P08-02: 旧配置の安全な変更

2026-10-14 00:18:43 +09:00 · 2026-10-13 23:15:50 +09:00 · 2026-10-13 22:21:16 +09:00 · 2026-10-13 21:49:12 +09:00 · 2026-10-13 21:39:16 +09:00 · 2026-10-13 20:54:22 +09:00
122 changed files with 70963 additions and 23 deletions
@@ -1,3 +1,11 @@
+## 現在の対象（2026-10-13・現版監査更新）
+
+原30パッケージ/88成果、部分点なし。現在は正式10/着手24/予定54。P24-03は正式完了、MP-01-r02承認用資料は正式統合済みだが原88へ加点しない。P13-03既存最終修正は全7施設/84スロット/6分類が保全済み。P13/RP13の限定追加修正と正式host自己試験は直接許可待ちで、重複実装や無断上限変更をしない。
+
+独立作業としてOpus判断に基づきP22-02の権利・形式契約へ着手。受入済614利用記録を再利用し、公式Kenney2packの全283同梱files、UI4音/Licenseをraw byte照合。現物296media中276の配布元権利を検証し、20の最終権利/creator条件を明示。BGMの内部recipe起源は見つかったが実聴/最終品質へ換算しない。全枠の選定/契約/欠損開示/実利用/必要検証/独立レビュー/統合が残る。完成素材欄0、全ゲーム未完を維持する。
+
+証拠は[現版素材契約](checkpoints/p22-02-current-contract-r01/README.md)、[P13継続案](checkpoints/runner-p13-continuation-r03/CONTINUATION_PROPOSAL.md)。完了済MP作業場所の105filesを内容/属性保持で圧縮・共有化し、実空き約313MiBを回収した。以下の「現在」は各記録時点の履歴として保持する。
+
 ## 現在の成果と次対象（2026-10-13・P24-03完了→P24-02）

 P24-03「選択と保存の受入」は提出4cefcff849d4dc1211caa5066e24bfae666cc2f4、最新main統合0a759f13aed03c05fd4a25ab4a2c26eefec94e3cで全7条件を正式完了。既存局所/全回帰/通常OS/同一保存の別プロセス再開証拠を再利用し、JSON版番号の正例17checksを追加。別Claude独立レビュー、最新main統合検証、最終検証、Runnercompleted/traceabilityまで成立。原30パッケージ/88成果単位、部分点なし。現在は正式10/着手22/予定56。全回帰173suite/14810checkやRunner支援の1件を成果数へ加算しない。
@@ -0,0 +1,17 @@
+# P22-02 素材契約・権利の現版証拠
+
+原workとacceptanceは変更しない。これは権利・形式・差替契約の現版実証であり、完成素材/原P22-02の受入ではない。原30パッケージ/88成果、部分点なしを維持する。
+
+| 原条件 | 現在の証拠 | 不足 |
+|---|---|---|
+| Kenneyを先に確認して適合素材を選ぶ | 公式Tiny Town/Tiny Dungeon/Interface Sounds、既存2アトラスと4音の原配布byte一致 | 全利用枠の適合・選定と実際の利用 |
+| 解像度・命名・差替契約 | packed192×176、16px/12×11/間隔0、nearest/mipmap無効、Theme/描画の現source SHA、provider名保持を記録 | 未制作枠の契約、レイアウト変更時の全参照・実表示証拠 |
+| 出典とLicense | 2pack全283同梱files、UI4音/Licenseを既存manifestのZIP SHAとも一致確認。現media296中276はpublisher CC0証拠 | 20mediaの最終rights/creator記録。BGM2の内部合成recipeと同byte出力は発見したが最終権利/品質とは区別 |
+| 完成枠は使用可能な資産と権利を持つ | 受入済614利用記録を正確に再利用し、完成資産欄0を維持 | 全完成枠の実利用・画面/聴感・独立受入。空集合でPASSしない |
+| 欠損を代替表示で隠さない | provisional/code/fallbackを完成へ昇格しない。current-media-rightsで未知を明記 | 各原利用条件の実画面で欠損/未制作を把握し、必要な完成制作と接続を行う |
+
+614は360施設利用枠+176人物利用枠+2状態群+76その他利用枠であり、614画像ではない。P22-01のhistorical source SHAと現sourceの適用性を混同しない。D08/D09の最終数量/内容はunknownのまま。
+
+OpusはP22-02を独立候補に選定した。提案中のCC0限定は原条件ではないため採用しない。自己制作/別許諾も実際の証拠があれば対象とし、未知の権利を推測で成立させない。614の全枠を同数の完成画像へ変換する案も採用しない。全Godotの新しい禁止は設けず、容量と必要な検証範囲で実行を管理する。
+
+追補: 原P22-02を同じwork/acceptanceで登録し、実Opus run/Solで契約とchecker担当を起動済み。普通repair1/2でspec raw/strip照合の混同を訂正し、同じ担当が継続中。原成果の正式受入は0/1。既存成果と条件不足を確認せず、必ず失敗すると分かるgateや重複workerを作らない。次の具体作業は各利用枠のsource/rights/形式の選定契約を固め、実制作が必要な未達を同じ原条件のまま実装・受入へ進める。P13/RP13の追加回数/限定正式host試験は別の直接許可を待ち、勝手に転用しない。
@@ -0,0 +1,10 @@
+{
+  "decision": {
+    "action": "wait",
+    "task_id": "MP-01-r02",
+    "reason": "MP-01-r02は完了済みです。再実装・再開・repairはしません。現projectの受入1/1は完了済みで、実行できる登録タスクがないためwaitとします。\n\n【次の原成果の選定】P22-02（素材契約と権利）を推奨します。P22-02は未登録なので、オーナー/rootによる契約登録が必要です。登録まではwaitを続けます。\n\n【P07-01を選ばない理由】\n- D04係数とD05更新順序が未確定です。\n- 自然来客差、切替前後、途中保存の受入には新しいengine試験が必要です。空き約368MiBで重いGodot実行が禁止されているため、今は閉じられません。\n- P13/RP13とP18は個別cap追加の回答待ちです。この待ちを別タスクへ流用しません。\n- P24は上流が未実装で、手動保持操作は延期中です。\n\n【P22-02が原work全体を満たすかの判断】\n既存の権利/適合/サイズ/命名/差替の監査と契約記録だけでは不足です。原acceptanceの「完成枠に使用可能な資産と権利記録、欠損を代替表示で隠さない」を満たすには、次の両方が必要です。\n- 枠ごとに資産を選び、適用sourceの証拠を示すこと\n- 残った不足をすべて開示すること\n\n【完成枠が空集合のままPASSになるのを防ぐ方法（分母の追加・緩和はしません）】\n1. 枠集合は、独立受入済みのP22-01利用枠台帳（614利用記録）をSHA256で固定して使います。素材数を分母にはしません。記録数が614と一致しなければFAILです。\n2. 614記録のそれぞれに、次のどちらか一方だけを必ず付けます。\n   - (a) 選定資産: path、出典pack、license、解像度、命名、差替手順、適用source参照（file:line）\n   - (b) 不足: 理由と依存先（D08/D09、P24など）\n   空欄や重複があればFAILです。(a)が0件の場合もFAILです。\n3. 判定の上限: (b)の不足が1件でもあれば、P22-02の原成果はPASSにせず「部分/blocked」として報告します。不足を除外して分母を減らすこと、プレースホルダ表示を充足として数えることは禁止します。\n4. 権利: Kenneyのtiny_town、tiny_dungeon、input、UI音（CC0）について、同梱のlicense原文と元asset一覧を生バイトSHAでpinし、使用ファイルごとに突き合わせます。CC0でない資産や出典不明の資産はFAILです。\n5. D08/D09で数量が未確定の枠は(b)とし、確定済みとして扱いません。\n\n【製品変更の必要性】\n- 既存参照がすでに適合する枠は、監査と記録だけで閉じられます。\n- プレースホルダや未接続の枠は、Kenney素材の配置と参照差替えという製品変更が必要です。allowed_pathsは、登録時にオーナーが素材dirと該当参照に限定して定めてください。\n- 内容保持の圧縮は許可済みです。新しいGodot実行は禁止のため、検証はPNGヘッダ寸法、存在、命名規則、.tscn/.tres参照解決の静的検証にします。実行時の描画証明が必要な枠はblockedとし、PASS扱いにしません。\n\n【手順】1件の実装 → 正式な静的検証 → 別セッションの独立review → 台帳。完了の自己確定はしません。原30/88の順序変更はユーザー許可の範囲内です。範囲・受入・予算・capは変更しません。",
+    "codex_model": "gpt-6.1-sol",
+    "codex_model_reason": "今回の判断はwaitなので、workerは起動しません。登録後のP22-02も、固定した614記録の機械的な対応付け、license原文の照合、静的な寸法/参照検証が中心で、決定的に処理できる作業です。新しい数値設計、engine試験、高度な推論は不要です。厳格さは受入側のFAIL条件と独立reviewで担保します。そのため既定のSolで十分で、Astraを使う時間・使用量の上積みは正当化できません。"
+  },
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/7262a1eb1ca84ec48ae9c5f8a2aa566e"
+}
@@ -0,0 +1,52 @@
+{
+  "recorded_at": "2026-10-13T08:40:24.862418+00:00",
+  "scope": "Located internal composition/code provenance; does not infer final rights or usability acceptance",
+  "bgm": [
+    {
+      "path": "assets/audio/bgm/tree_theme_front_candidate.wav",
+      "raw_sha256": "6df0a7af307327f703c9325f5ca2ac456888102d50ef1fa76bf4cdf19d2b86cb",
+      "same_as_recorded_composition_output": true,
+      "format_observed": {
+        "channels": 2,
+        "sample_rate": 44100,
+        "sample_width_bytes": 2,
+        "frames": 1881600
+      },
+      "origin_record": "artifacts/original-completion-2026-10-02/p22-original-paired-bgm-composition-candidate-r02/composition.json",
+      "origin_declaration": "Original score and additive synthesis in compose.py; no external sound recordings or quoted melodies",
+      "third_party_cc0_license_assigned": false,
+      "rights_display_final_accepted": false,
+      "hearing_final_accepted": false
+    },
+    {
+      "path": "assets/audio/bgm/tree_theme_back_candidate.wav",
+      "raw_sha256": "efe4cc1aa588661d73376720e4278427f7220ce93a5d446f198c5af607c141ca",
+      "same_as_recorded_composition_output": true,
+      "format_observed": {
+        "channels": 2,
+        "sample_rate": 44100,
+        "sample_width_bytes": 2,
+        "frames": 1881600
+      },
+      "origin_record": "artifacts/original-completion-2026-10-02/p22-original-paired-bgm-composition-candidate-r02/composition.json",
+      "origin_declaration": "Original score and additive synthesis in compose.py; no external sound recordings or quoted melodies",
+      "third_party_cc0_license_assigned": false,
+      "rights_display_final_accepted": false,
+      "hearing_final_accepted": false
+    }
+  ],
+  "recipe_sha256": "ef03b3169e6a531cbb688e439854d3b981bb99164527f7a5617905c1c1908f81",
+  "score_sha256": "a544f12063dcb9faa26f00585a1619f18badb483f6fd6e24477d29268835458b",
+  "composition_readme_sha256": "e437ada7615dca54f017128192b8e931eb27b0f227354338f206d6da6767cc0c",
+  "icon": {
+    "path": "assets/icons/project_icon.svg",
+    "sha256": "25cc327f9d3bec159a48a11b85dddcbb614f1b673dfb975dc8ddc130f248a86b",
+    "width": "256",
+    "height": "256",
+    "external_embedded_image_or_href": false,
+    "first_observed_baseline_commit": "423fd6dd2e75da926e38b35ac8c435e462b168d9",
+    "creator_declaration_or_final_quality_accepted": false
+  },
+  "product_changed": false,
+  "original_completed_added": 0
+}
@@ -0,0 +1,80 @@
+{
+  "scope": "Observed contracts for existing selected candidates; derived source evidence, no new original spec or finished-asset acceptance",
+  "source_pins": {
+    "docs/ART_ASSET_PRODUCTION_SPECIFICATION.md": "8387c3fa94e9eef459a6de2638d0c065123f5654835c92ed87707f9f20928342",
+    "assets/kenney/README.md": "aaf2b3f1ba7b747709d5910389acaaca2beda2a1ca8eed12b0abfd81ddb3f1da",
+    "assets/kenney/tiny_town/Tilemap/tilemap_packed.png.import": "77e09885d6c47ddf6b08efc8530bc0e8d1a109a48474ea928f3fd905fa167aa3",
+    "assets/kenney/tiny_dungeon/Tilemap/tilemap_packed.png.import": "a9f6dea88271040a123f8dadc1e117c67084ccc855ef09ebc77b54ff8c0a693f",
+    "assets/themes/japanese_fantasy/visual-theme-v1.tres": "42e968ba5e35c228d3ff372f92a8e249ec3a743045be0a3ec158556944c0bc18",
+    "scripts/ui/visual_theme_profile.gd": "2a251a94d4a18c2ddd9e307cb810d1f327c12f2f15cd3bed91e65aa499258ceb",
+    "scripts/ui/pixel_tower_art.gd": "71df9b8400cb883a5bb1c89729f80c77e734df503fc54154be3e486adb8391df",
+    "scenes/main/world_preview.gd": "75d5b0bd23204f5a485540512e44b89e1d2a4596b368f70177a238ba078ff42d",
+    "scripts/ui/paired_bgm.gd": "a7fe9311f348975a380feced102702ad3ee91439b9511006f0ff6d29540f5836"
+  },
+  "pixel_atlas": {
+    "physical_dimensions": [
+      192,
+      176
+    ],
+    "columns": 12,
+    "rows": 11,
+    "cell": [
+      16,
+      16
+    ],
+    "gap": 0,
+    "filter_source": "scenes/main/world_preview.gd:94 TEXTURE_FILTER_NEAREST",
+    "mipmaps_generated": false,
+    "vendor_paths_preserved": [
+      "assets/kenney/tiny_town/Tilemap/tilemap_packed.png",
+      "assets/kenney/tiny_dungeon/Tilemap/tilemap_packed.png"
+    ],
+    "selection_reason": "Existing 16px packs match current renderer density; generic props/units are candidates, not dedicated complete facility/character variants",
+    "replacement_dependencies": [
+      "VisualThemeProfile pixel_town_tiles/pixel_dungeon_tiles -> visual-theme-v1.tres ext_resources",
+      "PixelTowerArt.tile fixed 12 columns and 16px regions",
+      "Keep real transparency/import settings; changed atlas layout requires all affected mapping references and usability evidence",
+      "Game positions/actor IDs and save semantic identity must not be replaced by image file or atlas coordinates (existing derived art specification)"
+    ],
+    "remaining": [
+      "Per-required-use suitability and completed visuals",
+      "Runtime/display/small-screen acceptance where applicable"
+    ]
+  },
+  "ui_sounds": {
+    "source_manifest": "assets/audio/ui/source_manifest.json",
+    "existing_roles": [
+      "click",
+      "success",
+      "refusal",
+      "notification"
+    ],
+    "files_preserve_provider_names": true,
+    "publisher_and_bytes_verified": true,
+    "replacement_requires": [
+      "Equivalent declared action role and updated manifest/raw license evidence",
+      "Committed action/foreground notification semantics and actual hearing proof"
+    ],
+    "hearing_accepted": false
+  },
+  "paired_bgm": {
+    "source_recipe": "artifacts/original-completion-2026-10-02/p22-original-paired-bgm-composition-candidate-r02/compose.py",
+    "file_names": [
+      "tree_theme_front_candidate.wav",
+      "tree_theme_back_candidate.wav"
+    ],
+    "format_observed": "44100Hz, 16-bit stereo PCM, same frame count; original recipe declaration located",
+    "candidate_suffix_not_removed": true,
+    "composition_or_source_proof_is_not_hearing_quality": true,
+    "pending": [
+      "Final rights/creator presentation",
+      "Actual listening, loop/crossfade/volume/lifecycle/device acceptance"
+    ]
+  },
+  "unmade_slots": {
+    "finished_asset_from_accepted_inventory": 0,
+    "missing_not_hidden": true,
+    "no_provisional_asset_promoted": true,
+    "D08_D09_scope_quantity_unknown": true
+  }
+}
@@ -0,0 +1,41 @@
+{
+  "recorded_at": "2026-10-13T08:36:31.394324+00:00",
+  "scope": "Exact publisher provenance of 4 existing UI sounds and included License; not real hearing or whole P22-02 acceptance",
+  "official_page": "https://kenney.nl/assets/interface-sounds",
+  "official_archive_url": "https://kenney.nl/media/pages/assets/interface-sounds/fa43c1dd4d-1677589452/kenney_interface-sounds.zip",
+  "archive_bytes": 834536,
+  "archive_sha256": "f2193d072726d6758a5f7871b2dcc54dcce0d5c35c6f0a62f92549b327c81232",
+  "source_manifest_archive_sha_matches": true,
+  "license_byte_equal": true,
+  "assets": [
+    {
+      "repo_path": "assets/audio/ui/click_001.ogg",
+      "archive_member": "Audio/click_001.ogg",
+      "bytes": 4876,
+      "raw_sha256": "ccfb7fa0cccdd9faec0eb16033c732b1e308d139d80f799161495d58f7adcdb9",
+      "equal": true
+    },
+    {
+      "repo_path": "assets/audio/ui/confirmation_001.ogg",
+      "archive_member": "Audio/confirmation_001.ogg",
+      "bytes": 8968,
+      "raw_sha256": "063564703b6094d70718a3e787a55cc9141611e4ecd6b6637f8828f79b4a8c3a",
+      "equal": true
+    },
+    {
+      "repo_path": "assets/audio/ui/error_008.ogg",
+      "archive_member": "Audio/error_008.ogg",
+      "bytes": 9215,
+      "raw_sha256": "eba17ecb2a426bfd4a8a6acff5f8a86202b6424a77af0fd842e37809a1ab6d81",
+      "equal": true
+    },
+    {
+      "repo_path": "assets/audio/ui/bong_001.ogg",
+      "archive_member": "Audio/bong_001.ogg",
+      "bytes": 4848,
+      "raw_sha256": "d21d0f0b782445db579d11e2506b24cd1ac9d664ee33aeaf807761aa7b6fd710",
+      "equal": true
+    }
+  ],
+  "product_modified": false
+}
@@ -0,0 +1,46 @@
+{
+  "task": "P22-02",
+  "state": "implementing",
+  "repairs_used": 3,
+  "cap": 3,
+  "actual_timeout_event": {
+    "role": "implementer",
+    "service": "codex",
+    "argv": [
+      "/Users/korizatou114/.local/bin/codex",
+      "exec",
+      "--json",
+      "--ignore-user-config",
+      "--ephemeral",
+      "--sandbox",
+      "danger-full-access",
+      "-c",
+      "approval_policy=\"never\"",
+      "-c",
+      "sqlite_home=\"/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/.runtime/P22-02/provider-46b637a900654cfc9e0b419ab541cc9a/sqlite\"",
+      "-c",
+      "log_dir=\"/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/.runtime/P22-02/provider-46b637a900654cfc9e0b419ab541cc9a/logs\"",
+      "--output-schema",
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/.runtime/P22-02/provider-46b637a900654cfc9e0b419ab541cc9a/result.schema.json",
+      "--output-last-message",
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/.runtime/P22-02/provider-46b637a900654cfc9e0b419ab541cc9a/answer.json",
+      "-",
+      "--model",
+      "gpt-6.1-sol"
+    ],
+    "cwd": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement",
+    "effective_timeout_seconds": 1800,
+    "project_policy_timeout_unchanged": 900,
+    "repairs": 3,
+    "global_policy_changed": false
+  },
+  "run": {
+    "id": "6faa74aed45644b59ddd4c64e215b2f8",
+    "role": "implementer",
+    "service": "codex",
+    "status": "running",
+    "pid": 14816,
+    "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p22-02-contract/runs/6faa74aed45644b59ddd4c64e215b2f8"
+  },
+  "completion_claimed": false
+}
@@ -0,0 +1,23 @@
+{
+  "task": "P22-02",
+  "state": "blocked",
+  "actual_worker_run": "a999bbd142334aa582f2d373ed625e78",
+  "actual_exit": 124,
+  "repairs": 2,
+  "cap": 2,
+  "active_process_or_job": false,
+  "worker_result_received": false,
+  "current_head": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "unsubmitted_manifest_sha256": "1a7af44b722ab110aca508512ea55c18a19ca72ffc75db0ac6f39ad839079ae0",
+  "source_preserved": true,
+  "normal_restart_performed": false,
+  "root_tests_pass": 13,
+  "cli_integrity_exit": 0,
+  "cli_required_readiness_exit": 2,
+  "pending_identities": 614,
+  "prospective_guard_bytes": 487283,
+  "final_committed_packet_verified": false,
+  "human_permission_pending": "P22 task cap2→3, used2 kept, one implementer timeout1800 only",
+  "global_goal_complete": false,
+  "original_completed_units_added": 0
+}
@@ -0,0 +1,61 @@
+{
+  "direct_human_reply": "P22-02の追加1回と限定timeout変更を許可する",
+  "source_question_call": "call_99b2d7c5e9f3461eba0b8b0217c8b39b",
+  "cap": 3,
+  "retained_used": 2,
+  "effective_implementer_timeout_seconds": 1800,
+  "project_policy_timeout_unchanged": 900,
+  "scope": "Only same P22-02 preserved finalization; no global or other role/task change",
+  "before_contract": {
+    "id": "P22-02",
+    "title": "素材契約と権利（原条件全体、記録だけの完了代用なし）",
+    "requirement_ids": [
+      "P22-02"
+    ],
+    "acceptance_ids": [
+      "P22-02"
+    ],
+    "spec_ref": "docs/spec/acceptance/P22-02.json",
+    "base_commit": "10c62e1fa7b71576598583f434824b59816d4705",
+    "worker": "codex",
+    "allowed_paths": [
+      "docs/plans/original-completion-2026-10-02/execution/p22-02/**",
+      "tools/check_p22_asset_contracts.py"
+    ],
+    "depends_on": [],
+    "resource_locks": [
+      "p22-asset-contracts-and-rights"
+    ],
+    "validation_ids": [
+      "p22-contract"
+    ],
+    "max_repair_attempts": 2,
+    "spec_sha256": "f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875"
+  },
+  "after_contract": {
+    "id": "P22-02",
+    "title": "素材契約と権利（原条件全体、記録だけの完了代用なし）",
+    "requirement_ids": [
+      "P22-02"
+    ],
+    "acceptance_ids": [
+      "P22-02"
+    ],
+    "spec_ref": "docs/spec/acceptance/P22-02.json",
+    "base_commit": "10c62e1fa7b71576598583f434824b59816d4705",
+    "worker": "codex",
+    "allowed_paths": [
+      "docs/plans/original-completion-2026-10-02/execution/p22-02/**",
+      "tools/check_p22_asset_contracts.py"
+    ],
+    "depends_on": [],
+    "resource_locks": [
+      "p22-asset-contracts-and-rights"
+    ],
+    "validation_ids": [
+      "p22-contract"
+    ],
+    "max_repair_attempts": 3,
+    "spec_sha256": "f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875"
+  }
+}
@@ -0,0 +1,9 @@
+# P22-02保持成果の限定継続案（未承認・未適用）
+
+Astraは900秒で実exit124終了。restartしていない。sourceは保持し、Root実13試験PASS、CLI整合性0/原ready2、全614/19、prospective全packet487283を確認。残件はASSET_CONTRACTS.mdとvalidation.jsonの古いmirror説明/packet472408/ledger453678等を現物へ同期し、正式応答・submitを得ること。差分案proposed-final-doc-metadata-sync.patchは2文書のみで、既存checker logicや原条件を緩めない。
+
+許可対象案: P22-02だけ追加1回、個別cap2→3/使用済み2保持。同じworktree、保持されたASTRA code/13試験を再利用、全再実装なし。同じ一回のimplementer実行だけ有効timeout1800秒（project既定900/他task/commander/reviewerは不変）を信頼側のbounded coordinator引数で指定する。scopeを緩めず、actual argv/cwd/effective timeout/exit/logを記録する。provider-budget/並列/課金/API/原30・88/入力・仕様・権限・DB直接書換えはしない。
+
+同じworkerで差分案/構文/既存13の影響確認、必ず実submitted応答。その後Rootはexact final commitから全packet<500000を測定し、記録整合性と原条件readyを別に検証。実P22の未制作/実利用/Creator/権利/数量/表示/聴感が未達ならoriginal受入不可を維持する。Rootの合格を正式reviewに代用しない。
+
+SKILL.mdは修正回数/予算の無断拡大を禁止する。普通capは2/2使い切ったため、このtask-only追加一回とexecution timeout変更の直接許可が必要。提出応答を捏造してstateを戻す／RP13専用復旧をP22へ流用する／新規登録で回数回避することはしない。
@@ -0,0 +1,43 @@
+{
+  "original_plan_id": "P22-02",
+  "original_unit_completed": false,
+  "preservation_branch": "codex/p22-02-preserved-finalization-r05",
+  "preserved_commit": "aad6284fb75d32a73d0a4c00a53e9660ce76aad8",
+  "tree": "b56e0ddc03b705f8898387079f7bb636e3f0594d",
+  "actual_packet_bytes": 491572,
+  "packet_limit": 500000,
+  "all_sources_included": true,
+  "actual_worker_run": "6faa74aed45644b59ddd4c64e215b2f8",
+  "worker_exit_code": 0,
+  "worker_result_status": "blocked",
+  "worker_result_preserved": true,
+  "root_coordinator_reference_gap_resolved": true,
+  "ordinary_submission_not_recovered": true,
+  "new_provider_or_repair_not_started": true,
+  "repairs_used": 3,
+  "repair_cap": 3,
+  "retained_code_same_sha": {
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json": true,
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py": true,
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py": true,
+    "tools/check_p22_asset_contracts.py": true
+  },
+  "actual_root_tests": "13 passed, same unchanged code, diagnostic not formal original acceptance",
+  "original_require_ready_exit_code": 2,
+  "pending_exact_uses": 614,
+  "selected_usable_count": 0,
+  "independent_technical_review": {
+    "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p22-02-contract/runs/25eefc570e4540d9aacd05c9763233b1",
+    "model": "claude-opus-5-5",
+    "original_unit_accepted": false,
+    "findings_by_severity": {
+      "critical": 0,
+      "high": 1,
+      "medium": 5,
+      "low": 3
+    },
+    "formal_acceptance_review": false
+  },
+  "product_main_adoption": false,
+  "original_denominator": "30 packages / 88 delivery units; no partial points"
+}
@@ -0,0 +1,47 @@
+{
+  "submitted_commit": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "source_scope": "diagnostic Root preflight, not formal acceptance or review",
+  "syntax_passed": true,
+  "checks": [
+    {
+      "id": "record-integrity",
+      "exit_code": 0,
+      "stdout": "{\"acceptance_claimed\": false, \"original_conditions\": {\"all_creator_and_rights_evidence_accepted\": false, \"all_exact_uses_selected_and_usable\": false, \"all_mandatory_unmade_and_disclosure_gaps_resolved\": false, \"all_naming_resolution_layout_replacement_references_accepted\": false, \"applicable_display_and_hearing_evidence\": false, \"independent_opus_review\": false, \"integration_and_final_original_30_88_acceptance\": false, \"root_static_and_meaningful_negative_validation\": false}, \"original_unit_ready\": false, \"pending_identity_count\": 614, \"record_integrity\": true}\n",
+      "stderr": ""
+    },
+    {
+      "id": "registered-exact",
+      "exit_code": 2,
+      "stdout": "",
+      "stderr": "usage: check_p22_asset_contracts.py [-h] [--ledger LEDGER] [--require-ready]\ncheck_p22_asset_contracts.py: error: unrecognized arguments: --verify-only --accepted-input docs/spec/inputs/P22-02-accepted-usage.json\n"
+    },
+    {
+      "id": "readiness-current",
+      "exit_code": 2,
+      "stdout": "{\"acceptance_claimed\": false, \"original_conditions\": {\"all_creator_and_rights_evidence_accepted\": false, \"all_exact_uses_selected_and_usable\": false, \"all_mandatory_unmade_and_disclosure_gaps_resolved\": false, \"all_naming_resolution_layout_replacement_references_accepted\": false, \"applicable_display_and_hearing_evidence\": false, \"independent_opus_review\": false, \"integration_and_final_original_30_88_acceptance\": false, \"root_static_and_meaningful_negative_validation\": false}, \"original_unit_ready\": false, \"pending_identity_count\": 614, \"record_integrity\": true}\n",
+      "stderr": ""
+    }
+  ],
+  "exact_unchanged_reviewer_guard_bytes": 1350690,
+  "guard_limit": 500000,
+  "packet_fits": false,
+  "source_names": [
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_SPEC_HASH_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "validation_source_names": [
+    "docs/spec/inputs/P22-02-accepted-usage.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "known_readiness_source_defects": [
+    "check requires selected_assets==[]",
+    "check requires all original_conditions False before readiness uses all(original_conditions)",
+    "ledger.current must equal frozen all-incomplete checkpoint, preventing actual evidence promotion"
+  ],
+  "acceptance_claimed": false,
+  "worker_source_changed": false
+}
@@ -0,0 +1,28 @@
+{
+  "project": "the-tree-p22-02-contract",
+  "task": "P22-02",
+  "commit": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "method": "sys.settrace observes the actual unchanged Runner.packet locals; guard not bypassed",
+  "control": "/private/tmp/the-tree-p24-02-control-r02",
+  "packet_source_sha256": "34d0f62ec5b17b070a2d1ad4f58d06f3be7e9b6fb649ec86b366bc03b07c1329",
+  "actual_guard_bytes": 1350690,
+  "guard_limit": 500000,
+  "fits": false,
+  "actual_packet_result": "packetが大き過ぎます。タスクを小さく分割してください",
+  "model_called": false,
+  "task_state_changed": false,
+  "body_file_sha256": "43ba3b71eda5f5cab5331d9a2632abe8ae24d6a28859d7cb57667ed19046e28a",
+  "source_names": [
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_SPEC_HASH_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "validation_source_names": [
+    "docs/spec/inputs/P22-02-accepted-usage.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "passed_validation_receipts_included": 0
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P22-02",
+  "reason": "P22-02 is in repair_ready. The owner explicitly approved raising the repair cap from 2 to 3, so this is repair 3 of 3. Direction for the one ordinary implementer run (timeout 1800s; the project and other roles stay at 900s): keep working in the same worktree and reuse all preserved Astra code. Do not reimplement anything and do not start other tasks. Keep the retained, already-tested checker (tools/check_p22_asset_contracts.py), build_contract.py, asset-contracts.json and test_contract.py exactly as they are. Read P22_FINAL_REPAIR_CONTEXT.md first. Use the proposed-final-doc-metadata-sync.patch and evidence/proposal under checkpoints/p22-02-slot-contract-r02 as read-only reference. Only update the two stale outputs, ASSET_CONTRACTS.md and validation.json, so they match the current code and facts. Write the contract spec hash as f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875, which is the UTF-8 hash of stdout.strip. Record that the raw file hash, c26c0b12cf7e7a7c46e671acde2e00762904732c1cd6381a53836e3d7b3f9824, differs only by a trailing newline. Report the facts honestly: the 13 root tests pass, ordinary integrity exits 0, and original require-ready still exits 2 (614 pending, 0 selected, disclosure/mandatory_scope missing). Keep integrity separate from readiness. Do not claim P22-02 or the original unit is complete. Do not fabricate assets, rights or quantities. D08/D09 stay unknown. Verification is bounded: python -B, ast.parse, test_contract.py, the checker's ordinary and require-ready modes, and confirming that every output field matches the checker output. Do not run engine or full regression. Measure the full reviewer packet on the actual final submitted state, with no omitted sources or guard changes, and confirm it is under 500000 (the prospective figure is 487283). Return a formal submitted worker JSON that lists the exact unmet original-unit conditions. Make no changes outside allowed_paths, no git writes and no acceptance waiver. The original scope, acceptance and denominator stay unchanged.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "The remaining work is bounded documentation and metadata syncing. A concrete patch already exists, the code is already tested and must not change, and the facts are already settled (test results, exit codes, hashes). Sol is the default and can apply a known diff, run a few short checks and measure the packet. Astra's extra reasoning would add time and usage without improving quality, because no design, decoding or checker logic needs rework. The 1800s timeout the owner approved is enough for Sol."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P22-02",
+  "reason": "P22-02はrepair_ready（修正2/2、記録済みrequest-repairを通常dispatch済み）で、base/spec/input/allowed_paths/条件は不変。正式failure receipt 8bced98116304e9cbe35521c33ab77d4-validation.json（登録exact argv未対応）を根拠に、同一worktreeのexecution/p22-02/P22_FINAL_REPAIR_CONTEXT.md全文とSPEC_HASH_CONTEXT（stripとrawを区別）に従う最終修正を実行する。範囲: 前判断の3欠陥、exact 1350690 bytes入力照合、固定alwaysFalseの除去、登録CLI `--verify-only --accepted-input.. --require-ready` のreadonly受理（登録は変更しない）。decoder/input/614全identity・全fieldはSHA参照+再構成で保持し、currentSource19と各契約の選定/不選定/不足・proofを実データに結合して検証する。元record内の未制作をempty分母へ除外しない。completed原unitとvalidate準備を分離し、validate→review→統合→finalの循環を作らない。現在実データ614未達ならreadinessは非0。synthetic正例は内部純関数に限定し、原P22のPASSへ換算しない。allfalse/selectedemptyの固定と偽boolean証拠は拒否する。変更はallowed_paths（execution/p22-02/**、tools/check_p22_asset_contracts.py）内のみ。Input/spec/checkpoints/Core/権限/予算/Git操作、余計な再調査/dup worker/engine/full regressionは禁止。修正上限2/2のため、これ以上の修正、上限変更、受入変更はオーナー判断。",
+  "codex_model": "gpt-6-astra",
+  "codex_model_reason": "前判断の選定理由を保持する。(1) validate→review→統合→finalの循環を作らずにreadinessへ到達できる設計が必要。(2) 固定allfalse/selectedemptyではなく、実データに結合した意味のある負例が必要。(3) schema/CRC/dimension/layout/rights/evidenceを凍結snapshotとの全==比較ではなく現在のsourceに結合する必要がある。(4) 217KiBの不変入力をSHA参照+再構成で扱い、reviewer packet全体を<500000に保つ必要がある。最終修正（2/2）で再修正の余地がないため、失敗コストが高い。前回は約45万input tokens（大半cache）で、品質を優先してastraを選ぶ価値がある。"
+}
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P22-02",
+  "reason": "P22-02は blocked のまま、ordinary submitは許可されないため wait とします。正規の提出状態に戻す手段はありません。根拠は以下のとおりです。(1) 唯一の正規経路はworkerによる新しいsubmitted結果ですが、repairは3/3を使い切っており、cap4の追加とworker再実行はオーナーが禁止しています。(2) Rootがblocked状態を直接書き換えることや、run6faa74aeの結果をsubmittedに置き換えることは、結果の偽装になり、ゲートの例外を作ることになります。(3) Rootの実測（実際のRunner.packet、probe aad6284f/tree b56e0ddc/parent c6ccc5a6、491572<500000、8 sources+2 validator sources、省略なし、passed receiptなし）は有効な補強証拠です。ただし、worker自身が提出した結果の代わりにはなりません。candidateがnullなので、formalなreview・validate・prepare-integrationは成立しません。\n\nコーディネーターの次手順（実装・状態変更なし）は5つです。\n(a) probe commit aad6284fをそのまま保存専用の証拠branchに固定し、tree hash・parent・packet実測値・source一覧・4つの保持コードSHA・13テストPASS・require-ready exit 2をmanifestに記録する。このbranchはcandidateフィールドにもmainにも載せない。\n(b) 完全なpacketで、読み取り専用の独立技術レビュー（Opus）を任意で行う。結果は参考所見として扱い、正式な原受入レビューの代わりにはしない。require-readyは引き続き非ゼロのままで、614 pendingのunit未完了を明記する。\n(c) blocked理由に、ブロックの原因はコーディネーター側の計測参照の未供給だけであり、Rootの実測で解消済みであることを証拠として追記するかどうかは、オーナーが判断する。新しいworker結果を正規の提出として認める場合も、オーナーの判断が必要。\n(d) 依存関係のない別の原単位のうち、価値が高く単独で閉じられるものへ移る。\n(e) cap変更、provider再起動、受入の免除、未達コードのmain採用は行わない。",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "今回はrunもrepairも承認されておらず、modelフィールドが必須なのでデフォルトのSolを入れています。Astraを選ぶ根拠になる難しい実装作業はありません。"
+}
@@ -0,0 +1,7 @@
+{
+  "action": "request-repair",
+  "task_id": "P22-02",
+  "reason": "The Root preflight of c6ccc5a6 found three required defects (recorded in checkpoints/p22-02-slot-contract-r02/actual-checker-and-packet-preflight-r02.json). This uses the last ordinary repair (1 used, limit 2). Fix only within allowed_paths: execution/p22-02/** and tools/check_p22_asset_contracts.py. Do not change the spec, inputs, Root checkpoint, cap, contracts, registered validation argv, permissions, or Core.\n\n(1) The checker exits 2 on the exact registered argv `--verify-only --accepted-input docs/spec/inputs/P22-02-accepted-usage.json --require-ready`. Add argparse support for `--verify-only` and `--accepted-input` without changing the registration. Keep it read-only.\n\n(2) Readiness is hardcoded to always fail, which the spec forbids. The check forces selected_assets==[], asserts all 8 original_conditions are False before computing ready with all(values), and forces ledger.current to equal the frozen all-unmet snapshot. Remove these. Keep every field of the frozen accepted input, all 614 original identities and the source observations. Verify the new current, selection and actual evidence separately, and derive ready from that real data. Reject fake booleans, file-presence-only proof and promoted fallbacks. The current ledger is genuinely short of 614, so the real P22 run must still return a nonzero readiness exit.\n\nKeep validation-ready separate from original-completed. Formal validate covers the technical readiness of function, assets, rights and the required usability. Original acceptance comes later, through a separate review, then integration, then final. Remove the cycle that puts independent review or integration completion as a gate before validation. Do not record original acceptance ahead of time.\n\nProve reachability with pure functions: one isolated positive readiness case, plus negatives for wrong proof, wrong quantity and wrong pin. Apply meaningful negatives to: missing, duplicate and stale sources; dimension, layout, license and rights mismatches; counterfeit final; quantity; codec bool-as-index; cycles; duplicate keys; NaN/Inf; and path escape. Don't reject only sample mutations, and don't use a gate that requires the whole checkpoint to equal a mirror.\n\n(3) The exact unchanged Runner packet is actually 1,350,690 bytes; the worker's 472,408 figure was wrong. It must be under 500,000 bytes, counting the full diff, all sources, the registered validation_sources (the checker plus the 217 KiB accepted input) and the tests. Don't re-embed the whole accepted_input or the roughly 1.5 MB current data in the ledger. Rebuild losslessly from the existing immutable inputs, referenced by raw SHA, decoded semantic hash, or file plus identity. Keep all 19 candidate sources, each of the 614 selections, and every gap and required field. Cut the output down with shared profiles, text and contracts. Don't extend the Core's P13-only dedup to P22.\n\nRun python -B with ast.parse only; no engine or full regression. Return submitted with the exact list of incomplete original-unit conditions. Do not claim P22-02 acceptance. No duplicate worker and no new registration.",
+  "codex_model": "gpt-6-astra",
+  "codex_model_reason": "This is the last ordinary repair, so a failure leaves no fallback. The work is hard: three defects at once, redesigning the readiness logic so it is reachable but still fails nonzero on the real data, untangling the validate/review/integration cycle, and a lossless decoder rebuild that shrinks the packet from 1.35 MB to under 500 KB. It also needs many meaningful negatives. The previous worker misreported the packet size and shipped always-fail logic, which suggests the default model underestimates this task. Astra's quality is worth its extra time and usage."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P22-02",
+  "reason": "P22-02 stays on wait. Advisory 25eefc570e4540d9aacd05c9763233b1 found original_unit_accepted=false. High: the positive integration path is unproved. Medium: negatives for rights, quantity, layout and the real ledger are missing, and some evidence is stale. All three repairs are used. No cap 4, no repeated full regression and no main adoption. Keep candidate aad6284f and the exact 491572-token full packet as they are. Do not count P22-02 as an original acceptance, and do not award partial points against 30/88. P02-01 and P02-02 are already formally complete, so they are not repeated.\n\nNEXT CHOSEN PLAN: P08-02, safe change to old placements. Why: it is the only candidate whose dependencies are met now. P04 waits on the owner's D05 decision. P06 waits on value approval. P13 and P18 repairs wait on the owner. P23 gestures wait on Windows. P24-01 needs UI for thoughts, emotion and shield that is not wired yet, plus a P18 candidate and unknown values. P26-01 depends on D08 and D09, which are unresolved. P08-02 can reuse the accepted P03-02 inputs. Bad migrations damage saves, so it has high value.\n\nBefore the contract is frozen, reread the exact P08-02 entry in docs/traceability/original/BASELINE.txt and the accepted-input files. Do not rely on this summary. All original acceptance conditions must be met: (1) problems with original dimensions are shown to the player, who chooses what happens; (2) unsafe auto-correction is rejected; (3) nothing overlaps, is orphaned or disappears; (4) when a problem cannot be solved, the original placements and saves are kept byte-identical, and formal backups stay intact.\n\nMissing evidence:\n- The player-choice display has been run and observed, including cancel and confirm.\n- Negatives show that unsafe auto-corrections are refused.\n- Each P03-02 rejected batch has overlap, orphan and disappearance checks: native cross-PID moving, boarded EV, rescue, logistics, and concurrent build.\n- Raw-state and save hashes are byte-identical before and after an unsolvable case, and backups are kept.\n- An independent review is done.\n\nMigration diagnostics alone do not prove P08-02.\n\nEvidence reuse: only reuse P03-02's exact raw states and formal backups after checking the version, the input SHA and the source applicability. Do not guess D07 relation conversions; record unknowns explicitly.\n\nRead-only audit scope:\n- Placement migration and validation code, the save load and write path, and backup handling.\n- The P03-02 evidence manifests and hashes.\n- Existing tests that cover placement conflicts.\n- Find which product and UI gaps remain, and which files would need to change.\n\nAfter that: targeted local tests for the touched modules, an impact analysis, a full final regression only if a change touches shared save or placement paths at integration, and then an independent Opus review. No registration and no worker run until the contract is frozen. The criteria are not weakened, and the owner decides spec, denominator, budget and main changes.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "This decision is wait, so no worker runs. Sol is the default. Its quality is enough for the next step, a bounded read-only audit and contract preparation, and it saves time and usage. Consider Astra only if the frozen P08-02 contract needs complex changes to save and placement migration code."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P22-02",
+  "reason": "P22-02は現在repair_readyで、修正は1/2回、2回の上限内です。出力はまだ1つも作られていません。今回の停止は、契約specSHAの比較に末尾改行を含むraw bytesのハッシュを使ったことが原因です。decoderやロジックが否決されたわけではありません。Rootの実測によると、base raw git blobとworktree bytesは一致します。不変のcontract spec_sha256(f252de3c…)はhash(raw.decode().strip().encode())と一致し、Runnerのgit helperがstdout.strip()を使う方法と同じです。spec、source、input、contract、acceptance、policyはどれも変わっていないため、仕様変更には当たりません。新規登録、重複worker、追加cap、予算変更も不要です。同じ担当がrunで普通の修正を続けてください。担当への指示は次のとおりです。(1) 最初にallowed_paths内のexecution/p22-02/P22_SPEC_HASH_CONTEXT.mdを読み、そこに固定された実SHAと算出方法に従う。(2) Runner方法(strip後のsemantic hash)を使うのは契約spec SHAの比較だけにする。個別のsource pinsとaccepted input(45fa52ac…)はraw bytesのSHA256のまま照合する。(3) ファイルのnormalize、spec・input・Runner・policyの変更、git書込、engineやfull回帰の実行は禁止。(4) 全614 identity、495 candidate、119 missing、19 source、2 state group(画像ではない)、既存current証拠を再利用し、成果物は契約、checker、具体的な製品proposalに限る。(5) record integrityはoriginal-unit readinessとは別に扱う。原unitのREADY未達と--require-readyの非0終了は保持し、構造上の合格をP22-02の受入や完了の代わりにしない。(6) submittedで返すときは、未達の原unit条件を正確に列挙する。",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "今回の失敗はハッシュの表し方を取り違えたことによる停止で、修正はRootが実測した方法を文書どおり当てはめるだけです。新しい設計や難しい推論は要りません。既存の入力と証拠は全部そろっていて、作業範囲は契約・checker・proposalに限られています。前回のSol実行でもdecoderとロジックは否決されていません。品質、時間、使用量のどれを見てもastraに格上げする理由がないため、既定のsolを継続します。"
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P22-02",
+  "reason": "P22-02 is ready, has no depends_on, is unsubmitted, has 0 repairs, and its base_commit 10c62e1 matches HEAD with a clean tree. The spec SHA and the accepted input (raw SHA 45fa52ac…, 217190 bytes, lossless d/l/s/r encoding) are pinned, and the r01 and r02 preflight evidence is already in the repo, so nothing blocks starting. Scope is limited to allowed_paths (execution/p22-02/** and tools/check_p22_asset_contracts.py): contract/ledger/checker only, with no product, asset, spec, Runner, policy or git writes. The worker must: decode every field and verify the per-file semantic SHAs, the exact 614 IDs and 2 non-image state groups, and the wrong tag/type/index/cycle/duplicate-key rejects; join the 495 existing and 119 missing candidates to the real raw bytes, PNG dimensions/CRC, naming, replacement chain and current source (main.gd and world_preview updated to the current observed versions); reuse the verified Kenney 276/296 member, license and zip evidence, keeping the internal origin of BGM2 separate from final rights/hearing acceptance (left pending); keep D08/D09 explicitly unknown, with no CC0-only restriction and no invented quantities; keep record integrity separate from original-unit readiness, derived from the data, so that --require-ready exits non-zero while any original condition is unmet, with no hardcoded always-fail and no vacuous pass on zero completed frames; deduplicate through shared references so the exact reviewer packet stays under 500000; and leave concrete product/display/hearing proposals. Read the r02 JSON of about 1.5MB only with targeted python, never cat it. Use python -B and ast.parse; no engine or full regression. Submission means only that the contract work is written, never that the original P22-02 is complete (acceptance stays 0/1). Root static checks and negatives come first; the formal check, a separate Opus review and integration only after every acceptance condition is met.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "The owner set Sol as the default and only one implementation slot is available. The work is mostly mechanical stdlib-Python transformation: decoding the 614 records, joining them to existing in-repo evidence and generating JSON/Markdown under a size limit. It needs no new research, engine runs or product edits, and the checker's output can be verified with static checks and negatives. Sol costs less time and usage, and two repairs are available as a buffer. The hardest point is keeping integrity separate from readiness without a false pass. If a repair is rejected on that readiness logic or on the decoder's correctness, Astra will be considered then."
+}
@@ -0,0 +1,23 @@
+{
+  "task_id": "P22-02",
+  "commit": "10c62e1fa7b71576598583f434824b59816d4705",
+  "status": "blocked",
+  "summary": "ASSET_CONTRACTS.mdとvalidation.jsonのみ同期。保持済みコードは変更なし。python3 -Bで13テスト合格、AST確認成功、ordinary exit 0、require-ready exit 2。出力フィールドとspec両hashを確認。指定patch・計測証拠がworktreeに存在せず参照先もアクセス拒否のため、完全最終パケットの500000未満を確認できない。487283は実測として報告していない。",
+  "acceptance_ids": [
+    "P22-02"
+  ],
+  "findings": [
+    {
+      "severity": "high",
+      "message": "完全最終レビューパケットの構築定義・参照証拠が不足し、必須サイズ計測がblocked。"
+    },
+    {
+      "severity": "high",
+      "message": "原成果未完了：614 pending、0 selected。最終命名・解像度・frame/layout・差替参照、使用可能資産とcreator/rights証拠、mandatory_scope/disclosure、必要な表示・聴感証拠が不足。D08/D09内容・数量はunknown。"
+    },
+    {
+      "severity": "high",
+      "message": "Root正式静的検証・meaningful negatives、独立Opusレビュー、統合、原30パッケージ/88成果の最終受入が未完了。ローカル整合性合格は原成果完了を意味しない。"
+    }
+  ]
+}
@@ -0,0 +1,31 @@
+{
+  "recorded_at": "2026-10-13T09:24:51.506077+00:00",
+  "task": {
+    "id": "P22-02",
+    "state": "implementing",
+    "repairs": 2,
+    "submitted": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+    "reason": null
+  },
+  "repair_cap": 2,
+  "live_run": {
+    "id": "a999bbd142334aa582f2d373ed625e78",
+    "status": "running",
+    "pid": 95155,
+    "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p22-02-contract/runs/a999bbd142334aa582f2d373ed625e78"
+  },
+  "process_alive_verified": true,
+  "exec_session": 20764,
+  "actual_worker_model": "gpt-6-astra",
+  "commander_model": "claude-opus-5-5",
+  "actual_command_model_verified": true,
+  "prior_candidate": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "prior_candidate_not_adopted": true,
+  "required_defects": [
+    "Registered CLI args missing; actual formal validation failed",
+    "Always-false readiness and validation/review/integration cycle",
+    "Actual unchanged complete packet1350690 exceeds500000"
+  ],
+  "scope_unchanged": true,
+  "no_new_original_delivery_or_acceptance": true
+}
@@ -0,0 +1,29 @@
+{
+  "scope": "Unsubmitted preserved Astra working tree; prospective unchanged-Runner composition, NOT an exact submitted SHA packet",
+  "base_commit": "10c62e1fa7b71576598583f434824b59816d4705",
+  "old_submitted_commit": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "current_worktree_head": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "source_manifest_sha256": "1a7af44b722ab110aca508512ea55c18a19ca72ffc75db0ac6f39ad839079ae0",
+  "prospective_guard_bytes": 487283,
+  "guard_limit": 500000,
+  "fits_before_final_docs_metadata": true,
+  "actual_method_template_used": true,
+  "all_source_and_code_diffs_included": true,
+  "validation_sources_included": [
+    "docs/spec/inputs/P22-02-accepted-usage.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "source_names": [
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_FINAL_REPAIR_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_SPEC_HASH_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "no_accepted_input_fields_omitted": true,
+  "final_committed_packet_still_required": true,
+  "worker_source_edited_by_root": false
+}
@@ -0,0 +1,29 @@
+{
+  "scope": "Root actual tests of preserved, unsubmitted Astra work; not formal original acceptance",
+  "argv": [
+    "/Users/korizatou114/Antigravity/環境構築/agent-control/.venv/bin/python",
+    "-B",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py",
+    "-v"
+  ],
+  "cwd": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement",
+  "exit_code": 0,
+  "elapsed_seconds": 0.7032037498429418,
+  "source_hashes_before_after_equal": true,
+  "source_hashes": {
+    "tools/check_p22_asset_contracts.py": "7be6f044c63bf515d215731a6eef67e3aee1c2652e55a4e86cb3e45093316c83",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md": "c7fb25fa8d527cd7553f743117382a9a103dabcdd99e168bff0287e2cb523652",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_FINAL_REPAIR_CONTEXT.md": "185fb46091c74b275f7757236abf425d975029b66e6ff2c7b58d3b07effc72af",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_SPEC_HASH_CONTEXT.md": "3a5405655becb7edeacdddafbb4387d40a4c419435c15b4183501bf53697eae0",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json": "0d8bf55d4bd0a8fbc8eabed26c883fe6a0c25d0074e818629b924bb6e4302afc",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py": "20968f966912593a32a6d50ccf6e7c37cb26a380937fb26d1194f411d42b112e",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py": "dfa722ad8ac2eeb77f772a2f5cf8988af08698ff5db91f84f7b7dc91db5f4b2c",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json": "1bb42e293d814717c2ba6d21fe728ddfa8afda92f43c9f277d455a6f872c8bf8"
+  },
+  "run_timeout": {
+    "run": "a999bbd142334aa582f2d373ed625e78",
+    "exit_code": 124,
+    "worker_result_received": false
+  },
+  "formal_acceptance_claimed": false
+}
@@ -0,0 +1,18 @@
+test_codec_and_strict_json (__main__.ContractTests.test_codec_and_strict_json) ... ok
+test_format_layout_state_and_quantity (__main__.ContractTests.test_format_layout_state_and_quantity) ... ok
+test_isolated_reachable_and_wrong_proof_quantity_pin (__main__.ContractTests.test_isolated_reachable_and_wrong_proof_quantity_pin) ... ok
+test_nonvacuous_and_unmade_denominator (__main__.ContractTests.test_nonvacuous_and_unmade_denominator) ... ok
+test_path_escape (__main__.ContractTests.test_path_escape) ... ok
+test_real_coverage_and_source_omission (__main__.ContractTests.test_real_coverage_and_source_omission) ... ok
+test_real_false_finished_and_fake_booleans (__main__.ContractTests.test_real_false_finished_and_fake_booleans) ... ok
+test_real_license_bytes_and_rights_subject (__main__.ContractTests.test_real_license_bytes_and_rights_subject) ... ok
+test_real_png_crc_and_layout (__main__.ContractTests.test_real_png_crc_and_layout) ... ok
+test_real_reference_mismatch (__main__.ContractTests.test_real_reference_mismatch) ... ok
+test_real_selected_contract_unknown_rights_and_forged_proof (__main__.ContractTests.test_real_selected_contract_unknown_rights_and_forged_proof) ... ok
+test_real_source_missing_and_stale (__main__.ContractTests.test_real_source_missing_and_stale) ... ok
+test_registered_cli_real_data_is_not_ready (__main__.ContractTests.test_registered_cli_real_data_is_not_ready) ... ok
+
+----------------------------------------------------------------------
+Ran 13 tests in 0.593s
+
+OK
@@ -0,0 +1,52 @@
+"""Observe the unchanged actual Runner packet without weakening its guard."""
+import argparse
+import copy
+import hashlib
+import json
+import os
+from pathlib import Path
+import sys
+
+parser = argparse.ArgumentParser()
+parser.add_argument("--project", required=True)
+parser.add_argument("--task", required=True)
+parser.add_argument("--commit", required=True)
+parser.add_argument("--output", required=True)
+a = parser.parse_args()
+control = Path(os.environ["OWNER_RUNNER_CONTROL"]).resolve()
+sys.path.insert(0, str(control))
+from runner.core import Runner, GateError
+runner = Runner(a.project)
+packet_code = Runner.packet.__code__
+observed = {}
+def trace(frame, event, arg):
+    if frame.f_code is packet_code and event in ("return", "exception") and "body" in frame.f_locals:
+        observed["body"] = copy.deepcopy(frame.f_locals["body"])
+    return trace
+status = "built"
+try:
+    sys.settrace(trace)
+    runner.packet(a.task, "reviewer", a.commit)
+except GateError as exc:
+    status = str(exc)
+finally:
+    sys.settrace(None)
+body = observed.get("body")
+if body is None:
+    raise RuntimeError("No actual body captured; cannot claim a measured packet")
+guard_bytes = len(json.dumps(body).encode())
+output = Path(a.output)
+output.mkdir(parents=True, exist_ok=True)
+raw = json.dumps(body, ensure_ascii=False).encode()
+(output / "actual-body.json").write_bytes(raw)
+report = {"project": a.project, "task": a.task, "commit": a.commit,
+    "method": "sys.settrace observes the actual unchanged Runner.packet locals; guard not bypassed",
+    "control": str(control), "packet_source_sha256": hashlib.sha256(Path(control / "runner/core.py").read_bytes()).hexdigest(),
+    "actual_guard_bytes": guard_bytes, "guard_limit": 500000, "fits": guard_bytes < 500000,
+    "actual_packet_result": status, "model_called": False, "task_state_changed": False,
+    "body_file_sha256": hashlib.sha256(raw).hexdigest(),
+    "source_names": list(body.get("sources", {})),
+    "validation_source_names": list(body.get("validation_sources", {})),
+    "passed_validation_receipts_included": len(body.get("tests", []))}
+(output / "report.json").write_text(json.dumps(report, ensure_ascii=False, indent=2) + "\n")
+print(json.dumps(report, ensure_ascii=False))
@@ -0,0 +1,30 @@
+{
+  "project": "the-tree-p22-02-contract",
+  "task": "P22-02",
+  "commit": "aad6284fb75d32a73d0a4c00a53e9660ce76aad8",
+  "method": "sys.settrace observes the actual unchanged Runner.packet locals; guard not bypassed",
+  "control": "/private/tmp/the-tree-p24-02-control-r02",
+  "packet_source_sha256": "34d0f62ec5b17b070a2d1ad4f58d06f3be7e9b6fb649ec86b366bc03b07c1329",
+  "actual_guard_bytes": 491572,
+  "guard_limit": 500000,
+  "fits": true,
+  "actual_packet_result": "built",
+  "model_called": false,
+  "task_state_changed": false,
+  "body_file_sha256": "f64acba470e9c3182af7e4fef9344464a4c32e1de818468f1dd6c806a082eded",
+  "source_names": [
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_FINAL_REPAIR_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_SPEC_HASH_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "validation_source_names": [
+    "docs/spec/inputs/P22-02-accepted-usage.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "passed_validation_receipts_included": 0
+}
@@ -0,0 +1,19 @@
+{
+  "probe_commit": "aad6284fb75d32a73d0a4c00a53e9660ce76aad8",
+  "tree": "b56e0ddc03b705f8898387079f7bb636e3f0594d",
+  "parent": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "worktree_HEAD_unchanged": true,
+  "task_state_unchanged": "blocked",
+  "source_names": [
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_FINAL_REPAIR_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_SPEC_HASH_CONTEXT.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "worker_result_unchanged": true,
+  "submitted_or_accepted": false
+}
@@ -0,0 +1,15 @@
+{
+  "task_id": "P22-02",
+  "commit": "10c62e1fa7b71576598583f434824b59816d4705",
+  "status": "blocked",
+  "summary": "仕様の固定SHAが現物と不一致です。末尾改行を除くと指定SHAに一致しますが、無断で正規化・仕様変更はできません。今回追加した未完成checkerは撤去済みで、成果物変更はありません。正式試験は未実行、原受入は0/1です。",
+  "acceptance_ids": [
+    "P22-02"
+  ],
+  "findings": [
+    {
+      "severity": "high",
+      "message": "docs/spec/acceptance/P22-02.json: 契約SHA f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875、現物SHA c26c0b12cf7e7a7c46e671acde2e00762904732c1cd6381a53836e3d7b3f9824。差は末尾改行です。契約管理側で固定値と現物の整合が必要です。受入入力のraw SHAは一致しています。"
+    }
+  ]
+}
@@ -0,0 +1,14 @@
+{
+  "task_id": "P22-02",
+  "commit": "c6ccc5a6ab4b1670f1ccf813937edf339ca19139",
+  "kind": "validation",
+  "checks": [
+    {
+      "id": "p22-contract",
+      "exit_code": 2,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p22-02-contract/runs/fcebc9707f4e461e848e32e900b489ee",
+      "passed": false
+    }
+  ],
+  "passed": false
+}
@@ -0,0 +1,70 @@
+{
+  "probe_commit": "aad6284fb75d32a73d0a4c00a53e9660ce76aad8",
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p22-02-contract/runs/25eefc570e4540d9aacd05c9763233b1",
+  "model": "claude-opus-5-5",
+  "read_only": true,
+  "formal_original_review": false,
+  "task_state_unchanged": true,
+  "result": {
+    "summary": "判定: changes_requested（形式受入は不可、要求もなし）。前回Rootが指摘した3件の欠陥のうち、登録argvの受付、常に失敗するreadinessの撤去、検証・レビュー・統合の循環の除去は対応済みで、コード上でも確認できた。Rootの実測では、パケット491,572 bytes（500,000未満）、テスト13件合格、整合性検査exit 0、require-readyはexit 2（pending 614件、selected 0件）。\n\n具体的なコード欠陥（このタスクの範囲内で直すもの）:\n- 到達可能性の正例がreducer（technical_readiness）単体のテストしかない。実際の経路（selection_ready、receipt、check）を通る正例がない。\n- 権利文書、命名、寸法・レイアウトが、選定した素材や用途の要件と結び付いていない。結び付きはRoot発行の証明（receipt）任せになっている。\n- 未知の数量（null）が明示的な解決なしにreadinessへ到達できる。\n- ledgerを改変するnegativeをcheck()経由で試していない。\n- 文書とvalidation.jsonの記述が古く、実測値と食い違っている。\n\n原成果側の未完了（コード欠陥とは別）:\n- 614件すべて未選定（候補495件、欠損119件）。\n- 作者・権利の確定、画面表示・聴感の証拠、必須範囲・開示の証拠、D08/D09がまだない。\n- 独立レビュー、統合、最終受入（原30パッケージ/88成果、部分点なし）も残っている。",
+    "original_unit_accepted": false,
+    "technical_findings": [
+      {
+        "severity": "high",
+        "file": "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py",
+        "message": "到達可能性の正例（test_isolated_reachable…）は、proof_matchesの戻り値Trueをtechnical_readinessに渡しているだけで、selection_ready、receipt（checkpoint配下の文書のピン固定、anchor検証、p22-evidence-v1形式）、check()の正の経路を一度も通っていない。修理指示の「純関数で到達可能性を証明」の核心部分が未証明で、実際の経路で到達不能なバグがあっても検出できない。checkpointsを模した一時ROOTか、raw/safe_pathのモックを使い、selection_readyとreceiptを通る正例を1件追加する必要がある。"
+      },
+      {
+        "severity": "medium",
+        "file": "tools/check_p22_asset_contracts.py",
+        "message": "selection_readyのrights.documentsは、ピンが合っているかしか見ておらず、選定した素材との関係を検証していない。例えば内部由来のBGMや出所不明の素材にKenneyのLicense.txtを付け、license='CC0'とすれば構造検査を通る。publisher-archive-byte-verificationの該当member（同一バイト）か、内部由来の記録との一致を必須にする必要がある。現状は防止がRootのrights receiptだけに依存している。"
+      },
+      {
+        "severity": "medium",
+        "file": "tools/check_p22_asset_contracts.py",
+        "message": "quantities_validは、受入記録側がnullの数量（施設の全行など）について値の欠如（None）を許している。コメントでは「quantity receiptで解決」とあるが、それを強制するコードがない。全数量が未知のままreadinessに到達でき、spec原文の「unknownを確定しない」とreadinessの非空虚性が両立していない。"
+      },
+      {
+        "severity": "medium",
+        "file": "tools/check_p22_asset_contracts.py",
+        "message": "命名（nameがパスのbasenameと等しいだけ）と差替履歴（replacement_chainは先頭と末尾しか見ない）が実質的に恒真になっている。region（領域）もsourceの範囲内かどうかしか見ず、受入記録のusage_condition.original_size（2x1など）やatlasのcell・grid境界に結び付いていない。解像度・レイアウトの不一致を構造的に検出できない。"
+      },
+      {
+        "severity": "medium",
+        "file": "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py",
+        "message": "negativeが純関数への合成入力と、snapshotの複製の改変にとどまっている。実際のledgerを改変したうえでcheck()経由で拒否されることを試していない（selectionsの欠落・追加・偽の'selected'、source_pinsの削除・改ざん、referencesの改ざん、unit_proofsへのbool注入）。spec原文の「negativeはledgerの該当値の改変・削除を含める」を満たしていない。"
+      },
+      {
+        "severity": "medium",
+        "file": "tools/check_p22_asset_contracts.py",
+        "message": "verify_existing_evidenceは、observed-existing-asset-contractsのsource_pinsを無条件にpinned()で照合する。そのため、文書で提案している製品差分（pixel_tower_art.gdなど）を適用すると、ledgerを更新しても整合性検査がexit 1になる。Kenneyのmemberと内部BGMについては、バイトが異なると黙ってskipし、staleであることを報告しない。製品変更後にreadinessへ到達する経路（evidenceの再観測が必要なこと）を明記し、staleを検出・報告する必要がある。"
+      },
+      {
+        "severity": "low",
+        "file": "tools/check_p22_asset_contracts.py",
+        "message": "referencesの期待集合がEVIDENCEディレクトリのiterdirで決まるため、Rootが証拠ファイルを1件追加しただけでledgerが不一致（exit 1）になる。issuer.role='root'/'owner'は自己申告のフィールドで、認証されていない（checkpointsが書き込み禁止であることに依存している）。Oggの判定も先頭128 bytes内の文字列だけで弱い。"
+      },
+      {
+        "severity": "low",
+        "file": "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json",
+        "message": "complete_packet_bytes=nullで、文書でも「487283はprospective、未確認」とされているが、Rootの実測は491,572 bytesで、上限500,000未満は確認済み。ASSET_CONTRACTS.mdは存在しないキー名「evidence_pins」に言及している（実際のキーはreferences）。いずれも記録が古いか不整合で、Root側で事実に基づき訂正が必要。CLIのテストがpending=614を固定値で表明しているため、正規の選定が1件入っただけで壊れる。"
+      },
+      {
+        "severity": "low",
+        "file": "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py",
+        "message": "build_contract.pyはledger全体を上書きし、selectionsを初期化する。read_textのencodingも指定していない。読み取り専用の検証からは呼ばれないが、誤って実行すると選定作業が失われる。"
+      }
+    ],
+    "remaining_original_conditions": [
+      "614の正確な用途すべてで、使用可能な選定素材がまだない（候補495件、欠損119件、選定0件）",
+      "用途ごとに最終の解像度、frame・layout、命名、差替参照、製品側の参照を確定する",
+      "作者・権利の欠落を解消する（権利が未確定の媒体20件を含む。内部BGMの由来記録は最終承認ではない）",
+      "必須だが未制作の範囲と開示の証拠（unit_proofsのmandatory_scopeとdisclosure）がまだない",
+      "D08/D09の内容と数量はunknownのまま。発明せず、owner証拠で確定させる",
+      "該当する画面表示・聴感の実証拠（usability receipt）がない",
+      "Rootによる正式な静的検証と、意味のあるnegative（ledgerを改変しcheck()経由で拒否されることの確認を含む）",
+      "独立したOpusレビュー",
+      "統合と最終受入（原30パッケージ/88成果、部分点なし）"
+    ]
+  }
+}
@@ -0,0 +1,18 @@
+{
+  "archive": "artifacts/original-completion-2026-10-02/p22-02-astra-preserved-preflight-r03/preserved-worker-outputs.tar.gz",
+  "archive_sha256": "f522e723f88964fd6a8567dc5c8cd56b33bb46d934b3d370fd01e568b7167a4b",
+  "members": {
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md": "c7fb25fa8d527cd7553f743117382a9a103dabcdd99e168bff0287e2cb523652",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_FINAL_REPAIR_CONTEXT.md": "185fb46091c74b275f7757236abf425d975029b66e6ff2c7b58d3b07effc72af",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/P22_SPEC_HASH_CONTEXT.md": "3a5405655becb7edeacdddafbb4387d40a4c419435c15b4183501bf53697eae0",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json": "0d8bf55d4bd0a8fbc8eabed26c883fe6a0c25d0074e818629b924bb6e4302afc",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/build_contract.py": "20968f966912593a32a6d50ccf6e7c37cb26a380937fb26d1194f411d42b112e",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/test_contract.py": "dfa722ad8ac2eeb77f772a2f5cf8988af08698ff5db91f84f7b7dc91db5f4b2c",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json": "1bb42e293d814717c2ba6d21fe728ddfa8afda92f43c9f277d455a6f872c8bf8",
+    "tools/check_p22_asset_contracts.py": "7be6f044c63bf515d215731a6eef67e3aee1c2652e55a4e86cb3e45093316c83"
+  },
+  "all_raw_bytes_preserved": true,
+  "worktree_unchanged": true,
+  "source_deleted": false,
+  "worker_submission_claimed": false
+}
@@ -0,0 +1,78 @@
+--- a/docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md
+++ b/docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md
+@@ -1,19 +1,15 @@
+-# P22-02 素材契約（原成果未完了）
+# P22-02 素材契約の実装候補（原成果未完了）
+ 
+-原30パッケージ/88成果・部分点なしを維持する。614 identityは360施設、176人物、2状態群、76その他であり、614画像ではない。495 candidate、119 missing、19 sourceを全て保持する。選定済完成資産は0。D08/D09の最終内容・数量はunknown。
+原30パッケージ/88成果・部分点なし。614 identityは360施設/176人物/2状態群/76その他であり、614画像ではない。現台帳は全614未達、495既存候補/119候補欠損/19source。D08/D09の最終数量・内容はunknown。記録整合性の0終了を完成素材・原P22-02へ加点しない。
+ 
+-asset-contracts.jsonは公開JSON共有参照（d/l/s/r）で、accepted_inputの全フィールドとcurrent契約の全フィールドを損失なく保持する。各identityの命名はid、候補名はcandidate_refの実path、形式と現raw SHAはcandidate_pool、historical適用性はcandidate_refs、creatorと不足は各契約にある。差替鎖は歴史的representation→現candidate→未選定replacement。missingをcode/file/fallbackで充足しない。最終の解像度・frame/layout・命名・差替参照は未確定として扱う。
+台帳はimmutable accepted inputをraw SHAと各file semantic SHAで参照し、全fieldを復元する。current referenceもSHAで固定した歴史観測として再構成し、現在のsource factsと各identityのselection/state/proofsは別に検証する。凍結snapshot全体のmirror一致やselected_assets空の固定を判定にしない。
+ 
+-Kenney Tiny Town/Tiny Dungeon/Interface Soundsのpublisher/member/license/manifest証拠はevidence_pinsの文書を完全再利用する。配布元URLとCC0記録はcandidate_poolおよび既存ライセンス証拠を参照。内部BGM合成recipeは内部由来であり、第三者CC0や最終聴感・権利受入へ昇格しない。自己制作・別許諾を排除しない。未知creator/rightsを推測しない。
+checkerはread-only --verify-only/--accepted-input/--require-readyを受理する。記録整合性とvalidation-readyを分離し、準備判定は全exact useの実資産・型/量/形式・適合・creator/right・安全な参照差替・必要usability・開示・必須scope証拠に結合する。空集合/fallback/filepresence/偽booleanでPASSしない。validate→別Opusreview→integration→finalを経た後だけ原成果完了を認定する。将来の正当な証拠は到達可能であり、現data614未達は非0を維持する。
+ 
+-checkerの通常0終了は記録整合性のみ。--require-readyは原条件未達なら2終了。READYには空でない完成資産、全exact useの選定・実利用・権利、未制作/開示不足の解消、必要な画面/聴感、Root静的検証と意味のあるnegative、独立Opusレビュー、統合・最終受入が必要。workerは正式試験も受入も主張しない。
+Kenneyのpublisher/member/License証拠と内部合成BGMの起源を区別。創作者・最終品質・実表示/聴感は捏造しない。候補19sourceの現在bytes、PNG CRC/寸法、WAV形式、既存atlas12x11/16px/間隔0、Theme参照、historical/source applicabilityを検証する。状態群を画像として扱わず、量のNoneを0へ置換しない。
+ 
+-## 次の製品変更提案（この実装では適用しない）
+Rootは保持された未提出候補に13個の実試験を実行し全PASSを確認した。isolated reachable正例は内部純関数だけで、実P22/素材受入へ換算しない。意味のある負例はcoverage/duplicate/stale/missing source、wrong proof/quantity/pin、CRC/layout、license/rights、counterfeit finished、codec cycle/boolindex/key/type/NaNInf、path escape、実CLI非0を含む。正式unit受入は未実施。
+ 
+-- scripts/ui/pixel_tower_art.gd、standard_room_art.gd、infirmary_room_art.gd: 各施設Lv1–3/表裏/外観内装のidから選定representationへ明示対応を追加。共有atlasや専用一部装飾を全施設に流用して完成扱いしない。最小差分は選定されたidの参照と該当描画分岐のみ。実画面で各対応と未制作開示を確認する。
+-- scripts/ui/pixel_people.gd: character条件ごとの選定と必要variant参照を明示し、2状態群は状態表現として接続する。数量は承認されるまでunknown。該当人物・状態の画面確認が必要。
+-- assets/themes/japanese_fantasy/visual-theme-v1.tres、scenes/main/world_preview.gd、scenes/main/main.gd: 世界/skin候補のcreator/rightsを解決してから選定素材への参照のみ差替。サイズ、alpha、atlas region、nearest/mipmapと全参照整合を確認し実表示で確認する。
+-- scripts/ui/paired_bgm.gdと2 candidate WAV: internal-origin-observationsのrecipeとbyte証拠を保持し、creator/権利の承認と両contextの聴感を取得してから最終選定。UI4音もpublisher証拠だけで最終聴感を代用しない。
+-- missing_candidateの119 identityは各契約のsource_anchors/usage_conditionを制作依頼に渡し、Kenney適合候補を先に確認する。最小asset/reference差分は選定後にのみ確定できる。未確定の絵や数量を捏造しない。
+現在残る製品作業: 全利用条件に適合する素材/コード表現を選定し、具体的actor/facility/state/Theme参照を接続する。119候補欠損はsource_anchorsと使用条件に基づきKenneyを先に検討する。必要な制作数量・権利・品質を確定し、全対応の実画面/聴感と元条件の全証拠を揃える。未確定素材を適当に差替えたり既存generic表現を専用完成へ昇格しない。
+ 
+-Runnerの検証対象: 全614 coverage、全decoded semantic hash、raw input/source/evidence pins、historical適用性、PNG寸法、参照・source omission、duplicate、cycle/bad index/key/type、unknown rights/false finished、数量変更。negativeはledgerの該当値の改変・削除、source/寸法・reference変更を含める。完全packetを500000 bytes未満で確認し、欠落・切捨てで縮小しない。その後に必要な製品実装・usability・独立レビュー・統合・finalを行う。
+保持されたAstra変更は900秒timeoutで提出応答未受領。候補は未採用。正式submitted SHAの全source/diff/validation_sources/receiptsを含む実packet<500000、独立レビュー、統合/最終が必要。未提出のprospective487283bytesは実際の最終packetへ代用しない。
+--- a/docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json
+++ b/docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json
+@@ -7,11 +7,40 @@
+   "spec_sha256": "f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875",
+   "spec_raw_sha256": "c26c0b12cf7e7a7c46e671acde2e00762904732c1cd6381a53836e3d7b3f9824",
+   "accepted_input_raw_sha256": "45fa52acf0c8bd4dd58c3b40b681cb92066f05d617df157fc18370a5e8816281",
+-  "ledger_bytes": 453678,
+-  "packet_bytes_before_this_validation_metadata": 472408,
+  "ledger_bytes": 35441,
+  "packet_bytes_before_this_validation_metadata": null,
+   "syntax_ast_parse": "passed; not formal validation",
+   "complete_packet_limit": 500000,
+-  "runner_required": ["exact static validation", "meaningful negatives", "packet byte total", "applicable display and hearing", "independent Opus review", "integration and final original acceptance"],
+-  "expected_exit_codes": {"record_integrity_if_valid": 0, "require_ready_with_current_unmet_conditions": 2, "integrity_error": 1},
+-  "original_incomplete": ["614 exact uses lack completed selected usable assets; 495 candidates and 119 missing are not completion", "final per-use naming/resolution/frame/layout/replacement references", "creator and rights gaps including 20 media; internal BGM origin is not final approval", "mandatory unmade/disclosure gaps; D08/D09 content and quantities unknown", "applicable display/hearing evidence", "Root static validation and meaningful negatives", "independent Opus review", "integration and final original 30 packages/88 delivery units acceptance"]
+  "runner_required": [
+    "exact static validation",
+    "meaningful negatives",
+    "packet byte total",
+    "applicable display and hearing",
+    "independent Opus review",
+    "integration and final original acceptance"
+  ],
+  "expected_exit_codes": {
+    "record_integrity_if_valid": 0,
+    "require_ready_with_current_unmet_conditions": 2,
+    "integrity_error": 1
+  },
+  "original_incomplete": [
+    "614 exact uses lack completed selected usable assets; 495 candidates and 119 missing are not completion",
+    "final per-use naming/resolution/frame/layout/replacement references",
+    "creator and rights gaps including 20 media; internal BGM origin is not final approval",
+    "mandatory unmade/disclosure gaps; D08/D09 content and quantities unknown",
+    "applicable display/hearing evidence",
+    "Root static validation and meaningful negatives",
+    "independent Opus review",
+    "integration and final original 30 packages/88 delivery units acceptance"
+  ],
+  "prospective_full_packet_bytes": 487283,
+  "exact_final_submitted_packet_still_required": true,
+  "root_preserved_test_count": 13,
+  "root_preserved_tests": "all pass; actual diagnostic execution not original acceptance",
+  "worker_timeout_exit_code": 124,
+  "worker_submission_result_received": false,
+  "registered_cli_readonly_arguments_supported": true,
+  "current_original_unit_ready": false,
+  "current_pending_identity_count": 614
+ }
@@ -0,0 +1,30 @@
+"""UNAPPLIED owner-side proposal; no activation or automatic authorization."""
+import json
+
+def install(Runner):
+    previous = Runner.process
+    def process(self, task_id, role, service, argv, cwd, *args, **kwargs):
+        target = (self.config["project"] == "the-tree-p22-02-contract"
+                  and task_id == "P22-02" and role == "implementer" and service == "codex")
+        if target:
+            task = self.task(task_id)
+            contract = json.loads(task["contract"])
+            if not (task["state"] == "implementing" and task["repairs"] == 3
+                    and contract["max_repair_attempts"] == 3
+                    and contract["base_commit"] == "10c62e1fa7b71576598583f434824b59816d4705"
+                    and contract["spec_sha256"] == "f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875"):
+                raise ValueError("Exact owner-authorized finalization context required")
+            row = self.db.execute("SELECT data FROM events WHERE task_id=? AND event='owner_authorized_p22_finalization' ORDER BY id DESC LIMIT 1", (task_id,)).fetchone()
+            approval = json.loads(row[0]) if row else {}
+            if not (approval.get("direct_human_reply") and approval.get("cap") == 3
+                    and approval.get("retained_used") == 2
+                    and approval.get("effective_implementer_timeout_seconds") == 1800):
+                raise ValueError("No recorded direct human permission for timeout change")
+            if self.config["policy"]["timeout_seconds"] != 900 or kwargs.get("timeout") not in (None, 900):
+                raise ValueError("Unexpected original timeout context")
+            kwargs["timeout"] = 1800
+            self.event(task_id, "owner_scoped_finalization_timeout", {"role": role,
+                "service": service, "argv": argv, "cwd": str(cwd), "effective_timeout_seconds": 1800,
+                "project_policy_timeout_unchanged": 900, "repairs": 3, "global_policy_changed": False})
+        return previous(self, task_id, role, service, argv, cwd, *args, **kwargs)
+    Runner.process = process
@@ -0,0 +1,56 @@
+{
+  "recorded_at": "2026-10-13T09:11:34.088461+00:00",
+  "task": {
+    "id": "P22-02",
+    "state": "implementing",
+    "repairs": 1,
+    "submitted": null,
+    "contract": {
+      "id": "P22-02",
+      "title": "素材契約と権利（原条件全体、記録だけの完了代用なし）",
+      "requirement_ids": [
+        "P22-02"
+      ],
+      "acceptance_ids": [
+        "P22-02"
+      ],
+      "spec_ref": "docs/spec/acceptance/P22-02.json",
+      "base_commit": "10c62e1fa7b71576598583f434824b59816d4705",
+      "worker": "codex",
+      "allowed_paths": [
+        "docs/plans/original-completion-2026-10-02/execution/p22-02/**",
+        "tools/check_p22_asset_contracts.py"
+      ],
+      "depends_on": [],
+      "resource_locks": [
+        "p22-asset-contracts-and-rights"
+      ],
+      "validation_ids": [
+        "p22-contract"
+      ],
+      "max_repair_attempts": 2,
+      "spec_sha256": "f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875"
+    }
+  },
+  "live_run": {
+    "id": "dc780018ec0b4da09d82613fc702f0ed",
+    "status": "running",
+    "pid": 90104,
+    "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p22-02-contract/runs/dc780018ec0b4da09d82613fc702f0ed"
+  },
+  "process_alive_verified": true,
+  "active_exec_session": 44558,
+  "first_worker_outcome": "blocked due raw-vs-strip contract hash; incomplete checker withdrawn; no source edits retained",
+  "normal_repair_consumed": 1,
+  "cap": 2,
+  "no_extra_permission_requested": true,
+  "duplicate_worker_started": false,
+  "unit_accepted": false,
+  "actual_worker_model": "gpt-6.1-sol",
+  "commander_model": "claude-opus-5-5",
+  "accepted_input_lossless_bytes": 217190,
+  "full_decoded_records": 614,
+  "current_candidate_rows": 495,
+  "missing_candidate_rows": 119,
+  "current_candidate_paths": 19
+}
@@ -0,0 +1,13 @@
+{
+  "task": "P22-02",
+  "base_commit": "10c62e1fa7b71576598583f434824b59816d4705",
+  "spec_ref": "docs/spec/acceptance/P22-02.json",
+  "contract_spec_sha256": "f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875",
+  "raw_spec_sha256": "c26c0b12cf7e7a7c46e671acde2e00762904732c1cd6381a53836e3d7b3f9824",
+  "runner_strip_spec_sha256": "f252de3c5cff7ebfa62322ae2f2df09fb80a44bc59eb286b76d4acb4c12ca875",
+  "raw_worktree_equals_base_git_blob": true,
+  "spec_changed": false,
+  "contract_changed": false,
+  "root_normalized_hash_verification_passed": true,
+  "reason": "Runner git helper uses stdout.strip(), then UTF8; source_pins and accepted input raw SHA remain raw bytes, not stripped"
+}
@@ -0,0 +1,23 @@
+"""Read-only advisory review of preserved P22 content; no original acceptance receipt."""
+import sys, os, json
+from pathlib import Path
+control = Path(os.environ['OWNER_RUNNER_CONTROL'])
+sys.path.insert(0, str(control))
+from runner.core import Runner, read_json
+coordinator = Path('/private/tmp/the-tree-owner-model-cli.py').read_text().rsplit('from runner.cli import main', 1)[0]
+exec(compile(coordinator, '/private/tmp/the-tree-owner-model-cli.py', 'exec'))
+r = Runner('the-tree-p22-02-contract')
+task = r.task('P22-02')
+sha = 'aad6284fb75d32a73d0a4c00a53e9660ce76aad8'
+prompt = r.packet('P22-02', 'reviewer', sha)
+supplement = {"purpose": "Independent advisory technical review ONLY; formal acceptance validator remains failed, no submitted worker result, no original acceptance or integration.", "actual_root_packet_guard_bytes": 491572, "actual_retained_code_sha_equal": True, "actual_root_tests": "13 PASS; independent Root diagnostic execution; unchanged code SHA", "actual_cli": "integrity exit0, require-ready exit2, pending614 selected0", "coordinator_failure_resolved": "References outside worker sandbox missing, Root actual complete packet now measured on exact probe tree. Do not falsify worker blocked result."}
+prompt = 'Read-only independent technical review, no editing, tools or execution. Review every original acceptance and all technical defects using provided full packet. Distinguish concrete code defects from original unfinished assets/values. Formal acceptance cannot pass and is not requested. Return concise Japanese findings with file and severity. Nothing you return changes task state or original denominator.\n' + prompt + '\nCOORDINATOR_DIAGNOSTIC_FACTS:\n' + json.dumps(supplement, ensure_ascii=False)
+schema = {"type": "object", "additionalProperties": False, "required": ["summary", "original_unit_accepted", "technical_findings", "remaining_original_conditions"], "properties": {"summary": {"type": "string"}, "original_unit_accepted": {"type": "boolean", "enum": [False]}, "technical_findings": {"type": "array", "items": {"type": "object", "additionalProperties": False, "required": ["severity", "file", "message"], "properties": {"severity": {"type": "string", "enum": ["critical", "high", "medium", "low"]}, "file": {"type": "string"}, "message": {"type": "string"}}}}, "remaining_original_conditions": {"type": "array", "items": {"type": "string"}}}}
+with r.lease('operation:P22-02', 'advisory-review:P22-02:' + str(os.getpid())):
+    result, artifact = r.llm('P22-02', 'reviewer', 'claude', prompt, Path(task['worktree']), schema)
+    assert r.task('P22-02')['state'] == task['state']
+    r.event('P22-02', 'independent_technical_advisory_review', {"probe_commit": sha, "artifact": str(artifact), "formal_acceptance": False, "state_changed": False})
+    report = {"probe_commit": sha, "artifact": str(artifact), "model": "claude-opus-5-5", "read_only": True, "formal_original_review": False, "task_state_unchanged": True, "result": result}
+    output = Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/independent-technical-review-r05.json')
+    output.write_text(json.dumps(report, ensure_ascii=False, indent=2) + '\n')
+    print(json.dumps(report, ensure_ascii=False))
@@ -0,0 +1,12 @@
+# RP13-01継続の限定変更案（未承認・未適用）
+
+対象は既存RP13-01のみ。P13-03最終修正は保存済みで新しいゲーム実装を起動しない。
+
+1. 個別修正上限2→3、使用済み2を保持し、追加1回を同一登録タスクの試験fixture修正に使う。差分案はproposed-isolated-rejection-fixture.patch。既存のAC-001重複登録で意図した負例に到達できない問題だけを直す。別fixtureプロジェクトを使い、P13-01/02拒否、回数・状態保持、提出なしを実際に検証する。Root prototype r02の当該1試験はPASS、元workerの2ファイルは未変更。
+2. 正式runner-unitをRP13-01だけ信頼ホスト自己試験で実行する。登録argv（python -B -m unittest discover -s tests -p test_runner.py -v）、全55件以上、SHA/clean/scope/spec、実ログ・exit、独立レビュー、統合/最終を保持。外側Runner Seatbeltだけをこの試験で外し、試験内の実Seatbeltと実装workerのSeatbeltは保持する。providerや任意コマンドへの適用は禁止。親Runnerの通常verify/processを使い、config/contract/phase/candidateへの限定ガードとprovenanceを記録する。完成前にアダプター全文と制約を独立レビューへ渡す。
+
+正式sandbox試験は55件中4 failure/11 error、通常ホスト診断ではfixtureに起因する2 errorだけが残る。ホスト診断を正式passedへ変換しない。現在の正式失敗receiptは保存し、認証・課金・並列・500000・ゲーム30/88・製品値を変更しない。
+
+これは権限の一般化ではなく、上記project/task/validator/候補phaseだけの正式自己試験実行環境変更。既存のHOST_SELF_TEST_PROPOSAL.mdはこの範囲について未承認と明記している。既存許可は提出復旧と資料重複削減だけで、cap増加とホスト正式試験変更は含まれない。
+
+承認後の順序: Opus開始判断→同じSol workerの限定修正→通常submit→限定ホスト正式validate→別Opusレビュー→Runner候補の統合/最終→P13既存submitted結果から復旧→P13正式validator/18負例→exact packet容量→別Opusレビュー→統合/最終→原成果台帳。
@@ -0,0 +1,9 @@
+# P13-03 現行source適用性の更新案（未承認・未適用）
+
+P13既存最終修正の共有参照を全展開し、旧提出7645c551と7施設/84スロット/6カテゴリの全記録が一致した。現在のproduction main c4cbc5feに対して53sourceを再照合し、scenes/main/main.gdだけが不一致。差分は既受入の選択manifest version型判定helperで、P13が検索する施設・通常入口・施設外内容観測は、SHAを除き全件一致する。原本/資産/ゲーム内容に新しい仕様や実装は不要。
+
+提案はP13-03だけ個別修正上限2→3、使用済み2を保持し、追加1回で同じSol workerが台帳と読みやすい文書のmain.gd raw SHAを現版へ更新し、validation.jsonの出力hashを同期する。checker仕様や元分母は変更しない。差分案proposed-current-main-source-refresh.patch、照合結果current-main-refresh-proposal-metadata.jsonを参照。JSONは既存の一行直列化を維持するためpatchは大きく見えるが、論理変更はSHA1件のみ。
+
+前提: RP13復旧候補が正式検証/独立レビュー/統合を満たした後、既存最終submitted結果を通常復旧提出し、このsource更新だけを同一タスクの追加repairとして実施する。新規登録、回数リセット、重複実装、ゲームsource変更、原本値決定は行わない。正式--verify-only/18負例、exact reviewer packet容量、別Opus独立レビュー、統合/最終、台帳反映は保持する。
+
+状態処理の完成を内容制作の完成へ加点しない原P13-03の受入条件、全7施設/84スロット/6分類、unknown、全source証拠を維持する。現状は未提出・未受入で、権限や候補を勝手に変更しない。
@@ -0,0 +1,37 @@
+{
+  "argv": [
+    "/opt/homebrew/Cellar/python@3.12/3.12.13_2/Frameworks/Python.framework/Versions/3.12/bin/python3.12",
+    "-B",
+    "-m",
+    "unittest",
+    "discover",
+    "-s",
+    "tests",
+    "-p",
+    "test_runner.py",
+    "-v"
+  ],
+  "cwd": "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109",
+  "env_names": [
+    "AGY_CLI_DISABLE_AUTO_UPDATE",
+    "BROWSER_PROFILE_DIR",
+    "BUILD_OUTPUT_DIR",
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
+    "GIT_TERMINAL_PROMPT",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LOGNAME",
+    "MAC_CHROMIUM_TMPDIR",
+    "PATH",
+    "PORT",
+    "PYTHONDONTWRITEBYTECODE",
+    "TEMP",
+    "TERM",
+    "TEST_DATABASE_PATH",
+    "TMP",
+    "TMPDIR",
+    "USER"
+  ],
+  "execution": "sandbox"
+}
@@ -0,0 +1,265 @@
+test_actual_sandbox_control_read_denied (test_runner.RunnerTests.test_actual_sandbox_control_read_denied) ... ok
+test_actual_sandbox_write_boundary (test_runner.RunnerTests.test_actual_sandbox_write_boundary) ... FAIL
+test_agy_pty_without_keychain_access (test_runner.RunnerTests.test_agy_pty_without_keychain_access) ... FAIL
+test_approval_required (test_runner.RunnerTests.test_approval_required) ... ERROR
+test_claude_broker_expiry_fails_closed (test_runner.RunnerTests.test_claude_broker_expiry_fails_closed) ... ok
+test_claude_broker_never_returns_refresh_token (test_runner.RunnerTests.test_claude_broker_never_returns_refresh_token) ... ok
+test_claude_profile_keeps_personal_keychain_denied (test_runner.RunnerTests.test_claude_profile_keeps_personal_keychain_denied) ... ok
+test_dependency_gate (test_runner.RunnerTests.test_dependency_gate) ... ok
+test_duplicate_acceptance_denied (test_runner.RunnerTests.test_duplicate_acceptance_denied) ... ok
+test_failed_test_blocks_review (test_runner.RunnerTests.test_failed_test_blocks_review) ... ok
+test_fixed_denominator_tamper_denied (test_runner.RunnerTests.test_fixed_denominator_tamper_denied) ... ok
+test_full_deterministic_flow_with_simulated_review (test_runner.RunnerTests.test_full_deterministic_flow_with_simulated_review) ... ERROR
+test_git_metadata_write_denied (test_runner.RunnerTests.test_git_metadata_write_denied) ... ok
+test_integration_environment_retry_requires_existing_review (test_runner.RunnerTests.test_integration_environment_retry_requires_existing_review) ... ERROR
+test_llm_budget_limit (test_runner.RunnerTests.test_llm_budget_limit) ... ok
+test_llm_concurrency_limit (test_runner.RunnerTests.test_llm_concurrency_limit) ... ok
+test_main_change_invalidates_approval (test_runner.RunnerTests.test_main_change_invalidates_approval) ... ERROR
+test_missing_acceptance_test_denied (test_runner.RunnerTests.test_missing_acceptance_test_denied) ... ok
+test_no_zero_cost_assumption (test_runner.RunnerTests.test_no_zero_cost_assumption) ... ok
+test_node_output_drained_to_protected_logs (test_runner.RunnerTests.test_node_output_drained_to_protected_logs) ... FAIL
+test_out_of_scope_edit_denied (test_runner.RunnerTests.test_out_of_scope_edit_denied) ... ok
+test_overlapping_file_scope (test_runner.RunnerTests.test_overlapping_file_scope) ... ok
+test_p13_document_dedup_leaves_existing_code_binary_and_other_paths (test_runner.RunnerTests.test_p13_document_dedup_leaves_existing_code_binary_and_other_paths) ... ok
+test_p13_document_dedup_preserves_raw_source_and_other_diffs (test_runner.RunnerTests.test_p13_document_dedup_preserves_raw_source_and_other_diffs) ... ok
+test_p13_document_dedup_rejects_missing_inconsistent_snapshots (test_runner.RunnerTests.test_p13_document_dedup_rejects_missing_inconsistent_snapshots) ... ok
+test_p13_recovery_accepts_matching_forward_hashes (test_runner.RunnerTests.test_p13_recovery_accepts_matching_forward_hashes) ... ok
+test_p13_recovery_rejects_bad_records_and_states (test_runner.RunnerTests.test_p13_recovery_rejects_bad_records_and_states) ... ok
+test_p13_recovery_rejects_other_p13_tasks (test_runner.RunnerTests.test_p13_recovery_rejects_other_p13_tasks) ... 
+  test_p13_recovery_rejects_other_p13_tasks (test_runner.RunnerTests.test_p13_recovery_rejects_other_p13_tasks) (task_id='P13-01') ... ERROR
+  test_p13_recovery_rejects_other_p13_tasks (test_runner.RunnerTests.test_p13_recovery_rejects_other_p13_tasks) (task_id='P13-02') ... ERROR
+test_p13_recovery_rejects_source_pin_failure (test_runner.RunnerTests.test_p13_recovery_rejects_source_pin_failure) ... ok
+test_p13_recovery_uses_normal_submission_and_downstream_gates (test_runner.RunnerTests.test_p13_recovery_uses_normal_submission_and_downstream_gates) ... ok
+test_packet_capacity_guard_remains (test_runner.RunnerTests.test_packet_capacity_guard_remains) ... ok
+test_path_traversal_denied (test_runner.RunnerTests.test_path_traversal_denied) ... ok
+test_policy_tamper_denied (test_runner.RunnerTests.test_policy_tamper_denied) ... ok
+test_provider_credentials_are_not_inherited (test_runner.RunnerTests.test_provider_credentials_are_not_inherited) ... ok
+test_recover_releases_operation_not_task_locks (test_runner.RunnerTests.test_recover_releases_operation_not_task_locks) ... ok
+test_repair_cannot_bypass_counter (test_runner.RunnerTests.test_repair_cannot_bypass_counter) ... ok
+test_repair_limit (test_runner.RunnerTests.test_repair_limit) ... ok
+test_resource_lock (test_runner.RunnerTests.test_resource_lock) ... ok
+test_review_changes_blocks_candidate (test_runner.RunnerTests.test_review_changes_blocks_candidate) ... ERROR
+test_review_refresh_requires_new_candidate (test_runner.RunnerTests.test_review_refresh_requires_new_candidate) ... ERROR
+test_reviewer_packet_deduplicates_only_p13_03 (test_runner.RunnerTests.test_reviewer_packet_deduplicates_only_p13_03) ... ok
+test_reviewer_sees_committed_tests_outside_worker_scope (test_runner.RunnerTests.test_reviewer_sees_committed_tests_outside_worker_scope) ... ERROR
+test_runtime_isolation (test_runner.RunnerTests.test_runtime_isolation) ... ok
+test_schema_rejects_false_success (test_runner.RunnerTests.test_schema_rejects_false_success) ... ok
+test_secret_file_read_denied (test_runner.RunnerTests.test_secret_file_read_denied) ... ok
+test_secret_scope_denied (test_runner.RunnerTests.test_secret_scope_denied) ... ok
+test_spec_writes_denied (test_runner.RunnerTests.test_spec_writes_denied) ... ok
+test_symlink_denied (test_runner.RunnerTests.test_symlink_denied) ... ok
+test_timeout_is_not_pass (test_runner.RunnerTests.test_timeout_is_not_pass) ... FAIL
+test_untracked_out_of_scope_denied (test_runner.RunnerTests.test_untracked_out_of_scope_denied) ... ok
+test_validation_before_submission_denied (test_runner.RunnerTests.test_validation_before_submission_denied) ... ok
+test_validation_python_does_not_depend_on_shell_path (test_runner.RunnerTests.test_validation_python_does_not_depend_on_shell_path) ... ERROR
+test_worker_commit_denied (test_runner.RunnerTests.test_worker_commit_denied) ... ok
+test_worker_has_mandatory_outer_sandbox (test_runner.RunnerTests.test_worker_has_mandatory_outer_sandbox) ... ok
+test_wrong_candidate_denied (test_runner.RunnerTests.test_wrong_candidate_denied) ... ERROR
+
+======================================================================
+ERROR: test_approval_required (test_runner.RunnerTests.test_approval_required)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 302, in test_approval_required
+    self.candidate()
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 268, in candidate
+    self.submit(); self.r.validate("T001")
+                   ^^^^^^^^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-7j4lj471/state/test/runs/13abf23717bc46d6af102cd7a7509787-validation.json
+
+======================================================================
+ERROR: test_full_deterministic_flow_with_simulated_review (test_runner.RunnerTests.test_full_deterministic_flow_with_simulated_review)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 292, in test_full_deterministic_flow_with_simulated_review
+    t=self.candidate()
+      ^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 268, in candidate
+    self.submit(); self.r.validate("T001")
+                   ^^^^^^^^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-et0phhsl/state/test/runs/cc9dc8f4ef9a45eba0d3a2b67abdf0df-validation.json
+
+======================================================================
+ERROR: test_integration_environment_retry_requires_existing_review (test_runner.RunnerTests.test_integration_environment_retry_requires_existing_review)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 306, in test_integration_environment_retry_requires_existing_review
+    self.submit(); self.r.validate("T001")
+                   ^^^^^^^^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-ale6gvtj/state/test/runs/3a0f8b8706ad41889d250bd46152a27d-validation.json
+
+======================================================================
+ERROR: test_main_change_invalidates_approval (test_runner.RunnerTests.test_main_change_invalidates_approval)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 374, in test_main_change_invalidates_approval
+    t=self.candidate(); self.r.approve("T001",t["candidate"],t["main_base"],"owner")
+      ^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 268, in candidate
+    self.submit(); self.r.validate("T001")
+                   ^^^^^^^^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-qp92ql5k/state/test/runs/f2b55e7065dc45bab577059b9b2a0631-validation.json
+
+======================================================================
+ERROR: test_p13_recovery_rejects_other_p13_tasks (test_runner.RunnerTests.test_p13_recovery_rejects_other_p13_tasks) (task_id='P13-01')
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 136, in test_p13_recovery_rejects_other_p13_tasks
+    self.r.add(dict(self.contract, id=task_id))
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 456, in add
+    require(not any(set(c["acceptance_ids"]) & set(contract["acceptance_ids"]) for c in existing), "同一受入項目の重複タスクは禁止")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: 同一受入項目の重複タスクは禁止
+
+======================================================================
+ERROR: test_p13_recovery_rejects_other_p13_tasks (test_runner.RunnerTests.test_p13_recovery_rejects_other_p13_tasks) (task_id='P13-02')
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 136, in test_p13_recovery_rejects_other_p13_tasks
+    self.r.add(dict(self.contract, id=task_id))
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 456, in add
+    require(not any(set(c["acceptance_ids"]) & set(contract["acceptance_ids"]) for c in existing), "同一受入項目の重複タスクは禁止")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: 同一受入項目の重複タスクは禁止
+
+======================================================================
+ERROR: test_review_changes_blocks_candidate (test_runner.RunnerTests.test_review_changes_blocks_candidate)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 387, in test_review_changes_blocks_candidate
+    self.submit(); self.r.validate("T001")
+                   ^^^^^^^^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-ek5j0rrq/state/test/runs/ccbdbadd674d471790b58dfccc000502-validation.json
+
+======================================================================
+ERROR: test_review_refresh_requires_new_candidate (test_runner.RunnerTests.test_review_refresh_requires_new_candidate)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 355, in test_review_refresh_requires_new_candidate
+    self.candidate()
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 268, in candidate
+    self.submit(); self.r.validate("T001")
+                   ^^^^^^^^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-9gx5fk5x/state/test/runs/fbd882e8b90a4176bdc634ffbc2b8610-validation.json
+
+======================================================================
+ERROR: test_reviewer_sees_committed_tests_outside_worker_scope (test_runner.RunnerTests.test_reviewer_sees_committed_tests_outside_worker_scope)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 347, in test_reviewer_sees_committed_tests_outside_worker_scope
+    self.r.validate("T001")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-klgcd5r6/state/test/runs/5240f0471f874dbbb4e4b6e4e93e49dd-validation.json
+
+======================================================================
+ERROR: test_validation_python_does_not_depend_on_shell_path (test_runner.RunnerTests.test_validation_python_does_not_depend_on_shell_path)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 319, in test_validation_python_does_not_depend_on_shell_path
+    self.r.validate("T001")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-i2v7e5pu/state/test/runs/11dd6edca7c147729690e768086ed4ce-validation.json
+
+======================================================================
+ERROR: test_wrong_candidate_denied (test_runner.RunnerTests.test_wrong_candidate_denied)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 370, in test_wrong_candidate_denied
+    t=self.candidate()
+      ^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 268, in candidate
+    self.submit(); self.r.validate("T001")
+                   ^^^^^^^^^^^^^^^^^^^^^^^
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 920, in validate
+    self.verify(task_id,wt,task["submitted"],"validation")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 905, in verify
+    require(passed,f"test_failed: {report}")
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/runner/core.py", line 50, in require
+    raise GateError(message)
+runner.core.GateError: test_failed: /Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/.runtime/RP13-01/tmp/agent-control-test-p6512mu6/state/test/runs/261f9be981534152b1a1673f67d84a72-validation.json
+
+======================================================================
+FAIL: test_actual_sandbox_write_boundary (test_runner.RunnerTests.test_actual_sandbox_write_boundary)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 472, in test_actual_sandbox_write_boundary
+    self.assertEqual(permitted.returncode,0,permitted.stderr)
+AssertionError: 71 != 0 : b'sandbox-exec: sandbox_apply: Operation not permitted\n'
+
+======================================================================
+FAIL: test_agy_pty_without_keychain_access (test_runner.RunnerTests.test_agy_pty_without_keychain_access)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 288, in test_agy_pty_without_keychain_access
+    self.assertEqual(result.returncode,0,result.stderr)
+AssertionError: 71 != 0 : sandbox-exec: sandbox_apply: Operation not permitted
+
+
+======================================================================
+FAIL: test_node_output_drained_to_protected_logs (test_runner.RunnerTests.test_node_output_drained_to_protected_logs)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 278, in test_node_output_drained_to_protected_logs
+    self.assertEqual(code,0)
+AssertionError: 71 != 0
+
+======================================================================
+FAIL: test_timeout_is_not_pass (test_runner.RunnerTests.test_timeout_is_not_pass)
+----------------------------------------------------------------------
+Traceback (most recent call last):
+  File "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-validation-704ed109/tests/test_runner.py", line 482, in test_timeout_is_not_pass
+    self.assertEqual(code,124)
+AssertionError: 71 != 124
+
+----------------------------------------------------------------------
+Ran 55 tests in 17.264s
+
+FAILED (failures=4, errors=11)
@@ -0,0 +1,14 @@
+{
+  "task_id": "RP13-01",
+  "commit": "1398aa2de9f4ca0fd57f7db9d640e829b425553b",
+  "kind": "validation",
+  "checks": [
+    {
+      "id": "runner-unit",
+      "exit_code": 1,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-runner-p13-recovery/runs/12a5a6d58b7c4c03a4e2f25dc04d4b89",
+      "passed": false
+    }
+  ],
+  "passed": false
+}
@@ -0,0 +1,10 @@
+{
+  "decision": {
+    "action": "validate",
+    "task_id": "RP13-01",
+    "reason": "RP13-01 is submitted at 1398aa2de9f4ca0fd57f7db9d640e829b425553b with candidate=null and repairs at the 2/2 cap. Per the rules, completion comes only from the Runner's tests, a separate-session review, approval and integration, so the next step is the formal validate using the registered argv `python -B -m unittest discover -s tests -p test_runner.py -v` (validation_id runner-unit). Validate checks the submitted revision as-is. It does not change state, launch new workers, add repairs, edit the cap or relax any gate. If it passes, an independent review comes next, then integration (main integration needs owner approval). If it fails, repairs are already at 2/2, so I will stop and report to the owner rather than request another repair. Accepting this Runner fix does not complete P13-03. P13 recovery should go ahead only after integration, using just the approved limited recovery feature from the existing submission (worker e80646369ea746f196073e6539622218). The real packet must be recomputed, and the 318302-byte prototype is not a formal result.",
+    "codex_model": "gpt-6.1-sol",
+    "codex_model_reason": "This step is a fixed validation run: one unittest command against an already-submitted revision. It needs no new implementation or design reasoning, and the result is decided by the test outcome, not the model. Sol is the default and is good enough here while costing less time and usage. Astra would add no quality for this step. If the independent review later shows it is needed, I will consider Astra separately for that review."
+  },
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-runner-p13-recovery/runs/6c1a85449ec2491586d34d678cadeb9b"
+}
@@ -0,0 +1,17 @@
+{
+  "existing_candidate": "7645c55149d3bebf3ed602cf3039b15b28fa376f",
+  "current_main": "c4cbc5feb25862433b5532df794958183af66aba",
+  "changed_game_source": "scenes/main/main.gd",
+  "actual_delta": "Accepted interface-selection version typing helper; +5 lines before restored actor selection, no changes to original special-facility catalog/entry searches",
+  "all_facility_records_except_source_sha_equal": true,
+  "nonfacility_records_except_source_sha_equal": true,
+  "refresh_patch_bytes": 304749,
+  "proposal_documents_hashes": {
+    "difference-ledger.json": "bd9d5789eb4479479c256257a9d8022ab44496a8267d7322e0e4741b42b3544f",
+    "DIFFERENCE_LEDGER.md": "bffb96b8613c96e5444f861e9d8dcd4acdd0a403eed819a3eefc5241e5783f7c"
+  },
+  "remaining_on_approved_worker_run": "Refresh validation.json output hashes with same checker; formal validation/review/integration still mandatory",
+  "worker_source_modified": false,
+  "proposal_only": true,
+  "method": "Only replace old source raw SHA with current main raw SHA, preserving serialization and all existing data; canonical full scan proved exact equality of facility/nonfacility observations except this SHA."
+}
@@ -0,0 +1,30 @@
+{
+  "source_candidate": "1398aa2de9f4ca0fd57f7db9d640e829b425553b",
+  "host_diagnostic_command": [
+    "python3",
+    "-B",
+    "-m",
+    "unittest",
+    "discover",
+    "-s",
+    "tests",
+    "-p",
+    "test_runner.py",
+    "-v"
+  ],
+  "host_diagnostic_exit": 1,
+  "host_tests": 55,
+  "host_failures": 0,
+  "host_errors": 2,
+  "host_error_scope": "Both subtests in test_p13_recovery_rejects_other_p13_tasks register existing AC-001 before reaching intended recovery rejection; duplicate acceptance guard correctly rejects them",
+  "host_result_is_formal_acceptance": false,
+  "prototype_r02_single_method_exit": 0,
+  "prototype_r02_scope": "P13-01 and P13-02 each rejected by blocked-reason recovery guard; counters/state unchanged, no submission; distinct isolated test projects with same baseline and policy",
+  "actual_candidate_modified": false,
+  "formal_receipt_overwritten": false,
+  "p13_readonly_preflight": {
+    "exit": 0,
+    "negative_mutations_rejected": 18,
+    "acceptance": false
+  }
+}
@@ -0,0 +1,9 @@
+{
+  "source_candidate": "1398aa2de9f4ca0fd57f7db9d640e829b425553b",
+  "actual_file_sha256": "ede1e8fec604bf3894f02a2cca7cb6e8c3a2985b83fee0bbf3ac2e436287a187",
+  "proposed_file_sha256": "16b34a090552f80b73ab8b8903d162418926949494cdf472f7dbbb529e665c87",
+  "scope": "one negative test fixture method; isolated baseline prevents unrelated duplicate acceptance registration error; actual P13-01/02 rejection, unchanged repairs/state and no submission remain asserted",
+  "product_or_worker_files_modified": false,
+  "proposal_only": true,
+  "prototype_r01": "Failed: mocked CONTROL fixture has no default policy file; r02 explicitly reuses unchanged test policy"
+}
@@ -0,0 +1,289 @@
+{
+  "recorded_at": "2026-10-13T08:19:33.359914+00:00",
+  "scope": "Read-only reuse/content-preservation and current applicability preflight; not formal acceptance",
+  "existing_submitted_commit": "7645c55149d3bebf3ed602cf3039b15b28fa376f",
+  "current_worktree_unsubmitted_ledger_sha256": "b7edd7fc8f5fa5602edc540a3eb8c4150b0268e7551c97a5c5ccc725ea5bb341",
+  "full_shared_reference_expansion_matches_all_prior_facility_records": true,
+  "full_shared_reference_expansion_matches_all_prior_nonfacility_records": true,
+  "facilities": 7,
+  "slots": 84,
+  "categories": 6,
+  "applicable_sources": 53,
+  "stale_applicable_sources": [
+    {
+      "path": "scenes/main/main.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": false
+    }
+  ],
+  "source_checks": [
+    {
+      "path": "docs/traceability/original/BASELINE.txt",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/work_packages.json",
+      "applicability": "base_git_blob",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "docs/plans/original-completion-2026-09-29/execution/original_facility_mapping.json",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/asset_inventory_reaudit/facility_usage_slots.json",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/asset_inventory_reaudit/inventory_summary.json",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/decisions.json",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "autoload/simulation_runtime.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/adult_private_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/cafeteria.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/black_market.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/chapel.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/cleaning_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/clinic.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/cold_storage.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/general_store.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/guild_counter.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/laundry.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/maintenance_workshop.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/mana_control_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/premium_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/private_bath.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/secret_tavern.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/staff_dormitory.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/tea_lounge.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/underground_guest_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/vip_private_salon.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/expansion/waste_processing.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/guest_corridor.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/guest_elevator.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/infrastructure/guest_stairs.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/infrastructure/service_stairs.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/kitchen.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/massage_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/public_bath.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/reception.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/rescue/infirmary.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/security_station.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/service_corridor.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/service_elevator.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/staff_door.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/staff_waiting_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/standard_room.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/tavern.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "data/facilities/warehouse.tres",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "scenes/main/main.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": false
+    },
+    {
+      "path": "scripts/core/save_service.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "scripts/data/facility_catalog.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "scripts/events/event_definition.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "scripts/events/event_service.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "scripts/ui/event_log_dialog.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "tests/s2/test_facility_service.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "tests/s4/test_runtime_relationship_events.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    },
+    {
+      "path": "tests/s6/test_runtime_snapshot_serialization.gd",
+      "applicability": "current_checkout",
+      "matches_current_applicable_source": true
+    }
+  ],
+  "new_worker_started": false,
+  "worker_source_modified": false,
+  "formal_acceptance_claimed": false
+}
@@ -0,0 +1,28 @@
+--- a/tests/test_runner.py
+++ b/tests/test_runner.py
+@@ -133,12 +133,19 @@
+         self.recovery_fixture()
+         for task_id in ("P13-01", "P13-02"):
+             with self.subTest(task_id=task_id):
+-                self.r.add(dict(self.contract, id=task_id))
+-                self.r.state(task_id, "blocked", "scope_violation: fixture.txt")
+-                with self.assertRaisesRegex(GateError, "blocked reason"):
+-                    self.r.submit(task_id)
+-                self.assertEqual(self.r.task(task_id)["repairs"], 0)
+-                self.assertEqual(self.r.task(task_id)["state"], "blocked")
+                isolated = Runner.init("reject-" + task_id, self.repo,
+                    self.r.baseline, self.r.config["validations"],
+                    policy=self.r.config["policy"], state_root=self.root / "rejection-state")
+                try:
+                    isolated.add(dict(self.contract, id=task_id))
+                    isolated.state(task_id, "blocked", "scope_violation: fixture.txt")
+                    with self.assertRaisesRegex(GateError, "blocked reason"):
+                        isolated.submit(task_id)
+                    self.assertEqual(isolated.task(task_id)["repairs"], 0)
+                    self.assertEqual(isolated.task(task_id)["state"], "blocked")
+                    self.assertIsNone(isolated.task(task_id)["submitted"])
+                finally:
+                    isolated.db.close()
+ 
+     def test_p13_recovery_accepts_matching_forward_hashes(self):
+         _, artifact, _ = self.recovery_fixture()
@@ -0,0 +1,7 @@
+{
+  "chunk_id": "3dc1b2",
+  "wall_time_seconds": 0.000010458,
+  "exit_code": 1,
+  "original_token_count": 919,
+  "output": "\n======================================================================\nERROR: test_p13_recovery_rejects_other_p13_tasks (test_runner_proposed.RunnerTests) (task_id='P13-01')\n----------------------------------------------------------------------\nTraceback (most recent call last):\n  File \"/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/runner-p13-test-fixture-prototype-r03/test_runner_proposed.py\", line 136, in test_p13_recovery_rejects_other_p13_tasks\n    isolated = Runner.init(\"reject-\" + task_id, self.repo,\n  File \"/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-implement/runner/core.py\", line 385, in init\n    p = policy or read_json(CONTROL / \"policies/default.json\")\n  File \"/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-implement/runner/core.py\", line 54, in read_json\n    return json.loads(Path(path).read_text(encoding=\"utf-8\"))\n  File \"/Applications/Xcode.app/Contents/Developer/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/pathlib.py\", line 1256, in read_text\n    with self.open(mode='r', encoding=encoding, errors=errors) as f:\n  File \"/Applications/Xcode.app/Contents/Developer/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/pathlib.py\", line 1242, in open\n    return io.open(self, mode, buffering, encoding, errors, newline,\n  File \"/Applications/Xcode.app/Contents/Developer/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/pathlib.py\", line 1110, in _opener\n    return self._accessor.open(self, flags, mode)\nFileNotFoundError: [Errno 2] No such file or directory: '/private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/agent-control-test-er6_6cw3/repo/policies/default.json'\n\n======================================================================\nERROR: test_p13_recovery_rejects_other_p13_tasks (test_runner_proposed.RunnerTests) (task_id='P13-02')\n----------------------------------------------------------------------\nTraceback (most recent call last):\n  File \"/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/runner-p13-test-fixture-prototype-r03/test_runner_proposed.py\", line 136, in test_p13_recovery_rejects_other_p13_tasks\n    isolated = Runner.init(\"reject-\" + task_id, self.repo,\n  File \"/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-implement/runner/core.py\", line 385, in init\n    p = policy or read_json(CONTROL / \"policies/default.json\")\n  File \"/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery/RP13-01-implement/runner/core.py\", line 54, in read_json\n    return json.loads(Path(path).read_text(encoding=\"utf-8\"))\n  File \"/Applications/Xcode.app/Contents/Developer/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/pathlib.py\", line 1256, in read_text\n    with self.open(mode='r', encoding=encoding, errors=errors) as f:\n  File \"/Applications/Xcode.app/Contents/Developer/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/pathlib.py\", line 1242, in open\n    return io.open(self, mode, buffering, encoding, errors, newline,\n  File \"/Applications/Xcode.app/Contents/Developer/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/pathlib.py\", line 1110, in _opener\n    return self._accessor.open(self, flags, mode)\nFileNotFoundError: [Errno 2] No such file or directory: '/private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/agent-control-test-er6_6cw3/repo/policies/default.json'\n\n----------------------------------------------------------------------\nRan 1 test in 3.412s\n\nFAILED (errors=2)\n"
+}
@@ -0,0 +1,81 @@
+{
+  "actual_tasks": [
+    {
+      "id": "RP13-01",
+      "state": "repair_pending",
+      "submitted": "1398aa2de9f4ca0fd57f7db9d640e829b425553b",
+      "repairs": 2,
+      "reason": "test_failed: /Users/korizatou114/Library/Application Support/agent-control/the-tree-runner-p13-recovery/runs/6fc5dc653f934a01ad5d455c54a6143f-validation.json",
+      "contract": {
+        "id": "RP13-01",
+        "title": "P13限定の提出復旧と新規文書資料削減",
+        "requirement_ids": [
+          "RP13-01"
+        ],
+        "acceptance_ids": [
+          "RP13-01"
+        ],
+        "spec_ref": "docs/spec/RP13-01.json",
+        "base_commit": "c88e2afbea3e1091a4cb048f49bd9891a6bdb869",
+        "worker": "codex",
+        "allowed_paths": [
+          "runner/core.py",
+          "tests/test_runner.py"
+        ],
+        "depends_on": [],
+        "resource_locks": [
+          "runner-p13-code-isolated"
+        ],
+        "validation_ids": [
+          "runner-unit"
+        ],
+        "max_repair_attempts": 2,
+        "spec_sha256": "c7ce1e08eefe0bc48afb17dcfec014221102f88072f8d9a3ef9f95b4a2c6664a"
+      },
+      "project": "the-tree-runner-p13-recovery"
+    },
+    {
+      "id": "P13-03",
+      "state": "blocked",
+      "submitted": "7645c55149d3bebf3ed602cf3039b15b28fa376f",
+      "repairs": 2,
+      "reason": "scope_violation: tools/__pycache__/check_p13_content_difference.cpython-314.pyc",
+      "contract": {
+        "id": "P13-03",
+        "title": "内容差異の記録",
+        "requirement_ids": [
+          "P13-03"
+        ],
+        "acceptance_ids": [
+          "P13-03"
+        ],
+        "spec_ref": "docs/spec/acceptance/P13-03.json",
+        "base_commit": "e1a1651e15bbc9a0526ef31d0b2786feb20d8cd1",
+        "worker": "codex",
+        "allowed_paths": [
+          "tools/check_p13_content_difference.py",
+          "docs/plans/original-completion-2026-10-02/execution/p13-03/**"
+        ],
+        "depends_on": [],
+        "resource_locks": [
+          "p13-content-difference-record"
+        ],
+        "validation_ids": [
+          "p13-difference"
+        ],
+        "max_repair_attempts": 2,
+        "spec_sha256": "e1255835c1227e02bac42eb99b026b0fcbe69c272f9ed0b36199a2daf8d55c53"
+      },
+      "project": "the-tree-p13-03"
+    }
+  ],
+  "caps_or_worker_sources_changed": false,
+  "goal_completed": false,
+  "human_questions_pending": [
+    "RP13-01 cap2→3 plus RP13-only trusted formal host self-test",
+    "P13-03 cap2→3 for exact current source applicability refresh"
+  ],
+  "formal_original_completed_count": 10,
+  "original_total": 88,
+  "no_partial_credit": true
+}
@@ -3668,6 +3668,17 @@
          "text": "\tprint(\"TOMARI_FLOOR_TROUBLE checks=%d failures=%d\" % [checks,failures])"
        }
      ]
+    },
+    {
+      "test": "tests/s1/test_p08_combined_migration.gd",
+      "template": "P08 combined migration: <checks> checks, <failures> failures",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "9284a8cfb478b4c8d69f6d8166eec6c41107e3902029289b3c0e9ba48c370855",
+      "authority": {
+        "path": "docs/spec/acceptance/P08-02.json",
+        "scope": "new standalone mixed suite; native execution pending"
+      }
    }
  ],
  "unknown_roster_suite_policy": "refuse, explicitly review its source/schema before accepting",
@@ -0,0 +1,32 @@
+{
+  "host": "TakeshinoMac-mini",
+  "observed_direct_lock_events": [
+    "2026-10-12 21:47:18.329",
+    "2026-10-13 12:57:42.740",
+    "2026-10-13 13:31:42.881"
+  ],
+  "time_zone": "Asia/Tokyo",
+  "observed_os_sequence": [
+    "Received a kAELockScreenEvent",
+    "lockScreenImmediateUsingShortTimeout",
+    "kLWLockFromDirectLock"
+  ],
+  "guardian_bundle": "com.openai.sky.CUAService.guardian",
+  "guardian_version": "26.1005.1001425",
+  "guardian_same_time_hid_event": "2026-10-13 12:57:42.678",
+  "inference": "Guardian-linked explicit lock request is strongly indicated; exact trigger local input, lease or connection is not established. Idle display dim locks are a distinct observed mechanism.",
+  "power_settings": {
+    "sleep_minutes": 0,
+    "display_sleep_minutes": 180,
+    "screensaver_idle_seconds": 0
+  },
+  "official_source": "https://learn.chatgpt.com/docs/changelog",
+  "source_claim": "Locked use safeguards include relock on local input. This does not establish the trigger of these particular events.",
+  "permanent_settings_changed": false,
+  "guardian_bypassed": false,
+  "game_data_changed": false,
+  "raw_log_sha256": {
+    "direct-event.log": "2101ce53d108844644a9fec40d488d1740b60dd2ecca2571de74d78f529d3671",
+    "direct-event-second.log": "fea0ae7362ddea7de2fca59a52a2611137ece9674a21dfe03ccba4f2e1ce443c"
+  }
+}
@@ -0,0 +1,11 @@
+# Macロックの調査（2026-10-13）
+
+TakeshinoMac-miniで、画面消灯に伴うロックと、明示的なロック要求を区別した。12:57:42.678にCodex Computer UseのGuardianがHIDイベントを送出し、12:57:42.740にloginwindowがAppleEventのロック要求を受けた。同様の明示要求は前夜21:47と当日13:31にもある。12:57と13:31の画面消灯は要求の約30秒後であり、この2件の先行原因ではない。
+
+Guardianに関連する明示要求を強く示すが、どの操作や接続状態が発火したかは未確定。公式changelogにはLocked useのローカル入力時再ロックが記載されるが、今回の各イベントの具体的発火条件を確定する証拠にはしない。Runnerやゲームがロックしたという根拠はない。
+
+AC設定はシステムsleep 0分、画面sleep 180分、screen saver idleTime 0秒。設定変更やGuardian停止・迂回は実施していない。短い自前utilityだけにcaffeinate -d -iを適用し、実行中のPreventUserIdleDisplaySleep=1と終了後0を実測した。この方法は次回の許可された検証中に限る画面消灯対策として使えるが、明示ロック防止や長時間ゲーム受入の証拠ではない。外部PIDに-wした初回試行はassertionを観測できず、不成立として保存した。
+
+生ログはignored artifactsに保持し、INVESTIGATION.jsonにSHAを記録。常設OS設定・保存データ・権限を変更していない。
+
+公式資料: https://learn.chatgpt.com/docs/changelog
@@ -0,0 +1,31 @@
+{
+  "recorded_at": "2026-10-13T10:07:01.641642+00:00",
+  "scope": "Ephemeral idle-display/system sleep prevention for one owned dummy process only; no unlock or safety bypass",
+  "argv": [
+    "/usr/bin/caffeinate",
+    "-d",
+    "-i",
+    "-w",
+    "11677"
+  ],
+  "before": [
+    "   PreventUserIdleDisplaySleep    0"
+  ],
+  "during": [
+    "   PreventUserIdleDisplaySleep    0"
+  ],
+  "after": [
+    "   PreventUserIdleDisplaySleep    0"
+  ],
+  "guard_exit_code": 0,
+  "target_exited": true,
+  "guard_released_on_target_exit": true,
+  "permanent_settings_changed": false,
+  "guardian_disabled_or_modified": false,
+  "screen_unlocked_or_input_injected": false,
+  "game_process_or_player_data_touched": false,
+  "does_not_prevent_explicit_guardian_relock": true,
+  "activation_observed": false,
+  "mitigation_validated": false,
+  "disposition": "Exit0 and release alone do not establish assertion activation; during reading stayed0. Retain failed/inconclusive -w pilot."
+}
@@ -0,0 +1,47 @@
+{
+  "recorded_at": "2026-10-13T10:10:02.763962+00:00",
+  "method": "caffeinate holds assertions on its utility, rather than external -w pid",
+  "argv": [
+    "/usr/bin/caffeinate",
+    "-d",
+    "-i",
+    "/usr/bin/python3",
+    "-B",
+    "-c",
+    "import time; time.sleep(8)"
+  ],
+  "probes": [
+    [
+      "   PreventUserIdleDisplaySleep    1",
+      "   pid 12637(caffeinate): [0x00261d6d00018c83] 00:00:00 PreventUserIdleSystemSleep named: \"caffeinate command-line tool\"  ",
+      "\tDetails: caffeinate asserting on behalf of '/usr/bin/python3' (pid 12636)",
+      "   pid 12637(caffeinate): [0x00261d6d00058c84] 00:00:00 PreventUserIdleDisplaySleep named: \"caffeinate command-line tool\"  ",
+      "\tDetails: caffeinate asserting on behalf of '/usr/bin/python3' (pid 12636)"
+    ],
+    [
+      "   PreventUserIdleDisplaySleep    1",
+      "   pid 12637(caffeinate): [0x00261d6d00018c83] 00:00:01 PreventUserIdleSystemSleep named: \"caffeinate command-line tool\"  ",
+      "\tDetails: caffeinate asserting on behalf of '/usr/bin/python3' (pid 12636)",
+      "   pid 12637(caffeinate): [0x00261d6d00058c84] 00:00:01 PreventUserIdleDisplaySleep named: \"caffeinate command-line tool\"  ",
+      "\tDetails: caffeinate asserting on behalf of '/usr/bin/python3' (pid 12636)"
+    ],
+    [
+      "   PreventUserIdleDisplaySleep    1",
+      "   pid 12637(caffeinate): [0x00261d6d00018c83] 00:00:02 PreventUserIdleSystemSleep named: \"caffeinate command-line tool\"  ",
+      "\tDetails: caffeinate asserting on behalf of '/usr/bin/python3' (pid 12636)",
+      "   pid 12637(caffeinate): [0x00261d6d00058c84] 00:00:02 PreventUserIdleDisplaySleep named: \"caffeinate command-line tool\"  ",
+      "\tDetails: caffeinate asserting on behalf of '/usr/bin/python3' (pid 12636)"
+    ]
+  ],
+  "after": [
+    "   PreventUserIdleDisplaySleep    0"
+  ],
+  "exit_code": 0,
+  "stderr": "",
+  "activation_observed": true,
+  "release_observed": true,
+  "mitigation_validated": true,
+  "permanent_settings_changed": false,
+  "guardian_or_manual_lock_bypassed": false,
+  "game_or_player_data_touched": false
+}
@@ -0,0 +1,23 @@
+{
+  "task": "MP-01-r02",
+  "state": "completed",
+  "scope": "requested approval proposal artifact only; not original P06-01 acceptance",
+  "implementation_commit": "6b78f8fd71131e61ba695939f4629fec9f51d7a9",
+  "integration_commit": "65a4fe2bb8e99812a8e8ad7f7a7addf489fe5067",
+  "product_values_applied": false,
+  "original_88_completed_added": 0,
+  "governing_spec": "docs/spec/acceptance/P06-mana-proposal-r02.json",
+  "governing_spec_sha256_runner_strip": "f8cf1753e7ab400130c761570828640c03e0d51073a03f887a9085cbe6be77c6",
+  "low_findings": [
+    {
+      "issue": "Reused proposal id MP-01 and historical base_commit retained",
+      "disposition": "Retain historical draft provenance; current task/base/commit are fixed by formal-traceability-r02.json. No new repair needed for accepted artifact."
+    },
+    {
+      "issue": "Proposal source_pins includes old proposal spec, omits current r02 governing spec",
+      "disposition": "Current r02 spec SHA and path are pinned in immutable Runner contract and preserved traceability. Low-level follow-up recorded; no acceptance weakening."
+    }
+  ],
+  "next_original_target": "P13-03",
+  "next_action": "Read-only reconciliation of existing second repair, failed validation and scope before any same-task continuation; no duplicate implementation, no cap increase."
+}
@@ -0,0 +1,63 @@
+{
+  "recorded_at": "2026-10-13T08:10:27.851257+00:00",
+  "next_original_target": "P13-03",
+  "priority_reason": "Existing final repair of records/checker; no Windows device or unapproved production numeric choice is required; avoid duplicate implementation",
+  "actual_existing_task": {
+    "id": "P13-03",
+    "state": "blocked",
+    "submitted": "7645c55149d3bebf3ed602cf3039b15b28fa376f",
+    "reason": "scope_violation: tools/__pycache__/check_p13_content_difference.cpython-314.pyc",
+    "repairs": 2,
+    "contract": {
+      "id": "P13-03",
+      "title": "内容差異の記録",
+      "requirement_ids": [
+        "P13-03"
+      ],
+      "acceptance_ids": [
+        "P13-03"
+      ],
+      "spec_ref": "docs/spec/acceptance/P13-03.json",
+      "base_commit": "e1a1651e15bbc9a0526ef31d0b2786feb20d8cd1",
+      "worker": "codex",
+      "allowed_paths": [
+        "tools/check_p13_content_difference.py",
+        "docs/plans/original-completion-2026-10-02/execution/p13-03/**"
+      ],
+      "depends_on": [],
+      "resource_locks": [
+        "p13-content-difference-record"
+      ],
+      "validation_ids": [
+        "p13-difference"
+      ],
+      "max_repair_attempts": 2,
+      "spec_sha256": "e1255835c1227e02bac42eb99b026b0fcbe69c272f9ed0b36199a2daf8d55c53"
+    }
+  },
+  "latest_recorded_commander": {
+    "decision": {
+      "action": "run",
+      "task_id": "P13-03",
+      "reason": "P13-03 は repair_ready（repairs=2、上限2/2内）で、オーナーが3件の検証済み欠陥について最終修理を承認しています。同じCodex workerを、許可されたexecution/p13-03/P13_ORDER_FINAL_REPAIR_INPUT.mdを入力に再開してください。元の7施設・84スロット・6カテゴリ・unknown・source evidenceは維持します。不変のspec、cap、contractは変更しません。core、assets、gameの編集と新規タスクは行いません。run後も、exact --verify-only の正式検証と必須ネガティブ、reviewer本文のexact preflight、別セッションの正式Claudeレビュー、統合は必須です。ローカルの13チェックだけでは完了とみなしません。"
+    },
+    "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p13-03/runs/c3ae83b855a24966b051a2a296c3b64f"
+  },
+  "all_acceptance_reference": "docs/spec/acceptance/P13-03.json",
+  "reuse_candidate": "7645c55149d3bebf3ed602cf3039b15b28fa376f",
+  "remaining_conditions": [
+    "Reconcile existing final repair output and exact source version; no second worker",
+    "Resolve generated out-of-scope cache without deleting unapproved content or widening allowed_paths",
+    "Actual registered --verify-only validation and mandatory negative coverage",
+    "Exact complete reviewer packet within unchanged 500000 guard",
+    "Separate formal Opus review, integration and final validation, ledger completion"
+  ],
+  "dependencies": {
+    "registered_depends_on": [],
+    "windows_device_required_for_this_records_only_unit": false,
+    "mana_numeric_approval_required_for_this_unit": false
+  },
+  "new_worker_started": false,
+  "task_state_or_cap_changed": false,
+  "formal_acceptance_claimed": false
+}
@@ -0,0 +1,14 @@
+{
+  "task_id": "MP-01-r02",
+  "commit": "65a4fe2bb8e99812a8e8ad7f7a7addf489fe5067",
+  "kind": "final",
+  "checks": [
+    {
+      "id": "proposal-consistency",
+      "exit_code": 0,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/c0c18ffb7abf484b9f9ecf8149ce65b0",
+      "passed": true
+    }
+  ],
+  "passed": true
+}
@@ -0,0 +1,14 @@
+{
+  "task_id": "MP-01-r02",
+  "commit": "65a4fe2bb8e99812a8e8ad7f7a7addf489fe5067",
+  "kind": "integration",
+  "checks": [
+    {
+      "id": "proposal-consistency",
+      "exit_code": 0,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/3872bfd9219f461c8d8f116a1a57b493",
+      "passed": true
+    }
+  ],
+  "passed": true
+}
@@ -0,0 +1,19 @@
+{
+  "task_id": "MP-01-r02",
+  "commit": "6b78f8fd71131e61ba695939f4629fec9f51d7a9",
+  "status": "pass",
+  "summary": "I checked acceptance item MP-01-r02 (P06-01) against the spec, the diff, the target sources and the Runner results. All requirements are met, so the status is pass.\n\nScope:\n- Only the two files inside allowed_paths were changed: PROPOSAL.md and proposal.json.\n- No product source, original spec, ledger, Runner config or test files were touched.\n- No tests were deleted or disabled.\n- The Runner reports product_changed=false and original_completed_units_added=0.\n\nSpec checks:\n1. proposal.json has status=proposed_unapproved and applied_to_product=false. All 8 required top-level keys are present.\n2. recommended has all 4 numeric fields (100/300/20/10) as integers, with initial amount ≤ capacity.\n3. The furnace candidate states input and output (1 eligible generic slave → 100 Mana), eligibility, timing, atomicity, history and interruption handling. It sets actual_actor_consumption=false. It keeps the original constraints (6×3, back underground, slave consumption) and excludes irreplaceable, unsellable and unique people.\n4. demand_catalog lists all 37 definitions with the 3 required fields. I re-added the values myself: one of each definition totals 63, and the normal mix totals 16. The 4 facilities that omit maintenance_mana are recorded as 0 based on the FacilityDefinition default. The 13 original facilities with no definition are kept as unknown, not treated as 0.\n5. source_pins is now a repo-relative path → raw-file SHA256 dictionary. The Runner matched all 53 pins against the current files. Provenance is kept separately in source_provenance and the provenance section, which keeps original, current implementation, fixture and candidate values distinct.\n6. Each of these is described separately with its basis: initial mana=100 as a stock amount vs. STARTER_MANA_OUTPUT=100 as network supply capacity, the current use of maintenance_mana, and the fact that the conversion is only a proposal.\n7. There are 21 comparison series covering low load, normal, demand excess, zero stock, capacity limit, supply loss and return, and same-boundary resend. The Runner independently recomputed all 126 rows. My spot checks also matched: recommended excess 100→57→14→0 with shortage 29; generous case at 16 after interval 8 and first zero at interval 9; overflow 16/18/38. Both furnace headroom policies also matched (96/100/0 and 80/84/0).\n8. D05 is marked as unapproved, with a recommended order inside the MANA phase. A legacy 0 is kept as 0 (stopped) and is never silently converted to full or unlimited. Open decisions and their approval scope are listed.\n9. PROPOSAL.md states at the top that the proposal is unapproved and not applied to the product. It claims neither completion of the original 88 deliveries nor acceptance of P06-01. The proposal-consistency check passed (exit 0).\n\nThe only problems are leftover metadata, listed as low findings.",
+  "acceptance_ids": [
+    "MP-01-r02"
+  ],
+  "findings": [
+    {
+      "severity": "low",
+      "message": "Leftover metadata in proposal.json: id is still \"MP-01\" and base_commit still points to an older commit (0bdc4886…) instead of this contract's base (5536bc04…). The r02 traceability would be clearer if these were updated. The values and source pins match the current files, so this does not affect substance."
+    },
+    {
+      "severity": "low",
+      "message": "source_pins points to the old spec docs/spec/acceptance/P06-mana-proposal.json and does not include the spec that governs this round (P06-mana-proposal-r02.json). Adding the governing spec would make traceability easier. This does not affect acceptance."
+    }
+  ]
+}
@@ -0,0 +1,72 @@
+{
+  "contract": {
+    "id": "MP-01-r02",
+    "title": "承認用マナ契約候補の作成（原88成果の完了ではない）",
+    "requirement_ids": [
+      "P06-01"
+    ],
+    "acceptance_ids": [
+      "MP-01-r02"
+    ],
+    "spec_ref": "docs/spec/acceptance/P06-mana-proposal-r02.json",
+    "base_commit": "5536bc041188d53229d18f33f08b17d4d83b7590",
+    "worker": "codex",
+    "allowed_paths": [
+      "docs/plans/original-completion-2026-10-02/execution/mana-proposal/**"
+    ],
+    "depends_on": [],
+    "resource_locks": [
+      "mana-proposal-draft"
+    ],
+    "validation_ids": [
+      "proposal-consistency"
+    ],
+    "max_repair_attempts": 2,
+    "spec_sha256": "f8cf1753e7ab400130c761570828640c03e0d51073a03f887a9085cbe6be77c6"
+  },
+  "implementation_commit": "6b78f8fd71131e61ba695939f4629fec9f51d7a9",
+  "integration_commit": "65a4fe2bb8e99812a8e8ad7f7a7addf489fe5067",
+  "owner": "Human standing instruction: mainの更新を明示的に許可します; コミットすべき内容をコミットして。その上でpushして; applicable only to requested unapproved proposal-document integration, not product numeric adoption",
+  "evidence": [
+    {
+      "id": 1,
+      "task_id": "MP-01-r02",
+      "kind": "validation",
+      "commit_sha": "6b78f8fd71131e61ba695939f4629fec9f51d7a9",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/e2f43a7c8ae74ed88eff644e163d81ff-validation.json",
+      "passed": 1,
+      "preserved_copy": "docs/plans/original-completion-2026-10-02/execution/mana-proposal-continuation-r03/formal-validation-r02.json",
+      "sha256": "a8373b86ab41e33c54d1cbea5a9dbe4c083589d512a8e95087306ba3af06bb3b"
+    },
+    {
+      "id": 2,
+      "task_id": "MP-01-r02",
+      "kind": "review",
+      "commit_sha": "6b78f8fd71131e61ba695939f4629fec9f51d7a9",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/d84ae79eb6a843548013c4fdf676513f/result.json",
+      "passed": 1,
+      "preserved_copy": "docs/plans/original-completion-2026-10-02/execution/mana-proposal-continuation-r03/formal-review-r02.json",
+      "sha256": "60ca677ca0cba71579fc0fc0658348739009565f04c3018ae5f315cff8f5a72a"
+    },
+    {
+      "id": 3,
+      "task_id": "MP-01-r02",
+      "kind": "integration",
+      "commit_sha": "65a4fe2bb8e99812a8e8ad7f7a7addf489fe5067",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/e1a1ce778b484c33975770bb643fd4aa-integration.json",
+      "passed": 1,
+      "preserved_copy": "docs/plans/original-completion-2026-10-02/execution/mana-proposal-continuation-r03/formal-integration-r02.json",
+      "sha256": "71edaef3231ebcc19b90d1f40d29b99a3067e70985eaab7cf2ff5987092fb234"
+    },
+    {
+      "id": 4,
+      "task_id": "MP-01-r02",
+      "kind": "final",
+      "commit_sha": "65a4fe2bb8e99812a8e8ad7f7a7addf489fe5067",
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/712ab0b9065f4bd4b7a97384fee58f5e-final.json",
+      "passed": 1,
+      "preserved_copy": "docs/plans/original-completion-2026-10-02/execution/mana-proposal-continuation-r03/formal-final-r02.json",
+      "sha256": "6543513845d535e6bde610581af23904449134409a4016e87df6b2061f41f0ab"
+    }
+  ]
+}
@@ -0,0 +1,14 @@
+{
+  "task_id": "MP-01-r02",
+  "commit": "6b78f8fd71131e61ba695939f4629fec9f51d7a9",
+  "kind": "validation",
+  "checks": [
+    {
+      "id": "proposal-consistency",
+      "exit_code": 0,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/f8299dafca1945618ff5d2c6cdf8bcd4",
+      "passed": true
+    }
+  ],
+  "passed": true
+}
@@ -0,0 +1,81 @@
+# 未承認・製品未反映：MP-01 マナ契約候補
+
+承認用の候補案です。P06-01の受入や原88成果の完了を意味せず、分母にも加えません。製品・人物・資源・仕様原本・台帳は変更していません。正式試験と別セッションレビューはRunnerが実施します。
+
+## 根拠と区別
+
+原本 `docs/traceability/original/BASELINE.txt` 9.1は枯渇時の全館停止、10.6はマナ炉6×3・裏地下・奴隷消費を規定します。6.1/6.5の代替不可能・解雇売却不可・原則ロストしない人物は投入から除外します。数値、容量、生成周期、炉の収率は原本にありません。
+
+現実装 `autoload/game_state.gd` の初期mana=100は残量です。`autoload/simulation_runtime.gd` のSTARTER_MANA_OUTPUT=100はネットワーク供給能力であり、100 Mana/10分という承認済み生成率ではありません。`maintenance_mana` は完成施設のconsumer需要に登録され、`mana_network_service.gd` の10ゲーム分周期で配電されます。これは現時点で残量から差し引く維持エネルギーではありません。ネットワークの優先配電・75%の縮退・10分の停止保持と、全館のreserve>0ゲートは別です。Runtimeの定期マナ更新はネットワーク評価と電力投影であり、有限残量helperの定期生成消費接続ではありません。
+
+`tests/s2/test_mana_reserve_balance.gd` の残量7・容量10・時刻360、時刻370の生成5・需要8→残量4は試験入力です。承認済み製品値ではなく、今回その試験を実行していません。現sourceの生バイトSHA256はJSONのsource_pins辞書（リポジトリ相対path→SHA256）、区分は別のsource_provenanceに記録しました。候補の来歴はcandidate、原本・実装・fixtureと区別しています。
+
+## 承認する候補範囲
+
+| 案 | 初期Mana | 容量Mana | 世界樹生成Mana/10ゲーム分 |
+|---|---:|---:|---:|
+| 推薦 | 100 | 300 | 20 |
+| 慎重 | 100 | 200 | 10 |
+| 余裕 | 200 | 600 | 40 |
+
+全て未承認です。推薦は現初期残量100を維持する候補であり、100を原本値と主張しません。容量300は初期の3倍の有限バッファ、生成20は下記の通常需要16を4だけ上回り、全定義一基ずつの需要63には足りない設計上の選択です。周期10は現配電評価境界への整合を理由に提案します。全ゲームのバランス保証ではありません。
+
+換算案は各完成・保有施設のmaintenance_manaを1周期のMana消費量とし、D=Σ(基数×定義値)とします。閉店・停止中も維持需要を計上し、枯渇による需要免除と無償復帰の振動を避けます。撤去・破壊済みは除外します。金維持費の承認A01と同一契約ではなく、別途承認するマナ案です。Manaは整数、時刻はゲーム内分、初回は初期時刻360から370までの一周期です。現実時間10秒=ゲーム内1時間との関係を生成量へ重複換算しません。
+
+B=直前残量、C=容量、G=その周期の世界樹生成、F=確定した炉生成、D=需要。
+
+- available=B+G+F
+- consumed=min(available,D)
+- shortage=D-consumed
+- overflow=max(0,available-consumed-C)
+- after=min(C,available-consumed)
+
+需要を賄ってから余剰を蓄積し、超過は明記して破棄します。after=0では需要ゼロ施設も含め全館停止。供給そのものは停止館外の世界樹から復帰可能とし、次の境界でafter>0かつ局所配電条件成立の場合だけ再開します。ネットワークstorageと残量を二重計上しません。ネットワーク供給100をGとして足すこともしません。供給能力・局所切断と残量の二つのゲートを保ちます。
+
+## 需要と計算比較
+
+JSONはdata/facilities配下の全37定義を列挙します。chapel、cleaning_room、general_store、infirmaryの4施設はmaintenance_mana省略のため、scripts/data/facility_definition.gdのFacilityDefinitionの現default=0を根拠に0と明示し、未定義施設のunknownとは区別します。各行のpath・definition_id・observed_maintenance_manaを入力に、全定義一基ずつの合計は63です。定義の存在を通常登録・稼働とみなしません。
+
+歴史監査CURRENT_FACILITY_AUDIT.mdにある対応定義なし13施設（VIPスイート、ドミトリー、レストラン、屋台、カジノ、闘技場、高級ソープ、SM拷問室、覗き部屋、地下牢、マナ炉、ワープ、魔法砲台）は需要unknownです。魔力制御室3×2は原本マナ炉6×3の代替ではありません。現在の定義一覧と歴史監査の登録数も混同しません。
+
+比較は候補式の計算のみです。F=0、初期時刻360、10分刻み。低負荷D=2（食堂一基）、通常D=16（食堂・厨房・大浴場・客EV・受付・警備員詰所各一基）、需要超過D=63（全37定義各一基）を120分計算します。zero・capacityは10分、供給喪失復帰は30分。全入力、各周期結果、shortage/overflowはJSONに保存しています。
+
+| 条件 | 推薦の結果 | 慎重の結果 | 余裕の結果 |
+|---|---:|---:|---:|
+| 低負荷120分 | 300 Mana | 196 Mana | 600 Mana |
+| 通常120分 | 148 Mana | 28 Mana | 488 Mana |
+| 需要超過120分 | 0 Mana | 0 Mana | 0 Mana |
+| 初期0・通常需要10分 | 4 Mana | 0 Mana | 24 Mana |
+| 初期満容量・低負荷10分 | 300 Mana | 200 Mana | 600 Mana |
+| 生成0→0→通常・需要16、30分 | 72 Mana | 62 Mana | 192 Mana |
+| 通常10分後、同分再送 | 104 Mana | 94 Mana | 224 Mana |
+
+推薦の需要超過は100→57→14→0、3周期目にshortage29、その後は毎周期shortage43。通常は100+12×(20−16)=148。供給喪失復帰は100→84→68→72。初期0は生成20−需要16=4で次境界復帰、慎重案は生成10でshortage6、停止を維持します。満容量では需要を支払った余剰のみoverflow。余裕案のB=200、G=40、D=63では8周期後が200−8×23=16、9周期目は16+40=56に対し需要63でshortage7、初めて0になります（時刻450）。12周期後も0です。
+
+同分再送は全案とも保存済み結果の返却だけで残量不変。同じ分で異なる入力は拒否します。局所供給線だけ喪失する場合もpower_available=falseを投影し、残量が正でも停止します。復帰は局所配電の停止保持条件を満たした評価境界で行い、残量が0なら再開しません。これらは設計比較で、実機受入結果ではありません。
+
+## 炉の候補
+
+原本寸法・裏地下を維持。所有する一般奴隷1名→100 Mana、一炉につき次の10分境界で一回の明示投入を提案します。ユニーク・代替不可能・売却不可・保護対象・ヒロイン・ライバル、客、一般従業員、分類不明な拘束者は除外。適格性が不明なら拒否します。自動投入は行わない案です。
+
+人物の適格性は未決定で、上記の対象分類も承認待ちです。推薦候補は自然生成と維持需要支払後のbase_after=min(C,max(0,B+G−D))を求め、所有・適格性・炉稼働・空き容量C−base_afterが100以上か再検証します。人物除去、Mana加算、投入IDと境界・対象ID・適格性根拠・前後残量の履歴を一つの保存可能な原子操作として確定する案です。拒否時は人物・マナ等を何も消費しません。容量不足では投入せず、人物を消費してoverflowを捨てる案にしません。確定前中断は無変更で取消、確定後中断は保存receiptから復帰して再消費しません。枯渇中の炉は稼働しないため世界樹で先に復帰します。これは将来実装契約の候補で、今回は実際の人物消費も資源変更もありません。
+
+C=300、G=20、D=16、F=100を仮に式へ投入すると、B=200では200+20+100−16=304→overflow4、B=196では300→overflow0、B=300では404→overflow104です。これは算術比較で、容量不足の実取引を許可する意味ではありません。推薦の需要支払後判定ではB=200のbase_after204・空き96は拒否（F=0、残量204）、B=196のbase_after200・空き100は受理（残量300）、B=300は拒否（残量300）です。
+
+別案は生成後・需要支払前のmin(C,B+G)で空きを判定し、上記3例の空きは80・84・0で全て拒否します。需要支払後の推薦候補とこの別案の選択は未承認です。どちらも人物・マナ・receiptを原子的に変更し、同じ取引の再送で二度適用しない案です。
+
+## 更新順序と保存
+
+D05はdecisions.jsonのpendingです。現順序はAPPLY_COMMANDS→TIME_BOUNDARIES→MANA→CONSTRUCTION→LOGISTICS→FACILITY_COMPLETION→VITALS_AND_ENVIRONMENT→INCIDENTS_AND_EVENTS→FACILITY_QUEUES→AI_DECISIONS→PUBLISH_SNAPSHOT。推薦はこのphase列を保持し、MANA内で入力snapshot→自然生成→維持需要支払→空き容量判定→炉取引のstage→最終残量計算→局所配電→全館ゲート→receipt確定とします。
+
+00:00の既承認Gold維持費は閉店・停電でも所有時間に応じて精算し、マナ停止を理由に取り消しません。06:00/18:00の勤務境界は保持。マナ評価後の物流・サービス完了・queueは確定電力を参照する案です。未完了サービスを完了として課金せず、EV/搬送は位置・荷物・ID・ルートを保持して停止、復帰で重複搬送しない案。日跨ぎ完了・費用時点・移動中の具体処理はD05承認前に製品へ接続しません。
+
+旧GameStateは非負値を復元でき0を許し、get_resourceで欠落も0として参照されます。0は現在の投影では停止であり、無制限・満量の証拠ではありません。ネットワークsnapshot版1、save format1/2は新しい残量容量・生成率契約の承認を意味しません。
+
+移行案は適用元版と新domain版を明示し、preview・検証済みbackup後に原子的適用。明示旧0は0・停止を維持。正値は承認容量内のみ保持。欠落、曖昧、負値、非整数、容量超過は拒否して元保存・live状態を保持し、黙って切り詰めません。新保存は残量・容量・最後の境界/flow・炉receipt・配電投影を保持。同境界同入力は再消費・イベント再発行なし、異入力/逆行は拒否。時間飛びは各10分境界を順に処理し、offline生成は別承認なしには行いません。
+
+## 不足・承認待ちと検証
+
+D04の値と換算、D05の境界処理、炉の対象判定・収率・履歴、新保存domain版と移行元適用条件を承認範囲として分けます。未定義13施設の需要、実際の配置基数、全ゲームの性能・経済バランスは未確定です。原P06-01は未達を維持します。
+
+静的に参照sourceと計算を確認した成果です。正式proposal-consistency試験・別Claudeレビュー・承認・統合・完了確定はRunnerに委ね、合格を自己宣言しません。
@@ -122,5 +122,16 @@ def p18_validate(self, task_id):

 Runner.validate = p18_validate

+adapter_path = os.environ.get("OWNER_P22_FINALIZATION_ADAPTER")
+if adapter_path:
+    import importlib.util
+    approved_path = Path("/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/proposed_task_timeout_adapter.py")
+    if Path(adapter_path).resolve() != approved_path.resolve():
+        raise ValueError("Exact approved timeout adapter required")
+    adapter_spec = importlib.util.spec_from_file_location("owner_p22_finalization_timeout", approved_path)
+    adapter_module = importlib.util.module_from_spec(adapter_spec)
+    adapter_spec.loader.exec_module(adapter_module)
+    adapter_module.install(Runner)
+
 from runner.cli import main
 main()
@@ -0,0 +1,83 @@
+{
+  "plan_id": "P08-02",
+  "stage": "read-only audit started; contract not frozen; no worker registered",
+  "current_main": "e4dc1ef",
+  "original_work": "混合建設、占有変更、役者の実位置、救護・物流・EVをまとめて移行する。",
+  "original_acceptance": "重複、孤立、消失がない。解消不能時は元配置とセーブを保つ。",
+  "coverage_required": [
+    "混合建設・占有変更を同じ移行batchで扱う",
+    "役者実位置・救護患者/担当・物流荷物/予約・EV乗客/要求の保全",
+    "重複なし",
+    "孤立なし",
+    "消失なし",
+    "解消不能時に元配置とセーブを保持"
+  ],
+  "commander_selection": "P08-02 (Opus selection preserved; its paraphrased work is not authoritative)",
+  "evidence_reuse_candidates": [
+    {
+      "path": "artifacts/original-completion-2026-10-02/p03-current1299-inflight-dimension-actual-root-review-r01/review.json",
+      "expected_sha": "5078abfb2653b454f4405e554997936927138bd81c56fc3fb564540a00693368",
+      "actual_sha": "5078abfb2653b454f4405e554997936927138bd81c56fc3fb564540a00693368",
+      "scope": "Current1299 unchanged; actual direct formal dimension migration with partial guest stairs and concurrent paid legacy job,152/0,4PID,303parse,17typed,5full states,12uncapped events,12formal; Operations OFF; no whole migration or OS acceptance",
+      "not_automatically_p08_accepted": true
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p03-current1299-inflight-EV-dimension-actual-root-review-r01/review.json",
+      "expected_sha": "6ced37bc8af78ae35310ae6d8269767d197cdaec6c7444041a0c934ac2e50c8c",
+      "actual_sha": "6ced37bc8af78ae35310ae6d8269767d197cdaec6c7444041a0c934ac2e50c8c",
+      "scope": "Current1299 unchanged; actual occupied EV4 and waiting passenger1 plus concurrent paid legacy job formally migrated,177/0,4PID,303parse,17typed,5full states,34uncapped events,12formal; five original request arrivals exactly once; Operations OFF; changed destination/rescue/logistics/Main OS/whole migration pending",
+      "not_automatically_p08_accepted": true
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p03-current1299-EV-retarget-refusal-actual-root-review-r02/review.json",
+      "expected_sha": "516c8f2a5fadc3b5345d3b802a1087fe7ca4d85f8d1f00e504f27a11f5d4be09",
+      "actual_sha": "516c8f2a5fadc3b5345d3b802a1087fe7ca4d85f8d1f00e504f27a11f5d4be09",
+      "scope": "Current1299 unchanged; actual boarded upper-entrance retarget refused twice,193/0,4PID,303parse,25typed,7whole states,6uncapped events,8formal original/real backup members and12proof members immutable; independent Zstd3; direct APIs/Operations OFF; no whole migration or OS acceptance",
+      "not_automatically_p08_accepted": true
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p03-current1299-rescue-dimension-actual-root-review-r02/review.json",
+      "expected_sha": "5b4ad1372adda1cc830bbd455016c7c602cf26195221a6450db43cc8c5ddaeb4",
+      "actual_sha": "5b4ad1372adda1cc830bbd455016c7c602cf26195221a6450db43cc8c5ddaeb4",
+      "scope": "Current1299 unchanged; actual carried patient and rescuer plus concurrent paid legacy job,158/0,4PID,303parse,17typed,5full states,10uncapped events,12formal; same rescue task completes at unchanged clinic; controlled injury Operations OFF; changed rescue destination/logistics/Main OS/full migration pending",
+      "not_automatically_p08_accepted": true
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p03-current1299-logistics-dimension-actual-root-review-r01/review.json",
+      "expected_sha": "91bc6e55aeee1462fbd31304d3d1c9ee0e537d8d3049ce9c4a4482829dfaa34c",
+      "actual_sha": "91bc6e55aeee1462fbd31304d3d1c9ee0e537d8d3049ce9c4a4482829dfaa34c",
+      "scope": "Current1299 unchanged; real bought8 food, normally hired worker, carried4/reserved4 and concurrent paid old-size job formally migrated;165/0,4PID,303parse,17typed,5full states,23uncapped events,12formal; same two shipments complete with conservation; actual supply destination unchanged, Operations OFF; no Main OS/full migration acceptance",
+      "not_automatically_p08_accepted": true
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p03-current1299-multiple-jobs-dimension-actual-root-review-r02/review.json",
+      "expected_sha": "e3baa038eba0bbd16126fdbb5941057f17493c363659abd5b9f668e38bcccfc9",
+      "actual_sha": "e3baa038eba0bbd16126fdbb5941057f17493c363659abd5b9f668e38bcccfc9",
+      "scope": "Current1299 unchanged; two actual simultaneous paid legacy construction jobs formally batch migrated,158/0,4PID,303parse,17typed,5full states,4uncapped events,12formal; exact seven geometry changes only; independent Zstd3; two distinct current completed facilities; Operations OFF; no whole migration or OS acceptance",
+      "not_automatically_p08_accepted": true
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p03-current1299-batch-later-refusal-actual-root-review-r02/review.json",
+      "expected_sha": "c3caf63ec20f584b4789beaa527da5ab77951d02a404479d3dab2834a48cd8db",
+      "actual_sha": "c3caf63ec20f584b4789beaa527da5ab77951d02a404479d3dab2834a48cd8db",
+      "scope": "Current1299 unchanged; later real dorm task rejects after first real job candidate changed; batch rollback twice;207/0,4PID,303parse,25typed,7whole states,5events,12proof members unchanged;3 independent Zstd; direct APIs Operations OFF",
+      "not_automatically_p08_accepted": true
+    }
+  ],
+  "source_sha256": {
+    "scenes/main/main.gd": "41df8857f9658c17b01361350979caa942b9326c82c9f176517972c2a9692f55",
+    "scripts/core/save_migration_registry.gd": "22ac2cce07a02d1a2a9ac2109e7a0ecf9a0fbe675df4dc9d5249aa9ab3583f98",
+    "tests/s1/test_dimension_batch_save.gd": "ca397c0457996bab637e8be5217b7db2c14579a1b0df54434b4000a69e793bbf",
+    "tests/ui/test_dimension_migration_ui.gd": "0f0cec88ea8bf5fccdcd5ade02fab70b7dc71135132048cd10db17ad9d964c0d"
+  },
+  "remaining_conditions": [
+    "既存7証拠の適用source/input/settings/environmentを現採用版へ照合。証拠ファイルSHA一致だけでは現在適用を認定しない。",
+    "個別例を混合移行全体の受入へ置き換えない。混合batch・占有変更・全実位置/搬送参照の正例/拒否例を確認。",
+    "通常メニューのpreview/取消/確認と拒否時の原保存保全の実証を確認。handler試験をOS入力済みにしない。",
+    "必要な局所/影響範囲検証と、共有保存/配置コードを変更する場合だけ正確な最終版で全回帰。",
+    "全条件の独立Opus受入と必要統合・台帳反映。"
+  ],
+  "spec_policy": "D07関係値変換を推測せず、P08境界で含めない理由と拒否契約を確認。原30/88を維持。",
+  "capacity_bytes_available_observation": "743MiB before approved P22 run; remeasure before allocation",
+  "original_unit_completed": false
+}
@@ -0,0 +1,51 @@
+[
+  {
+    "path": "autoload/simulation_runtime.gd",
+    "function": "prepare_facility_dimension_snapshot",
+    "old_body_sha": "525d227a3d02759d35c64ff885fabfc6c4e205c8f7e18ec02ab5af29c8809330",
+    "current_body_sha": "525d227a3d02759d35c64ff885fabfc6c4e205c8f7e18ec02ab5af29c8809330",
+    "equal": true
+  },
+  {
+    "path": "autoload/simulation_runtime.gd",
+    "function": "migrate_facility_dimensions_at_path",
+    "old_body_sha": "41b6d554ad4fd92592366d022aac9aa7224b460bb7575e9cd63f1ab34c2a3371",
+    "current_body_sha": "41b6d554ad4fd92592366d022aac9aa7224b460bb7575e9cd63f1ab34c2a3371",
+    "equal": true
+  },
+  {
+    "path": "autoload/simulation_runtime.gd",
+    "function": "prepare_all_facility_dimension_snapshots",
+    "old_body_sha": "01a03f2bb400084ff86cc1b802581fa97f9a7aa3b7e3de1d7d7932bb1b4ded10",
+    "current_body_sha": "01a03f2bb400084ff86cc1b802581fa97f9a7aa3b7e3de1d7d7932bb1b4ded10",
+    "equal": true
+  },
+  {
+    "path": "autoload/simulation_runtime.gd",
+    "function": "_prepare_construction_dimension_snapshot",
+    "old_body_sha": "bb7a74ea8bf6fa298ec4155a165c283d27de35c34b6da5b322d2a4baadba85ca",
+    "current_body_sha": "bb7a74ea8bf6fa298ec4155a165c283d27de35c34b6da5b322d2a4baadba85ca",
+    "equal": true
+  },
+  {
+    "path": "autoload/simulation_runtime.gd",
+    "function": "preview_facility_dimensions_at_path",
+    "old_body_sha": "5bfa3f770400761b6bcf399f398b9b72c2df049b7f8190f1f6ae1f80dfd393e3",
+    "current_body_sha": "5bfa3f770400761b6bcf399f398b9b72c2df049b7f8190f1f6ae1f80dfd393e3",
+    "equal": true
+  },
+  {
+    "path": "scenes/main/main.gd",
+    "function": "_preview_dimension_migration",
+    "old_body_sha": "ae2aad38a6150074f04100da7f39eae2293f8f8c75cc4540ac6581abee62d88b",
+    "current_body_sha": "ae2aad38a6150074f04100da7f39eae2293f8f8c75cc4540ac6581abee62d88b",
+    "equal": true
+  },
+  {
+    "path": "scenes/main/main.gd",
+    "function": "_confirm_dimension_migration",
+    "old_body_sha": "51171acd19626bd805cf9a620ad69616cc1e472c1ff77ba8f8bae949f8854ecc",
+    "current_body_sha": "51171acd19626bd805cf9a620ad69616cc1e472c1ff77ba8f8bae949f8854ecc",
+    "equal": true
+  }
+]
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P22-02",
+  "reason": "【P22-02】blocked、repairs 3/3で上限に達しているため request-repair はできない。worker が止まった理由は能力不足ではなく、最終パケットの計測（500000未満）が worker からアクセスできない場所にあることだった。オーナーの指示どおり、この計測は Root だけが行う。合格した13テスト、AST、ordinary exit 0、require-ready exit 2 は保存されている。次の判断は、Root の正確な最終パケット計測と、オーナーによる扱いの決定を待つ。provider は起動しない。\n\n【新しい P08-02 登録への推奨（提案のみ。登録・承認・予算はオーナー判断）】\n原計画の条件6つ：\nC1 混合建設\nC2 占有変更\nC3 役者の実位置\nC4 救護・物流・EV を1つの batch でまとめて移行\nC5 重複・孤立・消失がない\nC6 解消できない場合は元の配置とセーブを保つ\n\n正例：これら全部を含む混合 fixture を1つ作り、現在の main を基準に OperationsON と OperationsOFF の両方で通す。restore、finance、save reconciliation、path batch は旧 stage と違うので、ON が当てはまる根拠は説明だけでなく収集で示す。OFF だけの個別ケースでは、まとめての主張の根拠にならない。\nC6：後半の batch を解消不能にして拒否させ、live、source、以前の backup の3つが byte/SHA で変わっていないことを確認する。\nPID をまたぐ継続：プロセスAで batch を保存して終了する。新しいプロファイルのプロセスBで読み込んで続行し、不変条件の digest が一致することを確認する。\n\n負例（validator が必ず reject するもの）：\n- actor ID の重複\n- 占有しているのに建物も actor もいない（孤立）\n- 救護 job、物流品、EV セッションの消失\n- 後半 batch が失敗したあとの部分適用\n- backup の上書き、live save の変更\n- PID 継続 digest の不一致\n- OFF だけの証拠で全体を主張すること\n- 旧 stage の受入の流用（29ファイル差分）\n- signals だけの UI 試験を OS 証拠として数えること\n- 期待値を常に fail にするハードコードや、サンプルの mutation だけを受け入れる validator（いずれも無効）\n\n既存資産：test_dimension_batch_save と test_dimension_migration_ui は再利用し、作り直さない。\n\nallowed_paths の案：\n- docs/plans/original-completion-2026-10-02/execution/p08-02/**\n- 新しい fixture ディレクトリ1つ（上限あり。726MiB の空きを前提に CoW stage を使う）\n- 新しい test ファイル1つ\n- tools/check_p08_02_combined_migration.py\n- tools/run_all_tests.py への最小限の登録だけ\n\nRuntime の本体と Runner の権限は対象外。不変条件の欠陥が実際に示されたときだけ、範囲を絞った別タスクを提案する。\nNative の正式チェック：Root が host で収集し、標準 sandbox の --verify-only で allocated build receipt を読む。\n完了の扱い：worker はコードを書いたら、Root の OS/native 証拠を pending のまま submitted で返す。これは original accepted ではない。全体の回帰試験は最後の変更 batch の後に1回だけ行う。",
+  "codex_model": "gpt-6-astra",
+  "codex_model_reason": "P22-02 では今、worker を走らせる予定はない。この選択は、後で P08-02 を登録したときの worker 用。fixture と validator は条件6つ全部を1つの batch で一貫させる必要がある。具体的には、建設、占有、移動中の actor、救護、物流、EV に、解消できない後半 batch での原子的な拒否と、PID をまたぐ継続が加わる。さらに既存の guarded CoW/native protocol を変えずに組み込み、ON の適用性を収集で示し、偽の pass ができない正例と負例を設計しなければならない。不変条件の推論が難しく、失敗したときの再試行コストも高いので、時間と使用量が増えても Astra の品質を優先する。この選択は run、repair、上限変更、受入の免除をどれも許可しない。"
+}
@@ -0,0 +1,44 @@
+# P08-02 retained implementation condition matrix
+
+Status: submitted for Root verification; original P08-02 acceptance remains pending.
+Frozen spec: `docs/spec/acceptance/P08-02.json`, stripped UTF-8 SHA-256
+`19f02bb7912a4d7354e565186f02366fc1d4dd698468d26142e8204fd14ebfb0`.
+The raw file has a trailing newline. The six rows are facets of one existing unit, not six units.
+
+All rows use `tests/fixtures/p08-02/mixed_world.gd` through `writer.gd` and
+`reader.gd`, and the standalone `tests/s1/test_p08_combined_migration.gd`.
+Driver phases are `off-positive`, `off-refusal`, `on-positive`, `on-refusal`,
+each with `-writer` then `-reader`; import/parse precede them.
+
+| Required condition | Retained fixture/test coverage | Driver phase | Checker rule (`tools/check_p08_migration_evidence.py`) | Negative mutation (`tools/test_p08_migration_evidence.py`) | Pending evidence |
+|---|---|---|---|---|---|
+| mixed_construction | `setup`: paid zero-progress old-size premium job, progressing premium job, completed dorm in the same save; `run`: full progress/payment/reservation/completion fields | All four pairs; positive applies batch, refusal continues old shape | `semantics` checks starting/progressing paid jobs, completed dorm and diagnostic budget; `case_gate` permits only explicit typed geometry deltas and requires four-cell positive jobs | `missing_start_stage`, `resource_delta_mismatch`, `partial_batch`; unapproved typed changes are compared without dropping fields | Native runtime/save and distinct-PID continuation; normal OS flow; Root final verification pending |
+| occupancy_change | `invariant`: restore validation of ownership/support; migrated occupied/reserved cells captured in whole snapshots | All four pairs | `semantics`: disjoint cells, exact construction/world ownership and operational facility cells; `GEOMETRY` finite allowlist | `orphan_occupancy` | Native added/released cells and support validation; OS model/formal records; Root review pending |
+| actual_actor_positions | Mid-route walker, fractional credit, real staff/rescue/cargo and EV positions; no route changes approved | All four pairs, checkpoint and minutes 001–160 | `typed_differences` forbids actor/credit/route/money deltas; full typed and raw Variant writer/reader equality | `duplicate_actor`, `unequal_cross_pid` | Native actual positions/credit/routes and cross-PID equality; OS state captures; Root review pending |
+| combined_rescue_logistics_ev | `setup`: actual in-flight rescue, purchased carried food with original requests, four EV boarded plus one waiting; `run`: patient treated, original cargo completed, each EV arrival once | All four pairs and uncapped events | `semantics`: IDs, endpoints, reservations and EV actors; `case_gate`: final patient health, original cargo completion and exactly one arrival per original EV request | `lost_patient`, `lost_cargo`, `lost_ev` | Native coherent same-save mixed state and continuation; OS save/model attribution; Root review pending |
+| no_overlap_orphan_loss | Whole typed snapshots/raw Variant files and uncapped events; runtime/cargo invariants | ON and OFF positive/refusal pairs | Ordered four-case roster, actual mode, distinct lifecycle PIDs, strict markers, all 162 labels compared, semantic ownership/reference checks | `duplicate_actor`, `orphan_occupancy`, `unequal_cross_pid`, `missing_on`, `missing_phase`, `duplicate_pid`, `wrong_source`, `stale_source` | Native ON/OFF and separate writer/reader PIDs; normal-menu OS proof; final regression and Root verification pending |
+| unsolvable_preservation | Real pre-existing migration backup, late maintenance obstruction at dorm, independently migratable first job; refusal rollback and unchanged live/formal/backup | `off-refusal`, `on-refusal` writer/reader | Live equality; original equals refusal checkpoint; before/after member hash maps equal; raw four-member original/result/backup hashes bound | `partial_batch`, `overwritten_original`, `overwritten_backup` | Native late refusal and separate-PID original continuation; OS cancel/changed-source preservation; Root review pending |
+
+The standalone suite executes both roles in one process and does not establish distinct-PID proof.
+Only the Root collector launches separate phases through existing `execute_phase`/owned-outer
+and fresh guarded profiles. Exactly one public suite marker exists:
+`P08 combined migration: <checks> checks, <failures> failures`.
+The driver privately owns the writer/reader marker templates; no second public entry is added.
+
+Local Python tests are synthetic checker fixtures, including synthetic lifecycle/OS/regression
+records; their success establishes checker reachability and rejection tests only.
+Native Godot/OS execution, normal production menu preview/cancel/confirm/changed-source rejection,
+final full regression, final submitted reviewer-packet measurement, applicable Windows coverage,
+independent Opus review, integration/current verification and ledger closure remain Root conditions.
+Controlled old-save setup must be labelled controlled, never natural production.
+Checker integrity success cannot close the original unit. No production defect or product fix
+was demonstrated by the authorized local checks; retained code and marker contract are reused.
+
+Repair r04: seed 42588; existing definition-derived construction total gold 7110 /
+materials 88, signing 150, food eight units 24. Initial gold 5000 / materials 50
+and previous added resources zero leave a deficit of gold 2284 / materials 38.
+The controlled fixture records and supplies only this derived deficit.
+Historical full metadata is now referenced by
+`implementation-historical-6c7c724.json`: both fixed Git versions were SHA-verified
+before replacement. Root's verified gzip roundtrip SHA is provenance only;
+no external archive is a checker/runtime dependency. Historical failure logs remain preserved.
@@ -0,0 +1,101 @@
+{
+  "classification": "Root coordinator supplied repair input, not worker implementation or acceptance proof",
+  "measured_UIDs": {
+    "tests/fixtures/p08-02/mixed_world.gd.uid": {
+      "text": "uid://dg5n4yme6rk4p\n",
+      "raw_sha256": "d7549f933b74f5e807cd2d3b3adcdd083af4a3bd331614314ff7bfd7b0903f31"
+    },
+    "tests/fixtures/p08-02/reader.gd.uid": {
+      "text": "uid://741t47oxl3ct\n",
+      "raw_sha256": "3e68ce192d5770e3823df9699c5c99ebb618fe0a480b4d56913624941900b08a"
+    },
+    "tests/fixtures/p08-02/writer.gd.uid": {
+      "text": "uid://csw2850g6gjct\n",
+      "raw_sha256": "8f150654767de0c66329d7d9e84d306c4fa5a65c918e04fb520b626b39f68334"
+    }
+  },
+  "replacement_example": {
+    "classification": "Synthetic machine-readable complete index from retained Proof; diagnostic ONLY, never native/OS/regression acceptance evidence.",
+    "construction": "tools/test_p08_migration_evidence.py Proof creates all linked bytes and reachable whole-check positive. Embedded documents illustrate receipts/lifecycle/OS/regression/typed records. Digests belong to the disposable synthetic fixture, not delivered acceptance artifacts; reproduce with Proof in a worktree-local disposable directory.",
+    "complete_example_generator": {
+      "source": "tools/test_p08_migration_evidence.py",
+      "source_raw_sha256": "9924f4cb4f55b15caf9f9733d91f5095553abcf2861e4b335755531480b534a9",
+      "class": "Proof",
+      "constructor": "Proof(Path(fresh_temporary_directory))",
+      "project_root_binding": "module ROOT resolved from unchanged generator inside this exact candidate source tree",
+      "generated_full_index": "proof.index",
+      "generated_representative_documents": "{path: json.loads((proof.path / path).read_text()) for path in representative_artifact_document_paths}",
+      "native_or_os_runs": 0
+    },
+    "index_top_level_fields": [
+      "schema",
+      "commit",
+      "source_map",
+      "spec_sha256",
+      "marker_contract_sha256",
+      "inputs",
+      "cases",
+      "conditions",
+      "artifacts",
+      "acceptance",
+      "collection_error",
+      "phases",
+      "os_proof",
+      "regression"
+    ],
+    "representative_artifact_document_paths": [
+      "runs/off-positive-writer/off-positive-writer-receipt.json",
+      "runs/off-positive-reader/off-positive-reader-receipt.json",
+      "runs/off-positive-writer/off-positive-writer/started.json",
+      "runs/off-positive-writer/off-positive-writer/ended.json",
+      "runs/off-positive-writer/off-positive-writer/outer-owned-finally.json",
+      "os.json",
+      "os/preview/input.json",
+      "regression.json",
+      "regression/input.json",
+      "regression/ended.json",
+      "pairs/off-positive/identity.json",
+      "pairs/off-positive/writer-process.json",
+      "pairs/off-positive/before-members.json"
+    ],
+    "fixture_config_inputs": {
+      "fixture_sources": {
+        "tests/s1/test_p08_combined_migration.gd": "9284a8cfb478b4c8d69f6d8166eec6c41107e3902029289b3c0e9ba48c370855",
+        "tests/s1/test_p08_combined_migration.gd.uid": "8c3a70d0ce619b8cb98dc003eb6c53a31f167a686179a3ffc105f7cd4d856da5",
+        "tests/fixtures/p08-02/README.md": "bc76975e49e7761c2a3540a1e907ab2215ec315653a1d87df6919d1cebd779e0",
+        "tests/fixtures/p08-02/mixed_world.gd": "889bc895888b8c6ad50659a3b23a3ee45e9edf8dde9168f5560792c292070d26",
+        "tests/fixtures/p08-02/reader.gd": "a760d0e45979d747dbd1f8710033bdce13287b00eb879d947d8378ff920ed1be",
+        "tests/fixtures/p08-02/writer.gd": "1a918b5509773b4b07a27d47ee44583b0eb5288138f7bf896088a7913773c260",
+        "tools/run_p08_mixed_migration.py": "7e86737e6354a4734726ba8d3171ad5f58d6c0380aba5a0fa3c57879d580e579",
+        "tools/check_p08_migration_evidence.py": "8d697c8e9a606bcff6a0a8c6ec55e0e9c434ca9682b7ce6915b5bcb1ea4ff3fd",
+        "tools/test_p08_migration_evidence.py": "9924f4cb4f55b15caf9f9733d91f5095553abcf2861e4b335755531480b534a9"
+      },
+      "native_runner_input_shape": {
+        "protocol": "p08-mixed-v1",
+        "commit": "<actual final commit>",
+        "selected_source_map": "<exact source map>",
+        "engine": "<actual executable>",
+        "engine_sha256": "<raw SHA>",
+        "owner_pid": "<actual collector PID>",
+        "default_player": "<protected profile record>",
+        "diagnostic_seed": 42588
+      },
+      "case_environment": {
+        "P08_PAIR_ROOT": "<absolute guarded pair output>",
+        "P08_OPERATIONS": "off|on",
+        "P08_CASE": "positive|refusal"
+      },
+      "timeouts": "unchanged: collection 900s, phase maximum 180s",
+      "formal_validation": "Root copies actual evidence into allocated build directory; --verify-only reads BUILD_OUTPUT_DIR/p08-evidence/index.json"
+    },
+    "exact_reconstruction_verification": {
+      "entire_index_equal": true,
+      "entire_representative_documents_equal": true,
+      "index_canonical_sha256": "456c67833dc6d6d905a1c0543f7a3e6b1ead715b8e88a5fe816dbcb77072efc0",
+      "representative_canonical_sha256": "5727797a0ec11363d1463406be4f1979e279a9c77fff02c284ff7fff60bc32e6",
+      "canonical_encoding": "json.dumps(value,sort_keys=True,ensure_ascii=False).encode()"
+    },
+    "purpose": "Lossless complete synthetic example regeneration from retained code, not a real native/OS acceptance index. Explicit index_schema above remains authoritative. Root proved equality of all original fields before this proposal. Full prior implementation preserved in commit6c7c7244 and byte-verified gzip evidence."
+  },
+  "instructions": "Read this compact input first. Do not cat the entire 1MB old example into model context. Parse implementation.json with stdlib, replace example field, keep all other fields/schema/source logic. Add exact supplied UIDs; update outputs; after source map changes recompute current synthetic example digests with unchanged Proof class. Historical exact old reconstruction remains tied to6c. This input is within allowed scope, not an external path."
+}
@@ -0,0 +1,306 @@
+{
+  "purpose": "Same retained candidate; diagnose checker against real native outputs. Original native bytes and candidate preserved; not game acceptance.",
+  "actual_candidate": "592809bfdaf6a1bbc5ec9cbaeff71a7bb072add9",
+  "all8_native_phases_pass": true,
+  "defects": [
+    "actual Vector3i constructor scalar format rejected by decoder",
+    "logistics lazy destination inventory treated as orphan although canonical live facility exists",
+    "RESERVED queued request has no assigned carrier by domain contract",
+    "support revision is global world revision epoch, not independent +1 counter; actual changed142→150 alongside world144→150 after occupancy rewrites"
+  ],
+  "actual_readonly_diagnostics": {
+    "ACTUAL_NATIVE_CHECKER.json": {
+      "candidate": "592809bfdaf6a1bbc5ec9cbaeff71a7bb072add9",
+      "elapsed_seconds": 16.212463750038296,
+      "actual_readonly_checker_deficits": [
+        "OS proof: unsafe artifact path",
+        "case off-positive: invalid literal for int() with base 10: 'Vector3i(0'",
+        "case off-refusal: invalid literal for int() with base 10: 'Vector3i(0'",
+        "case on-positive: invalid literal for int() with base 10: 'Vector3i(6'",
+        "case on-refusal: invalid literal for int() with base 10: 'Vector3i(-12'",
+        "final regression: unsafe artifact path"
+      ],
+      "full_game_acceptance": false,
+      "original_unit_completed": false,
+      "index": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p08-02-native-mixed-r05/index.json"
+    },
+    "VECTOR_DECODER_READONLY_DIAGNOSTIC.json": {
+      "candidate": "592809bfdaf6a1bbc5ec9cbaeff71a7bb072add9",
+      "scope": "Root readonly decoder prototype diagnostic; no candidate code or actual evidence altered; no acceptance",
+      "observations": [
+        {
+          "case": "off-positive",
+          "jobs": [
+            {
+              "id": "construction_00000015",
+              "state": "BUILDING",
+              "progress": 1266
+            },
+            {
+              "id": "construction_00000016",
+              "state": "PLANNED",
+              "progress": 0
+            }
+          ],
+          "starting_job": "construction_00000016"
+        },
+        {
+          "case": "off-refusal",
+          "jobs": [
+            {
+              "id": "construction_00000015",
+              "state": "BUILDING",
+              "progress": 1266
+            },
+            {
+              "id": "construction_00000016",
+              "state": "PLANNED",
+              "progress": 0
+            }
+          ],
+          "starting_job": "construction_00000016"
+        },
+        {
+          "case": "on-positive",
+          "jobs": [
+            {
+              "id": "construction_00000015",
+              "state": "BUILDING",
+              "progress": 1266
+            },
+            {
+              "id": "construction_00000016",
+              "state": "PLANNED",
+              "progress": 0
+            }
+          ],
+          "starting_job": "construction_00000016"
+        },
+        {
+          "case": "on-refusal",
+          "jobs": [
+            {
+              "id": "construction_00000015",
+              "state": "BUILDING",
+              "progress": 1266
+            },
+            {
+              "id": "construction_00000016",
+              "state": "PLANNED",
+              "progress": 0
+            }
+          ],
+          "starting_job": "construction_00000016"
+        }
+      ],
+      "remaining_deficits": [
+        "OS proof: unsafe artifact path",
+        "case off-positive: orphan cargo endpoint",
+        "case off-refusal: orphan cargo endpoint",
+        "case on-positive: orphan cargo endpoint",
+        "case on-refusal: orphan cargo endpoint",
+        "final regression: unsafe artifact path"
+      ],
+      "elapsed_seconds": 16.21374141704291
+    },
+    "CARGO_ENDPOINT_READONLY_DIAGNOSTIC.json": [
+      {
+        "first_label": "original",
+        "original_requests": [
+          "supply.logistics_request.000000000001",
+          "supply.logistics_request.000000000002"
+        ],
+        "active_inventory_ids": [
+          "cargo:staff_gina",
+          "facility.inventory:facility_00000005"
+        ],
+        "requests": [
+          {
+            "request_id": "supply.logistics_request.000000000001",
+            "source_inventory_id": "facility.inventory:facility_00000005",
+            "destination_inventory_id": "facility.inventory:facility_00000006",
+            "item_requirements": {
+              "ingredient/raw_food": 4
+            },
+            "priority": 50,
+            "created_at": 728,
+            "deadline": -1,
+            "total_weight": 4,
+            "reserved_stack_ids": [
+              "stack_00000001"
+            ],
+            "reservation_ids": [
+              "reservation_00000001"
+            ],
+            "assigned_carrier_id": "staff_gina",
+            "state": "DELIVERING",
+            "retry_count": 0,
+            "state_reason": "",
+            "state_changed_at": 735
+          },
+          {
+            "request_id": "supply.logistics_request.000000000002",
+            "source_inventory_id": "facility.inventory:facility_00000005",
+            "destination_inventory_id": "facility.inventory:facility_00000006",
+            "item_requirements": {
+              "ingredient/raw_food": 4
+            },
+            "priority": 50,
+            "created_at": 729,
+            "deadline": -1,
+            "total_weight": 4,
+            "reserved_stack_ids": [
+              "stack_00000001"
+            ],
+            "reservation_ids": [
+              "reservation_00000002"
+            ],
+            "assigned_carrier_id": "",
+            "state": "RESERVED",
+            "retry_count": 0,
+            "state_reason": "NO_AVAILABLE_PORTER_OR_ROUTE",
+            "state_changed_at": 729
+          }
+        ]
+      }
+    ],
+    "CARGO_RULE_READONLY_DIAGNOSTIC.json": {
+      "candidate": "592809bfdaf6a1bbc5ec9cbaeff71a7bb072add9",
+      "scope": "Root readonly prototype only. Candidate/checker/evidence files unchanged, no formal acceptance.",
+      "basis": "Authoritative SupplyLogisticsBridge.validate_crosslinks lines508-554 resolves facility inventory endpoints by facility ownership and allows unassigned RESERVED request with valid reservation; destination inventory materializes upon delivery.",
+      "remaining_deficits": [
+        "OS proof: unsafe artifact path",
+        "final regression: unsafe artifact path",
+        "unapproved typed migration delta off-positive/systems/runtime/world/revisions/support",
+        "unapproved typed migration delta on-positive/systems/runtime/world/revisions/support"
+      ],
+      "elapsed_seconds": 78.40071395831183
+    },
+    "ACTUAL_WORLD_REVISION_DELTAS.json": [
+      {
+        "case": "off-positive",
+        "original_world_revisions": {
+          "world": 144,
+          "occupancy": 144,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 142
+        },
+        "checkpoint_world_revisions": {
+          "world": 150,
+          "occupancy": 150,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 150
+        }
+      },
+      {
+        "case": "on-positive",
+        "original_world_revisions": {
+          "world": 144,
+          "occupancy": 144,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 142
+        },
+        "checkpoint_world_revisions": {
+          "world": 150,
+          "occupancy": 150,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 150
+        }
+      },
+      {
+        "case": "off-refusal",
+        "original_world_revisions": {
+          "world": 144,
+          "occupancy": 144,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 142
+        },
+        "checkpoint_world_revisions": {
+          "world": 144,
+          "occupancy": 144,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 142
+        }
+      },
+      {
+        "case": "on-refusal",
+        "original_world_revisions": {
+          "world": 144,
+          "occupancy": 144,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 142
+        },
+        "checkpoint_world_revisions": {
+          "world": 144,
+          "occupancy": 144,
+          "walkability": 99,
+          "excavation": 0,
+          "support": 142
+        }
+      }
+    ]
+  },
+  "source_basis": {
+    "scripts/supply/supply_logistics_bridge.gd:508": [
+      "static func validate_crosslinks(requests: Dictionary, staff: StaffService, inventory: InventoryService, facilities: FacilityService) -> bool:",
+      "\tvar carrier_owners: Dictionary = {}",
+      "\tvar active_task_ids: Dictionary = {}",
+      "\tfor id: StringName in _request_ids(requests):",
+      "\t\tvar request: LogisticsRequest = requests[id]",
+      "\t\tvar source := _facility_for_inventory(facilities, request.source_inventory_id)",
+      "\t\tvar destination := _facility_for_inventory(facilities, request.destination_inventory_id)",
+      "\t\tif not String(request.source_inventory_id).begins_with(\"facility.inventory:\") or not String(request.destination_inventory_id).begins_with(\"facility.inventory:\"):",
+      "\t\t\treturn false",
+      "\t\tif not request.is_terminal() and (source == null or destination == null):",
+      "\t\t\treturn false",
+      "\t\tvar task := _active_task(staff, id)",
+      "\t\tif request.state in [LogisticsRequest.State.RESERVED, LogisticsRequest.State.BLOCKED] or request.is_terminal():",
+      "\t\t\tif task != null:",
+      "\t\t\t\treturn false",
+      "\t\t\tif request.state == LogisticsRequest.State.RESERVED and not _reservation_quantities_valid(request, inventory, true):",
+      "\t\t\t\treturn false",
+      "\t\t\tcontinue",
+      "\t\tif request.state not in [LogisticsRequest.State.ASSIGNED, LogisticsRequest.State.PICKING_UP, LogisticsRequest.State.DELIVERING]:",
+      "\t\t\treturn false",
+      "\t\tvar worker := staff.get_staff(request.assigned_carrier_id)",
+      "\t\tif worker == null or worker.role_id != &\"porter\" or carrier_owners.has(worker.staff_id) \\",
+      "\t\t\tor task == null or task.assigned_staff_id != worker.staff_id or worker.current_task_id != task.task_id \\"
+    ],
+    "scripts/world/world_service.gd:652": [
+      "func _mark_dirty(",
+      "\tcells: Array,",
+      "\toccupancy_changed: bool,",
+      "\twalkability_changed: bool,",
+      "\texcavation_changed: bool,",
+      "\tsupport_changed: bool",
+      ") -> void:",
+      "\trevision += 1",
+      "\tif occupancy_changed:",
+      "\t\toccupancy_revision = revision",
+      "\tif walkability_changed:",
+      "\t\twalkability_revision = revision",
+      "\tif excavation_changed:",
+      "\t\texcavation_revision = revision",
+      "\tif support_changed:",
+      "\t\tsupport_revision = revision",
+      "\tfor cell: Variant in cells:",
+      "\t\tif cell is Vector3i and is_in_bounds(cell):",
+      "\t\t\t_dirty_cells[cell] = true"
+    ]
+  },
+  "instructions": [
+    "Read only this compact file first; no broad history or full evidence dump.",
+    "Do not modify fixture/runtime/collector/native semantics already passed. Fix checker decoding/crosslink/counter checks, realistic targeted tests and metadata together. Original6conditions and30/88 unchanged.",
+    "Native bytes must stay immutable. Decide whether tested runtime inputs exactly match final after tooling-only changes; do not silently re-label old tested SHA. If final validator requires exact full source-map, execute final native once after all tooling fixes consolidated.",
+    "Freeze all source edits before running checker tests; prior README mutation during tests caused preventable stale proof retry.",
+    "Root external native collector should check first-writer actual scalar/crosslink semantics before running all other phases to avoid repeated whole collection.",
+    "Independent review and OS/final regression remain mandatory."
+  ]
+}
@@ -0,0 +1,16 @@
+{
+  "classification": "Historical full record preserved; compact provenance reference",
+  "original_raw_sha256": "ab1fcf46ef73f2157f16f69394b4039a562c031fae8d407adca013a452226e2f",
+  "original_raw_bytes": 1082602,
+  "git_reference": {
+    "commit": "6c7c724410c350afe3d49fa8ec52defe20e78041",
+    "path": "docs/plans/original-completion-2026-10-02/execution/p08-02/implementation.json"
+  },
+  "second_full_copy_git_reference": {
+    "commit": "e59206b9b2578ddb4a1ec023f836d413a7a8fbfb",
+    "path": "docs/plans/original-completion-2026-10-02/execution/p08-02/implementation-historical-6c7c724.json"
+  },
+  "root_lossless_archive": "artifacts/original-completion-2026-10-02/p08-02-preserved-r01/full-submitted-implementation.json.gz",
+  "raw_archive_roundtrip_verified": true,
+  "current_acceptance_claimed": false
+}
@@ -0,0 +1,330 @@
+{
+  "task_id": "P08-02",
+  "status": "submitted",
+  "acceptance": "pending",
+  "base_commit": "e196578c1a4ad2fdf84642565bd102e524be386f",
+  "spec_sha256_stripped_utf8": "19f02bb7912a4d7354e565186f02366fc1d4dd698468d26142e8204fd14ebfb0",
+  "spec_sha256_raw": "01b3600e8815b514ffd5c4d341d77a6a3e8341064796c1dae706062b746ba6aa",
+  "scope": "Metadata-only synchronization against Git 1545bd42; no code, fixture, runtime, marker or acceptance changes.",
+  "outputs": [
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json",
+      "sha256": "c4c6dbea08a92682c692a280dbc90702ccbe63702a4f2624519b18d42930e18f",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/s1/test_p08_combined_migration.gd",
+      "sha256": "9284a8cfb478b4c8d69f6d8166eec6c41107e3902029289b3c0e9ba48c370855",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/s1/test_p08_combined_migration.gd.uid",
+      "sha256": "8c3a70d0ce619b8cb98dc003eb6c53a31f167a686179a3ffc105f7cd4d856da5",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/fixtures/p08-02/README.md",
+      "sha256": "e88ca33fdb4e96602d1fb108d71a9c35b6fa054619ecf6f1396e9a6c5e0ebd98",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/fixtures/p08-02/mixed_world.gd",
+      "sha256": "a23f8a686be1d77e4874b9956eef89be4756f6e5eb01cc62454c3845acc62c25",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/fixtures/p08-02/reader.gd",
+      "sha256": "a760d0e45979d747dbd1f8710033bdce13287b00eb879d947d8378ff920ed1be",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/fixtures/p08-02/writer.gd",
+      "sha256": "1a918b5509773b4b07a27d47ee44583b0eb5288138f7bf896088a7913773c260",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tools/run_p08_mixed_migration.py",
+      "sha256": "7e86737e6354a4734726ba8d3171ad5f58d6c0380aba5a0fa3c57879d580e579",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tools/check_p08_migration_evidence.py",
+      "sha256": "928353233bf85436a5aaf8c4f77f3f82472d94b8ad2646cb1b030baf92b3b5dc",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tools/test_p08_migration_evidence.py",
+      "sha256": "fd9ef7ec63f53dfd5e04e261606c9303d01a2e6590e22a35fef2e35df1429280",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p08-02/CONDITION_MATRIX.md",
+      "sha256": "6673051df9ae10f2df9b1812828e71ad9f5f24c433572defeef4e0978962a4e8",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "docs/plans/original-completion-2026-10-02/execution/p08-02/implementation.json",
+      "sha256": "fee85e6f4bb2824fc64bdfa275302f503a3234d83ab6c473c5e3ae6fdf91a3a6",
+      "hash_scope": "canonical normalized self record: replace this sha256 with null, UTF-8 json.dumps(ensure_ascii=False,sort_keys=True,separators=(comma,colon)), no newline",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/fixtures/p08-02/mixed_world.gd.uid",
+      "sha256": "d7549f933b74f5e807cd2d3b3adcdd083af4a3bd331614314ff7bfd7b0903f31",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/fixtures/p08-02/reader.gd.uid",
+      "sha256": "3e68ce192d5770e3823df9699c5c99ebb618fe0a480b4d56913624941900b08a",
+      "hash_scope": "raw bytes",
+      "disposition": "r04 current source; retained paths and UID/marker entries"
+    },
+    {
+      "path": "tests/fixtures/p08-02/writer.gd.uid",
+      "sha256": "8f150654767de0c66329d7d9e84d306c4fa5a65c918e04fb520b626b39f68334",
+      "hash_scope": "raw bytes",
+      "disposition": "retained unchanged UID"
+    }
+  ],
+  "self_hash_note": "A raw self-containing SHA cannot be embedded in itself. This explicit normalized hash covers implementation.json; Root must separately measure its raw SHA and the final full packet on actual submitted SHA. No final packet measurement claimed.",
+  "commands_actually_run": [
+    {
+      "command": "python3 -B AST parse of three P08 Python tools",
+      "exit_code": 0,
+      "result": "3 parses passed"
+    },
+    {
+      "command": "python3 -B tools/test_p08_migration_evidence.py (first run)",
+      "exit_code": 1,
+      "result": "2 tests; positive stale source map because worker changed README during test"
+    },
+    {
+      "command": "python3 -B tools/test_p08_migration_evidence.py (stable-source rerun)",
+      "exit_code": 0,
+      "result": "2 tests in 33.523s, OK; synthetic only",
+      "classification": "Historical worker run; superseded as current local-check metadata, preserved without relabeling."
+    },
+    {
+      "command": "python3 -B tools/test_p08_migration_evidence.py (Repair 7, final frozen sources)",
+      "exit_code": 0,
+      "result": "4 tests in 55.197s, OK; synthetic only"
+    }
+  ],
+  "local_checks": {
+    "ast_parse": "passed, three Python sources",
+    "checker_tests": {
+      "command": "python3 -B tools/test_p08_migration_evidence.py",
+      "tests_run": 4,
+      "elapsed_seconds": 55.197,
+      "result": "OK",
+      "exit_code": 0,
+      "scope": "Synthetic local checker tests only; source edits frozen before this single run. Not native, OS, full regression or acceptance evidence.",
+      "final_raw_sha256": {
+        "tools/test_p08_migration_evidence.py": "fd9ef7ec63f53dfd5e04e261606c9303d01a2e6590e22a35fef2e35df1429280",
+        "tools/check_p08_migration_evidence.py": "928353233bf85436a5aaf8c4f77f3f82472d94b8ad2646cb1b030baf92b3b5dc",
+        "docs/plans/original-completion-2026-10-02/execution/p08-02/ROOT_REPAIR_INPUT-r04.json": "23ef44a0775ca53f1f67d6d64fcc96cd33eae935478768e9ce9431796eaa12ef"
+      }
+    },
+    "native_or_full_regression_run": false,
+    "evidence_reuse_pending": "Reuse of earlier native 8, OS and final 174 regression evidence is pending Root confirmation of exact source_map, input, config and environment matches. If restored r04 is in the selected source map, Root must decide whether to re-collect. Independent review and integration remain pending; no unconfirmed evidence counts asserted."
+  },
+  "pending_root_conditions": [
+    "mixed_construction",
+    "occupancy_change",
+    "actual_actor_positions",
+    "combined_rescue_logistics_ev",
+    "no_overlap_orphan_loss",
+    "unsolvable_preservation",
+    "native_Godot_and_OS_execution",
+    "separate_PID_writer_reader",
+    "normal_menu_OS_proof",
+    "final_full_regression",
+    "final_submitted_packet_measurement",
+    "applicable_Windows_coverage",
+    "independent_Opus_review",
+    "main_integration_current_final_verification",
+    "ledger_reflection_and_original_unit_closure"
+  ],
+  "product_fix_proposal": null,
+  "index_schema": {
+    "name": "p08-evidence-v1",
+    "location": "BUILD_OUTPUT_DIR/p08-evidence/index.json",
+    "authority": "tools/check_p08_migration_evidence.py check() and tools/run_p08_mixed_migration.py collect()",
+    "top_level": {
+      "schema": "literal p08-evidence-v1",
+      "commit": "40 lowercase hex actual submitted commit; collector checks HEAD",
+      "source_map": "exact runner.source_refs(root) path -> raw SHA-256 including fixture/suite/tool sources",
+      "inputs": "exact frozen docs/spec/inputs/p08-02 immediate file path -> raw SHA-256",
+      "spec_sha256": "stripped UTF-8 frozen spec SHA",
+      "marker_contract_sha256": "raw marker contract SHA",
+      "cases": "ordered off-positive, off-refusal, on-positive, on-refusal",
+      "phases": "collector import/parse and case receipt paths",
+      "conditions": "all six IDs -> all four cases, except unsolvable_preservation -> both refusal cases",
+      "artifacts": "relative path -> {bytes: integer, sha256: raw digest}; no absolute/traversal/symlink; index itself excluded",
+      "os_proof": "relative OS proof JSON path; initially null in collector",
+      "regression": "relative final regression proof JSON path; initially null in collector",
+      "acceptance": "literal pending, including after integrity verification",
+      "collection_error": "null for integrity gate"
+    },
+    "case": {
+      "id": "operations-kind",
+      "operations": "off|on",
+      "kind": "positive|refusal",
+      "directory": "relative pair directory",
+      "phases": "writer then reader receipt paths (two)",
+      "files": "collector inventory path -> bytes/sha256; checker artifacts is content authority"
+    },
+    "phase_receipt": "actual_pid unique positive integer; phase, command argv, test, source_sha256, log relative to receipt parent; exit_code=0, engine_ended=true; native_process exit_code/helper_exit_code=0,timed_out=false,lifecycle_error=null; actual_private_profile.report fresh_before_parent_initialize=true,profile_writes_before_guard=0,actual_user_data_dir=expected_user_data_dir",
+    "raw_native_lifecycle": "receipt parent/phase/{started.json,ended.json,outer-owned-finally.json}. Start/end actual_pid and command match receipt. Start live_identity_exact or tracked_child_ended_before_initial_probe. End exit_code=0,engine_ended=true. Outer actual_captured_pids=[actual_pid],all_captured_ended=true,no cleanup errors or foreign signals. Raw version/argv/lifecycle must be actual Root capture.",
+    "strict_logs": "receipt parent/log: native version banner and exact role completion template, current source_sha256; full regression checks existing strict contracts for every current roster suite",
+    "typed_state": "Every .var raw Variant has .json typed tree: Dictionary entries=[typed key,typed value], Array items plus element_type/element_class, scalar type and exact var_to_str text. Required identity,original,after-live,before-members,after-members,writer/reader-process,writer/reader-checkpoint,writer/reader-minute-001 through 160,writer/reader-events. Preserve all fields and uncapped events. Driver also retains first-candidate,preview,migration diagnostics.",
+    "formal_members": "original/result/backup formal/{world.bin,manifest.json,thumbnail.png,journal.log}; raw artifact hashes bound to before/after typed member maps. Refusal preserves full original and pre-existing backup.",
+    "normal_OS_proof": "commit and exact source_map; input_method=native_os,setup=controlled_old_save; ordered preview,cancel,confirm,changed_source_rejection. Each action links input_receipt (method=native_os,event_type mouse|keyboard,target_pid positive int,timestamp_ns positive),screen_before/after,model_before/after,formal_before/after. Non-confirm formal JSON maps equal. Root independently assesses actual OS input/screens/state; signal-emitted UI is handler evidence only.",
+    "final_regression": "commit,directory,input,ended artifact paths. Input selected_source_map exact and roster runner.roster(root). Ended error null,cleanup_errors/guard_errors empty,ordered phases full roster each strict raw log,exit_code=0,engine_ended=true.",
+    "limits": "This documents implemented gates, not an acceptance reducer. Import/parse and config/environment runner-input are retained and hashed by driver; checker explicitly gates case phases. Root independently checks native version/config/environment, normal OS behavior and original conditions. Synthetic metadata cannot prove actual execution."
+  },
+  "example": {
+    "classification": "Synthetic machine-readable complete index from retained Proof; diagnostic ONLY, never native/OS/regression acceptance evidence.",
+    "construction": "tools/test_p08_migration_evidence.py Proof creates all linked bytes and reachable whole-check positive. Embedded documents illustrate receipts/lifecycle/OS/regression/typed records. Digests belong to the disposable synthetic fixture, not delivered acceptance artifacts; reproduce with Proof in a worktree-local disposable directory.",
+    "complete_example_generator": {
+      "source": "tools/test_p08_migration_evidence.py",
+      "source_raw_sha256": "fd9ef7ec63f53dfd5e04e261606c9303d01a2e6590e22a35fef2e35df1429280",
+      "class": "Proof",
+      "constructor": "Proof(Path(fresh_temporary_directory))",
+      "project_root_binding": "module ROOT resolved from unchanged generator inside this exact candidate source tree",
+      "generated_full_index": "proof.index",
+      "generated_representative_documents": "{path: json.loads((proof.path / path).read_text()) for path in representative_artifact_document_paths}",
+      "native_or_os_runs": 0
+    },
+    "index_top_level_fields": [
+      "schema",
+      "commit",
+      "source_map",
+      "spec_sha256",
+      "marker_contract_sha256",
+      "inputs",
+      "cases",
+      "conditions",
+      "artifacts",
+      "acceptance",
+      "collection_error",
+      "phases",
+      "os_proof",
+      "regression"
+    ],
+    "representative_artifact_document_paths": [
+      "runs/off-positive-writer/off-positive-writer-receipt.json",
+      "runs/off-positive-reader/off-positive-reader-receipt.json",
+      "runs/off-positive-writer/off-positive-writer/started.json",
+      "runs/off-positive-writer/off-positive-writer/ended.json",
+      "runs/off-positive-writer/off-positive-writer/outer-owned-finally.json",
+      "os.json",
+      "os/preview/input.json",
+      "regression.json",
+      "regression/input.json",
+      "regression/ended.json",
+      "pairs/off-positive/identity.json",
+      "pairs/off-positive/writer-process.json",
+      "pairs/off-positive/before-members.json"
+    ],
+    "fixture_config_inputs": {
+      "fixture_sources": {
+        "tests/s1/test_p08_combined_migration.gd": "9284a8cfb478b4c8d69f6d8166eec6c41107e3902029289b3c0e9ba48c370855",
+        "tests/s1/test_p08_combined_migration.gd.uid": "8c3a70d0ce619b8cb98dc003eb6c53a31f167a686179a3ffc105f7cd4d856da5",
+        "tests/fixtures/p08-02/README.md": "e88ca33fdb4e96602d1fb108d71a9c35b6fa054619ecf6f1396e9a6c5e0ebd98",
+        "tests/fixtures/p08-02/mixed_world.gd": "a23f8a686be1d77e4874b9956eef89be4756f6e5eb01cc62454c3845acc62c25",
+        "tests/fixtures/p08-02/reader.gd": "a760d0e45979d747dbd1f8710033bdce13287b00eb879d947d8378ff920ed1be",
+        "tests/fixtures/p08-02/writer.gd": "1a918b5509773b4b07a27d47ee44583b0eb5288138f7bf896088a7913773c260",
+        "tools/run_p08_mixed_migration.py": "7e86737e6354a4734726ba8d3171ad5f58d6c0380aba5a0fa3c57879d580e579",
+        "tools/check_p08_migration_evidence.py": "928353233bf85436a5aaf8c4f77f3f82472d94b8ad2646cb1b030baf92b3b5dc",
+        "tools/test_p08_migration_evidence.py": "fd9ef7ec63f53dfd5e04e261606c9303d01a2e6590e22a35fef2e35df1429280"
+      },
+      "native_runner_input_shape": {
+        "protocol": "p08-mixed-v1",
+        "commit": "<actual final commit>",
+        "selected_source_map": "<exact source map>",
+        "engine": "<actual executable>",
+        "engine_sha256": "<raw SHA>",
+        "owner_pid": "<actual collector PID>",
+        "default_player": "<protected profile record>",
+        "diagnostic_seed": 42588
+      },
+      "case_environment": {
+        "P08_PAIR_ROOT": "<absolute guarded pair output>",
+        "P08_OPERATIONS": "off|on",
+        "P08_CASE": "positive|refusal"
+      },
+      "timeouts": "unchanged: collection 900s, phase maximum 180s",
+      "formal_validation": "Root copies actual evidence into allocated build directory; --verify-only reads BUILD_OUTPUT_DIR/p08-evidence/index.json"
+    },
+    "purpose": "Synthetic Proof generator documents current schema. Historical reconstruction measurements are preserved in Git, not asserted for changed fixture.",
+    "previous_full_inline_record": {
+      "commit": "1545bd42d689a9a6382e2b003ee0550fa197f6e4",
+      "path": "docs/plans/original-completion-2026-10-02/execution/p08-02/implementation.json",
+      "sha256": "ae4a9f11c4e10a2be31d8fc6429577ff5f14f6097fae4f2d5a6a321937fefdac",
+      "bytes": 16946,
+      "hash_scope": "Git raw bytes",
+      "preservation": "Full previous metadata/example remains byte-preserved in Git; historical links and SHA values unchanged."
+    }
+  },
+  "historical_record": {
+    "path": "docs/plans/original-completion-2026-10-02/execution/p08-02/implementation-historical-6c7c724.json",
+    "sha256": "94321c2e924ef509738c8c4302c9e68854b9ce305830352d2dbb51d43f9ff34c",
+    "original_full_raw_sha256": "ab1fcf46ef73f2157f16f69394b4039a562c031fae8d407adca013a452226e2f",
+    "classification": "Reference to byte-preserved original full historical record in fixed Git commits and Root archive; not current canonical evidence"
+  },
+  "repair_r04": {
+    "seed": 42588,
+    "construction_cost": {
+      "gold": 7110,
+      "materials": 88
+    },
+    "signing_gold": 150,
+    "food_quantity": 8,
+    "food_gold": 24,
+    "initial": {
+      "gold": 5000,
+      "materials": 50
+    },
+    "previous_change_resources": {},
+    "derived_delta": {
+      "gold": 2284,
+      "materials": 38
+    },
+    "mismatch": "Previous zero added resources insufficient; no acceptance narrowed.",
+    "git_history_verification": "Both fixed Git references raw SHA matched ab1fcf46ef73f2157f16f69394b4039a562c031fae8d407adca013a452226e2f, 1082602 bytes",
+    "archive_verification": "Reuse Root supplied roundtrip evidence; archive not opened or executed."
+  },
+  "landing_repair": {
+    "input": "ROOT_REPAIR_INPUT-r04.json",
+    "ground": "initialized world paths within rank 1 bounds",
+    "upper": "complete each stair pair before ordering next floor, using maximum registered build_minutes",
+    "nearby_preflight": "rank bounds, registered stair definitions and existing completed logistics endpoints checked locally",
+    "acceptance_sources": "all 18 retained; no omissions",
+    "packet_limit_bytes": null,
+    "packet_measurement": "Final actual submitted Runner packet measurement remains Root responsibility; obsolete byte cap removed; no source omission or compression.",
+    "collection_timeout_seconds": 900
+  },
+  "metadata_sync": {
+    "source_commit": "1545bd42d689a9a6382e2b003ee0550fa197f6e4",
+    "current_tool_raw_sha256": {
+      "tools/check_p08_migration_evidence.py": "928353233bf85436a5aaf8c4f77f3f82472d94b8ad2646cb1b030baf92b3b5dc",
+      "tools/test_p08_migration_evidence.py": "fd9ef7ec63f53dfd5e04e261606c9303d01a2e6590e22a35fef2e35df1429280"
+    },
+    "source_map": "run_all_tests.py source_refs enumerates autoload/scripts/scenes/data/tests/assets/tools plus project.godot/export_presets.cfg/Makefile/AGENTS.md, excluding docs. Only docs changed, so source refs unchanged.",
+    "worker_validation": "JSON parse, Git raw SHA equality, generator Proof reference existence; no checker/native/Godot/full regression execution.",
+    "review_material_context_gap": "No .review-material or explicit complete 18-source Runner packet manifest provided in this checkout. Exact packet bytes cannot be claimed without Runner operation (prohibited); Root must measure complete actual submitted packet. No required source was removed."
+  }
+}
@@ -23,3 +23,5 @@ Claude Opus5.5の記録済み判断で、同じ登録タスク/既存worktreeを
 追補r07（コード候補不変9641ed52）: 実配置受付の工事70percent/min444を通常quick save→通常別名slot、既存manual_ui全4filesの内容保全、別PID39701→40866の復元直後全snapshot118528B byte一致を取得。通常再開で工事完成をCUA観測、後者の独立正式pointer/resumeは未達として保持。最初のOpus reviewは採取provenance資料不足でchanges_requested、実行済みRoot before/after全文/方法/日時とnative tick、全4live rehashを補い再review限定PASS、新engine再実行0。全88正式完了増加0。

 追補r08: 同一9641でnative49041の通常有効受付1command/job/charge→重複拒否text→menu3/modal→取消の全Runtime・選択・path保全、PNG8とraw/JSON snapshotsを固定、別Opus限定PASS。Rootcollectorのr04 field誤りFAILを保持しr05のみ有効。全modal/配属/背後入力/正常main_scene起動/上流/最終review/Windowsを未達として維持。MP01承認用候補案は追加1回の直接許可（call_de866e18b25942ee8992263aa0189278）を受け、個別cap2・使用済み2を保持。同一SHAの既存2文書を再利用し、実Opus5.5のaction run／Sol選択に基づく同一登録ワーカーを起動。追加許可待ちは解消し、正式検証・独立レビュー・統合はまだ未了。製品数値・P06-01受入・30/88は不変。
+
+追補r09: MP-01-r02は同じ登録タスクで修正2/2→提出6b78f8fd→正式資料検証/別Opus独立review→統合/最終65a4fe2bを完了。成果は未承認の数値・更新順序・移行候補の2文書で、P06-01/P24-02の正式受入を代用しない。旧「資料検証・レビュー・統合未了」は現版について解消。次の原成果候補はP13-03の既存修正・証拠再照合。
@@ -0,0 +1,182 @@
+{
+  "scope": "P22 new worktree stable tracked inputs only; every worker allowed path excluded",
+  "authorization": "User content-preserving compression etc; no unapproved data deletion",
+  "before_free_bytes": 360034304,
+  "after_free_bytes": 440082432,
+  "observed_delta_free_bytes": 80048128,
+  "processed_files": 24,
+  "elapsed_seconds": 0.9416218330152333,
+  "rows": [
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/audio/bgm/tree_theme_back_candidate.wav",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/audio/bgm/tree_theme_back_candidate.wav",
+      "sha256": "efe4cc1aa588661d73376720e4278427f7220ce93a5d446f198c5af607c141ca",
+      "bytes": 7526444,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/audio/bgm/tree_theme_front_candidate.wav",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/audio/bgm/tree_theme_front_candidate.wav",
+      "sha256": "6df0a7af307327f703c9325f5ca2ac456888102d50ef1fa76bf4cdf19d2b86cb",
+      "bytes": 7526444,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-main-gameplay-visual-mock-v1.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-main-gameplay-visual-mock-v1.png",
+      "sha256": "58877bb1afbf0e72af6531cadab01eca82f9bd8cefb0cdb45f81d6d2dbb83717",
+      "bytes": 2722232,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-main-gameplay-visual-mock-v2-japanese-fantasy.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-main-gameplay-visual-mock-v2-japanese-fantasy.png",
+      "sha256": "1c079ebb8b2b9610df0e79a2750cc5a0db53f26d137b6df511b12cb6884532d0",
+      "bytes": 3049138,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-main-gameplay-visual-mock-v3-tower-style.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-main-gameplay-visual-mock-v3-tower-style.png",
+      "sha256": "f802d2b4f275f136fcacc963f7d06228f5d71dbc2399a19f7e04c6bc7531321b",
+      "bytes": 3076090,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-runtime-ui-v3-assets-front.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-runtime-ui-v3-assets-front.png",
+      "sha256": "e54ff252bae66010dc885846acdcdb0117b930e0e3cfc8f5459acc2841eabf0d",
+      "bytes": 1461992,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-runtime-ui-v4-icons.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-runtime-ui-v4-icons.png",
+      "sha256": "b0826ffce116d96dbe5b901174713f84b55a0e72931f29821e0947b844b9c1b8",
+      "bytes": 1317405,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-runtime-ui-v5-map-icons.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-runtime-ui-v5-map-icons.png",
+      "sha256": "aca56c954b209b0a03342c0fde576cef15bfaa2ce2a1f9feedd51744fcfdb42c",
+      "bytes": 1321334,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-runtime-ui-v6-actors-4k.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-runtime-ui-v6-actors-4k.png",
+      "sha256": "9b8a1d9e2e4408b7ee99505d1978a44a489eb8b6945d669d1c52e7e220937e79",
+      "bytes": 6569282,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-runtime-ui-v6-actors.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-runtime-ui-v6-actors.png",
+      "sha256": "8f9ea1b8bbc779e3f401d4cfdc8dcb0d10b95b7f87f37d3737af9bc85aa9dddd",
+      "bytes": 1322150,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-runtime-ui-v7-skins-4k.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-runtime-ui-v7-skins-4k.png",
+      "sha256": "a32d61772e06b944cf7aeb7a2dd0bd1ccfac7cbb3d8e293a6d7075f780f48904",
+      "bytes": 8849219,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/mockups/the-tree-runtime-ui-v7-skins.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/mockups/the-tree-runtime-ui-v7-skins.png",
+      "sha256": "f0dec82c2da661df52124cd3c2f59c3ac94db9cb5d384846d42f1901ada370cf",
+      "bytes": 1778605,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/themes/japanese_fantasy/actor-markers-v2.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/themes/japanese_fantasy/actor-markers-v2.png",
+      "sha256": "b742c207613d773e47f21c917975a2ba0eec8a2d9485ff655fef37e3ebf4bde4",
+      "bytes": 2165570,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/themes/japanese_fantasy/facility-icons-v2.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/themes/japanese_fantasy/facility-icons-v2.png",
+      "sha256": "6fb830fbe3961125fe0f3e640efe63ecba4de5ea6fb758eaf0da2738940fa1b6",
+      "bytes": 1848036,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/themes/japanese_fantasy/system-icons-v2.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/themes/japanese_fantasy/system-icons-v2.png",
+      "sha256": "1f1d4f5e20ba4de61e3fb967352b68db435fa36ec5e4bacab2802f132e3b8d40",
+      "bytes": 1786659,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/themes/japanese_fantasy/ui-skin-v1.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/themes/japanese_fantasy/ui-skin-v1.png",
+      "sha256": "4b4906cc9c6ed3fdb5330bfc11177376e5fec10afa3f2dac9318dbaf71833ff2",
+      "bytes": 2492477,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/themes/japanese_fantasy/world-back-v1.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/themes/japanese_fantasy/world-back-v1.png",
+      "sha256": "2b0dbf07c17e677ed023c56b1e90f013c40362f46c427950033868b042508c7c",
+      "bytes": 2616183,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/assets/themes/japanese_fantasy/world-front-v1.png",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/assets/themes/japanese_fantasy/world-front-v1.png",
+      "sha256": "02b52ea05bdb4bbe78b8c905374052505bb73411eb7f2b0578e9b1a82994cde5",
+      "bytes": 2774704,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/docs/plans/original-completion-2026-10-02/atomic_requirements.json",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/atomic_requirements.json",
+      "sha256": "44530bb929fcc8c68c06d0d94da66dd04b8db7680af731b5037cd44677502938",
+      "bytes": 6962475,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/all-slot-current-candidate-contracts.json",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/all-slot-current-candidate-contracts.json",
+      "sha256": "5cf93b6b3fd9d0cc060075878804f65195c0d90711c969cc36e2f58f3a1917fd",
+      "bytes": 1866918,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/docs/plans/original-completion-2026-10-02/current_evidence_links.json",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/current_evidence_links.json",
+      "sha256": "db1837bcc8497201134297e312f4b266a297102285307ec3075d4e23632e26c2",
+      "bytes": 5957822,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/docs/plans/original-completion-2026-10-02/execution/p22-03/production_backlog.json",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/p22-03/production_backlog.json",
+      "sha256": "ccd3a46caacae6f87c2c752a3eef49048807bb760b8cfd1abdc65bf653768177",
+      "bytes": 1748832,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/docs/plans/original-completion-2026-10-02/facility_value_contracts.json",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/facility_value_contracts.json",
+      "sha256": "447388ba03a29bfac25f2bcd068665aedbb07ba7641ce86f2db93d44f4c9f326",
+      "bytes": 1851641,
+      "content_mode_owner_mtime_preserved": true
+    },
+    {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p22-02-contract/P22-02-implement/docs/plans/original-completion-2026-10-02/work_packages.json",
+      "anchor": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/work_packages.json",
+      "sha256": "af340d1897186cf20f21e5c441929156bcdba41d21d1a4806977da7a5511fea8",
+      "bytes": 1231960,
+      "content_mode_owner_mtime_preserved": true
+    }
+  ],
+  "worker_output_or_source_edited": false,
+  "product_anchor_modified": false,
+  "semantic_changes": 0
+}
@@ -223,7 +223,7 @@
    "ASSETS_PLATFORM_AUDIT.md": "a3a4b8ca0fb39a9abf88692285d26aa879815e092352ba304ef2758e71da50bd",
    "ATOMIC_REGISTER.md": "6070143b85b7c3b9b73d7c9768d88d2dae4d20407ad54a563cb6ffd74f2373ae",
    "ATOMIC_SEMANTIC_REVIEW.md": "c156b1fb57c2b4a900f27a19049510f3e9616e723d5edb3417f50d733de5be48",
-    "IMPLEMENTATION_PLAN.md": "2f1a933d1f47966b66945efc2d44747d7b9ea63cd223271fad0fad010f080ba3",
+    "IMPLEMENTATION_PLAN.md": "e3d5a83b65207a402f8b36a06f9893ab969adcbb5b97915930af1358b15749e1",
    "IMPORT_UNICODE_AUDIT.md": "88b2382bfbb3411fece8be7e6004ba21d8bf6a47e9d1f3cf573ea6638f79c12f",
    "P09_VALUE_CONTRACTS.md": "c5abdc4543e54033b1fcfd0943cba266f664d8c10968965fd36ade40da488a25",
    "PERFORMANCE_AUDIT.md": "c75e806acf825fc4a61f773a2cce7e71be335a1e25dbb15d98091097e8dc47c1",
@@ -254,6 +254,6 @@
    "validate_facility_value_contracts.py": "91640e2a76cd6cc9186f7b85c0bf379b24b6cac0d48962815235ee628e7ae43e",
    "validate_plan.py": "23678227d9b3c556f1bd903f4b5b3147c4a82ce5085e10055481026803451b80",
    "validator_update_checks.json": "f997d0f3de2cea29550840b1d5cb23647d64f81329de46758551e2b6c8fecc27",
-    "work_packages.json": "1d2e35b9c38e8fc18ac256620aabcf576221562dc3178548c77d5cdac2a14b9f"
+    "work_packages.json": "8bdfb665f07543bddac0b8e47caab916663673d4094f70eee2d0e9cef9e972b7"
  }
 }
@@ -6170,7 +6170,7 @@
    },
    "legacy_state": "in_progress",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。 MP-01-r02継続: 追加1回を直接承認（call_de866e18b25942ee8992263aa0189278）、個別cap2/使用2を保持。同一SHAの旧案2文書を再利用し、実Opus5.5のrun判断/Sol選択で同一登録ワーカーを起動。資料の正式検証・独立レビュー・統合は未了。製品値/P06-01受入/30・88分母は未変更。",
+    "current_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。 MP-01-r02承認用資料は追加許可後に同じSol担当で修正し、提出6b78f8fd・正式検証・別Opus5.5独立review PASS・最新main統合/最終検証65a4fe2bを完了。修正2/2保持。全37需要・53source pin・21候補比較・炉の容量判定・旧0/再送/D05を整理。数値/人物分類/更新順序/保存移行は未承認、製品未反映。P06-01はin_progress、原88正式完了増加0。",
    "remaining_deliverables": [
      {
        "id": "P06-01",
@@ -6197,17 +6197,23 @@
          {
            "path": "docs/plans/original-completion-2026-10-02/execution/mana-proposal-continuation-r03/counter-and-reuse-verification.json",
            "sha256_at_integration": "933df166de1e249756e3f91e0a55ea86c0b14b1761de00b052713aa4a5096c0e",
-            "scope": "Actual task cap1/used1 and same-worktree original proposal byte equality; no worker or new values applied",
+            "scope": "Historical pre-approval cap1/used1 and byte-equal reuse check; superseded current state is formal-traceability-r02.json; no game acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/mana-proposal-continuation-r03/formal-traceability-r02.json",
+            "sha256_at_integration": "21eb3136124ed76f7cc9f063e78eea74a773412dd22976535bc54a02fd23db66",
+            "scope": "Completed owner-requested unapproved proposal artifact; validation, independent review, integration and final all pinned. Not P06-01 game acceptance.",
            "current_game_acceptance_inferred": false
          }
        ],
-        "progress_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。 MP-01-r02継続: 追加1回を直接承認（call_de866e18b25942ee8992263aa0189278）、個別cap2/使用2を保持。同一SHAの旧案2文書を再利用し、実Opus5.5のrun判断/Sol選択で同一登録ワーカーを起動。資料の正式検証・独立レビュー・統合は未了。製品値/P06-01受入/30・88分母は未変更。",
+        "progress_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。 MP-01-r02承認用資料は追加許可後に同じSol担当で修正し、提出6b78f8fd・正式検証・別Opus5.5独立review PASS・最新main統合/最終検証65a4fe2bを完了。修正2/2保持。全37需要・53source pin・21候補比較・炉の容量判定・旧0/再送/D05を整理。数値/人物分類/更新順序/保存移行は未承認、製品未反映。P06-01はin_progress、原88正式完了増加0。",
        "remaining_gaps": [
-          "生成・蓄積・消費と初期値/係数の原本・承認・実装・試験用値の根拠対応。",
-          "旧ゼロ保存の意味、移行、残量境界の現版証拠と矛盾の有無。",
-          "13source差分を含む既存証拠の適用性、必要検証、独立レビューと全条件台帳反映。"
+          "承認用数値・炉対象分類・需要換算・D05更新順序・保存domain/移行元適用条件のオーナー判断。",
+          "承認後の生成・蓄積・消費接続、旧ゼロ保存の実移行・残量境界・原条件全体の現版証拠。",
+          "原P06-01の必要検証・独立レビュー・統合/最終を含む全条件完了。候補資料の完了を代用しない。"
        ],
-        "updated_at_jst": "2026-10-13T16:27:12.029767+09:00"
+        "updated_at_jst": "2026-10-13T17:09:33.500243+09:00"
      },
      {
        "id": "P06-02",
@@ -6303,7 +6309,7 @@
    ],
    "cross_cutting_acceptance_scope": "Completion requirements only, not achieved results. Apply each to relevant slices; non-applicable views require a recorded reason.",
    "initial_revision_state": "in_progress",
-    "updated_at_jst": "2026-10-02T07:25:10.042304+09:00",
+    "updated_at_jst": "2026-10-13T17:09:33.500243+09:00",
    "current_controlled_supply_outage_checkpoint": {
      "issued_by": "/root",
      "linked_at_jst": "2026-10-09T10:37:43.610273+09:00",
@@ -6760,8 +6766,17 @@
        "title": "旧配置の安全な変更",
        "work": "混合建設、占有変更、役者の実位置、救護・物流・EVをまとめて移行する。",
        "acceptance": "重複、孤立、消失がない。解消不能時は元配置とセーブを保つ。",
-        "state": "planned",
-        "evidence": []
+        "state": "in_progress",
+        "evidence": [],
+        "progress_summary": "実Opus判断でP08-02を次の原成果単位に選定。読み取り専用監査を開始し、原work/acceptanceを変更せず固定。P03-02の移動/EV/救護/物流/同時建設/後段拒否の7証拠を候補としてSHA照合し、適用版・混合batch・実位置・全参照・拒否保存の不足を確認中。個別診断を全混合受入へ拡張しない。新規実装/登録/全回帰は未起動、完了増分0。",
+        "remaining_gaps": [
+          "既存7証拠の適用source/input/settings/environmentを現採用版へ照合。証拠ファイルSHA一致だけでは現在適用を認定しない。",
+          "個別例を混合移行全体の受入へ置き換えない。混合batch・占有変更・全実位置/搬送参照の正例/拒否例を確認。",
+          "通常メニューのpreview/取消/確認と拒否時の原保存保全の実証を確認。handler試験をOS入力済みにしない。",
+          "必要な局所/影響範囲検証と、共有保存/配置コードを変更する場合だけ正確な最終版で全回帰。",
+          "全条件の独立Opus受入と必要統合・台帳反映。"
+        ],
+        "updated_at_jst": "2026-10-13T19:26:15.610772+09:00"
      },
      {
        "id": "P08-03",
@@ -7712,7 +7727,7 @@
    },
    "legacy_state": "planned",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "P13-03最終ゲーム記録は保存・未採用。許可済み支援RP13-01は修正2/2、最終1398aa2dに配置依存と負例fixture不良が残り未合格。追加修正を起動せず保留し、次候補P24-03へ順序変更。P13-01/P13-02未着手、内容資産の完成は未認定。",
+    "current_summary": "P13-03既存最終修正を読取再監査。共有参照の全展開で旧提出7645c551と7施設/84スロット/施設外6分類が完全一致。現production53sourceのうちmain.gd1件のみSHA差、現版再検索の全観測はSHA以外一致。通常--verify-onlyは18負例を拒否するが未提出/未受入。支援RP13-01最終1398aa2dの正式55試験は入れ子Seatbeltで4failure/11error、通常ホスト診断でも負例fixtureの重複受入登録2errorが残る。隔離fixture差分案の該当試作1試験のみPASS、候補本体未変更。RP13の追加1回+限定ホスト正式試験、P13のsource更新追加1回を別々に確認中。全30/88、P13-03の全条件と2/2の現回数を維持。",
    "remaining_deliverables": [
      {
        "id": "P13-01",
@@ -7746,15 +7761,27 @@
            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p13-03-start-r01/commander.json",
            "sha256_at_integration": "ed5ea26576d3ed48428a645df31de4d9d824269873f58b9880b014bafa70bd87",
            "scope": "Actual Claude run decision, not completion."
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/runner-p13-continuation-r03/p13-existing-repair-preservation-r03.json",
+            "sha256_at_integration": "a17f7fdfe6290a0598a1e689d1bd51ebd1fc3a7382e5aefbd24f0f2fd20e2bb6",
+            "scope": "Full prior 7/84/6 semantic preservation and current applicable source pin check; detects main.gd mismatch, not unit acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/runner-p13-continuation-r03/diagnostic-disposition-r03.json",
+            "sha256_at_integration": "f04230ab52d8cefbc4bcd7b9957f86b5131c9e5cd85b985a99952155410f69eb",
+            "scope": "Formal RP13 failure, host diagnostic fixture errors, limited proposed-fixture test result; no production changes or formal acceptance",
+            "current_game_acceptance_inferred": false
          }
        ],
-        "progress_summary": "原P13最終5ファイルは7施設・84使用枠・施設外6分類の証拠を内容保持保存し、未採用。root生成cache隔離後check_scopeはPASS、原P13はblocked再提出不可・修正2/2。限定復旧と全文保持の文書重複削減はユーザー承認済み。Claude認証回復後、同一支援RP13-01を実装。初回blockedの照合基準をCommander判断で具体化して隔離promptへ渡した。修正1の01fec4ffは正式Runner試験でnested Seatbelt拒否（4failures/9errors）、通常ホスト54PASSは診断のみ。修正2の最終1398aa2dは通常ホスト55試験に2サブケースエラー（負例fixtureの重複受入登録）。実本番CONTROLでrecovery_source_pinsを読取実行するとsnapshot_missing runner/core.py、隔離Git object依存が残る。支援修正上限2/2、正式独立レビュー・統合未実施。追加ワーカー/上限変更/本番適用なし。P13は保留し正式検証済みP24-03を次候補に選定。全体9/88のまま。",
+        "progress_summary": "P13-03既存最終修正を読取再監査。共有参照の全展開で旧提出7645c551と7施設/84スロット/施設外6分類が完全一致。現production53sourceのうちmain.gd1件のみSHA差、現版再検索の全観測はSHA以外一致。通常--verify-onlyは18負例を拒否するが未提出/未受入。支援RP13-01最終1398aa2dの正式55試験は入れ子Seatbeltで4failure/11error、通常ホスト診断でも負例fixtureの重複受入登録2errorが残る。隔離fixture差分案の該当試作1試験のみPASS、候補本体未変更。RP13の追加1回+限定ホスト正式試験、P13のsource更新追加1回を別々に確認中。全30/88、P13-03の全条件と2/2の現回数を維持。",
        "remaining_gaps": [
-          "RP13最終1398aa2dの本番配置依存を除去し、実際の欠落Git objectとpin不一致を検証する。負例fixtureの重複受入登録を修正。支援修正2/2のため追加実装は禁止範囲として保留。",
-          "Runner自己試験は入れ子Seatbeltで正式失敗。信頼ホスト実行案は別途未承認。正式試験・別Claude独立レビュー・限定適用は未実施。",
-          "原P13保存済み最終成果の限定復旧再提出、正確な提出SHAで正式検証・exact資料容量確認・独立レビュー・統合。原P13修正2/2と全条件を維持。"
+          "RP13限定の正式ホスト自己試験環境と追加1回の直接許可後、fixture修正/全正式試験/別独立レビュー/統合・最終。現live CONTROLに凍結Git objectが欠落する配置条件は、実際に使用する受入済みCONTROLでsource pinsを実照合する。",
+          "P13既存最終submitted結果の限定復旧提出。追加source更新1回の直接許可後、現在main.gd SHA/全出力receiptを同期。未許可で回数/state/sourceを変更しない。",
+          "P13正確な提出SHAの正式--verify-onlyと全18負例、全資料のexact500000容量、別Opus独立レビュー、統合/最終、全条件台帳反映。"
        ],
-        "updated_at_jst": "2026-10-13T08:53:13.197406+09:00"
+        "updated_at_jst": "2026-10-13T17:23:50.608597+09:00"
      }
    ],
    "estimate_person_days_historical_2026_09_29": [
@@ -7774,7 +7801,8 @@
      "要件別ログとソースハッシュを保存"
    ],
    "cross_cutting_acceptance_scope": "Completion requirements only, not achieved results. Apply each to relevant slices; non-applicable views require a recorded reason.",
-    "initial_revision_state": "planned"
+    "initial_revision_state": "planned",
+    "updated_at_jst": "2026-10-13T17:23:50.608597+09:00"
  },
  {
    "id": "P14",
@@ -9093,7 +9121,7 @@
    "remaining": "差分数・制作担当・品質受入と利用画面の確定。既存ファイルの存在を完成認定しない。",
    "legacy_state": "in_progress",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "P22-01「必要素材の確定」を原work/acceptanceそのままで独立受入。現採用1299に固定し、既存30施設360利用枠を引継ぎ、Lv1〜3×表裏描画文脈×外観内装の用途・配置条件を列挙。7人物、名前のあるライバル3名と未確定の等、人物/施設状態、背景・UI・音・未制作原本必須内容をsource行/SHAと現参照先へ対応付けた。現media296件のSHAを確認し、仮media/コード描画/完成素材を区別。使用枠/用途群数は素材枚数・フレーム数・原子分母へ換算しない。D08/D09の未確定枚数・音声・内容ID・追加人物/制作担当はnullと未割当を維持。製品編集0/engine追加0/素材完成追加0、Runtime/通常UI/保存変更のない一覧成果に限定した横断適用を独立確認。P22-01本成果単位の不足0。現在の全計画の正式完了は9。素材制作・品質・権利受入・全内容/原子/Windowsは未完。 P22-02素材契約と権利は未完。P22-03は制作計画の下書きに着手、必要数量・具体的見積が残り未完。",
+    "current_summary": "P22-01「必要素材の確定」を原work/acceptanceそのままで独立受入。現採用1299に固定し、既存30施設360利用枠を引継ぎ、Lv1〜3×表裏描画文脈×外観内装の用途・配置条件を列挙。7人物、名前のあるライバル3名と未確定の等、人物/施設状態、背景・UI・音・未制作原本必須内容をsource行/SHAと現参照先へ対応付けた。現media296件のSHAを確認し、仮media/コード描画/完成素材を区別。使用枠/用途群数は素材枚数・フレーム数・原子分母へ換算しない。D08/D09の未確定枚数・音声・内容ID・追加人物/制作担当はnullと未割当を維持。製品編集0/engine追加0/素材完成追加0、Runtime/通常UI/保存変更のない一覧成果に限定した横断適用を独立確認。P22-01本成果単位の不足0。現在の全計画の正式完了は9。素材制作・品質・権利受入・全内容/原子/Windowsは未完。 P22-02素材契約と権利は未完。P22-03は制作計画の下書きに着手、必要数量・具体的見積が残り未完。 2026-10-13: P22-02権利・形式契約に着手。公式archive2pack全同梱+UI音4/Licenseをbyte照合、現物296中276mediaの配布元権利を検証。旧theme/mockup/BGM/iconの20は最終権利未検証、BGMの内部recipe/同byte起源は確認。614用途と完成資産数を区別し、全完了は認定しない。",
    "remaining_deliverables": [
      {
        "id": "P22-01",
@@ -9202,7 +9230,7 @@
        "title": "素材契約と権利",
        "work": "Kenneyを優先して適合素材を選び、解像度、命名、差替、出典とライセンスを記録する。",
        "acceptance": "完成枠には使用可能な資産と権利記録があり、欠損を代替表示で隠さない。",
-        "state": "planned",
+        "state": "in_progress",
        "evidence": [
          {
            "path": "artifacts/original-completion-2026-10-02/canonical-full170-actual-root-review-r01/review.json",
@@ -9231,9 +9259,75 @@
            "scope": "Limited code-native standard-room Lv1-3/sleep6refs; focused3020/full17013961; no all finished assets/normal upgrade/human/nativeWindows acceptance",
            "linked_at_jst": "2026-10-08T02:27:24.318350+09:00",
            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-current-contract-r01/reuse-rights-preflight.json",
+            "sha256_at_integration": "204184c5f52305d76a25a8868569649aa541337de0405c6d799eb20f7246081b",
+            "scope": "Exact accepted P22-01 usage records and provenance/required conditions; no finished-asset acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-current-contract-r01/publisher-archive-byte-verification.json",
+            "sha256_at_integration": "ef5d4ee78c80d2f9439646b86a0c781b685ad94dcc93d41d629f0ca148fcc061",
+            "scope": "Two official Kenney ZIPs and every existing member raw-byte equality",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-current-contract-r01/ui-audio-publisher-verification.json",
+            "sha256_at_integration": "bfebed0270e756530c69b434ca5a302b80287b586a261fb7c33718984e133fb8",
+            "scope": "Four existing UI sounds and included license exact publisher archive equality",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-current-contract-r01/current-media-rights.json",
+            "sha256_at_integration": "da24fc40b62af5c75b6e6732cebb3a6ca7475d3713176d4e70a57ecba87fc59a",
+            "scope": "Current 296 physical media dimensions/CRC and distinct verified/unknown rights status",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-current-contract-r01/observed-existing-asset-contracts.json",
+            "sha256_at_integration": "ff985e94892554873aea76148fc555eb9b007fd9622dc01e91917ba2cceb51d6",
+            "scope": "Existing atlas/import/naming/Theme replacement source observations; no new specs or finished assets",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-current-contract-r01/internal-origin-observations.json",
+            "sha256_at_integration": "8b72f9a24f5f1670116fdfb41995491ce42f44bab38a9f9c7206e0aaaefbb08a",
+            "scope": "Located original BGM recipe/output and code SVG provenance, no final rights/quality inference",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/runner-live-handoff-r02.json",
+            "sha256_at_integration": "03f80d548674466066dde28caabe93129fdeb1ab655c105b326b0bedca28201f",
+            "scope": "Actual original task registration, lossless inputs, Opus run and same-worker normal repair; live implementation only, no acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/astra-live-handoff-r03.json",
+            "sha256_at_integration": "c348e2ef062298542e8e28f2e6838ac633bcae0355f1ad7dfb47f233021ef50b",
+            "scope": "Actual Root preflight/failed validator and recorded Opus selection of live final Astra repair; no original acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/astra-preserved-test-execution.json",
+            "sha256_at_integration": "ad7bc30470d474cb46cfea7f10aa0465c595f3e01e43f60155dcbb5a48b656ab",
+            "scope": "Actual 13 tests on unchanged preserved unsubmitted Astra code, isolated reachable positive and meaningful negatives; no original acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/astra-preserved-prospective-packet.json",
+            "sha256_at_integration": "944ff11f24bfac185f0fef0754efbaab2f8e256e8da4fa0e4c914d9bd14fcd92",
+            "scope": "Prospective complete packet487283, not exact submitted SHA; final full actual method required",
+            "current_game_acceptance_inferred": false
          }
        ],
-        "progress_summary": "Kenney CC0 UI音4件とLicense/出典SHAを限定採用。初期施設・人物・素材枠の台帳、必要量未確定、全完成素材受入0と実聴未受入を維持。全168回帰は素材全制作の証拠ではない。"
+        "progress_summary": "P22-01の614利用記録（360施設/176人物/2状態群/76その他）をSHA付きで引継ぎ。現物296mediaを再監査し、Kenney2packの283同梱files、UI音4とLicenseが公式archiveとbyte一致。276mediaに配布元CC0の権利証拠を結合、20mediaの最終権利は未検証。BGM2は既存original合成recipeと同byte出力を発見、SVGはbaseline codeを確認するが完成/最終権利へ昇格しない。2packed atlas192x176/16px/12x11、既存nearest/mipmap/Theme差替接続を記録。全利用枠適合/欠損開示/実表示・実聴/正式独立review/統合は未達。製品変更・新規素材導入・原成果完了増加0。 同じ原P22-02を新規登録し、無損失217KiB全614入力と原条件を固定。495候補/119欠損/19paths、旧SHA変化2件を照合。実OpusがSol runを選択。最初はspec raw/strip表現混同で停止、元spec/base byte一致とRunner SHA一致を実測し、普通repair1/2で同じ担当を再開。契約/checker実装中、正式unit受入0/1。 初回提出c6ccc5a6の診断integrity0/614未達を保持。正式exact argvは未対応で失敗、到達不能readyとexact資料1350690>500000をRoot実証。実Opusが最終repair2/2をAstraへ切替判断、同じtask/worktreeで修正中。c6は未採用。 Astra最終run a999bbd142334aa582f2d373ed625e78は900.05秒/exit124で終了、worker提出応答なし。残コードを保持してRoot実13試験PASS、actualCLI integrity0/ready2/614未達を確認。台帳35441bytes、prospective全packet487283<500000だが未提出なのでexact final SHA検証ではない。古い説明/metadata2文書の同期と提出応答を残し、2026-10-13: 人の直接回答で追加1回（上限2→3、使用済み2を保持）とその実装run限定timeout900→1800を承認。同じtaskを通常repairで3/3へ進めrepair_ready。プロジェクトpolicy900/他task/他role/原条件は不変。保持コード再利用・2文書同期・必要確認・正式提出に限定してOpus判断を依頼。本体未採用、原P22-02未完。 追加run6faa74aeの文書同期/AST/13試験/integrity0/ready2は終了。保持4コードSHA不変。Root計測資料の参照未供給でworkerはblocked応答、応答を改竄せず保存。Rootが正確な完成tree b56e0ddc/証拠commit aad6284fのactual全packet491572<500000を計測し参照不足を解消。Opus判断で証拠branchへ保存、通常提出/state例外/追加runなし。別Opus技術review25eefc57は高1/中5/低3を指摘、原unit受入false。highはselection_ready/receipt/checkの実正例欠損。権利・quantity・layout・実ledger負例・stale証拠等も不足。技術所見は正式原受入reviewの代替にせず、本体未採用/原完了増分0。独立して閉じられる次の原unitへ移行する。",
+        "remaining_gaps": [
+          "全614用途の使用可能な完成選定（現在0）、用途ごとの形式・解像度・命名・差替・権利・表示/実聴、必須範囲/開示を揃える。D08/D09を捏造しない。",
+          "独立技術review-r05のhigh: selection_ready/receipt/checkの実到達正例。medium: 権利と素材の対応、未知数量の明示解決、用途レイアウト、実ledger改変拒否、製品更新後stale証拠の再観測。",
+          "workerの正式submitted応答と通常提出、正確な対象版で正式検証・全条件独立原受入・統合。修正3/3を無断拡大せず、応答/状態を書き換えて完了させない。"
+        ],
+        "updated_at_jst": "2026-10-13T19:25:11.280538+09:00"
      },
      {
        "id": "P22-03",
@@ -9498,7 +9592,7 @@
      "controlled_injury_fixture": true,
      "medical_values_approved": false
    },
-    "updated_at_jst": "2026-10-10T15:04:48.162471+09:00"
+    "updated_at_jst": "2026-10-13T18:49:52.847202+09:00"
  },
  {
    "id": "P23",
@@ -0,0 +1,78 @@
+{
+  "id": "P08-02",
+  "title": "旧配置の安全な変更",
+  "work": "混合建設、占有変更、役者の実位置、救護・物流・EVをまとめて移行する。",
+  "acceptance": "重複、孤立、消失がない。解消不能時は元配置とセーブを保つ。",
+  "counting_scope": "Existing one unit among30 packages/88delivery units. No partial credit; 6 decomposed facets are not new delivery units or game atomic denominator.",
+  "original_authority": "docs/traceability/original/BASELINE.txt",
+  "approved_plan": "docs/plans/original-completion-2026-10-02/IMPLEMENTATION_PLAN.md",
+  "accepted_audit_input": "docs/spec/inputs/p08-02/historical-inputs.json",
+  "accepted_audit_input_raw_sha256": "b49fdcd1fa99666edb682d9bb34707d68722310b68df068e5132d339bac5464b",
+  "required_conditions": [
+    {
+      "id": "mixed_construction",
+      "text": "複数の旧寸法建設中ジョブと完成施設を同一batchで実移行し、進捗・支払・予約・完成IDを保全する。"
+    },
+    {
+      "id": "occupancy_change",
+      "text": "追加/解放セル、support、world占有とconstruction所有を一致させ、重複と孤立を残さない。"
+    },
+    {
+      "id": "actual_actor_positions",
+      "text": "移動途中の客/職員の実位置・movement credit・経路/予約・所持資金等を許可された形状/明示route変更以外で変えない。"
+    },
+    {
+      "id": "combined_rescue_logistics_ev",
+      "text": "同一保存/移行batchに実救護患者/搬送者/目的地、物流荷物/予約/要求、EV乗客/待機/旅程を含め、全IDと相互参照・数量・元要求の一回完了を保全する。"
+    },
+    {
+      "id": "no_overlap_orphan_loss",
+      "text": "同一current版のOperations ON/OFFと別PID保存再開で全状態/全イベントと対象数/参照を照合し、重複・孤立・消失・二重効果がない。"
+    },
+    {
+      "id": "unsolvable_preservation",
+      "text": "後段の解消不能batchを拒否し、先行候補の部分適用なし。現live・原配置/正式save全member・既存migration backup全memberを保持し、別PIDで元の動作を継続できる。"
+    }
+  ],
+  "current_source_pins": {
+    "autoload/simulation_runtime.gd": "d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39",
+    "scripts/construction/facility_resize_preview.gd": "d0e8d772a648a297ee0a4625206b073be2668b32c7dba2575ba1295f5b1866ac",
+    "scripts/construction/facility_resize_routes.gd": "05d4aedcc930160eafc2945711f867744f63f5f391e4759f8e2de9211b968201",
+    "scripts/core/save_service.gd": "0c158d3e6ee693b89814bf232c954e4757c5ff91dc9df03bb322c3e593e73617",
+    "scripts/world/path_service.gd": "447135729a1106639a6eee6754af3195c8a8b458ca26980ae91fa39d80dcfbd4",
+    "scenes/main/main.gd": "41df8857f9658c17b01361350979caa942b9326c82c9f176517972c2a9692f55",
+    "tools/run_all_tests.py": "320ca668732b4ff72fc4449998af2327d4e5c527b06896740806aaf0487282b4",
+    "tools/regression/owned_outer.py": "c2e3483b76db1a3ff940f23f88ea0083fc78736e874ebcdb385d766dde8866e7",
+    "tools/strict_test_markers.py": "1cb16da6c5c00c1a0610a3fc04beb97d1eb3ba492fb1bc8fe5b621d2b7bc0406",
+    "tests/s1/test_dimension_batch_save.gd": "ca397c0457996bab637e8be5217b7db2c14579a1b0df54434b4000a69e793bbf",
+    "tests/ui/test_dimension_migration_ui.gd": "0f0cec88ea8bf5fccdcd5ade02fab70b7dc71135132048cd10db17ad9d964c0d"
+  },
+  "evidence_requirements": [
+    "Exact final submitted source map and input/config/environment (real native PID/version and private guarded profiles), bounded raw logs and strict completion markers. Historical7 cases had29 source differences and OperationsOFF; cannot become current combined PASS solely by hashes or function matching.",
+    "One coherent mixed fixture includes all6 facets; actual Runtime methods, real persisted actors/jobs/items/transport. Exercise both OperationsON/OFF, positive migration and late refusal, actual formal save/backup and separate writer/reader PID continuation. Full typed states and uncapped events preserved; only explicitly enumerated approved geometry/route changes and pre-existing justified IO schema difference may differ, never discard unexplained fields/events.",
+    "Normal production migration menu preview/cancel/confirm and changed-source rejection at samecandidate: Root collects real OS inputs/screens/model/formal state; signal-emitted UI test is only handler evidence. Root stage can load controlled oldsave; do not label injected setup as natural production.",
+    "Existing current local UI/dimension batch, save/restoration/path/ownership suites are reused. Required final full regression after final changes batch; only repeat if actual changes/failures require. Full regression and tests counts never replace all6 acceptance.",
+    "All original conditions, separate independent Opus review, main integration/current applicable final verification and ledger reflection are required before unit closure. Windows coverage stays explicitly pending where applicable, no inference from Mac native/PCK."
+  ],
+  "implementation_outputs": [
+    "docs/plans/original-completion-2026-10-02/execution/p08-02/CONDITION_MATRIX.md",
+    "docs/plans/original-completion-2026-10-02/execution/p08-02/implementation.json",
+    "tests/s1/test_p08_combined_migration.gd",
+    "tests/fixtures/p08-02/",
+    "tools/run_p08_mixed_migration.py",
+    "tools/check_p08_migration_evidence.py",
+    "tools/test_p08_migration_evidence.py"
+  ],
+  "worker_instructions": [
+    "Read exact work and acceptance. Preserve existing successful migration code and supplied21 historical fixture/driver files. Historicaldrivers have frozen external paths/oldsourcecounts; use as design references, never run them as current. All needed source is inside this frozenrepo. No secondworker, provider switch, git writes, Runner or cap/policy edits.",
+    "Authorized implementation is new bounded mixed fixture/driver/evidence checker/docs. No runtime/UI production edits in initial scope. If actual invariant defect demonstrated, submit concrete minimal proposed patch and failing evidence without silently narrowing acceptance; originalunit stays incomplete until requiredfix and allacceptance.",
+    "Reuse source from docs/spec/inputs/p08-02/. Create composable writer and reader under tests/fixtures/p08-02 with new standalone test_p08_combined_migration suite. Actual mixed state must include active guest route, realstaff/rescue/foodcargo/EV requests and oldsize paidjob plus completed facility in sameworld. Use existing domain methods and fixture setup, no invented production coefficients. Controlled fixture values/seeds explicitly diagnostic inputs.",
+    "Use existing tools/run_all_tests.py execute_phase/profile guard/owned_outer protocol for bounded host collection, all current-source CoW and guarded fresh profiles, captured realprocess cleanup, strictmarkers, exactworld and formal package members. Driver receives --project-root and --output absolute args; no fixed outsideworktree input paths or1299 admission constant. Root invokes --collect with actual finalcommit; worker need not runGodot/fullregression. New finite fixtures standalone so final fullroster can run without external Root artifact paths. Do not edit tools/run_all_tests.py or existing suite policy. Add exactly one new test_p08_combined_migration marker entry to docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json, preserving every existing entry. Driver owns only newfixture phase markers and customcase traces. Public added suite must run independently of external artifacts; this suite addition is a test, not a new delivery unit.",
+    "Checker --verify-only reads BUILD_OUTPUT_DIR/p08-evidence/index.json. Root copies actual evidence into allocateddir before formalvalidation. Index has exact source map, fixture/config inputs, phase receipts, rawcaptured native lifecycle, strictlogs, whole typedstate/formal-member hashes and every6condition attribution, normalOS proof and final regression receipt. Verify source and bound artifact content, actual distinctPID/ended/exit, not self-reported PASS booleans. Missing/stale/malformed/partialcase must list deficits and non0; technical artifact integrity cannot claim original unit accepted.",
+    "Review Root native index shape from existing native receipts; define newindex explicitly in docs with machine-readable example fixture rather than invent opaque proof. Preserve read-only fullcontent mapping and logged refusals. Anybyte-copy operation verifies rawSHA/content and does not delete earlierproofs. Root host collection and formalchecker are different; no sandboxrights expansion or paidAPI.",
+    "Meaningful wholechecker positives and negatives: pure isolated temporary proof fixture exercises check() through exact schema/source/phase/file links, then realindex mutations/deletions for duplicateactor, orphanoccupancy, patient/cargo/EV loss, partialbatch, overwrittenoriginal/backup, unequal crossPID state, missingON, wrong/stale source and fakeOSsignals. Positive must be reachable; do not replace full proof with allbooltrue reducer or alwaysfail readiness. Negativecorruptdata in disposable fixtures only. Avoid implementation-mirroring trivial tests; tests prove original invariants/gatefalseacceptance.",
+    "Python stdlib, python -B/ast.parse, bounded local checker tests only in worker. Native/fullregression/OS collection is Root responsibility after formal code submission. Read specSHA as gitshow stdout.strip UTF8, distinguish raw trailingnewline. Final full reviewerpacket measurement belongs Root on actualsubmittedSHA. Never refuse code submission solely because Root references/native/OS/finalpacket not yet collected.",
+    "Return genuine status submitted when bounded implemented code is ready forRoot verification, listing every pending originalcondition, actual check/failure and exact productfix proposal if any. Pending native/OS/fullregression/independentreview is not originalcompleted and not a reason to manufacture missingproof or change response to blocked. If code cannot be implemented state precisecause instead; do not selfclaimtests/sourceacceptance.",
+    "Keep scope focused. No manavalues, D05/D07/D08/D09 semantic choices, new assets, economicprices, storycontent, original30/88 or source baseline rewriting. Preserve unique-character protection/defaultplayer and all historicalfailedlogs."
+  ]
+}
@@ -0,0 +1,41 @@
+{
+  "id": "P22-02",
+  "title": "素材契約と権利",
+  "work": "Kenneyを優先して適合素材を選び、解像度、命名、差替、出典とライセンスを記録する。",
+  "acceptance": "完成枠には使用可能な資産と権利記録があり、欠損を代替表示で隠さない。",
+  "original_denominator": {
+    "packages": 30,
+    "delivery_units": 88,
+    "no_partial_credit": true
+  },
+  "authority": "docs/traceability/original/BASELINE.txt",
+  "accepted_inputs": "docs/spec/inputs/P22-02-accepted-usage.json",
+  "accepted_input_raw_sha256": "45fa52acf0c8bd4dd58c3b40b681cb92066f05d617df157fc18370a5e8816281",
+  "current_preflight": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-current-contract-r01/",
+  "current_slot_preflight": "docs/plans/original-completion-2026-10-02/checkpoints/p22-02-slot-contract-r02/all-slot-current-candidate-contracts.json",
+  "required_outcomes": [
+    "Preserve every accepted 614 usage identity and all decoded input/provenance fields. 2 state groups are not images. No invented final quantities.",
+    "For each required use, explicitly record selection/candidate/missing status, actual applicable source hash, dimensions or code representation, naming, replacement chain, creator and rights provenance. Missing is never satisfied by file/code token or fallback.",
+    "Reuse exact verified publisher/member/license/manifest evidence for existing Kenney packs and UI sound; retain internal composition origin distinct from third-party license and final hearing/rights acceptance.",
+    "Meaningful read-only checker: exact accepted coverage, decode/hash/source applicability, duplicate/source omission, dimension/layout/reference mismatch, missing/unknown rights, false finished/provisional promotions, invented quantities. Use current real source facts, not hardcoded always-fail or accepting only sample mutations.",
+    "Machine ledger and readable contract must separate record integrity from original-unit readiness. Completion must be nonvacuous and require exact usable selected assets/right evidence for completed frames, all mandatory unmade/disclosure gaps and applicable display/hearing/independent evidence. A structural pass never claims P22-02 accepted.",
+    "Do not invent original artist/rights/quantities, source approval or tests. D08/D09 remain explicit unknown. No CC0-only restriction for properly proven internal/other licensed work.",
+    "If product changes or actual usability evidence are needed, provide concrete source/minimal asset/reference diff and necessary checks. Never quietly shrink acceptance to records-only completion.",
+    "Root performs exact static validation and meaningful negatives first, then applicable usability and independent Opus review, integration and final before original acceptance. Pending mandatory conditions produce nonzero readiness and no completion."
+  ],
+  "outputs": [
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/asset-contracts.json",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/ASSET_CONTRACTS.md",
+    "docs/plans/original-completion-2026-10-02/execution/p22-02/validation.json",
+    "tools/check_p22_asset_contracts.py"
+  ],
+  "worker_instructions": [
+    "Reuse all existing inputs. Python stdlib only. Avoid artifacts-wide scans; inputs and verified evidence are already inside repo. Source paths in historic input may be stale; recheck current source.",
+    "Initial bounded implementation scope is contracts/checker; no product/assets/values/spec/Runner/policy/DB edits or git writes. Original unit remains incomplete until ALL conditions proven; implement current authorized contract work and preserve concrete next product/usability gaps.",
+    "Use JSON shared references to retain every source field while avoiding duplicate evidence. Preflight complete unchanged reviewer packet under500000; no truncation/omission/core/cap changes.",
+    "Use python -B, ast.parse rather than py_compile; avoid generated caches outside scope. Never run engine/full regression for contract-only changes.",
+    "When bounded implementation is written, return submitted with exact incomplete original-unit conditions. Root must not treat this as original acceptance or run known-unmet readiness as fake pass."
+  ],
+  "input_encoding": "Lossless JSON: d=flat key-id/value object; l=list; s=shared string; r=shared complete object/list",
+  "input_integrity": "Decode all fields then validate original semantic SHA256 per file, exact 614 identities, cycle/bad-index/duplicate-key/wrong-type rejects; no opaque compression"
+}
@@ -0,0 +1,131 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-EV-retarget-refusal-native-r02/migration-pair"
+const MODE := "read"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:journal.append(event.to_dictionary())
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+var room_id: StringName
+const OLD_TARGET:=Vector3i(-7,3,0)
+const SLOT: String="user://p03-EV-refusal/manual"
+func package_hashes() -> Dictionary:
+ var values: Dictionary={}
+ for suffix: String in ["",SaveService.MIGRATION_BACKUP_SUFFIX]:
+  for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+   values[suffix+"/"+name]=FileAccess.get_sha256(ProjectSettings.globalize_path(SLOT+suffix).path_join(name))
+ return values
+func refusal(label: String) -> void:
+ var before: Dictionary=runtime.create_snapshot()
+ var packages: Dictionary=package_hashes()
+ var prepared: Dictionary=runtime.prepare_facility_dimension_snapshot(room_id)
+ expect(not prepared.get(&"ok",false) and &"TRANSPORT_REPLAN_REQUIRED" in prepared.get(&"retargeting",{}).get(&"errors",[]),"actual occupied trip explicitly refuses retarget")
+ expect(prepared.get(&"routes",{}).get(&"guest_replans",[]).size()==1,"one actual guest destination requires replan")
+ var preview: Dictionary=runtime.preview_facility_dimensions_at_path(SLOT)
+ expect(not preview.get(&"ok",false),"formal migration review rejects occupied retarget")
+ var result: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+ expect(not result.get(&"ok",false) and result.get(&"code",&"")==&"DIMENSION_MIGRATION_REJECTED" and result.get(&"details",{}).get(&"rolled_back",false),"formal batch refuses and rolls back isolated candidate")
+ expect(var_to_bytes(before)==var_to_bytes(runtime.create_snapshot()),"entire live world unchanged after all three migration paths")
+ expect(package_hashes()==packages,"all original and real preexisting backup files unchanged")
+ write_proof(MODE+"-"+label+"-refusal.var",{&"prepared":prepared,&"preview":preview,&"result":result,&"packages":packages})
+ capture(label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new();clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42588)[&"valid"],"canonical current initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"own fresh evidence directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived definition")
+  for row: Array in [[&"guest_elevator",Vector3i(-8,0,0)],[&"reception",Vector3i(-6,0,0)],[&"premium_room",Vector3i(-6,2,0)],[&"guest_stairs",Vector3i(-7,2,0)],[&"guest_stairs",Vector3i(-7,3,0)]]:
+   if not command(&"build_facility",{&"definition_id":row[0],&"origin":row[1]}).is_success():
+    runtime.free();clock.free();state.free()
+    print("EV retarget refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures);return
+   clock.advance_minutes(runtime.definition_registry.get_facility(row[0]).build_minutes)
+  for instance: FacilityInstance in runtime.facility_service.get_instances():
+   if instance.definition_id==&"premium_room":room_id=instance.instance_id
+  expect(not room_id.is_empty(),"normally paid completed old-size room")
+  expect(not runtime.path_service.find_path(Vector3i(-8,0,0),OLD_TARGET).is_empty(),"real paid old upper entrance reachable through EV and corridors")
+  var baseline: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,baseline)[&"ok"],"formal old room baseline before real backup creation")
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"current approved footprint registry")
+  var first: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+  expect(first.get(&"ok",false) and first.get(&"backup_created",false),"normal unoccupied migration creates actual verified backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(baseline),"first migration leaves live original geometry")
+  expect(var_to_bytes(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{}))==var_to_bytes(baseline),"actual backup exactly restores pre-migration baseline")
+  write_proof("baseline.var",baseline)
+  command(&"spawn_guest",{&"guest_id":&"p03.retarget.passenger",&"guest_type_id":&"traveler",&"gold":100,&"options":{&"current_cell":Vector3i(-8,0,0),&"state":GuestRuntime.State.MOVING,&"state_entered_at":clock.absolute_minute-1,&"planned_exit_at":clock.absolute_minute+2000,&"target_facility_id":room_id,&"path_handle":{&"target_cell":OLD_TARGET}}})
+  clock.advance_minutes(2)
+  var trip: Dictionary=runtime.elevators.get_actor_trip(&"guest:p03.retarget.passenger")
+  expect(not trip.is_empty() and trip.get(&"state",&"")==&"BOARDED","real passenger owns actual boarded EV trip")
+  var legacy: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,legacy)[&"ok"],"formal original includes occupied trip and old entrance")
+  write_proof("legacy.var",legacy);write_proof("identity.var",{&"room_id":room_id,&"serial":serial,&"request_id":trip.get(&"request_id",&"")})
+  copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("original/formal"))
+  copy_package(ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current approved footprint registry")
+  var identity: Dictionary=read_proof("identity.var");room_id=identity[&"room_id"];serial=identity[&"serial"]
+  copy_package(PAIR_ROOT.path_join("original/formal"),ProjectSettings.globalize_path(SLOT))
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX))
+  expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{})),"separate PID restores real earlier backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("baseline.var")),"whole earlier backup state matches")
+ expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT).get(&"snapshot",{})),"actual original boarded package restores")
+ expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole boarded original restored exactly")
+ capture("checkpoint");refusal("reject1");refusal("reject2")
+ if MODE=="write":copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("after-refusal/formal"))
+ expect(runtime.domain_events.subscribe(&"*",&"p03.refusal.uncapped",Callable(self,"observe")),"whole uncapped post-refusal journal")
+ clock.advance_minutes(1);capture("next1")
+ clock.advance_minutes(1);capture("next2")
+ clock.advance_minutes(8);capture("next10")
+ clock.advance_minutes(10);capture("final20")
+ expect(runtime.facility_service.get_instance(room_id).occupied_cells.size()==6,"rejected conversion retains original facility shape")
+ expect(runtime.elevators.get_actor_trip(&"guest:p03.retarget.passenger").is_empty() and runtime.path_service.get_transit_actor_ids().is_empty(),"original EV trip finishes without orphan transit after refusal")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"post-refusal continuation remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"entire post-refusal journal matches without deletion or replacement")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("EV retarget refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
@@ -0,0 +1,131 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-EV-retarget-refusal-native-r02/migration-pair"
+const MODE := "write"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:journal.append(event.to_dictionary())
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+var room_id: StringName
+const OLD_TARGET:=Vector3i(-7,3,0)
+const SLOT: String="user://p03-EV-refusal/manual"
+func package_hashes() -> Dictionary:
+ var values: Dictionary={}
+ for suffix: String in ["",SaveService.MIGRATION_BACKUP_SUFFIX]:
+  for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+   values[suffix+"/"+name]=FileAccess.get_sha256(ProjectSettings.globalize_path(SLOT+suffix).path_join(name))
+ return values
+func refusal(label: String) -> void:
+ var before: Dictionary=runtime.create_snapshot()
+ var packages: Dictionary=package_hashes()
+ var prepared: Dictionary=runtime.prepare_facility_dimension_snapshot(room_id)
+ expect(not prepared.get(&"ok",false) and &"TRANSPORT_REPLAN_REQUIRED" in prepared.get(&"retargeting",{}).get(&"errors",[]),"actual occupied trip explicitly refuses retarget")
+ expect(prepared.get(&"routes",{}).get(&"guest_replans",[]).size()==1,"one actual guest destination requires replan")
+ var preview: Dictionary=runtime.preview_facility_dimensions_at_path(SLOT)
+ expect(not preview.get(&"ok",false),"formal migration review rejects occupied retarget")
+ var result: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+ expect(not result.get(&"ok",false) and result.get(&"code",&"")==&"DIMENSION_MIGRATION_REJECTED" and result.get(&"details",{}).get(&"rolled_back",false),"formal batch refuses and rolls back isolated candidate")
+ expect(var_to_bytes(before)==var_to_bytes(runtime.create_snapshot()),"entire live world unchanged after all three migration paths")
+ expect(package_hashes()==packages,"all original and real preexisting backup files unchanged")
+ write_proof(MODE+"-"+label+"-refusal.var",{&"prepared":prepared,&"preview":preview,&"result":result,&"packages":packages})
+ capture(label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new();clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42588)[&"valid"],"canonical current initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"own fresh evidence directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived definition")
+  for row: Array in [[&"guest_elevator",Vector3i(-8,0,0)],[&"reception",Vector3i(-6,0,0)],[&"premium_room",Vector3i(-6,2,0)],[&"guest_stairs",Vector3i(-7,2,0)],[&"guest_stairs",Vector3i(-7,3,0)]]:
+   if not command(&"build_facility",{&"definition_id":row[0],&"origin":row[1]}).is_success():
+    runtime.free();clock.free();state.free()
+    print("EV retarget refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures);return
+   clock.advance_minutes(runtime.definition_registry.get_facility(row[0]).build_minutes)
+  for instance: FacilityInstance in runtime.facility_service.get_instances():
+   if instance.definition_id==&"premium_room":room_id=instance.instance_id
+  expect(not room_id.is_empty(),"normally paid completed old-size room")
+  expect(not runtime.path_service.find_path(Vector3i(-8,0,0),OLD_TARGET).is_empty(),"real paid old upper entrance reachable through EV and corridors")
+  var baseline: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,baseline)[&"ok"],"formal old room baseline before real backup creation")
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"current approved footprint registry")
+  var first: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+  expect(first.get(&"ok",false) and first.get(&"backup_created",false),"normal unoccupied migration creates actual verified backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(baseline),"first migration leaves live original geometry")
+  expect(var_to_bytes(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{}))==var_to_bytes(baseline),"actual backup exactly restores pre-migration baseline")
+  write_proof("baseline.var",baseline)
+  command(&"spawn_guest",{&"guest_id":&"p03.retarget.passenger",&"guest_type_id":&"traveler",&"gold":100,&"options":{&"current_cell":Vector3i(-8,0,0),&"state":GuestRuntime.State.MOVING,&"state_entered_at":clock.absolute_minute-1,&"planned_exit_at":clock.absolute_minute+2000,&"target_facility_id":room_id,&"path_handle":{&"target_cell":OLD_TARGET}}})
+  clock.advance_minutes(2)
+  var trip: Dictionary=runtime.elevators.get_actor_trip(&"guest:p03.retarget.passenger")
+  expect(not trip.is_empty() and trip.get(&"state",&"")==&"BOARDED","real passenger owns actual boarded EV trip")
+  var legacy: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,legacy)[&"ok"],"formal original includes occupied trip and old entrance")
+  write_proof("legacy.var",legacy);write_proof("identity.var",{&"room_id":room_id,&"serial":serial,&"request_id":trip.get(&"request_id",&"")})
+  copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("original/formal"))
+  copy_package(ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current approved footprint registry")
+  var identity: Dictionary=read_proof("identity.var");room_id=identity[&"room_id"];serial=identity[&"serial"]
+  copy_package(PAIR_ROOT.path_join("original/formal"),ProjectSettings.globalize_path(SLOT))
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX))
+  expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{})),"separate PID restores real earlier backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("baseline.var")),"whole earlier backup state matches")
+ expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT).get(&"snapshot",{})),"actual original boarded package restores")
+ expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole boarded original restored exactly")
+ capture("checkpoint");refusal("reject1");refusal("reject2")
+ if MODE=="write":copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("after-refusal/formal"))
+ expect(runtime.domain_events.subscribe(&"*",&"p03.refusal.uncapped",Callable(self,"observe")),"whole uncapped post-refusal journal")
+ clock.advance_minutes(1);capture("next1")
+ clock.advance_minutes(1);capture("next2")
+ clock.advance_minutes(8);capture("next10")
+ clock.advance_minutes(10);capture("final20")
+ expect(runtime.facility_service.get_instance(room_id).occupied_cells.size()==6,"rejected conversion retains original facility shape")
+ expect(runtime.elevators.get_actor_trip(&"guest:p03.retarget.passenger").is_empty() and runtime.path_service.get_transit_actor_ids().is_empty(),"original EV trip finishes without orphan transit after refusal")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"post-refusal continuation remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"entire post-refusal journal matches without deletion or replacement")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("EV retarget refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
@@ -0,0 +1,68 @@
+from pathlib import Path
+import hashlib,importlib.util,json,sys,os
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部');A=R/'artifacts/original-completion-2026-10-02';P=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-EV-retarget-refusal-prep-r02')
+TEST='tests/s3/test_runtime_staff_assignment.gd'
+READER='tests/s6/test_runtime_snapshot_serialization.gd'
+def module(n,p):
+ s=importlib.util.spec_from_file_location(n,p);m=importlib.util.module_from_spec(s);s.loader.exec_module(m);return m
+def main():
+ assert len(sys.argv)==2
+ mode='formal-cross-pid';out=Path(sys.argv[1]);assert out.parent==A and not out.exists() and str(out)==json.loads((P/'preparation.json').read_bytes())['planned_output']
+ r=module('role_formal_literal_runner',R/'tools/run_all_tests.py')
+ seal=r.read(P/'input-seal.json')
+ assert set(str(p.relative_to(P)) for p in P.rglob('*') if p.is_file())==set(seal['files'])|{'input-seal.json','preparation.json'}
+ for n,v in seal['files'].items():assert Path(v['path'])==P/n and r.sha(v['path'])==v['sha256'] and Path(v['path']).stat().st_size==v['bytes']
+ for name in ['writer.gd','reader.gd']:
+  lines=(P/name).read_text().splitlines();bindings=[line[len('const PAIR_ROOT := '):]for line in lines if line.startswith('const PAIR_ROOT := ')]
+  assert len(bindings)==1 and json.loads(bindings[0])==str(out/'migration-pair') and not (out/'migration-pair').exists()
+ root_before=r.source_refs(R);assert len(root_before)==1299
+ adopted=r.read(A/'p03-current1299-defense-empty-two-ref-source-adoption-r01/source-after.json')
+ assert {n:v['sha256']for n,v in root_before.items()}==adopted
+ refs=dict(root_before);refs[TEST]=seal['files']['writer.gd'];refs[READER]=seal['files']['reader.gd']
+ for n,v in refs.items():assert Path(v['path']).stat().st_size==v['bytes'] and r.sha(v['path'])==v['sha256']
+ docs={n:r.sha(R/'docs/plans/original-completion-2026-10-02'/n) for n in ('IMPLEMENTATION_PLAN.md','PROGRESS_INTEGRATION.md','work_packages.json','progress_snapshot.json')}
+ outer=module('bath_literal_owned_outer',r.SUPPORT/'owned_outer.py');assert not outer.native.helper['live_engines']()
+ engine='/Applications/Godot.app/Contents/MacOS/Godot'
+ out.mkdir();stage=out/'stage';stage.mkdir();(out/'starters').mkdir();(out/'bootstrap').mkdir()
+ for n,v in r.read(r.SUPPORT/'bootstrap-scripts.json').items():
+  data=v['text'].encode();assert hashlib.sha256(data).hexdigest()==v['sha256'];(out/'bootstrap'/n).write_bytes(data)
+ protected=r.default_player(R);expected={n:{'bytes':v['bytes'],'sha256':v['sha256']}for n,v in refs.items()}
+ selected={'root_before':root_before,'map':{n:v['sha256']for n,v in refs.items()},'timeout':180}
+ for n,v in refs.items():
+  p=stage/n;p.parent.mkdir(parents=True,exist_ok=True);r.copy_source(Path(v['path']),p)
+ assert r.inventory(stage,stage=True)==expected
+ public=(stage/'project.godot').read_bytes();paths=['res://'+n for n in sorted(refs) if n.endswith('.gd')];r.write(out/'parse-paths.json',paths)
+ markers=module('bath_literal_markers',R/'tools/strict_test_markers.py')
+ contracts=markers.load_contracts(R/'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json')
+ contracts[TEST]={'test':TEST,'template':'EV retarget refusal formal write: <checks> checks, <failures> failures','required':True}
+ contracts[READER]={'test':READER,'template':'EV retarget refusal formal read: <checks> checks, <failures> failures','required':True}
+ policy=r.read(r.SUPPORT/'suite-policy.json');assert TEST not in policy['suite_policies'] and READER not in policy['suite_policies']
+ r.write(out/'runner-input.json',{'mode':mode,'owner_pid':os.getpid(),'wrapper_sha256':r.sha(__file__),'runner_sha256':r.sha(R/'tools/run_all_tests.py'),'selected_source_map':selected['map'],'source_before':root_before,'default_player':protected,'doc4_before':docs,'actual_full':False,'source_adoption':False})
+ diagnostics=module('bath_literal_diagnostics',r.SUPPORT/'diagnostic_gate.py');owners=module('bath_literal_owners',r.SUPPORT/'ordinary_proof_gate.py');audio=module('bath_literal_audio',r.SUPPORT/'audio_evidence_gate.py')
+ phases=[];previous={};error=None;formal_before=None
+ try:
+  for phase,test in [('import',None),('parse',None),('writer',TEST),('reader',READER)]:
+   if phase=='writer':assert not (out/'migration-pair').exists()
+   if phase=='reader':assert r.inventory(out/'migration-pair')==pair_before
+   row=r.execute_phase(engine,stage,out,phase,test,selected,expected,previous,policy,contracts,paths,public,protected,R,outer,markers,diagnostics,owners,audio);phases.append(row)
+   print(json.dumps({'phase':phase,'passed':row['passed'],'checks':row.get('reported_checks'),'error':row.get('validation_error'),'guard_error':row.get('guard_error')}),flush=True)
+   r.require(row['passed'],'strict phase failure stops without retry')
+   if phase=='writer':
+    pair_before=r.inventory(out/'migration-pair');formal_before={n:v for n,v in pair_before.items()if '/formal/'in n}
+    assert len(formal_before)==12
+    r.write(out/'actual-formal-before-reader.json',formal_before)
+   if phase=='reader':
+    after=r.inventory(out/'migration-pair');assert {n:v for n,v in after.items()if '/formal/'in n}==formal_before
+    assert all(after[n]==v for n,v in pair_before.items())
+    r.write(out/'actual-formal-after-reader.json',{n:v for n,v in after.items()if '/formal/'in n})
+ except BaseException as caught:error=type(caught).__name__+': '+str(caught)
+ finally:cleanup,cleanup_errors=outer.finish_captured(outer.OWNED)
+ passed=error is None and not cleanup_errors and len(phases)==4 and all(x['passed'] for x in phases) and all(x['engine_ended'] for x in cleanup)
+ assert r.source_refs(R)==root_before and r.default_player(R)==protected
+ assert {n:r.sha(R/'docs/plans/original-completion-2026-10-02'/n) for n in docs}==docs
+ assert r.inventory(stage,stage=True)==dict(expected,**previous)
+ r.write(out/'runner-ended.json',{'mode':mode,'passed':passed,'phases':phases,'cleanup':cleanup,'cleanup_errors':cleanup_errors,'error':error,'whole_source_unchanged':True,'whole_default_profile_unchanged':True,'doc4_unchanged':True,'source_adoption':False,'normal_GUI_accepted':False,'full_regression_accepted':False,'formal_cross_PID_accepted':False,'actual_captured_PIDs':[p.pid for p in outer.OWNED],'actual_native_processes':len(outer.OWNED),'actual_checks':sum(p.get('reported_checks',0)for p in phases if p['test']) if passed else None,'formal_reader_evidence_scope':'headless direct formal changed-entrance migration refusal with actual paid old room and boarded passenger; actual earlier successful migration backup retained; separate-PID whole original/backup and post-refusal continuation. Operations OFF public fixture passenger; no Main OS/rescue/logistics/full migration acceptance','native_Windows_accepted':False,'whole_goal_accepted':False})
+ print(json.dumps({'mode':mode,'passed':passed,'error':error,'actual_native':len(phases),'actual_checks':phases[-1].get('reported_checks')}),flush=True)
+ return 0 if passed else 1
+if __name__=='__main__':raise SystemExit(main())
@@ -0,0 +1,143 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-batch-later-refusal-native-r02/migration-pair"
+const MODE := "read"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:journal.append(event.to_dictionary())
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+var room_id: StringName
+const OLD_TARGET:=Vector3i(-7,3,1)
+const SLOT: String="user://p03-batch-later-refusal/manual"
+func package_hashes() -> Dictionary:
+ var values: Dictionary={}
+ for suffix: String in ["",SaveService.MIGRATION_BACKUP_SUFFIX]:
+  for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+   values[suffix+"/"+name]=FileAccess.get_sha256(ProjectSettings.globalize_path(SLOT+suffix).path_join(name))
+ return values
+func refusal(label: String) -> void:
+ var before: Dictionary=runtime.create_snapshot()
+ var packages: Dictionary=package_hashes()
+ var first: Dictionary=runtime.prepare_facility_dimension_snapshot(job_id)
+ expect(first.get(&"ok",false),"first paid legacy job is independently migratable before later refusal")
+ var prepared: Dictionary=runtime.prepare_all_facility_dimension_snapshots()
+ expect(not prepared.get(&"ok",false) and prepared.get(&"facility_id",&"")==room_id and prepared.get(&"rolled_back",false),"actual second-target rejection rolls back earlier applied job")
+ expect(prepared.get(&"details",{}).get(&"routes",{}).get(&"errors",[]).any(func(error: Variant):return error is Dictionary and error.get(&"code",&"")==&"TASK_DESTINATION_CHANGED"),"real old upper-entry task specifically refuses lost destination")
+ var preview: Dictionary=runtime.preview_facility_dimensions_at_path(SLOT)
+ expect(not preview.get(&"ok",false),"formal preview rejects later target")
+ var result: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+ expect(not result.get(&"ok",false) and result.get(&"code",&"")==&"DIMENSION_MIGRATION_REJECTED" and result.get(&"details",{}).get(&"rolled_back",false),"formal batch refuses and rolls back isolated candidate")
+ expect(var_to_bytes(before)==var_to_bytes(runtime.create_snapshot()),"entire live world unchanged after all three migration paths")
+ expect(package_hashes()==packages,"all original and real preexisting backup files unchanged")
+ write_proof(MODE+"-"+label+"-refusal.var",{&"first":first,&"prepared":prepared,&"preview":preview,&"result":result,&"packages":packages})
+ capture(label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new();clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42588)[&"valid"],"canonical current initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"own fresh evidence directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://tests/fixtures/legacy_staff_dormitory.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived definition")
+  for row: Array in [[&"warehouse",Vector3i(-6,0,1)],[&"service_stairs",Vector3i(-7,1,1)],[&"service_stairs",Vector3i(-7,2,1)],[&"service_stairs",Vector3i(-7,3,1)],[&"staff_dormitory",Vector3i(-6,2,1)],[&"reception",Vector3i(-6,0,0)],[&"guest_stairs",Vector3i(4,1,0)],[&"guest_stairs",Vector3i(4,2,0)],[&"guest_stairs",Vector3i(4,3,0)]]:
+   if not command(&"build_facility",{&"definition_id":row[0],&"origin":row[1]}).is_success():
+    runtime.free();clock.free();state.free()
+    print("Batch later refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures);return
+   clock.advance_minutes(runtime.definition_registry.get_facility(row[0]).build_minutes)
+  for instance: FacilityInstance in runtime.facility_service.get_instances():
+   if instance.definition_id==&"staff_dormitory":room_id=instance.instance_id
+  expect(not room_id.is_empty(),"normally paid completed archived dormitory")
+  if not command(&"build_facility",{&"definition_id":&"premium_room",&"origin":Vector3i(-6,2,0)}).is_success():runtime.free();clock.free();state.free();quit(1);return
+  clock.advance_minutes(7)
+  for job: ConstructionJob in runtime.construction_service.get_jobs():
+   if job.definition_id==&"premium_room" and not job.is_terminal():job_id=job.job_id
+  expect(not job_id.is_empty(),"real paid first-target partial job")
+  if job_id.is_empty():runtime.free();clock.free();state.free();quit(1);return
+  var baseline: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,baseline)[&"ok"],"formal old room baseline before real backup creation")
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  paths.erase("res://tests/fixtures/legacy_staff_dormitory.tres");paths.append("res://data/facilities/expansion/staff_dormitory.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"current approved footprint registry")
+  var first: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+  expect(first.get(&"ok",false) and first.get(&"backup_created",false),"normal unconstrained two-target migration creates actual verified backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(baseline),"first migration leaves live original geometry")
+  expect(var_to_bytes(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{}))==var_to_bytes(baseline),"actual backup exactly restores pre-migration baseline")
+  write_proof("baseline.var",baseline)
+  expect(command(&"register_staff",{&"staff_id":&"batch_maintainer",&"role_id":&"porter",&"options":{&"current_cell":Vector3i(-7,1,1),&"state":StaffRuntime.State.AVAILABLE}}).is_success(),"public worker for actual old-entry task")
+  expect(runtime.staff_service.create_task(&"maintenance",10,clock.absolute_minute,{&"target_entity_id":room_id,&"target_cell":OLD_TARGET,&"estimated_minutes":30},&"batch_old_entry_task").is_success(),"public actual old-entry maintenance task")
+  expect(runtime.staff_service.assign_task_to_staff(&"batch_old_entry_task",&"batch_maintainer",clock.absolute_minute).is_success(),"public real task owner assignment")
+  clock.advance_minutes(1)
+  var task: StaffTask=runtime.staff_service.get_task(&"batch_old_entry_task")
+  expect(not task.is_terminal() and task.assigned_staff_id==&"batch_maintainer" and runtime.staff_service.get_staff(&"batch_maintainer").current_task_id==task.task_id,"real old-entry work remains in flight at formal save")
+  var legacy: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,legacy)[&"ok"],"formal original includes partial job and real upper-entry task")
+  write_proof("legacy.var",legacy);write_proof("identity.var",{&"room_id":room_id,&"serial":serial,&"job_id":job_id,&"task_id":&"batch_old_entry_task"})
+  copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("original/formal"))
+  copy_package(ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres");paths.append("res://data/facilities/expansion/staff_dormitory.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current approved footprint registry")
+  var identity: Dictionary=read_proof("identity.var");room_id=identity[&"room_id"];job_id=identity[&"job_id"];serial=identity[&"serial"]
+  copy_package(PAIR_ROOT.path_join("original/formal"),ProjectSettings.globalize_path(SLOT))
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX))
+  expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{})),"separate PID restores real earlier backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("baseline.var")),"whole earlier backup state matches")
+ expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT).get(&"snapshot",{})),"actual original batch-source package restores")
+ expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole original batch source restored exactly")
+ capture("checkpoint");refusal("reject1");refusal("reject2")
+ if MODE=="write":copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("after-refusal/formal"))
+ expect(runtime.domain_events.subscribe(&"*",&"p03.refusal.uncapped",Callable(self,"observe")),"whole uncapped post-refusal journal")
+ clock.advance_minutes(1);capture("next1")
+ clock.advance_minutes(1);capture("next2")
+ clock.advance_minutes(8);capture("next10")
+ clock.advance_minutes(150);capture("final160")
+ expect(runtime.facility_service.get_instance(room_id).occupied_cells.size()==8,"later rejected dorm retains entire original footprint")
+ var completed: ConstructionJob=runtime.construction_service.get_job(job_id)
+ expect(completed.state==ConstructionJob.State.COMPLETED and runtime.facility_service.get_instance(completed.facility_instance_id).occupied_cells.size()==6,"earlier rolled-back job completes with its original legacy footprint")
+ expect(runtime.staff_service.get_task(&"batch_old_entry_task").state==StaffTask.State.COMPLETED and runtime.staff_service.get_staff(&"batch_maintainer").current_cell==OLD_TARGET and runtime.staff_service.get_staff(&"batch_maintainer").current_task_id.is_empty(),"actual original maintenance reaches old entry and finishes without orphan work")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"post-refusal continuation remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"entire post-refusal journal matches without deletion or replacement")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("Batch later refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
@@ -0,0 +1,143 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-batch-later-refusal-native-r02/migration-pair"
+const MODE := "write"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:journal.append(event.to_dictionary())
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+var room_id: StringName
+const OLD_TARGET:=Vector3i(-7,3,1)
+const SLOT: String="user://p03-batch-later-refusal/manual"
+func package_hashes() -> Dictionary:
+ var values: Dictionary={}
+ for suffix: String in ["",SaveService.MIGRATION_BACKUP_SUFFIX]:
+  for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+   values[suffix+"/"+name]=FileAccess.get_sha256(ProjectSettings.globalize_path(SLOT+suffix).path_join(name))
+ return values
+func refusal(label: String) -> void:
+ var before: Dictionary=runtime.create_snapshot()
+ var packages: Dictionary=package_hashes()
+ var first: Dictionary=runtime.prepare_facility_dimension_snapshot(job_id)
+ expect(first.get(&"ok",false),"first paid legacy job is independently migratable before later refusal")
+ var prepared: Dictionary=runtime.prepare_all_facility_dimension_snapshots()
+ expect(not prepared.get(&"ok",false) and prepared.get(&"facility_id",&"")==room_id and prepared.get(&"rolled_back",false),"actual second-target rejection rolls back earlier applied job")
+ expect(prepared.get(&"details",{}).get(&"routes",{}).get(&"errors",[]).any(func(error: Variant):return error is Dictionary and error.get(&"code",&"")==&"TASK_DESTINATION_CHANGED"),"real old upper-entry task specifically refuses lost destination")
+ var preview: Dictionary=runtime.preview_facility_dimensions_at_path(SLOT)
+ expect(not preview.get(&"ok",false),"formal preview rejects later target")
+ var result: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+ expect(not result.get(&"ok",false) and result.get(&"code",&"")==&"DIMENSION_MIGRATION_REJECTED" and result.get(&"details",{}).get(&"rolled_back",false),"formal batch refuses and rolls back isolated candidate")
+ expect(var_to_bytes(before)==var_to_bytes(runtime.create_snapshot()),"entire live world unchanged after all three migration paths")
+ expect(package_hashes()==packages,"all original and real preexisting backup files unchanged")
+ write_proof(MODE+"-"+label+"-refusal.var",{&"first":first,&"prepared":prepared,&"preview":preview,&"result":result,&"packages":packages})
+ capture(label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new();clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42588)[&"valid"],"canonical current initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"own fresh evidence directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://tests/fixtures/legacy_staff_dormitory.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived definition")
+  for row: Array in [[&"warehouse",Vector3i(-6,0,1)],[&"service_stairs",Vector3i(-7,1,1)],[&"service_stairs",Vector3i(-7,2,1)],[&"service_stairs",Vector3i(-7,3,1)],[&"staff_dormitory",Vector3i(-6,2,1)],[&"reception",Vector3i(-6,0,0)],[&"guest_stairs",Vector3i(4,1,0)],[&"guest_stairs",Vector3i(4,2,0)],[&"guest_stairs",Vector3i(4,3,0)]]:
+   if not command(&"build_facility",{&"definition_id":row[0],&"origin":row[1]}).is_success():
+    runtime.free();clock.free();state.free()
+    print("Batch later refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures);return
+   clock.advance_minutes(runtime.definition_registry.get_facility(row[0]).build_minutes)
+  for instance: FacilityInstance in runtime.facility_service.get_instances():
+   if instance.definition_id==&"staff_dormitory":room_id=instance.instance_id
+  expect(not room_id.is_empty(),"normally paid completed archived dormitory")
+  if not command(&"build_facility",{&"definition_id":&"premium_room",&"origin":Vector3i(-6,2,0)}).is_success():runtime.free();clock.free();state.free();quit(1);return
+  clock.advance_minutes(7)
+  for job: ConstructionJob in runtime.construction_service.get_jobs():
+   if job.definition_id==&"premium_room" and not job.is_terminal():job_id=job.job_id
+  expect(not job_id.is_empty(),"real paid first-target partial job")
+  if job_id.is_empty():runtime.free();clock.free();state.free();quit(1);return
+  var baseline: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,baseline)[&"ok"],"formal old room baseline before real backup creation")
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  paths.erase("res://tests/fixtures/legacy_staff_dormitory.tres");paths.append("res://data/facilities/expansion/staff_dormitory.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"current approved footprint registry")
+  var first: Dictionary=runtime.migrate_facility_dimensions_at_path(SLOT)
+  expect(first.get(&"ok",false) and first.get(&"backup_created",false),"normal unconstrained two-target migration creates actual verified backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(baseline),"first migration leaves live original geometry")
+  expect(var_to_bytes(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{}))==var_to_bytes(baseline),"actual backup exactly restores pre-migration baseline")
+  write_proof("baseline.var",baseline)
+  expect(command(&"register_staff",{&"staff_id":&"batch_maintainer",&"role_id":&"porter",&"options":{&"current_cell":Vector3i(-7,1,1),&"state":StaffRuntime.State.AVAILABLE}}).is_success(),"public worker for actual old-entry task")
+  expect(runtime.staff_service.create_task(&"maintenance",10,clock.absolute_minute,{&"target_entity_id":room_id,&"target_cell":OLD_TARGET,&"estimated_minutes":30},&"batch_old_entry_task").is_success(),"public actual old-entry maintenance task")
+  expect(runtime.staff_service.assign_task_to_staff(&"batch_old_entry_task",&"batch_maintainer",clock.absolute_minute).is_success(),"public real task owner assignment")
+  clock.advance_minutes(1)
+  var task: StaffTask=runtime.staff_service.get_task(&"batch_old_entry_task")
+  expect(not task.is_terminal() and task.assigned_staff_id==&"batch_maintainer" and runtime.staff_service.get_staff(&"batch_maintainer").current_task_id==task.task_id,"real old-entry work remains in flight at formal save")
+  var legacy: Dictionary=runtime.create_snapshot()
+  expect(SaveService.save_snapshot(SLOT,legacy)[&"ok"],"formal original includes partial job and real upper-entry task")
+  write_proof("legacy.var",legacy);write_proof("identity.var",{&"room_id":room_id,&"serial":serial,&"job_id":job_id,&"task_id":&"batch_old_entry_task"})
+  copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("original/formal"))
+  copy_package(ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres");paths.append("res://data/facilities/expansion/staff_dormitory.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current approved footprint registry")
+  var identity: Dictionary=read_proof("identity.var");room_id=identity[&"room_id"];job_id=identity[&"job_id"];serial=identity[&"serial"]
+  copy_package(PAIR_ROOT.path_join("original/formal"),ProjectSettings.globalize_path(SLOT))
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX))
+  expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT+SaveService.MIGRATION_BACKUP_SUFFIX).get(&"snapshot",{})),"separate PID restores real earlier backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("baseline.var")),"whole earlier backup state matches")
+ expect(runtime.restore_snapshot(SaveService.load_snapshot(SLOT).get(&"snapshot",{})),"actual original batch-source package restores")
+ expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole original batch source restored exactly")
+ capture("checkpoint");refusal("reject1");refusal("reject2")
+ if MODE=="write":copy_package(ProjectSettings.globalize_path(SLOT),PAIR_ROOT.path_join("after-refusal/formal"))
+ expect(runtime.domain_events.subscribe(&"*",&"p03.refusal.uncapped",Callable(self,"observe")),"whole uncapped post-refusal journal")
+ clock.advance_minutes(1);capture("next1")
+ clock.advance_minutes(1);capture("next2")
+ clock.advance_minutes(8);capture("next10")
+ clock.advance_minutes(150);capture("final160")
+ expect(runtime.facility_service.get_instance(room_id).occupied_cells.size()==8,"later rejected dorm retains entire original footprint")
+ var completed: ConstructionJob=runtime.construction_service.get_job(job_id)
+ expect(completed.state==ConstructionJob.State.COMPLETED and runtime.facility_service.get_instance(completed.facility_instance_id).occupied_cells.size()==6,"earlier rolled-back job completes with its original legacy footprint")
+ expect(runtime.staff_service.get_task(&"batch_old_entry_task").state==StaffTask.State.COMPLETED and runtime.staff_service.get_staff(&"batch_maintainer").current_cell==OLD_TARGET and runtime.staff_service.get_staff(&"batch_maintainer").current_task_id.is_empty(),"actual original maintenance reaches old entry and finishes without orphan work")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"post-refusal continuation remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"entire post-refusal journal matches without deletion or replacement")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("Batch later refusal formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
@@ -0,0 +1,68 @@
+from pathlib import Path
+import hashlib,importlib.util,json,sys,os
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部');A=R/'artifacts/original-completion-2026-10-02';P=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-batch-later-refusal-prep-r02')
+TEST='tests/s3/test_runtime_staff_assignment.gd'
+READER='tests/s6/test_runtime_snapshot_serialization.gd'
+def module(n,p):
+ s=importlib.util.spec_from_file_location(n,p);m=importlib.util.module_from_spec(s);s.loader.exec_module(m);return m
+def main():
+ assert len(sys.argv)==2
+ mode='formal-cross-pid';out=Path(sys.argv[1]);assert out.parent==A and not out.exists() and str(out)==json.loads((P/'preparation.json').read_bytes())['planned_output']
+ r=module('role_formal_literal_runner',R/'tools/run_all_tests.py')
+ seal=r.read(P/'input-seal.json')
+ assert set(str(p.relative_to(P)) for p in P.rglob('*') if p.is_file())==set(seal['files'])|{'input-seal.json','preparation.json'}
+ for n,v in seal['files'].items():assert Path(v['path'])==P/n and r.sha(v['path'])==v['sha256'] and Path(v['path']).stat().st_size==v['bytes']
+ for name in ['writer.gd','reader.gd']:
+  lines=(P/name).read_text().splitlines();bindings=[line[len('const PAIR_ROOT := '):]for line in lines if line.startswith('const PAIR_ROOT := ')]
+  assert len(bindings)==1 and json.loads(bindings[0])==str(out/'migration-pair') and not (out/'migration-pair').exists()
+ root_before=r.source_refs(R);assert len(root_before)==1299
+ adopted=r.read(A/'p03-current1299-defense-empty-two-ref-source-adoption-r01/source-after.json')
+ assert {n:v['sha256']for n,v in root_before.items()}==adopted
+ refs=dict(root_before);refs[TEST]=seal['files']['writer.gd'];refs[READER]=seal['files']['reader.gd']
+ for n,v in refs.items():assert Path(v['path']).stat().st_size==v['bytes'] and r.sha(v['path'])==v['sha256']
+ docs={n:r.sha(R/'docs/plans/original-completion-2026-10-02'/n) for n in ('IMPLEMENTATION_PLAN.md','PROGRESS_INTEGRATION.md','work_packages.json','progress_snapshot.json')}
+ outer=module('bath_literal_owned_outer',r.SUPPORT/'owned_outer.py');assert not outer.native.helper['live_engines']()
+ engine='/Applications/Godot.app/Contents/MacOS/Godot'
+ out.mkdir();stage=out/'stage';stage.mkdir();(out/'starters').mkdir();(out/'bootstrap').mkdir()
+ for n,v in r.read(r.SUPPORT/'bootstrap-scripts.json').items():
+  data=v['text'].encode();assert hashlib.sha256(data).hexdigest()==v['sha256'];(out/'bootstrap'/n).write_bytes(data)
+ protected=r.default_player(R);expected={n:{'bytes':v['bytes'],'sha256':v['sha256']}for n,v in refs.items()}
+ selected={'root_before':root_before,'map':{n:v['sha256']for n,v in refs.items()},'timeout':180}
+ for n,v in refs.items():
+  p=stage/n;p.parent.mkdir(parents=True,exist_ok=True);r.copy_source(Path(v['path']),p)
+ assert r.inventory(stage,stage=True)==expected
+ public=(stage/'project.godot').read_bytes();paths=['res://'+n for n in sorted(refs) if n.endswith('.gd')];r.write(out/'parse-paths.json',paths)
+ markers=module('bath_literal_markers',R/'tools/strict_test_markers.py')
+ contracts=markers.load_contracts(R/'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json')
+ contracts[TEST]={'test':TEST,'template':'Batch later refusal formal write: <checks> checks, <failures> failures','required':True}
+ contracts[READER]={'test':READER,'template':'Batch later refusal formal read: <checks> checks, <failures> failures','required':True}
+ policy=r.read(r.SUPPORT/'suite-policy.json');assert TEST not in policy['suite_policies'] and READER not in policy['suite_policies']
+ r.write(out/'runner-input.json',{'mode':mode,'owner_pid':os.getpid(),'wrapper_sha256':r.sha(__file__),'runner_sha256':r.sha(R/'tools/run_all_tests.py'),'selected_source_map':selected['map'],'source_before':root_before,'default_player':protected,'doc4_before':docs,'actual_full':False,'source_adoption':False})
+ diagnostics=module('bath_literal_diagnostics',r.SUPPORT/'diagnostic_gate.py');owners=module('bath_literal_owners',r.SUPPORT/'ordinary_proof_gate.py');audio=module('bath_literal_audio',r.SUPPORT/'audio_evidence_gate.py')
+ phases=[];previous={};error=None;formal_before=None
+ try:
+  for phase,test in [('import',None),('parse',None),('writer',TEST),('reader',READER)]:
+   if phase=='writer':assert not (out/'migration-pair').exists()
+   if phase=='reader':assert r.inventory(out/'migration-pair')==pair_before
+   row=r.execute_phase(engine,stage,out,phase,test,selected,expected,previous,policy,contracts,paths,public,protected,R,outer,markers,diagnostics,owners,audio);phases.append(row)
+   print(json.dumps({'phase':phase,'passed':row['passed'],'checks':row.get('reported_checks'),'error':row.get('validation_error'),'guard_error':row.get('guard_error')}),flush=True)
+   r.require(row['passed'],'strict phase failure stops without retry')
+   if phase=='writer':
+    pair_before=r.inventory(out/'migration-pair');formal_before={n:v for n,v in pair_before.items()if '/formal/'in n}
+    assert len(formal_before)==12
+    r.write(out/'actual-formal-before-reader.json',formal_before)
+   if phase=='reader':
+    after=r.inventory(out/'migration-pair');assert {n:v for n,v in after.items()if '/formal/'in n}==formal_before
+    assert all(after[n]==v for n,v in pair_before.items())
+    r.write(out/'actual-formal-after-reader.json',{n:v for n,v in after.items()if '/formal/'in n})
+ except BaseException as caught:error=type(caught).__name__+': '+str(caught)
+ finally:cleanup,cleanup_errors=outer.finish_captured(outer.OWNED)
+ passed=error is None and not cleanup_errors and len(phases)==4 and all(x['passed'] for x in phases) and all(x['engine_ended'] for x in cleanup)
+ assert r.source_refs(R)==root_before and r.default_player(R)==protected
+ assert {n:r.sha(R/'docs/plans/original-completion-2026-10-02'/n) for n in docs}==docs
+ assert r.inventory(stage,stage=True)==dict(expected,**previous)
+ r.write(out/'runner-ended.json',{'mode':mode,'passed':passed,'phases':phases,'cleanup':cleanup,'cleanup_errors':cleanup_errors,'error':error,'whole_source_unchanged':True,'whole_default_profile_unchanged':True,'doc4_unchanged':True,'source_adoption':False,'normal_GUI_accepted':False,'full_regression_accepted':False,'formal_cross_PID_accepted':False,'actual_captured_PIDs':[p.pid for p in outer.OWNED],'actual_native_processes':len(outer.OWNED),'actual_checks':sum(p.get('reported_checks',0)for p in phases if p['test']) if passed else None,'formal_reader_evidence_scope':'headless direct formal later-target rejection and whole two-target rollback, actual paid partial premium job and completed old dorm with real assigned upper-entry task; real earlier backup unchanged and separate-PID whole continuation. Operations OFF public worker fixture, no Main OS or full migration acceptance','native_Windows_accepted':False,'whole_goal_accepted':False})
+ print(json.dumps({'mode':mode,'passed':passed,'error':error,'actual_native':len(phases),'actual_checks':phases[-1].get('reported_checks') if phases else None}),flush=True)
+ return 0 if passed else 1
+if __name__=='__main__':raise SystemExit(main())
@@ -0,0 +1,143 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-inflight-EV-dimension-native-r01/migration-pair"
+const MODE := "read"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var original_requests: Dictionary={}
+var arrivals: Dictionary={}
+var arrival_errors: Array[String]=[]
+const GOAL:=Vector3i(0,1,0)
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:
+ journal.append(event.to_dictionary())
+ if event.event_type==&"ELEVATOR_ARRIVED":
+  var request_id: StringName=event.payload[&"request_id"]
+  if not original_requests.has(request_id):arrival_errors.append("unexpected request")
+  arrivals[request_id]=int(arrivals.get(request_id,0))+1
+  if event.payload[&"cell"]!=GOAL or event.payload.get(&"emergency",false):arrival_errors.append("wrong arrival")
+func advance(minutes: int) -> void:
+ for step: int in range(minutes):
+  clock.advance_minutes(1)
+  for guest: GuestRuntime in runtime.guest_service.get_guests():
+   if guest.current_cell==GOAL:
+    expect(runtime.guest_service.begin_leaving(guest.guest_id,clock.absolute_minute,&"P03_GOAL_REACHED").get(&"ok",false),"actual arrival begins normal departure")
+    expect(runtime.guest_service.despawn_guest(guest.guest_id,clock.absolute_minute).get(&"ok",false),"actual completed passenger leaves normal lifecycle")
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new()
+ clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42586)[&"valid"],"current canonical initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ var slot: String="user://p03-inflight-dimension/manual"
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"fresh external proof directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived dimension fixture")
+  command(&"build_facility",{&"definition_id":&"guest_elevator",&"origin":Vector3i.ZERO})
+  clock.advance_minutes(runtime.definition_registry.get_facility(&"guest_elevator").build_minutes)
+  command(&"build_facility",{&"definition_id":&"reception",&"origin":Vector3i(-6,0,0)})
+  clock.advance_minutes(runtime.definition_registry.get_facility(&"reception").build_minutes)
+  command(&"build_facility",{&"definition_id":&"premium_room",&"origin":Vector3i(-6,2,0)})
+  clock.advance_minutes(7)
+  for job: ConstructionJob in runtime.construction_service.get_jobs():
+   if job.definition_id==&"premium_room" and not job.is_terminal():job_id=job.job_id
+  expect(not job_id.is_empty(),"real paid old-size construction is in flight")
+  for index: int in range(5):
+   command(&"spawn_guest",{&"guest_id":StringName("p03.inflight.passenger.%d"%index),&"guest_type_id":&"traveler",&"gold":100,&"options":{&"current_cell":Vector3i.ZERO,&"state":GuestRuntime.State.MOVING,&"state_entered_at":clock.absolute_minute-1,&"planned_exit_at":clock.absolute_minute+2000,&"path_handle":{&"target_cell":GOAL}}})
+  clock.advance_minutes(2)
+  var car: Dictionary=runtime.elevators.get_report()[&"shafts"][0]
+  expect(car[&"phase"]==&"BOARDING" and car[&"passenger_count"]==4 and car[&"waiting_count"]==1,"actual four boarded passengers and one queued passenger at save")
+  expect(runtime.path_service.get_current_density(Vector3i.ZERO)==1 and runtime.path_service.get_transit_actor_ids().size()==4,"real cabin seats excluded from floor density")
+  for trip: Dictionary in runtime.elevators.get_report()[&"trips"]:original_requests[trip[&"request_id"]]=trip[&"actor_id"]
+  expect(original_requests.size()==5,"all five actual request IDs saved")
+  var legacy: Dictionary=runtime.create_snapshot()
+  var original_job: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+  expect(original_job[&"progress"]>0 and original_job[&"reserved_cells"].size()==6,"old-size job is partly paid and reserved")
+  expect(SaveService.save_snapshot(slot,legacy)[&"ok"],"write actual formal source")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("legacy/formal"))
+  write_proof("legacy.var",legacy);write_proof("original-job.var",original_job)
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"switch to current dimensions without fake graph changes")
+  var preview: Dictionary=runtime.preview_facility_dimensions_at_path(slot)
+  expect(preview.get(&"ok",false) and var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration preview preserves entire moving live world")
+  var migrated: Dictionary=runtime.migrate_facility_dimensions_at_path(slot,&"",String(preview.get(&"source_digest","")))
+  expect(migrated.get(&"ok",false) and migrated.get(&"backup_created",false),"formal migration makes verified original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration never advances live guest or job")
+  var backup:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(backup.get(&"ok",false) and var_to_bytes(backup.get(&"snapshot",{}))==var_to_bytes(legacy),"backup contains entire old moving state")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("migrated/formal"))
+  copy_package(ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+  write_proof("identity.var",{&"job_id":job_id,&"serial":serial,&"original_requests":original_requests})
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current dimension registry")
+  var identity: Dictionary=read_proof("identity.var");job_id=identity[&"job_id"];serial=identity[&"serial"];original_requests=identity[&"original_requests"]
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX))
+  copy_package(PAIR_ROOT.path_join("migrated/formal"),ProjectSettings.globalize_path(slot))
+  var old:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(old.get(&"ok",false) and runtime.restore_snapshot(old.get(&"snapshot",{})),"separate PID restores actual original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole old guest/job backup replay is exact")
+ var loaded:=SaveService.load_snapshot(slot)
+ expect(loaded.get(&"ok",false) and runtime.restore_snapshot(loaded.get(&"snapshot",{})),"actual migrated formal package restores")
+ var original: Dictionary=read_proof("original-job.var")
+ var actual: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+ expect(actual[&"reserved_cells"].size()==4 and actual[&"progress"]==original[&"progress"] and actual[&"construction_cost"]==original[&"construction_cost"] and actual[&"started_at"]==original[&"started_at"],"migration preserves actual paid work and changes footprint only")
+ expect(not runtime.get_operations_report().get(&"enabled",false),"scope remains controlled Operations OFF")
+ expect(runtime.domain_events.subscribe(&"*",&"p03.inflight.uncapped",Callable(self,"observe")),"subscribe whole uncapped continuation journal")
+ capture("checkpoint")
+ advance(1);capture("next1")
+ advance(1);capture("next2")
+ advance(8);capture("next10")
+ advance(150);capture("final160")
+ var exactly_once:=arrivals.size()==5 and arrival_errors.is_empty()
+ for request_id: StringName in original_requests:exactly_once=exactly_once and arrivals.get(request_id,0)==1
+ expect(exactly_once,"all five migrated actual EV request IDs arrive exactly once without emergency")
+ expect(runtime.guest_service.get_guests().is_empty() and runtime.elevators.get_report()[&"trips"].is_empty() and runtime.path_service.get_transit_actor_ids().is_empty(),"no orphan passenger seat trip or path transit after actual arrivals")
+ var completed: ConstructionJob=runtime.construction_service.get_job(job_id)
+ expect(completed.state==ConstructionJob.State.COMPLETED and runtime.facility_service.get_instance(completed.facility_instance_id).occupied_cells.size()==4,"resized paid job completes exactly once in actual Runtime")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"final moving and construction world remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"all uncapped continuation events match without deletion or remapping")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"job_id":job_id,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("Inflight EV dimension formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
@@ -0,0 +1,143 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-inflight-EV-dimension-native-r01/migration-pair"
+const MODE := "write"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var original_requests: Dictionary={}
+var arrivals: Dictionary={}
+var arrival_errors: Array[String]=[]
+const GOAL:=Vector3i(0,1,0)
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:
+ journal.append(event.to_dictionary())
+ if event.event_type==&"ELEVATOR_ARRIVED":
+  var request_id: StringName=event.payload[&"request_id"]
+  if not original_requests.has(request_id):arrival_errors.append("unexpected request")
+  arrivals[request_id]=int(arrivals.get(request_id,0))+1
+  if event.payload[&"cell"]!=GOAL or event.payload.get(&"emergency",false):arrival_errors.append("wrong arrival")
+func advance(minutes: int) -> void:
+ for step: int in range(minutes):
+  clock.advance_minutes(1)
+  for guest: GuestRuntime in runtime.guest_service.get_guests():
+   if guest.current_cell==GOAL:
+    expect(runtime.guest_service.begin_leaving(guest.guest_id,clock.absolute_minute,&"P03_GOAL_REACHED").get(&"ok",false),"actual arrival begins normal departure")
+    expect(runtime.guest_service.despawn_guest(guest.guest_id,clock.absolute_minute).get(&"ok",false),"actual completed passenger leaves normal lifecycle")
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new()
+ clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42586)[&"valid"],"current canonical initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ var slot: String="user://p03-inflight-dimension/manual"
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"fresh external proof directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived dimension fixture")
+  command(&"build_facility",{&"definition_id":&"guest_elevator",&"origin":Vector3i.ZERO})
+  clock.advance_minutes(runtime.definition_registry.get_facility(&"guest_elevator").build_minutes)
+  command(&"build_facility",{&"definition_id":&"reception",&"origin":Vector3i(-6,0,0)})
+  clock.advance_minutes(runtime.definition_registry.get_facility(&"reception").build_minutes)
+  command(&"build_facility",{&"definition_id":&"premium_room",&"origin":Vector3i(-6,2,0)})
+  clock.advance_minutes(7)
+  for job: ConstructionJob in runtime.construction_service.get_jobs():
+   if job.definition_id==&"premium_room" and not job.is_terminal():job_id=job.job_id
+  expect(not job_id.is_empty(),"real paid old-size construction is in flight")
+  for index: int in range(5):
+   command(&"spawn_guest",{&"guest_id":StringName("p03.inflight.passenger.%d"%index),&"guest_type_id":&"traveler",&"gold":100,&"options":{&"current_cell":Vector3i.ZERO,&"state":GuestRuntime.State.MOVING,&"state_entered_at":clock.absolute_minute-1,&"planned_exit_at":clock.absolute_minute+2000,&"path_handle":{&"target_cell":GOAL}}})
+  clock.advance_minutes(2)
+  var car: Dictionary=runtime.elevators.get_report()[&"shafts"][0]
+  expect(car[&"phase"]==&"BOARDING" and car[&"passenger_count"]==4 and car[&"waiting_count"]==1,"actual four boarded passengers and one queued passenger at save")
+  expect(runtime.path_service.get_current_density(Vector3i.ZERO)==1 and runtime.path_service.get_transit_actor_ids().size()==4,"real cabin seats excluded from floor density")
+  for trip: Dictionary in runtime.elevators.get_report()[&"trips"]:original_requests[trip[&"request_id"]]=trip[&"actor_id"]
+  expect(original_requests.size()==5,"all five actual request IDs saved")
+  var legacy: Dictionary=runtime.create_snapshot()
+  var original_job: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+  expect(original_job[&"progress"]>0 and original_job[&"reserved_cells"].size()==6,"old-size job is partly paid and reserved")
+  expect(SaveService.save_snapshot(slot,legacy)[&"ok"],"write actual formal source")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("legacy/formal"))
+  write_proof("legacy.var",legacy);write_proof("original-job.var",original_job)
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"switch to current dimensions without fake graph changes")
+  var preview: Dictionary=runtime.preview_facility_dimensions_at_path(slot)
+  expect(preview.get(&"ok",false) and var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration preview preserves entire moving live world")
+  var migrated: Dictionary=runtime.migrate_facility_dimensions_at_path(slot,&"",String(preview.get(&"source_digest","")))
+  expect(migrated.get(&"ok",false) and migrated.get(&"backup_created",false),"formal migration makes verified original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration never advances live guest or job")
+  var backup:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(backup.get(&"ok",false) and var_to_bytes(backup.get(&"snapshot",{}))==var_to_bytes(legacy),"backup contains entire old moving state")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("migrated/formal"))
+  copy_package(ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+  write_proof("identity.var",{&"job_id":job_id,&"serial":serial,&"original_requests":original_requests})
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current dimension registry")
+  var identity: Dictionary=read_proof("identity.var");job_id=identity[&"job_id"];serial=identity[&"serial"];original_requests=identity[&"original_requests"]
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX))
+  copy_package(PAIR_ROOT.path_join("migrated/formal"),ProjectSettings.globalize_path(slot))
+  var old:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(old.get(&"ok",false) and runtime.restore_snapshot(old.get(&"snapshot",{})),"separate PID restores actual original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole old guest/job backup replay is exact")
+ var loaded:=SaveService.load_snapshot(slot)
+ expect(loaded.get(&"ok",false) and runtime.restore_snapshot(loaded.get(&"snapshot",{})),"actual migrated formal package restores")
+ var original: Dictionary=read_proof("original-job.var")
+ var actual: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+ expect(actual[&"reserved_cells"].size()==4 and actual[&"progress"]==original[&"progress"] and actual[&"construction_cost"]==original[&"construction_cost"] and actual[&"started_at"]==original[&"started_at"],"migration preserves actual paid work and changes footprint only")
+ expect(not runtime.get_operations_report().get(&"enabled",false),"scope remains controlled Operations OFF")
+ expect(runtime.domain_events.subscribe(&"*",&"p03.inflight.uncapped",Callable(self,"observe")),"subscribe whole uncapped continuation journal")
+ capture("checkpoint")
+ advance(1);capture("next1")
+ advance(1);capture("next2")
+ advance(8);capture("next10")
+ advance(150);capture("final160")
+ var exactly_once:=arrivals.size()==5 and arrival_errors.is_empty()
+ for request_id: StringName in original_requests:exactly_once=exactly_once and arrivals.get(request_id,0)==1
+ expect(exactly_once,"all five migrated actual EV request IDs arrive exactly once without emergency")
+ expect(runtime.guest_service.get_guests().is_empty() and runtime.elevators.get_report()[&"trips"].is_empty() and runtime.path_service.get_transit_actor_ids().is_empty(),"no orphan passenger seat trip or path transit after actual arrivals")
+ var completed: ConstructionJob=runtime.construction_service.get_job(job_id)
+ expect(completed.state==ConstructionJob.State.COMPLETED and runtime.facility_service.get_instance(completed.facility_instance_id).occupied_cells.size()==4,"resized paid job completes exactly once in actual Runtime")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"final moving and construction world remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"all uncapped continuation events match without deletion or remapping")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"job_id":job_id,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("Inflight EV dimension formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
@@ -0,0 +1,68 @@
+from pathlib import Path
+import hashlib,importlib.util,json,sys,os
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部');A=R/'artifacts/original-completion-2026-10-02';P=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-inflight-EV-dimension-prep-r01')
+TEST='tests/s3/test_runtime_staff_assignment.gd'
+READER='tests/s6/test_runtime_snapshot_serialization.gd'
+def module(n,p):
+ s=importlib.util.spec_from_file_location(n,p);m=importlib.util.module_from_spec(s);s.loader.exec_module(m);return m
+def main():
+ assert len(sys.argv)==2
+ mode='formal-cross-pid';out=Path(sys.argv[1]);assert out.parent==A and not out.exists() and str(out)==json.loads((P/'preparation.json').read_bytes())['planned_output']
+ r=module('role_formal_literal_runner',R/'tools/run_all_tests.py')
+ seal=r.read(P/'input-seal.json')
+ assert set(str(p.relative_to(P)) for p in P.rglob('*') if p.is_file())==set(seal['files'])|{'input-seal.json','preparation.json'}
+ for n,v in seal['files'].items():assert Path(v['path'])==P/n and r.sha(v['path'])==v['sha256'] and Path(v['path']).stat().st_size==v['bytes']
+ for name in ['writer.gd','reader.gd']:
+  lines=(P/name).read_text().splitlines();bindings=[line[len('const PAIR_ROOT := '):]for line in lines if line.startswith('const PAIR_ROOT := ')]
+  assert len(bindings)==1 and json.loads(bindings[0])==str(out/'migration-pair') and not (out/'migration-pair').exists()
+ root_before=r.source_refs(R);assert len(root_before)==1299
+ adopted=r.read(A/'p03-current1299-defense-empty-two-ref-source-adoption-r01/source-after.json')
+ assert {n:v['sha256']for n,v in root_before.items()}==adopted
+ refs=dict(root_before);refs[TEST]=seal['files']['writer.gd'];refs[READER]=seal['files']['reader.gd']
+ for n,v in refs.items():assert Path(v['path']).stat().st_size==v['bytes'] and r.sha(v['path'])==v['sha256']
+ docs={n:r.sha(R/'docs/plans/original-completion-2026-10-02'/n) for n in ('IMPLEMENTATION_PLAN.md','PROGRESS_INTEGRATION.md','work_packages.json','progress_snapshot.json')}
+ outer=module('bath_literal_owned_outer',r.SUPPORT/'owned_outer.py');assert not outer.native.helper['live_engines']()
+ engine='/Applications/Godot.app/Contents/MacOS/Godot'
+ out.mkdir();stage=out/'stage';stage.mkdir();(out/'starters').mkdir();(out/'bootstrap').mkdir()
+ for n,v in r.read(r.SUPPORT/'bootstrap-scripts.json').items():
+  data=v['text'].encode();assert hashlib.sha256(data).hexdigest()==v['sha256'];(out/'bootstrap'/n).write_bytes(data)
+ protected=r.default_player(R);expected={n:{'bytes':v['bytes'],'sha256':v['sha256']}for n,v in refs.items()}
+ selected={'root_before':root_before,'map':{n:v['sha256']for n,v in refs.items()},'timeout':180}
+ for n,v in refs.items():
+  p=stage/n;p.parent.mkdir(parents=True,exist_ok=True);r.copy_source(Path(v['path']),p)
+ assert r.inventory(stage,stage=True)==expected
+ public=(stage/'project.godot').read_bytes();paths=['res://'+n for n in sorted(refs) if n.endswith('.gd')];r.write(out/'parse-paths.json',paths)
+ markers=module('bath_literal_markers',R/'tools/strict_test_markers.py')
+ contracts=markers.load_contracts(R/'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json')
+ contracts[TEST]={'test':TEST,'template':'Inflight EV dimension formal write: <checks> checks, <failures> failures','required':True}
+ contracts[READER]={'test':READER,'template':'Inflight EV dimension formal read: <checks> checks, <failures> failures','required':True}
+ policy=r.read(r.SUPPORT/'suite-policy.json');assert TEST not in policy['suite_policies'] and READER not in policy['suite_policies']
+ r.write(out/'runner-input.json',{'mode':mode,'owner_pid':os.getpid(),'wrapper_sha256':r.sha(__file__),'runner_sha256':r.sha(R/'tools/run_all_tests.py'),'selected_source_map':selected['map'],'source_before':root_before,'default_player':protected,'doc4_before':docs,'actual_full':False,'source_adoption':False})
+ diagnostics=module('bath_literal_diagnostics',r.SUPPORT/'diagnostic_gate.py');owners=module('bath_literal_owners',r.SUPPORT/'ordinary_proof_gate.py');audio=module('bath_literal_audio',r.SUPPORT/'audio_evidence_gate.py')
+ phases=[];previous={};error=None;formal_before=None
+ try:
+  for phase,test in [('import',None),('parse',None),('writer',TEST),('reader',READER)]:
+   if phase=='writer':assert not (out/'migration-pair').exists()
+   if phase=='reader':assert r.inventory(out/'migration-pair')==pair_before
+   row=r.execute_phase(engine,stage,out,phase,test,selected,expected,previous,policy,contracts,paths,public,protected,R,outer,markers,diagnostics,owners,audio);phases.append(row)
+   print(json.dumps({'phase':phase,'passed':row['passed'],'checks':row.get('reported_checks'),'error':row.get('validation_error'),'guard_error':row.get('guard_error')}),flush=True)
+   r.require(row['passed'],'strict phase failure stops without retry')
+   if phase=='writer':
+    pair_before=r.inventory(out/'migration-pair');formal_before={n:v for n,v in pair_before.items()if '/formal/'in n}
+    assert len(formal_before)==12
+    r.write(out/'actual-formal-before-reader.json',formal_before)
+   if phase=='reader':
+    after=r.inventory(out/'migration-pair');assert {n:v for n,v in after.items()if '/formal/'in n}==formal_before
+    assert all(after[n]==v for n,v in pair_before.items())
+    r.write(out/'actual-formal-after-reader.json',{n:v for n,v in after.items()if '/formal/'in n})
+ except BaseException as caught:error=type(caught).__name__+': '+str(caught)
+ finally:cleanup,cleanup_errors=outer.finish_captured(outer.OWNED)
+ passed=error is None and not cleanup_errors and len(phases)==4 and all(x['passed'] for x in phases) and all(x['engine_ended'] for x in cleanup)
+ assert r.source_refs(R)==root_before and r.default_player(R)==protected
+ assert {n:r.sha(R/'docs/plans/original-completion-2026-10-02'/n) for n in docs}==docs
+ assert r.inventory(stage,stage=True)==dict(expected,**previous)
+ r.write(out/'runner-ended.json',{'mode':mode,'passed':passed,'phases':phases,'cleanup':cleanup,'cleanup_errors':cleanup_errors,'error':error,'whole_source_unchanged':True,'whole_default_profile_unchanged':True,'doc4_unchanged':True,'source_adoption':False,'normal_GUI_accepted':False,'full_regression_accepted':False,'formal_cross_PID_accepted':False,'actual_captured_PIDs':[p.pid for p in outer.OWNED],'actual_native_processes':len(outer.OWNED),'actual_checks':sum(p.get('reported_checks',0)for p in phases if p['test']) if passed else None,'formal_reader_evidence_scope':'headless direct formal legacy-dimension migration with four actual boarded passengers and one queued passenger plus paid concurrent construction; separate-PID original backup and migrated full continuation; Operations OFF public guest inputs; changed destination rejection, Main OS input, rescue/logistics and whole migration remain unaccepted','native_Windows_accepted':False,'whole_goal_accepted':False})
+ print(json.dumps({'mode':mode,'passed':passed,'error':error,'actual_native':len(phases),'actual_checks':phases[-1].get('reported_checks')}),flush=True)
+ return 0 if passed else 1
+if __name__=='__main__':raise SystemExit(main())
@@ -0,0 +1,121 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-inflight-dimension-native-r01/migration-pair"
+const MODE := "read"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:journal.append(event.to_dictionary())
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new()
+ clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42586)[&"valid"],"current canonical initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ var slot: String="user://p03-inflight-dimension/manual"
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"fresh external proof directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived dimension fixture")
+  for y: int in [1,2,3]:
+   command(&"build_facility",{&"definition_id":&"guest_stairs",&"origin":Vector3i(4,y,0)})
+   clock.advance_minutes(runtime.definition_registry.get_facility(&"guest_stairs").build_minutes)
+  command(&"build_facility",{&"definition_id":&"reception",&"origin":Vector3i(-6,0,0)})
+  clock.advance_minutes(runtime.definition_registry.get_facility(&"reception").build_minutes)
+  command(&"build_facility",{&"definition_id":&"premium_room",&"origin":Vector3i(-6,2,0)})
+  clock.advance_minutes(7)
+  for job: ConstructionJob in runtime.construction_service.get_jobs():
+   if job.definition_id==&"premium_room" and not job.is_terminal():job_id=job.job_id
+  expect(not job_id.is_empty(),"real paid old-size construction is in flight")
+  command(&"spawn_guest",{&"guest_id":&"p03.inflight.guest",&"guest_type_id":&"traveler",&"gold":100,&"options":{&"current_cell":Vector3i(4,0,0),&"state":GuestRuntime.State.MOVING,&"state_entered_at":clock.absolute_minute-1,&"planned_exit_at":clock.absolute_minute+2000,&"path_handle":{&"target_cell":Vector3i(4,3,0)}}})
+  clock.advance_minutes(1)
+  var guest: GuestRuntime=runtime.guest_service.get_guest(&"p03.inflight.guest")
+  expect(guest!=null and guest.current_cell==Vector3i(4,0,0) and guest.state==GuestRuntime.State.MOVING,"actual partial staircase travel at save time")
+  var legacy: Dictionary=runtime.create_snapshot()
+  expect(legacy[&"systems"][&"runtime"][&"movement_credits"].size()==1 and legacy[&"systems"][&"runtime"][&"movement_credits"][0][&"credit"]==1000,"actual fractional movement credit saved")
+  var original_job: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+  expect(original_job[&"progress"]>0 and original_job[&"reserved_cells"].size()==6,"old-size job is partly paid and reserved")
+  expect(SaveService.save_snapshot(slot,legacy)[&"ok"],"write actual formal source")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("legacy/formal"))
+  write_proof("legacy.var",legacy);write_proof("original-job.var",original_job)
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"switch to current dimensions without fake graph changes")
+  var preview: Dictionary=runtime.preview_facility_dimensions_at_path(slot)
+  expect(preview.get(&"ok",false) and var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration preview preserves entire moving live world")
+  var migrated: Dictionary=runtime.migrate_facility_dimensions_at_path(slot,&"",String(preview.get(&"source_digest","")))
+  expect(migrated.get(&"ok",false) and migrated.get(&"backup_created",false),"formal migration makes verified original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration never advances live guest or job")
+  var backup:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(backup.get(&"ok",false) and var_to_bytes(backup.get(&"snapshot",{}))==var_to_bytes(legacy),"backup contains entire old moving state")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("migrated/formal"))
+  copy_package(ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+  write_proof("identity.var",{&"job_id":job_id,&"serial":serial})
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current dimension registry")
+  var identity: Dictionary=read_proof("identity.var");job_id=identity[&"job_id"];serial=identity[&"serial"]
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX))
+  copy_package(PAIR_ROOT.path_join("migrated/formal"),ProjectSettings.globalize_path(slot))
+  var old:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(old.get(&"ok",false) and runtime.restore_snapshot(old.get(&"snapshot",{})),"separate PID restores actual original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole old guest/job backup replay is exact")
+ var loaded:=SaveService.load_snapshot(slot)
+ expect(loaded.get(&"ok",false) and runtime.restore_snapshot(loaded.get(&"snapshot",{})),"actual migrated formal package restores")
+ var original: Dictionary=read_proof("original-job.var")
+ var actual: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+ expect(actual[&"reserved_cells"].size()==4 and actual[&"progress"]==original[&"progress"] and actual[&"construction_cost"]==original[&"construction_cost"] and actual[&"started_at"]==original[&"started_at"],"migration preserves actual paid work and changes footprint only")
+ expect(not runtime.get_operations_report().get(&"enabled",false),"scope remains controlled Operations OFF")
+ expect(runtime.domain_events.subscribe(&"*",&"p03.inflight.uncapped",Callable(self,"observe")),"subscribe whole uncapped continuation journal")
+ capture("checkpoint")
+ clock.advance_minutes(1);capture("next1")
+ expect(runtime.guest_service.get_guest(&"p03.inflight.guest").current_cell==Vector3i(4,1,0),"real half-step finishes exactly once after migration")
+ clock.advance_minutes(1);capture("next2")
+ clock.advance_minutes(8);capture("next10")
+ clock.advance_minutes(150);capture("final160")
+ var completed: ConstructionJob=runtime.construction_service.get_job(job_id)
+ expect(completed.state==ConstructionJob.State.COMPLETED and runtime.facility_service.get_instance(completed.facility_instance_id).occupied_cells.size()==4,"resized paid job completes exactly once in actual Runtime")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"final moving and construction world remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"all uncapped continuation events match without deletion or remapping")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"job_id":job_id,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("Inflight dimension formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
@@ -0,0 +1,121 @@
+extends SceneTree
+const PAIR_ROOT := "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p03-current1299-inflight-dimension-native-r01/migration-pair"
+const MODE := "write"
+var checks:=0
+var failures:=0
+var runtime: Variant
+var clock: Variant
+var state: Variant
+var job_id: StringName
+var serial:=0
+var journal: Array[Dictionary]=[]
+func _initialize() -> void:call_deferred("run")
+func expect(ok: bool,label: String) -> void:
+ checks+=1
+ print(("PASS " if ok else "FAIL ")+label)
+ if not ok:failures+=1;push_error("P03_INFLIGHT "+label)
+func write_proof(name: String,value: Variant) -> void:
+ var path:=PAIR_ROOT.path_join(name)
+ expect(not FileAccess.file_exists(path),"fresh proof "+name)
+ var file:=FileAccess.open(path,FileAccess.WRITE)
+ expect(file!=null,"open proof "+name)
+ if file!=null:file.store_buffer(var_to_bytes(value));file.close()
+func read_proof(name: String) -> Variant:
+ var data:=FileAccess.get_file_as_bytes(PAIR_ROOT.path_join(name))
+ expect(not data.is_empty(),"read whole proof "+name)
+ return bytes_to_var(data)
+func command(kind: StringName,payload: Dictionary) -> CommandResult:
+ serial+=1
+ var result: CommandResult=runtime.submit_command(kind,payload,&"player",&"",0,-1,StringName("p03.inflight.%d"%serial))
+ expect(result.is_success(),"public paid command "+String(kind)+": "+result.message)
+ return result
+func copy_package(source: String,destination: String) -> void:
+ expect(DirAccess.make_dir_recursive_absolute(destination)==OK,"package destination "+destination)
+ for name: String in [SaveService.WORLD_FILE,SaveService.MANIFEST_FILE,SaveService.THUMBNAIL_FILE,SaveService.JOURNAL_FILE]:
+  var original:=FileAccess.get_file_as_bytes(source.path_join(name))
+  expect(not original.is_empty() and not FileAccess.file_exists(destination.path_join(name)),"fresh formal member "+name)
+  var file:=FileAccess.open(destination.path_join(name),FileAccess.WRITE)
+  expect(file!=null,"open formal member "+name)
+  if file!=null:file.store_buffer(original);file.close()
+  expect(original==FileAccess.get_file_as_bytes(destination.path_join(name)),"complete formal member "+name)
+func observe(event: SimulationDomainEvent) -> void:journal.append(event.to_dictionary())
+func capture(label: String) -> void:
+ var snapshot: Dictionary=runtime.create_snapshot()
+ write_proof(MODE+"-"+label+".var",snapshot)
+ if MODE=="read":expect(var_to_bytes(snapshot)==var_to_bytes(read_proof("write-"+label+".var")),"entire separate-PID snapshot "+label)
+func run() -> void:
+ root.get_node("GameClock").set_paused(true);root.get_node("GameClock").set_process(false)
+ root.get_node("SimulationRuntime").configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false})
+ runtime=load("res://autoload/simulation_runtime.gd").new()
+ clock=load("res://autoload/game_clock.gd").new();state=load("res://autoload/game_state.gd").new()
+ clock.reset(1,6,0);state.reset();expect(runtime.initialize(clock,state,42586)[&"valid"],"current canonical initialization")
+ clock.set_paused(true);runtime.configure_save_policy({&"enabled":false,&"daily_checkpoint_enabled":false,&"auto_migrate":false})
+ var paths: Array[String]=FacilityCatalog.FACILITY_PATHS+FacilityCatalog.INFRASTRUCTURE_FACILITY_PATHS+FacilityCatalog.RESCUE_FACILITY_PATHS
+ var slot: String="user://p03-inflight-dimension/manual"
+ if MODE=="write":
+  expect(DirAccess.make_dir_recursive_absolute(PAIR_ROOT)==OK,"fresh external proof directory")
+  paths.append("res://tests/fixtures/legacy_premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"explicit archived dimension fixture")
+  for y: int in [1,2,3]:
+   command(&"build_facility",{&"definition_id":&"guest_stairs",&"origin":Vector3i(4,y,0)})
+   clock.advance_minutes(runtime.definition_registry.get_facility(&"guest_stairs").build_minutes)
+  command(&"build_facility",{&"definition_id":&"reception",&"origin":Vector3i(-6,0,0)})
+  clock.advance_minutes(runtime.definition_registry.get_facility(&"reception").build_minutes)
+  command(&"build_facility",{&"definition_id":&"premium_room",&"origin":Vector3i(-6,2,0)})
+  clock.advance_minutes(7)
+  for job: ConstructionJob in runtime.construction_service.get_jobs():
+   if job.definition_id==&"premium_room" and not job.is_terminal():job_id=job.job_id
+  expect(not job_id.is_empty(),"real paid old-size construction is in flight")
+  command(&"spawn_guest",{&"guest_id":&"p03.inflight.guest",&"guest_type_id":&"traveler",&"gold":100,&"options":{&"current_cell":Vector3i(4,0,0),&"state":GuestRuntime.State.MOVING,&"state_entered_at":clock.absolute_minute-1,&"planned_exit_at":clock.absolute_minute+2000,&"path_handle":{&"target_cell":Vector3i(4,3,0)}}})
+  clock.advance_minutes(1)
+  var guest: GuestRuntime=runtime.guest_service.get_guest(&"p03.inflight.guest")
+  expect(guest!=null and guest.current_cell==Vector3i(4,0,0) and guest.state==GuestRuntime.State.MOVING,"actual partial staircase travel at save time")
+  var legacy: Dictionary=runtime.create_snapshot()
+  expect(legacy[&"systems"][&"runtime"][&"movement_credits"].size()==1 and legacy[&"systems"][&"runtime"][&"movement_credits"][0][&"credit"]==1000,"actual fractional movement credit saved")
+  var original_job: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+  expect(original_job[&"progress"]>0 and original_job[&"reserved_cells"].size()==6,"old-size job is partly paid and reserved")
+  expect(SaveService.save_snapshot(slot,legacy)[&"ok"],"write actual formal source")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("legacy/formal"))
+  write_proof("legacy.var",legacy);write_proof("original-job.var",original_job)
+  paths.erase("res://tests/fixtures/legacy_premium_room.tres");paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"switch to current dimensions without fake graph changes")
+  var preview: Dictionary=runtime.preview_facility_dimensions_at_path(slot)
+  expect(preview.get(&"ok",false) and var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration preview preserves entire moving live world")
+  var migrated: Dictionary=runtime.migrate_facility_dimensions_at_path(slot,&"",String(preview.get(&"source_digest","")))
+  expect(migrated.get(&"ok",false) and migrated.get(&"backup_created",false),"formal migration makes verified original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(legacy),"migration never advances live guest or job")
+  var backup:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(backup.get(&"ok",false) and var_to_bytes(backup.get(&"snapshot",{}))==var_to_bytes(legacy),"backup contains entire old moving state")
+  copy_package(ProjectSettings.globalize_path(slot),PAIR_ROOT.path_join("migrated/formal"))
+  copy_package(ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX),PAIR_ROOT.path_join("backup/formal"))
+  write_proof("identity.var",{&"job_id":job_id,&"serial":serial})
+ else:
+  paths.append("res://data/facilities/expansion/premium_room.tres")
+  expect(runtime.definition_registry.rebuild_from_paths(paths)[&"valid"],"reader current dimension registry")
+  var identity: Dictionary=read_proof("identity.var");job_id=identity[&"job_id"];serial=identity[&"serial"]
+  copy_package(PAIR_ROOT.path_join("backup/formal"),ProjectSettings.globalize_path(slot+SaveService.MIGRATION_BACKUP_SUFFIX))
+  copy_package(PAIR_ROOT.path_join("migrated/formal"),ProjectSettings.globalize_path(slot))
+  var old:=SaveService.load_snapshot(slot+SaveService.MIGRATION_BACKUP_SUFFIX)
+  expect(old.get(&"ok",false) and runtime.restore_snapshot(old.get(&"snapshot",{})),"separate PID restores actual original backup")
+  expect(var_to_bytes(runtime.create_snapshot())==var_to_bytes(read_proof("legacy.var")),"whole old guest/job backup replay is exact")
+ var loaded:=SaveService.load_snapshot(slot)
+ expect(loaded.get(&"ok",false) and runtime.restore_snapshot(loaded.get(&"snapshot",{})),"actual migrated formal package restores")
+ var original: Dictionary=read_proof("original-job.var")
+ var actual: Dictionary=runtime.construction_service.get_job(job_id).create_snapshot()
+ expect(actual[&"reserved_cells"].size()==4 and actual[&"progress"]==original[&"progress"] and actual[&"construction_cost"]==original[&"construction_cost"] and actual[&"started_at"]==original[&"started_at"],"migration preserves actual paid work and changes footprint only")
+ expect(not runtime.get_operations_report().get(&"enabled",false),"scope remains controlled Operations OFF")
+ expect(runtime.domain_events.subscribe(&"*",&"p03.inflight.uncapped",Callable(self,"observe")),"subscribe whole uncapped continuation journal")
+ capture("checkpoint")
+ clock.advance_minutes(1);capture("next1")
+ expect(runtime.guest_service.get_guest(&"p03.inflight.guest").current_cell==Vector3i(4,1,0),"real half-step finishes exactly once after migration")
+ clock.advance_minutes(1);capture("next2")
+ clock.advance_minutes(8);capture("next10")
+ clock.advance_minutes(150);capture("final160")
+ var completed: ConstructionJob=runtime.construction_service.get_job(job_id)
+ expect(completed.state==ConstructionJob.State.COMPLETED and runtime.facility_service.get_instance(completed.facility_instance_id).occupied_cells.size()==4,"resized paid job completes exactly once in actual Runtime")
+ expect(runtime.restore_snapshot(runtime.create_snapshot()),"final moving and construction world remains canonical")
+ write_proof(MODE+"-events.var",journal)
+ if MODE=="read":expect(var_to_bytes(journal)==var_to_bytes(read_proof("write-events.var")),"all uncapped continuation events match without deletion or remapping")
+ write_proof(MODE+"-result.var",{&"pid":OS.get_process_id(),&"checks":checks,&"failures":failures,&"job_id":job_id,&"events":journal.size()})
+ runtime.free();clock.free();state.free()
+ print("Inflight dimension formal "+MODE+": %d checks, %d failures"%[checks,failures]);quit(failures)
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Agent Control Runner	bf559632dd	P08-02: 旧配置の安全な変更	2026-10-14 00:18:43 +09:00
Agent Control Runner	d1c7ce27d2	P08-02: 旧配置の安全な変更	2026-10-13 23:15:50 +09:00
Agent Control Runner	1545bd42d6	P08-02: 旧配置の安全な変更	2026-10-13 22:21:16 +09:00
Agent Control Runner	592809bfda	P08-02: 旧配置の安全な変更	2026-10-13 21:49:12 +09:00
Agent Control Runner	bb34f443c4	P08-02: 旧配置の安全な変更	2026-10-13 21:39:16 +09:00
Agent Control Runner	e59206b9b2	P08-02: 旧配置の安全な変更	2026-10-13 20:54:22 +09:00
Agent Control Runner	6c7c724410	P08-02: 旧配置の安全な変更	2026-10-13 20:05:01 +09:00
Takeshi	e196578c1a	Freeze P08 mixed migration acceptance and reusable historical fixtures	2026-10-13 19:35:50 +09:00
Takeshi	25b77f1d14	Preserve reviewed P22 candidate and start P08 mixed migration audit	2026-10-13 19:26:37 +09:00
Takeshi	e4dc1efac0	Record owner-approved P22 finalization and Mac lock investigation	2026-10-13 19:17:44 +09:00
Takeshi	af3df735c6	Prepare inactive task-only finalization timeout adapter	2026-10-13 18:52:34 +09:00
Takeshi	9919d66b94	Verify preserved Astra contracts and document bounded completion proposal	2026-10-13 18:50:46 +09:00
Takeshi	4167edf68a	Record P22 checker rejection and Opus-selected final Astra repair	2026-10-13 18:27:05 +09:00
Takeshi	10c62e1fa7	Pin original P22-02 contract and lossless accepted usage inputs	2026-10-13 17:57:41 +09:00
Takeshi	b7e706e798	Verify existing asset publisher provenance and preserve completed worktrees	2026-10-13 17:43:33 +09:00
Takeshi	257449cd08	Audit preserved P13 final repair and prepare bounded continuation fixes	2026-10-13 17:24:40 +09:00
Takeshi	c4cbc5feb2	Close reviewed mana proposal artifact without claiming P06 acceptance	2026-10-13 17:10:49 +09:00
Agent Control Runner	65a4fe2bb8	Merge commit '6b78f8fd71131e61ba695939f4629fec9f51d7a9' into HEAD	2026-10-13 17:07:25 +09:00
Agent Control Runner	6b78f8fd71	MP-01-r02: 承認用マナ契約候補の作成（原88成果の完了ではない）	2026-10-13 17:04:45 +09:00