },
        "_advance_facilities": {
          "line": 8504,
          "end_line": 8509,
          "sha256": "f1efd0c23bdd60d1ef19a21879640b53b8b4d88844c0c881fe7cd724387ec274",
          "body": "func _advance_facilities(absolute_minute: int) -> void:\n\tif _operations_tick_blocked:\n\t\treturn\n\tfacility_service.advance_one_minute(absolute_minute)\n\tkitchen_production.advance_one_minute(absolute_minute)\n\n"
        },
        "_process_tick_commands": {
          "line": 5765,
          "end_line": 5775,
          "sha256": "9de66a4bb84b12304300d49085f44546412319bd4aee91e67b61becf97e50294",
          "body": "func _process_tick_commands(current_absolute_minute: int) -> void:\n\tif _operations_enabled:\n\t\t_operations_tick_blocked = _operations_should_block_tick()\n\t\tif _operations_tick_blocked:\n\t\t\t_clock.set_paused(true)\n\t\t\t_clock.request_current_tick_abort()\n\t\t\treturn\n\t_process_commands(current_absolute_minute + 1)\n\t_synchronize_operations_population()\n\n\n"
        }
      }
    },
    "scripts/facility/facility_service.gd": {
      "sha256": "ceb4a3e9224587423f273cdb2b56e6843ab176ac1fc4fe79dd498b5ed5c33b77",
      "bytes": 44951,
      "functions": {
        "start_next_service": {
          "line": 449,
          "end_line": 524,
          "sha256": "2eb1cf1226fb1496b6b96c39184ad6a767b4fde747923df599097372435ffa4c",
          "body": "func start_next_service(\n\tinstance_id: StringName,\n\tabsolute_minute: int = -1,\n\tvalidator: Callable = Callable()\n) -> CommandResult:\n\tvar instance := get_instance(instance_id)\n\tif instance == null:\n\t\treturn _not_found(\"Facility instance\", instance_id)\n\tvar minute := _resolve_minute(absolute_minute)\n\t_resolve_operating_dependency(instance_id, minute, {}, {})\n\tinstance.apply_pending_policy(minute)\n\tvar old_state := instance.state\n\tinstance.evaluate_state(minute)\n\t_emit_state_change(instance, old_state)\n\tif not instance.can_start_service(minute):\n\t\treturn _invalid(\n\t\t\t\"Facility cannot start a service in its current state.\",\n\t\t\t{\n\t\t\t\t&\"instance_id\": instance_id,\n\t\t\t\t&\"state\": FacilityInstanceType.State.keys()[instance.state],\n\t\t\t\t&\"reasons\": instance.state_reasons.duplicate(),\n\t\t\t}\n\t\t)\n\t_cleanup_missing_queue_requests(instance)\n\tif instance.queue_entries.is_empty():\n\t\treturn _not_found(\"Queued service request\", &\"\")\n\tvar request := get_request(instance.queue_entries[0])\n\tif request == null:\n\t\treturn _invalid(\"The next queue entry is corrupt.\")\n\tif not instance.can_accept_customers(request.guest_ids):\n\t\treturn _invalid(\"Simultaneous customer limit reached.\", {&\"reason\": &\"CUSTOMER_CAPACITY\"})\n\tvar effective_validator := validator if validator.is_valid() else _start_validator\n\tvar callback_failure := _run_boundary_callback(\n\t\teffective_validator,\n\t\t[request, instance, minute],\n\t\t\"Service start validation failed.\",\n\t\tCommandResultType.Code.VALIDATION_FAILED\n\t)\n\tif callback_failure != null:\n\t\tcallback_failure.details[&\"request_id\"] = request.request_id\n\t\tcallback_failure.details[&\"instance_id\"] = instance_id\n\t\treturn callback_failure\n\n\tvar service_id := _next_service_id()\n\tvar service := ServiceInstanceType.new().configure(\n\t\tservice_id,\n\t\trequest.request_id,\n\t\tinstance_id,\n\t\tminute,\n\t\trequest.service_minutes if request.service_minutes > 0 else instance.base_service_minutes,\n\t\trequest.guest_ids,\n\t\tinstance.active_staff_ids,\n\t\t{\n\t\t\t&\"quality_snapshot\": request.expected_quality,\n\t\t\t&\"price_snapshot\": request.quoted_price,\n\t\t\t&\"policy_snapshot\": request.policy_snapshot,\n\t\t\t&\"inventory_reservations\": request.reserved_inventory_ids,\n\t\t}\n\t)\n\tinstance.queue_entries.remove_at(0)\n\t# Report this start's service index, independent of customer headcount and callbacks.\n\tvar slot := instance.active_services.size()\n\tinstance.active_services[service_id] = service\n\t_known_service_ids[service_id] = true\n\t_increment_stat(instance.statistics_today, &\"services_started\")\n\t_increment_stat(instance.lifetime_statistics, &\"services_started\")\n\tservice_started.emit(service)\n\tlast_error = \"\"\n\treturn _success({\n\t\t&\"instance_id\": instance_id,\n\t\t&\"request_id\": request.request_id,\n\t\t&\"service_id\": service_id,\n\t\t&\"slot\": slot,\n\t})\n\n\n"
        },
        "_fail_service": {
          "line": 933,
          "end_line": 947,
          "sha256": "56f61b255217bddb4c8a6ad3af6ed1f9edc3b6a6e928dacf2105be6698936de5",
          "body": "func _fail_service(\n\tinstance: FacilityInstance,\n\tservice: ServiceInstance,\n\treason: StringName,\n\tabsolute_minute: int\n) -> void:\n\tservice.mark_failed(reason, absolute_minute)\n\tinstance.active_services.erase(service.service_id)\n\t_requests.erase(service.request_id)\n\t_service_history[service.service_id] = service\n\t_increment_stat(instance.statistics_today, &\"services_failed\")\n\t_increment_stat(instance.lifetime_statistics, &\"services_failed\")\n\tservice_failed.emit(service, reason)\n\n\n"
        },
        "set_operational_status": {
          "line": 132,
          "end_line": 177,
          "sha256": "10275169f4a71ad490c432443c34068d1951f099e11132b3c18b48647e7845c8",
          "body": "func set_operational_status(\n\tinstance_id: StringName,\n\tconditions: Dictionary,\n\tabsolute_minute: int = -1\n) -> CommandResult:\n\tvar instance := get_instance(instance_id)\n\tif instance == null:\n\t\treturn _not_found(\"Facility instance\", instance_id)\n\tvar old_state := instance.state\n\tif _has_value(conditions, &\"related_facility_id\"):\n\t\tvar raw_related: Variant = _value(conditions, &\"related_facility_id\", null)\n\t\tif typeof(raw_related) not in [TYPE_STRING, TYPE_STRING_NAME]:\n\t\t\treturn _invalid(\"Related facility must be one facility ID.\")\n\t\tvar related := StringName(raw_related)\n\t\tif related == instance_id or (not related.is_empty() and not has_instance(related)):\n\t\t\treturn _invalid(\"Related facility is missing or refers to itself.\")\n\t\tif instance.requires_operating_kitchen() and not related.is_empty():\n\t\t\tvar kitchen := get_instance(related)\n\t\t\tif kitchen.definition_id != &\"kitchen\" or kitchen.origin.z != WorldService.LAYER_BACK:\n\t\t\t\treturn _invalid(\"Dining facilities require one existing BACK kitchen.\", {&\"reason\": &\"INVALID_RELATED_KITCHEN\"})\n\t\t\tif not _required_related_placement_matches(instance, kitchen):\n\t\t\t\treturn _invalid(\"The BACK kitchen must lie inside this FRONT dining facility's XY footprint.\", {&\"reason\": &\"INVALID_RELATED_KITCHEN_PLACEMENT\"})\n\t\tvar seen := {instance_id: true}\n\t\tvar cursor := related\n\t\twhile not cursor.is_empty() and has_instance(cursor):\n\t\t\tif seen.has(cursor):\n\t\t\t\treturn _invalid(\"Related facilities cannot form a cycle.\")\n\t\t\tseen[cursor] = true\n\t\t\tcursor = get_instance(cursor).related_facility_id\n\tif _has_value(conditions, &\"related_facility_operating\") or _has_value(conditions, &\"operation_state\"):\n\t\treturn _invalid(\"Operating flags are computed from actual facility conditions.\")\n\tif _has_value(conditions, &\"suspension_reason\") and (typeof(_value(conditions, &\"suspension_reason\", null)) not in [TYPE_STRING, TYPE_STRING_NAME] or StringName(_value(conditions, &\"suspension_reason\", &\"\")) not in [&\"DESTROYED\", &\"RAIDED\"]):\n\t\treturn _invalid(\"Suspension recovery is not specified.\")\n\tvar minute := _resolve_minute(absolute_minute)\n\tinstance.set_operational_conditions(conditions, minute)\n\tif old_state != instance.state or _has_value(conditions, &\"related_facility_id\"):\n\t\trefresh_operating_dependencies(minute)\n\t_emit_state_change(instance, old_state)\n\tlast_error = \"\"\n\treturn _success({\n\t\t&\"instance_id\": instance_id,\n\t\t&\"state\": FacilityInstanceType.State.keys()[instance.state],\n\t\t&\"state_reasons\": instance.state_reasons.duplicate(),\n\t})\n\n\n"
        }
      }
    },
    "scripts/facility/facility_instance.gd": {
      "sha256": "0c6aa493f3299611e05dd26aa429dda8cf7b5c479e4d09632036fb862f79a324",
      "bytes": 22815,
      "functions": {
        "can_start_service": {
          "line": 243,
          "end_line": 247,
          "sha256": "39ab5458947ddce7d26129d0174f82dfcec0e87358c058220f61c483f43a9cd5",
          "body": "func can_start_service(absolute_minute: int) -> bool:\n\tevaluate_state(absolute_minute)\n\treturn state in [State.OPEN, State.DEGRADED] and available_slots() > 0\n\n\n"
        },
        "can_accept_customers": {
          "line": 267,
          "end_line": 278,
          "sha256": "3d0984f009ca82b40057c57e0a10a1b68200026843b55a9e63d821064292046f",
          "body": "func can_accept_customers(guest_ids: Array[StringName]) -> bool:\n\tif customer_capacity < 0:\n\t\treturn true\n\tvar customers: Dictionary = {}\n\tfor service: ServiceInstance in active_services.values():\n\t\tfor guest_id: StringName in service.guest_ids:\n\t\t\tcustomers[guest_id] = true\n\tfor guest_id: StringName in guest_ids:\n\t\tcustomers[guest_id] = true\n\treturn customers.size() <= customer_capacity\n\n\n"
        }
      }
    },
    "scripts/facility/service_instance.gd": {
      "sha256": "629a142f80cbc31b97b6d08483d94e029e448969bb6d39fdc8dd39931654dd35",
      "bytes": 7320,
      "functions": {
        "mark_failed": {
          "line": 128,
          "end_line": 134,
          "sha256": "178c6879e64385f0e3ff99fa98ae6ceb4dc67f6c2c981b0effb229f5d4d647fa",
          "body": "func mark_failed(reason: StringName, absolute_minute: int) -> void:\n\tstate = State.FAILED\n\tfailure_reason = reason\n\tcompleted_at = absolute_minute\n\tstaff_grace_deadline = NO_DEADLINE\n\n\n"
        }
      }
    },
    "data/facilities/cafeteria.tres": {
      "sha256": "86d540fe2d78b9dcdbe5a0af6e4a001f4cec54934636ed01deb25a943c79128a",
      "bytes": 867,
      "functions": {},
      "source": "[gd_resource type=\"Resource\" script_class=\"FacilityDefinition\" load_steps=2 format=3]\n\n[ext_resource type=\"Script\" path=\"res://scripts/data/facility_definition.gd\" id=\"1\"]\n\n[resource]\nscript = ExtResource(\"1\")\nid = &\"cafeteria\"\ndisplay_name = \"大衆食堂\"\ndescription = \"低価格で多くの客の食欲を満たす。裏層の厨房から料理を受け取る。\"\nzone = 0\nlayer = 0\nfootprint = Vector2i(4, 2)\nconstruction_cost = {&\"gold\": 800, &\"materials\": 12}\nbuild_minutes = 180\nweight_per_cell = 2\nmaintenance_gold = 4\nmaintenance_mana = 2\nstaff_min = 2\nstaff_max = 4\nrequired_roles = Array[StringName]([&\"cook\", &\"server\", &\"attendant\"])\nprimary_skill = &\"cooking\"\ncapacity = 12\nqueue_capacity = 24\nbase_service_minutes = 45\nbase_quality = 55\nbase_price = 25\ninventory_inputs = {&\"ingredient/basic_meal\": 1}\ntags = Array[StringName]([&\"dining\", &\"social\"])\n"
    }
  }
 }
@@ -0,0 +1,354 @@
 {
  "task_id": "P04-01",
  "status": "submitted-preparation-only",
  "accepted": false,
  "option": "B-no-reuse-adopter",
  "worker_scope": "engine-free bounded harness repair",
  "retained_M": "build/owner-handoff/p04-after-p26-closure-r01/verified-m-engine-free-r45",
  "affected_pure": [
    {
      "name": "pure:series",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
      "sha256": "5779b05505d6c7118f40cff3b8c309211142603d04c69183c3e68e88efaee4a9",
      "baseline_sha256": "5ec725ad77313287f4f86ab30332012e2092caccafde2d91594ddd2013d8f418",
      "unchanged": false,
      "prior_result": {
        "name": "pure:series",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
          "--build",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 9.860904957633466,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_series.log"
      }
    },
    {
      "name": "pure:join",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
      "sha256": "c80cb694fe3b7498f294fb10d7cd08aff9c93623bee442018e120d6b475cc4dd",
      "baseline_sha256": "c80cb694fe3b7498f294fb10d7cd08aff9c93623bee442018e120d6b475cc4dd",
      "unchanged": true,
      "prior_result": {
        "name": "pure:join",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
          "--build",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 19.733827583957464,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_join.log"
      }
    }
  ],
  "reused_pure": [
    {
      "name": "pure:encoder",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_encoder_fixtures.py",
      "sha256": "aa286736657c025cc0c759102969a5fc1fcbae277c06ce4e418a8d4325dec6ac",
      "baseline_sha256": "aa286736657c025cc0c759102969a5fc1fcbae277c06ce4e418a8d4325dec6ac",
      "unchanged": true,
      "prior_result": {
        "name": "pure:encoder",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_encoder_fixtures.py"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.08287249971181154,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_encoder.log"
      }
    },
    {
      "name": "pure:candidate",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
      "sha256": "957a01f3c4ec8d167a10e276d9eb76a56352281aafb4d0a678c6e7c843c71903",
      "baseline_sha256": "957a01f3c4ec8d167a10e276d9eb76a56352281aafb4d0a678c6e7c843c71903",
      "unchanged": true,
      "prior_result": {
        "name": "pure:candidate",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_candidate_fixtures.py",
          "--pure-only"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.06956258416175842,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_candidate.log"
      }
    },
    {
      "name": "pure:negative",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py",
      "sha256": "1fbef5f248ca435c4983c4085023c74d9bf7811c3482dad3805e3bb8ba1846a9",
      "baseline_sha256": "1fbef5f248ca435c4983c4085023c74d9bf7811c3482dad3805e3bb8ba1846a9",
      "unchanged": true,
      "prior_result": {
        "name": "pure:negative",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_negative_fixtures.py"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 34.31273220805451,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_negative-with-build-environment.log",
        "controlled_environment": {
          "BUILD_OUTPUT_DIR": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build",
          "PYTHONDONTWRITEBYTECODE": "1"
        }
      }
    },
    {
      "name": "pure:approval",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_approval_fixtures.py",
      "sha256": "b218ad8fb8aaa9c58ec91c3e917b97307829cb1a3c2f09a2e3e2c856e7fff634",
      "baseline_sha256": "b218ad8fb8aaa9c58ec91c3e917b97307829cb1a3c2f09a2e3e2c856e7fff634",
      "unchanged": true,
      "prior_result": {
        "name": "pure:approval",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_approval_fixtures.py"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.2860210002399981,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_approval.log"
      }
    },
    {
      "name": "pure:applicability",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py",
      "sha256": "f993e0d8f5085f11799f7053de87cda7fc32225473a80a82c0d4d36663fc2235",
      "baseline_sha256": "f993e0d8f5085f11799f7053de87cda7fc32225473a80a82c0d4d36663fc2235",
      "unchanged": true,
      "prior_result": {
        "name": "pure:applicability",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_applicability_fixtures.py"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 21.79465250018984,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_applicability.log"
      }
    },
    {
      "name": "pure:UID",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_uid_controls.py",
      "sha256": "17069b87b98c385e1298152c9c5c2f23c8710b79eb19aef073c64ce215f6c902",
      "baseline_sha256": "17069b87b98c385e1298152c9c5c2f23c8710b79eb19aef073c64ce215f6c902",
      "unchanged": true,
      "prior_result": {
        "name": "pure:UID",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_uid_controls.py",
          "--project-root",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711",
          "--scratch",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/s5-uid-root-controls-r46"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.7516515422612429,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_UID.log"
      }
    },
    {
      "name": "pure:power-adapter",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_power_adapter_controls.py",
      "sha256": "32d71db80994052b905829e6a2da38448ae789825c44570a901e67fe2d07fd33",
      "baseline_sha256": "32d71db80994052b905829e6a2da38448ae789825c44570a901e67fe2d07fd33",
      "unchanged": true,
      "prior_result": {
        "name": "pure:power-adapter",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_power_adapter_controls.py",
          "--fixture-dir",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/owner-handoff/p04-after-p26-closure-r01/q36-writer-contract",
          "--scratch",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/s5-power-controls-r46"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.8173460410907865,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_power-adapter.log"
      }
    },
    {
      "name": "pure:full-suite-negatives",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/full_suite_verifier.py",
      "sha256": "df3768b7755d603fc079e899da8f06ae4ebb529ae531824a30add0f4d6773a6e",
      "baseline_sha256": "df3768b7755d603fc079e899da8f06ae4ebb529ae531824a30add0f4d6773a6e",
      "unchanged": true,
      "prior_result": {
        "name": "pure:full-suite-negatives",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/full_suite_verifier.py",
          "--controls"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.03479995811358094,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_full-suite-negatives.log"
      }
    },
    {
      "name": "pure:wrapper",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_wrapper_fixtures.py",
      "sha256": "1a4daebf46051e975a9cc740660c4672371ea6a9e6cb04cbc1d458ece5f0151d",
      "baseline_sha256": "1a4daebf46051e975a9cc740660c4672371ea6a9e6cb04cbc1d458ece5f0151d",
      "unchanged": true,
      "prior_result": {
        "name": "pure:wrapper",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_wrapper_fixtures.py"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.045466875191777945,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_wrapper.log"
      }
    },
    {
      "name": "pure:guard-mutations",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_order_adapter_controls.py",
      "sha256": "f1f90b9847830c6505a176bf78442e619b1d297c818ec561c92c498a4db74b53",
      "baseline_sha256": "f1f90b9847830c6505a176bf78442e619b1d297c818ec561c92c498a4db74b53",
      "unchanged": true,
      "prior_result": {
        "name": "pure:guard-mutations",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/s5_order_adapter_controls.py",
          "--pure-only"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 1.5057093752548099,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_guard-mutations.log"
      }
    },
    {
      "name": "pure:repair44-new-roster-paid-mutations",
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s5/repair44_controls.py",
      "sha256": "3eeaa1e17b7e27ba00c42be5fba3bbf907a8e82a75e834d7aec6bf62586c3781",
      "baseline_sha256": "3eeaa1e17b7e27ba00c42be5fba3bbf907a8e82a75e834d7aec6bf62586c3781",
      "unchanged": true,
      "prior_result": {
        "name": "pure:repair44-new-roster-paid-mutations",
        "argv": [
          "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
          "-B",
          "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r46-e7f22711/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/repair44_controls.py"
        ],
        "returncode": 0,
        "passed": true,
        "wall_seconds": 0.11979149980470538,
        "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/coordinator-p04-repair30-current-main-r01/q46-pure-plans-logs/pure_repair44-new-roster-paid-mutations.log"
      }
    }
  ],
  "unchanged_series_top_level_functions": {
    "require": "9775a8b3969599d5d1f620d9717824195d7ab69490eafb5e7b8d1bacbf14df85",
    "digest": "b46c442db8153d4caa4e3d7ebb3560f6dc261f2c614ac20722d41b32fb1785fd",
    "unique": "72abe6f619eb97c8d540b8f74ddf0939c11d0c1c786d540a3e23a36a4beded9b",
    "function_bodies": "7b69fa546fdc7a22f1acc531be141ec9627fd0212509f328e910c2401b0e6128",
    "source_body_pins": "c83b75bb2ba1f3728cbc7aa8cb89455cdb7921d6cc02220c15d687f825b52be3",
    "loads": "e35a9b9819e7efaf7e83b0a0b694cb220624888b765856ceb3054c37ee66c612",
    "ordinary": "8b39c612330ac0844e593cb6f806e3fa38adfa53c829641f72082a1aad97295f",
    "checked": "9cf3869795a79d420fda3c15ff21fa6d322d3090135e3687704eb6b33a8652df",
    "variant": "60d89a476b547aaa511bc74525d881f3b35f060d98341165700e37b6b51d7cd6",
    "normalized": "e63426c2f2de5ef8b97c4e12b96273c1ef73ae2961361a75293c09f5654c28d7",
    "persistence_pins": "7fd541bfa754547aed89a0dcb019ac418fd44c7fbbecb65211c2cbcf2072704d",
    "getter_array_headers": "c6f9c21b685fa96ca2d092af294acb7a125a107817c62cd17cd1a0d5fa65a79b",
    "persisted_day_projection": "7c4e84529b2a262a66e12a3833b6c1dec328518e330ebc1cdb96a1ec8378305d",
    "runtime": "d249848c71d3b0cab1d37e4b6b8631f76dab0f4a8f4ae8c7dcf6b9c9bc25d1a0",
    "service_reservations": "79a8d64dddb277fd965c1965b92524df4616843f04900b3f8ba413bce4515f09",
    "sales": "bec5cc78ac364aaa1ac78fd3d5fe099cf22afed188d8ddbd7047a299eb850b9e",
    "s1_pretravel": "f02ee9c5071ceef71aa3ab530f9d3e9b0628b4003782ac28c86721c28b971f01",
    "s1_semantics": "7cc52a4fd173bddf1f0e3f47c1c5266de06202f526195ad2e97b520ff34bc755",
    "settlement": "c2b1a2d54446bb583977ea8fecb9a6577f5de736882a0990deae62cc70e20d38",
    "recall": "31961e7c264046b805be3c0473f9ec2412841fc17e5cce2729ca8b5f32078528",
    "s2a_semantics": "f87f4312d7e4643415e6268a2683cbd4d5967d2c94dd5ff45381fed0db4e6ac5",
    "s2b_semantics": "ccb4cffd5bdbc31e5f0ecfa28e1b98dd527f348a1c341805aa68664fe35bf65f",
    "s3_semantics": "a93e0acd0b67844992ae9dee285230c928d2ca365a628171d1a99e4856832fd7",
    "dependency_closure_diagnostic": "9e352050aa9f23daaaa8cac0d02ff380d5dfb2e4076398906eaa0c5c1fcc5d0f",
    "power_stop": "07d9bcef32320e33c92f1afe7e5be35e1e37a4debe751ebceb1d6279b67868c5",
    "verify_s4_engine": "8f0761a68c3adbbd69a47a3358952bc458d0a885a72ca9e64694ff5c5bc3dbd8",
    "verify_s4_wrapper": "ed7b19fb2f50c9aa30ef34ad355ef7eea884688aaf61aee77583698fffe2b042",
    "verify_s4": "efc8d32132db9e498d20eec6bc36e4cdf56a415439349339cbb20c592276d849",
    "verify_s1": "13cccc10c8758fec02e9b655fd0d97a5139dfe92d65a40ba73f7a514886163ac",
    "verify_s2a": "0a1e24648ccb1432156fd946fc2c797a519cc461af798a7d7395f4a6363b8f6c",
    "paid_series": "47dcd6b17e7e5e80caff6517234ed529d5bc6221efb140ec1c9b78652c81c018",
    "verify_s2b": "5234b429ac310818d2e9163dcb977770670305fa6b4b90b6f07fb282f8de2764",
    "verify_s3": "22800abeda3292013f95241121657e1a5129e71c4731e45c592a642db2ad5794",
    "fresh_bindings": "8021bd1d2d8ac820a574a86c7148bc699514f63dc88f79abca47fcb043641434",
    "verify_fresh_s1": "b6841f48bae307744e434df5bcdd58827acc8d3346f4b81822d07e8ef5ffc4df",
    "verify_fresh_s2a": "b7b7d96b2db9faf45cad377cfb2228247714885bd08d0afe24646e914e1565d4",
    "verify_fresh_s2b": "b693e93f6f3a17223e6f4fde890ad20abb525a25a97bc3d45b80c328ac2d3851",
    "verify_fresh_s3": "e7ab78bce70ba47a0506fda1cb4791a3d7d282c8a57dc674ce1d5b6c63c565bd",
    "verify_fresh_s4": "1be49dd54ed4885e15c577c159f5a0565ef78966774dca9edc71f9f7054e80db",
    "verify_fresh_s5": "f6f58e84346f5e8b674dd60f94712684825a1404832e70704ab9bac23fac7f6d",
    "main": "5f67e808cb4fd765f6809fe8ad06b2518dfd6c13db0c96fa5813330a85891d74"
  },
  "additional_controls": "s4/admission_controls.py",
  "historical_controls": "s4/receipt_lifecycle_fixtures.py (explicit pinned r28 path)",
  "six_check_only": [
    "s1",
    "s2a",
    "s2b",
    "s3",
    "s4",
    "s5"
  ],
  "s4_check_only_admission": "same admission as native, before writing plan",
  "root_sequence": [
    "Freeze final Q/Qt",
    "Affected pure controls",
    "Clean exact-Q S1-S5 six check-only plans",
    "Capacity and PID-end checks",
    "One heavy lease: fresh S1,S2a,S2b,S3,S4 and all ten S5",
    "Reader/adapters on actual raw",
    "Fresh all 15 EV/approved subclauses",
    "Full 184 once",
    "Index",
    "verify-only",
    "Registered p04-acceptance before independent whole-unit Opus review",
    "prepare/exact C/integration/final/Root DB join/ledger/main push"
  ],
  "worker_prohibited": [
    "Git writes",
    "engine/native/full runs",
    "Runner actions",
    "other agents"
  ],
  "old_artifacts": "Q46 historical only; no rewriting or adoption",
  "native_pending": true
 }
@@ -0,0 +1,18 @@
 {
  "provenance": "build/owner-handoff/p04-after-p26-closure-r01/q46-s4-admission-gap/actual-native/s4/execution.json",
  "sha256": "c44550114d47a5332cefead105a039d437802e3e5eae709b9e62d03631dab2d6",
  "verbatim_failure_fields": {
    "passed": false,
    "error": "AssertionError: complete 316-script parse roster",
    "guard_errors": [
      "AssertionError: exact source and planned UID set"
    ],
    "phases": [],
    "actual_captured_PIDs": [],
    "cleanup": [],
    "cleanup_errors": [],
    "whole_goal_accepted": false,
    "unit_accepted": false
  },
  "classification": "Q46 actual failure; not adopted; zero S4 native PIDs and no game verification"
 }
@@ -0,0 +1,44 @@
 {
  "task_id": "P04-01",
  "scope_ok": true,
  "changed_paths": [
    "docs/plans/original-completion-2026-10-02/execution/p04-01/CURRENT_STATUS.md",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/EVIDENCE_COLLECTION.md",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/ORDER_AUDIT.md",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/s2b/S2B_ROOT_RUN.md",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/s3/S3_ROOT_RUN.md",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/S4_ROOT_RUN.md",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/receipt_lifecycle_fixtures.py",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR47_PLAN.json",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR47_Q46_FAILURE_REFERENCE.json",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR47_STATUS.md",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/REPAIR47_VALIDATION.json",
    "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/admission_controls.py"
  ],
  "immutable": [
    {
      "path": "tools/check_p04_order_evidence.py",
      "unchanged": true,
      "sha256": "3bb0cde776bc295f6f18e74f1e23bf3d832d8e4f71aed260601c82d287c655fd"
    },
    {
      "path": "docs/spec/acceptance/P04-01.json",
      "unchanged": true,
      "sha256": "d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f"
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/historical/run_s4_native_r28.py.reference",
      "unchanged": true,
      "sha256": "2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b"
    }
  ],
  "compiled_sources_match_final_bytes": true,
  "git_diff_check": true,
  "engine_launches": 0,
  "git_writes": 0,
  "runner_actions": 0,
  "whole_unit_accepted": false
 }
@@ -0,0 +1,105 @@
 # RUN47 submission — bounded S4 admission repair
 P04-01 remains **unaccepted**. This is the same original 30/88 unit, formal credit
 16, P04 credit 0. No completion, integration or native-success claim is made.
 All edits are under the contracted execution directory. Product code, registered
 spec, checker (including REQUIRED/REACH_REFS), denominator, caps and permissions
 are unchanged. No Git writes, other agents, Runner actions or engine launches.
 ## Changes and count/roster audit
 - `s4/run_s4_native.py`, former line 301: removed current 316-script admission.
  `admission` compares the whole sorted source-derived `.gd` res:// list. It runs
  before check-only writes its plan and again before native writes parse-paths.
  Plans carry the exact list; missing/extra/duplicate/non-.gd/same-count changes fail.
 - Former line 240: removed selected/product 1339/1338 assumptions. Cache admission
  requires the exact current product map, with precisely the checker as its extra;
  the real product/selection difference allows no other input. Existing hashes,
  failed-cache rejection and no-adoption guards remain. Option B uses no cache.
 - `p04_native_series.py`, former lines 73/187/1030: removed literal source counts;
  retained whole source/manifest/input/source_after equalities and pin checks.
  Result count comes from the actual manifest. FreshSeries S4 also calls the
  admission function and compares plan and actual parse-paths.
 - `s4/receipt_lifecycle_fixtures.py`, former lines 81/92: split historical-pinned
  lifecycle from current-derived admission. It now explicitly loads the unchanged,
  hash-pinned r28 wrapper, retaining historical 1338/316 synthetic fixtures. The
  standard runner comes from the supplied retained M copy. Current cases live in
  `s4/admission_controls.py`; another valid derived roster is accepted as well.
 - Remaining 316 in current controls is only the deliberately stale negative and
  the historical AST/receipt fixture. The current wrapper has none. The 329 pin
  diagnoses this supplied M fixture only; production has no fixed roster size.
 - Resolver's 1721 members/71488772 bytes are the immutable historical relocation
  identity, already bound to the fixed manifest hash; retained. S4 phase-cut
  121/132, eleven kernel phases, three slots, four engine phases and case roster
  are scenario/receipt invariants rather than source counts; retained unchanged.
 - `S4_ROOT_RUN.md` now distinguishes the current derived rules from historical
  relocation/count descriptions. Its parse-path receipt row describes the new
  admission. Earlier 1338/316 observations remain historical. S2b/S3 normative
  fixed-product instructions are explicitly superseded. S1/S2 source-count
  observations describe earlier runs, not current admission. ORDER_AUDIT,
  EVIDENCE_COLLECTION, CURRENT_STATUS and REPAIR47_PLAN are synchronized.
 - `checker_series_fixtures.py` uses BUILD for disposable fixtures. No test was
  removed or disabled.
 Before import is attempted (`phase is None`), cleanup requires the complete
 original source inventory with no generated UID. After import is attempted, the
 existing exact planned UID snapshot/seal still applies. Partial/unknown UID sets
 and changed source fail in both branches. The original exception stays in `error`;
 cleanup errors remain separate guards, and the pass predicate still requires a
 sealed import, all four successful phases and owned PID cleanup. Engine identity,
 fixed inputs, default-player protection, source checks and first-failure behavior
 are preserved.
 ## Q46 failure, preserved verbatim
 ```json
 {
  "passed": false,
  "error": "AssertionError: complete 316-script parse roster",
  "guard_errors": ["AssertionError: exact source and planned UID set"],
  "phases": [],
  "actual_captured_PIDs": []
 }
 ```
 No S4 game verification ran. REPAIR47_Q46_FAILURE_REFERENCE.json records the raw
 file hash and verbatim failure fields. The original raw and historical wrapper
 were not modified. Q46 successes elsewhere are reference only, never adopted.
 ## Engine-free verification
 REPAIR47_VALIDATION.json includes commands, exit codes, raw-log hashes and full
 finite outputs. The final current admission program passed 34 controls: actual
 329 scripts, another derived roster, checker-only selection extra, every required
 roster rejection, actual check-only main admission and its six rejected mutations,
 the real FreshSeries roster block, the real cache set guard, historical 316 via
 pinned r28 AST, and pre-import/attempted-import UID/source rejection cases.
 Its check-only unit explicitly stubs historical template and engine identity;
 this is a synthetic control, not a fresh-Q provenance plan or native proof.
 Affected series (62 controls), join (29 controls), and historical lifecycle (six
 cases) passed. Historical lifecycle was finally confirmed against retained M.
 Five changed Python files passed AST and compile checks; bytecode and scratch are
 in allocated BUILD. Initial control-development failures (two absent contract
 paths in the product-only M copy and one synthetic UID owner outside the existing
 plan's allowed selection) are recorded, not treated as passes. Their fixture
 references/owners were corrected; the final finite runs passed.
 REPAIR47_PLAN.json records unchanged hashes against S46 for the eleven unaffected
 pure programs, their prior Q46 results, and unchanged top-level series function
 hashes. Those eleven programs were not rerun. This is reuse of unchanged pure
 checks only, not adoption of native receipts. The affected series/join checks were
 rerun. The checker file is byte-for-byte unchanged (SHA256
 `3bb0cde776bc295f6f18e74f1e23bf3d832d8e4f71aed260601c82d287c655fd`).
 The historical wrapper remains
 `2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b`.
 Spec raw bytes remain unchanged; the existing one-final-LF dispatch identity
 protocol yields the contracted `9ec722e7…` hash (REPAIR43_PRECHECK records it).
 Formal six-series check-only plans were not run by this worker: they require
 Root's clean final Q/provenance. No claim that W check-only passed, or failed only
 because of dirtiness, is made. No native/full/registered acceptance test ran.
 Root must follow the complete option-B sequence in REPAIR47_PLAN.json: freeze Q,
 affected pure, six clean plans, capacity/PID checks, one fresh native batch,
 readers/adapters, fresh all-15/EV/subclauses, full 184 once, index, verify-only,
 registered p04-acceptance before independent Opus review, then normal integration.
@@ -0,0 +1,984 @@
 {
  "results": [
    {
      "name": "admission",
      "argv": [
        "/Applications/Xcode.app/Contents/Developer/usr/bin/python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/admission_controls.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/verified-m-engine-free-r45",
        "--scratch",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r01/admission"
      ],
      "exit_code": 0,
      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r01/admission.log",
      "sha256": "93b3976b5a79fd3c046f07e0f8f0a336e046e77a5bc914e54a255a7461cba182",
      "output": {
        "passed": true,
        "controls": [
          {
            "case": "real-329",
            "result": "pass"
          },
          {
            "case": "another-derived-roster",
            "result": "pass"
          },
          {
            "case": "missing",
            "result": "rejected"
          },
          {
            "case": "extra",
            "result": "rejected"
          },
          {
            "case": "same-count-substitution",
            "result": "rejected"
          },
          {
            "case": "duplicate",
            "result": "rejected"
          },
          {
            "case": "non-gd",
            "result": "rejected"
          },
          {
            "case": "stale-literal-count",
            "result": "rejected"
          },
          {
            "case": "checker-as-product",
            "result": "rejected"
          },
          {
            "case": "missing-product",
            "result": "rejected"
          },
          {
            "case": "extra-selected-input",
            "result": "rejected"
          },
          {
            "case": "real-check-only-shared-admission",
            "result": "pass"
          },
          {
            "case": "check-only-missing",
            "result": "rejected"
          },
          {
            "case": "check-only-extra",
            "result": "rejected"
          },
          {
            "case": "check-only-same-count-substitution",
            "result": "rejected"
          },
          {
            "case": "check-only-duplicate",
            "result": "rejected"
          },
          {
            "case": "check-only-non-gd",
            "result": "rejected"
          },
          {
            "case": "check-only-stale-literal-count",
            "result": "rejected"
          },
          {
            "case": "historical-316-receipt",
            "result": "pass"
          },
          {
            "case": "historical-rejects-current-roster",
            "result": "rejected"
          },
          {
            "case": "pre-import-original-no-uid",
            "result": "pass"
          },
          {
            "case": "pre-import-partial-import",
            "result": "rejected"
          },
          {
            "case": "attempted-import-partial-import",
            "result": "rejected"
          },
          {
            "case": "pre-import-unknown-uid",
            "result": "rejected"
          },
          {
            "case": "attempted-import-unknown-uid",
            "result": "rejected"
          },
          {
            "case": "pre-import-changed-source",
            "result": "rejected"
          },
          {
            "case": "attempted-import-changed-source",
            "result": "rejected"
          }
        ],
        "source_files": 1368,
        "product_files": 1368,
        "scripts": 329,
        "engine_launches": 0,
        "formal_acceptance": false
      }
    },
    {
      "name": "series",
      "argv": [
        "/Applications/Xcode.app/Contents/Developer/usr/bin/python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_series_fixtures.py",
        "--build",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build"
      ],
      "exit_code": 0,
      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r01/series.log",
      "sha256": "33d8711aa6481841088938f4c4b8fc492c71ead6e1419e9558419a329adcf73b",
      "output": {
        "formal_acceptance": false,
        "results": [
          {
            "class": "fresh_roster_and_entrypoints",
            "result": "pass",
            "series": "fresh"
          },
          {
            "class": "small_synthetic_positive",
            "result": "pass",
            "series": "shared"
          },
          {
            "class": "full_body_positive",
            "result": "pass",
            "series": "s1"
          },
          {
            "class": "wrong_source_pin",
            "error": "SHA drift: native /native/body.gd",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "signature_only_pin",
            "error": "full-function-body pin mismatch",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "symlink",
            "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/.series-fixtures-u1xfy7kc/symlink.gd",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "traversal",
            "error": "raw traversal",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "unmapped_original_path",
            "error": "unmapped original path: /native/unknown.gd",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "relocated_manifest_native_mismatch",
            "error": "byte length drift: native /native/body.gd",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "relocated_byte_manifest_mismatch",
            "error": "SHA drift: relocation /native/body.gd",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "JSON_only_getter_substitute",
            "error": "unsupported Variant flags 8827:25959 at 0",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "forged_scalar",
            "error": "SHA drift: p04-s1-native-r02/raw/writer.json",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "changed_raw_byte",
            "error": "SHA drift: p04-s1-native-r02/raw/writer.json",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "formal_member_SHA_drift",
            "error": "SHA drift: p04-s1-native-r02/execution.json",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "unowned_missing_PID_end",
            "error": "missing PID end",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "altered_phase_pair",
            "error": "SHA drift: p04-s1-native-r02/raw/reader-landing-held.var",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "relabeled_interruption_reason",
            "error": "SHA drift: p04-s1-native-r02/raw/writer-landing-depleted.json",
            "result": "rejected",
            "series": "s1"
          },
          {
            "class": "full_body_positive",
            "result": "pass",
            "series": "s2a"
          },
          {
            "class": "wrong_source_pin",
            "error": "SHA drift: native /native/body.gd",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "signature_only_pin",
            "error": "full-function-body pin mismatch",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "symlink",
            "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/.series-fixtures-u1xfy7kc/symlink.gd",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "traversal",
            "error": "raw traversal",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "unmapped_original_path",
            "error": "unmapped original path: /native/unknown.gd",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "relocated_manifest_native_mismatch",
            "error": "byte length drift: native /native/body.gd",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "relocated_byte_manifest_mismatch",
            "error": "SHA drift: relocation /native/body.gd",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "JSON_only_getter_substitute",
            "error": "unsupported Variant flags 8827:25959 at 0",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "forged_scalar",
            "error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "changed_raw_byte",
            "error": "SHA drift: p04-s2a-native-r03/raw/writer.json",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "formal_member_SHA_drift",
            "error": "SHA drift: p04-s2a-native-r03/execution.json",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "unowned_missing_PID_end",
            "error": "missing PID end",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "altered_phase_pair",
            "error": "SHA drift: p04-s2a-native-r03/raw/reader-C3-recall.var",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "relabeled_interruption_reason",
            "error": "SHA drift: p04-s2a-native-r03/raw/writer-C1-midnight.json",
            "result": "rejected",
            "series": "s2a"
          },
          {
            "class": "full_body_positive",
            "result": "pass",
            "series": "s2b"
          },
          {
            "class": "wrong_source_pin",
            "error": "SHA drift: native /native/body.gd",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "signature_only_pin",
            "error": "full-function-body pin mismatch",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "symlink",
            "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/.series-fixtures-u1xfy7kc/symlink.gd",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "traversal",
            "error": "raw traversal",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "unmapped_original_path",
            "error": "unmapped original path: /native/unknown.gd",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "relocated_manifest_native_mismatch",
            "error": "byte length drift: native /native/body.gd",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "relocated_byte_manifest_mismatch",
            "error": "SHA drift: relocation /native/body.gd",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "JSON_only_getter_substitute",
            "error": "unsupported Variant flags 8827:25959 at 0",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "forged_scalar",
            "error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "changed_raw_byte",
            "error": "SHA drift: p04-s2b-native-r02/raw/writer.json",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "formal_member_SHA_drift",
            "error": "SHA drift: p04-s2b-native-r02/execution.json",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "unowned_missing_PID_end",
            "error": "missing PID end",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "altered_phase_pair",
            "error": "SHA drift: p04-s2b-native-r02/raw/reader-night_absent-1080-before-facility.var",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "relabeled_interruption_reason",
            "error": "SHA drift: p04-s2b-native-r02/raw/writer-night_absent-1081.json",
            "result": "rejected",
            "series": "s2b"
          },
          {
            "class": "full_body_positive",
            "result": "pass",
            "series": "s3"
          },
          {
            "class": "wrong_source_pin",
            "error": "SHA drift: native /native/body.gd",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "signature_only_pin",
            "error": "full-function-body pin mismatch",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "symlink",
            "error": "symlink: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/.series-fixtures-u1xfy7kc/symlink.gd",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "traversal",
            "error": "raw traversal",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "unmapped_original_path",
            "error": "unmapped original path: /native/unknown.gd",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "relocated_manifest_native_mismatch",
            "error": "byte length drift: native /native/body.gd",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "relocated_byte_manifest_mismatch",
            "error": "SHA drift: relocation /native/body.gd",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "JSON_only_getter_substitute",
            "error": "unsupported Variant flags 8827:25959 at 0",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "forged_scalar",
            "error": "SHA drift: p04-s3-native-r01/raw/writer.json",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "changed_raw_byte",
            "error": "SHA drift: p04-s3-native-r01/raw/writer.json",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "formal_member_SHA_drift",
            "error": "SHA drift: p04-s3-native-r01/execution.json",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "unowned_missing_PID_end",
            "error": "missing PID end",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "altered_phase_pair",
            "error": "SHA drift: p04-s3-native-r01/raw/reader-B1-phase-960-TIME_BOUNDARIES.var",
            "result": "rejected",
            "series": "s3"
          },
          {
            "class": "relabeled_interruption_reason",
            "error": "SHA drift: p04-s3-native-r01/raw/writer-B1-after.json",
            "result": "rejected",
            "series": "s3"
          }
        ],
        "scope": "file-only Stage R controls; immutable descriptor and primitive negatives"
      }
    },
    {
      "name": "join",
      "argv": [
        "/Applications/Xcode.app/Contents/Developer/usr/bin/python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/checker_join_fixtures.py",
        "--build",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build"
      ],
      "exit_code": 0,
      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r01/join.log",
      "sha256": "6cc0a89527b5e8192f11c0d3d503536aab1ea03db08d2af4f440dd0da9525dc8",
      "output": {
        "scope": "semantic controls only; no new native execution",
        "results": [
          {
            "case": "B1_cannot_supply_power_stop",
            "result": "rejected",
            "error": "power_stop requires S4; B1 is dependency/closure diagnostic only"
          },
          {
            "case": "B1_real_despawn_positive",
            "result": "accepted"
          },
          {
            "case": "dependency_reason_relabelled_as_NO_POWER",
            "result": "rejected",
            "error": "B1 power Runtime facility/service join"
          },
          {
            "case": "B1_missing_at_closure",
            "result": "rejected",
            "error": "B1 real B before/at closure"
          },
          {
            "case": "B1_synthetic_later_guest",
            "result": "rejected",
            "error": "B1 normal despawn after departure"
          },
          {
            "case": "B1_wrong_release_minute",
            "result": "rejected",
            "error": "B1 immutable reservation join"
          },
          {
            "case": "B1_changed_wallet",
            "result": "rejected",
            "error": "B1 B wallet/no economy charge"
          },
          {
            "case": "B1_missing_departure_history",
            "result": "rejected",
            "error": "B1 persisted departure join"
          },
          {
            "case": "R2_real_first_1080_positive",
            "result": "accepted"
          },
          {
            "case": "R2_paid_midnight_substitution",
            "result": "rejected",
            "error": "shift raw service join"
          },
          {
            "case": "R2_wrong_transaction",
            "result": "rejected",
            "error": "native receipt transaction"
          },
          {
            "case": "R2_missing_DAY2",
            "result": "rejected",
            "error": "shift DAY2 before/after handover"
          },
          {
            "case": "R2_after_staff_still_present",
            "result": "rejected",
            "error": "shift DAY2 before/after handover"
          },
          {
            "case": "R2_next_extra_receipt",
            "result": "rejected",
            "error": "native duplicate/empty receipt"
          },
          {
            "case": "R2_dynamic_PID_and_transaction_positive",
            "result": "accepted"
          },
          {
            "case": "R2_wrong_PID_join",
            "result": "rejected",
            "error": "native PID chain"
          },
          {
            "case": "S1_pre_travel_mismatch",
            "result": "rejected",
            "error": "S1 pre-travel staff cell/task/raw reservation join"
          },
          {
            "case": "S1_no_actual_outage",
            "result": "rejected",
            "error": "S1 actual reserve exhaustion/tick"
          },
          {
            "case": "historical_receipt_checked_against_current_wrapper",
            "result": "rejected",
            "error": "S4 historical pin in fresh receipt"
          },
          {
            "case": "current_wrapper_used_as_historical_receipt",
            "result": "rejected",
            "error": "S4 historical receipt wrapper pin"
          },
          {
            "case": "fresh_receipt_carrying_historical_pin",
            "result": "rejected",
            "error": "S4 historical pin in fresh receipt"
          },
          {
            "case": "tampered_historical_pinned_copy",
            "result": "rejected",
            "error": "S4 tampered historical wrapper pin"
          },
          {
            "case": "S4_real_NO_POWER_positive",
            "result": "accepted"
          },
          {
            "case": "S4_related_facility_operating_false",
            "result": "rejected",
            "error": "S4 related facility must remain operating/powered"
          },
          {
            "case": "S4_kitchen_unpowered",
            "result": "rejected",
            "error": "S4 related facility must remain operating/powered"
          },
          {
            "case": "S4_closure_confound",
            "result": "rejected",
            "error": "S4 closure/damage/shift confound"
          },
          {
            "case": "S4_no_actual_outage",
            "result": "rejected",
            "error": "S4 actual NO_POWER path, not relabelled dependency"
          },
          {
            "case": "S4_wrong_transaction_join",
            "result": "rejected",
            "error": "S4 transaction/service join"
          },
          {
            "case": "S4_dynamic_service_and_sale_positive",
            "result": "accepted"
          }
        ]
      }
    },
    {
      "name": "historical-lifecycle",
      "argv": [
        "/Applications/Xcode.app/Contents/Developer/usr/bin/python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/receipt_lifecycle_fixtures.py"
      ],
      "exit_code": 0,
      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r01/historical-lifecycle.log",
      "sha256": "e2bc93824d2152de4aac320d5fbf0fd7497c09cb07d61c630abc299d15d785cb",
      "output": {
        "results": [
          {
            "case": "success",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "parse",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "cleanup",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "setup",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "output",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "identity-write",
            "passed": true,
            "native_engine_launches": 0
          }
        ],
        "formal_acceptance": false
      }
    },
    {
      "name": "final-admission",
      "argv": [
        "/Applications/Xcode.app/Contents/Developer/usr/bin/python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/admission_controls.py",
        "--project-root",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/verified-m-engine-free-r45",
        "--scratch",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r02/admission"
      ],
      "exit_code": 0,
      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r02/admission.log",
      "sha256": "1644a127dd89fc318e348dddc43e347b10e88e36b202328a6292b8d76ea66865",
      "output": {
        "passed": true,
        "controls": [
          {
            "case": "real-329",
            "result": "pass"
          },
          {
            "case": "selected-checker-only-extra",
            "result": "pass"
          },
          {
            "case": "another-derived-roster",
            "result": "pass"
          },
          {
            "case": "missing",
            "result": "rejected"
          },
          {
            "case": "extra",
            "result": "rejected"
          },
          {
            "case": "same-count-substitution",
            "result": "rejected"
          },
          {
            "case": "duplicate",
            "result": "rejected"
          },
          {
            "case": "non-gd",
            "result": "rejected"
          },
          {
            "case": "stale-literal-count",
            "result": "rejected"
          },
          {
            "case": "checker-as-product",
            "result": "rejected"
          },
          {
            "case": "missing-product",
            "result": "rejected"
          },
          {
            "case": "extra-selected-input",
            "result": "rejected"
          },
          {
            "case": "real-check-only-shared-admission",
            "result": "pass"
          },
          {
            "case": "check-only-missing",
            "result": "rejected"
          },
          {
            "case": "check-only-extra",
            "result": "rejected"
          },
          {
            "case": "check-only-same-count-substitution",
            "result": "rejected"
          },
          {
            "case": "check-only-duplicate",
            "result": "rejected"
          },
          {
            "case": "check-only-non-gd",
            "result": "rejected"
          },
          {
            "case": "check-only-stale-literal-count",
            "result": "rejected"
          },
          {
            "case": "FreshSeries-exact-roster",
            "result": "pass"
          },
          {
            "case": "FreshSeries-actual-substitution",
            "result": "rejected"
          },
          {
            "case": "FreshSeries-plan-substitution",
            "result": "rejected"
          },
          {
            "case": "cache-exact-product-plus-checker",
            "result": "pass"
          },
          {
            "case": "cache-missing-checker",
            "result": "rejected"
          },
          {
            "case": "cache-same-count-substitution",
            "result": "rejected"
          },
          {
            "case": "historical-316-receipt",
            "result": "pass"
          },
          {
            "case": "historical-rejects-current-roster",
            "result": "rejected"
          },
          {
            "case": "pre-import-original-no-uid",
            "result": "pass"
          },
          {
            "case": "pre-import-partial-import",
            "result": "rejected"
          },
          {
            "case": "attempted-import-partial-import",
            "result": "rejected"
          },
          {
            "case": "pre-import-unknown-uid",
            "result": "rejected"
          },
          {
            "case": "attempted-import-unknown-uid",
            "result": "rejected"
          },
          {
            "case": "pre-import-changed-source",
            "result": "rejected"
          },
          {
            "case": "attempted-import-changed-source",
            "result": "rejected"
          }
        ],
        "source_files": 1368,
        "product_files": 1368,
        "scripts": 329,
        "engine_launches": 0,
        "formal_acceptance": false
      }
    },
    {
      "name": "final-historical-lifecycle-retained-M",
      "argv": [
        "/Applications/Xcode.app/Contents/Developer/usr/bin/python3",
        "-B",
        "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/receipt_lifecycle_fixtures.py"
      ],
      "exit_code": 0,
      "log": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/repair47-finite-validation-r03/historical-lifecycle.log",
      "sha256": "e2bc93824d2152de4aac320d5fbf0fd7497c09cb07d61c630abc299d15d785cb",
      "output": {
        "results": [
          {
            "case": "success",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "parse",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "cleanup",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "setup",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "output",
            "passed": true,
            "native_engine_launches": 0
          },
          {
            "case": "identity-write",
            "passed": true,
            "native_engine_launches": 0
          }
        ],
        "formal_acceptance": false
      }
    }
  ],
  "compile": [
    {
      "path": "p04_native_series.py",
      "sha256": "4d8fd60f209a6827eadfa2bf036deee8bf88aa0dbaa89f366e71b8ae46adf594",
      "ast": true,
      "compile": true
    },
    {
      "path": "checker_series_fixtures.py",
      "sha256": "5779b05505d6c7118f40cff3b8c309211142603d04c69183c3e68e88efaee4a9",
      "ast": true,
      "compile": true
    },
    {
      "path": "s4/run_s4_native.py",
      "sha256": "628a7aa8108a6b41a2ddc9139cbca21bec8723f0ce9829df67b8bb52f6a38203",
      "ast": true,
      "compile": true
    },
    {
      "path": "s4/receipt_lifecycle_fixtures.py",
      "sha256": "3c0331c190874ed602ef845eff62c2bf52a8178542067e5d104d3a7d8aa61b88",
      "ast": true,
      "compile": true
    },
    {
      "path": "s4/admission_controls.py",
      "sha256": "96b3545d741c0495eb20b2a4786c9ce67ce5721229535dc2dae3214bf27b6b76",
      "ast": true,
      "compile": true
    }
  ],
  "native_launches": 0,
  "formal_acceptance": false,
  "development_control_failures": [
    {
      "scratch": "repair47-admission-controls-r01",
      "error": "ValueError: missing exact input: retained M tools/completion_marker_contracts.json"
    },
    {
      "scratch": "repair47-admission-controls-r02",
      "error": "ValueError: missing exact input: retained M docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json"
    },
    {
      "scratch": "repair47-admission-controls-r03",
      "error": "AssertionError: len(plan) >= 2; synthetic owner paths outside existing UID-plan selection"
    }
  ],
  "formal_six_check_only": "not run by worker: exact clean final Q and provenance are Root responsibility; synthetic S4 main control is explicitly stubbed, not a fresh-Q plan",
  "retained_M": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/build/owner-handoff/p04-after-p26-closure-r01/verified-m-engine-free-r45",
  "unchanged_proof_reuse": "REPAIR47_PLAN.json: 11 program hashes and unchanged top-level series function hashes; no native evidence adoption"
 }
@@ -0,0 +1,14 @@
 Traceback (most recent call last):
  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/build_p04_index.py", line 159, in <module>
    main()
  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/build_p04_index.py", line 141, in main
    index = payload(args.build, gate)
            ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/build_p04_index.py", line 37, in payload
    raw = gate.combine_native_series(build, c)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/tools/check_p04_order_evidence.py", line 1150, in combine_native_series
    require({k: v for k, v in recorded.items() if k != 'verifier_sha256'} == actual, 'fresh raw recomputation drift')
  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/tools/check_p04_order_evidence.py", line 97, in require
    raise ValueError(message)
 ValueError: fresh raw recomputation drift
@@ -0,0 +1,53 @@
 {
  "S": "2cd734062a2226b5006bbecf96e6024a26982665",
  "checker_sha256": "3bb0cde776bc295f6f18e74f1e23bf3d832d8e4f71aed260601c82d287c655fd",
  "actual_function": "supplied_file",
  "source_call_site": "build_p04_index.payload lines 50-55 calls descriptor of actual runner fixed paths then supplied_file on all those paths",
  "scope": "narrow pure actual material admission only; NOT complete checker/index or engine execution",
  "rows": [
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/p04_s4_power_probe.gd",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/p04_s4_power_probe.gd"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/run_s4_native.py"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/S4_ROOT_RUN.md",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/S4_ROOT_RUN.md"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/tests/transport/test_runtime_transport.gd",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/tests/transport/test_runtime_transport.gd"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/tests/staff/test_rescue_elevator.gd",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/tests/staff/test_rescue_elevator.gd"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-root-q-r47-2cd73406/docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py"
    },
    {
      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/p04_s4_power_probe.gd",
      "admitted": false,
      "error": "unsupplied external material: /Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-fresh-context-r47/docs/plans/original-completion-2026-10-02/execution/p04-01/s4/p04_s4_power_probe.gd"
    }
  ],
  "rejected": 8,
  "full184_status": "still running; retain without restarting",
  "formal_acceptance": false,
  "at_unix_ns": 1792318056557763000
 }
@@ -0,0 +1,88 @@
 {
  "task_id": "P04-01",
  "kind": "static inspection only; no tests executed",
  "syntax": [
    "build_p04_index.py",
    "p04_native_series.py",
    "full_suite_verifier.py",
    "collect_p04_native.py",
    "s5/s5_order_adapter.py",
    "s5/s5_power_adapter.py",
    "repair48_transport_controls.py",
    "repair48_identity_controls.py"
  ],
  "source_sha256": {
    "build_p04_index.py": "35b1b35f94e64f0f8c93ad5de17b35a16c2a81ca802691ba77251ad4256ca515",
    "p04_native_series.py": "c33f8abb7f4ad143f75a1b761447a84afddb2dd0ac67b782e4cf9a8a67b67e4a",
    "full_suite_verifier.py": "779ab0c0b5be31dcee462f04cbd6b765d44f9bef95fb52b03d3b676ec9f80c9c",
    "collect_p04_native.py": "70a12149c770ef4dca97d3d5aa0b59270cf1547efde79ee7346ba340e1bebca6",
    "s5/s5_order_adapter.py": "91344410b3441049fbce316cef9c227c9355747ae56890b45fcf348dac401d7e",
    "s5/s5_power_adapter.py": "41d33e8d6b4e986611bdf7a0eedbde3f0b92f724ea37d3b2502ba4965a298462",
    "repair48_transport_controls.py": "b2df097bc20bde89a7a738d4c1fe855bfa0bd1ac82a12936aa2b106980685628",
    "repair48_identity_controls.py": "1c4f81e13715a2ab4b73b633265d3279772a3a8a90115e78098f0ecbd895d9ef"
  },
  "engine_runs": 0,
  "git_writes": 0,
  "runner_actions": 0,
  "immutable": [
    {
      "path": "tools/check_p04_order_evidence.py",
      "sha256": "3bb0cde776bc295f6f18e74f1e23bf3d832d8e4f71aed260601c82d287c655fd",
      "matches_repair47_record": true
    },
    {
      "path": "docs/spec/acceptance/P04-01.json",
      "sha256": "d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f",
      "matches_repair47_record": true
    },
    {
      "path": "docs/plans/original-completion-2026-10-02/execution/p04-01/s4/historical/run_s4_native_r28.py.reference",
      "sha256": "2d3be39d2b310abac058e27336ac816c234043a0a1dd7b2c52d84994907dd31b",
      "matches_repair47_record": true
    }
  ],
  "historical_failure_copies": [
    {
      "name": "ROOT_Q47_ACTUAL_INDEX_GENERATION.log",
      "byte_identical": true,
      "sha256": "0250e523aeeecde5d81d298e30cd7e4e18a5415ac4e762401697256be6d514f9"
    },
    {
      "name": "ROOT_Q47_ACTUAL_MATERIAL_ADMISSION_FAILURE.json",
      "byte_identical": true,
      "sha256": "a86b93150c33620854938c040f57db49e5627171f8f0633b399c527b7c08ec55"
    }
  ],
  "status": "blocked",
  "specification_version_gap": {
    "contract_sha256": "9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881",
    "actual_sha256": "d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f",
    "specification_modified": false
  },
  "tests_executed": [],
  "historical_test_results_reused": [],
  "changed_source_files": [
    "build_p04_index.py",
    "p04_native_series.py",
    "full_suite_verifier.py",
    "collect_p04_native.py",
    "s5/s5_order_adapter.py",
    "s5/s5_power_adapter.py",
    "repair48_transport_controls.py",
    "repair48_identity_controls.py"
  ],
  "changed_documentation": [
    "REPAIR48_STATUS.md",
    "REPAIR48_STATIC_INSPECTION.json",
    "REPAIR48_HISTORICAL_ROOT_Q47_ACTUAL_INDEX_GENERATION.log",
    "REPAIR48_HISTORICAL_ROOT_Q47_ACTUAL_MATERIAL_ADMISSION_FAILURE.json",
    "ORDER_AUDIT.md",
    "CURRENT_STATUS.md",
    "s1/S1_ROOT_RUN.md",
    "s2/S2_ROOT_RUN.md",
    "s2b/S2B_ROOT_RUN.md",
    "s3/S3_ROOT_RUN.md",
    "s4/S4_ROOT_RUN.md",
    "s5/S5_ROOT_RUN.md"
  ]
 }
@@ -0,0 +1,160 @@
 ## REPAIR49 current correction
 Source-ready only; original 30/88, formal 16, P04=0, no partial credit.
 REPAIR48's specification-mismatch blocker below is historical and corrected:
 the immutable 7000-byte original has SHA256
 d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f;
 removing its single EOF LF gives
 9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881.
 This is the existing Git/Runner strip/checker one-EOF-LF pin contract.
 No specification, approval or normalization change. Older contradictory wording
 below is superseded history, including blanket full-reuse prohibitions and
 all-controls-unexecuted wording. Q47 admission/index failures remain failures.
 See REPAIR49_STATUS.md for closure audit and verbatim complete_B FileNotFoundError.
 Root handoff reports payload(B), all53, series/join/power PASS; order-typed remains
 UNDETERMINED. Worker did not rerun them. Corrected complete_B remains unexecuted.
 Old native/full successes confer no new-S acceptance or credit.
 # REPAIR48 implementation status
 BLOCKED on exact specification-version context; source changes are retained for
 review. No acceptance or new credit is claimed.
 Original scope remains 30/88; formal credit is 16; P04 credit is 0.
 Engine runs, Git writes, Runner actions and delegation are prohibited.
 The supplied task contract declares spec_sha256
 `9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881`.
 The actual immutable docs/spec/acceptance/P04-01.json hashes to
 `d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f`.
 That local hash agrees with REPAIR47_STATIC_CHECKS.json. This worker has not
 changed the specification or selected a replacement authority. Root must resolve
 which exact specification bytes govern the retained repair before gate use.
 This is an exact-version context gap, not a proposed acceptance change.
 ## Current changes
 `build_p04_index.py` separates exclusive generation (`relocate_materials`) from
 read-only `payload`. The exact output is resolved B/p04-evidence, with no existing
 output, traversal or parent symlinks. Fixed pins plus QA are checked for exact
 duplicates and conflicting identities, including across series. Copies are
 content-addressed under the first referencing series, created exclusively, and
 rehashed. Exact (original path, bytes, SHA) identities share one copy across all
 series; different original paths are never silently merged. RELOCATION.json
 keeps original pin paths as keys. Raw inputs are never rewritten. Every payload
 call checks map membership, declared relative form, hashes, unmapped files and
 exactly one wrapper candidate. Materials and wrapper descriptors are relative;
 the relocation-map SHA is included in the index. The obsolete absolute material
 admission pre-check is removed. Main relocates, derives, checks refs and roles,
 then writes index and the separate invocation receipt. Failure leaves a failed
 output attempt without a usable index; an existing output cannot be resumed.
 S5 dependency identity uses the package-relative power, series and guard module
 paths. Each module is read once and those same bytes are compiled and executed,
 without cached bytecode. Symlinks, outside dependencies and mismatched mappings
 are rejected. The roster is checked against the modules loaded. Dependency maps
 are checked against the executed roster before deriving facts. Absolute observed
 paths and checkout are retained in collection/dependency-invocation.json, outside
 the compared s5.json and the collection manifest's series mapping. The adapter's
 own observed path and executed-byte SHA are also retained there.
 ## Static path audit
 | Value | Result and required context |
 | --- | --- |
 | fixed pins and QA | Source placement is free-form. Generation reads original pinned paths; verification admits relocated relative copies under B/p04-evidence. |
 | wrapper | Exactly one distinct original pin path must match wrapper_sha256; descriptor uses that relocated copy. |
 | runner-input row | Absolute path is constructed from the current B and the registered series run. supplied_file admits each registered run root. No earlier Root B is embedded by the builder. |
 | C references | Constructed under current B/audit-support/native-first-current, one of supplied_file's fixed roots. |
 | native_bundle | Same fixed native-first-current root under the supplied B. |
 | authorities | ROOT-relative source paths, resolved against the invocation's gate.ROOT. |
 | native and full raw references | Relative to each retained run/B, with original provenance retained. No analysis checkout is used as a payload identity. |
 | S1–S4 / verify_fresh_* | Shared implementations in p04_native_series.py; no separate checkout-keyed dependency maps. Current metadata modules are found via __file__; that path is not returned as a fresh fact. Fresh wrapper loading now executes source bytes directly. |
 | S5 adapters | Checkout-keyed dependency map corrected. Raw hash keys refer to the immutable raw input, not the analysis checkout. Explicit raw root is resolved before writer/reader references are formed. |
 | readers | Independent Reader data is validated from raw run-relative references and recorded original provenance. bulk_reader_equivalence.py is a fixture using explicit scratch checkouts, not a production payload producer. |
 | full_suite_verifier | Explicit Q root and retained run are inputs. Its reference map uses run-relative names. Metadata module loading now executes source bytes directly. |
 | scratch_fixture_adapter | Explicit scratch routing only; no production compared payload. |
 Transport does not make the entire B portable by itself. FreshSeries still
 requires original Q source paths/project_root, the retained stage/formal copies,
 and the exact engine file for identity reads (no engine launch). full-suite
 verification also reads its recorded actual Q. If a later invocation changes B,
 the registry/run hierarchy and these original-source contexts must still be
 supplied. Missing context is a blocker; do not rewrite raw pins or the checker
 to conceal it. Static supplied_file inspection found no additional absolute
 descriptor admission gap in the builder's rows above. Runtime admission has
 not been claimed.
 ## Historical failures and successes
 The Q47 material admission failure is preserved verbatim in
 REPAIR48_HISTORICAL_ROOT_Q47_ACTUAL_MATERIAL_ADMISSION_FAILURE.json.
 All eight recorded attempts failed with their original `unsupplied external
 material: ...` messages. The index generation traceback is preserved verbatim
 in REPAIR48_HISTORICAL_ROOT_Q47_ACTUAL_INDEX_GENERATION.log, ending:
 ```text
 ValueError: fresh raw recomputation drift
 ```
 These are failures, not passing receipts. Original raw and historical receipts
 remain unchanged. Their retained source is
 build/owner-handoff/p04-after-p26-closure-r01/repair48-final-index-transport.
 Root actually staged the S47 context under p04-fresh-context-r47, deviating from
 the fixed p04-fresh-context name in the pre-REPAIR48 S5_ROOT_RUN.md line 167.
 The old direction is retained as history. Material placement is now free-form
 for builder relocation; no historical receipt is renamed or adopted.
 Q47 native successes and the historical full 184 result (21903 checks, zero
 reported failures, 329 parse paths, 186 ended PIDs, no guard/cleanup failures)
 remain historical only. They are not C and cannot be reused under the new S.
 The immutable checker still binds M/S/Q_tree; no adopter is introduced.
 ## Verification handoff
 The worker performed syntax parsing and static source/path inspection only.
 Per the final worker instruction that tests are formally executed by Runner,
 no pure control, check-only plan, registered checker or engine was executed.
 No result is inferred from a historical test count. No unaffected pure result
 is reused without a complete code/dependency SHA proof; none is claimed here.
 Runner controls added:
 - repair48_transport_controls.py --retained <retained repair48-final-index-transport>
  checks the real immutable S47 inputs/copies, r47 context and out-of-B Q pins,
  relocation repeatability, duplicate/conflict rules, material adversaries,
  wrapper failures, and the actual checker's old-S/new-S binding rejection
  using simulated Git observations without Git writes.
 - repair48_identity_controls.py --raw <retained S5 raw> --writer-sha <pin>
  --reader-sha <pin> --build <complete retained relocated B> checks independent
  same-byte complete analysis directories (S5 results and builder payload),
  dependency mutations and mappings, symlinks,
  outside paths, two read-only payload calls and unchanged B tree, index drift,
  and external absolute descriptor rejection. The optional B section must be
  supplied for the complete control, not omitted as an implicit pass.
 All these controls remain UNEXECUTED. Required affected existing controls and
 fresh check-only S1/S2a/S2b/S3/S4/S5 plans also remain Runner work. A dirty-only
 failure has not been observed and is not invented. Source-ready is not a gate
 pass. Runner must verify full negative coverage, including exclusive output,
 pin-SHA mismatch and ambiguous wrapper bindings, before the native lease.
 ## Normal-gate material roster and Root order
 Supply the exact B with native-first-current, historical relocation inputs,
 fresh-run registry, every fresh run's runner-input/ended/source/UID/formal/raw
 and lifecycle receipts, the exact recorded Q source and engine identity context;
 B/p04-evidence/runner-materials with all pin copies and RELOCATION.json;
 the matching fresh collection including MANIFEST and separate dependency
 invocation record; and the matching full 184 run and its binding/raw receipts.
 The final index and generation-invocation receipt belong to this same attempt.
 Required original authorities and sources must exist in the frozen checkout.
 Root's next order is unchanged: freeze new Q; affected pure controls; clean
 exact-Q check-only; capacity/PID-end checks; one heavy native lease for
 S1/S2a/S2b/S3/S4 and all ten S5 cases; readers/adapters; collect 15 EV and all
 subclauses; full 184 once; index generation with relocation; registered
 p04-acceptance once (no duplicate Root --verify-only); separate Opus whole-unit
 review; normal prepare/C/integration/final/Root DB join/ledger/main push.
 Only whole-unit acceptance can grant credit.
@@ -0,0 +1,41 @@
 {
  "before": {
    "build_p04_index.py": "35b1b35f94e64f0f8c93ad5de17b35a16c2a81ca802691ba77251ad4256ca515",
    "p04_native_series.py": "c33f8abb7f4ad143f75a1b761447a84afddb2dd0ac67b782e4cf9a8a67b67e4a",
    "full_suite_verifier.py": "779ab0c0b5be31dcee462f04cbd6b765d44f9bef95fb52b03d3b676ec9f80c9c",
    "collect_p04_native.py": "70a12149c770ef4dca97d3d5aa0b59270cf1547efde79ee7346ba340e1bebca6",
    "s5/s5_order_adapter.py": "91344410b3441049fbce316cef9c227c9355747ae56890b45fcf348dac401d7e",
    "s5/s5_power_adapter.py": "41d33e8d6b4e986611bdf7a0eedbde3f0b92f724ea37d3b2502ba4965a298462",
    "s5/s5_guard_oracle.py": "b58ee46f5c8a82de796bffd88ff8cab89f1f9e7e5c9417414310a1b649dc6c1c",
    "s5/s5_order_adapter_controls.py": "f1f90b9847830c6505a176bf78442e619b1d297c818ec561c92c498a4db74b53",
    "s5/s5_power_adapter_controls.py": "32d71db80994052b905829e6a2da38448ae789825c44570a901e67fe2d07fd33"
  },
  "root_expected": {
    "build_p04_index.py": "35b1b35f94e64f0f8c93ad5de17b35a16c2a81ca802691ba77251ad4256ca515",
    "p04_native_series.py": "c33f8abb7f4ad143f75a1b761447a84afddb2dd0ac67b782e4cf9a8a67b67e4a",
    "full_suite_verifier.py": "779ab0c0b5be31dcee462f04cbd6b765d44f9bef95fb52b03d3b676ec9f80c9c",
    "collect_p04_native.py": "70a12149c770ef4dca97d3d5aa0b59270cf1547efde79ee7346ba340e1bebca6",
    "s5/s5_order_adapter.py": "91344410b3441049fbce316cef9c227c9355747ae56890b45fcf348dac401d7e",
    "s5/s5_power_adapter.py": "41d33e8d6b4e986611bdf7a0eedbde3f0b92f724ea37d3b2502ba4965a298462",
    "s5/s5_guard_oracle.py": "b58ee46f5c8a82de796bffd88ff8cab89f1f9e7e5c9417414310a1b649dc6c1c",
    "s5/s5_order_adapter_controls.py": "f1f90b9847830c6505a176bf78442e619b1d297c818ec561c92c498a4db74b53",
    "s5/s5_power_adapter_controls.py": "32d71db80994052b905829e6a2da38448ae789825c44570a901e67fe2d07fd33"
  },
  "after": {
    "build_p04_index.py": "35b1b35f94e64f0f8c93ad5de17b35a16c2a81ca802691ba77251ad4256ca515",
    "p04_native_series.py": "c33f8abb7f4ad143f75a1b761447a84afddb2dd0ac67b782e4cf9a8a67b67e4a",
    "full_suite_verifier.py": "779ab0c0b5be31dcee462f04cbd6b765d44f9bef95fb52b03d3b676ec9f80c9c",
    "collect_p04_native.py": "70a12149c770ef4dca97d3d5aa0b59270cf1547efde79ee7346ba340e1bebca6",
    "s5/s5_order_adapter.py": "91344410b3441049fbce316cef9c227c9355747ae56890b45fcf348dac401d7e",
    "s5/s5_power_adapter.py": "41d33e8d6b4e986611bdf7a0eedbde3f0b92f724ea37d3b2502ba4965a298462",
    "s5/s5_guard_oracle.py": "b58ee46f5c8a82de796bffd88ff8cab89f1f9e7e5c9417414310a1b649dc6c1c",
    "s5/s5_order_adapter_controls.py": "f1f90b9847830c6505a176bf78442e619b1d297c818ec561c92c498a4db74b53",
    "s5/s5_power_adapter_controls.py": "32d71db80994052b905829e6a2da38448ae789825c44570a901e67fe2d07fd33"
  },
  "unchanged": true,
  "parse": "pass",
  "tests_run": false,
  "additional_protected": {
    "s5/run_s5_native.py": "28d54f061a9a07ee7ab12e043170ae43760bb686354b1c682166e82d04ec35b3"
  }
 }
@@ -0,0 +1,225 @@
 ## REPAIR49 current correction
 Source-ready only; original 30/88, formal 16, P04=0, no partial credit.
 REPAIR48's specification-mismatch blocker below is historical and corrected:
 the immutable 7000-byte original has SHA256
 d28aadb044633f7d804de5a92c8d4c4a7438dfbf44c3243dca978951f4def25f;
 removing its single EOF LF gives
 9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881.
 This is the existing Git/Runner strip/checker one-EOF-LF pin contract.
 No specification, approval or normalization change. Older contradictory wording
 below is superseded history, including blanket full-reuse prohibitions and
 all-controls-unexecuted wording. Q47 admission/index failures remain failures.
 See REPAIR49_STATUS.md for closure audit and verbatim complete_B FileNotFoundError.
 Root handoff reports payload(B), all53, series/join/power PASS; order-typed remains
 UNDETERMINED. Worker did not rerun them. Corrected complete_B remains unexecuted.
 Old native/full successes confer no new-S acceptance or credit.
 ## REPAIR49 full184 conditional reuse candidate — all conditions UNVERIFIED
 Native reuse is forbidden: all six series require fresh M/S/Q_tree provenance
 (p04_native_series.py:1287; checker:370). Full uses the existing separate binding
 (checker:1175-1186); no adopter or checker change is authorized.
 The following are requirements, not results or approval:
 1. New S5 source_before must equal old full selected_source_map: all 1369 keys
   and SHA values, not counts alone.
 2. Old project_root must remain unchanged: source-start == current source_refs
   == post-verification source_refs (full_suite_verifier.py:115).
 3. selected_source_map, roster184, parse329, settings, runner/marker module,
   marker contract, suite-policy and UID plan/stage must all match (116-152,225).
 4. inputs.engine must match current engine_pin (124-125).
 5. Revalidate every phase PID, cleanup, marker and diagnostics (154-228).
 6. Current s5/run_s5_native.py and full_suite_verifier.py SHA must equal the
   Root rehearsal versions.
 7. Never relabel old S/oldQ/project_root/PIDs/time. Describe reuse only as
   revalidating the exact-source-identical old full through the existing
   full_suite route; never claim full ran on new S.
 8. A separate Opus whole-unit review must independently confirm applicability.
 Conditions 1–6 require actual checks after final freeze. If any predicate is
 unproved or differs, reject reuse and execute full184 once on the final version.
 SourceRefs (tools/run_all_tests.py:40-45) excludes docs/private package, but that
 fact is no substitute for complete source equality. No reuse is approved here.
 # REPAIR49 source-ready status
 Original 30/88, formal 16, P04=0; no partial credit or whole-unit acceptance.
 Worker static audit/parse only; all new controls remain Runner work.
 ## Explicit closure audit
 All .py files are explicitly enumerated in CLOSURE, plus the six probe .gd files
 and six ROOT_RUN documents used by package-local runner material references.
 The list is fixed in source; a missing member cannot vanish through globbing.
 No package-local JSON is read by the identity execution path: JSON inputs are
 supplied B/raw/recorded Q. These external contexts remain required, not rewritten.
 The original checker is loaded from the original checkout and supplied to both builders.
 - `build_p04_index.py:46`: `path = Path(__file__).with_name('p04_native_series.py')`
 - `build_p04_index.py:184`: `series_spec = importlib.util.spec_from_file_location('p04_index_series', Path(__file__).with_name('p04_native_series.py'))`
 - `checker_join_fixtures.py:111`: `current_wrapper = series.digest((series.HERE / 's4/run_s4_native.py').read_bytes())`
 - `full_suite_verifier.py:111`: `wrapper = module('p04_full_uid', Path(__file__).parent / 's5/run_s5_native.py')`
 - `normal_c_join_fixtures.py:12`: `spec = importlib.util.spec_from_file_location("normal_c_join", HERE / "normal_c_join.py")`
 - `p04_native_series.py:1001`: `S4_HISTORICAL_WRAPPER = HERE / 's4/historical/run_s4_native_r28.py.reference'`
 - `p04_native_series.py:1013`: `require(receipt_sha256 == digest((HERE / 's4/run_s4_native.py').read_bytes()),`
 - `p04_native_series.py:1035`: `qa = HERE / 's4/p04_s4_power_probe.gd'`
 - `p04_native_series.py:1332`: `wrapper_path = Path(__file__).parent / 's5/run_s5_native.py'`
 - `p04_native_series.py:1340`: `admission = wrapper.module('fresh_s4_admission', HERE / 's4/run_s4_native.py')`
 - `p04_native_series.py:1432`: `path = Path(__file__).parent / 's5/s5_order_adapter.py'`
 - `repair48_identity_controls.py:38`: `CLOSURE = ('build_p04_index.py', 'bulk_reader_equivalence.py', 'checker_applicability_fixtures.py', 'checker_approval_fixtures.py', 'checker_candidate_fixtures.py', 'checker_encoder_fixtures.py', 'checker_join_fixtures.py', 'checker_native_fixtures.py', 'checker_negative_fixtures.py', 'checker_role_fixtures.py', 'checker_series_fixtures.py', 'collect_p04_native.py', 'full_suite_verifier.py', 'normal_c_join.py', 'normal_c_join_fixtures.py', 'p04_native_series.py', 'repair48_identity_controls.py', 'repair48_transport_controls.py', 's1/S1_ROOT_RUN.md', 's1/p04_s1_ev_power_probe.gd', 's1/run_s1_native.py', 's2/S2_ROOT_RUN.md', 's2/p04_s2a_midnight_probe.gd', 's2/run_s2a_native.py', 's2b/S2B_ROOT_RUN.md', 's2b/p04_s2b_shift_probe.gd', 's2b/run_s2b_native.py', 's3/S3_ROOT_RUN.md', 's3/p04_s3_closure_probe.gd', 's3/run_s3_native.py', 's4/S4_ROOT_RUN.md', 's4/admission_controls.py', 's4/engine_identity_negative_fixtures.py', 's4/p04_s4_power_probe.gd', 's4/phase_cut_regression.py', 's4/receipt_lifecycle_fixtures.py', 's4/run_s4_native.py', 's5/S5_ROOT_RUN.md', 's5/p04_s5_power_probe.gd', 's5/repair44_controls.py', 's5/run_s5_native.py', 's5/s5_guard_oracle.py', 's5/s5_order_adapter.py', 's5/s5_order_adapter_controls.py', 's5/s5_power_adapter.py', 's5/s5_power_adapter_controls.py', 's5/s5_uid_controls.py', 's5/s5_wrapper_fixtures.py', 'scratch_fixture_adapter.py')`
 - `repair48_identity_controls.py:71`: `shutil.copyfile(HERE / relative, target)`
 - `repair48_identity_controls.py:86`: `original_builder = load(HERE / 'build_p04_index.py', 'original_builder')`
 - `repair48_identity_controls.py:125`: `rejects(lambda: a.module('outside_identity', HERE / 's5/s5_guard_oracle.py'))`
 - `repair48_identity_controls.py:128`: `builder = load(HERE / 'build_p04_index.py', 'identity_builder')`
 - `repair48_transport_controls.py:14`: `spec = importlib.util.spec_from_file_location('transport', Path(__file__).with_name('build_p04_index.py'))`
 - `s1/run_s1_native.py:20`: `QA = HERE / "p04_s1_ev_power_probe.gd"`
 - `s1/run_s1_native.py:61`: `shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")`
 - `s1/run_s1_native.py:89`: `QA, Path(__file__), HERE / "S1_ROOT_RUN.md",`
 - `s1/run_s1_native.py:119`: `fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))`
 - `s2/run_s2a_native.py:20`: `QA = HERE / "p04_s2a_midnight_probe.gd"`
 - `s2/run_s2a_native.py:33`: `]] + [HERE.parent / "s1" / n for n in ["run_s1_native.py", "p04_s1_ev_power_probe.gd", "S1_ROOT_RUN.md"]]`
 - `s2/run_s2a_native.py:82`: `shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")`
 - `s2/run_s2a_native.py:111`: `QA, Path(__file__), HERE / "S2_ROOT_RUN.md",`
 - `s2/run_s2a_native.py:141`: `fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))`
 - `s2b/run_s2b_native.py:20`: `QA = HERE / "p04_s2b_shift_probe.gd"`
 - `s2b/run_s2b_native.py:25`: `HERE.parent / folder / name for folder, name in [`
 - `s2b/run_s2b_native.py:26`: `("s1", "run_s1_native.py"), ("s1", "S1_ROOT_RUN.md"),`
 - `s2b/run_s2b_native.py:28`: `("s2", "S2_ROOT_RUN.md"),`
 - `s2b/run_s2b_native.py:71`: `shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")`
 - `s2b/run_s2b_native.py:102`: `QA, Path(__file__), HERE / "S2B_ROOT_RUN.md",`
 - `s2b/run_s2b_native.py:132`: `fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))`
 - `s3/run_s3_native.py:20`: `QA = HERE / "p04_s3_closure_probe.gd"`
 - `s3/run_s3_native.py:31`: `MATERIALS = [MANIFEST, AUDIT, HERE.parent / "s2b/run_s2b_native.py",`
 - `s3/run_s3_native.py:32`: `HERE.parent / "s2b/p04_s2b_shift_probe.gd", HERE.parent / "s2b/S2B_ROOT_RUN.md"]`
 - `s3/run_s3_native.py:90`: `shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")`
 - `s3/run_s3_native.py:121`: `QA, Path(__file__), HERE / "S3_ROOT_RUN.md",`
 - `s3/run_s3_native.py:151`: `fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))`
 - `s4/admission_controls.py:99`: `series = s4.module('admission_series', s4.HERE.parent / 'p04_native_series.py')`
 - `s4/admission_controls.py:100`: `series_tree = ast.parse((s4.HERE.parent / 'p04_native_series.py').read_text())`
 - `s4/admission_controls.py:105`: `wrapper = s4.module('admission_fresh_wrapper', s4.HERE.parent / 's5/run_s5_native.py')`
 - `s4/admission_controls.py:124`: `historical = s4.HERE / 'historical/run_s4_native_r28.py.reference'`
 - `s4/admission_controls.py:134`: `uid_plan, snapshot, _ = s4.module('admission_uid', s4.HERE.parent / 's5/run_s5_native.py').load_uid_helper(root, r, selected)`
 - `s4/engine_identity_negative_fixtures.py:12`: `spec = importlib.util.spec_from_file_location("series", HERE.parent / "p04_native_series.py")`
 - `s4/engine_identity_negative_fixtures.py:15`: `spec = importlib.util.spec_from_file_location("s4", HERE / "run_s4_native.py")`
 - `s4/receipt_lifecycle_fixtures.py:36`: `s4 = load('receipt_s4_historical', HERE / 'historical/run_s4_native_r28.py.reference')`
 - `s4/receipt_lifecycle_fixtures.py:38`: `series = load('receipt_series', HERE.parent / 'p04_native_series.py')`
 - `s4/receipt_lifecycle_fixtures.py:42`: `tree = ast.parse((HERE.parent / 'p04_native_series.py').read_text())`
 - `s4/receipt_lifecycle_fixtures.py:97`: `put(staged / 'run_s4_native.py', (HERE / 'historical/run_s4_native_r28.py.reference').read_bytes())`
 - `s4/receipt_lifecycle_fixtures.py:98`: `put(staged / 'S4_ROOT_RUN.md', b'synthetic fixture material\n')`
 - `s4/run_s4_native.py:21`: `QA = HERE / "p04_s4_power_probe.gd"`
 - `s4/run_s4_native.py:136`: `shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")`
 - `s4/run_s4_native.py:177`: `QA, Path(__file__), HERE / "S4_ROOT_RUN.md",`
 - `s4/run_s4_native.py:214`: `fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))`
 - `s4/run_s4_native.py:365`: `# The shared runner log is not write-once; see S4_ROOT_RUN.md.`
 - `s5/repair44_controls.py:148`: `for name in ('S5_ROOT_RUN.md', 'PENDING.md'):`
 - `s5/run_s5_native.py:26`: `QA = HERE / "p04_s5_power_probe.gd"`
 - `s5/run_s5_native.py:33`: `matches = re.findall(r"^const CASE_TABLE: Dictionary = (\{.*?^\})", Path(path).read_text(), re.M | re.S)`
 - `s5/run_s5_native.py:45`: `CASE_TABLE = case_table(QA)`
 - `s5/run_s5_native.py:77`: `if len(seeds) != 1 or sorted(json.loads(seeds[0])) != CASES or sorted(case_table(QA)) != CASES:`
 - `s5/run_s5_native.py:334`: `QA, Path(__file__), HERE / "S5_ROOT_RUN.md",`
 - `s5/run_s5_native.py:527`: `# The shared runner log is not write-once; see S5_ROOT_RUN.md.`
 - `s5/s5_order_adapter.py:46`: `POWER_PATH = Path(__file__).with_name('s5_power_adapter.py')`
 - `s5/s5_order_adapter.py:50`: `GUARD_PATH = Path(__file__).with_name('s5_guard_oracle.py')`
 - `s5/s5_order_adapter_controls.py:12`: `mutation = a.module('order_typed_mutation', Path(__file__).with_name('s5_power_adapter_controls.py'))`
 - `s5/s5_power_adapter_controls.py:12`: `spec = importlib.util.spec_from_file_location("s5_power_adapter", Path(__file__).with_name("s5_power_adapter.py"))`
 - `s5/s5_uid_controls.py:28`: `w = module('s5_uid_wrapper', Path(__file__).with_name('run_s5_native.py'))`
 - `s5/s5_wrapper_fixtures.py:13`: `path = Path(__file__).parent / "run_s5_native.py"`
 - `scratch_fixture_adapter.py:43`: `source = HERE / (args.fixture + ".py")`
 Explicit closure membership:
 - `build_p04_index.py`
 - `bulk_reader_equivalence.py`
 - `checker_applicability_fixtures.py`
 - `checker_approval_fixtures.py`
 - `checker_candidate_fixtures.py`
 - `checker_encoder_fixtures.py`
 - `checker_join_fixtures.py`
 - `checker_native_fixtures.py`
 - `checker_negative_fixtures.py`
 - `checker_role_fixtures.py`
 - `checker_series_fixtures.py`
 - `collect_p04_native.py`
 - `full_suite_verifier.py`
 - `normal_c_join.py`
 - `normal_c_join_fixtures.py`
 - `p04_native_series.py`
 - `repair48_identity_controls.py`
 - `repair48_transport_controls.py`
 - `s1/S1_ROOT_RUN.md`
 - `s1/p04_s1_ev_power_probe.gd`
 - `s1/run_s1_native.py`
 - `s2/S2_ROOT_RUN.md`
 - `s2/p04_s2a_midnight_probe.gd`
 - `s2/run_s2a_native.py`
 - `s2b/S2B_ROOT_RUN.md`
 - `s2b/p04_s2b_shift_probe.gd`
 - `s2b/run_s2b_native.py`
 - `s3/S3_ROOT_RUN.md`
 - `s3/p04_s3_closure_probe.gd`
 - `s3/run_s3_native.py`
 - `s4/S4_ROOT_RUN.md`
 - `s4/admission_controls.py`
 - `s4/engine_identity_negative_fixtures.py`
 - `s4/p04_s4_power_probe.gd`
 - `s4/phase_cut_regression.py`
 - `s4/receipt_lifecycle_fixtures.py`
 - `s4/run_s4_native.py`
 - `s5/S5_ROOT_RUN.md`
 - `s5/p04_s5_power_probe.gd`
 - `s5/repair44_controls.py`
 - `s5/run_s5_native.py`
 - `s5/s5_guard_oracle.py`
 - `s5/s5_order_adapter.py`
 - `s5/s5_order_adapter_controls.py`
 - `s5/s5_power_adapter.py`
 - `s5/s5_power_adapter_controls.py`
 - `s5/s5_uid_controls.py`
 - `s5/s5_wrapper_fixtures.py`
 - `scratch_fixture_adapter.py`
 The fixture compares complete relative-path/bytes/SHA tables and canonical table
 tree hashes for original/A/B before execution and after positive identity work.
 Missing, traversal, outside paths and symlinks reject. Negative mutation phase is
 separate; existing byte/missing/extra/mapping/symlink/outside cases remain.
 A missing S5 .gd negative is added. complete_B_controls=true requires both
 placements' S5 facts and entire payload equality. No raw or compared fields are
 excluded or normalized. Actual three-placement proof is UNEXECUTED by worker;
 Runner must retain the emitted before/after tables.
 ## Root handoff
 Read ROOT_REPAIR49_CURRENT_EVIDENCE_AND_INDEPENDENT_SCOPE.json directly:
 payload(B), all53, series/join/power PASS per Root report, engine0, no acceptance.
 order-typed is UNDETERMINED and is not pass. Transport/raw-only/synthetic and
 q4801 six-series collection are historical S47 successes, not new-S evidence.
 Only the observed complete_B closure failure is repaired.
 ## Historical complete_B failure (verbatim)
 ```text
 Traceback (most recent call last):
  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/repair48_identity_controls.py", line 115, in <module>
    run(parser.parse_args())
  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/P04-01-implement/docs/plans/original-completion-2026-10-02/execution/p04-01/repair48_identity_controls.py", line 60, in run
    assert native[0].verify_fresh_s5(build) == native[1].verify_fresh_s5(build)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p04-r48-identity-8veppaza/first/docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py", line 1430, in verify_fresh_s5
    s = FreshSeries(build, 's5')
        ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p04-r48-identity-8veppaza/first/docs/plans/original-completion-2026-10-02/execution/p04-01/p04_native_series.py", line 1338, in __init__
    exec(compile(wrapper_path.read_bytes(), str(wrapper_path), 'exec'), wrapper.__dict__)
  File "/private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p04-r48-identity-8veppaza/first/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py", line 45, in <module>
  File "/private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p04-r48-identity-8veppaza/first/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/run_s5_native.py", line 33, in case_table
  File "/opt/homebrew/Cellar/python@3.12/3.12.13_2/Frameworks/Python.framework/Versions/3.12/lib/python3.12/pathlib.py", line 1027, in read_text
    with self.open(mode='r', encoding=encoding, errors=errors) as f:
         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.12/3.12.13_2/Frameworks/Python.framework/Versions/3.12/lib/python3.12/pathlib.py", line 1013, in open
    return io.open(self, mode, buffering, encoding, errors, newline)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 FileNotFoundError: [Errno 2] No such file or directory: '/private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p04-r48-identity-8veppaza/first/docs/plans/original-completion-2026-10-02/execution/p04-01/s5/p04_s5_power_probe.gd'
 ```
@@ -0,0 +1,68 @@
 # REPAIR50 source-ready handoff
 Scope: control classification/memo, tree() read method only, stream equivalence
 control and documentation. No Git write, engine, Runner, integration or formal
 test was performed. Three changed/new Python sources passed AST parsing.
 ## Root-only execution and estimation
 From this package directory, run the following pure controls once and retain
 their separate JSON output and external elapsed/RSS measurements:
 ```
 python3 s5/s5_order_adapter_controls.py --pure-only
 python3 repair50_stream_controls.py
 ```
 The first emits separate negative counts/lists, identity positive counts/lists,
 no-genuine-order lists, memo hit/miss, parser-rejection list and elapsed per
 guard. The second compares the complete whole-read and streamed SHA maps and
 key insertion order for empty, Unicode name/content, binary, sparse, chunk
 boundary -1/exact/+1, multiple chunks and nested files. It uses temporary
 synthetic files only and creates no native acceptance evidence.
 Before heavy typed controls, parse each actual retained guard record with:
 ```
 python3 s5/s5_order_adapter_controls.py --estimate-record /absolute/path/to/guard.var
 ```
 This performs no derivation or verify: output includes record byte size,
 AFTER node count, kind histogram, replacement count and replacement count x2
 (including identities, never reported as negatives). Guard mutation disk
 estimate is zero; stream control logical fixture size is about 10 MiB, with
 the sparse part filesystem-dependent. Memory scales with retained parsed
 representatives (at most one per mutated kind, plus first/last), record bytes,
 parser overhead and output labels. Memo holds one pair of expected/result raw
 bytes for unchanged inputs; it never caches AFTER or recorded EXPECTED.
 Time scales with mutation count x record bytes: parse/verify still examine
 whole records. Use the synthetic run's external peak RSS and elapsed, together
 with its emitted counts/bytes, as an initial calibration; real record shape
 and source-derivation costs make this an estimate, not an ETA or resource cap.
 Actual guard bytes/counts and calibrated measurements are Root-pending.
 ## complete_B scope reuse remains conditional
 The supplied commander handoff reports R49 session56645 exit 0, 49-file map,
 S5 facts/payload equality, no B changes, log SHA prefix bdef6715 and closure
 tree prefix b54a35ed. This worker has not independently verified that run.
 Root must mechanically compare its saved full raw map with the new tree and
 record only the authorized control/tree-read/new-control/document changes.
 Inspect import/exec and input closure for builder, collector, native-series,
 reader, oracle, wrapper, probe and helper; preserve S47 raw, 21pin, legacy5,
 full184 originals, oldQ source/engine SHA and public run_all_tests.py SHA.
 Important: repair48_identity_controls.CLOSURE explicitly lists the changed
 order control, identity control and S5_ROOT_RUN.md as snapshot material.
 The roster is unchanged. Direct searches in builder/native-series/order
 adapter did not reference these names, but this is not a complete graph proof
 and does not establish reuse. Root must distinguish the actual two-directory
 analysis/payload execution/input closure from this snapshot roster and apply
 all commander conditions. If any condition fails, rerun complete_B once.
 No R49 closure bytes or raw evidence were rewritten to obtain reuse.
 Then preserve the recorded Root order: pure controls → clean exact-Q check-only
 → capacity/PID confirmation → fresh native6 → reader/collector → all eight
 full exact-source reuse conditions (failure means one full run) → index → one
 registered p04-acceptance validation → independent whole-unit review → normal
 gates/RootDB join/ledger/main push. Only whole-unit acceptance awards credit.
@@ -0,0 +1,19 @@
 # REPAIR51 pre-submit worker handoff
 code_ready: documentation-only batch prepared for submission. This file records worker-time static results only; it does not establish post-submit admission.
 Changed: order-audit.json, CURRENT_STATUS.md, ORDER_AUDIT.md, this handoff and REPAIR51_APPLICABILITY_MAP.json. Checker, all executables, product/config/spec/values/engine/oracle, fixtures, approvals and historical REPAIR*_STATUS bodies remain byte-identical. Git writes 0; Runner 0; engine 0; delegation 0.
 ACTUAL S50 native6/24 phases PASS and collector 15+EV missing 0 remain historical, bound to S50/Q50. ACTUAL S47 full184 retains its original label. No run is relabelled S51. S51 native admission pending AT HANDOFF; Root must freeze Q51 and run fresh native6 because checker:368-371 binds S/Q. Full184, order CLI and complete_B reuse require the map predicates; Root checks actual hashes.
 Post-submit state is decided only by Root version-pinned receipts under build/audit-support/p04-root-acceptance-<S>/ and build/p04-evidence/index.json. S50 receipt location: build/audit-support/p04-root-acceptance-a9ef681f/. A worker NOT RUN statement is never a reason to rebuild. No future submitted SHA, Q51 or new receipt is claimed.
 All six D05 approvals remain valid; pending D05 empty. Same-tick ACTIVE onset gives RELATED (S5B native proof). Power-first then dependency closure gives NO_POWER by static source observation only; sequential interpretation remains EXPLICITLY UNRESOLVED/UNPROVEN, neither defect nor cure nor proof. Original approval remains unchanged. P04 safety holds through :569 regardless of label. A later product change needs a separate owner-authorised task.
 Static checks: JSON parsing, current-table stale-anchor search, empty pending D05, five-path scope check and immutable SHA comparisons. These are worker static checks, not Runner acceptance tests. See applicability map for unchanged SHA256 and source-consumer grep evidence.
 Root order: fix Q51; compare map/stop reuse on executable difference; clean exact-Q check-only; capacity/PID check; one native6 heavy lease; readers/adapters then collector; full184 reuse check; order CLI/complete_B conditional reuse or one rerun; index; one p04-acceptance validate; separate Opus whole-unit review; prepare/exactC/integration/final/RootDB join/ledger/main push. NativeWindows individually pending.
 Original 30/88, formal 16 and P04 credit 0 unchanged; unit incomplete; formal_acceptance false.
 Worker static verification results: 594 JSON files parsed with zero errors; all 3,096 immutable-file SHA256 values matched; exactly the five declared doc-scope non-executables changed; six D05 IDs approved and pending D05 empty; no listed stale anchors in current phase_order/safety_cases. No formal tests were run. code_ready handoff.
@@ -0,0 +1,305 @@
 #!/usr/bin/env python3
 """Build a fresh evidence index from supplied native bytes after auto-submit.
 The index has no candidate identity or Root-passed flag. Invocations share the
 same payload; checkout roles are established afresh by the checker.
 """
 import argparse
 import hashlib
 import importlib.util
 import json
 import os
 from pathlib import Path
 import sys
 sys.dont_write_bytecode = True
 ROOT = Path(__file__).resolve().parents[5]
 def checker():
    spec = importlib.util.spec_from_file_location('p04_index_checker', ROOT / 'tools/check_p04_order_evidence.py')
    module = importlib.util.module_from_spec(spec)
    sys.modules[spec.name] = module
    spec.loader.exec_module(module)
    return module
 def descriptor(path):
    data = path.read_bytes()
    return {'path': str(path.absolute()), 'bytes': len(data), 'sha256': hashlib.sha256(data).hexdigest()}
 def require(value, message):
    if not value:
        raise ValueError(message)
 def ordinary(path):
    path = Path(path)
    require('..' not in path.parts, 'parent traversal')
    require(not any(p.is_symlink() for p in (path, *path.parents)), 'symlink path')
    return path
 def series_inputs(build):
    registry = json.loads(ordinary(build / 'audit-support/p04-fresh-runs.json').read_bytes())
    path = Path(__file__).with_name('p04_native_series.py')
    spec = importlib.util.spec_from_file_location('transport_series', path)
    module = importlib.util.module_from_spec(spec)
    exec(compile(path.read_bytes(), str(path), 'exec'), module.__dict__)
    require(set(registry['series']) == set(module.FRESH_RUNS), 'fresh series roster')
    result = {}
    for name in module.FRESH_RUNS:
        run = Path(registry['series'][name]['run'])
        require(not run.is_absolute() and '..' not in run.parts, 'fresh run path')
        result[name] = json.loads(ordinary(build / run / 'runner-input.json').read_bytes())
    return result
 def pin_roster(inputs):
    result = {}
    for pin in inputs['fixed_input_pins'] + [inputs['QA']]:
        path = pin['path']
        ordinary(path)
        require(Path(path).is_absolute(), 'pin source must be absolute')
        require(type(pin['bytes']) is int and pin['bytes'] >= 0, 'pin bytes')
        digest = pin['sha256']
        require(isinstance(digest, str) and len(digest) == 64
                and all(c in '0123456789abcdef' for c in digest), 'pin SHA')
        identity = {'bytes': pin['bytes'], 'sha256': digest}
        require(path not in result or result[path] == identity, 'conflicting duplicate pin')
        result[path] = identity
    return result
 def relative_material(series, original, pin):
    return f"runner-materials/{series}/{pin['sha256']}/{Path(original).name}"
 def all_rosters(inputs):
    rosters, seen = {}, {}
    for name, raw in inputs.items():
        rosters[name] = pin_roster(raw)
        for original, pin in rosters[name].items():
            require(original not in seen or seen[original] == pin, 'conflicting duplicate pin across series')
            seen[original] = pin
    return rosters
 def material_layout(inputs):
    rosters = all_rosters(inputs)
    layout, seen, destinations = {}, {}, {}
    for name, roster in rosters.items():
        layout[name] = {}
        for original, pin in roster.items():
            identity = (original, pin['bytes'], pin['sha256'])
            relative = seen.setdefault(identity, relative_material(name, original, pin))
            require(relative not in destinations or destinations[relative] == identity,
                    'distinct pins collide at material destination')
            destinations[relative] = identity
            layout[name][original] = relative
    return rosters, layout
 def checked_material(path, pin):
    data = ordinary(path).read_bytes()
    require(len(data) == pin['bytes'] and hashlib.sha256(data).hexdigest() == pin['sha256'],
            'material pin mismatch')
    return data
 def relocate_materials(build, output):
    build = ordinary(Path(build).absolute()).resolve(strict=True)
    output = ordinary(Path(output).absolute())
    require(output == build / 'p04-evidence', 'output must be B/p04-evidence')
    output.mkdir()
    mapping = {}
    inputs = series_inputs(build)
    rosters, layout = material_layout(inputs)
    written = set()
    for name, roster in rosters.items():
        mapping[name] = {}
        for original, pin in roster.items():
            relative = layout[name][original]
            target = output / relative
            if relative not in written:
                data = checked_material(original, pin)
                target.parent.mkdir(parents=True, exist_ok=True)
                with target.open('xb') as stream:
                    stream.write(data)
                written.add(relative)
            checked_material(target, pin)
            mapping[name][original] = {'relative': relative, **pin}
    with (output / 'runner-materials/RELOCATION.json').open('x') as stream:
        json.dump(mapping, stream, sort_keys=True, indent=2)
        stream.write('\n')
    return mapping
 def relocated_materials(build):
    output = ordinary(build / 'p04-evidence')
    map_path = ordinary(output / 'runner-materials/RELOCATION.json')
    def unique(pairs):
        result = {}
        for key, value in pairs:
            require(key not in result, 'duplicate relocation key')
            result[key] = value
        return result
    mapping = json.loads(map_path.read_bytes(), object_pairs_hook=unique)
    inputs = series_inputs(build)
    rosters, layout = material_layout(inputs)
    require(set(mapping) == set(inputs), 'relocation series roster')
    descriptors = {}
    expected_files = {'runner-materials/RELOCATION.json'}
    for name, raw in inputs.items():
        roster = rosters[name]
        require(set(mapping[name]) == set(roster), 'relocation material roster')
        descriptors[name] = {}
        for original, pin in roster.items():
            relative = layout[name][original]
            require(mapping[name][original] == {'relative': relative, **pin}, 'relocation mapping mismatch')
            checked_material(output / relative, pin)
            expected_files.add(relative)
            descriptors[name][original] = {'path': relative, **pin}
        wrappers = [path for path, pin in roster.items() if pin['sha256'] == raw['wrapper_sha256']]
        require(len(wrappers) == 1, 'exactly one wrapper pin required')
    actual_files = set()
    for path in (output / 'runner-materials').rglob('*'):
        ordinary(path)
        if path.is_file():
            actual_files.add(path.relative_to(output).as_posix())
    require(actual_files == expected_files, 'unmapped material')
    return inputs, descriptors, {'path': 'runner-materials/RELOCATION.json',
                                'bytes': map_path.stat().st_size,
                                'sha256': hashlib.sha256(map_path.read_bytes()).hexdigest()}
 def payload(build, gate=None):
    gate = gate or checker()
    build = ordinary(Path(build).absolute()).resolve(strict=True)
    inputs_by_series, materials_by_series, relocation_descriptor = relocated_materials(build)
    native = build / 'audit-support/native-first-current'
    c = gate.verify_native(native)
    raw = gate.combine_native_series(build, c)
    series_spec = importlib.util.spec_from_file_location('p04_index_series', Path(__file__).with_name('p04_native_series.py'))
    series_module = importlib.util.module_from_spec(series_spec)
    series_spec.loader.exec_module(series_module)
    fresh_bindings = series_module.fresh_bindings(build)
    tested = fresh_bindings['Q_tree']
    source = gate.selected_manifest(gate.tree_entries(tested))
    source_map = {p: v['sha256'] for p, v in source.items()}
    runners = []
    for name in series_module.FRESH_RUNS:
        run_binding = fresh_bindings['series'][name]
        path = gate.safe(build, run_binding['run'] + '/runner-input.json')
        inputs = gate.load(path)
        row = descriptor(path)
        require(inputs == inputs_by_series[name], 'runner input changed during payload')
        row['materials'] = materials_by_series[name]
        wrappers = [p for p in row['materials']
                    if row['materials'][p]['sha256'] == inputs['wrapper_sha256']]
        require(len(wrappers) == 1, 'exactly one wrapper pin required')
        row['wrapper'] = row['materials'][wrappers[0]]
        runners.append(row)
    # C references retain every lifecycle, raw phase, source, environment and
    # formal member mapping; Stage R retains its complete original->relocated map.
    references = {}
    for row in gate.load(native / 'SOURCE_MANIFEST.json')['files']:
        references['C/' + row['copy']] = descriptor(gate.safe(native, row['copy']))
    for row in gate.load(native / 'OWNERSHIP_RAW_PROVENANCE.json')['copied']:
        references['C/' + row['target']] = descriptor(gate.safe(native, row['target']))
    series = {}
    collection = build / raw['fresh_collection']
    for name in series_module.FRESH_RUNS:
        series[name] = gate.load(collection / (name + '.json'))
    relocation = gate.load(build / 'audit-support/p04-r17-full-inputs-r01/MANIFEST.json')
    authorities = {}
    for ref in sorted({r for _, refs, _ in gate.REQUIRED.values() for r in refs}):
        relative = (gate.OWNER_BINDINGS[ref][0] if ref.startswith('D05-P04-') else
                    'docs/traceability/original/BASELINE.txt' if ref.startswith('BASELINE:') else
                    'docs/DESIGN_DECISIONS.md' if ref == 'D-034' else
                    'docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/ORDER_CONTRACT_DRAFT.md')
        path = gate.safe(gate.ROOT, relative)
        if ref.startswith('D05-P04-'):
            gate.owner_authority(ref, {'source': relative, 'status': 'approved'}, path)
        authorities[ref] = {'source': relative, 'sha256': gate.sha(path),
                            'status': 'approved' if not ref.startswith('BASELINE:') else 'original'}
    conditions = {cid: {'case_id': cid, 'authority_refs': list(refs), 'nativeWindows': 'pending',
                        'raw_verified': cid in raw['verified_conditions'],
                        'required_measurements': metrics}
                  for cid, (_, refs, metrics) in gate.REQUIRED.items()}
    domains = {domain: {'conditions': [cid for cid, (d, _, _) in gate.REQUIRED.items() if d == domain],
                        'source_refs': [{'path': p, 'sha256': source_map[p], 'functions': list(fs)}
                                        for p, fs in gate.ORDER_FUNCTIONS.items()],
                        'authority_refs': sorted({r for _, (d, refs, _) in gate.REQUIRED.items()
                                                  if d == domain for r in refs})}
               for domain in sorted(gate.DOMAINS)}
    reachability = {}
    for name, rows in gate.REACH_REFS.items():
        refs = []
        for path, function, digest, lines in rows:
            gate.resolve_anchor(gate.git_bytes('show', tested + ':' + path), function, digest, lines)
            refs.append({'path': path, 'sha256': source_map[path], 'function': function,
                         'anchor_sha256': digest, 'line_count': lines})
        reachability[name] = {'reach': name == 'EV', 'case_id': 'EV' if name == 'EV' else None, 'source_refs': refs,
                              'raw_verified': 'EV' in raw['verified_conditions'] if name == 'EV' else None}
    delta = gate.source_delta(gate.REGISTERED_COMMIT, tested)
    index = {'runner_material_relocation': relocation_descriptor,
            'schema_version': 2, 'task_id': 'P04-01', 'formal_acceptance': False,
            'versions': {'registered': gate.REGISTERED_COMMIT, 'execution_origin': gate.EXECUTION_ORIGIN,
                         'tested': tested},
            'product_binding': {'tested_product': tested, 'runner_inputs': runners},
            'source_map': source_map, 'registered_pins': gate.load(gate.SPEC)['current_source_pins'],
            'applicability_delta': delta,
            'delta_cases': {r['path'] + ':' + r['function']: {cid: cid for cid in
                            gate.boundary_conditions(r['path'], r['function'])} for r in delta},
            'domains': domains, 'authority': authorities, 'conditions': conditions,
            'reachability': reachability, 'raw_conditions': raw, 'raw_references': references,
            'series': series, 'fresh_run_bindings': fresh_bindings,
            'historical_source_config_input_environment_and_formal': relocation,
            'native_bundle': descriptor(native / 'OWNERSHIP_RAW_PROVENANCE.json'),
            'original_audit': {'sha256': gate.sha(gate.ROOT / gate.DOC_SCOPE / 'order-audit.json'),
                               'content': gate.load(gate.ROOT / gate.DOC_SCOPE / 'order-audit.json')},
            'review_status': 'pending_review', 'original_credit': '16/88; P04=0',
            'safety_outcomes': ['no charging while legitimately stopped',
                                'no double midnight settlement', 'no orphan reservations']}
    gate.applicability(index, gate.load(gate.SPEC), source_map, tested)
    return index
 def main():
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--build', required=True, type=Path)
    parser.add_argument('--output', type=Path, help='exact B/p04-evidence; exclusive creation')
    parser.add_argument('--invocation', required=True, choices=('validate', 'prepare-integration', 'final'))
    parser.add_argument('--registered-ref', required=True)
    parser.add_argument('--tested-ref', required=True)
    args = parser.parse_args()
    gate = checker()
    os.environ['BUILD_OUTPUT_DIR'] = str(args.build.resolve(strict=True))
    output = args.output or Path(os.environ.get('P04_EVIDENCE_DIR', str(args.build.resolve() / 'p04-evidence')))
    output = output.absolute()
    relocate_materials(args.build, output)
    index = payload(args.build, gate)
    gate.require(args.registered_ref == gate.REGISTERED_COMMIT and
                 args.tested_ref == index['versions']['tested'],
                 'source refs differ from immutable evidence roles')
    with gate.isolated_objects():
        _, role = gate.verify_roles(index, args.build.resolve())
    # The historical invocation is separate from the reusable evidence index.
    receipt = {'invocation': args.invocation, 'actual_head': role['actual_head'],
               'actual_tree': role['actual_tree'], 'role': role['role'], 'formal_acceptance': False}
    try:
        for name, value in (('index.json', index), ('generation-invocation.json', receipt)):
            with (output / name).open('x', encoding='utf-8') as stream:
                json.dump(value, stream, ensure_ascii=False, sort_keys=True, indent=2)
                stream.write('\n')
    except BaseException:
        # The exclusively created directory is a failed attempt, never evidence.
        (output / 'index.json').unlink(missing_ok=True)
        raise
    print(json.dumps({'evidence_directory': str(output), **receipt}))
 if __name__ == '__main__':
    main()
@@ -0,0 +1,99 @@
 #!/usr/bin/env python3
 """Isolated disposable repository controls; never original acceptance evidence."""
 import importlib.util
 import os
 from pathlib import Path
 import subprocess
 import sys
 import tempfile
 from unittest.mock import patch
 sys.dont_write_bytecode = True
 ROOT = Path(__file__).resolve().parents[5]
 def rejected(operation):
    try:
        operation()
    except (ValueError, subprocess.CalledProcessError):
        return
    raise AssertionError('invalid input/response accepted')
 def run():
    spec = importlib.util.spec_from_file_location('bulk_gate', ROOT / 'tools/check_p04_order_evidence.py')
    gate = importlib.util.module_from_spec(spec)
    spec.loader.exec_module(gate)
    with tempfile.TemporaryDirectory(prefix='p04-bulk-fixture-', dir='/tmp') as temporary:
        base = Path(temporary)
        assert not base.resolve().is_relative_to(ROOT.resolve())
        repo = base / 'repo'
        repo.mkdir()
        gate.ROOT = repo
        env = gate.git_environment()
        env.update(GIT_AUTHOR_NAME='fixture', GIT_AUTHOR_EMAIL='fixture@invalid',
                   GIT_COMMITTER_NAME='fixture', GIT_COMMITTER_EMAIL='fixture@invalid')
        def git(*args, data=None):
            return subprocess.check_output(['git', '-c', 'core.hooksPath=/dev/null', *args],
                                           input=data, cwd=repo, env=env)
        git('init', '--quiet')
        payloads = [b'\x00binary\r\nline\n', b'', bytes(range(256)) * 32768]
        oids = [git('hash-object', '-w', '--stdin', data=data).decode().strip() for data in payloads]
        name = '日本語の木.dat'
        (repo / name).write_bytes(payloads[0])
        git('add', '--', name)
        git('commit', '--quiet', '-m', 'fixture')
        entries = gate.tree_entries('HEAD')  # ls-tree -z resolves the unicode path.
        assert entries[name][1] == oids[0]
        expected = {oid: git('cat-file', 'blob', oid) for oid in oids}
        original_output = subprocess.check_output
        with patch.object(gate.subprocess, 'check_output', wraps=original_output) as process:
            assert gate.read_blobs(reversed(oids + [oids[0]])) == expected
            assert process.call_count == 1
            assert process.call_args.kwargs['input'] == ('\n'.join(sorted(set(oids))) + '\n').encode()
        with patch.object(gate.subprocess, 'check_output', side_effect=AssertionError('process started')):
            assert gate.read_blobs([]) == {}
            for invalid in ('abc', 'g' * 40, 'a' * 39, 'a' * 41, 'HEAD', oids[0] + '\n', None):
                rejected(lambda: gate.read_blobs([invalid]))
        for oid in ('0' * 40, git('rev-parse', 'HEAD').decode().strip(),
                    git('rev-parse', 'HEAD^{tree}').decode().strip()):
            rejected(lambda: gate.read_blobs([oid]))
        oid = oids[0]
        header = oid.encode() + b' blob '
        valid = header + b'3\na\x00\n\n'
        assert gate.parse_blob_batch(valid, [oid]) == {oid: b'a\x00\n'}
        bad = [b'', header + b'3', header + b'3\na', valid[:-1],
               header + b'999\na\n', header + b'1\nabc\n', valid + b'garbage',
               oid.encode() + b' missing\n', oid.encode() + b' ambiguous\n',
               header + b'-1\n', header + b'x\n', header + b'1.0\n',
               b'f' * 40 + b' blob 0\n\n', oid.encode() + b' tree 0\n\n']
        for response in bad:
            rejected(lambda: gate.parse_blob_batch(response, [oid]))
            with patch.object(gate.subprocess, 'check_output', return_value=response):
                rejected(lambda: gate.read_blobs([oid]))
        rejected(lambda: gate.parse_blob_batch(valid + valid, [oid]))
        rejected(lambda: gate.parse_blob_batch(valid, [oid, oids[1]]))
        with patch.object(gate.subprocess, 'check_output',
                          side_effect=subprocess.CalledProcessError(7, ['git'])):
            rejected(lambda: gate.read_blobs([oid]))
        with patch.dict(os.environ, BUILD_OUTPUT_DIR=str(base)):
            with gate.isolated_objects():
                private_data = b'isolated-only unique payload\x00\n'
                private = subprocess.check_output(
                    ['git', 'hash-object', '-w', '--stdin'], input=private_data,
                    cwd=repo, env=gate._GIT_ENV).decode().strip()
                assert gate.read_blobs([private]) == {private: private_data}
            rejected(lambda: gate.read_blobs([private]))
            with gate.isolated_objects():
                rejected(lambda: gate.read_blobs([private]))
                assert gate.read_blobs(oids) == expected
        assert gate._GIT_ENV is None
    print('bulk reader equivalence controls completed')
 if __name__ == '__main__':
    run()
@@ -14,7 +14,7 @@ ROOT = Path(__file__).resolve().parents[5]
 spec = importlib.util.spec_from_file_location('p04_gate', ROOT / 'tools/check_p04_order_evidence.py')
 gate = importlib.util.module_from_spec(spec)
 spec.loader.exec_module(gate)
-PRODUCTION = '5f6bc11d6bb6e92d22d787989b219fef3a435bc1'
+PRODUCTION = gate.MAIN_ANCHOR
 def run(native_bundle=None):
@@ -0,0 +1,57 @@
 #!/usr/bin/env python3
 """Read-only authority controls; no Git writes, engine or acceptance execution."""
 import copy
 import importlib.util
 import json
 from pathlib import Path
 import sys
 from unittest.mock import patch
 sys.dont_write_bytecode = True
 ROOT = Path(__file__).resolve().parents[5]
 spec = importlib.util.spec_from_file_location('p04_authority', ROOT / 'tools/check_p04_order_evidence.py')
 gate = importlib.util.module_from_spec(spec)
 spec.loader.exec_module(gate)
 def run():
    results = []
    original = gate.load(ROOT / gate.DOC_SCOPE / 'D05_REMAINING_APPROVAL.json')
    source = gate.git_bytes('show', 'c0ea009b28a7649aca6a433a1a24dc0be5e7ab81:' +
        'docs/plans/original-completion-2026-10-02/execution/' +
        'p04-01-owner-approval-20261018/D05_ACTUAL_HUMAN_APPROVAL.json')
    import hashlib
    assert all(row['sha256'] == hashlib.sha256(source).hexdigest()
               for row in original['source_bindings'])
    human = {row['id']: row for row in json.loads(source)['approved']}
    for choice in original['approved_choices']:
        assert all(choice[k] == human[choice['source_id']][k]
                   for k in ('answer_exact', 'approved_question_policy'))
    for ref, (relative, digest) in gate.OWNER_BINDINGS.items():
        entry = {'source': relative, 'status': 'approved'}
        path = ROOT / relative
        gate.owner_authority(ref, entry, path)
        results.append({'id': ref, 'case': 'positive', 'result': 'accepted'})
        for label in ('missing', 'wrong_hash', 'pending', 'wrong_path'):
            changed = copy.deepcopy(entry)
            if label == 'missing':
                changed = {}
            elif label == 'pending':
                changed['status'] = 'pending'
            elif label == 'wrong_path':
                changed['source'] = gate.DOC_SCOPE + 'D05_REMAINING_ORDER_CANDIDATE.json'
            try:
                if label == 'wrong_hash':
                    with patch.object(gate, 'sha', return_value='0' * 64):
                        gate.owner_authority(ref, changed, path)
                else:
                    gate.owner_authority(ref, changed, path)
            except ValueError as exc:
                results.append({'id': ref, 'case': label, 'result': 'rejected', 'error': str(exc)})
            else:
                raise AssertionError('negative accepted: ' + ref + ':' + label)
    return {'scope': 'authority fixtures only; no native or acceptance proof', 'results': results}
 if __name__ == '__main__':
    print(json.dumps(run(), ensure_ascii=False, indent=2))
@@ -0,0 +1,82 @@
 #!/usr/bin/env python3
 """Candidate structure controls; no provenance or whole-role/native credit."""
 import argparse
 import importlib.util
 import json
 from pathlib import Path
 import subprocess
 import sys
 import tempfile
 sys.dont_write_bytecode = True
 ROOT = Path(__file__).resolve().parents[5]
 def load_gate():
    spec = importlib.util.spec_from_file_location('candidate_gate', ROOT / 'tools/check_p04_order_evidence.py')
    gate = importlib.util.module_from_spec(spec)
    spec.loader.exec_module(gate)
    return gate
 def expected_candidate(commit, tree, main, submitted, composed):
    return {'structure_qualified': True, 'provenance_verified_by_checker': False,
            'provenance_owner': 'actual Runner.prepare_integration/integrate and Root normal_c_join AFTER final before original credit',
            'join': {'C': commit, 'S': submitted, 'M': main, 'C_tree': tree, 'Q': composed}}
 def run_pure():
    """Three identity negatives and one exact positive; no Git or engine."""
    gate = load_gate()
    commit = '1111111111111111111111111111111111111111'
    tree = '2222222222222222222222222222222222222222'
    submitted = '3333333333333333333333333333333333333333'
    other = '4444444444444444444444444444444444444444'
    for args in ((commit, other, gate.MAIN_ANCHOR, submitted, tree),
                 (commit, tree, other, submitted, tree),
                 (submitted, tree, gate.MAIN_ANCHOR, submitted, tree)):
        try:
            gate.qualify_normal_candidate(*args)
        except ValueError as exc:
            assert str(exc) == 'normal candidate identity mismatch', str(exc)
        else:
            raise AssertionError('invalid candidate structure qualified')
    args = (commit, tree, gate.MAIN_ANCHOR, submitted, tree)
    assert gate.qualify_normal_candidate(*args) == expected_candidate(*args)
    return {'scope': 'pure structure only', 'negative_controls': 3,
            'exact_positive_controls': 1, 'formal_acceptance': False}
 def run():
    gate = load_gate()
    env = gate.git_environment()
    env.update(GIT_AUTHOR_NAME='P04 isolated fixture', GIT_AUTHOR_EMAIL='fixture@invalid',
               GIT_COMMITTER_NAME='P04 isolated fixture', GIT_COMMITTER_EMAIL='fixture@invalid')
    with tempfile.TemporaryDirectory(prefix='p04-candidate-fixture-', dir='/tmp') as temp:
        repo = Path(temp) / 'objects.git'
        assert not repo.resolve().is_relative_to(ROOT.resolve())
        subprocess.run(['git', '-c', 'core.hooksPath=/dev/null', 'clone', '--bare', '--shared',
                        str(ROOT), str(repo)], env=env, check=True, capture_output=True)
        def git(*args):
            return subprocess.check_output(['git', '-c', 'core.hooksPath=/dev/null', *args],
                                           cwd=repo, env=env, text=True).strip()
        submission = git('rev-parse', 'HEAD')
        main = gate.MAIN_ANCHOR
        tree = git('merge-tree', '--write-tree', main, submission)
        synthetic = git('commit-tree', tree, '-p', main, '-p', submission,
                        '-m', 'synthetic C; no Root qualification')
        assert git('show', '-s', '--format=%P', synthetic).split() == [main, submission]
        assert git('rev-parse', synthetic + '^{tree}') == tree
        result = gate.qualify_normal_candidate(synthetic, tree, main, submission, tree)
        assert result == expected_candidate(synthetic, tree, main, submission, tree)
    return {'scope': 'isolated candidate structure only; provenance remains external',
            'synthetic_equal_parents_and_tree': result, 'formal_acceptance': False}
 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--pure-only', action='store_true', help='no Git, engine or scratch directory')
    args = parser.parse_args()
    print(json.dumps(run_pure() if args.pure_only else run(), indent=2))
@@ -0,0 +1,89 @@
 #!/usr/bin/env python3
 """Optional getter projection controls; these are never native proof."""
 import json
 import struct
 import sys
 sys.dont_write_bytecode = True
 import p04_native_series as s
 def string(value, kind=4):
    data = value.encode()
    return struct.pack('<II', kind, len(data)) + data + b'\0' * ((-len(data)) % 4)
 def integer(value):
    return struct.pack('<Ii', 2, value)
 def dictionary(rows):
    return struct.pack('<II', 27, len(rows)) + b''.join(k + v for k, v in rows)
 def array(values, typed=None):
    return (struct.pack('<I', 28 if typed is None else 28 | (1 << 16)) +
            (b'' if typed is None else struct.pack('<I', typed)) +
            struct.pack('<I', len(values)) + b''.join(values))
 def run():
    results = []
    canonical = dictionary([(string('a'), array([string('item')])), (string('n'), integer(7))])
    getter = dictionary([(string('n', 21), integer(7)),
                         (string('a', 21), array([string('item', 21)], typed=21))])
    assert s.persisted_day_projection(s.variant(getter)) == canonical
    results.append({'case': 'typed_array_headers_and_StringName_only', 'result': 'accepted'})
    def reject(name, action, error=None):
        try:
            action()
        except ValueError as exc:
            assert error is None or error in str(exc), (name, str(exc))
            results.append({'case': name, 'result': 'rejected', 'error': str(exc)})
        else:
            raise AssertionError('negative accepted: ' + name)
    def compare(data):
        s.require(s.persisted_day_projection(s.variant(data)) == canonical, 'persisted value mismatch')
    reject('dropped_field', lambda: compare(dictionary([(string('n'), integer(7))])))
    reject('extra_field', lambda: compare(dictionary([(string('a'), array([string('item')])),
                                                      (string('n'), integer(7)), (string('x'), integer(0))])))
    reject('int_to_float', lambda: compare(dictionary([(string('a'), array([string('item')])),
                                                       (string('n'), struct.pack('<If', 3, 7.0))])))
    floating = dictionary([(string('n'), struct.pack('<If', 3, 7.0))])
    reject('float_to_int', lambda: s.require(s.persisted_day_projection(s.variant(floating)) ==
                                            dictionary([(string('n'), integer(7))]), 'numeric type changed'))
    reject('value_change', lambda: compare(dictionary([(string('a'), array([string('item')])),
                                                       (string('n'), integer(8))])))
    reject('nonfinite_float', lambda: s.persisted_day_projection(s.variant(dictionary([
        (string('n'), struct.pack('<If', 3, float('inf')))]))), 'NON_FINITE_NUMBER')
    reject('invalid_key_type', lambda: s.persisted_day_projection(s.variant(dictionary([
        (struct.pack('<II', 1, 1), integer(1))]))), 'INVALID_DICTIONARY_KEY')
    reject('key_collision', lambda: s.persisted_day_projection(s.variant(dictionary([
        (integer(1), integer(1)), (string('1'), integer(2))]))), 'DUPLICATE_CANONICAL_KEY')
    reject('unsaveable_variant', lambda: s.persisted_day_projection(s.variant(dictionary([
        (string('x'), struct.pack('<Iff', 5, 1.0, 2.0))]))), 'UNSAVEABLE_VARIANT')
    reject('wrong_to_snapshot_variant_chain', lambda: s.persisted_day_projection(s.variant(getter),
        chain='_to_snapshot_variant'), 'projection call chain')
    reject('projection_on_native_persisted_comparison', lambda: s.persisted_day_projection(s.variant(getter),
        comparison='native_expected_restored'), 'projection forbidden')
    reject('single_string_budget', lambda: s.persisted_day_projection(s.variant(dictionary([
        (string('x'), string('x' * 4097))]))), 'STRING_TOO_LONG')
    reject('collection_budget', lambda: s.persisted_day_projection(s.variant(dictionary([
        (string('x'), array([integer(0)] * 20001))]))), 'COLLECTION_TOO_LARGE')
    nested = integer(1)
    for _ in range(33):
        nested = array([nested])
    reject('depth_budget', lambda: s.persisted_day_projection(s.variant(dictionary([
        (string('x'), nested)]))), 'MAX_VARIANT_DEPTH')
    # The collision prepass must win over invalid-key and child errors.
    reject('collision_error_precedence', lambda: s.persisted_day_projection(s.variant(dictionary([
        (struct.pack('<II', 1, 1), struct.pack('<If', 3, float('inf'))),
        (string('true'), integer(0))]))), 'DUPLICATE_CANONICAL_KEY')
    return {'scope': 'synthetic projection controls only', 'results': results}
 if __name__ == '__main__':
    print(json.dumps(run(), indent=2))
@@ -0,0 +1,174 @@
 #!/usr/bin/env python3
 """Real B1/R2 positive controls and semantic mutation negatives for Root."""
 import argparse
 import copy
 import json
 from pathlib import Path
 import sys
 from unittest.mock import patch
 sys.dont_write_bytecode = True
 import p04_native_series as series
 from build_p04_index import checker
 def run(build):
    gate = checker()
    base = build / 'audit-support/native-first-current'
    results = []
    def reject(name, action):
        try:
            action()
        except (ValueError, KeyError, TypeError) as exc:
            results.append({'case': name, 'result': 'rejected', 'error': str(exc)})
        else:
            raise AssertionError('negative accepted: ' + name)
    context = series.Series(build, 's3')
    series.dependency_closure_diagnostic(context)
    reject('B1_cannot_supply_power_stop', lambda: series.power_stop(context))
    results.append({'case': 'B1_real_despawn_positive', 'result': 'accepted'})
    original_value = context.value
    for name, label, mutate in (
        ('dependency_reason_relabelled_as_NO_POWER', 'after', lambda r: r['service'].update(interruption_reason='NO_POWER')),
        ('B1_missing_at_closure', 'after', lambda r: r['guests'].update({'p04.s3.guest.b': {}})),
        ('B1_synthetic_later_guest', 'next', lambda r: r['guests'].update({'p04.s3.guest.b': {'patience_remaining': 45}})),
        ('B1_wrong_release_minute', 'next', lambda r: r['reservations'][1].update(terminal_at=961)),
        ('B1_changed_wallet', 'recovered', lambda r: r['wallets'].update({'p04.s3.guest.b': 25})),
        ('B1_missing_departure_history', 'next', lambda r: r['snapshot']['systems']['runtime']['guests'].update(persistent_records=[])),
    ):
        def altered(key, label=label, mutate=mutate):
            value = copy.deepcopy(original_value(key))
            if key == 'writer-B1-' + label:
                mutate(value)
            return value
        with patch.object(context, 'value', altered):
            reject(name, lambda: series.dependency_closure_diagnostic(context))
    gate.verify_shift_completion(base)
    results.append({'case': 'R2_real_first_1080_positive', 'result': 'accepted'})
    original_load = gate.load
    observation_path = base / 'actual-native/order-evidence/observations.json'
    for name, mutate in (
        ('R2_paid_midnight_substitution', lambda o: o['observations'][2]['service'].update(completed_at=1442)),
        ('R2_wrong_transaction', lambda o: o['observations'][2]['receipts'][0].update(id='ledger_00000099')),
        ('R2_missing_DAY2', lambda o: o['observations'][2].update(active_staff=[])),
        ('R2_after_staff_still_present', lambda o: o['observations'][3].update(active_staff=['p04.order.server.a'])),
        ('R2_next_extra_receipt', lambda o: o['observations'][5]['receipts'].append(copy.deepcopy(o['first_receipts'][0]))),
    ):
        def altered(path, mutate=mutate):
            value = original_load(path)
            if path == observation_path:
                mutate(value)
            return value
        with patch.object(gate, 'load', altered):
            reject(name, lambda: gate.verify_shift_completion(base))
    # Dynamic IDs are legitimate when every raw join agrees. These are semantic
    # overlays of already verified raw, not replacement native evidence.
    shift = gate.verify_shift_completion(base)
    old_pids = gate.native_ownership(base)
    replacements = {pid: pid + 1000000 for pid in old_pids.values()}
    replacements[shift['transaction_id']] = 'dynamic-sale-repair22'
    def remap(value):
        if isinstance(value, dict): return {k: remap(v) for k, v in value.items()}
        if isinstance(value, list): return [remap(v) for v in value]
        if isinstance(value, (str, int)) and not isinstance(value, bool):
            return replacements.get(value, value)
        return value
    with patch.object(gate, 'load', lambda path: remap(original_load(path))):
        dynamic = gate.verify_shift_completion(base)
        assert dynamic['transaction_id'] == 'dynamic-sale-repair22'
    results.append({'case': 'R2_dynamic_PID_and_transaction_positive', 'result': 'accepted'})
    wrong_end = base / 'actual-native' / gate.NATIVE_RUNS['actual-native'][0] / 'ended.json'
    def wrong_pid(path):
        value = original_load(path)
        if path == wrong_end: value['actual_pid'] += 1
        return value
    with patch.object(gate, 'load', wrong_pid):
        reject('R2_wrong_PID_join', lambda: gate.verify_shift_completion(base))
    s1 = series.Series(build, 's1')
    series.s1_semantics(s1)
    s1_value = s1.value
    for name, mutate in (
        ('S1_pre_travel_mismatch', lambda r: r['reserved_before_travel'].update(staff_cell=(6, 0, 1))),
        ('S1_no_actual_outage', lambda r: r['reserve_exhausted_before_tick']['snapshot']['game_state']['resources'].update(mana=1)),
    ):
        def altered(key, mutate=mutate):
            value = copy.deepcopy(s1_value(key))
            if key == 'writer-landing-observations': mutate(value)
            return value
        with patch.object(s1, 'value', altered):
            reject(name, lambda: series.s1_semantics(s1))
    # S4 is deliberately unavailable until the single Root collection exists.
    # Never substitute B1 or manufacture a positive raw fixture for it.
    s4 = series.S4Series(build)
    current_wrapper = series.digest((series.HERE / 's4/run_s4_native.py').read_bytes())
    historical_wrapper = series.S4_HISTORICAL_WRAPPER_SHA256
    series.verify_s4_wrapper(historical_wrapper, historical=True)
    series.verify_s4_wrapper(current_wrapper, historical=False)
    reject('historical_receipt_checked_against_current_wrapper',
           lambda: series.verify_s4_wrapper(historical_wrapper, historical=False))
    reject('current_wrapper_used_as_historical_receipt',
           lambda: series.verify_s4_wrapper(current_wrapper, historical=True))
    reject('fresh_receipt_carrying_historical_pin',
           lambda: series.verify_s4_wrapper(historical_wrapper, historical=False))
    original_read_bytes = Path.read_bytes
    def tampered_pin(path):
        data = original_read_bytes(path)
        return data + b'\n' if path == series.S4_HISTORICAL_WRAPPER else data
    with patch.object(Path, 'read_bytes', tampered_pin):
        reject('tampered_historical_pinned_copy',
               lambda: series.verify_s4_wrapper(historical_wrapper, historical=True))
    series.power_stop(s4)
    results.append({'case': 'S4_real_NO_POWER_positive', 'result': 'accepted'})
    s4_value = s4.value
    def facility_change(row, field, value, kitchen=False):
        target = row['kitchen' if kitchen else 'facility']
        target[field] = value
        for f in series.runtime(row)['facilities']['instances']:
            if f['instance_id'] == target['instance_id']: f[field] = value
    for name, mutate in (
        ('S4_related_facility_operating_false', lambda r: r.update(related_facility_operating=False)),
        ('S4_kitchen_unpowered', lambda r: facility_change(r, 'power_available', False, kitchen=True)),
        ('S4_closure_confound', lambda r: facility_change(r, 'operator_open', False)),
        ('S4_no_actual_outage', lambda r: facility_change(r, 'power_available', True)),
        ('S4_wrong_transaction_join', lambda r: series.runtime(r)['economy']['idempotency'].clear()),
    ):
        def altered(key, mutate=mutate, name=name):
            value = copy.deepcopy(s4_value(key))
            label = 'recovered' if name == 'S4_wrong_transaction_join' else 'boundary'
            if key == 'writer-S4-' + label: mutate(value)
            return value
        with patch.object(s4, 'value', altered):
            reject(name, lambda: series.power_stop(s4))
    # Rename every occurrence, including service.payment.<serviceID> keys.
    original = s4_value('writer-S4-before')['service']
    paid = series.sales(s4_value('writer-S4-recovered'))[0]
    id_map = {original['service_id']: 'dynamic-service-22', paid['transaction_id']: 'dynamic-sale-22',
              'service.payment.' + original['service_id']: 'service.payment.dynamic-service-22'}
    def dynamic_ids(value):
        if isinstance(value, dict): return {id_map.get(k, k): dynamic_ids(v) for k, v in value.items()}
        if isinstance(value, list): return [dynamic_ids(v) for v in value]
        return id_map.get(value, value) if isinstance(value, str) else value
    with patch.object(s4, 'value', lambda key: dynamic_ids(s4_value(key))):
        assert series.power_stop(s4)['transaction_id'] == 'dynamic-sale-22'
    results.append({'case': 'S4_dynamic_service_and_sale_positive', 'result': 'accepted'})
    return {'scope': 'semantic controls only; no new native execution', 'results': results}
 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--build', type=Path, required=True)
    print(json.dumps(run(parser.parse_args().build), indent=2))
@@ -5,10 +5,12 @@ import hashlib
 import importlib.util
 import json
 import os
 import py_compile
 from pathlib import Path
 import subprocess
 import sys
 import tempfile
 from unittest.mock import patch
 ROOT = Path(__file__).resolve().parents[5]
 CHECKER = ROOT / 'tools/check_p04_order_evidence.py'
@@ -22,9 +24,10 @@ def run():
    results = []
    with tempfile.TemporaryDirectory(prefix='.checker-fixtures-', dir=Path(__file__).parent) as temp:
        base = Path(temp)
-        # Keep py_compile output inside allowed_paths; delete with the fixture.
+        # Generated bytecode belongs in allocated build, never tracked docs.
-        env = dict(os.environ, PYTHONPYCACHEPREFIX=str(base / 'pycache'))
+        build = Path(os.environ['BUILD_OUTPUT_DIR']).resolve(strict=True)
-        subprocess.run(['python3', '-m', 'py_compile', str(CHECKER)], env=env, check=True)
+        with tempfile.TemporaryDirectory(prefix='p04-compile-', dir=build) as compiled:
            py_compile.compile(str(CHECKER), cfile=str(Path(compiled) / 'checker.pyc'), doraise=True)
        evidence = base / 'p04-evidence'
        evidence.mkdir()
        artifacts = {}
@@ -47,10 +50,13 @@ def run():
        add('decisions', (ROOT / 'docs/DESIGN_DECISIONS.md').read_bytes(), 'authority')
        add('a01', (ROOT / 'docs/plans/original-completion-2026-10-02/execution/p04-01-input-r01/ORDER_CONTRACT_DRAFT.md').read_bytes(), 'authority')
        add('owner', (ROOT / 'docs/plans/original-completion-2026-10-02/execution/p04-01/D05_OWNER_APPROVAL.json').read_bytes(), 'authority')
        add('remaining_owner', (ROOT / gate.DOC_SCOPE / 'D05_REMAINING_APPROVAL.json').read_bytes(), 'authority')
        authority = {ref: dict(status='approved', artifact_id=(
-            'owner' if ref.startswith('D05-P04-') else 'baseline' if ref.startswith('BASELINE:')
+            ('owner' if gate.OWNER_BINDINGS[ref][0].endswith('/D05_OWNER_APPROVAL.json') else 'remaining_owner') if ref.startswith('D05-P04-') else 'baseline' if ref.startswith('BASELINE:')
            else 'decisions' if ref == 'D-034' else 'a01'))
            for _, refs, _ in gate.REQUIRED.values() for ref in refs}
        for ref, (relative, digest) in gate.OWNER_BINDINGS.items():
            authority[ref]['source'] = relative
        add('stdout', b'SYNTHETIC fixture log', 'stdout')
        add('native_log', b'SYNTHETIC fixture log', 'native_log')
        domains = {d: dict(source_refs=[dict(path='autoload/simulation_runtime.gd', function='_advance_facilities',
@@ -124,12 +130,19 @@ def run():
                (evidence / 'index.json').write_text(json.dumps(candidate))
            if name == 'duplicate_key':
                (evidence / 'index.json').write_text('{"schema_version":1,"schema_version":1}')
-            proc = subprocess.run(['python3', str(CHECKER), '--verify-only'],
+            # These are content-layer unit cases. Stage-A real Git/FS controls
-                env=dict(os.environ, BUILD_OUTPUT_DIR=str(base)), text=True, capture_output=True)
+            # live in checker_role_fixtures.py; no production bypass is added.
-            output = json.loads(proc.stdout)
+            head = index['candidate_commit']
-            assert proc.returncode == (0 if error is None else 1), (name, proc.stdout, proc.stderr)
+            with patch.object(gate, 'verify_roles', return_value=(head, {})), patch.dict(
                    os.environ, {'BUILD_OUTPUT_DIR': str(base), 'P04_EVIDENCE_DIR': str(evidence)}):
                try:
                    gate.verify(base)
                    code, output = 0, {}
                except (ValueError, OSError, KeyError, TypeError) as exc:
                    code, output = 1, {'error': str(exc)}
            assert code == (0 if error is None else 1), (name, output)
            assert error is None or error in output.get('error',''), (name, output)
-            results.append(dict(fixture=name, exit_code=proc.returncode, result=output))
+            results.append(dict(fixture=name, exit_code=code, result=output))
        check('synthetic_scalar_only_rejected', lambda i: None, 'native bundle required')
        check('forged_registered_pin', lambda i: i['registered_pins'].update({'autoload/simulation_runtime.gd':'0'*64}), 'registered pin declaration')
        check('false_delta', lambda i: i['applicability_delta'].append({'path':'autoload/simulation_runtime.gd','function':'initialize'}), 'git diff/applicability_delta mismatch')
@@ -141,7 +154,7 @@ def run():
            (evidence / 'stdout.json').symlink_to(evidence / 'native_log.json')
        check('symlink', symlink, 'symlink')
        check('hash_mismatch', lambda i: i['artifacts']['stdout'].update(sha256='0'*64), 'artifact hash')
-        check('stale_pin', lambda i: i['source_map'].update({'autoload/simulation_runtime.gd':'0'*64}), 'stale pin')
+        check('stale_pin', lambda i: i['source_map'].update({'autoload/simulation_runtime.gd':'0'*64}), 'tested game differs from Git')
        def receipt_mutation(i):
            aid = 'power_stop_receipt'
            value = gate.load(evidence / artifacts[aid]['path'])
@@ -0,0 +1,147 @@
 #!/usr/bin/env python3
 """Real temp-Git role controls. Root executes after auto-submit; never evidence."""
 import argparse
 import copy
 import json
 import os
 from pathlib import Path
 import subprocess
 import sys
 import tempfile
 sys.dont_write_bytecode = True
 ROOT = Path(__file__).resolve().parents[5]
 def run(build, evidence):
    build, evidence = build.resolve(strict=True), evidence.resolve(strict=True)
    original = json.loads((evidence / 'index.json').read_text())
    results = []
    env = dict(os.environ, BUILD_OUTPUT_DIR=str(build), PYTHONDONTWRITEBYTECODE='1',
               GIT_CONFIG_NOSYSTEM='1', GIT_AUTHOR_NAME='P04 fixture', GIT_AUTHOR_EMAIL='fixture@invalid',
               GIT_COMMITTER_NAME='P04 fixture', GIT_COMMITTER_EMAIL='fixture@invalid')
    for name in ('GIT_DIR', 'GIT_WORK_TREE', 'GIT_INDEX_FILE', 'GIT_OBJECT_DIRECTORY',
                 'GIT_ALTERNATE_OBJECT_DIRECTORIES'):
        env.pop(name, None)
    # Never let a task build path put Git objects inside the source repository.
    # /tmp is explicit so an inherited TMPDIR cannot redirect writes into it.
    with tempfile.TemporaryDirectory(prefix='p04-role-fixtures-', dir='/tmp') as temp:
        base = Path(temp)
        assert not base.resolve().is_relative_to(ROOT.resolve())
        checkout = base / 'checkout'
        subprocess.run(['git', 'clone', '--shared', '--no-checkout', str(ROOT), str(checkout)],
                       env=env, check=True, capture_output=True)
        def git(*args):
            return subprocess.check_output(['git', '-c', 'core.hooksPath=/dev/null', *args], cwd=checkout, env=env).decode().strip()
        actual = git('rev-parse', 'HEAD')
        anchor = 'c0ea009b28a7649aca6a433a1a24dc0be5e7ab81'
        ancestry = subprocess.run(['git', 'merge-base', '--is-ancestor', anchor, actual], cwd=checkout, env=env)
        submission = git('show', '-s', '--format=%P', actual).split()[1] if ancestry.returncode == 0 else actual
        git('checkout', '--detach', submission)
        # Objects created by clone commits/merge-tree remain under build. The
        # shared canonical objects are consulted as read-only alternates only.
        probe = base / 'probe.py'
        probe.write_text(
            'import importlib.util,json,sys\nfrom pathlib import Path\n'
            'sys.dont_write_bytecode=True\n'
            's=importlib.util.spec_from_file_location("gate",Path.cwd()/"tools/check_p04_order_evidence.py")\n'
            'g=importlib.util.module_from_spec(s);sys.modules[s.name]=g;s.loader.exec_module(g)\n'
            'with g.isolated_objects():\n'
            ' g.verify_roles(json.loads(Path(sys.argv[1]).read_text()),Path(sys.argv[2]))\n')
        index_path = base / 'index.json'
        def check(name, index=None, positive=False, full=False, no_context_gap=False):
            index_path.write_text(json.dumps(original if index is None else index))
            if full:
                directory = base / name
                directory.mkdir()
                (directory / 'index.json').write_text(index_path.read_text())
                command = [sys.executable, 'tools/check_p04_order_evidence.py', '--verify-only']
                process_env = dict(env, P04_EVIDENCE_DIR=str(directory))
            else:
                command = [sys.executable, str(probe), str(index_path), str(build)]
                process_env = env
            process = subprocess.run(command, cwd=checkout, env=process_env, capture_output=True, text=True)
            if no_context_gap:
                assert 'qualification context gap' not in process.stderr, (name, process.stderr)
            if positive is not None:
                assert (process.returncode == 0) == positive, (name, process.stdout, process.stderr)
            results.append({'case': name, 'result': 'command_completed' if process.returncode == 0 else 'command_rejected',
                            'returncode': process.returncode, 'formal_acceptance': False,
                            'stdout': process.stdout, 'stderr': process.stderr})
        check('real_submission_positive', positive=True)
        game = checkout / 'project.godot'
        original_game = game.read_bytes()
        game.write_bytes(original_game + b'\n')
        check('HEAD_tree_FS_mismatch')
        game.write_bytes(original_game)
        game.unlink()
        game.symlink_to(base / 'outside')
        (base / 'outside').write_bytes(original_game)
        check('symlink_substitution')
        game.unlink()
        game.write_bytes(original_game)
        unknown = checkout / 'scripts/p04_unknown.gd'
        unknown.write_text('extends RefCounted\n')
        check('untracked_substitution')
        git('add', 'scripts/p04_unknown.gd')
        git('commit', '-m', 'fixture unknown source')
        check('unknown_source_commit')
        git('reset', '--hard', submission)
        game.unlink()
        git('add', '-u')
        git('commit', '-m', 'fixture deleted source')
        check('deleted_source_commit')
        git('reset', '--hard', submission)
        changed = copy.deepcopy(original)
        changed['product_binding']['tested_product'] = submission
        check('wrong_tested_revision', changed)
        for name, key, value in [('forged_candidate', 'candidate_tree', '0' * 40),
                                 ('code_only_real_candidate', 'code_only', True),
                                 ('phase_bypass', 'phase', 'candidate')]:
            changed = copy.deepcopy(original)
            changed[key] = value
            check(name, changed)
        git('checkout', '--detach', anchor)
        git('merge', '--no-ff', '--no-edit', submission)
        merged = git('rev-parse', 'HEAD')
        # A normal commit C cannot be relabelled as tested non-production Q.
        changed = copy.deepcopy(original)
        changed['product_binding']['tested_product'] = merged
        check('normal_C_cannot_impersonate_Q', changed)
        changed = copy.deepcopy(original)
        changed['product_binding']['tested_product'] = git('rev-parse', anchor + '^{tree}')
        check('main_tree_cannot_impersonate_Q', changed)
        # A merge made by this fixture has no independent normal-C provenance.
        # Structure qualifies; provenance and credit remain external.
        check('unqualified_merge_structure', positive=True, no_context_gap=True)
        check('unqualified_merge_downstream', positive=None, full=True, no_context_gap=True)
        synthetic = git('commit-tree', git('rev-parse', merged + '^{tree}'),
                        '-p', anchor, '-p', submission, '-m', 'synthetic normal C')
        git('checkout', '--detach', synthetic)
        check('synthetic_identical_parents_tree_structure', positive=True, no_context_gap=True)
        check('synthetic_identical_parents_tree_downstream', positive=None, full=True, no_context_gap=True)
        git('checkout', '--detach', merged)
        game.unlink()
        git('add', '-u')
        git('commit', '--amend', '--no-edit')
        changed = copy.deepcopy(original)
        changed['product_binding']['metadata'] = ['project.godot']
        check('metadata_hiding_deleted_source', changed)
        git('reset', '--hard', merged)
        changed = copy.deepcopy(original)
        changed['conditions']['power_stop']['required_measurements']['charges'] = 9
        check('forged_index', changed, full=True)
    return {'scope': 'fixture controls only', 'formal_acceptance': False,
            'condition_credit': 0, 'results': results}
 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--build', required=True, type=Path)
    parser.add_argument('--evidence', required=True, type=Path)
    args = parser.parse_args()
    print(json.dumps(run(args.build, args.evidence), indent=2))
@@ -0,0 +1,126 @@
 #!/usr/bin/env python3
 """Stage R file-only controls. Synthetic primitive controls plus real raw controls.
 Tests never alter supplied originals or the relocation. In-memory overlays are
 used for native descriptor/raw adversaries; filesystem adversaries are disposable.
 """
 import argparse
 import copy
 import json
 from pathlib import Path
 import struct
 import sys
 import tempfile
 from unittest.mock import patch
 sys.dont_write_bytecode = True
 import p04_native_series as s
 def run(build):
    results = []
    assert set(s.FRESH_RUNS) == {'s1', 's2a', 's2b', 's3', 's4', 's5'}
    assert all(callable(getattr(s, 'verify_fresh_' + name)) for name in s.FRESH_RUNS)
    results.append({'series': 'fresh', 'class': 'fresh_roster_and_entrypoints', 'result': 'pass'})
    def reject(series, name, action):
        try:
            action()
        except (ValueError, KeyError, OSError, TypeError, UnicodeError) as exc:
            results.append({'series': series, 'class': name, 'result': 'rejected', 'error': str(exc)})
        else:
            raise AssertionError('negative accepted: ' + series + '/' + name)
    with tempfile.TemporaryDirectory(prefix='.series-fixtures-', dir=build) as tmp:
        base = Path(tmp)
        data = b'func boundary():\n\treturn 42\n# included trailing comment\n'
        path = base / 'body.gd'
        path.write_bytes(data)
        pin = {'sha256': s.digest(data), 'bytes': len(data)}
        # A deliberately small resolver fixture bypasses the production-only
        # historical pinned relocation constructor, but exercises its exact read path.
        resolver = s.Resolver.__new__(s.Resolver)
        resolver.base, resolver.used = base, {}
        resolver.mapping = {'/native/body.gd': dict(pin, relocated=str(path))}
        resolver.manifest = {'product_source': {'body.gd': dict(pin, path='/native/body.gd')}}
        assert resolver.read('/native/body.gd', pin) == data
        assert s.variant(struct.pack('<Ii', 2, 42)).plain() == 42
        assert s.checked(data, pin, 'positive') == data
        results.append({'series': 'shared', 'class': 'small_synthetic_positive', 'result': 'pass'})
        link = base / 'symlink.gd'
        link.symlink_to(path)
        for name in s.NATIVE_PINS:
            context = s.Series.__new__(s.Series)
            context.build, context.run, context.references = base, s.RUNS[name], {}
            body_row = {'path': 'body.gd', 'function': 'boundary',
                        'production_body_sha256': s.digest(data), 'registered_body_sha256': s.digest(data)}
            s.source_body_pins(resolver, [body_row])
            results.append({'series': name, 'class': 'full_body_positive', 'result': 'pass'})
            reject(name, 'wrong_source_pin', lambda: resolver.read('/native/body.gd', dict(pin, sha256='0' * 64)))
            signature = s.digest(data.splitlines(keepends=True)[0])
            reject(name, 'signature_only_pin', lambda: s.source_body_pins(resolver, [dict(
                body_row, production_body_sha256=signature, registered_body_sha256=signature)]))
            reject(name, 'symlink', lambda: s.ordinary(link))
            reject(name, 'traversal', lambda: context.read_build('../body.gd'))
            reject(name, 'unmapped_original_path', lambda: resolver.read('/native/unknown.gd', pin))
            reject(name, 'relocated_manifest_native_mismatch', lambda: resolver.read('/native/body.gd', dict(pin, bytes=len(data)+1)))
            path.write_bytes(data + b'!')
            try:
                reject(name, 'relocated_byte_manifest_mismatch', lambda: resolver.read('/native/body.gd', pin))
            finally:
                path.write_bytes(data)
            reject(name, 'JSON_only_getter_substitute', lambda: s.variant(b'{"getter": {}, "passed": true}'))
            # Each series' real verifier is called for descriptor/raw overlays.
            # The native descriptor pins are intentionally not refreshed: these
            # runs and their original native descriptors are immutable inputs.
            original_read = s.Series.read_build
            run_name = s.RUNS[name]
            targets = {
                'forged_scalar': run_name + '/raw/writer.json',
                'changed_raw_byte': run_name + '/raw/writer.json',
                'formal_member_SHA_drift': run_name + '/execution.json',
                'unowned_missing_PID_end': run_name + '/writer/ended.json',
                'altered_phase_pair': run_name + '/raw/' + {
                    's1': 'reader-landing-held.var', 's2a': 'reader-C3-recall.var',
                    's2b': 'reader-night_absent-1080-before-facility.var',
                    's3': 'reader-B1-phase-960-TIME_BOUNDARIES.var'}[name],
                'relabeled_interruption_reason': run_name + '/raw/' + {
                    's1': 'writer-landing-depleted.json', 's2a': 'writer-C1-midnight.json',
                    's2b': 'writer-night_absent-1081.json', 's3': 'writer-B1-after.json'}[name],
            }
            for label, target in targets.items():
                def overlay(self, relative, descriptor=None, target=target, label=label):
                    if relative != target:
                        return original_read(self, relative, descriptor)
                    raw = s.ordinary(self.build / relative).read_bytes()
                    if label in ('changed_raw_byte', 'altered_phase_pair'):
                        raw += b' '
                    else:
                        obj = s.loads(raw)
                        if label == 'unowned_missing_PID_end':
                            obj['event'] = 'ENGINE_STARTED'
                        elif label == 'forged_scalar':
                            obj.update(passed=True, verified_conditions=list(s.RUNS), slots={})
                        elif label == 'formal_member_SHA_drift':
                            slot = next(iter(obj['formal_before']))
                            obj['formal_before'][slot]['world.bin']['sha256'] = '0' * 64
                        elif label == 'relabeled_interruption_reason':
                            if 'service' in obj:
                                obj['service']['interruption_reason'] = 'NO_POWER'
                            else:
                                obj['task']['state_reason'] = 'NO_POWER'
                        raw = json.dumps(obj).encode()
                    if descriptor is not None:
                        s.checked(raw, descriptor, relative)
                    return raw
                with patch.object(s.Series, 'read_build', overlay):
                    reject(name, label, lambda name=name: getattr(s, 'verify_' + name)(build))
    return {'scope': 'file-only Stage R controls; immutable descriptor and primitive negatives',
            'formal_acceptance': False, 'results': results}
 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--build', type=Path, required=True)
    print(json.dumps(run(parser.parse_args().build), indent=2, sort_keys=True))
@@ -0,0 +1,74 @@
 #!/usr/bin/env python3
 """Deterministic reference-only Stage R collector; never writes the final index."""
 import argparse
 import json
 import re
 from pathlib import Path
 import shutil
 import sys
 sys.dont_write_bytecode = True
 import p04_native_series as series
 def encoded(value):
    return (json.dumps(value, sort_keys=True, indent=2, ensure_ascii=False) + '\n').encode()
 def collect(build, fresh=None):
    build = Path(build).absolute()
    if fresh is not None:
        series.require(re.fullmatch(r'q[0-9]+', fresh) is not None, 'fresh collection must be q<N>')
    destination = build / ('audit-support/p04-raw-collect-' + fresh if fresh else 'audit-support/p04-raw-collect-r22')
    series.require(not destination.exists() and not destination.is_symlink(), 'collection destination already exists')
    for p in (destination.parent, *destination.parents):
        series.require(not p.is_symlink(), 'collection parent symlink')
    payloads = {}
    bindings = {}
    for name in (series.FRESH_RUNS if fresh else series.RUNS):
        result = getattr(series, ('verify_fresh_' if fresh else 'verify_') + name)(build)
        result['verifier_sha256'] = series.digest(Path(series.__file__).read_bytes())
        data = encoded(result)
        filename = name + '.json'
        payloads[filename] = data
        bindings[name] = {'path': filename, 'bytes': len(data), 'sha256': series.digest(data),
                          **({} if fresh else {'relocation_manifest_sha256': series.MANIFEST_SHA256})}
    manifest = {'protocol': 'p04-native-series-collection-v1', 'formal_acceptance': False,
                'stage_A': 'candidate binding stage A pending', 'series': bindings,
                'relocation_manifest_sha256': series.MANIFEST_SHA256,
                'relocation_manifest': 'audit-support/p04-r17-full-inputs-r01/MANIFEST.json',
                'collector_sha256': series.digest(Path(__file__).read_bytes()),
                'large_payloads_copied': 0}
    if fresh:
        manifest = {'protocol': 'p04-fresh-native-series-collection-v1', 'series': bindings,
                    'collection': fresh, 'formal_acceptance': False,
                    'collector_sha256': series.digest(Path(__file__).read_bytes()),
                    'historical_merged': False, 'large_payloads_copied': 0}
    payloads['MANIFEST.json'] = encoded(manifest)
    if fresh:
        # This is an invocation/transport record, never compared as S5 facts.
        payloads['dependency-invocation.json'] = encoded(series.S5_DEPENDENCY_INVOCATION)
    estimate = sum(len(v) for v in payloads.values())
    # The estimate precedes all writes. Reserve extra directory/allocation space.
    print(json.dumps({'estimated_payload_bytes': estimate, 'files': len(payloads),
                      'available_disk_bytes': shutil.disk_usage(destination.parent).free,
                      'large_payloads_copied': 0}), flush=True)
    series.require(shutil.disk_usage(destination.parent).free > estimate + 1048576, 'insufficient disk for pointers')
    destination.mkdir()  # exclusive creation: a previous collection is never overwritten
    for name, data in sorted(payloads.items()):
        with (destination / name).open('xb') as output:
            output.write(data)
    print(json.dumps({'collection': str(destination), 'manifest_sha256': series.digest(payloads['MANIFEST.json']),
                      'actual_payload_bytes': estimate, 'formal_acceptance': False}))
 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--build', type=Path, required=True)
    parser.add_argument('--fresh', metavar='qN')
    try:
        args = parser.parse_args()
        collect(args.build, args.fresh)
    except (ValueError, OSError, KeyError, TypeError) as exc:
        print(json.dumps({'collected': False, 'error': str(exc)}))
        sys.exit(1)
@@ -0,0 +1,254 @@
 #!/usr/bin/env python3
 """Read-only full Q verification. No normal-C join and no acceptance from counts."""
 import hashlib
 import importlib.util
 import json
 from pathlib import Path
 def require(value, message):
    if not value:
        raise ValueError(message)
 def module(name, path):
    path = Path(path).absolute()
    require('..' not in path.parts and all(not p.is_symlink() for p in (path, *path.parents)),
            'module ordinary path')
    data = path.read_bytes()
    spec = importlib.util.spec_from_file_location(name, path)
    result = importlib.util.module_from_spec(spec)
    exec(compile(data, str(path), 'exec'), result.__dict__)
    return result
 def sha(path):
    return hashlib.sha256(Path(path).read_bytes()).hexdigest()
 def content(refs):
    return {name: {key: row[key] for key in ('bytes', 'sha256')} for name, row in refs.items()}
 def roster_gate(expected, actual):
    require(len(expected) == len(set(expected)) and actual == expected, 'missing/extra/reordered suite')
 def pid_gate(row, start, end, owner):
    pid = row['actual_pid']
    require(type(pid) is int and pid > 0 and start['actual_pid'] == end['actual_pid'] == pid
            and row['native_process']['pid'] == pid, 'PID mismatch')
    require(start['owner_pid'] == end['owner_pid'] == owner
            and start['current_process_identity']['pid'] == pid
            and start['current_process_identity']['ppid'] == owner, 'PID owner')
    require(start['command'] == end['command'] == row['command'] == row['native_process']['argv'], 'PID argv')
    require(start['monotonic_ns'] < end['monotonic_ns'] and end['engine_ended'] is True
            and end['exit_code'] == end['actual_process_exit_code'] == 0
            and end['timed_out'] is False and end['lifecycle_error'] is None, 'PID end')
 def cleanup_gate(rows, count):
    require(len(rows) == count, 'cleanup roster')
    for row in rows:
        cleanup = row['cleanup']
        require(row['engine_ended'] is True and row['outer_cleanup_errors'] == []
                and cleanup['engine_ended'] is True and cleanup['errors'] == []
                and cleanup['actual_process_exit_code'] == 0, 'dirty cleanup')
        require(cleanup['attempts'], 'cleanup attempts')
        for attempt in cleanup['attempts']:
            require(attempt['errors'] == [] and attempt['kill_attempted'] is False
                    and attempt['wait_completed'] is True and attempt['wait_returned_code'] == 0,
                    'dirty cleanup wait')
 def settings_gate(before, after, selected):
    for name in ('project.godot', 'export_presets.cfg'):
        require(before[name] == after[name] == selected[name], 'settings drift: ' + name)
 def controls():
    """Pure contract negatives, independent of native success or test totals."""
    import copy
    results = []
    def reject(name, callback):
        try:
            callback()
        except ValueError:
            results.append(name)
            return
        raise ValueError('negative accepted: ' + name)
    roster_gate(['a', 'b'], ['a', 'b'])
    reject('missing-suite', lambda: roster_gate(['a', 'b'], ['a']))
    reject('extra-suite', lambda: roster_gate(['a', 'b'], ['a', 'b', 'c']))
    row = {'actual_pid': 1, 'native_process': {'pid': 2}}
    reject('PID-mismatch', lambda: pid_gate(row, {'actual_pid': 1}, {'actual_pid': 1}, 9))
    dirty = [{'engine_ended': False, 'outer_cleanup_errors': [], 'cleanup': {}}]
    reject('dirty-cleanup', lambda: cleanup_gate(dirty, 1))
    source = {name: {'bytes': 1, 'sha256': 'a'} for name in ('project.godot', 'export_presets.cfg')}
    settings_gate(source, source, source)
    changed = copy.deepcopy(source)
    changed['project.godot']['sha256'] = 'b'
    reject('settings-drift', lambda: settings_gate(source, changed, source))
    return {'controls': results, 'native_run': False, 'formal_acceptance': False}
 def verify(root, run, required):
    root, run = Path(root).resolve(strict=True), Path(run).resolve(strict=True)
    references = {}
    def read(relative):
        require(not Path(relative).is_absolute() and '..' not in Path(relative).parts, 'full raw traversal')
        path = run / relative
        require(path.is_file() and all(not p.is_symlink() for p in (path, *path.parents)), 'full raw ordinary file')
        data = path.read_bytes()
        references[relative] = {'bytes': len(data), 'sha256': hashlib.sha256(data).hexdigest()}
        return data
    def load(relative):
        return json.loads(read(relative))
    full = module('p04_actual_q_full', root / 'tools/run_all_tests.py')
    wrapper = module('p04_full_uid', Path(__file__).parent / 's5/run_s5_native.py')
    source = full.source_refs(root)
    before = load('source-start.json')
    after = full.source_refs(root)
    require(before == source == after, 'full source before/after/current')
    roster = full.roster(root)
    parse_paths = ['res://' + n for n in sorted(source) if n.endswith('.gd')]
    inputs, ended = load('runner-input.json'), load('runner-ended.json')
    roster_gate(roster, inputs['roster'])
    require(inputs['selected_source_map'] == {n: p['sha256'] for n, p in source.items()}, 'full exact Q source map')
    settings_gate(content(before), content(after), content(source))
    require(inputs['runner_sha256'] == sha(root / 'tools/run_all_tests.py')
            and inputs['marker_module_sha256'] == sha(root / 'tools/strict_test_markers.py'), 'actual runner/marker module')
    engine = wrapper.engine_pin(Path(inputs['engine']))
    require(inputs['engine_sha256'] == engine['sha256'], 'full engine pin')
    require(ended['passed'] is True and ended['error'] is None
            and ended['cleanup_errors'] == ended['guard_errors'] == [] and ended['engine_ended'] is True,
            'full run failed')
    require(inputs['run_id'] == ended['run_id'] and inputs['owner_runner_pid'] == ended['owner_runner_pid'], 'full run identity')
    require(inputs['default_player_before'] == ended['default_player_after'], 'protected profile changed')
    markers = module('p04_full_markers', root / 'tools/strict_test_markers.py')
    contract_path = root / wrapper.C_REL
    require(sha(contract_path) == inputs['marker_contract_sha256'], 'full contracts SHA')
    contracts = markers.load_contracts(contract_path)
    policy_path = full.SUPPORT / 'suite-policy.json'
    policy = full.read(policy_path)
    require(source['tools/regression/suite-policy.json']['sha256'] == sha(policy_path), 'source-bound full policy')
    full.policy_coverage(roster, source, policy)
    diagnostics = module('p04_full_diagnostics', full.SUPPORT / 'diagnostic_gate.py')
    native = module('p04_full_native', full.SUPPORT / 'owned_diagnostic_process.py')
    owners = module('p04_full_owners', full.SUPPORT / 'ordinary_proof_gate.py')
    audio = module('p04_full_audio', full.SUPPORT / 'audio_evidence_gate.py')
    sequence = [('import', None), ('parse', None)] + [(str(i).zfill(3), n) for i, n in enumerate(roster)]
    require([(p['phase'], p['test']) for p in ended['phases']] == sequence, 'entire derived phase roster')
    all_tests = load('all-tests.json')
    require(references['all-tests.json']['sha256'] == ended['all_tests_sha256'], 'full all-tests SHA')
    roster_gate(roster, [p['test'] for p in all_tests])
    require(load('parse-paths.json') == parse_paths, 'complete parse roster')
    uid_plan, uid_snapshot, binding = wrapper.load_uid_helper(root, full, source)
    plan = uid_plan(source)
    accepted = load('accepted-uids.json')
    require(load('uid-plan.json') == plan, 'derived full UID plan')
    generated, pids, suite_rows = {}, [], {}
    for index, (label, test) in enumerate(sequence):
        row = load(label + '-receipt.json')
        enriched = dict(row)
        if test:
            enriched.update(sequence=index - 2, godot=inputs['engine'])
            require(enriched == all_tests[index - 2], 'full test raw row join')
        require(enriched == ended['phases'][index] and row['passed'] is True and row['failed'] is False
                and row['validation_error'] is None and not row.get('guard_error')
                and row['default_player_entire_profile_unchanged'] is True, 'full phase guards')
        process = load(label + '/process.json')
        require(process == row['native_process'], 'native process receipt binding')
        pid_gate(row, load(label + '/started.json'), load(label + '/ended.json'), inputs['owner_runner_pid'])
        pids.append(row['actual_pid'])
        stdout, stderr, logger = [read(label + '/' + name).decode() for name in ('stdout.log', 'stderr.log', 'engine-native.log')]
        require(references[label + '/stdout.log']['sha256'] == process['stdout_sha256']
                and references[label + '/stderr.log']['sha256'] == process['stderr_sha256'], 'full streams SHA')
        require(all(references[label + '/engine-native.log'][k] == row['raw_native_log'][k]
                    for k in ('bytes', 'sha256')), 'native logger pin')
        raw = stdout + stderr
        require(read(row['log']).decode() == raw and references[row['log']]['sha256'] == row['log_sha256'], 'full raw log join')
        review = diagnostics.review_streams(native, {'stdout': stdout, 'stderr': stderr, 'native_file': logger},
                                             test, root / test if test else None)
        require(review == row['finite_original_diagnostic_review']
                and diagnostics.diagnostic_result_gate(process, review)
                and full.process_gate(process, review['allowed_e31_error_lines']), 'full strict diagnostics')
        require(row['outer_actual_capture']['passed'] is True
                and row['outer_actual_capture']['foreign_process_or_group_signals'] == 0, 'owned capture')
        if test:
            parsed = markers.parse_raw(test, raw, contracts, source[test]['sha256'])
            require(parsed == row['completion'] and parsed['passed'] is True and parsed['failures'] == 0,
                    'literal source-bound marker')
            require(row['policy'] == full.phase_policy(test, root / test, policy['suite_policies']), 'phase policy drift')
            p = row['policy']
            route = policy['outside_routes'].get(test)
            if route:
                require(full.routed_report(run / (label + '-evidence'), route, test, row['actual_pid'], raw,
                                           run / 'stage', source[test]['sha256']) == row['outside_report'],
                        'full routed proof')
            proof = run / (label + '-teardown')
            if p['ordinary_cleanup_prepared']:
                require(owners.ordinary_gate(proof, row['actual_pid'], run, p['ordinary_control_labels']) ==
                        row['ordinary_owner_pairs'], 'full ordinary ownership proof')
            if p['old_bounded_teardown'] or test == 'tests/ui/test_ui_audio_feedback.gd':
                require(audio.teardown_gate(proof, row['actual_pid'], run) == row['old_bounded_proof'],
                        'full bounded teardown proof')
            if test == 'tests/ui/test_ui_audio_feedback.gd':
                audio_dir = run / (label + '-audio-proof')
                require(audio.command_gate(audio_dir / 'actual-command-result-buffer-proof.json', audio_dir,
                                           row['actual_pid']) == row['actual_command_evidence'], 'full audio commands')
                require(audio.ogg_gate(audio_dir / 'actual-ogg-decode-player-state.json', row['actual_pid'],
                                       inputs['selected_source_map']) == row['actual_ogg_evidence'], 'full actual OGG')
            suite_rows[test] = {'phase': label, 'pid': row['actual_pid'], 'source_sha256': source[test]['sha256'],
                                'marker': parsed, 'log_sha256': row['log_sha256']}
        if label == 'parse':
            require(row['actual_parse_checks'] == len(parse_paths), 'derived parse count')
        uid = load(label + '-uids.json')
        require(uid.get('error') is None and uid['before'] == ({} if label == 'import' else accepted)
                and uid['after'] == accepted, 'full phase UID seals')
        for kind in ('startup', 'runtime'):
            snapshot = row.get('whole_' + kind + '_profile_after')
            if snapshot:
                require(full.inventory(run / 'profiles' / label / kind) == snapshot['files'],
                        'complete retained private profile')
        for name, descriptor in row['generated_reports'].items():
            require(name not in source and name not in generated, 'unique generated report')
            pin = {k: descriptor[k] for k in ('bytes', 'sha256')}
            read('stage/' + name)
            require(references['stage/' + name] == pin, 'generated report raw')
            generated[name] = pin
    require(len(set(pids)) == len(sequence) and pids == ended['actual_captured_PIDs'], 'all full unique PIDs')
    cleanup_gate(ended['final_owned_cleanup'], len(sequence))
    require(uid_snapshot(run / 'stage', dict(content(source), **generated), plan) == accepted, 'retained exact stage/UID/settings')
    totals = full.totals(all_tests, roster)
    require(all(ended[k] == v for k, v in totals.items()) and not totals['remaining_unexecuted_tests']
            and not totals['missing_marker_paths'], 'recomputed full totals')
    kitchen = [n for n in roster if Path(n).name == 'test_required_kitchen.gd']
    require(len(kitchen) == 1, 'separate required-kitchen roster binding')
    # A suite pass supplies exact-version applicability, not domain boundary proof.
    conditions = {name: {'status': 'pending_boundary_raw', 'full_suite_applicable': True}
                  for name in sorted(set(required) | {'EV'})}
    return {'verified': True, 'suites': len(roster), 'parse_files': len(parse_paths),
            'source_files': len(source), 'totals': totals, 'owned_pids': pids,
            'required_kitchen': dict(suite_rows[kitchen[0]], test=kitchen[0]),
            'conditions': conditions, 'references': references, 'source_sha256': inputs['selected_source_map'],
            'policy_sha256': sha(policy_path), 'engine_sha256': engine['sha256'],
            'normal_c_join': 'Root post-final only', 'formal_acceptance': False}
 if __name__ == '__main__':
    import argparse
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--controls', action='store_true')
    parser.add_argument('--root', type=Path)
    parser.add_argument('--run', type=Path)
    args = parser.parse_args()
    if args.controls:
        print(json.dumps(controls(), sort_keys=True))
    else:
        require(args.root is not None and args.run is not None, 'root and run required')
        gate = module('full_required_membership', args.root / 'tools/check_p04_order_evidence.py')
        print(json.dumps(verify(args.root, args.run, gate.REQUIRED), sort_keys=True))
@@ -0,0 +1,132 @@
 #!/usr/bin/env python3
 """Root-only, read-only join of actual Runner records; never grants acceptance.
 Root must select the real Runner state.sqlite, not a hand-written export. This
 checks consistency, not authenticity of an arbitrary caller-supplied database.
 No Git, engine, Runner API, SQL mutation or temporary file is used.
 Root retains a read-only Runner snapshot taken after approve; integrate deletes
 the live approval. Final evidence is read separately from the current database.
 """
 import argparse
 import hashlib
 import json
 from pathlib import Path
 import re
 import sqlite3
 MAIN = "c0ea009b28a7649aca6a433a1a24dc0be5e7ab81"
 SPEC = "9ec722e7dfb0bee178d291624a026420c08412574e238bba1fde012c7a6f7881"
 def require(value, message):
    if not value:
        raise ValueError(message)
 def unique(pairs):
    out = {}
    for key, value in pairs:
        require(key not in out, "duplicate JSON key")
        out[key] = value
    return out
 def read(path, hashes):
    path = Path(path)
    require(path.is_file() and not path.is_symlink(), "ordinary record required: " + str(path))
    require("normal-candidate-example" not in path.parts, "format samples are not authority")
    data = path.read_bytes()
    hashes[str(path)] = hashlib.sha256(data).hexdigest()
    result = json.loads(data, object_pairs_hook=unique)
    require(isinstance(result, dict) and not result.get("example_only_not_P04_authority"), "actual record required")
    return result
 def verify(database, approved_database, candidate, submission, hashes):
    for sha in (candidate, submission):
        require(re.fullmatch(r"[0-9a-f]{40}", sha), "full commit SHA required")
    database = database.resolve(strict=True)
    require(database.is_file(), "Runner database required")
    # mode=ro deliberately reads live WAL consistently; immutable=1 would hide it.
    with sqlite3.connect(database.as_uri() + "?mode=ro", uri=True) as db:
        db.row_factory = sqlite3.Row
        db.execute("PRAGMA query_only=ON")
        db.execute("BEGIN")
        task = db.execute("SELECT * FROM tasks WHERE id=?", ("P04-01",)).fetchone()
        require(task is not None, "Runner task missing")
        require(task["submitted"] == submission and task["candidate"] == candidate
                and task["main_base"] == MAIN and candidate != submission,
                "Runner candidate/submission/main_base mismatch")
        require(task["state"] in ("approved", "completed"), "Runner approval state required")
        contract = json.loads(task["contract"], object_pairs_hook=unique)
        require(contract["id"] == "P04-01" and contract["spec_sha256"] == SPEC
                and contract["validation_ids"] == ["p04-acceptance"]
                and contract["acceptance_ids"] == ["P04-01"], "immutable contract mismatch")
        approved_database = approved_database.resolve(strict=True)
        with sqlite3.connect(approved_database.as_uri() + "?mode=ro", uri=True) as approved:
            approved.row_factory = sqlite3.Row
            approved.execute("PRAGMA query_only=ON")
            approved.execute("BEGIN")
            approved_task = approved.execute("SELECT * FROM tasks WHERE id=?", ("P04-01",)).fetchone()
            require(approved_task is not None and approved_task["state"] == "approved"
                    and all(approved_task[k] == task[k] for k in ("submitted", "candidate", "main_base", "contract")),
                    "Root-retained actual approved Runner snapshot mismatch")
            approval = approved.execute("SELECT * FROM approvals WHERE task_id=?", ("P04-01",)).fetchone()
        require(approval is not None and approval["candidate"] == candidate
                and approval["main_base"] == MAIN and approval["owner"].strip(), "exact Runner approval required")
        rows = []
        for kind, sha in (("validation", submission), ("review", submission),
                          ("integration", candidate), ("final", candidate)):
            records = db.execute("SELECT * FROM evidence WHERE task_id=? AND kind=? AND commit_sha=? AND passed=1",
                                 ("P04-01", kind, sha)).fetchall()
            require(records, "Runner evidence missing: " + kind)
            for record in records:
                value = read(record["artifact"], hashes)
                require(value.get("task_id") == "P04-01" and value.get("commit") == sha, "evidence identity mismatch")
                if kind == "review":
                    require(value.get("status") == "pass" and value.get("acceptance_ids") == ["P04-01"], "independent review failed")
                    require(isinstance(value.get("findings"), list) and all(
                        f.get("severity") == "low" for f in value["findings"]), "review finding blocks join")
                else:
                    require(value.get("kind") == kind and value.get("passed") is True, "verification kind/result mismatch")
                    checks = value.get("checks")
                    require(isinstance(checks, list) and len(checks) == 1, "exact validation roster required")
                    check = checks[0]
                    require(check.get("id") == "p04-acceptance" and type(check.get("exit_code")) is int
                            and check["exit_code"] == 0 and check.get("passed") is True, "failed validation check")
                    artifact = Path(check["artifact"])
                    require(artifact.is_dir(), "registered validation artifact directory missing")
                    for name in ("command.json", "stdout.log", "stderr.log"):
                        path = artifact / name
                        require(path.is_file() and not path.is_symlink(), "registered validation log missing")
                        hashes[str(path)] = hashlib.sha256(path.read_bytes()).hexdigest()
                rows.append(dict(record))
        # Hash the logical transaction snapshot, not mutable SQLite/WAL bytes.
        snapshot = dict(task=dict(task), approval=dict(approval), evidence=rows)
        digest = hashlib.sha256(json.dumps(snapshot, sort_keys=True, separators=(",", ":")).encode()).hexdigest()
    return dict(protocol="p04-normal-c-runner-join-v1", runner_database=str(database),
                approved_runner_database=str(approved_database),
                runner_records_sha256=digest, join={"C": candidate, "S": submission, "M": MAIN},
                runner_records_consistent=True, structure_verified=False,
                source_Q_applicability_verified=False, input_sha256=hashes,
                whole_goal_accepted=False, unit_accepted=False)
 def main():
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument("--runner-db", type=Path, required=True)
    parser.add_argument("--approved-runner-db", type=Path, required=True,
                        help="Root-retained actual Runner snapshot after approve, before integrate deletes approval")
    parser.add_argument("--candidate", required=True)
    parser.add_argument("--submission", required=True)
    args = parser.parse_args()
    try:
        print(json.dumps(verify(args.runner_db, args.approved_runner_db, args.candidate, args.submission, {}), sort_keys=True))
    except (OSError, ValueError, KeyError, TypeError, sqlite3.Error) as error:
        print(json.dumps({"runner_records_consistent": False, "error": str(error), "whole_goal_accepted": False}))
        return 1
    return 0
 if __name__ == "__main__":
    raise SystemExit(main())
@@ -0,0 +1,85 @@
 #!/usr/bin/env python3
 """Root-run synthetic boundary fixtures. Never P04 authority; no default scratch."""
 import argparse
 import importlib.util
 import json
 from pathlib import Path
 import sqlite3
 import sys
 sys.dont_write_bytecode = True
 HERE = Path(__file__).resolve().parent
 spec = importlib.util.spec_from_file_location("normal_c_join", HERE / "normal_c_join.py")
 join = importlib.util.module_from_spec(spec)
 spec.loader.exec_module(join)
 def fixture(root, change):
    root.mkdir()
    submission, candidate = "1" * 40, "2" * 40
    contract = dict(id="P04-01", spec_sha256=join.SPEC,
                    validation_ids=["p04-acceptance"], acceptance_ids=["P04-01"])
    db_path = root / "runner.sqlite"
    with sqlite3.connect(db_path) as db:
        db.executescript("CREATE TABLE tasks(id,contract,state,submitted,candidate,main_base);"
                         "CREATE TABLE approvals(task_id,candidate,main_base,owner,created);"
                         "CREATE TABLE evidence(id,task_id,kind,commit_sha,artifact,passed);")
        db.execute("INSERT INTO tasks VALUES(?,?,?,?,?,?)",
                   ("P04-01", json.dumps(contract), "approved", submission, candidate, join.MAIN))
        db.execute("INSERT INTO approvals VALUES(?,?,?,?,?)", ("P04-01", candidate, join.MAIN, "fixture-only", 1.0))
        for number, kind in enumerate(("validation", "review", "integration", "final")):
            sha = submission if kind in ("validation", "review") else candidate
            value = dict(task_id="P04-01", commit=sha)
            if kind == "review":
                value.update(status="pass", acceptance_ids=["P04-01"], findings=[])
                if change == "medium":
                    value["findings"] = [{"severity": "medium", "message": "synthetic"}]
            else:
                logs = root / (kind + "-logs")
                logs.mkdir()
                for name in ("command.json", "stdout.log", "stderr.log"):
                    (logs / name).write_text("{}" if name.endswith("json") else "synthetic fixture only\n")
                check = dict(id="p04-acceptance", exit_code=0, artifact=str(logs), passed=True)
                value.update(kind=kind, passed=True, checks=[check])
                if kind == "final":
                    if change == "wrong_C": value["commit"] = "3" * 40
                    if change == "kind_missing": del value["kind"]
                    if change == "failed_check": check["exit_code"] = 1
                    if change == "extra_id": value["checks"].append(dict(check, id="extra"))
                    if change == "missing_id": value["checks"] = []
                    if change == "task_mismatch": value["task_id"] = "P26-01"
                    if change == "missing_artifact": check["artifact"] = str(root / "missing")
            artifact = root / (kind + ".json")
            artifact.write_text(json.dumps(value))
            db.execute("INSERT INTO evidence VALUES(?,?,?,?,?,?)", (number, "P04-01", kind, sha, str(artifact), 1))
        if change == "wrong_M": db.execute("UPDATE tasks SET main_base=?", ("3" * 40,))
        if change == "wrong_approval": db.execute("UPDATE approvals SET candidate=?", ("3" * 40,))
        if change == "no_final": db.execute("DELETE FROM evidence WHERE kind='final'")
    return db_path, submission, candidate
 def main():
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument("--scratch", type=Path, required=True)
    args = parser.parse_args()
    root = args.scratch.resolve()
    if root.exists() or root.is_relative_to(HERE.parents[4]) or root == Path("/tmp").resolve() or Path("/tmp").resolve() in root.parents:
        raise ValueError("fresh external scratch required; /tmp and repository are prohibited")
    root.mkdir(parents=True)
    results = []
    for name in ("positive", "wrong_C", "wrong_M", "kind_missing", "failed_check", "extra_id",
                 "missing_id", "task_mismatch", "medium", "missing_artifact", "wrong_approval", "no_final"):
        path, submission, candidate = fixture(root / name, name)
        try:
            result = join.verify(path, path, candidate, submission, {})
            if name != "positive" or result["whole_goal_accepted"] is not False:
                raise AssertionError("unexpected qualification: " + name)
        except ValueError:
            if name == "positive": raise
        results.append(name)
    print(json.dumps(dict(synthetic_controls=results, whole_goal_accepted=False)))
    return 0
 if __name__ == "__main__":
    raise SystemExit(main())
@@ -0,0 +1,160 @@
 #!/usr/bin/env python3
 """Runner-only retained-raw identity controls; no engine or acceptance run."""
 import argparse
 import copy
 import hashlib
 import importlib.util
 import json
 from pathlib import Path
 import shutil
 import sys
 import tempfile
 sys.dont_write_bytecode = True
 HERE = Path(__file__).resolve().parent
 def load(path, name):
    spec = importlib.util.spec_from_file_location(name, path)
    value = importlib.util.module_from_spec(spec)
    exec(compile(path.read_bytes(), str(path), 'exec'), value.__dict__)
    return value
 def rejects(call):
    try:
        call()
    except (ValueError, OSError, KeyError, TypeError):
        return
    raise AssertionError('negative admitted')
 def tree(root):
    rows = {}
    for p in root.rglob('*'):
        if p.is_file():
            digest = hashlib.sha256()
            with p.open('rb') as source:
                for chunk in iter(lambda: source.read(1024 * 1024), b''):
                    digest.update(chunk)
            rows[p.relative_to(root).as_posix()] = digest.hexdigest()
    return rows
 # Explicit audited package-local closure; see REPAIR49_STATUS.md.
 CLOSURE = ('build_p04_index.py', 'bulk_reader_equivalence.py', 'checker_applicability_fixtures.py', 'checker_approval_fixtures.py', 'checker_candidate_fixtures.py', 'checker_encoder_fixtures.py', 'checker_join_fixtures.py', 'checker_native_fixtures.py', 'checker_negative_fixtures.py', 'checker_role_fixtures.py', 'checker_series_fixtures.py', 'collect_p04_native.py', 'full_suite_verifier.py', 'normal_c_join.py', 'normal_c_join_fixtures.py', 'p04_native_series.py', 'repair48_identity_controls.py', 'repair48_transport_controls.py', 's1/S1_ROOT_RUN.md', 's1/p04_s1_ev_power_probe.gd', 's1/run_s1_native.py', 's2/S2_ROOT_RUN.md', 's2/p04_s2a_midnight_probe.gd', 's2/run_s2a_native.py', 's2b/S2B_ROOT_RUN.md', 's2b/p04_s2b_shift_probe.gd', 's2b/run_s2b_native.py', 's3/S3_ROOT_RUN.md', 's3/p04_s3_closure_probe.gd', 's3/run_s3_native.py', 's4/S4_ROOT_RUN.md', 's4/admission_controls.py', 's4/engine_identity_negative_fixtures.py', 's4/p04_s4_power_probe.gd', 's4/phase_cut_regression.py', 's4/receipt_lifecycle_fixtures.py', 's4/run_s4_native.py', 's5/S5_ROOT_RUN.md', 's5/p04_s5_power_probe.gd', 's5/repair44_controls.py', 's5/run_s5_native.py', 's5/s5_guard_oracle.py', 's5/s5_order_adapter.py', 's5/s5_order_adapter_controls.py', 's5/s5_power_adapter.py', 's5/s5_power_adapter_controls.py', 's5/s5_uid_controls.py', 's5/s5_wrapper_fixtures.py', 'scratch_fixture_adapter.py')
 def package_snapshot(root):
    root = Path(root).absolute()
    rows = {}
    for name in CLOSURE:
        relative = Path(name)
        if relative.is_absolute() or '..' in relative.parts:
            raise ValueError('closure traversal/outside')
        path = root / relative
        if (any(p.is_symlink() for p in (path, *path.parents))
                or not path.resolve(strict=True).is_relative_to(root.resolve(strict=True))
                or not path.is_file()):
            raise ValueError('closure missing/symlink/outside: ' + name)
        data = path.read_bytes()
        rows[name] = {'bytes': len(data), 'sha256': hashlib.sha256(data).hexdigest()}
    encoded = json.dumps(rows, sort_keys=True, separators=(',', ':')).encode()
    return {'files': rows, 'tree_sha256': hashlib.sha256(encoded).hexdigest()}
 def run(args):
    raw = args.raw.resolve(strict=True)
    with tempfile.TemporaryDirectory(prefix='p04-r48-identity-') as directory:
        base = Path(directory).resolve()
        suffix = Path('docs/plans/original-completion-2026-10-02/execution/p04-01')
        packages = [base / name / suffix for name in ('first', 'second')]
        original_package = package_snapshot(HERE)
        names = [Path(name) for name in CLOSURE]
        for package in packages:
            for relative in names:
                target = package / relative
                target.parent.mkdir(parents=True, exist_ok=True)
                shutil.copyfile(HERE / relative, target)
        snapshots_before = [package_snapshot(root) for root in (HERE, *packages)]
        assert all(row == original_package for row in snapshots_before)
        a, b = [load(p / 's5/s5_order_adapter.py', 'identity_' + str(i))
                for i, p in enumerate(packages)]
        first = a.derive(raw, args.writer_sha, args.reader_sha)
        assert b.derive(raw, args.writer_sha, args.reader_sha) == first
        assert a.DEPENDENCY_OBSERVATIONS != b.DEPENDENCY_OBSERVATIONS
        if args.build:
            build = args.build.resolve(strict=True)
            before = tree(build)
            # These independent packages execute the same complete analysis bytes.
            native = [load(p / 'p04_native_series.py', 'native_' + str(i))
                      for i, p in enumerate(packages)]
            assert native[0].verify_fresh_s5(build) == native[1].verify_fresh_s5(build)
            original_builder = load(HERE / 'build_p04_index.py', 'original_builder')
            gate = original_builder.checker()
            builders = [load(p / 'build_p04_index.py', 'builder_' + str(i))
                        for i, p in enumerate(packages)]
            assert builders[0].payload(build, gate) == builders[1].payload(build, gate)
            assert tree(build) == before
        snapshots_after = [package_snapshot(root) for root in (HERE, *packages)]
        assert snapshots_after == snapshots_before
        missing = packages[1] / 's5/p04_s5_power_probe.gd'
        saved = missing.read_bytes()
        missing.unlink()
        rejects(lambda: package_snapshot(packages[1]))
        missing.write_bytes(saved)
        assert package_snapshot(packages[1]) == original_package
        for kind in ('byte', 'missing', 'extra', 'mapping'):
            original = copy.deepcopy(a.DEPENDENCIES)
            key = next(iter(original))
            if kind == 'byte':
                a.DEPENDENCIES[key] = '0' * 64
            elif kind == 'missing':
                del a.DEPENDENCIES[key]
            elif kind == 'extra':
                a.DEPENDENCIES['extra.py'] = '0' * 64
            else:
                a.DEPENDENCY_OBSERVATIONS[key] = '/outside-package.py'
            rejects(lambda: a.derive(raw, args.writer_sha, args.reader_sha))
            a.DEPENDENCIES.clear()
            a.DEPENDENCIES.update(original)
            a.DEPENDENCY_OBSERVATIONS.update(a._EXECUTED_OBSERVATIONS)
        target = packages[1] / 's5/s5_guard_oracle.py'
        target.write_bytes(target.read_bytes() + b'\n')
        changed = load(packages[1] / 's5/s5_order_adapter.py', 'changed_identity')
        assert changed.DEPENDENCIES != a.DEPENDENCIES
        # Reject the changed payload at the same equality boundary used for recomputation.
        rejects(lambda: a.require(changed.derive(raw, args.writer_sha, args.reader_sha) == first,
                                  'fresh raw recomputation drift'))
        target.unlink()
        target.symlink_to(packages[0] / 's5/s5_guard_oracle.py')
        rejects(lambda: load(packages[1] / 's5/s5_order_adapter.py', 'symlink_identity'))
        rejects(lambda: a.module('outside_identity', HERE / 's5/s5_guard_oracle.py'))
        target.unlink()
        target.write_bytes((HERE / 's5/s5_guard_oracle.py').read_bytes())
        assert [package_snapshot(root) for root in (HERE, *packages)] == snapshots_before
    if args.build:
        # A retained complete B is required. Never call the registered checker main().
        builder = load(HERE / 'build_p04_index.py', 'identity_builder')
        build = args.build.resolve(strict=True)
        before = tree(build)
        first = builder.payload(build)
        assert builder.payload(build) == first and tree(build) == before
        changed = copy.deepcopy(first)
        changed['runner_material_relocation']['sha256'] = '0' * 64
        rejects(lambda: builder.require(changed == builder.payload(build), 'index recomputation mismatch'))
        rejects(lambda: builder.checker().supplied_file(build, {
            'path': '/outside-B/material', 'bytes': 0, 'sha256': '0' * 64}))
    assert package_snapshot(HERE) == original_package
    print(json.dumps({'identity_controls': 'pass', 'complete_B_controls': bool(args.build),
                      'formal_acceptance': False,
                      'closure_before': snapshots_before, 'closure_after': snapshots_after}))
 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--raw', type=Path, required=True)
    parser.add_argument('--writer-sha', required=True)
    parser.add_argument('--reader-sha', required=True)
    parser.add_argument('--build', type=Path)
    run(parser.parse_args())
@@ -0,0 +1,159 @@
 #!/usr/bin/env python3
 """Runner-only, engine-free retained-copy transport controls. No acceptance."""
 import argparse
 import copy
 import hashlib
 import importlib.util
 import json
 from pathlib import Path
 import tempfile
 from unittest.mock import patch
 import sys
 sys.dont_write_bytecode = True
 spec = importlib.util.spec_from_file_location('transport', Path(__file__).with_name('build_p04_index.py'))
 builder = importlib.util.module_from_spec(spec)
 spec.loader.exec_module(builder)
 def sha(data):
    return hashlib.sha256(data).hexdigest()
 def tree(root):
    return {p.relative_to(root).as_posix(): sha(p.read_bytes())
            for p in root.rglob('*') if p.is_file()}
 def rejects(call):
    try:
        call()
    except (ValueError, OSError, KeyError, TypeError):
        return
    raise AssertionError('negative admitted')
 def run(retained):
    manifest = json.loads((retained / 'REAL_S47_PINNED_MATERIAL_COPIES.json').read_bytes())
    inputs, sources = {}, {}
    for name, row in manifest['series'].items():
        data = (retained / row['raw_input']).read_bytes()
        assert len(data) == row['bytes'] and sha(data) == row['sha256']
        inputs[name] = json.loads(data)
    for original, row in manifest['materials'].items():
        data = (retained / row['retained_copy']).read_bytes()
        assert len(data) == row['bytes'] and sha(data) == row['sha256']
        sources[original] = data
    assert any('p04-fresh-context-r47' in p for p in sources)
    assert any('P04-01-root-q-r47' in p for p in sources)
    original_checked = builder.checked_material
    def retained_checked(path, pin):
        if str(path) in sources:
            data = sources[str(path)]
            builder.require(len(data) == pin['bytes'] and sha(data) == pin['sha256'], 'retained pin')
            return data
        return original_checked(path, pin)
    with tempfile.TemporaryDirectory(prefix='p04-repair48-') as directory:
        build = Path(directory).resolve()
        with patch.object(builder, 'series_inputs', return_value=inputs), \
                patch.object(builder, 'checked_material', side_effect=retained_checked):
            output = build / 'p04-evidence'
            rejects(lambda: builder.relocate_materials(build, build / 'wrong'))
            assert not output.exists()
            builder.relocate_materials(build, output)
            rejects(lambda: builder.relocate_materials(build, output))
            before = tree(build)
            first = builder.relocated_materials(build)
            assert builder.relocated_materials(build) == first and tree(build) == before
            map_path = output / 'runner-materials/RELOCATION.json'
            map_bytes = map_path.read_bytes()
            mapping = json.loads(map_bytes)
            identities = {(pin['path'], pin['bytes'], pin['sha256'])
                          for raw in inputs.values() for pin in raw['fixed_input_pins'] + [raw['QA']]}
            assert len({row['relative'] for rows in mapping.values() for row in rows.values()}) == len(identities)
            series = next(iter(inputs))
            original = next(iter(mapping[series]))
            target = output / mapping[series][original]['relative']
            data = target.read_bytes()
            target.write_bytes(data + b'x')
            rejects(lambda: builder.relocated_materials(build))
            target.write_bytes(data)
            target.unlink()
            target.symlink_to(map_path)
            rejects(lambda: builder.relocated_materials(build))
            target.unlink()
            target.write_bytes(data)
            for kind in ('missing', 'extra', 'mapping', 'traversal', 'external'):
                changed = copy.deepcopy(mapping)
                if kind == 'missing':
                    del changed[series][original]
                elif kind == 'extra':
                    changed[series]['/extra'] = changed[series][original]
                else:
                    changed[series][original]['relative'] = {
                        'mapping': 'runner-materials/wrong', 'traversal': '../outside',
                        'external': '/outside-B'}[kind]
                map_path.write_text(json.dumps(changed))
                rejects(lambda: builder.relocated_materials(build))
                map_path.write_bytes(map_bytes)
            extra = output / 'runner-materials/unmapped'
            extra.write_bytes(b'extra')
            rejects(lambda: builder.relocated_materials(build))
            extra.unlink()
            for digest in ('0' * 64, None):
                altered = copy.deepcopy(inputs)
                altered[series]['wrapper_sha256'] = digest
                with patch.object(builder, 'series_inputs', return_value=altered):
                    rejects(lambda: builder.relocated_materials(build))
            # A second distinct pin carrying wrapper bytes is ambiguous.
            altered = copy.deepcopy(inputs)
            wrapper = next(p for p in altered[series]['fixed_input_pins']
                           if p['sha256'] == altered[series]['wrapper_sha256'])
            altered[series]['fixed_input_pins'].append(dict(wrapper, path='/different-wrapper'))
            with patch.object(builder, 'series_inputs', return_value=altered):
                rejects(lambda: builder.relocated_materials(build))
            assert tree(build) == before
    raw = copy.deepcopy(next(iter(inputs.values())))
    pin = copy.deepcopy(raw['QA'])
    raw['fixed_input_pins'].append(pin)
    assert len(builder.pin_roster(raw)) == len({p['path'] for p in raw['fixed_input_pins'] + [raw['QA']]})
    with tempfile.TemporaryDirectory(prefix='p04-r48-dedup-') as directory:
        build = Path(directory).resolve()
        with patch.object(builder, 'series_inputs', return_value={'s1': raw}), \
                patch.object(builder, 'checked_material', side_effect=retained_checked):
            mapping = builder.relocate_materials(build, build / 'p04-evidence')
            assert len(mapping['s1']) == len(builder.pin_roster(raw))
            builder.relocated_materials(build)
    raw['fixed_input_pins'].append(dict(pin, bytes=pin['bytes'] + 1))
    rejects(lambda: builder.pin_roster(raw))
    rejects(lambda: builder.ordinary('/a/../b'))
    changed = copy.deepcopy(inputs)
    series = next(iter(changed))
    changed[series]['QA']['sha256'] = '0' * 64
    rejects(lambda: builder.all_rosters(changed))
    # Exercise the actual immutable checker's role binding predicate, with
    # simulated Git observations only. No objects, refs or checkouts are written.
    gate = builder.checker()
    old = next(iter(inputs.values()))['provenance']
    new_submission, composed = 'f' * 40, 'e' * 40
    assert old['S'] != new_submission
    with patch.object(gate, 'actual_checkout', return_value=(new_submission, composed, {})), \
            patch.object(gate, '_GIT_ENV', {}), \
            patch.object(gate, 'ancestor', return_value=False), \
            patch.object(gate, 'submission_role'), \
            patch.object(gate, 'git_bytes', return_value=composed.encode()):
        try:
            gate.verify_roles({'fresh_run_bindings': old}, Path('/retained-B'))
        except ValueError as error:
            assert str(error) == 'fresh evidence does not bind recomputed Q'
        else:
            raise AssertionError('old S47 bindings admitted under new S')
    print(json.dumps({'retained_S47_transport_controls': 'pass', 'formal_acceptance': False}))
 if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--retained', type=Path, required=True)
    run(parser.parse_args().retained.resolve(strict=True))
@@ -0,0 +1,44 @@
 #!/usr/bin/env python3
 """Root-only engine-free whole-read/stream SHA equivalence controls."""
 import hashlib
 import importlib.util
 import json
 from pathlib import Path
 import sys
 import tempfile
 import time
 sys.dont_write_bytecode = True
 def main():
    started = time.monotonic()
    path = Path(__file__).with_name('repair48_identity_controls.py')
    spec = importlib.util.spec_from_file_location('r50_identity', path)
    module = importlib.util.module_from_spec(spec)
    exec(compile(path.read_bytes(), str(path), 'exec'), module.__dict__)
    chunk = 1024 * 1024  # Implementation boundary, never an acceptance limit.
    with tempfile.TemporaryDirectory(prefix='p04-r50-stream-') as directory:
        root = Path(directory)
        (root / 'empty').write_bytes(b'')
        (root / '日本語🌳').write_bytes('木と水\n🌳'.encode())
        (root / 'binary').write_bytes(bytes(range(256)) * 5)
        for size in (chunk - 1, chunk, chunk + 1, chunk * 3 + 17):
            (root / str(size)).write_bytes((bytes(range(256)) * (size // 256 + 1))[:size])
        with (root / 'sparse').open('wb') as stream:
            stream.seek(chunk * 4 + 3)
            stream.write(b'\xff')
        nested = root / 'nested'
        nested.mkdir()
        (nested / '全bytes').write_bytes(b'\x00\xff\x80\n')
        whole = {p.relative_to(root).as_posix(): hashlib.sha256(p.read_bytes()).hexdigest()
                 for p in root.rglob('*') if p.is_file()}
        streamed = module.tree(root)
        assert list(streamed) == list(whole), 'same traversal/key insertion order'
        assert streamed == whole, 'complete SHA map equality'
    print(json.dumps({'stream_equivalence': 'pass', 'files': whole,
                      'elapsed': time.monotonic() - started, 'formal_acceptance': False}, sort_keys=True))
 if __name__ == '__main__':
    main()
@@ -1,3 +1,26 @@
 ## REPAIR49 normal-gate handoff
 Required materials: exact B/native-first-current and fresh-run registry; each
 runner-input/ended/source/UID/formal/raw/lifecycle receipt; original recorded Q
 and engine context; B/p04-evidence/runner-materials and RELOCATION.json; matching
 collection/MANIFEST and separate dependency invocation; original full run and
 full_suite binding/raw receipts; final index and invocation receipt; immutable
 authorities in frozen checkout. No raw or historical receipt is rewritten.
 Two-placement identity requires the explicit closure in repair48_identity_controls.py,
 missing-file rejection, and original/A/B complete path/bytes/SHA tables and tree
 hash equality before and after positive execution. See REPAIR49_STATUS.md.
 Submission is followed by new Q freeze, affected pure controls (complete_B included),
 clean exact-Q check-only, capacity/PID checks, one fresh native lease for
 S1/S2a/S2b/S3/S4 and all ten S5 cases, readers/adapters, 15EV collector, full
 verification/binding under the conditions below (or one final full184 if any
 condition fails), index generation, p04-acceptance once, separate Opus whole-unit
 review, normal prepare/C/integration/final/Root DB join/ledger/main push.
 If order-typed fails, preserve its result and stop before heavy execution.
 Only whole-unit acceptance grants credit.
 REPAIR48 current source status: see [REPAIR48_STATUS.md](../REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
 # S1 Root run（コード準備のみ）
 S1コード準備完了・未実測・原P04 whole未達。D05 pending、A未検証。
@@ -2,6 +2,7 @@
 """S1-only native entry. --check-only never loads ownership helpers or starts Godot."""
 from pathlib import Path
 import argparse
 import copy
 import hashlib
 import importlib.util
 import json
@@ -52,16 +53,39 @@ def main():
    parser.add_argument("--cache-run", type=Path, default=CACHE_RUN)
    parser.add_argument("--godot", type=Path, default=ENGINE)
    parser.add_argument("--check-only", action="store_true")
    parser.add_argument("--main")
    parser.add_argument("--submission")
    parser.add_argument("--tested-tree")
    parser.add_argument("--historical-r17", action="store_true")
    args = parser.parse_args()
    shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")
    mode = shared.select_mode(args)
    fresh = mode == "fresh-q"
    if fresh and "--project-root" not in sys.argv:
        raise ValueError("fresh-q requires explicit --project-root")
    if fresh and "--cache-run" not in sys.argv:
        args.cache_run = None
    engine_descriptor = shared.engine_pin(args.godot) if fresh else None
    provenance = None
    if args.project_root.is_symlink():
        raise ValueError("project root symlink")
    root = args.project_root.resolve()
    out = args.output.resolve()
    if fresh:
        if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
            raise ValueError("fresh plan/output must stay inside BUILD")
        if out.exists() or out.is_symlink() or (args.check_only and args.plan.exists()):
            raise ValueError("fresh output and plan required")
    r = module("s1_standard_runner", root / "tools/run_all_tests.py")
    # Preserve the reviewed source_refs -> exactly one QA override order.
    source_before = r.source_refs(root)
    if fresh:
        provenance = shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree)
    refs = dict(source_before)
    refs[TEST] = pin(QA)
    expected = {n: dict(bytes=p["bytes"], sha256=p["sha256"]) for n, p in refs.items()}
-    fixed = [pin(p) for p in MATERIALS + [
+    fixed = [pin(p) for p in ([] if fresh else MATERIALS) + [
        QA, Path(__file__), HERE / "S1_ROOT_RUN.md",
        root / "tests/transport/test_runtime_transport.gd",
        root / "tests/staff/test_rescue_elevator.gd",
@@ -70,7 +94,7 @@ def main():
    selected = dict(root_before=source_before, map={n: p["sha256"] for n, p in refs.items()}, timeout=1200)
    cache_note = None
    cache_receipts = []
-    for leaf in ["runner-ended.json", "runner-input.json"]:
+    for leaf in (["runner-ended.json", "runner-input.json"] if args.cache_run is not None else []):
        path = args.cache_run / leaf
        try:
            cache_receipts.append(pin(path))
@@ -84,6 +108,16 @@ def main():
                cache_receipts=cache_receipts, cache_access=cache_note,
                phases=["import", "parse", "writer", "reader"],
                native_engine_launches=0, whole_goal_accepted=False, unit_accepted=False)
    if fresh:
        uid_plan, uid_snapshot, uid_binding = shared.load_uid_helper(root, r, source_before)
        uid_source = copy.deepcopy(expected)
        uid_plan_map = uid_plan(refs)
        plan.update(protocol="p04-s1-fresh-q-v1", mode=mode, provenance=provenance, engine=engine_descriptor,
                    engine_sha256=engine_descriptor["sha256"], uid_helper=uid_binding,
                    uid_plan=uid_plan_map, import_mode="fresh" if args.cache_run is None else "cache",
                    historical_r17=False, fresh_q_evidence=False)
        fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))
    # No historical execution is admitted.
    # Check-only only reads source/materials and writes the plan in task build.
    # It deliberately does not read default-player data, inspect processes or stat Godot.
    if args.check_only:
@@ -96,18 +130,30 @@ def main():
                              QA_overrides=[TEST], fixed_pins=len(fixed), plan=str(args.plan),
                              plan_sha256=r.sha(args.plan), cache_access=cache_note), ensure_ascii=False))
        return 0
    r.require(fresh, "historical mode is read-only")
    r.require(args.plan.is_file() and r.read(args.plan) == plan, "run exact check-only plan first")
    reports, phase_call, uid_state = shared.make_uid_policy(r, uid_snapshot, uid_source, uid_plan_map, out)
    engine_checks = []
    def fresh_engine_check(label):
        value = shared.engine_pin(args.godot, engine_descriptor)
        engine_checks.append(dict(label=label, descriptor=value))
    def fixed_guard():
        fresh_engine_check("fixed")
        r.require(shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree) == provenance,
                  "fresh Q provenance changed")
        r.require(pin(root / uid_binding["helper_path"])["sha256"] == uid_binding["helper_sha256"],
                  "UID helper changed")
        for value in fixed + cache_receipts:
            r.require(pin(value["path"]) == value, "fixed input changed: " + value["path"])
    fixed_guard()
    # Native admission is Root-only and fails closed on unreadable cache.
    r.require(cache_note is None, "Root must read exact cache receipts: " + str(cache_note))
    old = args.cache_run
-    r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
+    if old is not None:
-    old_map = r.read(old / "runner-input.json")["selected_source_map"]
+        r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
-    current_map = {n: p["sha256"] for n, p in source_before.items()}
+        old_map = r.read(old / "runner-input.json")["selected_source_map"]
-    r.require(old_map == current_map, "ended cache selected source must equal current product")
+        current_map = {n: p["sha256"] for n, p in source_before.items()}
        r.require(old_map == current_map, "ended cache selected source must equal current product")
    protected = r.default_player(root)
    outer = module("s1_owned_outer", r.SUPPORT / "owned_outer.py")
    r.require(not outer.native.helper["live_engines"](), "another Godot owns CPU")
@@ -152,20 +198,21 @@ def main():
            data = value["text"].encode()
            r.require(hashlib.sha256(data).hexdigest() == value["sha256"], "bootstrap pin")
            (out / "bootstrap" / name).write_bytes(data)
-        cache = old / "stage/.godot"
+        if old is not None:
-        cache_before = r.inventory(cache)
+            cache = old / "stage/.godot"
-        r.require(bool(cache_before), "nonempty ended cache")
+            cache_before = r.inventory(cache)
-        for name in cache_before:
+            r.require(bool(cache_before), "nonempty ended cache")
-            src = cache / name
+            for name in cache_before:
-            dst = stage / ".godot" / name
+                src = cache / name
-            dst.parent.mkdir(parents=True, exist_ok=True)
+                dst = stage / ".godot" / name
-            subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
+                dst.parent.mkdir(parents=True, exist_ok=True)
-            r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
+                subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
-                      "cache clone is a separate inode")
+                r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
-        r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
+                          "cache clone is a separate inode")
-        r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
+            r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
-                whole_cache=cache_before, independent_inode=True,
+            r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
-                ordinary_import_required=True, ordinary_parse_required=True))
+                    whole_cache=cache_before, independent_inode=True,
                    ordinary_import_required=True, ordinary_parse_required=True))
        paths = ["res://" + n for n in sorted(refs) if n.endswith(".gd")]
        r.write(out / "parse-paths.json", paths)
        markers = module("s1_markers", root / "tools/strict_test_markers.py")
@@ -187,7 +234,10 @@ def main():
                writer = r.read(out / "raw/writer.json")
                formal_before = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
                r.require(len(formal_before) == 14, "all fourteen formal writer points")
-            row = r.execute_phase(str(engine), stage, out, phase, test, selected, expected,
+            fresh_engine_check("before-" + phase)
            if phase == "import" and old is None:
                r.require(not (stage / ".godot").exists(), "fresh import cache absent")
            row = phase_call(str(engine), stage, out, phase, test, selected, expected,
                                  previous, policy, contracts, paths, public, protected, root,
                                  outer, markers, diagnostics, owners, audio)
            phases.append(row)
@@ -220,6 +270,8 @@ def main():
    # Fixed guard always follows ownership cleanup, even if setup or an engine failed.
    try:
        fixed_guard()
        r.require(uid_snapshot(stage, uid_source, uid_plan_map) == uid_state["accepted"], "UID seal after cleanup")
        r.write(out / "fresh-engine-checks.json", engine_checks)
        after = r.source_refs(root)
        r.write(out / "source_after.json", after)
        r.require(after == source_before, "whole product source unchanged")
@@ -231,9 +283,15 @@ def main():
    except BaseException as caught:
        guards.append(type(caught).__name__ + ": " + str(caught))
    pids = [p.pid for p in outer.OWNED]
-    passed = (error is None and not guards and not cleanup_errors and len(phases) == 4
+    passed = (uid_state["accepted"] is not None and error is None and not guards and not cleanup_errors and len(phases) == 4
              and all(p["passed"] for p in phases) and len(pids) == len(set(pids)) == 4
              and all(p["engine_ended"] for p in cleanup))
    if passed:
        try:
            shared.mirror_formal(r, out, formal_before)
        except BaseException as caught:
            guards.append("formal mirror: " + str(caught))
            passed = False
    execution = dict(passed=passed, error=error, guard_errors=guards, phases=phases,
                     actual_captured_PIDs=pids, cleanup=cleanup, cleanup_errors=cleanup_errors,
                     formal_before=formal_before, formal_after=formal_after,
@@ -1,3 +1,26 @@
 ## REPAIR49 normal-gate handoff
 Required materials: exact B/native-first-current and fresh-run registry; each
 runner-input/ended/source/UID/formal/raw/lifecycle receipt; original recorded Q
 and engine context; B/p04-evidence/runner-materials and RELOCATION.json; matching
 collection/MANIFEST and separate dependency invocation; original full run and
 full_suite binding/raw receipts; final index and invocation receipt; immutable
 authorities in frozen checkout. No raw or historical receipt is rewritten.
 Two-placement identity requires the explicit closure in repair48_identity_controls.py,
 missing-file rejection, and original/A/B complete path/bytes/SHA tables and tree
 hash equality before and after positive execution. See REPAIR49_STATUS.md.
 Submission is followed by new Q freeze, affected pure controls (complete_B included),
 clean exact-Q check-only, capacity/PID checks, one fresh native lease for
 S1/S2a/S2b/S3/S4 and all ten S5 cases, readers/adapters, 15EV collector, full
 verification/binding under the conditions below (or one final full184 if any
 condition fails), index generation, p04-acceptance once, separate Opus whole-unit
 review, normal prepare/C/integration/final/Root DB join/ledger/main push.
 If order-typed fails, preserve its result and stop before heavy execution.
 Only whole-unit acceptance grants credit.
 REPAIR48 current source status: see [REPAIR48_STATUS.md](../REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
 # P04-01 S2a Root run（code-ready提出用・実測未実施）
 repair12確認: worktreeのoperations_coordinator.gd SHA256は
@@ -2,6 +2,7 @@
 """S2a-only native entry. --check-only never loads ownership helpers or starts Godot."""
 from pathlib import Path
 import argparse
 import copy
 import hashlib
 import importlib.util
 import json
@@ -73,17 +74,40 @@ def main():
    parser.add_argument("--cache-run", type=Path, default=CACHE_RUN)
    parser.add_argument("--godot", type=Path, default=ENGINE)
    parser.add_argument("--check-only", action="store_true")
    parser.add_argument("--main")
    parser.add_argument("--submission")
    parser.add_argument("--tested-tree")
    parser.add_argument("--historical-r17", action="store_true")
    args = parser.parse_args()
    shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")
    mode = shared.select_mode(args)
    fresh = mode == "fresh-q"
    if fresh and "--project-root" not in sys.argv:
        raise ValueError("fresh-q requires explicit --project-root")
    if fresh and "--cache-run" not in sys.argv:
        args.cache_run = None
    engine_descriptor = shared.engine_pin(args.godot) if fresh else None
    provenance = None
    if args.project_root.is_symlink():
        raise ValueError("project root symlink")
    root = args.project_root.resolve()
    out = args.output.resolve()
    if fresh:
        if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
            raise ValueError("fresh plan/output must stay inside BUILD")
        if out.exists() or out.is_symlink() or (args.check_only and args.plan.exists()):
            raise ValueError("fresh output and plan required")
    r = module("s2a_standard_runner", root / "tools/run_all_tests.py")
    # Preserve the reviewed source_refs -> exactly one QA override order.
    source_before = r.source_refs(root)
    if fresh:
        provenance = shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree)
    refs = dict(source_before)
    refs[TEST] = pin(QA)
-    template_guard()
+    if not fresh: template_guard()
    expected = {n: dict(bytes=p["bytes"], sha256=p["sha256"]) for n, p in refs.items()}
-    fixed = [pin(p) for p in MATERIALS + [
+    fixed = [pin(p) for p in ([] if fresh else MATERIALS) + [
        QA, Path(__file__), HERE / "S2_ROOT_RUN.md",
        root / "tests/transport/test_runtime_transport.gd",
        root / "tests/staff/test_rescue_elevator.gd",
@@ -92,7 +116,7 @@ def main():
    selected = dict(root_before=source_before, map={n: p["sha256"] for n, p in refs.items()}, timeout=1200)
    cache_note = None
    cache_receipts = []
-    for leaf in ["runner-ended.json", "runner-input.json"]:
+    for leaf in (["runner-ended.json", "runner-input.json"] if args.cache_run is not None else []):
        path = args.cache_run / leaf
        try:
            cache_receipts.append(pin(path))
@@ -106,6 +130,16 @@ def main():
                cache_receipts=cache_receipts, cache_access=cache_note,
                phases=["import", "parse", "writer", "reader"],
                native_engine_launches=0, whole_goal_accepted=False, unit_accepted=False)
    if fresh:
        uid_plan, uid_snapshot, uid_binding = shared.load_uid_helper(root, r, source_before)
        uid_source = copy.deepcopy(expected)
        uid_plan_map = uid_plan(refs)
        plan.update(protocol="p04-s2a-fresh-q-v1", mode=mode, provenance=provenance, engine=engine_descriptor,
                    engine_sha256=engine_descriptor["sha256"], uid_helper=uid_binding,
                    uid_plan=uid_plan_map, import_mode="fresh" if args.cache_run is None else "cache",
                    historical_r17=False, fresh_q_evidence=False)
        fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))
    # No historical execution is admitted.
    # Check-only only reads source/materials and writes the plan in task build.
    # It deliberately does not read default-player data, inspect processes or stat Godot.
    if args.check_only:
@@ -118,19 +152,31 @@ def main():
                              QA_overrides=[TEST], fixed_pins=len(fixed), plan=str(args.plan),
                              plan_sha256=r.sha(args.plan), cache_access=cache_note), ensure_ascii=False))
        return 0
    r.require(fresh, "historical mode is read-only")
    r.require(args.plan.is_file() and r.read(args.plan) == plan, "run exact check-only plan first")
    reports, phase_call, uid_state = shared.make_uid_policy(r, uid_snapshot, uid_source, uid_plan_map, out)
    engine_checks = []
    def fresh_engine_check(label):
        value = shared.engine_pin(args.godot, engine_descriptor)
        engine_checks.append(dict(label=label, descriptor=value))
    def fixed_guard():
-        template_guard()
+        fresh_engine_check("fixed")
        r.require(shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree) == provenance,
                  "fresh Q provenance changed")
        r.require(pin(root / uid_binding["helper_path"])["sha256"] == uid_binding["helper_sha256"],
                  "UID helper changed")
        if not fresh: template_guard()
        for value in fixed + cache_receipts:
            r.require(pin(value["path"]) == value, "fixed input changed: " + value["path"])
    fixed_guard()
    # Native admission is Root-only and fails closed on unreadable cache.
    r.require(cache_note is None, "Root must read exact cache receipts: " + str(cache_note))
    old = args.cache_run
-    r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
+    if old is not None:
-    old_map = r.read(old / "runner-input.json")["selected_source_map"]
+        r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
-    current_map = {n: p["sha256"] for n, p in source_before.items()}
+        old_map = r.read(old / "runner-input.json")["selected_source_map"]
-    r.require(old_map == current_map, "ended cache selected source must equal current product")
+        current_map = {n: p["sha256"] for n, p in source_before.items()}
        r.require(old_map == current_map, "ended cache selected source must equal current product")
    protected = r.default_player(root)
    outer = module("s2a_owned_outer", r.SUPPORT / "owned_outer.py")
    r.require(not outer.native.helper["live_engines"](), "another Godot owns CPU")
@@ -175,20 +221,21 @@ def main():
            data = value["text"].encode()
            r.require(hashlib.sha256(data).hexdigest() == value["sha256"], "bootstrap pin")
            (out / "bootstrap" / name).write_bytes(data)
-        cache = old / "stage/.godot"
+        if old is not None:
-        cache_before = r.inventory(cache)
+            cache = old / "stage/.godot"
-        r.require(bool(cache_before), "nonempty ended cache")
+            cache_before = r.inventory(cache)
-        for name in cache_before:
+            r.require(bool(cache_before), "nonempty ended cache")
-            src = cache / name
+            for name in cache_before:
-            dst = stage / ".godot" / name
+                src = cache / name
-            dst.parent.mkdir(parents=True, exist_ok=True)
+                dst = stage / ".godot" / name
-            subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
+                dst.parent.mkdir(parents=True, exist_ok=True)
-            r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
+                subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
-                      "cache clone is a separate inode")
+                r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
-        r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
+                          "cache clone is a separate inode")
-        r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
+            r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
-                whole_cache=cache_before, independent_inode=True,
+            r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
-                ordinary_import_required=True, ordinary_parse_required=True))
+                    whole_cache=cache_before, independent_inode=True,
                    ordinary_import_required=True, ordinary_parse_required=True))
        paths = ["res://" + n for n in sorted(refs) if n.endswith(".gd")]
        r.write(out / "parse-paths.json", paths)
        markers = module("s2a_markers", root / "tools/strict_test_markers.py")
@@ -210,7 +257,10 @@ def main():
                writer = r.read(out / "raw/writer.json")
                formal_before = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
                r.require(len(formal_before) == 1, "one C3 formal writer point")
-            row = r.execute_phase(str(engine), stage, out, phase, test, selected, expected,
+            fresh_engine_check("before-" + phase)
            if phase == "import" and old is None:
                r.require(not (stage / ".godot").exists(), "fresh import cache absent")
            row = phase_call(str(engine), stage, out, phase, test, selected, expected,
                                  previous, policy, contracts, paths, public, protected, root,
                                  outer, markers, diagnostics, owners, audio)
            phases.append(row)
@@ -245,6 +295,8 @@ def main():
    # Fixed guard always follows ownership cleanup, even if setup or an engine failed.
    try:
        fixed_guard()
        r.require(uid_snapshot(stage, uid_source, uid_plan_map) == uid_state["accepted"], "UID seal after cleanup")
        r.write(out / "fresh-engine-checks.json", engine_checks)
        after = r.source_refs(root)
        r.write(out / "source_after.json", after)
        r.require(after == source_before, "whole product source unchanged")
@@ -260,9 +312,15 @@ def main():
    except BaseException as caught:
        guards.append(type(caught).__name__ + ": " + str(caught))
    pids = [p.pid for p in outer.OWNED]
-    passed = (error is None and not guards and not cleanup_errors and len(phases) == 4
+    passed = (uid_state["accepted"] is not None and error is None and not guards and not cleanup_errors and len(phases) == 4
              and all(p["passed"] for p in phases) and len(pids) == len(set(pids)) == 4
              and all(p["engine_ended"] for p in cleanup))
    if passed:
        try:
            shared.mirror_formal(r, out, formal_before)
        except BaseException as caught:
            guards.append("formal mirror: " + str(caught))
            passed = False
    execution = dict(passed=passed, error=error, guard_errors=guards, phases=phases,
                     actual_captured_PIDs=pids, cleanup=cleanup, cleanup_errors=cleanup_errors,
                     formal_before=formal_before, formal_after=formal_after,
@@ -1,3 +1,28 @@
 ## REPAIR49 normal-gate handoff
 Required materials: exact B/native-first-current and fresh-run registry; each
 runner-input/ended/source/UID/formal/raw/lifecycle receipt; original recorded Q
 and engine context; B/p04-evidence/runner-materials and RELOCATION.json; matching
 collection/MANIFEST and separate dependency invocation; original full run and
 full_suite binding/raw receipts; final index and invocation receipt; immutable
 authorities in frozen checkout. No raw or historical receipt is rewritten.
 Two-placement identity requires the explicit closure in repair48_identity_controls.py,
 missing-file rejection, and original/A/B complete path/bytes/SHA tables and tree
 hash equality before and after positive execution. See REPAIR49_STATUS.md.
 Submission is followed by new Q freeze, affected pure controls (complete_B included),
 clean exact-Q check-only, capacity/PID checks, one fresh native lease for
 S1/S2a/S2b/S3/S4 and all ten S5 cases, readers/adapters, 15EV collector, full
 verification/binding under the conditions below (or one final full184 if any
 condition fails), index generation, p04-acceptance once, separate Opus whole-unit
 review, normal prepare/C/integration/final/Root DB join/ledger/main push.
 If order-typed fails, preserve its result and stop before heavy execution.
 Only whole-unit acceptance grants credit.
 REPAIR48 current source status: see [REPAIR48_STATUS.md](../REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
 RUN47 note: Earlier 1338-source native instructions below describe the historical relocation. Current fresh-Q selection uses exact source/manifest equality, never a literal file count. See ../REPAIR47_PLAN.json.
 # P04-01 S2b code preparation
 変更は本ディレクトリの `p04_s2b_shift_probe.gd`、`run_s2b_native.py`、本書の3ファイルのみ。
@@ -2,6 +2,7 @@
 """S2b-only native entry. --check-only never loads ownership helpers or starts Godot."""
 from pathlib import Path
 import argparse
 import copy
 import hashlib
 import importlib.util
 import json
@@ -62,19 +63,42 @@ def main():
    parser.add_argument("--cache-run", type=Path, default=CACHE_RUN)
    parser.add_argument("--godot", type=Path, default=ENGINE)
    parser.add_argument("--check-only", action="store_true")
    parser.add_argument("--main")
    parser.add_argument("--submission")
    parser.add_argument("--tested-tree")
    parser.add_argument("--historical-r17", action="store_true")
    args = parser.parse_args()
    shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")
    mode = shared.select_mode(args)
    fresh = mode == "fresh-q"
    if fresh and "--project-root" not in sys.argv:
        raise ValueError("fresh-q requires explicit --project-root")
    if fresh and "--cache-run" not in sys.argv:
        args.cache_run = None
    engine_descriptor = shared.engine_pin(args.godot) if fresh else None
    provenance = None
    if args.project_root.is_symlink():
        raise ValueError("project root symlink")
    root = args.project_root.resolve()
    out = args.output.resolve()
    if fresh:
        if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
            raise ValueError("fresh plan/output must stay inside BUILD")
        if out.exists() or out.is_symlink() or (args.check_only and args.plan.exists()):
            raise ValueError("fresh output and plan required")
    if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
        raise ValueError("plan/output must stay in task build")
    r = module("s2b_standard_runner", root / "tools/run_all_tests.py")
    # Preserve the reviewed source_refs -> exactly one QA override order.
    source_before = r.source_refs(root)
    if fresh:
        provenance = shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree)
    refs = dict(source_before)
    refs[TEST] = pin(QA)
-    template_guard(root)
+    if not fresh: template_guard(root)
    expected = {n: dict(bytes=p["bytes"], sha256=p["sha256"]) for n, p in refs.items()}
-    fixed = [pin(p) for p in MATERIALS + [
+    fixed = [pin(p) for p in ([] if fresh else MATERIALS) + [
        QA, Path(__file__), HERE / "S2B_ROOT_RUN.md",
        root / "tests/transport/test_runtime_transport.gd",
        root / "tests/staff/test_rescue_elevator.gd",
@@ -83,7 +107,7 @@ def main():
    selected = dict(root_before=source_before, map={n: p["sha256"] for n, p in refs.items()}, timeout=1200)
    cache_note = None
    cache_receipts = []
-    for leaf in ["runner-ended.json", "runner-input.json"]:
+    for leaf in (["runner-ended.json", "runner-input.json"] if args.cache_run is not None else []):
        path = args.cache_run / leaf
        try:
            cache_receipts.append(pin(path))
@@ -97,6 +121,16 @@ def main():
                cache_receipts=cache_receipts, cache_access=cache_note,
                phases=["import", "parse", "writer", "reader"],
                native_engine_launches=0, whole_goal_accepted=False, unit_accepted=False)
    if fresh:
        uid_plan, uid_snapshot, uid_binding = shared.load_uid_helper(root, r, source_before)
        uid_source = copy.deepcopy(expected)
        uid_plan_map = uid_plan(refs)
        plan.update(protocol="p04-s2b-fresh-q-v1", mode=mode, provenance=provenance, engine=engine_descriptor,
                    engine_sha256=engine_descriptor["sha256"], uid_helper=uid_binding,
                    uid_plan=uid_plan_map, import_mode="fresh" if args.cache_run is None else "cache",
                    historical_r17=False, fresh_q_evidence=False)
        fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))
    # No historical execution is admitted.
    # Check-only only reads source/materials and writes the plan in task build.
    # It deliberately does not read default-player data, inspect processes or stat Godot.
    if args.check_only:
@@ -109,20 +143,31 @@ def main():
                              QA_overrides=[TEST], fixed_pins=len(fixed), plan=str(args.plan),
                              plan_sha256=r.sha(args.plan), cache_access=cache_note), ensure_ascii=False))
        return 0
-    r.require(root == PRODUCT.resolve() and len(source_before) == 1338, "Root native requires product 1338; worker plan is not native evidence")
+    r.require(fresh, "historical mode is read-only")
    r.require(args.plan.is_file() and r.read(args.plan) == plan, "run exact check-only plan first")
    reports, phase_call, uid_state = shared.make_uid_policy(r, uid_snapshot, uid_source, uid_plan_map, out)
    engine_checks = []
    def fresh_engine_check(label):
        value = shared.engine_pin(args.godot, engine_descriptor)
        engine_checks.append(dict(label=label, descriptor=value))
    def fixed_guard():
-        template_guard(root)
+        fresh_engine_check("fixed")
        r.require(shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree) == provenance,
                  "fresh Q provenance changed")
        r.require(pin(root / uid_binding["helper_path"])["sha256"] == uid_binding["helper_sha256"],
                  "UID helper changed")
        if not fresh: template_guard(root)
        for value in fixed + cache_receipts:
            r.require(pin(value["path"]) == value, "fixed input changed: " + value["path"])
    fixed_guard()
    # Native admission is Root-only and fails closed on unreadable cache.
    r.require(cache_note is None, "Root must read exact cache receipts: " + str(cache_note))
    old = args.cache_run
-    r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
+    if old is not None:
-    old_map = r.read(old / "runner-input.json")["selected_source_map"]
+        r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
-    current_map = {n: p["sha256"] for n, p in source_before.items()}
+        old_map = r.read(old / "runner-input.json")["selected_source_map"]
-    r.require(old_map == current_map, "ended cache selected source must equal current product")
+        current_map = {n: p["sha256"] for n, p in source_before.items()}
        r.require(old_map == current_map, "ended cache selected source must equal current product")
    protected = r.default_player(root)
    outer = module("s2b_owned_outer", r.SUPPORT / "owned_outer.py")
    r.require(not outer.native.helper["live_engines"](), "another Godot owns CPU")
@@ -167,20 +212,21 @@ def main():
            data = value["text"].encode()
            r.require(hashlib.sha256(data).hexdigest() == value["sha256"], "bootstrap pin")
            (out / "bootstrap" / name).write_bytes(data)
-        cache = old / "stage/.godot"
+        if old is not None:
-        cache_before = r.inventory(cache)
+            cache = old / "stage/.godot"
-        r.require(bool(cache_before), "nonempty ended cache")
+            cache_before = r.inventory(cache)
-        for name in cache_before:
+            r.require(bool(cache_before), "nonempty ended cache")
-            src = cache / name
+            for name in cache_before:
-            dst = stage / ".godot" / name
+                src = cache / name
-            dst.parent.mkdir(parents=True, exist_ok=True)
+                dst = stage / ".godot" / name
-            subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
+                dst.parent.mkdir(parents=True, exist_ok=True)
-            r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
+                subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
-                      "cache clone is a separate inode")
+                r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
-        r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
+                          "cache clone is a separate inode")
-        r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
+            r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
-                whole_cache=cache_before, independent_inode=True,
+            r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
-                ordinary_import_required=True, ordinary_parse_required=True))
+                    whole_cache=cache_before, independent_inode=True,
                    ordinary_import_required=True, ordinary_parse_required=True))
        paths = ["res://" + n for n in sorted(refs) if n.endswith(".gd")]
        r.write(out / "parse-paths.json", paths)
        markers = module("s2b_markers", root / "tools/strict_test_markers.py")
@@ -202,7 +248,10 @@ def main():
                writer = r.read(out / "raw/writer.json")
                formal_before = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
                r.require(len(formal_before) == 6, "three formal points for each of two fresh branches")
-            row = r.execute_phase(str(engine), stage, out, phase, test, selected, expected,
+            fresh_engine_check("before-" + phase)
            if phase == "import" and old is None:
                r.require(not (stage / ".godot").exists(), "fresh import cache absent")
            row = phase_call(str(engine), stage, out, phase, test, selected, expected,
                                  previous, policy, contracts, paths, public, protected, root,
                                  outer, markers, diagnostics, owners, audio)
            phases.append(row)
@@ -237,6 +286,8 @@ def main():
    # Fixed guard always follows ownership cleanup, even if setup or an engine failed.
    try:
        fixed_guard()
        r.require(uid_snapshot(stage, uid_source, uid_plan_map) == uid_state["accepted"], "UID seal after cleanup")
        r.write(out / "fresh-engine-checks.json", engine_checks)
        after = r.source_refs(root)
        r.write(out / "source_after.json", after)
        r.require(after == source_before, "whole product source unchanged")
@@ -252,9 +303,15 @@ def main():
    except BaseException as caught:
        guards.append(type(caught).__name__ + ": " + str(caught))
    pids = [p.pid for p in outer.OWNED]
-    passed = (error is None and not guards and not cleanup_errors and len(phases) == 4
+    passed = (uid_state["accepted"] is not None and error is None and not guards and not cleanup_errors and len(phases) == 4
              and all(p["passed"] for p in phases) and len(pids) == len(set(pids)) == 4
              and all(p["engine_ended"] for p in cleanup))
    if passed:
        try:
            shared.mirror_formal(r, out, formal_before)
        except BaseException as caught:
            guards.append("formal mirror: " + str(caught))
            passed = False
    execution = dict(passed=passed, error=error, guard_errors=guards, phases=phases,
                     actual_captured_PIDs=pids, cleanup=cleanup, cleanup_errors=cleanup_errors,
                     formal_before=formal_before, formal_after=formal_after,
@@ -0,0 +1,120 @@
 ## REPAIR49 normal-gate handoff
 Required materials: exact B/native-first-current and fresh-run registry; each
 runner-input/ended/source/UID/formal/raw/lifecycle receipt; original recorded Q
 and engine context; B/p04-evidence/runner-materials and RELOCATION.json; matching
 collection/MANIFEST and separate dependency invocation; original full run and
 full_suite binding/raw receipts; final index and invocation receipt; immutable
 authorities in frozen checkout. No raw or historical receipt is rewritten.
 Two-placement identity requires the explicit closure in repair48_identity_controls.py,
 missing-file rejection, and original/A/B complete path/bytes/SHA tables and tree
 hash equality before and after positive execution. See REPAIR49_STATUS.md.
 Submission is followed by new Q freeze, affected pure controls (complete_B included),
 clean exact-Q check-only, capacity/PID checks, one fresh native lease for
 S1/S2a/S2b/S3/S4 and all ten S5 cases, readers/adapters, 15EV collector, full
 verification/binding under the conditions below (or one final full184 if any
 condition fails), index generation, p04-acceptance once, separate Opus whole-unit
 review, normal prepare/C/integration/final/Root DB join/ledger/main push.
 If order-typed fails, preserve its result and stop before heavy execution.
 Only whole-unit acceptance grants credit.
 REPAIR48 current source status: see [REPAIR48_STATUS.md](../REPAIR48_STATUS.md). Earlier run directions and successes below are historical; they grant no P04 credit.
 RUN47 note: Earlier 1338-source native instructions below describe the historical relocation. Current fresh-Q selection uses exact source/manifest equality, never a literal file count. See ../REPAIR47_PLAN.json.
 # P04-01 S3 code-ready preparation
 変更は本ディレクトリのGD、Python wrapper、本書の3本のみ。製品修正0。
 本提出は原P04-01の残る5条件の検証コード準備であり、原成果の加点は0。
 原7領域、3安全結果、15条件＋EV、30/88、部分点0を維持する。
 S1r02、S2ar03、S2b native r02は保持し再実行しない。
 ## 固定入力と6実ケース
 最初に供給SOURCE_MANIFEST.jsonの7ファイルについて全byte SHA256とbyte数の一致を確認した。
 manifest自体のSHAは `d4993398f7619ca37bcd64c32b79bdee892d44e31f332cc0dd5f31fb7bc28314`。
 wrapperは同manifest、7供給ファイル、Rootの現行source audit、S2bの3ファイル、本3ファイルをpinする。
 選択rootの全sourceもsource_refsでpinし、その後にQAを1件だけ明示overrideする。
 override先はS2bと同じ `tests/s3/test_runtime_staff_assignment.gd`。
 これはprivate stageだけのoverrideで、継承先ActorHardeningを置き換えない。
 | case | seed | 境界と検証対象 |
 | --- | --- | --- |
 | B1 | 420410 | 959に開始済Aと実queue B。960に有限mana枯渇と対象への直接休業。960/961はAの進捗・同じ予約を保持し課金0、Bはrelease・在庫返却・忍耐不消費。元reserveへ公開復旧し、休業のまま962にAだけ1回課金。963で重複なし。 |
 | B2a | 420430 | 原定義のduration/priceで960完了・課金後に通常退出、961 Despawnで二重課金なし。 |
 | B2b | 420431 | 959の実queueを960の公開leaveでadmission前にrelease。961通常退出、962 Despawn。課金0。 |
 | B3 | 420435 | 元traveler.base_patience、実サーバー不足queue。template同様にfixture時刻＋base_patienceを境界とし、通常tickで枯渇。ABANDONING→DECIDING→LEAVING→Despawn、返却1回・課金0。planned_exitは元templateの境界値。 |
 | B4a | 420420 | 元diagnostic automatic DEFENSE Event、foreground=false、durability=0。960の完了・1回課金が後段Event破壊に先行。961で重複なし。 |
 | B4b | 420421 | 元durationの入場offset1。960は進捗後にEvent破壊、961でFAILED・release・返却1回、課金0。 |
 7件目は作らない。各caseはfresh Runtime/Clock/GameState、厨房は現行ActorHardeningと
 required_kitchen_setupの物理配置FLEX fixture。自然hire/unlockの証拠ではない。
 サービス価格・時間は定義取得、capacity/staff_min変更なし、忍耐・elapsedの直接変更なし。
 旧1299 wrapper、未承認18:00 predicate、本番Operations enableは使用しない。
 D-034（供給DESIGN_DECISIONS.md 252–262行、特に258行）の直接休業では開始済を継続する。
 関連厨房不稼働によるpauseとは区別する。interruption_reasonは実snapshotのまま残し、
 RELATED_FACILITY_INACTIVEをNO_POWERへ置換しない。
 enum snapshotは各create_snapshotのString定義に従い、stateをintへ変換しない。
 ## Rawと正式保存
 Writerの各before/after/next、B1 recovered/duplicate_guard、B2b/B3 despawnを正式保存する（計22slot）。
 各点の全Runtime typed snapshot、入力・seed・serial・実ID・Guest/wallet/planned_exit、
 service/request/reservation、在庫、ledger、Event instanceを無加工の.varとJSONで一度だけ保存する。
 各tickの全11phase開始点も同様に保存し、phase順と境界内部の状態を残す。
 case/indexはrawのpath/SHAを参照し、巨大snapshotのaggregate多重コピーを作らない。
 全体rawをobsolete 500000-byte capに合わせて省略・圧縮しない。
 public command入力と結果、継承fixture分を含むcommand_completed結果をcase別rawに保存する。
 fixture自身の公開command入力・IDは全Runtime command queue履歴にも残る。
 Operationsは正式snapshotのdisabled/coordinator={}と実coordinator不在を別々に記録し、無関係なgetterを呼ばない。
 公開SaveService.save_snapshot/inspect_snapshotの成功・全typed一致・live Runtime不変を確認する。
 Readerは別PID/profileで22slotの全member（journal.log/manifest.json/thumbnail.png/world.bin）をコピーし、
 原/copyの全SHA、load/replay後の両者不変を確認する。余分なmember/directoryは失敗する。
 全点を公開load/restoreしてWriterの全Runtime typed bytesと一致させる。
 さらに各beforeをfresh loadし、通常clockで同じ全境界を再生する。
 B1のfuture recoveryについてserial、idempotency key、command ID、issue minute、元reserveをbeforeに保存する。
 Readerはserial0から始め、保存済probe入力を復元して未来コマンドだけを実行する。setup keyを再利用しない。
 全pointとphaseのtyped比較からフィールドを削除せず、JSON正規化や要約への置換も行わない。
 再生中のphaseはWriterと同じ順・全typed状態、pointは入力・receiptまで含む全typed一致を必須とする。
 ## Root手順
 Rootだけが現行製品1338でfresh plan→nativeを1回実行する。
 worker checkout planを製品nativeへ転用しない。既存plan/outputは上書きしない。
 ```sh
 export BUILD_OUTPUT_DIR='/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build'
 export PYTHONDONTWRITEBYTECODE=1
 python3 docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py --check-only --plan "$BUILD_OUTPUT_DIR/p04-s3-root-plan-r01.json" --output "$BUILD_OUTPUT_DIR/p04-s3-native-r01"
 python3 docs/plans/original-completion-2026-10-02/execution/p04-01/s3/run_s3_native.py --plan "$BUILD_OUTPUT_DIR/p04-s3-root-plan-r01.json" --output "$BUILD_OUTPUT_DIR/p04-s3-native-r01"
 ```
 製品root既定値: `/Users/korizatou114/Projects/とりにく工房ゲーム制作部`。
 出力先: `/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/p04-s3-native-r01/`。
 一つのprivate stage/cacheでimport1回、parse1回、Writer1回、別PID Reader1回。
 S2bのstrict guard、policy/watchdog、marker/diagnostic/ownership/audio gateを踏襲する。
 source/cacheは別inode、owned finally後に全source/default profile/private source/pin/original cacheを検査する。
 Writer formal slot不変も失敗時を含めて検査し、4phase・4実PIDの終了とreceipt PIDを必須とする。
 check-onlyはengine0、private/default profileアクセス0、所有helper未読込。cache receiptの実読取エラーはplanに残しnativeを拒否する。
 ## 残gapとworker検証
 workerはpy_compile、check-only、型/参照の静的確認だけを行う。
 Godot parse・native・全回帰・Runner操作・git書込み・他agent起動は0。
 GDの正式parseと6ケースの実成立、全正式Save/Load/replay一致はRoot nativeまで未実証。
 S3 raw取得後のcollector/A仕上げ、原15＋EV全証拠の適用性照合、D05の原未確定規約、
 必要なOS別条件、正式独立レビュー・統合は本提出で確定しない。
 未知の原規約を新たに作らずpendingとし、P04全体完成を主張しない。
 worker実施記録: py_compile成功（出力はtask buildのp04-s3-worker-pycompile.pyc）。
 GDの明示型変数・loop・関数戻り値、禁止されたpatience/elapsed直接代入なし、継承先literal参照、
 15のservice method参照、Runtime method/signal参照、括弧整合を静的確認した。Godot parseの代替ではない。
 製品rootでのcheck-onlyはtools/run_all_tests.py読取りがPermissionErrorでexit2。
 明示worktree rootではcheck-only成功（source1300、QA1、fixed pins18、engine0）。
 終了済cacheのrunner-ended.jsonはPermissionErrorであり、planのcache_accessに実path/errorを記録した。
 製品1338のcheck-only成功やcache再利用の成立は主張しない。Rootが自身の環境で確認する。
 初回worktree planはbuild/p04-s3-worker-check-r01.json。最終3ファイルのpin確認にはfreshな
 build/p04-s3-worker-check-r02.jsonを使用し、r01は保持する。
@@ -0,0 +1,480 @@
 extends "res://tests/s3/test_runtime_actor_hardening.gd"
 const CASES: Array[String] = ["B1", "B2a", "B2b", "B3", "B4a", "B4b"]
 const SEEDS: Dictionary = {"B1": 420410, "B2a": 420430, "B2b": 420431, "B3": 420435, "B4a": 420420, "B4b": 420421}
 const GUEST: StringName = &"p04.s3.guest.a"
 const REQUEST: StringName = &"p04.s3.request.a"
 const QUEUED_GUEST: StringName = &"p04.s3.guest.b"
 const QUEUED_REQUEST: StringName = &"p04.s3.request.b"
 const SERVERS: Array[StringName] = [&"p04.order.server.a", &"p04.order.server.b"]
 var _evidence_dir: String = ""
 var _mode: String = ""
 var _case: String = ""
 var _serial: int = 0
 var _facility_id: StringName = &""
 var _service_id: StringName = &""
 var _boundary: int = 960
 var _price: int = 0
 var _duration: int = 0
 var _patience: int = 0
 var _reserve: int = 0
 var _recovery: Dictionary = {}
 var _commands: Array = []
 var _results: Array = []
 var _receipts: Array = []
 var _phases: Array = []
 var _points: Dictionary = {}
 var _branches: Dictionary = {}
 var _slots: Dictionary = {}
 func _run() -> void:
 	_evidence_dir = OS.get_environment("THE_TREE_S3_EVIDENCE")
 	_mode = OS.get_environment("THE_TREE_S3_MODE")
 	if _evidence_dir.is_empty() or _mode not in ["writer", "reader"]:
 		quit(2)
 		return
 	_expect(DirAccess.make_dir_recursive_absolute(_evidence_dir) == OK, "external evidence directory")
 	if _mode == "writer":
 		for branch: String in CASES:
 			_case = branch
 			_writer_case()
 	else:
 		_reader()
 	_write(_mode, {&"pid": OS.get_process_id(), &"profile": OS.get_user_data_dir(), &"slots": _slots,
 		&"branches": _branches, &"checks": _checks, &"failures": _failures,
 		&"whole_goal_accepted": false, &"unit_accepted": false}, true)
 	_cleanup()
 	print("S3 closure: %d checks, %d failures" % [_checks, _failures])
 	quit(1 if _failures else 0)
 func _fresh() -> void:
 	_serial = 0
 	_facility_id = &""
 	_service_id = &""
 	_boundary = 960
 	_price = 0
 	_duration = 0
 	_patience = 0
 	_reserve = 0
 	_recovery = {}
 	_commands = []
 	_results = []
 	_receipts = []
 	_phases = []
 	_points = {}
 	_reset_runtime(SEEDS[_case])
 	_runtime.configure_save_policy({&"enabled": false, &"daily_checkpoint_enabled": false})
 	_runtime.command_completed.connect(func(result: CommandResult) -> void:
 		_results.append({&"minute": _clock.absolute_minute, &"result": result.to_dictionary()})
 		_expect(result.is_success(), "actual public command completion " + str(result.command_id))
 	)
 func _cmd(kind: StringName, payload: Dictionary, at: int = -1) -> CommandResult:
 	_serial += 1
 	var key: StringName = StringName("p04.s3.%s.command.%d" % [_case, _serial])
 	var result: CommandResult = _runtime.submit_command(kind, payload, &"player", &"", 10, at, key)
 	_commands.append({&"serial": _serial, &"kind": kind, &"payload": payload.duplicate(true),
 		&"at": at, &"issued_at": _clock.absolute_minute, &"idempotency_key": key, &"result": result.to_dictionary()})
 	_expect(result.is_success(), "public command " + String(kind))
 	return result
 func _queue(guest_id: StringName, request_id: StringName, exit_at: int) -> void:
 	_cmd(&"spawn_guest", {&"guest_id": guest_id, &"guest_type_id": &"traveler", &"gold": _price * 2,
 		&"options": {&"state": GuestRuntime.State.DECIDING, &"current_cell": Vector3i.ZERO, &"planned_exit_at": exit_at}})
 	_cmd(&"create_service_request", {&"facility_id": _facility_id, &"request_id": request_id, &"guest_ids": [guest_id]})
 	var guest: GuestRuntime = _runtime.guest_service.get_guest(guest_id)
 	var request: ServiceRequest = _runtime.facility_service.get_request(request_id)
 	_expect(guest != null and request != null, "actual Guest and request exist")
 	if guest == null or request == null: return
 	_expect(guest.state == GuestRuntime.State.QUEUING and guest.queue_request_id == request_id, "actual queued ownership before advancing clock")
 	_expect(request.quoted_price == _price and request.service_minutes == _duration and request.reserved_inventory_ids.size() == 1, "definition price/duration and one meal reservation")
 	for id: StringName in request.reserved_inventory_ids:
 		var reservation: InventoryReservation = _runtime.inventory_service.get_reservation(id)
 		_expect(reservation != null and reservation.is_active() and reservation.requester_id == request_id, "public queue actually reserves meal")
 func _prepare() -> bool:
 	_fresh()
 	var facility: FacilityInstance = _build_cafeteria(true)
 	if facility == null: return false
 	_facility_id = facility.instance_id
 	var definition: FacilityDefinition = _runtime.definition_registry.get_facility(facility.definition_id)
 	var traveler: GuestDefinition = _runtime.guest_service.get_definition(&"traveler")
 	_price = definition.base_price
 	_duration = definition.base_service_minutes
 	_patience = traveler.base_patience
 	if _case == "B3":
 		_expect(_patience > 1 and _patience < 240, "original patience precedes reservation expiry")
 		if _patience <= 1 or _patience >= 240: return false
 		_boundary = _clock.absolute_minute + _patience
 		_expect(facility.operator_open and facility.is_within_opening_hours(_clock.absolute_minute) and facility.related_facility_operating and facility.active_staff_ids.size() < facility.staff_min, "real no-server queue with operating kitchen")
 	else:
 		for id: StringName in SERVERS:
 			_cmd(&"register_staff", {&"staff_id": id, &"role_id": &"server", &"options": {&"state": StaffRuntime.State.OFF_DUTY, &"current_cell": Vector3i.ZERO}})
 			_cmd(&"set_staff_work_assignment", {&"staff_id": id, &"template_id": &"DAY", &"facility_id": _facility_id})
 		var queue_at: int = 959 if _case == "B2b" else 960 - _duration - 1 + (1 if _case == "B4b" else 0)
 		_expect(queue_at > _clock.absolute_minute, "normal ticks reach queue time")
 		_clock.advance_minutes(queue_at - _clock.absolute_minute)
 		_expect(facility.active_staff_ids == SERVERS, "unchanged real server attendance")
 		for id: StringName in SERVERS:
 			var worker: StaffRuntime = _runtime.staff_service.get_staff(id)
 			_expect(_runtime.staff_service.requires_attendance(id) and StaffCommuteService.is_at_facility(worker, facility) and worker.current_cell != Vector3i.ZERO, "ordinary public server commute")
 	if _case in ["B4a", "B4b"]:
 		var action: EventAction = EventAction.new().configure(&"p04.destroy.action", EventAction.Type.SET_FACILITY_STATE, {&"facility_id": _facility_id, &"conditions": {&"durability": 0, &"suspension_reason": &"DESTROYED"}})
 		_cmd(&"register_event_definition", {&"definition": {&"event_id": &"p04.destroy.event", &"category": &"DEFENSE", &"foreground": false, &"transaction_policy": &"ROLLBACK_ALL", &"automatic_actions": [action.create_snapshot()]}})
 	_expect(_stock(facility.local_inventory_id, &"ingredient/basic_meal", 1, &"p04.order.shift.stock"), "original public stock helper")
 	var exit_at: int = _boundary if _case in ["B2a", "B2b", "B3"] else _boundary + _duration
 	_queue(GUEST, REQUEST, exit_at)
 	if _case == "B3":
 		_clock.advance_minutes(_patience - 1)
 		var guest: GuestRuntime = _runtime.guest_service.get_guest(GUEST)
 		_expect(guest.state == GuestRuntime.State.QUEUING and guest.patience_remaining == 1 and _runtime.facility_service.get_active_services(_facility_id).is_empty(), "normal ticks exhaust original patience, no manual mutation")
 	elif _case == "B2b":
 		_cmd(&"leave_facility_queue", {&"facility_id": _facility_id, &"request_id": REQUEST}, 960)
 	else:
 		_clock.advance_one_minute()
 		var active: Array = _runtime.facility_service.get_active_services(_facility_id)
 		_expect(active.size() == 1, "one public service starts")
 		if active.size() != 1: return false
 		var service: ServiceInstance = active[0]
 		_service_id = service.service_id
 		var offset: int = 1 if _case == "B4b" else 0
 		_expect(service.duration_minutes == _duration and service.price_snapshot == _price and service.started_at + _duration == 960 + offset, "original service completion alignment")
 		_clock.advance_minutes(959 - _clock.absolute_minute)
 		_expect(service.elapsed_minutes == _duration - 1 - offset, "measured boundary-before progress")
 	if _case == "B1":
 		_expect(_stock(facility.local_inventory_id, &"ingredient/basic_meal", 1, &"p04.s3.stock.b"), "second actual meal at 959")
 		_queue(QUEUED_GUEST, QUEUED_REQUEST, 960 + _duration)
 		_reserve = _state.get_resource(&"mana")
 		_expect(_reserve > 0, "original positive finite mana reserve")
 		_cmd(&"change_resources", {&"deltas": {&"mana": -_reserve}}, 960)
 		_cmd(&"set_facility_policy", {&"facility_id": _facility_id, &"patch": {&"business_open": false}}, 960)
 		var snapshot: Dictionary = _runtime.create_snapshot()
 		_recovery = {&"serial": _serial + 1, &"kind": &"change_resources", &"payload": {&"deltas": {&"mana": _reserve}},
 			&"idempotency_key": StringName("p04.s3.%s.command.%d" % [_case, _serial + 1]),
 			&"command_id": snapshot[&"systems"][&"runtime"][&"next_command_id"], &"at": -1, &"issue_minute": 961}
 	if _case in ["B4a", "B4b"]:
 		_cmd(&"enqueue_event", {&"event_id": &"p04.destroy.event", &"actor_ids": [], &"options": {&"event_instance_id": &"p04.destroy.instance"}})
 	_expect(_clock.absolute_minute == _boundary - 1, "exact boundary-before time")
 	return _clock.absolute_minute == _boundary - 1
 func _connect_observations() -> void:
 	_runtime.economy_service.transaction_posted.connect(func(id: StringName, entries: Array) -> void:
 		var rows: Array = []
 		for entry: LedgerEntry in entries: rows.append(entry.to_dictionary())
 		_receipts.append({&"id": id, &"minute": _clock.absolute_minute, &"entries": rows})
 	)
 	_clock.tick_phase_started.connect(func(phase: int, minute: int) -> void:
 		var label: String = "phase-%d-%s" % [minute, SimulationKernel.TickPhase.keys()[phase]]
 		var row: Dictionary = _capture()
 		row[&"phase"] = SimulationKernel.TickPhase.keys()[phase]
 		_assert_phase(row)
 		_phases.append(_write(label, row))
 	)
 func _assert_phase(point: Dictionary) -> void:
 	if point[&"minute"] != _boundary: return
 	var phase: String = point[&"phase"]
 	if _case in ["B4a", "B4b"]:
 		if phase == "INCIDENTS_AND_EVENTS":
 			_expect(point[&"facility"][&"durability"] > 0 and point[&"event"][&"state"] == "QUEUED", "facility phase precedes diagnostic destruction")
 			_expect(point[&"service"][&"state"] == ("COMPLETED" if _case == "B4a" else "ACTIVE"), "actual service state before Event phase")
 			_expect(point[&"receipts"].size() == (1 if _case == "B4a" else 0), "completion payment occurs before destruction, not while stopped")
 		if phase == "FACILITY_QUEUES":
 			_expect(point[&"facility"][&"durability"] == 0 and point[&"event"][&"state"] == "COMPLETED", "Event committed before queue phase")
 	if _case == "B3" and phase == "AI_DECISIONS":
 		var guest: Dictionary = point[&"guests"][String(GUEST)]
 		_expect(guest[&"state"] == "ABANDONING" and guest[&"patience_remaining"] == 0 and guest[&"queue_request_id"].is_empty(), "actual auto-abandon before AI redecision")
 	if _case == "B2b" and phase == "FACILITY_COMPLETION":
 		_expect(point[&"requests"][String(REQUEST)].is_empty() and point[&"active_services"] == 0 and point[&"available_meals"] == 1, "scheduled leave released before admission")
 	if _case == "B1" and phase == "AI_DECISIONS":
 		var queued: Dictionary = point[&"guests"][String(QUEUED_GUEST)]
 		_expect(not queued.is_empty() and queued[&"queue_request_id"].is_empty() and queued[&"patience_remaining"] == _patience, "direct closure releases B before AI with no patience penalty")
 func _capture() -> Dictionary:
 	var snapshot: Dictionary = _runtime.create_snapshot()
 	var operations: Dictionary = snapshot[&"systems"][&"runtime"][&"operations"]
 	var facility: FacilityInstance = _runtime.facility_service.get_instance(_facility_id)
 	var service: ServiceInstance = _runtime.facility_service.get_service(_service_id)
 	var event: EventInstance = _runtime.event_service.get_instance(&"p04.destroy.instance")
 	var actors: Dictionary = {}
 	var requests: Dictionary = {}
 	var wallets: Dictionary = {}
 	for id: StringName in [GUEST, QUEUED_GUEST]:
 		var guest: GuestRuntime = _runtime.guest_service.get_guest(id)
 		actors[String(id)] = guest.create_snapshot() if guest != null else {}
 		wallets[String(id)] = _runtime.economy_service.get_balance(StringName("GUEST_WALLET:" + String(id)))
 	for id: StringName in [REQUEST, QUEUED_REQUEST]:
 		var request: ServiceRequest = _runtime.facility_service.get_request(id)
 		requests[String(id)] = request.create_snapshot() if request != null else {}
 	var reservations: Array = []
 	for reservation: InventoryReservation in _runtime.inventory_service.get_reservations(false): reservations.append(reservation.create_snapshot())
 	var ledger: Array = []
 	for entry: LedgerEntry in _runtime.economy_service.get_entries(): ledger.append(entry.to_dictionary())
 	return {&"snapshot": snapshot, &"minute": _clock.absolute_minute,
 		&"inputs": {&"case": _case, &"seed": SEEDS[_case], &"serial": _serial, &"facility_id": _facility_id, &"service_id": _service_id,
 			&"boundary": _boundary, &"price": _price, &"duration": _duration, &"patience": _patience, &"reserve": _reserve, &"recovery": _recovery.duplicate(true),
 			&"kitchen_premise": "ActorHardening physical FLEX fixture; not natural hire/unlock"},
 		&"facility": facility.create_snapshot(), &"service": service.create_snapshot() if service != null else {},
 		&"event": event.create_snapshot() if event != null else {}, &"guests": actors, &"requests": requests, &"wallets": wallets,
 		&"reservations": reservations, &"ledger": ledger, &"receipts": _receipts.duplicate(true),
 		&"player_cash": _runtime.economy_service.get_balance(_runtime.PLAYER_CASH_ACCOUNT),
 		&"available_meals": _runtime.inventory_service.available_quantity(facility.local_inventory_id, &"ingredient/basic_meal"),
 		&"active_services": _runtime.facility_service.get_active_services(_facility_id).size(),
 		&"operations_enabled": operations[&"enabled"], &"saved_coordinator": operations[&"coordinator"],
 		&"actual_coordinator_absent": _runtime.operations_coordinator == null, &"unrelated_getters_called": false}
 func _labels() -> Array[String]:
 	if _case == "B1": return ["before", "after", "next", "recovered", "duplicate_guard"]
 	if _case in ["B2b", "B3"]: return ["before", "after", "next", "despawn"]
 	return ["before", "after", "next"]
 func _advance(label: String) -> void:
 	if label == "recovered":
 		_expect(_serial + 1 == _recovery[&"serial"] and _clock.absolute_minute == _recovery[&"issue_minute"], "saved future recovery serial and issue minute")
 		var result: CommandResult = _cmd(_recovery[&"kind"], _recovery[&"payload"], _recovery[&"at"])
 		var command: Dictionary = _commands.back()
 		_expect(result.command_id == _recovery[&"command_id"] and command[&"idempotency_key"] == _recovery[&"idempotency_key"], "same future public recovery command ID/key")
 	_clock.advance_one_minute()
 func _writer_case() -> void:
 	if not _prepare(): return
 	_connect_observations()
 	var before: Dictionary = _capture()
 	_assert_before(before)
 	_save_point("before", before)
 	for label: String in _labels():
 		if label == "before": continue
 		_advance(label)
 		var actual: Dictionary = _capture()
 		_assert_outcome(before, actual)
 		_save_point(label, actual)
 	var branch: Dictionary = {&"points": _points.duplicate(true), &"phases": _phases.duplicate(true),
 		&"commands": _write("commands", {&"submitted": _commands, &"completed_including_fixture": _results})}
 	_branches[_case] = _write("case", branch)
 func _assert_before(point: Dictionary) -> void:
 	_expect(not point[&"operations_enabled"] and point[&"actual_coordinator_absent"] and point[&"saved_coordinator"] == {}, "Operations disabled and actual absence measured")
 	var guest: Dictionary = point[&"guests"][String(GUEST)]
 	_expect(guest[&"planned_exit_at"] >= _boundary, "planned exit does not short-circuit queue/service")
 	var expected_count: int = 2 if _case == "B1" else 1
 	_expect(point[&"reservations"].size() == expected_count, "only actual requested meals reserved")
 	for reservation: Dictionary in point[&"reservations"]:
 		_expect(reservation[&"state"] == "ACTIVE" and reservation[&"purpose"] == "facility_service", "actual ACTIVE reservation before boundary")
 	_expect(point[&"available_meals"] == 0, "all stocked meals are reserved")
 	if _case == "B1":
 		var queued: Dictionary = point[&"guests"][String(QUEUED_GUEST)]
 		_expect(queued[&"state"] == "QUEUING" and queued[&"patience_remaining"] == _patience, "B exists at 959 with unchanged original patience")
 func _assert_reservation(before: Dictionary, point: Dictionary, request_id: StringName, state: String, terminal: int) -> void:
 	var prior: Array = []
 	var current: Array = []
 	for row: Dictionary in before[&"reservations"]:
 		if row[&"requester_id"] == String(request_id): prior.append(row)
 	for row: Dictionary in point[&"reservations"]:
 		if row[&"requester_id"] == String(request_id): current.append(row)
 	_expect(prior.size() == 1 and current.size() == 1, "one original reservation per request")
 	if prior.size() != 1 or current.size() != 1: return
 	_expect(prior[0][&"reservation_id"] == current[0][&"reservation_id"] and current[0][&"state"] == state and current[0][&"terminal_at"] == terminal, "same reservation ID/state/terminal time; no second release")
 	if state == "ACTIVE":
 		_expect(var_to_bytes(prior[0]) == var_to_bytes(current[0]), "entire held reservation unchanged")
 		var request: Dictionary = point[&"requests"][String(request_id)]
 		_expect(not request.is_empty() and request[&"reserved_inventory_ids"].has(current[0][&"reservation_id"]), "active reservation has live request owner")
 	else:
 		_expect(point[&"requests"][String(request_id)].is_empty(), "terminal reservation has no orphan request")
 	if state == "RELEASED":
 		var release_count: int = 0
 		var inventory: Dictionary = point[&"snapshot"][&"systems"][&"runtime"][&"inventory"]
 		for operation: Dictionary in inventory[&"idempotency_results"]:
 			var result: Dictionary = operation[&"result"]
 			if operation[&"action"] == "release" and String(result.get(&"reservation_id", "")) == current[0][&"reservation_id"]:
 				release_count += 1
 				_expect(bool(result.get(&"ok", false)) and result.get(&"quantity", 0) == current[0][&"quantity"], "release returned actual reserved quantity, not an orphan repair/retry")
 		_expect(release_count == 1, "one raw inventory release operation for original reservation")
 func _assert_outcome(before: Dictionary, point: Dictionary) -> void:
 	var minute: int = point[&"minute"]
 	var service: Dictionary = point[&"service"]
 	var guest: Dictionary = point[&"guests"][String(GUEST)]
 	var paid: bool = _case in ["B2a", "B4a"] or (_case == "B1" and minute >= 962)
 	_expect(point[&"wallets"][String(GUEST)] == _price * (1 if paid else 2), "actual wallet delta follows boundary")
 	_expect(point[&"receipts"].size() == (1 if paid else 0), "actual payment notification exactly once or zero")
 	_expect(point[&"player_cash"] == before[&"player_cash"] + (_price if paid else 0), "actual player cash delta exactly matches single price")
 	if not paid:
 		_expect(var_to_bytes(point[&"ledger"]) == var_to_bytes(before[&"ledger"]), "zero ledger charge while stopped or abandoned")
 	if paid:
 		var expected_ledger: Array = before[&"ledger"].duplicate(true)
 		for receipt: Dictionary in point[&"receipts"]: expected_ledger.append_array(receipt[&"entries"])
 		_expect(var_to_bytes(point[&"ledger"]) == var_to_bytes(expected_ledger), "whole ledger delta is exactly actual payment receipt, no extra posting")
 		var completed_at: int = 962 if _case == "B1" else 960
 		_expect(service[&"state"] == "COMPLETED" and service[&"completed_at"] == completed_at, "one actual completion")
 		_assert_reservation(before, point, REQUEST, "CONSUMED", completed_at)
 		_expect(point[&"active_services"] == 0, "completed service releases active slot")
 	if _case == "B1":
 		_expect(not point[&"facility"][&"operator_open"], "direct closure remains in force including recovery")
 		_assert_reservation(before, point, QUEUED_REQUEST, "RELEASED", 960)
 		var queued: Dictionary = point[&"guests"][String(QUEUED_GUEST)]
 		if minute == 960: _expect(not queued.is_empty(), "released B measured on closure tick")
 		if not queued.is_empty():
 			_expect(queued[&"queue_request_id"].is_empty() and queued[&"patience_remaining"] == before[&"guests"][String(QUEUED_GUEST)][&"patience_remaining"], "closure releases B without patience consumption; later natural Despawn is allowed")
 		_expect(point[&"wallets"][String(QUEUED_GUEST)] == _price * 2 and point[&"available_meals"] == 1, "B stock returned once and wallet unchanged")
 		if not paid:
 			_expect(not point[&"facility"][&"power_available"] and service[&"state"] == "PAUSED" and service[&"elapsed_minutes"] == before[&"service"][&"elapsed_minutes"], "outage holds original progress; actual interruption_reason retained in raw")
 			_assert_reservation(before, point, REQUEST, "ACTIVE", -1)
 	elif _case in ["B2b", "B3"]:
 		_assert_reservation(before, point, REQUEST, "RELEASED", _boundary)
 		_expect(point[&"active_services"] == 0 and point[&"available_meals"] == 1, "no service/orphan and exact stock return")
 		if minute == _boundary:
 			_expect(not guest.is_empty() and guest[&"state"] == "DECIDING" and guest[&"queue_request_id"].is_empty(), "automatic redecision after release")
 			if _case == "B3": _expect(guest[&"patience_remaining"] == 0, "normal queue tick exhausted original patience")
 		elif minute == _boundary + 1:
 			_expect(not guest.is_empty() and guest[&"state"] == "LEAVING", "normal next-minute exit")
 		else: _expect(guest.is_empty(), "normal Despawn boundary")
 	elif _case == "B2a":
 		_expect(point[&"available_meals"] == 0, "completed meal consumed")
 		if minute == 960: _expect(not guest.is_empty() and guest[&"state"] == "LEAVING" and guest[&"state_entered_at"] == 960, "completion precedes normal planned exit")
 		else: _expect(guest.is_empty(), "next-tick despawn without second payment")
 	else:
 		_expect(point[&"facility"][&"durability"] == 0 and point[&"facility"][&"state"] == "BROKEN" and point[&"event"][&"state"] == "COMPLETED", "actual automatic destruction Event committed")
 		if _case == "B4a": _expect(point[&"available_meals"] == 0, "completion before destruction consumes meal")
 		elif minute == 960:
 			_expect(service[&"state"] == "ACTIVE" and service[&"elapsed_minutes"] == _duration - 1, "late Event follows facility completion phase")
 			_assert_reservation(before, point, REQUEST, "ACTIVE", -1)
 		else:
 			_expect(service[&"state"] == "FAILED" and service[&"elapsed_minutes"] == _duration - 1 and point[&"available_meals"] == 1 and point[&"active_services"] == 0, "next facility tick fails without progress or payment")
 			_assert_reservation(before, point, REQUEST, "RELEASED", 961)
 	# Any remaining active reservation must still belong to the same live request
 	# and started service. Terminal history is retained, never filtered away.
 	for reservation: Dictionary in point[&"reservations"]:
 		if reservation[&"state"] != "ACTIVE": continue
 		var request: Dictionary = point[&"requests"].get(reservation[&"requester_id"], {})
 		_expect(not request.is_empty() and request[&"reserved_inventory_ids"].has(reservation[&"reservation_id"]) and not service.is_empty() and service[&"inventory_reservations"].has(reservation[&"reservation_id"]), "no active reservation orphan")
 func _save_point(label: String, point: Dictionary) -> void:
 	_points[label] = _write(label, point)
 	var path: String = "user://saves/p04_s3/" + _case + "-" + label
 	var saved: Dictionary = SaveService.save_snapshot(path, point[&"snapshot"])
 	var inspected: Dictionary = SaveService.inspect_snapshot(path)
 	_expect(bool(saved.get(&"ok", false)) and bool(inspected.get(&"ok", false)) and bool(inspected.get(&"read_only", false)), "public formal save/inspect")
 	_expect(var_to_bytes(inspected.get(&"snapshot", {})) == var_to_bytes(point[&"snapshot"]), "all typed fields preserved by formal package")
 	_expect(var_to_bytes(_runtime.create_snapshot()) == var_to_bytes(point[&"snapshot"]), "formal saving leaves Runtime unchanged")
 	_slots[_case + "-" + label] = ProjectSettings.globalize_path(path)
 	# Snapshot bytes exist once in point raw and once in the required formal
 	# package; indexes do not embed inspection/load copies of those bytes.
 func _write(label: String, value: Variant, global_name: bool = false) -> Dictionary:
 	var name: String = label if global_name else _mode + "-" + _case + "-" + label
 	var reference: Dictionary = {}
 	for extension: String in ["var", "json"]:
 		var path: String = _evidence_dir.path_join(name + "." + extension)
 		_expect(not FileAccess.file_exists(path), "raw point written exactly once " + name)
 		var file: FileAccess = FileAccess.open(path, FileAccess.WRITE)
 		_expect(file != null, "raw file " + name)
 		if file == null: continue
 		if extension == "var": file.store_buffer(var_to_bytes(value))
 		else: file.store_string(JSON.stringify(value, "\t"))
 		file.flush()
 		file.close()
 		reference[extension] = {&"path": path, &"sha256": FileAccess.get_sha256(path)}
 	return reference
 func _read(reference: Dictionary) -> Dictionary:
 	var item: Dictionary = reference["var"]
 	var path: String = item["path"]
 	_expect(FileAccess.get_sha256(path) == item["sha256"], "raw typed SHA")
 	var json_ref: Dictionary = reference["json"]
 	_expect(FileAccess.get_sha256(json_ref["path"]) == json_ref["sha256"], "raw JSON SHA")
 	var file: FileAccess = FileAccess.open(path, FileAccess.READ)
 	_expect(file != null, "typed input readable")
 	if file == null: return {}
 	var value: Variant = bytes_to_var(file.get_buffer(file.get_length()))
 	file.close()
 	_expect(value is Dictionary, "typed input dictionary")
 	return value if value is Dictionary else {}
 func _restore_inputs(point: Dictionary) -> void:
 	var inputs: Dictionary = point[&"inputs"]
 	_expect(_serial == 0, "Reader starts with serial zero before importing external inputs")
 	_serial = inputs[&"serial"]
 	_facility_id = inputs[&"facility_id"]
 	_service_id = inputs[&"service_id"]
 	_boundary = inputs[&"boundary"]
 	_price = inputs[&"price"]
 	_duration = inputs[&"duration"]
 	_patience = inputs[&"patience"]
 	_reserve = inputs[&"reserve"]
 	_recovery = inputs[&"recovery"].duplicate(true)
 func _load_point(path: String, expected: Dictionary) -> bool:
 	_fresh()
 	_restore_inputs(expected)
 	var loaded: Dictionary = SaveService.load_snapshot(path)
 	_expect(bool(loaded.get(&"ok", false)), "public formal load")
 	if not bool(loaded.get(&"ok", false)): return false
 	_expect(var_to_bytes(loaded[&"snapshot"]) == var_to_bytes(expected[&"snapshot"]), "all saved typed fields equal Writer")
 	var restored: bool = _runtime.restore_snapshot(loaded[&"snapshot"])
 	_expect(restored, "public Runtime restore")
 	_expect(var_to_bytes(_runtime.create_snapshot()) == var_to_bytes(expected[&"snapshot"]), "all restored typed fields equal Writer")
 	return restored
 func _reader() -> void:
 	var file: FileAccess = FileAccess.open(_evidence_dir.path_join("writer.json"), FileAccess.READ)
 	_expect(file != null, "Writer receipt")
 	if file == null: return
 	var writer: Dictionary = JSON.parse_string(file.get_as_text())
 	file.close()
 	_expect(int(writer["pid"]) != OS.get_process_id() and writer["profile"] != OS.get_user_data_dir(), "independent Reader PID/profile")
 	for branch: String in CASES:
 		_case = branch
 		var writer_case: Dictionary = _read(writer["branches"][branch])
 		var hashes: Dictionary = {}
 		var restored_refs: Dictionary = {}
 		for label: String in _labels():
 			var key: String = branch + "-" + label
 			var original: String = writer["slots"][key]
 			var target: String = ProjectSettings.globalize_path("user://saves/p04_s3/" + key)
 			_expect(DirAccess.make_dir_recursive_absolute(target) == OK, "private Reader formal slot")
 			var directory: DirAccess = DirAccess.open(original)
 			_expect(directory != null, "Writer formal slot readable")
 			if directory == null: return
 			var members: PackedStringArray = directory.get_files()
 			members.sort()
 			_expect(directory.get_directories().is_empty() and members == PackedStringArray(["journal.log", "manifest.json", "thumbnail.png", "world.bin"]), "all formal members enumerated")
 			var member_hashes: Dictionary = {}
 			for member: String in members:
 				var sha: String = FileAccess.get_sha256(original.path_join(member))
 				_expect(DirAccess.copy_absolute(original.path_join(member), target.path_join(member)) == OK, "copy every formal member")
 				var copied_sha: String = FileAccess.get_sha256(target.path_join(member))
 				_expect(not sha.is_empty() and sha == copied_sha, "original/copy member SHA equality")
 				member_hashes[member] = {&"original_before": sha, &"copy_before": copied_sha}
 			hashes[key] = {&"original": original, &"copy": target, &"members": member_hashes}
 			_slots[key] = target
 			var expected: Dictionary = _read(writer_case[&"points"][label])
 			if not _load_point(target, expected): return
 			restored_refs[label] = _write(label + "-restored", _capture())
 		var before: Dictionary = _read(writer_case[&"points"]["before"])
 		if not _load_point(_slots[branch + "-before"], before): return
 		_assert_before(_capture())
 		_connect_observations()
 		var replay_refs: Dictionary = {}
 		for label: String in _labels():
 			if label == "before": continue
 			_advance(label)
 			var actual: Dictionary = _capture()
 			var expected: Dictionary = _read(writer_case[&"points"][label])
 			_expect(var_to_bytes(actual) == var_to_bytes(expected), "replay complete typed point including Runtime, inputs, receipts " + label)
 			_assert_outcome(before, actual)
 			replay_refs[label] = _write(label + "-replay", actual)
 		var expected_phases: Array = writer_case[&"phases"]
 		_expect(_phases.size() == expected_phases.size(), "complete phase count")
 		if _phases.size() == expected_phases.size():
 			for index: int in range(_phases.size()):
 				_expect(var_to_bytes(_read(_phases[index])) == var_to_bytes(_read(expected_phases[index])), "same phase order and all typed phase state")
 		for key: String in hashes:
 			var row: Dictionary = hashes[key]
 			for member: String in row[&"members"]:
 				var item: Dictionary = row[&"members"][member]
 				item[&"original_after"] = FileAccess.get_sha256(String(row[&"original"]).path_join(member))
 				item[&"copy_after"] = FileAccess.get_sha256(String(row[&"copy"]).path_join(member))
 				_expect(item[&"original_before"] == item[&"original_after"] and item[&"copy_before"] == item[&"copy_after"], "original/copy unchanged after all loads and replay")
 		_branches[branch] = _write("case", {&"restored": restored_refs, &"replay": replay_refs, &"phases": _phases,
 			&"member_hashes": hashes, &"recovery_commands": _commands, &"replay_completed_commands": _results})
@@ -0,0 +1,351 @@
 #!/usr/bin/env python3
 """S3-only native entry. --check-only never loads ownership helpers or starts Godot."""
 from pathlib import Path
 import argparse
 import copy
 import hashlib
 import importlib.util
 import json
 import os
 import shutil
 import subprocess
 import sys
 sys.dont_write_bytecode = True
 HERE = Path(__file__).resolve().parent
 BUILD = Path("/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build")
 PRODUCT = Path("/Users/korizatou114/Projects/とりにく工房ゲーム制作部")
 CACHE_RUN = Path("/Users/korizatou114/Projects/TheTree-managed-worktrees/p18-01-model/.runtime/P18-01-CODE/build/p18-relationship-evidence")
 TEST = "tests/s3/test_runtime_staff_assignment.gd"
 QA = HERE / "p04_s3_closure_probe.gd"
 ENGINE = Path("/Applications/Godot.app/Contents/MacOS/Godot")
 MANIFEST = BUILD / "audit-support/p04-s3-existing-source-r01/SOURCE_MANIFEST.json"
 MANIFEST_SHA = "d4993398f7619ca37bcd64c32b79bdee892d44e31f332cc0dd5f31fb7bc28314"
 AUDIT = BUILD / "audit-support/p04-whole-closure-r01/ROOT_S2B_EXISTING_SOURCE_AUDIT.json"
 CASES = ["B1", "B2a", "B2b", "B3", "B4a", "B4b"]
 LABELS = {"B1": ["before", "after", "next", "recovered", "duplicate_guard"],
          "B2a": ["before", "after", "next"], "B2b": ["before", "after", "next", "despawn"],
          "B3": ["before", "after", "next", "despawn"],
          "B4a": ["before", "after", "next"], "B4b": ["before", "after", "next"]}
 SLOTS = sorted(case + "-" + label for case in CASES for label in LABELS[case])
 MATERIALS = [MANIFEST, AUDIT, HERE.parent / "s2b/run_s2b_native.py",
             HERE.parent / "s2b/p04_s2b_shift_probe.gd", HERE.parent / "s2b/S2B_ROOT_RUN.md"]
 def template_guard(root, historical=True):
    if historical:
        if pin(MANIFEST)["sha256"] != MANIFEST_SHA:
            raise ValueError("supplied seven-source manifest changed")
        manifest = json.loads(MANIFEST.read_text())
        if len(manifest["files"]) != 7:
            raise ValueError("exact seven source files required")
        for row in manifest["files"]:
            actual = pin(row["supplied"])
            if (actual["bytes"], actual["sha256"]) != (row["bytes"], row["sha256"]):
                raise ValueError("supplied template SHA mismatch: " + row["supplied"])
        audit = json.loads(AUDIT.read_text())
        for row in audit["source_pins"]:
            actual = pin(root / row["path"])
            if (actual["bytes"], actual["sha256"]) != (row["production_bytes"], row["production_sha256"]):
                raise ValueError("Root source audit mismatch: " + row["path"])
    probe = QA.read_text()
    if ":=" in probe:
        raise ValueError("probe requires explicit typed declarations")
    import re
    if re.search(r"\bvar\s+\w+\s*=", probe) or re.search(r"\bfor\s+\w+\s+in\b", probe):
        raise ValueError("untyped declaration/loop")
    if re.search(r"\.(?:patience_remaining|elapsed_minutes)\s*=(?!=)", probe):
        raise ValueError("manual patience/progress mutation")
    for forbidden in ["._update_shift_states(", ".record_duty_minute(", "get_day_summary(",
                      "configure_operations("]:
        if forbidden in probe:
            raise ValueError("out-of-scope mutation/getter: " + forbidden)
 def module(name, path):
    spec = importlib.util.spec_from_file_location(name, path)
    value = importlib.util.module_from_spec(spec)
    spec.loader.exec_module(value)
    return value
 def pin(path):
    path = Path(path)
    if path.is_symlink() or not path.is_file():
        raise ValueError("missing exact input: " + str(path))
    data = path.read_bytes()
    return dict(path=str(path), bytes=len(data), sha256=hashlib.sha256(data).hexdigest())
 def main():
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument("--project-root", type=Path, default=PRODUCT)
    parser.add_argument("--output", type=Path, default=BUILD / "p04-s3-native-r01")
    parser.add_argument("--plan", type=Path, default=BUILD / "p04-s3-plan-r01.json")
    parser.add_argument("--cache-run", type=Path, default=CACHE_RUN)
    parser.add_argument("--godot", type=Path, default=ENGINE)
    parser.add_argument("--check-only", action="store_true")
    parser.add_argument("--main")
    parser.add_argument("--submission")
    parser.add_argument("--tested-tree")
    parser.add_argument("--historical-r17", action="store_true")
    args = parser.parse_args()
    shared = module("fresh_q_shared", HERE.parent / "s5/run_s5_native.py")
    mode = shared.select_mode(args)
    fresh = mode == "fresh-q"
    if fresh and "--project-root" not in sys.argv:
        raise ValueError("fresh-q requires explicit --project-root")
    if fresh and "--cache-run" not in sys.argv:
        args.cache_run = None
    engine_descriptor = shared.engine_pin(args.godot) if fresh else None
    provenance = None
    if args.project_root.is_symlink():
        raise ValueError("project root symlink")
    root = args.project_root.resolve()
    out = args.output.resolve()
    if fresh:
        if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
            raise ValueError("fresh plan/output must stay inside BUILD")
        if out.exists() or out.is_symlink() or (args.check_only and args.plan.exists()):
            raise ValueError("fresh output and plan required")
    if not out.is_relative_to(BUILD.resolve()) or not args.plan.resolve().is_relative_to(BUILD.resolve()):
        raise ValueError("plan/output must stay in task build")
    r = module("s3_standard_runner", root / "tools/run_all_tests.py")
    # Preserve the reviewed source_refs -> exactly one QA override order.
    source_before = r.source_refs(root)
    if fresh:
        provenance = shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree)
    refs = dict(source_before)
    refs[TEST] = pin(QA)
    template_guard(root, historical=not fresh)
    expected = {n: dict(bytes=p["bytes"], sha256=p["sha256"]) for n, p in refs.items()}
    fixed = [pin(p) for p in ([] if fresh else MATERIALS + [Path(row["supplied"]) for row in json.loads(MANIFEST.read_text())["files"]]) + [
        QA, Path(__file__), HERE / "S3_ROOT_RUN.md",
        root / "tests/transport/test_runtime_transport.gd",
        root / "tests/staff/test_rescue_elevator.gd",
        root / "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json",
    ]]
    selected = dict(root_before=source_before, map={n: p["sha256"] for n, p in refs.items()}, timeout=1200)
    cache_note = None
    cache_receipts = []
    for leaf in (["runner-ended.json", "runner-input.json"] if args.cache_run is not None else []):
        path = args.cache_run / leaf
        try:
            cache_receipts.append(pin(path))
        except OSError as caught:
            cache_note = dict(path=str(path), error=type(caught).__name__ + ": " + str(caught),
                              required_before_native=True)
            break
    plan = dict(protocol="p04-s3-preparation-v1", project_root=str(root), output=str(out),
                source_before=source_before, selected_source_map=selected["map"],
                QA_overrides=[TEST], fixed_input_pins=fixed, cache_run=str(args.cache_run),
                cache_receipts=cache_receipts, cache_access=cache_note,
                phases=["import", "parse", "writer", "reader"],
                native_engine_launches=0, whole_goal_accepted=False, unit_accepted=False)
    if fresh:
        uid_plan, uid_snapshot, uid_binding = shared.load_uid_helper(root, r, source_before)
        uid_source = copy.deepcopy(expected)
        uid_plan_map = uid_plan(refs)
        plan.update(protocol="p04-s3-fresh-q-v1", mode=mode, provenance=provenance, engine=engine_descriptor,
                    engine_sha256=engine_descriptor["sha256"], uid_helper=uid_binding,
                    uid_plan=uid_plan_map, import_mode="fresh" if args.cache_run is None else "cache",
                    historical_r17=False, fresh_q_evidence=False)
        fixed.append(pin(HERE.parent / "s5/run_s5_native.py"))
    # No historical execution is admitted.
    # Check-only only reads source/materials and writes the plan in task build.
    # It deliberately does not read default-player data, inspect processes or stat Godot.
    if args.check_only:
        args.plan.parent.mkdir(parents=True, exist_ok=True)
        if args.plan.exists():
            r.require(r.read(args.plan) == plan, "existing plan differs; use a fresh plan path")
        else:
            r.write(args.plan, plan)
        print(json.dumps(dict(check_only=True, engines=0, source_files=len(source_before),
                              QA_overrides=[TEST], fixed_pins=len(fixed), plan=str(args.plan),
                              plan_sha256=r.sha(args.plan), cache_access=cache_note), ensure_ascii=False))
        return 0
    r.require(fresh, "historical mode is read-only")
    r.require(args.plan.is_file() and r.read(args.plan) == plan, "run exact check-only plan first")
    reports, phase_call, uid_state = shared.make_uid_policy(r, uid_snapshot, uid_source, uid_plan_map, out)
    engine_checks = []
    def fresh_engine_check(label):
        value = shared.engine_pin(args.godot, engine_descriptor)
        engine_checks.append(dict(label=label, descriptor=value))
    def fixed_guard():
        fresh_engine_check("fixed")
        r.require(shared.fresh_q_guard(root, args.main, args.submission, args.tested_tree) == provenance,
                  "fresh Q provenance changed")
        r.require(pin(root / uid_binding["helper_path"])["sha256"] == uid_binding["helper_sha256"],
                  "UID helper changed")
        template_guard(root, historical=not fresh)
        for value in fixed + cache_receipts:
            r.require(pin(value["path"]) == value, "fixed input changed: " + value["path"])
    fixed_guard()
    # Native admission is Root-only and fails closed on unreadable cache.
    r.require(cache_note is None, "Root must read exact cache receipts: " + str(cache_note))
    old = args.cache_run
    if old is not None:
        r.require(r.read(old / "runner-ended.json")["passed"], "ended cache run must have passed")
        old_map = r.read(old / "runner-input.json")["selected_source_map"]
        current_map = {n: p["sha256"] for n, p in source_before.items()}
        r.require(old_map == current_map, "ended cache selected source must equal current product")
    protected = r.default_player(root)
    outer = module("s3_owned_outer", r.SUPPORT / "owned_outer.py")
    r.require(not outer.native.helper["live_engines"](), "another Godot owns CPU")
    engine = args.godot.resolve()
    r.require(engine.is_file(), "Root native Godot path")
    r.require(shutil.disk_usage(out.parent).free >= 1024**3 + engine.stat().st_size + 136*1024**2,
              "reviewed native disk admission")
    r.require(not out.exists(), "fresh output required; preserve previous attempts")
    out.mkdir()
    stage = out / "stage"
    stage.mkdir()
    (out / "starters").mkdir()
    (out / "bootstrap").mkdir()
    phases = []
    previous = {}
    error = None
    guards = []
    cleanup = []
    cleanup_errors = []
    cache_before = None
    formal_before = None
    formal_after = None
    original_phase = outer.run_phase
    def run_phase(argv, folder, timeout, env, **kwargs):
        env = dict(env)
        if folder.name in ["writer", "reader"]:
            env.update(THE_TREE_S3_EVIDENCE=str(out / "raw"), THE_TREE_S3_MODE=folder.name)
        return original_phase(argv, folder, timeout, env, **kwargs)
    outer.run_phase = run_phase
    r.write(out / "runner-started.json", dict(started=r.now(), owner_runner_pid=os.getpid(),
            plan=pin(args.plan), engines_launched=0))
    try:
        r.write(out / "source_before.json", source_before)
        r.write(out / "selected-source-map.json", refs)
        # Private source stage first, then literal reviewed bootstrap.
        for name, value in refs.items():
            target = stage / name
            target.parent.mkdir(parents=True, exist_ok=True)
            r.copy_source(Path(value["path"]), target)
        r.require(r.inventory(stage, stage=True) == expected, "whole private source")
        for name, value in r.read(r.SUPPORT / "bootstrap-scripts.json").items():
            data = value["text"].encode()
            r.require(hashlib.sha256(data).hexdigest() == value["sha256"], "bootstrap pin")
            (out / "bootstrap" / name).write_bytes(data)
        if old is not None:
            cache = old / "stage/.godot"
            cache_before = r.inventory(cache)
            r.require(bool(cache_before), "nonempty ended cache")
            for name in cache_before:
                src = cache / name
                dst = stage / ".godot" / name
                dst.parent.mkdir(parents=True, exist_ok=True)
                subprocess.run(["/bin/cp", "-c", str(src), str(dst)], check=True)
                r.require((src.stat().st_dev, src.stat().st_ino) != (dst.stat().st_dev, dst.stat().st_ino),
                          "cache clone is a separate inode")
            r.require(r.inventory(stage / ".godot") == cache_before, "whole cache clone hashes")
            r.write(out / "cache-reuse.json", dict(ended_run=str(old), receipts=cache_receipts,
                    whole_cache=cache_before, independent_inode=True,
                    ordinary_import_required=True, ordinary_parse_required=True))
        paths = ["res://" + n for n in sorted(refs) if n.endswith(".gd")]
        r.write(out / "parse-paths.json", paths)
        markers = module("s3_markers", root / "tools/strict_test_markers.py")
        contracts = markers.load_contracts(root / "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json")
        contracts[TEST] = dict(test=TEST, template="S3 closure: <checks> checks, <failures> failures", required=True)
        policy = r.read(r.SUPPORT / "suite-policy.json")
        r.require(TEST not in policy["suite_policies"], "no normal suite watchdog/policy override")
        r.write(out / "contracts.json", contracts)
        r.write(out / "runner-input.json", dict(plan, owner_runner_pid=os.getpid(),
                wrapper_sha256=r.sha(__file__), QA=pin(QA), runner_sha256=r.sha(root / "tools/run_all_tests.py"),
                default_player_before=protected, fixed_input_pins=fixed,
                functional_watchdog_seconds=1200, source_adoption=False))
        diagnostics = module("s3_diagnostics", r.SUPPORT / "diagnostic_gate.py")
        owners = module("s3_owners", r.SUPPORT / "ordinary_proof_gate.py")
        audio = module("s3_audio", r.SUPPORT / "audio_evidence_gate.py")
        public = (stage / "project.godot").read_bytes()
        for phase, test in [("import", None), ("parse", None), ("writer", TEST), ("reader", TEST)]:
            if phase == "reader":
                writer = r.read(out / "raw/writer.json")
                formal_before = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
                r.require(sorted(formal_before) == SLOTS, "all 22 formal points for six fresh cases")
            fresh_engine_check("before-" + phase)
            if phase == "import" and old is None:
                r.require(not (stage / ".godot").exists(), "fresh import cache absent")
            row = phase_call(str(engine), stage, out, phase, test, selected, expected,
                                  previous, policy, contracts, paths, public, protected, root,
                                  outer, markers, diagnostics, owners, audio)
            phases.append(row)
            # execute_phase uses the same test log name; retain each phase's exact log too.
            if test and row.get("log"):
                (out / (phase + "-combined-raw.log")).write_bytes((out / row["log"]).read_bytes())
                row["strict_runner_log_path"] = row["log"]
                row["log"] = phase + "-combined-raw.log"
            r.write(out / (phase + "-actual-phase.json"), row)
            print(json.dumps(dict(phase=phase, passed=row["passed"], error=row.get("validation_error"))), flush=True)
            r.require(row["passed"], "first strict phase failure: " + phase)
            if phase in ["writer", "reader"]:
                receipt = r.read(out / ("raw/" + phase + ".json"))
                r.require(receipt["checks"] > 0 and receipt["failures"] == 0,
                          "S3 actual outcome receipt")
                r.require(sorted(receipt["branches"]) == CASES,
                          "exact six independent Writer/Reader cases")
                r.require(sorted(receipt["slots"]) == SLOTS, "all formal point slots")
                r.require(receipt["pid"] == row["actual_pid"], "actual native PID/receipt")
        writer = r.read(out / "raw/writer.json")
        reader = r.read(out / "raw/reader.json")
        r.require(writer["pid"] != reader["pid"] and writer["profile"] != reader["profile"], "distinct formal processes")
        formal_after = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
        r.require(formal_before == formal_after, "Reader leaves Writer packages unchanged")
    except BaseException as caught:
        error = type(caught).__name__ + ": " + str(caught)
    finally:
        cleanup, cleanup_errors = outer.finish_captured(outer.OWNED)
        try:
            r.write(out / "outer-owned-finally.json", dict(cleanup=cleanup, errors=cleanup_errors))
        except BaseException as caught:
            guards.append("finally receipt: " + type(caught).__name__ + ": " + str(caught))
    # Fixed guard always follows ownership cleanup, even if setup or an engine failed.
    try:
        fixed_guard()
        r.require(uid_snapshot(stage, uid_source, uid_plan_map) == uid_state["accepted"], "UID seal after cleanup")
        r.write(out / "fresh-engine-checks.json", engine_checks)
        after = r.source_refs(root)
        r.write(out / "source_after.json", after)
        r.require(after == source_before, "whole product source unchanged")
        r.require(r.default_player(root) == protected, "default player unchanged")
        if (stage / "project.godot").exists():
            r.require(r.inventory(stage, stage=True) == dict(expected, **previous), "whole private source unchanged")
        if cache_before is not None:
            r.require(r.inventory(old / "stage/.godot") == cache_before, "original cache unchanged")
        if formal_before is not None:
            writer = r.read(out / "raw/writer.json")
            formal_after = {n: r.inventory(Path(p)) for n, p in writer["slots"].items()}
            r.require(formal_before == formal_after, "Writer formal packages unchanged after Reader, including failure")
    except BaseException as caught:
        guards.append(type(caught).__name__ + ": " + str(caught))
    pids = [p.pid for p in outer.OWNED]
    passed = (uid_state["accepted"] is not None and error is None and not guards and not cleanup_errors and len(phases) == 4
              and all(p["passed"] for p in phases) and len(pids) == len(set(pids)) == 4
              and all(p["engine_ended"] for p in cleanup))
    if passed:
        try:
            shared.mirror_formal(r, out, formal_before)
        except BaseException as caught:
            guards.append("formal mirror: " + str(caught))
            passed = False
    execution = dict(passed=passed, error=error, guard_errors=guards, phases=phases,
                     actual_captured_PIDs=pids, cleanup=cleanup, cleanup_errors=cleanup_errors,
                     formal_before=formal_before, formal_after=formal_after,
                     whole_goal_accepted=False, unit_accepted=False)
    r.write(out / "raw-inventory.json", r.inventory(out / "raw"))
    r.write(out / "PID-set.json", dict(owner_runner_pid=os.getpid(), engine_PIDs=pids))
    r.write(out / "execution.json", execution)
    r.write(out / "runner-ended.json", dict(execution, ended=r.now()))
    print(json.dumps(dict(passed=passed, error=error, guard_errors=guards, output=str(out))))
    return 0 if passed else 1
 if __name__ == "__main__":
    try:
        raise SystemExit(main())
    except Exception as caught:
        print(type(caught).__name__ + ": " + str(caught), file=sys.stderr)
        raise SystemExit(2)
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Agent Control Runner	785815002e	P04-01: 同時発生の更新規約	2026-10-19 00:12:04 +09:00
Agent Control Runner	a9ef681fb8	P04-01: 同時発生の更新規約	2026-10-18 21:01:07 +09:00
Agent Control Runner	13aefdd3dd	P04-01: 同時発生の更新規約	2026-10-18 20:16:38 +09:00
Agent Control Runner	2cd734062a	P04-01: 同時発生の更新規約	2026-10-18 18:11:13 +09:00
Agent Control Runner	e7f2271164	P04-01: 同時発生の更新規約	2026-10-18 16:51:45 +09:00
Agent Control Runner	1820eed0ff	P04-01: 同時発生の更新規約	2026-10-18 16:43:06 +09:00
Agent Control Runner	eb94e1d7db	P04-01: 同時発生の更新規約	2026-10-18 15:41:18 +09:00
Agent Control Runner	acab529c8d	P04-01: 同時発生の更新規約	2026-10-18 14:36:16 +09:00
Agent Control Runner	befa0ef1f6	P04-01: 同時発生の更新規約	2026-10-18 12:27:51 +09:00
Agent Control Runner	8e25213e91	P04-01: 同時発生の更新規約	2026-10-18 12:00:07 +09:00
Agent Control Runner	27b18b75c9	P04-01: 同時発生の更新規約	2026-10-18 11:25:54 +09:00
Agent Control Runner	1b08d6b0fc	P04-01: 同時発生の更新規約	2026-10-18 11:16:06 +09:00
Agent Control Runner	20d0ae5990	P04-01: 同時発生の更新規約	2026-10-18 10:58:54 +09:00
Agent Control Runner	2dde7596a8	P04-01: 同時発生の更新規約	2026-10-16 10:02:30 +09:00
Agent Control Runner	fb8b7919db	P04-01: 同時発生の更新規約	2026-10-16 09:33:00 +09:00
Agent Control Runner	55f1fb49aa	P04-01: 同時発生の更新規約	2026-10-16 09:25:26 +09:00
Agent Control Runner	4ab7ab8712	P04-01: 同時発生の更新規約	2026-10-16 09:19:25 +09:00
Agent Control Runner	7af6fafaf0	P04-01: 同時発生の更新規約	2026-10-16 09:07:58 +09:00
Agent Control Runner	d393e4d90f	P04-01: 同時発生の更新規約	2026-10-16 08:51:30 +09:00
Agent Control Runner	8418560aaf	P04-01: 同時発生の更新規約	2026-10-16 08:35:40 +09:00
Agent Control Runner	16207d353a	P04-01: 同時発生の更新規約	2026-10-16 06:46:41 +09:00
Agent Control Runner	b543c26c95	P04-01: 同時発生の更新規約	2026-10-16 06:12:33 +09:00
Agent Control Runner	accd07c91d	P04-01: 同時発生の更新規約	2026-10-16 04:48:31 +09:00
		`@@ -0,0 +1,2 @@`
							`{"estimated_payload_bytes": 2970454, "files": 5, "available_disk_bytes": 4596576256, "large_payloads_copied": 0}`
							`{"collection": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p04-01/.runtime/P04-01/build/audit-support/p04-raw-collect-r17", "manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "actual_payload_bytes": 2970454, "formal_acceptance": false}`
		`@@ -0,0 +1 @@`
							{"C_provenance_sha256": "51d746879b4197445a09cd44a88dd918c365fa98025d9cd652a740cee09a9040", "C_source_manifest_sha256": "dbaab3c293c191eb5f3aff34854945e2d564f824df50a92802b3a7eda55321a8", "error": "candidate binding stage A pending; uncollected original boundaries: power_stop, save_restore, shift_completion", "formal_acceptance": false, "machine_verified": false, "missing_conditions": ["power_stop", "save_restore", "shift_completion"], "nativeWindows": {"EV": "pending", "closure_release": "pending", "dependency_stop": "pending", "destruction_stop": "pending", "exit_release": "pending", "midnight_replay": "pending", "midnight_settlement": "pending", "night_staff_absent": "pending", "overtime_task": "pending", "patience_release": "pending", "paused_midnight": "pending", "power_stop": "pending", "recovery_completion": "pending", "same_minute_replay": "pending", "save_restore": "pending", "shift_completion": "pending"}, "relocation_manifest_sha256": "a15f29fa12537f6d8aaf7cabea390922a9f16e3eb9c10981e5742aafc8c4c8a8", "series_bindings": {"s1": "9792569af9c8ecef177ffdeb880b814fb2878231f23e77c3749e18c228ff0ceb", "s2a": "746b58cf1aff95b082c35f6cc2c29556f146a7c56cce0475f4f2c091168605a7", "s2b": "e6d5412c14809825cf368af1d93972bc9c4e41f4c09afa414732b007c9cc7589", "s3": "a9b4b80d54c18ae2a1dc82514052e22d6174ff79999c76fa622282709759b433"}, "series_manifest_sha256": "953a798831043abdf7d54909e8e041cb3fbe6d901ca8affa661ea28e62ca5975", "stage_A": "candidate binding stage A pending", "task_id": "P04-01", "verified_conditions": ["EV", "closure_release", "dependency_stop", "destruction_stop", "exit_release", "midnight_replay", "midnight_settlement", "night_staff_absent", "overtime_task", "patience_release", "paused_midnight", "recovery_completion", "same_minute_replay"]}