Reconcile mana proposal progress and pin arithmetic preflight

Record authorized mana proposal repair and preserved artifact compression
Record P24 normal placement and modal preservation evidence
2026-10-13 17:06:46 +09:00 · 2026-10-13 17:03:09 +09:00 · 2026-10-13 16:36:07 +09:00 · 2026-10-13 16:02:21 +09:00 · 2026-10-13 15:43:03 +09:00 · 2026-10-13 14:34:06 +09:00
74 changed files with 11852 additions and 1228 deletions
@@ -330,7 +330,6 @@ func initialize(clock: SimulationKernel, state: Variant, seed := DEFAULT_WORLD_S
 	register_command_executor(&"begin_staff_task", Callable(self, "_execute_begin_staff_task"))
 	register_command_executor(&"progress_staff_task", Callable(self, "_execute_progress_staff_task"))
 	register_command_executor(&"create_relationship", Callable(self, "_execute_create_relationship"))
-	register_command_executor(&"register_original_relationship", Callable(self, "_execute_register_original_relationship"))
 	register_command_executor(&"change_relationship", Callable(self, "_execute_change_relationship"))
 	register_command_executor(&"attack_relationship_shield", Callable(self, "_execute_attack_relationship_shield"))
 	register_command_executor(&"request_route_lock", Callable(self, "_execute_request_route_lock"))
@@ -1055,15 +1054,8 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 	):
 		return false
 	var restored_relationships := RelationshipService.new()
-	restored_relationships.configure_original_identity_validator(
-		func(payload: Dictionary) -> bool: return _original_relationship_identities_valid(payload, restored_staff)
-	)
 	if not restored_relationships.restore_snapshot(runtime_data[&"relationships"]):
 		return false
-	for relationship: RelationshipState in restored_relationships.get_relationships():
-		for actor_id: StringName in [relationship.actor_a_id, relationship.actor_b_id]:
-			if actor_id != &"player" and not restored_staff.has_staff(actor_id) and not restored_guests.has_guest(actor_id):
-				return false
 	var restored_events := EventService.new()
 	for raw_definition: Variant in runtime_data[&"event_definitions"]:
 		var definition := EventDefinition.from_variant(raw_definition)
@@ -5386,9 +5378,6 @@ func _initialize_s4_relationship_events() -> void:
 func _configure_relationship_event_boundaries() -> void:
 	if relationship_service == null or event_service == null:
 		return
-	relationship_service.configure_original_identity_validator(
-		func(payload: Dictionary) -> bool: return _original_relationship_identities_valid(payload, staff_service)
-	)
 	relationship_service.configure_candidate_callback(
 		Callable(self, "_on_relationship_threshold_candidate")
 	)
@@ -6770,30 +6759,6 @@ func _execute_progress_staff_task(command: SimulationCommand) -> CommandResult:
 	result.command_id = command.command_id
 	return result

-func _original_relationship_identities_valid(payload: Dictionary, staff_registry: StaffService) -> bool:
-	if payload.get("protagonist_id") != "player" or staff_registry == null:
-		return false
-	var subject := StringName(payload.get("subject_id", ""))
-	var rival := StringName(payload.get("rival_id", ""))
-	if subject == &"player" or rival == &"player" or subject == rival or not staff_registry.has_staff(subject):
-		return false
-	var heroine_definition := mvp_content_catalog.get_entry(&"unique_characters", subject)
-	var rival_definition := mvp_content_catalog.get_entry(&"unique_characters", rival)
-	var subject_staff := staff_registry.get_staff(subject)
-	return subject_staff.employment_kind == StaffRuntime.EmploymentKind.UNIQUE \
-		and heroine_definition.get(&"role_id") == String(subject_staff.role_id) \
-		and heroine_definition.get(&"character_kind") == "heroine" \
-		and rival_definition.get(&"character_kind") == "rival" \
-		and heroine_definition.get(&"counterpart_id") == String(rival) \
-		and rival_definition.get(&"counterpart_id") == String(subject)
-
-
-func _execute_register_original_relationship(command: SimulationCommand) -> CommandResult:
-	var result := relationship_service.register_original_relationship(command.payload)
-	result.command_id = command.command_id
-	return result
-
-
 func _execute_create_relationship(command: SimulationCommand) -> CommandResult:
 	var actor_a_id := StringName(command.payload.get(&"actor_a_id", command.payload.get("actor_a_id", "")))
 	var actor_b_id := StringName(command.payload.get(&"actor_b_id", command.payload.get("actor_b_id", "")))
@@ -10894,7 +10859,6 @@ func get_staff_management_report() -> Dictionary:
 			&"can_edit": block_reason.is_empty(),
 			&"assignment_block_reason": block_reason,
 			&"unique_contract": _staff_unique_contract_report(staff),
-			&"original_relationship": relationship_service.get_original_relationship(staff.staff_id),
 		})
 	var facilities: Array[Dictionary] = []
 	for facility: FacilityInstance in facility_service.get_instances():
@@ -2,28 +2,6 @@
  "schema_version": 1,
  "scope": "exact per-suite completion label/schema; all check counts from actual raw only",
  "rows": [
-    {
-      "test": "tests/s4/test_original_relationship_model.gd",
-      "template": "Original relationship model: <checks> checks, <failures> failures",
-      "required": true,
-      "fixed_check_count_used": false,
-      "source_sha256_at_schema_audit": "ad509f5fb67ab91e1d1d99a08af51e4695e411b9a2541ea63ee22b1555cb0924",
-      "authority": {
-        "path": "docs/spec/acceptance/P18-01-code-r01.json",
-        "scope": "new backend suite marker; native execution pending"
-      }
-    },
-    {
-      "test": "tests/s4/test_original_relationship_runtime.gd",
-      "template": "Original relationship runtime: <checks> checks, <failures> failures",
-      "required": true,
-      "fixed_check_count_used": false,
-      "source_sha256_at_schema_audit": "374f3d31a65d2f2b62dfef29721c8c838575b856f4fa5a0bca31c6ba4c7e09dd",
-      "authority": {
-        "path": "docs/spec/acceptance/P18-01-code-r01.json",
-        "scope": "new backend suite marker; native execution pending"
-      }
-    },
    {
      "test": "tests/ui/test_selection_departure.gd",
      "template": "Selection departure: <checks> checks, <failures> failures",
@@ -0,0 +1,7 @@
+{
+  "action": "request-repair",
+  "task_id": "MP-01-r02",
+  "reason": "The worker stopped for one reason only: the reuse_inputs paths outside its sandbox were unreadable. It did not report any problem with the spec or the design. The owner has confirmed that byte-identical copies of both reuse files are already inside the allowed output directory. A repair that points the worker at those in-workspace copies fixes the block without reading outside the sandbox, expanding scope or changing the spec.\n\nRepair budget mismatch: the task contract says max_repair_attempts=1, and the status shows repairs=1. The owner says one repair remains under a cap of 2. The Runner must check its own counter before dispatching. If the cap is reached, stop and escalate to the owner. Do not raise the cap or waive anything to make this run.\n\nDirections for the worker:\n\n(0) Before any edit, confirm the contract spec hash using git show <base>:docs/spec/acceptance/P06-mana-proposal-r02.json, then .strip(), then UTF-8 SHA256. It must equal f8cf1753…be77c6. A difference caused only by a trailing newline is not a reason to block.\n\n(1) Use only the in-workspace copies as reuse inputs: docs/plans/original-completion-2026-10-02/execution/mana-proposal/proposal.json (raw SHA aca6d781…6f0d2) and PROPOSAL.md (raw SHA 95024959…bb41f). Check both raw-byte SHAs before editing. If either does not match, return blocked and change nothing. Do not read the external MP-01-implement paths or try to get around the sandbox. Revise both files in place. Keep the existing values, reasoning and comparisons, and change only what items (2)–(9) require. Do not start new research or a new numeric design.\n\n(2) Make source_pins a dict of {repo-relative path: raw-file SHA256}, hashed from the current files. Move provenance into a separate field that keeps original, current implementation, fixture and candidate sources apart.\n\n(3) demand_catalog: for the 4 facilities that do not set maintenance_mana, set observed_maintenance_mana=0 and cite FacilityDefinition's explicit default of 0. Mark the 13 unimplemented original facilities as unknown, not 0, and do not project whole-game demand.\n\n(4) Fix the surplus scenario. The net change is 63−40=23 per interval going down. Starting from 200, stock is 16 after 8 intervals and hits 0 in the 9th, not the 12th. Show the formula, inputs, period and result, and fix every place that depends on this number.\n\n(5) Furnace: separate two capacity checks, (a) capacity remaining after generation and demand, and (b) conservative headroom measured before demand. Recommend one as an UNAPPROVED candidate only. Explain that rejection is atomic and nothing is partly consumed. Give the proposed input/output amounts, eligibility and timing. No actor or resource is actually consumed. Keep the original constraints: furnace is 6x3, back underground, consumes slaves, and no input that breaks other original rules such as people being irreplaceable or unsellable.\n\n(6) Zero stock always means total facility shutdown unless the resulting stock is positive. Legacy zero must not be silently turned into full or unlimited stock.\n\n(7) Proposed generation, initial amount, capacity and the 10-minute interval reuse existing values. Label them as proposals, not approved balancing. Keep GameState mana=100 (initial stock) separate from STARTER_MANA_OUTPUT=100 (network supply capacity, not generation per interval).\n\n(8) Carry over all original constraints. List the real open decisions, including the D05 update order that is still unapproved. Keep the facts that P24 final acceptance depends on P18, P19 and P21 and that this proposal does not replace P24. It is not P06-01 acceptance and not a new original unit.\n\n(9) At the top of PROPOSAL.md, state that it is unapproved and not applied to the product. Keep status=proposed_unapproved and applied_to_product=false.\n\nEdit only these 2 files. No product, spec, ledger, Runner or provider changes. No git writes and no formal tests. Return submitted when done.\n\nThe root runs the proposal-consistency static check and arranges a separate independent review. Neither may be self-confirmed.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "This is a bounded revision of two documents that already exist, with every correction listed (pin format, 4 vs 13 facilities, one arithmetic fix, choosing a furnace capacity check, wording). The worker does not need new research or design, and the scope is limited to two files. The default model covers this quality-wise and saves time and usage. The earlier failures came from file access, not reasoning, so they do not justify gpt-6-astra."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "MP-01-r02",
+  "reason": "MP-01-r02 is in repair_ready. The owner explicitly approved raising the per-task repair cap from 1 to 2 in call_de866e18b25942ee8992263aa0189278. The used count of 1 is kept, so this run is the second and last allowed repair (2/2). No more repairs are left after this one. Nothing in the contract, permissions or acceptance denominator changes. depends_on is empty. The mana-proposal-draft resource lock is only used by this task. The two reuse inputs, proposal.json and PROPOSAL.md, are already in allowed_paths in the same implementation worktree, and their SHAs match the existing proposal. Starting the run is therefore the right next step. Scope: edit only those 2 documents. Do not create a duplicate implementation and do not do a fresh full investigation. Corrections: (1) Change source_pins to a dictionary of {repo-relative path: raw-file SHA256}, and move provenance (original / current implementation / fixture / candidate) into a separate field. (2) In demand_catalog, the 4 facilities that omit maintenance_mana are listed as 0, with the FacilityDefinition default of 0 cited as the basis. The 13 facilities not yet implemented from the original stay unknown and must not be treated as 0. (3) Describe GameState initial mana 100 (an initial balance) and STARTER_MANA_OUTPUT 100 (network supply capacity) separately. (4) Reproduce the surplus comparison B200 G40 D63: the balance first hits 0 in interval 9 and is 16 after interval 8. (5) Reproduce the furnace cases with B200 C300 G20 D16 F100: 304 → overflow 4; B196 → 300; B300 → overflow 104. (6) Keep the headroom candidate (checked after generation and demand) clearly separate from the alternative that checks before demand, and state that choosing between them is still unapproved. (7) State explicitly: nothing is consumed on rejection; person, mana and receipt changes are atomic and replays do not apply twice; reaching 0 stops all facilities; the legacy-0 handling; the D05 update order is not decided; the existing 00/06/18 boundaries are preserved; person eligibility is not decided. Candidate values (100 initial / 300 capacity / World Tree 20 per 10 minutes / furnace 1 person → 100 mana) remain awaiting approval and must not go into the product. Do not invent original values. The spec hash is checked with the Runner method (string.strip() then UTF-8), and a trailing-newline difference alone is not a reason to block. After submission, the Runner must run the proposal-consistency validation and a separate Claude review. This artifact does not complete P06-01 and is not an addition to the 88 deliverables.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "This is a reuse-only edit to 2 documents. The worker only restructures the JSON (source_pins dictionary, separate provenance field), rewrites the wording for the facility classification and the initial-mana vs network-capacity distinction, and recomputes a few already-given numbers by simple arithmetic. No new numeric design, product-code change or wider investigation is needed, so the default gpt-6.1-sol is enough in quality and better on time and usage. gpt-6-astra would only be worth it for open-ended design or a hard investigation, which this task does not have. The last repair attempt does raise the stakes, but that is handled by the detailed fix list and by validation plus an independent review, not by a stronger model."
+}
@@ -0,0 +1,21 @@
+{
+  "recorded_at": "2026-10-13T08:02:19.131833+00:00",
+  "method": "Regular installed Claude CLI subscription invocation; legitimate automatic OAuth refresh; no task worker started by probe",
+  "probe_stdout": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/claude-subscription-refresh-probe-r01/stdout.log",
+  "probe_stdout_sha256": "6908343a664b6df81c8a128336b19d8da355f3d5c54b89c6075002398c909aee",
+  "probe_result": "OK",
+  "model_observed": [
+    "claude-opus-5-5"
+  ],
+  "auth_method": "claude.ai",
+  "api_provider": "firstParty",
+  "task_commander_recovered": true,
+  "commander_decision": "actual-opus-run-decision-r02.json",
+  "task": "MP-01-r02",
+  "repair_count": 2,
+  "repair_cap": 2,
+  "worker_model_observed": "gpt-6.1-sol",
+  "worker_run_artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/41e144b3de154a70a1812188bb6d1360",
+  "api_billing_switch": false,
+  "credential_contents_recorded": false
+}
@@ -0,0 +1,40 @@
+{
+  "project": "the-tree-mana-proposal-r02",
+  "task": "MP-01-r02",
+  "contract_base": "5536bc041188d53229d18f33f08b17d4d83b7590",
+  "contract_spec_sha256": "f8cf1753e7ab400130c761570828640c03e0d51073a03f887a9085cbe6be77c6",
+  "actual_state": "blocked",
+  "actual_task_repair_cap": 1,
+  "actual_repairs": 1,
+  "project_default_cap": 2,
+  "prior_root_remaining_repair_claim_incorrect": true,
+  "same_worktree_reuse_verification": {
+    "proposal.json": {
+      "old_path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/mana-proposal/MP-01-implement/docs/plans/original-completion-2026-10-02/execution/mana-proposal/proposal.json",
+      "same_worktree_path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/mana-proposal-r02/MP-01-r02-implement/docs/plans/original-completion-2026-10-02/execution/mana-proposal/proposal.json",
+      "sha256": "aca6d781d5ce730c9f905b5dc817f27548b372b043beea68cf6de73761f6f0d2",
+      "bytes": 71713,
+      "byte_identical": true
+    },
+    "PROPOSAL.md": {
+      "old_path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/mana-proposal/MP-01-implement/docs/plans/original-completion-2026-10-02/execution/mana-proposal/PROPOSAL.md",
+      "same_worktree_path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/mana-proposal-r02/MP-01-r02-implement/docs/plans/original-completion-2026-10-02/execution/mana-proposal/PROPOSAL.md",
+      "sha256": "95024959e7c301c6a68a24de36dd6629e45b189f9d038f4397757124ba0bb41f",
+      "bytes": 9918,
+      "byte_identical": true
+    }
+  },
+  "commander_action": "request-repair",
+  "commander_selected_codex": "gpt-6.1-sol",
+  "new_worker_started": false,
+  "new_repair_consumed": false,
+  "cap_change_applied": false,
+  "proposed_cap_change": "task only1→2, retain repairs1; direct human question pending",
+  "product_values_applied": false,
+  "original_delivery_completed": false,
+  "original_denominator": {
+    "packages": 30,
+    "units": 88
+  },
+  "commander_artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-mana-proposal-r02/runs/62430caf74744114a629dd36b06ae5ac"
+}
@@ -0,0 +1,32 @@
+{
+  "recorded_at": "2026-10-13T08:06:24.867850+00:00",
+  "submitted_commit": "6b78f8fd71131e61ba695939f4629fec9f51d7a9",
+  "scope": "proposal arithmetic and source applicability; no game acceptance",
+  "passed": true,
+  "flow_rows_independently_recomputed": 126,
+  "comparisons": 21,
+  "formula": "F=0: available=B+G, consumed=min(available,D), shortage=D-consumed, overflow=max(0,available-consumed-C), after=min(C,available-consumed), global_stop=(after==0)",
+  "surplus_first_zero_interval": 9,
+  "surplus_interval_8_after": 16,
+  "furnace_arithmetic_and_both_headroom_policies_recomputed": true,
+  "source_pins_current_production_matches": 53,
+  "changed_paths": [
+    "docs/plans/original-completion-2026-10-02/execution/mana-proposal/PROPOSAL.md",
+    "docs/plans/original-completion-2026-10-02/execution/mana-proposal/proposal.json"
+  ],
+  "product_changed": false,
+  "original_completed_units_added": 0,
+  "document_hashes": {
+    "docs/plans/original-completion-2026-10-02/execution/mana-proposal/PROPOSAL.md": "f063ecfe70c097080bfdbfec92f9da57edfe05bb02af0485e5d8b0430a81d060",
+    "docs/plans/original-completion-2026-10-02/execution/mana-proposal/proposal.json": "2043eaafd27fb963e804f57b20585aa66cc9682446b4c507bb3ec2e2c3a8dfbc"
+  },
+  "registered_validation_source": {
+    "argv": [
+      "{python}",
+      "-B",
+      "-c",
+      "import json,hashlib,re\nfrom pathlib import Path\np=Path(\"docs/plans/original-completion-2026-10-02/execution/mana-proposal\")\nj=json.loads((p/\"proposal.json\").read_text());assert j[\"status\"]==\"proposed_unapproved\" and j[\"applied_to_product\"] is False\nfor k in [\"recommended\",\"alternatives\",\"demand_catalog\",\"ordering\",\"legacy_zero\",\"open_decisions\",\"source_pins\",\"comparisons\"]: assert j[k],k\nr=j[\"recommended\"]\nfor k in [\"initial_amount\",\"storage_capacity\",\"world_tree_generation_per_interval\",\"interval_minutes\"]: assert isinstance(r[k],(int,float)) and not isinstance(r[k],bool) and r[k]>0,k\nassert r[\"initial_amount\"]<=r[\"storage_capacity\"]\nfor f,h in j[\"source_pins\"].items():\n q=Path(f);assert not q.is_absolute() and \"..\" not in q.parts;assert hashlib.sha256(q.read_bytes()).hexdigest()==h,f\nrows=j[\"demand_catalog\"];assert len({x[\"definition_id\"] for x in rows})==len(rows)\nfor x in rows:\n q=Path(x[\"path\"]);t=q.read_text();v=re.search(r\"^maintenance_mana\\s*=\\s*([\\d.]+)\",t,re.M);assert (float(v.group(1)) if v else 0)==x[\"observed_maintenance_mana\"],str(q)\nassert (p/\"PROPOSAL.md\").stat().st_size>1000\nprint(\"proposal structure, current-source pins and observed demand validated; no product acceptance implied\")\n"
+    ],
+    "timeout_seconds": 120
+  }
+}
@@ -0,0 +1,21 @@
+{
+  "source": "Direct human reply call_de866e18b25942ee8992263aa0189278 item0",
+  "answer": "MP-01-r02の追加1回を許可する",
+  "project": "the-tree-mana-proposal-r02",
+  "task": "MP-01-r02",
+  "old_cap": 1,
+  "new_cap": 2,
+  "repairs_retained": 1,
+  "state_retained": "blocked",
+  "base_unchanged": "5536bc041188d53229d18f33f08b17d4d83b7590",
+  "spec_sha256_unchanged": "f8cf1753e7ab400130c761570828640c03e0d51073a03f887a9085cbe6be77c6",
+  "allowed_paths_unchanged": [
+    "docs/plans/original-completion-2026-10-02/execution/mana-proposal/**"
+  ],
+  "acceptance_ids_unchanged": [
+    "MP-01-r02"
+  ],
+  "config_digest_unchanged": "f623a33a1ebf06c9a2e6bd2ba249ca17281f6d48ccdd168c8fe20828751e2077",
+  "policy_rights_billing_global_caps_changed": false,
+  "applied_to_product": false
+}
@@ -14,6 +14,10 @@ OWNER_RUNNER_CONTROL=CONTROL python3 -B owner_model_cli.py --project PROJECT com
 OWNER_RUNNER_CONTROL=CONTROL python3 -B owner_model_cli.py --project PROJECT dispatch recorded-decision.json
 ```

-New-project defaults are also set in the Runner policy. Existing frozen project configurations are not rewritten; the explicit adapter applies owner-authorized model selection at invocation. Bare legacy CLI/MCP dispatch does not provide this routing; use this entry point for future Codex invocations. Antigravity model is unchanged.
+New-project defaults are also set in the Runner policy. Existing frozen project configurations are not rewritten; the explicit adapter applies owner-authorized model selection at invocation. Bare legacy CLI/MCP dispatch does not provide this routing; use this entry point for future Codex invocations. The P24 GUI continuation was observed using Claude Opus 5.5 Medium; do not claim the old Gemini selection remains. CLI adapter authentication compatibility is separate from this actual GUI execution.

 Configuration and selected argv are distinct from actual inference evidence. Confirm the worker execution artifact after its next authorized run; no implementation is launched solely to test this setting.
+
+The same validated recorded run decision is also delivered in full to the Codex implementer prompt. Its concrete execution direction is subordinate to the immutable original spec, allowed paths and acceptance. Model choice alone is insufficient for task handoff. Check the actual run packet for the exact recorded direction before relying on delivery. This corrects the original model-only adapter; it does not change Runner permissions, registration, counters or acceptance.
+
+The P18-only allocation-placeholder resolution and same-source infrastructure retry are exact task/base/spec/failed-receipt guarded, retain counters and call ordinary real validation. They do not accept evidence or override reviews. `p18_review_context.py` contains the bounded immutable Git source context; full Runtime unchanged-method review is not claimed. Independent review requested additional legacy precedence/lifecycle context, which remains explicit.
@@ -1,4 +1,4 @@
-"""Owner-requested model-only adapter; ordinary Runner CLI and gates unchanged."""
+"""Owner coordinator routing, recorded direction and bounded review context."""
 import os
 import json
 import sys
@@ -31,6 +31,7 @@ def owner_model_llm(self, task_id, role, service, prompt, cwd, schema):
        chosen = decision.get('codex_model')
        if decision.get('task_id') != task_id or decision.get('action') != 'run' or chosen not in ALLOWED_CODEX_MODELS or not str(decision.get('codex_model_reason', '')).strip():
            raise ValueError('A recorded Claude run decision with explicit model and reason is required')
+        prompt = ("Recorded Claude commander run direction for this exact fixed task. Apply within the immutable spec, scope and acceptance; do not widen them.\n" + json.dumps(decision, ensure_ascii=False) + "\n" + prompt)
        self._owner_codex_model = chosen
        try:
            return original_llm(self, task_id, role, service, prompt, cwd, schema)
@@ -54,7 +55,15 @@ Runner.provider_argv = owner_model_argv
 original_packet = Runner.packet

 def packet_with_actual_evidence(self, task_id, role, sha=None):
-    packet = original_packet(self, task_id, role, sha)
+    if role == "reviewer" and self.config["project"] == "the-tree-p18-01-model" and task_id == "P18-01-CODE":
+        import importlib.util
+        context_path = Path(__file__).with_name("p18_review_context.py")
+        spec = importlib.util.spec_from_file_location("p18_owner_review_context", context_path)
+        module = importlib.util.module_from_spec(spec)
+        spec.loader.exec_module(module)
+        packet = module.packet(self, task_id, sha or self.task(task_id)["submitted"], original_packet)
+    else:
+        packet = original_packet(self, task_id, role, sha)
    extra = os.environ.get('OWNER_REVIEW_SUPPLEMENT')
    if role == 'reviewer' and extra:
        prefix, data = packet.split('\nDATA:\n', 1)
@@ -65,5 +74,53 @@ def packet_with_actual_evidence(self, task_id, role, sha=None):
    return packet

 Runner.packet = packet_with_actual_evidence
+# Exact owner coordinator correction: allocation placeholder and infrastructure retry.
+from runner.core import GateError, require, git, read_json
+import uuid
+_original_process = Runner.process
+
+def p18_process(self, task_id, role, service, argv, cwd, *args, **kwargs):
+    if self.config["project"] == "the-tree-p18-01-model" and task_id == "P18-01-CODE" and role == "validation" and service is None:
+        c = json.loads(self.task(task_id)["contract"])
+        require(c["base_commit"] == "d2a1f80a613e7c77b02b941026bc49c2d85db863" and c["spec_sha256"] == "04e9ae701b6ee1e399542564add695ca7fce54499e52dd2e907b1dbdc23a366d", "exact P18 allocation guard")
+        expected = [sys.executable, "-B", "tools/run_p18_relationship_tests.py", "--output", "{build_dir}/p18-relationship-evidence"]
+        require(len(argv) == len(expected) and Path(argv[0]).resolve() == Path(expected[0]).resolve() and argv[1:] == expected[1:], "fixed registered P18 validation argv")
+        declared = list(argv)
+        output = Path(self.allocation(task_id)["build_dir"]) / "p18-relationship-evidence"
+        require(output.resolve().is_relative_to(self.runtime(task_id).resolve()), "allocated output containment")
+        argv = list(argv)
+        argv[-1] = str(output)
+        self.event(task_id, "validation_argument_resolution", {"declared_argv": declared, "resolved_argv": argv, "policy_changed": False})
+    return _original_process(self, task_id, role, service, argv, cwd, *args, **kwargs)
+
+Runner.process = p18_process
+_original_validate = Runner.validate
+
+def p18_validate(self, task_id):
+    task = self.task(task_id)
+    if not (self.config["project"] == "the-tree-p18-01-model" and task_id == "P18-01-CODE" and task["state"] == "repair_pending" and task["submitted"] == "0084760ee05a97adfcbd783a71161491f3629918"):
+        return _original_validate(self, task_id)
+    previous = self.db.execute("SELECT artifact FROM evidence WHERE task_id=? AND kind='validation' AND commit_sha=? AND passed=0 ORDER BY id DESC LIMIT 1", (task_id, task["submitted"])).fetchone()
+    require(previous is not None, "actual failed validation required for infrastructure retry")
+    report = read_json(previous[0])
+    require(len(report["checks"]) == 1 and report["checks"][0]["id"] == "p18-model", "exact one validator")
+    artifact = Path(report["checks"][0]["artifact"])
+    command = read_json(artifact / "command.json")
+    require(command["argv"][-1] == "{build_dir}/p18-relationship-evidence" and (artifact / "stderr.log").read_text().strip() == "AssertionError: regular final receipt required", "known owner allocation error only")
+    require((Path(self.allocation(task_id)["build_dir"]) / "p18-relationship-evidence/receipt.json").is_file(), "actual precollected receipt required")
+    self.event(task_id, "owner_infrastructure_validation_retry", {"failed_report": previous[0], "submitted_commit": task["submitted"], "source_changes": False, "repair_counter_unchanged": task["repairs"], "reason": "Correct the owner-declared allocation placeholder and rerun the actual unchanged validator. No acceptance evidence is manufactured."})
+    self.state(task_id, "validating", "Owner allocation correction; same source and receipt; no new code repair")
+    wt = self.detached(task_id + "-validation-" + uuid.uuid4().hex[:8], task["submitted"])
+    try:
+        self.check_scope(task_id, wt, task["submitted"])
+        self.verify(task_id, wt, task["submitted"], "validation")
+        self.has_evidence(task_id, "validation", task["submitted"])
+        self.state(task_id, "review_pending")
+    except (GateError, OSError) as exc:
+        self.state(task_id, "repair_pending", str(exc))
+        raise
+
+Runner.validate = p18_validate
+
 from runner.cli import main
 main()
@@ -1,79 +0,0 @@
-# P18-01-CODE implementation handoff
-
-Status: submitted for Runner validation; no acceptance or unit completion claimed.
-
-Scope: dedicated original relationship state, lossless legacy snapshot preservation,
-Runtime registration and read projection, and the contract-listed tests and collector.
-Production initial values and gameplay coefficients are not supplied or inferred.
-
-Validation: worker static inspection only; authoritative native local and affected
-validation, independent review, and integration belong to Runner.
-
-Source inspection: HEAD matches d2a1f80a613e7c77b02b941026bc49c2d85db863.
-The acceptance specification without its final newline matches the contract SHA256
-04e9ae701b6ee1e399542564add695ca7fce54499e52dd2e907b1dbdc23a366d.
-
-## Submitted behavior
-
- OriginalRelationshipState stores explicit directional subject/protagonist/rival
-  facts with Affection, Lust, Netorare and shield current/max. All fields are
-  required for a configured record. Numeric inputs must be finite numbers;
-  shield current must be nonnegative and at most max, and max equals Affection.
-  No additional emotion ranges, coefficients or production values are imposed.
- RelationshipService retains its five-axis API. Its v2 snapshot contains the
-  whole v1 payload under `legacy`, plus separate `original_relationships`.
-  Top-level `relationships` is a compatibility projection for existing consumers;
-  disagreement with `legacy.relationships` is rejected. Additional legacy fields,
-  raw aliases, collection order and untouched values survive migration. The
-  existing normalized state remains usable; only actual legacy changes are merged
-  into retained raw facts. Aliases never initialize original fields.
- Registration uses `register_original_relationship` with the complete payload.
-  Runtime validates the protagonist against `player`, the subject against hired
-  UNIQUE staff and its canonical role, and heroine/rival identities and reciprocal
-  counterpart references against the existing unique-character catalog. Rival
-  catalog membership does not invent recruitment. No new original update policy,
-  contact, route, attack, threshold or duel behavior is defined.
- Snapshot restore validates candidates before replacing live services, then
-  rebinds the identity validator to live staff. Existing legacy actor references
-  must resolve against player, restored staff or restored guests.
- Every staff-management row exposes `original_relationship`. Missing records
-  have `configured: false` and null values, distinct from explicit zero. Configured
-  projections are copies, so reads and caller edits cannot change service state.
-
-## Validation and handoff
-
-Two new s4 suites exercise explicit/unset/zero data, malformed and nonfinite values,
-identity invariants, lossless raw aliases/extensions, new and mixed round trips,
-atomic service/Runtime rejection, actual hiring/commands, restore/rebind and reports.
-Existing test bodies and limits are unchanged. New marker and suite-policy rows
-are pinned to the exact new test sources.
-
-`python3 -B tools/run_p18_relationship_tests.py --prepare-only` previews the exact
-seven-suite roster, source bytes, capacity and all-script parse count without
-engines, profiles, stage creation or test execution. The native collector reuses
-run_all_tests.source_refs/execute_phase and the existing Guard, owned_outer,
-diagnostic, artifact, PID, marker and cleanup gates. It stops at the first failure;
-Runner owns repair/validation sequencing and independent review.
-
-Worker checks: Python AST syntax, JSON/source-marker consistency, allowed-path
-inspection, unchanged pre-existing marker/policy records, and git diff whitespace.
-Native import, GDScript parse and all seven suites remain **unexecuted** by worker.
-Worker reinspection on 2026-10-13 confirmed the existing submitted implementation
-and repeated Python AST, specification digest, exact new marker/policy source
-hashes, unchanged existing marker/policy records, and `git diff --check`.
-Prepare-only exited 0: seven suites, 1,311 source files / 67,287,056 bytes,
-308 parse paths, nine future native phases, 381,859,856 conservative required
-bytes and 1,773,187,072 available bytes. Engines and stages were both zero;
-actual checks were null and formal acceptance was false. Capacity is a preview
-at that instant, not a reservation or native result.
-An initial shell here-document temporary-file attempt was denied with
-`operation not permitted`; normal allowed-path patch edits worked. No isolation
-rule or permission was relaxed.
-
-P18-C-1 through P18-C-3 are implementation submissions, not accepted results.
-P18-C-4 awaits Runner native local/affected evidence, separate Opus review,
-integration and final affected validation. The original P18-01 unit remains
-in_progress: ordinary Japanese UI rendering/equality, approved production values,
-all-seven recruitment, final full required roster and applicable Windows final
-acceptance remain outstanding. No git writes, other agents or Runner controls
-were used by worker.
@@ -1,80 +0,0 @@
-# P18-01-CODE recorded repair 2/2: collection / verification split
-
-Resumes candidate `f76ad96990a4d7371b6ab667df0a068cc06be798`. No counter reset,
-game/test reconstruction, Runner change, commit or integration. Changes are confined
-to the narrow collector and this note. Existing game behavior evidence remains the
-retained Astra preflight; this worker did not rerun or reinterpret it as final proof.
-
-## Modes
-
- Default: `python -B tools/run_p18_relationship_tests.py --output {build_dir}/p18-relationship-evidence`.
-  Read-only verification in the ordinary registered sandbox. No subprocess call,
-  process discovery, native launch, or access to the external player/private profiles.
-  Current checkout source/settings/support/marker bytes and the locally configured
-  `godot` binary are read for pins. Receipt-provided paths never select an external
-  file to open. Original absolute paths remain historical identity strings.
- `--collect`: Root orchestration only, outside Seatbelt. Uses the existing
-  `source_refs`, private source copy, `execute_phase`, owned_outer, Guard, logger,
-  diagnostic, marker and bounded cleanup contracts unchanged. Fresh output outside
-  the checkout, with an existing parent, is required. Runs import, all 308 scripts,
-  and exactly the seven fixed tests once. Owned profile bytes are archived after
-  each phase. The final verifier runs after collection; no duplicate regression.
-  “Root” identifies the authorized orchestrator, not a requirement to run as Unix uid 0.
- `--prepare-only`: reports source bytes, available capacity, 308 parse paths and
-  the exact seven-test/nine-phase roster; creates no stage/profile and starts no engine.
-
-Only `--output`, `--collect`, `--prepare-only` and help are accepted. Duplicate,
-abbreviated, unknown and malformed flags, combined modes, traversal, symlinks,
-nonregular evidence and hardlinked evidence reject. Verification never rewrites
-raw paths or files. The ordinary-owner pure proof reader maps only the original
-output prefix to the supplied output and checks confinement before opening files.
-
-## Receipt schema
-
-`receipt.json` (`guarded-p18-v2`) is written last after successful collection.
-It contains the full relative source content map (bytes/SHA-256, no checkout-path
-dependency), its canonical JSON SHA-256, project and marker-contract SHA-256,
-engine SHA-256, and a complete relative file inventory with byte sizes/SHA-256.
-The inventory covers the retained private source, engine bytes, bootstraps,
-starters, raw stdout/stderr/native logger, phase receipts, START/END/process and
-both cleanup records, Guard reports, ordinary/audio ownership proofs, typed
-snapshots, and complete archived startup/runtime profiles. Only the enclosing
-receipt itself is outside its own inventory.
-
-Verification checks the inventory and recomputes raw marker/diagnostic gates,
-source and helper pins, exact commands, START/END identity, all nine distinct PIDs
-and bounded cleanup, Guard conditions, proof gates, complete player before/after
-inventory equality, and seven test rows against nine phase receipts. It requires
-one exact `FULL_DEPENDENCY_PARSE checks=308 failures=0` marker. Old v1, absent,
-incomplete, mismatched or altered evidence rejects. A source change, including
-this collector, requires fresh Root collection; no source exemptions exist.
-
-## Worker checks and environment observations
-
-AST/in-memory compile and prepare-only passed. Prepare-only found 1311 source
-files, 308 parse scripts, seven tests and nine future phases, with sufficient
-reported capacity. Synthetic negative checks rejected missing receipts, changed
-hashes, symlinks, relative and absolute escapes, incomplete files and invalid or
-duplicate flags/mode combinations. Those checks replaced subprocess entry points
-and default-player access with fail-fast functions; neither was called. No native
-test, full regression, `--collect`, Runner operation or review was executed.
-
-Environment evidence: a shell here-document failed with
-`zsh:1: can't create temp file for here document: operation not permitted`.
-The `python` alias was unavailable (`zsh:1: command not found: python`);
-worker checks used `/usr/bin/python3 -B`. Ordinary authorized file edits and
-temporary negative fixtures under the task allocation succeeded. No isolation
-or permission policy was changed. Root/Runner must provide the configured
-`python` command used by the fixed validator argv.
-
-## Root next steps
-
-1. On the final unchanged source, run the native `--collect` exactly once outside
-   Seatbelt into the allocation build directory's fresh `p18-relationship-evidence`.
-   Do not reuse old v1 evidence or run collection from ordinary Runner validation.
-2. Run ordinary Runner validation using the fixed default verify-only argv.
-3. Obtain a separate Opus review, then perform the authorized integration and
-   affected final validation. This worker submits implementation, not acceptance.
-
-P18-01 remains incomplete: ordinary UI rendering/display equality, approved initial
-values, the full final roster and applicable Windows final acceptance remain unmet.
@@ -0,0 +1,13 @@
+# P18-01-CODE 独立レビュー修正候補（未採用）
+
+対象は提出0084760e、同じ12 allowed_paths・4 backend条件。元の成果単位P18-01、30/88、部分点なしを維持。通常UI・初期値承認・whole-unit最終受入を完了へ変えない。
+
+1. 原本3値とは別の旧5軸について、affinity/obligationを含む旧記録からaffection/dependenceを実際に更新し、Service・Runtimeの保存再読込で更新値と元raw別名が保全される試験を追加。未変更RelationshipStateの正規キー優先処理を独立レビュー資料へ加える。
+2. 退店客はGuestService.despawn_guestでpersistent_recordsへ残りactive _guestsから消える。新たなlegacy relationship actorのactive staff/guest存在条件はこの旧関係履歴を拒否し得るため、追加4行を削除する具体案を添付。原本original_relationshipの人物参照検証は保持。
+3. 旧v1の型互換を既存Reader・代表セーブと照合。有限なJSON数値など以前の正当な保存を保全し、unknown/new-version・不正original payload・部分commitは引き続き拒否する。型の緩和を合格のために行わず、旧形式ごとの受入根拠と拒否条件を記録する。
+4. UNIQUE heroineのremove_staff/retire_staffは既存ガードが恒久削除を拒否する。original登録後の実拒否・保存復元を試験し、その全文をレビュー資料へ加える。通常人物ライフサイクルの未知仕様は作らない。
+5. candidate restoreの参照catalogをrestored_catalogへ揃え、duplicate original、version型、projection不一致、non-heroine UNIQUEのRuntime負例を追加。
+
+局所と影響7試験、正確な新SHAのmarker/policy、独立Opus再レビュー、統合と必要な最終照合を実施。既存5試験は削除・弱化しない。全回帰は関連UI/コードを固めた原成果単位の最終版で実施。
+
+今回の追加修正が承認される場合だけ、このタスクのmax_repair_attemptsを2→3、repairs2を保持する。P24-02の追加許可を本タスクへ転用しない。現在の候補は未採用、review changes_requestedのまま。
@@ -0,0 +1,10 @@
+{
+  "id": "13d58f6cc19f4257a93a6c44e250d81a",
+  "role": "implementer",
+  "service": "codex",
+  "status": "running",
+  "pid": 6833,
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p18-01-model/runs/13d58f6cc19f4257a93a6c44e250d81a",
+  "argv_model": "gpt-6.1-sol",
+  "command_sha256": "2d35aba4a8cd6ea1fd22291214dfc86ad4516c8e2428b6ba2a6e4ae574617dab"
+}
@@ -0,0 +1,12 @@
+{
+  "id": "aa74e0e182094e83afe2dba1009b31b6",
+  "role": "implementer",
+  "service": "codex",
+  "status": "running",
+  "pid": 9620,
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p18-01-model/runs/aa74e0e182094e83afe2dba1009b31b6",
+  "argv_model": "gpt-6-astra",
+  "direction_delivered": true,
+  "packet_sha256": "89983ae8e93a5244e8b89d004ae274d87a9f194278a382f38921feea51b96e48",
+  "command_sha256": "0d69dd08ea5c1219fbc7d12eef6814d95ff787f8dfa5a9acef73610fa8dbdb34"
+}
@@ -0,0 +1,33 @@
+{
+  "project": "the-tree-p18-01-model",
+  "task": "P18-01-CODE",
+  "decision": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/p18-01-contract-r01/opus-run-decision-r01.json",
+  "actual_processes": [
+    {
+      "id": "65473b7a1fda4695a5be88c0ca0a1038",
+      "role": "commander",
+      "service": "claude",
+      "status": "finished",
+      "pid": 97963,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p18-01-model/runs/65473b7a1fda4695a5be88c0ca0a1038",
+      "argv_model": "claude-opus-5-5",
+      "command_sha256": "b8da04043b58f45e3eaf5baad884fbf57d29564564e606c8c51029ef48d70bdc"
+    },
+    {
+      "id": "b1931a8dcbc24d88bb3cbdce45140e02",
+      "role": "implementer",
+      "service": "codex",
+      "status": "running",
+      "pid": 98215,
+      "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p18-01-model/runs/b1931a8dcbc24d88bb3cbdce45140e02",
+      "argv_model": "gpt-6-astra",
+      "command_sha256": "9f4f9d953ad8383f8d9f6284cf1cbc1a57c052aee50bcc3e47f253400525de1e"
+    }
+  ],
+  "no_unit_acceptance": true,
+  "defaults": {
+    "codex": "gpt-6.1-sol",
+    "claude": "claude-opus-5-5",
+    "agy": null
+  }
+}
@@ -0,0 +1,39 @@
+{
+  "task": "P18-01-CODE",
+  "base_commit": "d2a1f80a613e7c77b02b941026bc49c2d85db863",
+  "existing_affected_suite_pins": {
+    "tests/s4/test_relationship_event_service.gd": {
+      "bytes": 32069,
+      "sha256": "ce1aa05716feed435cb68a1435a28db219cc3f056e23a442d2eaf08840771ffe",
+      "test_body_change_allowed": false
+    },
+    "tests/s4/test_runtime_relationship_events.gd": {
+      "bytes": 33566,
+      "sha256": "466f9a40b3471a9bb39c670cdd1106e990d297bc8bfff0db557cd63bb74c8ef3",
+      "test_body_change_allowed": false
+    },
+    "tests/s6/test_runtime_snapshot_serialization.gd": {
+      "bytes": 6753,
+      "sha256": "d9106f9defb6cc195b969ff040d24f1f8ceebe055ba66c39d4634a68620cde84",
+      "test_body_change_allowed": false
+    },
+    "tests/s6/test_runtime_save_lifecycle.gd": {
+      "bytes": 30502,
+      "sha256": "de94d588d6ce204aa8d0221c2989b8dd900cf4e36ca51f83b464518a382a887f",
+      "test_body_change_allowed": false
+    },
+    "tests/ui/test_staff_management.gd": {
+      "bytes": 35774,
+      "sha256": "7e37dc47583325a564ef48de31596adeeccfb7151ac5fce952efc6873c8ab704",
+      "test_body_change_allowed": false
+    }
+  },
+  "required_new_tests": [
+    "tests/s4/test_original_relationship_model.gd",
+    "tests/s4/test_original_relationship_runtime.gd"
+  ],
+  "reuse": "Test inputs and unchanged collector/ownership/diagnostic protocols reusable; changed relationship service and Runtime invalidate transfer of previous affected-suite execution success to new candidate. Run affected set on exact submitted source. Full required roster after code/UI fixes batched remains a P18-01 unit requirement.",
+  "previous_P24_candidate": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+  "ordinary_UI_still_missing": true,
+  "formal_acceptance": false
+}
@@ -0,0 +1,9 @@
+{
+  "before": "Model was forwarded; concrete commander direction absent from Runner implementer packet.",
+  "after": "Exact recorded commander run decision and directions prepended to worker prompt. Immutable spec/scope/acceptance still authoritative.",
+  "controller_sha256": "e342904f012b14ad2856bd10bee03a227a151da88f6a9c9c891c564cfa253f1e",
+  "source_edits_by_root": false,
+  "policy_or_permission_change": false,
+  "repair_counter_reset": false,
+  "verification": "AST parse passed; actual aa74e0e182094e83afe2dba1009b31b6 packet.txt contains the exact recorded Opus decision and concrete repair direction (SHA in actual-collector-repair-dispatch-r02.json)."
+}
@@ -0,0 +1,35 @@
+{
+  "task_id": "P18-01-CODE",
+  "commit": "0084760ee05a97adfcbd783a71161491f3629918",
+  "status": "changes_requested",
+  "summary": "I compared all four acceptance criteria against the spec, the full diff, the target sources, the identity catalog, the Runner p18-model result (exit 0) and the coordinator's native evidence (7 suites, 843 checks, 308 parse, 9 distinct PIDs, no guard or cleanup errors). I did not edit or run anything. Every change is inside allowed_paths. No existing test was deleted, disabled or weakened. Two new marker rows and two new suite-policy rows were added, pinned to the source hashes.\n\nP18-C-1 is met. The original relationship state is separate from the legacy one, with explicit directional subject/protagonist/rival identities. It requires all fields, rejects non-finite values, and enforces shield_max == affection. An unset record reads as configured:false with null values, distinct from an explicit zero. No production values or coefficients are introduced.\n\nP18-C-2 and P18-C-3 are mostly implemented: v2 nests the full v1 record, restore is atomic, the Runtime command and restore/rebind are real, and the report projection is read-only. But three things are unproven or change legacy behavior:\n(1) The merge-back of legacy aliases is not tested for changes to the aliased axes (affection/dependence).\n(2) Restore now rejects legacy saves it used to accept, through stricter type checks and a new actor-reference check.\n(3) Original records have no lifecycle once the subject leaves staff, which could make saves unloadable.\n\nP18-C-4: native local and affected evidence exists. Integration and the final affected validation have not happened yet, and the backend task correctly does not claim the P18-01 unit complete. Because of the verification gaps above, I am not passing it.",
+  "acceptance_ids": [
+    "P18-C-1"
+  ],
+  "findings": [
+    {
+      "severity": "high",
+      "message": "Possible silent loss of affection/dependence changes on legacy saves (P18-C-2, P18-C-3), not verified. RelationshipService._merge_legacy_changes copies the original raw entry and writes only the fields that changed into it, so old aliases like metrics.affinity=117 stay next to a newly changed canonical metrics.affection. If RelationshipState.from_snapshot lets the alias win over the canonical key, a change to affection or dependence after loading a legacy save would be lost on the next save/load. The test only changes trust ('changed metric preserves raw alias'), and RelationshipState.from_snapshot precedence is not shown in the review packet. Needed: a test that changes affection and dependence on an alias-bearing legacy record, then saves and restores through both the service and the Runtime, and confirms the value persists (or the alias is resolved some other way)."
+    },
+    {
+      "severity": "medium",
+      "message": "Legacy behavior changed beyond the spec (P18-C-2 says v1 relationships 'remain usable'; P18-C-3 requires 'legacy unchanged behavior'). Two new checks reject v1 data that loaded before: _legacy_types_valid requires strict int/String/Dictionary types for metrics, shield, day counters, flags, route_lock and so on, and _restore_snapshot_internal now requires every relationship actor to be player, a restored staff member or a restored guest. Legacy relationships pointing at departed or persistent-record guests, non-staff unique characters, or numbers stored as floats would now fail to load. There is no evidence this was checked against the retained P02-01/P02-02 representative saves. Needed: evidence or tests that those saves still load, or restrict the new rejections to the original payload."
+    },
+    {
+      "severity": "medium",
+      "message": "Original records have no lifecycle once the subject stops being staff. _original_relationship_identities_valid requires the subject to still be hired UNIQUE staff. It is checked on restore (using restored_staff) and in validate_invariants. If any existing path removes or replaces the heroine's staff record after registration, the Runtime would fail its invariants and that save could no longer be restored. Needed: either show that no such path exists for UNIQUE heroines, or define and test what happens (keep the record without the staff check, or reject the removal)."
+    },
+    {
+      "severity": "low",
+      "message": "During restore, the identity validator reads the live mvp_content_catalog instead of restored_catalog, which _restore_snapshot_internal builds and installs later. The content is identical today, but the candidate validation is not fully self-contained. Suggest passing restored_catalog into _original_relationship_identities_valid."
+    },
+    {
+      "severity": "low",
+      "message": "Runtime-level negative tests are thin. test_original_relationship_runtime covers corrupt original fields, but not a duplicate original subject, an unknown or mistyped relationships.version, a mismatch between the top-level relationships projection and legacy.relationships, or a non-heroine UNIQUE subject at the Runtime level. These are covered at the service level only."
+    },
+    {
+      "severity": "low",
+      "message": "P18-C-4 process items are still pending: integration and the final affected validation come after this review. The native evidence (843 checks, 308 parse, PIDs and cleanup recorded) and the Runner verify-only pass are present. Correctly, nothing claims P18-01 unit completion."
+    }
+  ]
+}
@@ -0,0 +1,64 @@
+{
+  "task": "P18-01-CODE",
+  "implementation_process": "b1931a8dcbc24d88bb3cbdce45140e02",
+  "implementation_exit": 124,
+  "retained_uncommitted_source_baseline": "d2a1f80a613e7c77b02b941026bc49c2d85db863",
+  "native_evidence": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p18-01-code-local-native-r01",
+  "native_ended_sha256": "00d85455f1c6745a1d0eb0c4e83d10db42bc11b9c3bd1491ef40b51069d7c712",
+  "native_input_sha256": "9c8f0720aa8293bb867516f86416b08840c9f7dff1ae17b93d94cb4cd4ea21cd",
+  "source_files": 1311,
+  "local_and_affected_suites": 7,
+  "checks": 843,
+  "passed": true,
+  "guard_errors": [],
+  "cleanup_errors": [],
+  "native_phases": [
+    [
+      "import",
+      5540,
+      true
+    ],
+    [
+      "parse",
+      5632,
+      true
+    ],
+    [
+      "000",
+      5662,
+      true
+    ],
+    [
+      "001",
+      5681,
+      true
+    ],
+    [
+      "002",
+      5708,
+      true
+    ],
+    [
+      "003",
+      5715,
+      true
+    ],
+    [
+      "004",
+      5742,
+      true
+    ],
+    [
+      "005",
+      5754,
+      true
+    ],
+    [
+      "006",
+      5810,
+      true
+    ]
+  ],
+  "required_repair": "Collector must strictly verify precollected Root-owned native evidence in registered validator sandbox, using same fixed argv/output, without child engines or player reads. Receipt mode triggered by existing output directory, fail closed for stale/missing/forged evidence. Native collection stays Root-owned; sandbox/caps/criteria unchanged. Collector change requires exact final-source revalidation; do not claim current tests whole-unit acceptance.",
+  "formal_acceptance": false
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P18-01-CODE",
+  "reason": "Task is repair_ready, with repairs 1/2 used and scope, spec, baseline and caps unchanged. Root's guarded native collection passed and found no game behavior defect: 7 tests, 843 checks, import PID5540, parse PID5632 (308 scripts), all 9 owned engines ended, and no guard or cleanup errors. The only blocker is the fixed validation argv. It runs collection inside Seatbelt, where player files and fresh Godot profiles are intentionally unreadable. This needs one narrow collector-only repair in tools/run_p18_relationship_tests.py, plus protocol notes under docs/plans/original-completion-2026-10-02/execution/p18-01-code/** only. The worker must continue the exact retained code, with no reimplementation. Requirements: (1) The default mode with the same fixed argv `python -B tools/run_p18_relationship_tests.py --output {build_dir}/p18-relationship-evidence` only verifies a preexisting Root-owned output. It starts no engines and does not read or write player or profile files. (2) A new explicit optional `--collect` flag is for Root-only fresh native collection under the unchanged guarded protocol. During collection it copies the required native raw logs into the output. (3) Verification checks exact current source-map content hashes and settings, never absolute worktree paths. It checks the engine, collector, helper and marker pins, and the exact 7-test roster. It also checks all 9 import/parse/native rows and all raw phase artifact hashes. It checks the strict markers, diagnostics, ownership, profile and cleanup proof, and that the default player data is fully equal before and after. (4) Fail closed on missing, stale, forged, incomplete or unknown receipts, on path escapes or symlinks, and on malformed flags. Never fabricate success. The worker may add verify-negative static checks and run static or prepare-only checks. It must not run engines or full regression, edit existing product code or tests, weaken guards, alter Runner, rights, state, caps or registration, or commit or push. It must submit an ordinary code-phase result promptly and never claim that the whole P18-01 unit is accepted. After this, Root runs the exact final source once, then formal validate, review and integration. The existing preflight in artifacts/p18-01-code-local-native-r01 is evidence of game behavior only, not acceptance of the changed collector.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "This is the default model, and the remaining work is narrow and fully specified: one collector file plus docs, with no game logic, engine runs or product or test changes. The Astra worker already timed out (exit 124 at 900s), and this is the last repair attempt (2/2). Sol is faster and cheaper, so it is less likely to hit the timeout again. Astra's extra depth isn't needed here, because the verification rules are fixed in the instructions rather than left to design."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P18-01-CODE",
+  "reason": "Resume existing candidate f76ad96990a4d7371b6ab667df0a068cc06be798 only. This is the recorded repair_ready repair. Repairs stay at 2/2, with no counter reset and no changes to caps, model policy, scope, spec or rights. Accepted game behavior source is the exact retained Astra preflight: Root actual guarded native import 5540 / parse 5632 all 308, 7/843 pass, no guards or cleanup errors, all 9 PIDs ended. Do not reconstruct or change any game or test source (scripts/relationship/*, autoload/simulation_runtime.gd, tests/s4/*, .uid files, suite-policy.json, completion_marker_contracts.json). Formal validator bc8bc48c on f76 failed with PermissionError (Operation not permitted: ps) in live_engines before any engine started. That shows collection must stay Root-owned and must not run inside Seatbelt. The earlier Sol run 13d58f6c only updated the handoff because the worker never received these instructions.\n\nWHAT TO CHANGE: only tools/run_p18_relationship_tests.py and protocol notes under docs/plans/original-completion-2026-10-02/execution/p18-01-code/.\n\n(1) DEFAULT MODE: fixed argv `python -B tools/run_p18_relationship_tests.py --output {build_dir}/p18-relationship-evidence`. It strictly verifies output that Root already finished collecting. It must not use subprocess or ps, start an engine, or read or write any player or profile outside the output directory. It must work in the ordinary registered sandbox. Missing, outdated, forged or incomplete input must make it reject with a nonzero exit. Never fabricate success.\n\n(2) `--collect`: Root-only fresh guarded native collection. Reuse tools/run_all_tests.py source_refs/execute_phase and the existing owned_outer/Guard/diagnostic/marker/logger contracts, a fresh private CoW source and owned profiles. Keep the existing exact native isolation, Guard, logger, process ownership and cleanup conditions exactly as they are. No raw Godot against the player profile. Run import, then all-script parse (expected parse count 308), then the 7 native tests: 2 new P18 tests, s4 relationship_event_service and runtime_relationship_events, s6 runtime_snapshot_serialization and runtime_save_lifecycle, and ui staff_management. Do not run a duplicate full regression. Write self-contained raw phase files (existing phase/engine-native.log etc.) with SHA-256 hashes recorded in the receipt.\n\n(3) `--prepare-only`: preview bytes, capacity and roster without starting any engine.\n\nVERIFIER MUST CHECK:\n- the current exact source-map content SHA and project settings SHA, independent of checkout path;\n- the collector, shared/helper, engine and marker pins;\n- exactly 7 unique tests and 9 import+parse+test rows, with all 308 parse expected;\n- full raw marker, diagnostic, phase, profile, ownership and cleanup files, each matching its recorded SHA;\n- complete default player before/after equality in the receipt;\n- every PID ended and no guard or cleanup error.\n\nConfine all paths to the supplied --output. Reject `..` escapes, absolute escapes, symlinks, duplicate or unknown or malformed flags, and mutually exclusive mode combinations. No source exemptions and no weakening for convenience.\n\nWORKER MAY: run AST/py_compile/static checks, --prepare-only, and negative verify checks against a temporary synthetic output directory (missing, tampered-hash, symlink, escape and incomplete cases must reject). The worker must NOT: run native or full tests or --collect, edit the Runner, change caps or model policy, commit, push or touch main, or read credentials. Report any environment denial with exact evidence. Write a short protocol note describing the modes, the receipt schema, and Root's next steps: after this collector change, Root reruns the exact final native --collect once into the task-allocation build_dir, then ordinary Runner validation (default verify mode), a separate Opus review, then integration. Finish quickly and return an ordinary submitted result. Original P18-01 UI rendering, approved initial values, full final roster and Windows final acceptance remain unmet; do not claim the unit complete.",
+  "codex_model": "gpt-6-astra",
+  "codex_model_reason": "This is the last recorded repair (2/2) and there is no counter reset, so a weak result can't be cheaply retried. The work is in a single file, but it is security- and provenance-sensitive. The worker has to split one collector into three modes (verify-only that works in the sandbox, Root-only collect, prepare-only) and keep the exact existing run_all_tests/Guard/owned_outer/marker contracts unchanged. On top of that it needs strict hash, pin and roster verification (7 tests, 9 rows, parse count 308, player equality) and path and symlink confinement. A subtle mistake here would either break the formal validator again or weaken isolation. The accepted game behavior source also came from Astra, so continuing with Astra keeps the context consistent. The extra usage and time are justified by the higher chance of passing on the first try; game source is out of scope, which keeps the run short."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "run",
+  "task_id": "P18-01-CODE",
+  "reason": "P18-01-CODE is ready. It has no declared dependencies and no other code worker is running. The P24-02 candidate 666c87bd stays separate and unchanged. The spec (docs/spec/acceptance/P18-01-code-r01.json, base d2a1f80) can be built without inventing values. Original Affection/Lust/Netorare and shield values are explicitly unset, which is different from zero, and shield_max is tied to the configured Affection. Supplied numbers are only validation fixtures. Legacy v1 five-axis data is kept raw through a v2 round trip with no conversion. The Runtime save/restore/read-model path rejects bad input atomically. None of this needs approved initial values, so not knowing them is no reason to wait. Run conditions: worker edits only the allowed_paths and touches no UI files. Worker does static, parse and --prepare-only checks first (byte/capacity/roster preview, 2GiB capacity unchanged) before any import. The Root Runner owns the authoritative native local+affected run (the two new P18 tests, s4 relationship_event_service/runtime_relationship_events, s6 runtime_snapshot_serialization/runtime_save_lifecycle, ui staff_management), with no duplicate full regression. Test isolation, owned profiles, process ownership, marker provenance and caps stay as they are. Existing tests are not weakened. Worker does not commit, push or touch main. This backend phase does not accept P18-C-1 to C-4 or the P18-01 unit. Ordinary UI (Antigravity later), approved initial values and the full final, Windows and main-integration acceptance remain unmet.",
+  "codex_model": "gpt-6-astra",
+  "codex_model_reason": "Astra is justified because this task is hard and risky, not routine. (1) It is a save-format migration (v1 to v2) that must keep unknown raw legacy fields byte-for-byte and must never convert affinity into Affection or dependence into Netorare. (2) It needs atomic rejection with no partial commit across RelationshipService and SimulationRuntime snapshot create/restore/rebind, reusing the P03 restore safeguards. (3) It must check player/staff identity, duplicates and references against the P17 registry. (4) It needs a new strict native collector that reuses the run_all_tests, owned_outer, Guard and marker provenance contracts and keeps isolation intact. A mistake here could corrupt saves or break legacy relationship events and snapshot regressions, and only 2 repairs are allowed, so doing it right the first time is worth Astra's extra time and usage. This matches my earlier Astra choice for P18 migration safety. Choosing the model does not authorize any cap change or acceptance waiver."
+}
@@ -0,0 +1,7 @@
+--- a/autoload/simulation_runtime.gd
+++ b/autoload/simulation_runtime.gd
+@@ -1063,4 +1062,0 @@
+-	for relationship: RelationshipState in restored_relationships.get_relationships():
+-		for actor_id: StringName in [relationship.actor_a_id, relationship.actor_b_id]:
+-			if actor_id != &"player" and not restored_staff.has_staff(actor_id) and not restored_guests.has_guest(actor_id):
+-				return false
@@ -0,0 +1,6 @@
+{
+  "task": "P18-01-CODE",
+  "repairs": 1,
+  "max_repair_attempts": 2,
+  "reason": "Commander model rationale mistakenly says2/2; authoritative state after actual ordinary repair is1/2. Model decision retained unedited. No counter change."
+}
@@ -0,0 +1,34 @@
+{
+  "candidate": "0084760ee05a97adfcbd783a71161491f3629918",
+  "packet_guard_bytes": 348274,
+  "unchanged_limit": 500000,
+  "source_context_sha256": "1afe8f9f3b639e25365d6b3525f2508a55ec1400d64223b9bf1d6dad04475cca",
+  "dependency_context": {
+    "scripts/relationship/relationship_state.gd": {
+      "whole_source_sha256": "14551398f31ecd899e43a3d07b165d4884e54e83983e433c6de57e3e6a18d083",
+      "unchanged_from_base": true,
+      "whole_file_included": true,
+      "complete_methods": []
+    },
+    "scripts/staff/staff_service.gd": {
+      "whole_source_sha256": "355ad5c3c9f85dc4d4ffc3bc4293e36f81078c403d1662512a735b2c8d815fb3",
+      "unchanged_from_base": true,
+      "whole_file_included": false,
+      "complete_methods": [
+        "remove_staff",
+        "retire_staff"
+      ]
+    },
+    "scripts/guest/guest_service.gd": {
+      "whole_source_sha256": "56880410e9a00816f9a95d30821982955532de8dd976980934e12016a9f2b21e",
+      "unchanged_from_base": true,
+      "whole_file_included": false,
+      "complete_methods": [
+        "despawn_guest"
+      ]
+    }
+  },
+  "review_findings_closed": false,
+  "new_product_changes": false,
+  "new_LLM_calls": 0
+}
@@ -0,0 +1,106 @@
+{
+  "schema_check_bytes": 250240,
+  "actual_UTF8_packet_bytes": 249013,
+  "context": {
+    "runtime": {
+      "path": "autoload/simulation_runtime.gd",
+      "revision": "f76ad96990a4d7371b6ab667df0a068cc06be798",
+      "complete_source_sha256": "a5a135842cb29218d3bd861effe66ea7e29c144184d07b4da521ce9a23e121c3",
+      "base_source_sha256": "d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39",
+      "context_sha256": "ebbabed3c11f2155d7262055f3df93f356aadbdf4c14f9ca6ca86717de46db05",
+      "selected_complete_methods": [
+        "_configure_relationship_event_boundaries",
+        "_connect_relationship_signals",
+        "_execute_attack_relationship_shield",
+        "_execute_change_relationship",
+        "_execute_create_relationship",
+        "_execute_register_original_relationship",
+        "_initialize_s4_relationship_events",
+        "_on_relationship_registered",
+        "_on_relationship_route_lock_changed",
+        "_on_relationship_shield_changed",
+        "_on_relationship_value_changed",
+        "_original_relationship_identities_valid",
+        "_register_or_validate_legacy_catalog_definitions",
+        "_restore_snapshot_internal",
+        "_validate_catalog_staff_crosslinks",
+        "create_snapshot",
+        "get_staff_management_report",
+        "initialize",
+        "restore_snapshot"
+      ],
+      "hunks": [
+        {
+          "new_start": 333,
+          "new_count": 1,
+          "methods": [
+            "initialize"
+          ]
+        },
+        {
+          "new_start": 1058,
+          "new_count": 3,
+          "methods": [
+            "_restore_snapshot_internal"
+          ]
+        },
+        {
+          "new_start": 1063,
+          "new_count": 4,
+          "methods": [
+            "_restore_snapshot_internal"
+          ]
+        },
+        {
+          "new_start": 5389,
+          "new_count": 3,
+          "methods": [
+            "_configure_relationship_event_boundaries"
+          ]
+        },
+        {
+          "new_start": 6773,
+          "new_count": 24,
+          "methods": [
+            "_execute_register_original_relationship",
+            "_original_relationship_identities_valid"
+          ]
+        },
+        {
+          "new_start": 10897,
+          "new_count": 1,
+          "methods": [
+            "get_staff_management_report"
+          ]
+        }
+      ],
+      "all_new_changed_lines_included": true,
+      "complete_diff_in_packet": true,
+      "omitted_scope": "Unchanged Runtime methods outside the above complete methods. Full immutable source remains in Git at the supplied revision; request further context if needed.",
+      "entire_Runtime_review_claimed": false
+    },
+    "markers": {
+      "path": "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json",
+      "complete_source_sha256": "fb217150a0dafe26ebc7363f5e794bef506f4e76bbbd4e3621f5b8295c0cd973",
+      "base_source_sha256": "3c72cad4dded0619d0cf1c9691b590258ea657d79e482910bde8b0bbeed73e03",
+      "complete_selected_records": [
+        "tests/s4/test_original_relationship_model.gd",
+        "tests/s4/test_original_relationship_runtime.gd",
+        "tests/s4/test_relationship_event_service.gd",
+        "tests/s4/test_runtime_relationship_events.gd",
+        "tests/s6/test_runtime_snapshot_serialization.gd",
+        "tests/s6/test_runtime_save_lifecycle.gd",
+        "tests/ui/test_staff_management.gd"
+      ],
+      "omitted_records_proven_unchanged": true
+    },
+    "rules": "Review every fixed backend criterion and all changes using full diff, complete selected methods/sources and actual evidence. Context limits do not waive criteria; request more context or reject if evidence is insufficient. Whole P18-01 completion is not claimed."
+  },
+  "acceptance_ids": [
+    "P18-C-1",
+    "P18-C-2",
+    "P18-C-3",
+    "P18-C-4"
+  ],
+  "formal_review_run": false
+}
@@ -0,0 +1,8 @@
+{
+  "task": "P18-01-CODE",
+  "submitted": "f76ad96990a4d7371b6ab667df0a068cc06be798",
+  "review_actual_run": false,
+  "packet_ready": false,
+  "reason": "packetが大き過ぎます。タスクを小さく分割してください",
+  "needed_action": "Prepare scoped complete changed-function/transitive context with original full source/diff retained and hashes; keep500000byte guard and independent review criteria. No review passed or task state change."
+}
@@ -0,0 +1,45 @@
+{
+  "task": "P18-01-CODE",
+  "submitted_commit": "0084760ee05a97adfcbd783a71161491f3629918",
+  "source_files": 1311,
+  "actual_native_evidence": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p18-01-model/.runtime/P18-01-CODE/build/p18-relationship-evidence",
+  "actual_checks": 843,
+  "actual_suites": 7,
+  "parse_checks": 308,
+  "passed": true,
+  "actual_PIDs": [
+    15228,
+    15309,
+    15342,
+    15366,
+    15380,
+    15395,
+    15413,
+    15424,
+    15481
+  ],
+  "guard_errors": [],
+  "cleanup_errors": [],
+  "files": {
+    "runner-input.json": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p18-01-model/.runtime/P18-01-CODE/build/p18-relationship-evidence/runner-input.json",
+      "sha256": "afa2bf024fa36f908840c8c1611b4a796c354d170958988290eb9f95f0840085"
+    },
+    "runner-ended.json": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p18-01-model/.runtime/P18-01-CODE/build/p18-relationship-evidence/runner-ended.json",
+      "sha256": "fcbbcb9825165ce813326b8374740f07c290a20086e0ed9c38c64625c0ab8e2e"
+    },
+    "receipt.json": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p18-01-model/.runtime/P18-01-CODE/build/p18-relationship-evidence/receipt.json",
+      "sha256": "de7499e31703fc63f3e69fe6ea2a30260de0cbc6d2671cf31f47aed8c94d1dbf"
+    },
+    "all-tests.json": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p18-01-model/.runtime/P18-01-CODE/build/p18-relationship-evidence/all-tests.json",
+      "sha256": "eef7faa5e300bf2b221ebf421a10ccd081aa809653f538d8bb87ce73dc93b08d"
+    }
+  },
+  "ordinary_UI_accepted": false,
+  "production_initial_values_approved": false,
+  "full_required_final_roster": "pending whole-unit final version",
+  "original_unit_complete": false
+}
@@ -0,0 +1,9 @@
+{
+  "submitted_commit": "f76ad96990a4d7371b6ab667df0a068cc06be798",
+  "original_actual_native_evidence": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p18-01-code-local-native-r01",
+  "tested_files": 1311,
+  "submitted_files": 1311,
+  "mismatching_paths": [],
+  "settings_and_source_match": true,
+  "scope": "Exact candidatef76 original model and affected7/843 macOS native preflight. Not adopted, not whole-unit acceptance. Future collector repair requires new exact final-source evidence."
+}
@@ -0,0 +1,152 @@
+"""Complete P18 changed-function review context; no acceptance or limit changes."""
+import hashlib
+import json
+import re
+import subprocess
+from pathlib import Path
+
+TASK = 'P18-01-CODE'
+BASE = 'd2a1f80a613e7c77b02b941026bc49c2d85db863'
+SPEC = '04e9ae701b6ee1e399542564add695ca7fce54499e52dd2e907b1dbdc23a366d'
+RUNTIME = 'autoload/simulation_runtime.gd'
+MARKERS = 'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json'
+FOCUS = [
+    'tests/s4/test_original_relationship_model.gd',
+    'tests/s4/test_original_relationship_runtime.gd',
+    'tests/s4/test_relationship_event_service.gd',
+    'tests/s4/test_runtime_relationship_events.gd',
+    'tests/s6/test_runtime_snapshot_serialization.gd',
+    'tests/s6/test_runtime_save_lifecycle.gd',
+    'tests/ui/test_staff_management.gd',
+]
+
+
+def sha(text):
+    return hashlib.sha256(text.encode()).hexdigest()
+
+
+def source(repo, revision, path):
+    return subprocess.check_output(['git', 'show', revision + ':' + path], cwd=repo).decode('utf-8')
+
+
+def method_ranges(text):
+    lines = text.splitlines(keepends=True)
+    starts = [(i, re.match(r'^(?:static )?func\s+(\w+)\(', line).group(1))
+              for i, line in enumerate(lines)
+              if re.match(r'^(?:static )?func\s+(\w+)\(', line)]
+    assert starts, 'Runtime method boundaries missing'
+    methods = {name: (start, starts[i + 1][0] if i + 1 < len(starts) else len(lines))
+               for i, (start, name) in enumerate(starts)}
+    assert len(methods) == len(starts), 'duplicate Runtime methods'
+    return lines, starts[0][0], methods
+
+
+def runtime_context(git, repo, revision):
+    full = source(repo, revision, RUNTIME)
+    old = source(repo, BASE, RUNTIME)
+    lines, header_end, methods = method_ranges(full)
+    old_lines, _, old_methods = method_ranges(old)
+    delta = git(repo, 'diff', '--no-ext-diff', '--unified=0', BASE, revision, '--', RUNTIME)
+    selected = set()
+    hunks = []
+    for match in re.finditer(r'(?m)^@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@', delta):
+        old_start, old_count, start, count = match.groups()
+        old_start, old_count = int(old_start), int(old_count or '1')
+        start, count = int(start), int(count or '1')
+        touched = list(range(max(start - 1, 0), start - 1 + count)) if count else [max(start - 1, 0)]
+        names = {name for name, (lo, hi) in methods.items() if any(lo <= n < hi for n in touched)}
+        for name, (lo, hi) in old_methods.items():
+            if any(lo <= n < hi for n in range(max(old_start - 1, 0), old_start - 1 + old_count)) and name in methods:
+                names.add(name)
+        selected.update(names)
+        hunks.append(dict(new_start=start, new_count=count, methods=sorted(names)))
+    selected.update(name for name in methods if name in {
+        'create_snapshot', 'restore_snapshot', '_initialize_s4_relationship_events',
+        '_configure_relationship_event_boundaries', '_connect_relationship_signals',
+        '_execute_create_relationship', '_execute_change_relationship', '_execute_attack_relationship_shield',
+        '_on_relationship_registered', '_on_relationship_value_changed', '_on_relationship_shield_changed',
+        '_on_relationship_route_lock_changed', '_initialize_mvp_content_catalog',
+        '_register_or_validate_legacy_catalog_definitions', '_validate_catalog_staff_crosslinks',
+    })
+    covered = set(range(header_end))
+    pieces = [''.join(lines[:header_end])]
+    for name in sorted(selected, key=lambda n: methods[n][0]):
+        lo, hi = methods[name]
+        covered.update(range(lo, hi))
+        pieces.append('\n# COMPLETE METHOD %s; original lines %d-%d\n' % (name, lo + 1, hi))
+        pieces.append(''.join(lines[lo:hi]))
+    for hunk in hunks:
+        assert all(n in covered for n in range(hunk['new_start'] - 1, hunk['new_start'] - 1 + hunk['new_count'])), 'changed Runtime lines omitted'
+    omitted_changed_methods = [name for name in old_methods if name not in methods and name in delta]
+    assert not omitted_changed_methods, 'removed methods need explicit old full context'
+    context = ''.join(pieces)
+    proof = dict(path=RUNTIME, revision=revision, complete_source_sha256=sha(full),
+                 base_source_sha256=sha(old), context_sha256=sha(context),
+                 selected_complete_methods=sorted(selected), hunks=hunks,
+                 all_new_changed_lines_included=True, complete_diff_in_packet=True,
+                 omitted_scope='Unchanged Runtime methods outside the above complete methods. Full immutable source remains in Git at the supplied revision; request further context if needed.',
+                 entire_Runtime_review_claimed=False)
+    return context, proof
+
+
+def unchanged_dependency_context(repo, revision):
+    selected = {
+        'scripts/relationship/relationship_state.gd': None,
+        'scripts/staff/staff_service.gd': ['remove_staff', 'retire_staff'],
+        'scripts/guest/guest_service.gd': ['despawn_guest'],
+    }
+    result = {}
+    for path, names in selected.items():
+        full = source(repo, revision, path)
+        assert full == source(repo, BASE, path), 'relationship dependency changed; review complete delta first'
+        entry = {'path': path, 'revision': revision, 'whole_source_sha256': sha(full),
+                 'unchanged_from_base': True, 'whole_file_included': names is None}
+        if names is None:
+            entry['source'] = full
+        else:
+            lines, _, methods = method_ranges(full)
+            assert all(name in methods for name in names), 'required dependency method absent'
+            entry['complete_methods'] = {name: ''.join(lines[methods[name][0]:methods[name][1]]) for name in names}
+            entry['omitted_scope'] = 'Other unchanged methods; not entire service review'
+        result[path] = entry
+    return result
+
+
+def packet(runner, task_id, revision, original_packet):
+    from runner.core import git, allowed, secret_path, read_json, CONTROL, require
+    task = runner.task(task_id)
+    contract = json.loads(task['contract'])
+    require(task_id == TASK and runner.config['project'] == 'the-tree-p18-01-model'
+            and contract['base_commit'] == BASE and contract['spec_sha256'] == SPEC,
+            'P18 context exact contract guard')
+    ordinary = original_packet(runner, task_id, 'implementer', revision)
+    body = json.loads(ordinary.split('\nDATA:\n', 1)[1])
+    body['diff'] = git(runner.repo, 'diff', '--no-ext-diff', BASE, revision)
+    names = git(runner.repo, 'ls-tree', '-r', '--name-only', revision).splitlines()
+    body['sources'] = {p: source(runner.repo, revision, p)
+                       for p in names if allowed(p, contract['allowed_paths']) and not secret_path(p)}
+    context, proof = runtime_context(git, runner.repo, revision)
+    body['sources'][RUNTIME] = context
+    marker = json.loads(body['sources'][MARKERS])
+    old_marker = json.loads(source(runner.repo, BASE, MARKERS))
+    other_old = [x for x in old_marker['rows'] if x['test'] not in FOCUS]
+    other_new = [x for x in marker['rows'] if x['test'] not in FOCUS]
+    require(other_old == other_new, 'unrelated marker records changed')
+    reduced = dict(marker, rows=[x for x in marker['rows'] if x['test'] in FOCUS])
+    require(len(reduced['rows']) == len(FOCUS), 'all seven complete marker records required')
+    body['review_context_provenance'] = {
+        'runtime': proof,
+        'markers': dict(path=MARKERS, complete_source_sha256=sha(body['sources'][MARKERS]),
+                        base_source_sha256=sha(source(runner.repo, BASE, MARKERS)),
+                        complete_selected_records=FOCUS, omitted_records_proven_unchanged=True),
+        'rules': 'Review every fixed backend criterion and all changes using full diff, complete selected methods/sources and actual evidence. Context limits do not waive criteria; request more context or reject if evidence is insufficient. Whole P18-01 completion is not claimed.'}
+    body['sources'][MARKERS] = json.dumps(reduced, ensure_ascii=False, indent=2)
+    body['immutable_identity_catalog'] = {p: source(runner.repo, revision, p)
+                                        for p in ['data/characters/mvp_unique_characters.json']}
+    body['immutable_relationship_dependencies'] = unchanged_dependency_context(runner.repo, revision)
+    body['tests'] = [read_json(row[0]) for row in runner.db.execute(
+        "SELECT artifact FROM evidence WHERE task_id=? AND kind='validation' AND commit_sha=? AND passed=1",
+        (task_id, revision))]
+    body['validation_sources'] = {'tools/run_p18_relationship_tests.py': body['sources']['tools/run_p18_relationship_tests.py']}
+    require(len(json.dumps(body).encode()) < 500000, 'unchanged review packet size guard')
+    return (CONTROL / 'prompts/reviewer.txt').read_text() + '\nDATA:\n' + json.dumps(body, ensure_ascii=False)
@@ -0,0 +1,24 @@
+# P24-02 現在候補と次の依存成果単位
+
+候補9641ed52def2ff8e5b0222449a4a83a1191e1d37、修正3/3。同一GUI担当の追加修正を通常Runnerで提出。原成果単位の受入条件はdocs/spec/acceptance/P24-02-code-r01.jsonの全8件を保持。30パッケージ/88成果単位・部分点なし、今回の新規正式完了0。製品main未採用。
+
+| 条件ID | 現証拠と不足・依存 |
+|---|---|
+| placement_and_invalid_drop | 既存666cの原本配置/スタッフ局所証拠はsource/config/input一致を確認した範囲のみ再利用。追加native49041で有効1command/job/chargeと重複拒否text、全Runtime/台帳/選択保全を確認し限定reviewPASS。無効配属/dropと全click代替の証拠は残る。 |
+| modal_and_pause_resume | 9641の操作通知局所58PASSと実OS保存dialogのblock解除を取得。追加native49041で通常menu id3/modal開閉/取消/全Runtimeと選択保全を記録。全modal取消確定/背後操作/保留command/実時間停止再開を条件別に照合。 |
+| unit_bubbles | 666cからproduct bindingは今回未変更。全対象実状態/切替/除去の現候補適用根拠を追加、fixtureのみで完了にしない。 |
+| event_log | 9641局所34PASS。既完了P24-03のログ256件は一致する範囲で再利用。自然event順序/時刻/理由/保存再開重複の通し証拠を追加。 |
+| important_warning_cutin | 原本通り盾positive→0でNTR侵食開始の表示文へ修正し独立限定reviewPASS。自然生成のP18-01/02、3決闘/結果保存P19-01、自然防衛P21-01が依存。synthetic signalは通常実証に替えない。 |
+| click_alternatives | 新規保存名のclick入口は実Mac通常menuで確認。必要な全navigation/assignment代替を現候補で照合。P23手動Ctrl-wheel/左保持dragは後回しのまま免除なし。 |
+| japanese_input_and_scale | 9641の実OSmenu→IME未確定/取消/確定→テスト表示名別slot保存→別PID33760/34817通常id2読込を取得。追加単一受付工事scenarioの旧4files OS前後hashは一致し限定review済み。全旧形式/全内容保存、invalid label feedback、全倍率/clip/focus、同一Windows配布版実機は未達。 |
+| final_validation_review | 9641のimport/全GDparse/局所3 167、source/player/cleanup違反0、別Opus5.5限定差分PASS。関連依存をまとめた正確な最終候補の必須全roster、全8条件正式独立review、現在main統合/最終照合は未達。 |
+
+証拠はnative-os-input-r01/submitted-local-r06.json、ordinary-menu-os-observations-r02.json、independent-delta-review-r02.json。各々候補/実PID/raw artifact SHA/適用範囲を保持。初回OS runは空の開始世界。追補r03では通常配置した受付工事70percent/min444を保存し、旧manual_ui4files全内容保全と別PID39701→40866の復元直後全snapshot118528B一致を取得。資料補完後r04限定OpusreviewPASS。全game内容/保存移行や完了通知後状態の一致は主張しない。今回Main変更に対して局所3を実行し、旧7証拠の自動継承や重複全回帰は行っていない。
+
+次に閉じる依存1件はP18-01「関係モデルと保存」。自然NTR警告受入に直接必要で、現候補0084760eは実native7/843・parse308・正式verify-onlyPASSまで進んでいるが別Opusreviewはchanges_requested。原本3値/盾max専用backend、旧関係保存保全、Runtime/読取projection、試験review統合の4 backend条件を固定。全P18-01には通常UI/全人物/必要本番初期値承認も必要。レビュー指摘の旧alias変更、退店客persistent参照/旧型互換、UNIQUE保全、候補catalog参照とRuntime負例を解消する修正案を別途準備済み。P18のみ追加1回の回答待ちで、P24許可を転用しない。回答待ちにP24の受入証拠照合を継続する。
+
+対象外の改善は独立レビューfindingsに記録。旧commentのvanishing表現などは現許可差分へ混ぜず、通常入力feedback/保存破損等の必須性を優先する。未確定の関係値・数値・仕様は作らない。
+
+追補証拠: native-os-input-r01/ordinary-save-preservation-observations-r03.json、preservation-provenance-supplement-r04.json、independent-preservation-evidence-review-r04.json。最初の資料不足reviewを保持し、既存dataの補完で解消。menu/pointer/resumeはCUA観測の適用限界を保持、単位全受入には未転用。
+
+追補r05 controls: Root記録器の施設id参照エラーr04はFAIL保持、修正とJSON/PNG/操作後capture追加r05でnative49041/実menu3/有効1回/重複拒否/取消全状態保全を取得。別Opus限定text reviewPASS、PNGはRoot確認。元MainのSceneTree観測起動であり、通常main_scene起動/全操作/全platformの受入を代替しない。
@@ -15,3 +15,11 @@ Claude Opus5.5の記録済み判断で、同じ登録タスク/既存worktreeを
 追補r05: 状態遷移履歴を整合させた新候補はimport/全GD parse/局所・影響7スイート477checks PASS、source/player/cleanup違反0。通常Runner submitで666c87bd7d7c961ae6d7d2ad8d52d6456c31015bに固定。提出後1313全source map差0とcleanを確認し局所証拠の適用を固定。候補branch codex/p24-02-operations-candidate-r03へpush済み、製品mainには未統合。全8通常実証/上流NTR・決闘/最終full/別Opus review/統合・最終は未了で、P24-02正式完了には数えない。

 実OS追補: 固定666c87bdの実IME未確定・取消・確定、表示名テストの所有暗号slot保存、別PID80764→83514の通常一覧/通常読込を[限定観測記録](native-os-input-r01/observations.json)へ固定。dialog活性化は診断F8であり通常入口不足は未受入。3行差分案とP24-02追加repair1の回答待ち。全世界状態再開/実NTR・決闘/最終full/review/Windowsは未了のまま。
+
+追補r06: P24だけ追加1回の直接許可を受け、同一GUI担当Opus5.5 Medium/修正3/3で通常新規保存入口と原本NTR警告文を修正、Runner提出9641ed52へ固定。実import/全GDparse/局所3 167 PASS、通常menu→実IME未確定/取消/確定→表示名テストの別slot保存→別PID33760→34817通常読込を取得、source/player/cleanup違反0。独立差分reviewは実行中、全8条件・上流自然生成・最終full・全条件review・統合・Windowsは未了。旧「追加許可待ち」「入口未実装」はこの候補について解消。P18backend0084760eは実7/843/parse308と正式verify PASSだが独立review changes_requested、修正案は別許可待ち。
+
+限定差分の別Opus5.5 reviewはPASS（実argv検証）。全条件正式reviewには未代替。レビュー残件に既存manual_uiの前後hash、全world digest、実NTR文言/実発生、invalid label feedbackとDELを記録。今回consumerはid2の通常一覧から選択。
+
+追補r07（コード候補不変9641ed52）: 実配置受付の工事70percent/min444を通常quick save→通常別名slot、既存manual_ui全4filesの内容保全、別PID39701→40866の復元直後全snapshot118528B byte一致を取得。通常再開で工事完成をCUA観測、後者の独立正式pointer/resumeは未達として保持。最初のOpus reviewは採取provenance資料不足でchanges_requested、実行済みRoot before/after全文/方法/日時とnative tick、全4live rehashを補い再review限定PASS、新engine再実行0。全88正式完了増加0。
+
+追補r08: 同一9641でnative49041の通常有効受付1command/job/charge→重複拒否text→menu3/modal→取消の全Runtime・選択・path保全、PNG8とraw/JSON snapshotsを固定、別Opus限定PASS。Rootcollectorのr04 field誤りFAILを保持しr05のみ有効。全modal/配属/背後入力/正常main_scene起動/上流/最終review/Windowsを未達として維持。MP01承認用候補案は追加1回の直接許可（call_de866e18b25942ee8992263aa0189278）を受け、個別cap2・使用済み2を保持。同一SHAの既存2文書を再利用し、実Opus5.5のaction run／Sol選択に基づく同一登録ワーカーを起動。追加許可待ちは解消し、正式検証・独立レビュー・統合はまだ未了。製品数値・P06-01受入・30/88は不変。
@@ -0,0 +1,8 @@
+{
+  "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-3dad784a3a94422ca8c0a8767253a76e-p24-02-os",
+  "saves_directory_exists": false,
+  "owned_files": [
+    "logs/godot.log"
+  ],
+  "capture_time_utc": "2026-10-13T07:27:12.025081+00:00"
+}
@@ -0,0 +1,18 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "actual_review_model_argv_verified": "claude-opus-5-5",
+  "limited_review": "passed",
+  "whole_unit_accepted": false,
+  "collector_r04_failed": true,
+  "collector_r05_changes": [
+    "Correct real FacilityDefinition.id instead of nonexistent definition_id",
+    "Add full JSON companion to each raw Runtime snapshot",
+    "Add deferred capture after root mouse dispatch with status text/selection and bounded viewport PNG"
+  ],
+  "game_code_changed": false,
+  "native_main_scene_boot_note": "This development probe uses SceneTree script instantiating real main.tscn; ordinary project main_scene boot was not separately observed. Existing pass must not cover that boot condition.",
+  "observer_timing_note": "First selection click capture precedes release/deferred UI updates. Selection precondition is native CUA-observed; after actual valid placement captures record reception selected.",
+  "visual_review_note": "Root actually viewed pinned PNG003 and PNG006. Separate text-only reviewer did not inspect pixels or recompute artifact hashes. Formal full-unit independent review still required.",
+  "background_click_note": "Native CUA attempted map click while dialog open. No Root InputEvent receipt for that exclusive dialog click, so exhaustive behind-input acceptance remains unclaimed.",
+  "counter_correction": "MP-01-r02 global default2 is not individual task cap1; Root corrected statement and no worker/cap change executed."
+}
@@ -0,0 +1,33 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "scope": "Limited normal click placement rejection and menu/modal-cancel evidence; not formal P24 whole review",
+  "result": {
+    "status": "passed",
+    "summary": "The supplied data supports the narrow observation on candidate 9641ed5, macOS, pid 49041. It covers one native valid reception placement, one overlap-invalid click, opening production SaveLoadMenu id 3 and cancelling the dialog. Exactly one command, job and cost charge occurred. The real overlap rejection text appeared and the reception selection stayed in place. The modal guard went false→true→true→false. Runtime snapshot bytes were identical from the valid placement through the cancel. The controller recorded exit 0, no ERROR lines and clean source, stage and default-player guards. My review covers only the supplied JSON, the supplied method excerpts and the collector/controller source. I did not recompute any hash, read events.jsonl or engine-native.log, or view any image. This is not whole-unit acceptance.",
+    "findings": [
+      "SUPPORTED – snapshot equality: ui-snapshot-000 and 001 share bin sha dfea68…/json ec054c…; 002 through 007 share bin sha 17399e…/json 07cebb…. The only state change is at 002, after the valid click. This is consistent with both valid_to_invalid_full_runtime_bytes_identical and all_full_runtime_bytes_identical_after_valid_through_modal_cancel. These are pin comparisons as supplied; I did not recompute them.",
+      "SUPPORTED – exactly one command, job and cost: after_valid_full_json has one accepted/processed command (command_id 1, key ui.build.00000001, code OK), one PLANNED job construction_00000001 (reception, origin [-5,0,0], 8 reserved cells), next_command_id 2, next_job_sequence 2, one new ledger entry ledger_00000004 (500 gold CONSTRUCTION) and resources 5000/50→4500/42, matching total_cost {gold 500, materials 8}. Because 003–007 are byte-identical to 002, no second command, job or charge was added later in the observed window.",
+      "SUPPORTED – actual status-text rejection: capture 003 status_text is exactly '配置不可: ほかの施設または工事と重なります', and the runtime bytes are unchanged. This matches the _on_map_cell_clicked path, which calls get_build_preview_report and then _set_status(_preview_failure_message(...), false) and returns before _submit_ui_command. The body of _preview_failure_message was not supplied, so I accept the mapping only from the observed text.",
+      "SUPPORTED – selection preserved: build_definition_id 'reception' and palette_open true appear in every capture from 002 to 007, including after the invalid click and after cancel. This agrees with _on_map_cell_clicked, whose failure path does not clear _selected_definition.",
+      "SUPPORTED – modal guard: modal_blocked is false at 004, true at 005 (menu_3) and 006 (dialog_visibility_true), and false at 007 (dialog_visibility_false). This matches modal_guard_states [false,true,true,false]. It is consistent with the source: _ensure_manual_save_slots connects visibility_changed to _update_modal_input_guard, and world_preview._gui_input calls accept_event() and returns when the guard is set. The actual_menu_item row (id 3, pid 49041, ticks 116393) comes from the production PopupMenu's id_pressed signal.",
+      "SUPPORTED (narrow) – no save on cancel: snapshot bytes are unchanged across open and cancel, save_path stays 'user://saves/manual_ui', and the supplied rows contain no save_operation_completed receipt. Limit: the supplied data does not include a directory listing of the private profile's saves folder or the full events.jsonl, so 'no file created' rests on the root claim plus the absent receipt.",
+      "SUPPORTED – observer/controller read-only (source level): PassiveRecorder only connects to signals, calls runtime.create_snapshot() and reads properties. Its _input logs events without calling accept_event and does not inject any input. Repeated create_snapshot calls across 002–007 produced identical bytes, which shows no observable mutation. The controller swaps project.godot to a private profile and restores it, then checks that the source refs, stage inventory and default player are unchanged; guard_errors and cleanup_errors are both empty.",
+      "SUPPORTED – no-error end: controller_guards.passed is true, there is one row with exit_code 0 and engine_ended true, and the log is pinned at 4f94d5…. The log was checked to contain neither 'ERROR:' nor 'SCRIPT ERROR:', but the log text itself was not supplied.",
+      "LIMIT – how reception got selected is not evidenced here. Capture 001 (a mouse press) shows palette_open false, and the next captured press, 002, already shows the placement succeeded with reception selected. No captured press covers palette opening or reception selection. Button release-mode activation and/or keyboard input would explain this, but the key rows in events.jsonl were not supplied. Treat the precondition path as unreviewed.",
+      "LIMIT – launch path: the collector runs `--script passive_os.gd` (a SceneTree subclass), instantiates main.tscn by hand and sets root.title. This is close to the production main scene but is not the project's ordinary main_scene boot.",
+      "LIMIT – the clock was paused (paused true, minute 360) for the whole session. Byte equality therefore shows no command or side effect, but says nothing about behaviour while time is running.",
+      "LIMIT – the background click behind the dialog (native CUA at 988,566) produced no root InputEvent receipt. Only open/cancel snapshot equality is supported. Do not claim acceptance of exhaustive behind-dialog input blocking or a native behind-click receipt.",
+      "LIMIT – the cancel click on the dialog's own Window viewport is not logged by the root observer; cancel is inferred from dialog_visibility_false plus snapshot equality.",
+      "LIMIT – visual: frame PNG pins are supplied, but I did not inspect any pixels. The checks of frame003 (invalid explanation, display 4500/42) and frame006 (dialog body and buttons) are the root reviewer's claims only. Dialog frames exclude native window chrome.",
+      "LIMIT – full-file review: whole_unchanged_file_review is false for main.gd and world_preview.gd. Only the listed methods were reviewed; _preview_failure_message, _submit_ui_command, the SaveLoadMenu id 3 handler, the cancel handler and ManualSaveSlotsDialog were not supplied.",
+      "RETAINED – the r04 run that failed (collector used definition_id instead of FacilityDefinition.id; ended.json sha 31346f…) stays recorded as failed. In r05 only the collector field was corrected, and the source-ref guards in the supplied controller show the product is unchanged.",
+      "SCOPE – this is one macOS session only. It does not complete all 8 P24 conditions, all modal, pointer or staff-assignment conditions, or Windows. independent_review in the proof data is false, and whole_unit_accepted stays false."
+    ],
+    "whole_unit_accepted": false
+  },
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p24-02-operations/runs/1a197ec2abff40eca265f71baa4d621e",
+  "model": "claude-opus-5-5",
+  "whole_unit_accepted": false,
+  "formal_runner_review": false,
+  "proof_sha256": "56d5e47139841f40d7fed0d053fb9eb87956e07240a208355a77a94a7dd0a094"
+}
@@ -0,0 +1,24 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "review_scope": "Independent read-only review ONLY of owner-approved third repair delta; never whole P24 acceptance or Runner formal review substitution",
+  "result": {
+    "status": "passed",
+    "summary": "I reviewed only the third-repair delta at 9641ed52 (scenes/main/main.gd plus the owner direction file), without tool use. This review does not accept P24-02 as a whole: the eight P24 conditions, the ordinary upstream NTR/duel/defense flow, the full roster review, final integration and Windows all remain incomplete.\n\nVerdict: the limited delta is correct. The OS evidence supports the menu-to-IME-to-save-to-load path. No problem was found that blocks it. The gaps listed in the findings are things not yet proven and are not defects in the delta.\n\nSource correctness: The applied diff matches owner-direction r04. That file also contains a blank-line-for-blank-line hunk that changes nothing, so its absence from the actual diff is harmless. The `id_pressed` lambda still closes on its last branch, the same pattern as before. The new id 3 calls `_ensure_manual_save_slots().show_new_save(manual_save_path)`. That dialog is added to the tree before it is returned, so its `_ready` controls exist when `show_new_save` runs. No gameplay values, conditions or save logic changed.\n\nOrdinary menu reachability: The menu label is now 「保存・読込 ▾」 and item 3 「新しい名前で別スロット保存」 sits in the existing bottom-bar MenuButton. The OS run reached it with native mouse clicks only, with no F8 or controller entry.\n\nIds 0/1/2: unchanged. They still call `_load_manual`, `_preview_dimension_migration` and `_show_manual_load_slots`.\n\nOld-save preservation (from the code): The new slot path is `manual_ui_` plus 32 hex characters from OS crypto. Freshness is checked three times: when the dialog opens, when the player confirms, and again in `_save_new_manual_slot`, which also requires the same folder as the current save. `save_to_path` only writes the new path, and `manual_save_path` switches to it only after a successful save. So the original package is never written by this path.\n\nOptional Japanese display_name: The name box accepts Japanese, holds at most 60 characters, and rejects control characters. A blank or space-only name falls back to the default name.\n\nNTR wording: The heading and message now say 「NTR侵食開始」 and 「愛の盾が破られ、NTR侵食が始まりました」. This matches original §7.2 (耐久値0でブレイクし、NTR侵食が始まる). It also stops confusing the break with 「消滅」, which in §7.3-4 happens only at 陥落確定. The trigger condition (old>0, new==0) is unchanged.\n\nOS evidence: Two separate processes ran (PIDs 33760 and 34817). Events show IME composition 「テスト」, a cancel that left both the composition and the field empty, then a commit that put 「テスト」 in the field. The saved manifest has display_name 「テスト」 and save_id manual_ui_5e9f8ca3662a2ddf42984ba1403675a7, which fits the owned-name pattern. The second process reported that slot as its save path with the dialog closed. Evidence limits are stated in the findings.",
+    "findings": [
+      "Not proven, not blocking: old-save preservation rests on the code only. The OS evidence has no before/after hash of a pre-existing `user://saves/manual_ui` package, and nothing shows such a package existed when the run started. To prove it in the OS run, record the manifest.json and world.bin hashes of manual_ui before and after the new-slot save.",
+      "Not proven: the saved state is trivial (day 1, absolute_minute 360, a fresh opening world), and whole_world_equality_proven=false. The second process loaded the slot, but nothing shows its world digest equals checksum_world 99e450e0…. The evidence also does not say whether that load went through id 2 (choosing the slot) or id 0.",
+      "Test gap: tests/ui/test_operations_notification.gd fires a synthetic RELATIONSHIP_SHIELD_CHANGED event with old_value/new_value and checks only that the cut-in becomes visible. It never checks the new heading or message text, and none of the shown code proves that the real relationship service publishes those payload keys. Add an assertion on the cut-in text, and one upstream test where a real shield reaches 0, as part of the still-pending NTR acceptance work.",
+      "Test gap: no automated test selects SaveLoadMenu id 3 through `get_popup().id_pressed`. The test calls `_ensure_manual_save_slots()` directly, so only the manual OS run covers the menu entry. Consider adding a headless test that triggers id 3 and checks that the dialog is in new-save mode.",
+      "Minor, not blocking: the comment above the cut-in (`# Existing love-shield vanishing transition`) still says 'vanishing', which no longer matches the corrected 'break → NTR侵食開始' wording. Consider rewording it in a later approved repair, since owner-direction r04 limits this repair to its exact patch.",
+      "Minor, outside this delta: in ManualSaveSlotsDialog, the error branch of `_confirm_choice` sets an error message, but Godot hides the dialog when OK is pressed, so the player never sees it. That branch also returns without `_clear_choice`. It is reachable only if the field text is set by code, because `text_changed` already disables OK. `is_valid_label_text` also lets DEL (0x7F) through.",
+      "Scope limits: the OS evidence comes only from macOS with Retina scaling (screen_scale 2.0) and does not prove the Windows build; full_regression=false; the local result (3 suites / 167 checks) was reviewed by hash only, not by its contents. This review does not replace the Runner's formal review and does not accept the original unit or P24-02 as a whole."
+    ],
+    "whole_unit_accepted": false
+  },
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p24-02-operations/runs/ae7e8b1892ca49fa8d64d5cf01cdf042",
+  "model": "claude-opus-5-5",
+  "formal_runner_review": false,
+  "whole_unit_accepted": false,
+  "actual_argv_model_verified": true,
+  "evidence_annotation_after_review": "Consumer id2 observed menu clarified; no source or raw evidence changed. Pre-existing-slot OS preservation remains false."
+}
@@ -0,0 +1,26 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "scope": "Limited new preservation/full-restored-snapshot scenario evidence review; not formal whole-unit acceptance",
+  "result": {
+    "status": "changes_requested",
+    "summary": "Limited review of one native macOS producer→consumer run on 9641ed5. Adequately shown: different processes (PIDs 39701 and 40866, recorded at launch and per observer row), the same recorder hash in both runs, and the controller guards (exact commit, clean tree, source/stage/default-player unchanged, exit 0, no ERROR in the log). Full restore equality at snapshot_published before the ordinary SAVE_LOADED event is also adequately shown: the snapshot the observer built at the publish and the snapshot read back from disk are byte-identical (SHA b242cc87…, 118528 bytes, both pinned), the only capture was index 0, and a fresh process can only match the minute-444 save if the restore really happened. This holds for that phase only, not after the event. NOT adequately shown: preservation of ALL FOUR old slot files. Only manifest.json and world.bin are re-hashed on the live manual_ui path. journal.log and thumbnail.png rely only on preexisting-slot-before/after.json, which neither shown controller nor the observer writes. Their method, author and timing relative to the named-slot save are not shown, and their size difference (1472 vs 762 bytes) is unexplained. Menu ids 3/2 and the resume results (clock 444→531, reception finished, gold 4500/material 42) are CUA observations only, with no pinned captures. The restore-equality and different-process parts would pass alone; the ALL4 claim does not.",
+    "findings": [
+      "PASS-LIMITED: Restore equality is shown at the right phase. The observer calls runtime.create_snapshot() when snapshot_published fires. When the recovery completes, it compares that snapshot with the disk read from inspect_snapshot using == and compares SHA-256 of both serialized byte forms. snapshot-000.bin and loaded-stored-snapshot.bin are pinned with identical SHA b242cc87… / 118528 bytes. snapshot_index 0 and a fresh process mean equality is only possible after the restore. Valid only before the SAVE_LOADED completion event, as stated; not post-event equivalence.",
+      "PASS-LIMITED: Different processes. PIDs 39701 and 40866 come from each controller's Popen; the observer also logs its own process id per row. The consumer reused the producer's profile and required it to exist.",
+      "PASS-LIMITED: Guards. Each controller checks the exact candidate commit, a clean tree, tested stage source hashes, and no other running engine. Afterwards it checks source refs, the stage inventory and the default player are unchanged and restores project.godot. A run passes only with exit 0 and no ERROR/SCRIPT ERROR in the native log. ended.json is hash-pinned, but its contents were not supplied, so passed=true and empty guard_errors are taken from the summary.",
+      "GAP (blocking ALL4): Only manifest.json (62d801bb…) and world.bin (da65a181…) are re-hashed on the live saves/manual_ui path. journal.log (1ba101ad…) and thumbnail.png (17b547b7…) have no live re-hash pins and rely only on preexisting-slot-before/after.json.",
+      "GAP (blocking ALL4): Neither the producer nor the consumer controller, nor passive_os.gd, writes preexisting-slot-before.json or preexisting-slot-after.json. Their author, method and timing are unproven. The before capture must fall after the quick save and before the named-slot (menu id3) save. Its 1472 bytes vs the after file's 762 bytes is unexplained. Supply both files' contents and the capture method, with timing tied to the events.jsonl ticks.",
+      "SCOPE NOTE: The producer required a fresh, empty profile (require not profile.exists(); mkdir). So the 'preexisting' manual_ui slot was created by the same run's quick save. It existed before the named save, not across sessions.",
+      "OBSERVER LIMIT: Menu ids id3/id2, the 'preservation-r03' name entry and the confirm-read are not proven by pinned data. The observer logs _input keys and mouse buttons and dialog/label state (contents not supplied), but not PopupMenu item ids. It may not see clicks inside popup subwindows. These rest on CUA observation.",
+      "OBSERVER LIMIT: Resume results (clock 444→531, reception 70%→completed, gold 4500/material 42) are CUA-only. Only snapshot-000 is pinned; later snapshot_published captures were not supplied.",
+      "MINOR: The observer is not perfectly passive. Connecting to snapshot_published makes _publish_snapshot emit the signal, which it otherwise skips, and the handler adds a create_snapshot() call. This is likely harmless for state but does change the code path.",
+      "NOT CLAIMED/NOT ACCEPTED: whole P24/P24-02, all content, Windows/other platforms, post-event equivalence, repeated full roster."
+    ],
+    "whole_unit_accepted": false
+  },
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p24-02-operations/runs/3b4f57954a9d44b299c47feb4b024139",
+  "model": "claude-opus-5-5",
+  "formal_runner_review": false,
+  "whole_unit_accepted": false,
+  "input_proof_sha256": "024a2cb0aba292037f281a3eea43b5eac95d773fa0517e77b32b08ef5084e7c1"
+}
@@ -0,0 +1,29 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "scope": "Limited new preservation/full-restored-snapshot scenario evidence review; not formal whole-unit acceptance",
+  "result": {
+    "status": "passed",
+    "summary": "Limited pass for one native macOS run on 9641ed5: a producer (PID 39701) and a separate consumer (PID 40866). The new data fixes the blocking ALL4 gap from the previous review. Both root captures are now supplied in full. They hash all four files in saves/manual_ui and get identical maps: journal.log 35 B 1ba101ad…, world.bin 12258 B da65a181…, manifest.json 650 B 62d801bb…, thumbnail.png 30080 B 17b547b7…. Each capture lists exactly these four files, so the directory had no extra files at either time. The capture times fit the engine's own records. The slot manifest says it was created at 06:48:59 UTC, which matches the quick save at tick 103791. The dialog's default label shows 15:49:43 JST (06:49:43 UTC), which matches tick 148216. From that, the named save at tick 175078 works out to about 06:50:10 UTC. The before capture was created at 06:49:14, after the quick save and before the dialog opened. The after capture was created at 06:50:27, after the named save finished. The named save wrote to the new path manual_ui_6789…, and the live re-hash at 06:58:05 still matches all four files. The JSON files differ in size (1472 vs 762 bytes) only because the before file also embeds the manifest. A sanity check also holds: the 35-byte journal.log is exactly \"save_completed 2026-10-13T06:48:59\\n\". Restore equality still passes, at the snapshot_published phase before SAVE_LOADED only (snapshot-000 equals loaded-stored-snapshot, b242cc87…, 118528 B). The different-process proof and the guards still pass, and both full ended.json files now show passed=true with no guard, cleanup or other errors. Menu ids, the reception and gold results, and pointer/resume remain unpinned CUA observations only. whole_unit_accepted=false.",
+    "findings": [
+      "PASS-LIMITED (ALL4 preservation, previous blocker fixed): The before and after captures each list exactly the same four files with identical bytes and SHA-256. The live re-hash at 06:58:05 UTC matches all four. The live manifest.json and world.bin pins in the evidence list agree. 'Preserved' here means the contents are byte-identical. The per-file mtimes/inodes in manual_ui were not supplied, so a rewrite with identical bytes cannot be ruled out. This does not affect the content-preservation claim.",
+      "PASS-LIMITED (capture timing): The before capture (created 06:49:14.08 UTC) falls between the quick save (manifest created_at 06:48:59 UTC, tick 103791) and the dialog opening (tick 148216, default label 15:49:43 JST, which is 06:49:43 UTC). The after capture (created 06:50:27.03 UTC) falls after the named save at tick 175078, which works out to about 06:50:10 UTC. It also falls after the dialog closed and save_path switched to manual_ui_6789… at tick 175108. The order is consistent to within about 1 s, the precision of the manifest timestamp.",
+      "PASS-LIMITED (capture author and method): Root wrote the captures with Python hashing (rglob, then sha256 of read_bytes). The engine controller did not write them, and no engine process could write to the artifacts dir. The weak point is that the same coordinator who makes the claim also wrote the captures. Their trustworthiness rests on the two file hashes (aed60147…, efb7170f…), the creation times, and how well they match the engine's own ticks and manifest. Nobody else re-ran the capture.",
+      "PASS-LIMITED (size difference explained): The before JSON embeds the full saved manifest. The after JSON has only the path, the file map and an equality flag. The extra manifest is a plausible size for the 710-byte difference. The four-file maps are identical. The embedded manifest is internally consistent with the slot: save_id manual_ui, minute 444, display_name 手動保存, and a created time that matches the 35-byte journal content.",
+      "PASS-LIMITED (restore equality, unchanged): The capture at snapshot index 0 (tick 50749, minute 444) equals the snapshot read back from disk, by == and by SHA. This holds only at snapshot_published, before the ordinary SAVE_LOADED completion event, and does not show post-event equivalence. Minor: the consumer's operation was recorded as 'recovery' (recovery_mode=true), not 'load'. The safety report shows no automatic or forbidden repairs, so equality is not affected. It does mean the ordinary read went through the recovery entry point.",
+      "PASS-LIMITED (different processes and guards): PID 39701 and PID 40866 each came from their own Popen, and the observer logged the same PID in every row. Both ended.json files show passed=true, exit 0, no guard, cleanup or other errors, owned-cleanup only, and zero foreign signals. The source, stage and default-player guards ran after each run. The consumer reused the producer's profile.",
+      "SCOPE: The 'preexisting' slot was created by this same producer session's ordinary quick save, before the named save. It did not survive across sessions or come from an import.",
+      "SUPPORTED BUT NOT PROVEN (producer named-save dialog): The observer's state rows show the dialog visible with the label focused. The label text goes from the default to 'preserv' to 'preservation-r03'. Then the label loses focus, the save completes at tick 175078, and the dialog closes. That backs up the named-save flow, but not the menu item id3 specifically. The contents of the new manifest (cd450b44…) were not supplied, so display_name=preservation-r03 on disk is not checked.",
+      "OBSERVER LIMIT (resume): events.jsonl (pinned) now shows 88 snapshot_published captures, minutes 444 through 531, contiguous, with a 35 s gap after the restore that fits a pause and then resume. That supports clock progress 444→531 in the consumer. Reception reaching completion and gold 4500/material 42 are not shown by any supplied capture contents. Snapshots 001–087 are listed only by hash in the log, not as pinned evidence files. These remain CUA-only.",
+      "OBSERVER LIMIT (menus and pointer): The consumer's menu id2, the list/select of the named slot, the confirm-read, and pointer/resume input are unpinned native CUA observations. The observer does not log PopupMenu item ids. These are not accepted as pointer/resume conditions.",
+      "MINOR (observer not fully passive, unchanged): Connecting to snapshot_published makes the signal emit when it otherwise would not, and the handler adds a create_snapshot() call. This is a read-only path, but it is a different code path from an unobserved run.",
+      "NOT CLAIMED/NOT ACCEPTED: whole P24/P24-02, all content, Windows or other platforms, post-event equivalence, a repeated full roster, standalone pointer/resume or menu-id acceptance."
+    ],
+    "whole_unit_accepted": false
+  },
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p24-02-operations/runs/3b30533319954ada9252809c552dbc5b",
+  "model": "claude-opus-5-5",
+  "formal_runner_review": false,
+  "whole_unit_accepted": false,
+  "supplement_sha256": "a7aa38caec8b6968c9bde7ddbcd359ea1ca4cc4ec6108e6e02ec04796dbce1f9",
+  "input_proof_sha256": "024a2cb0aba292037f281a3eea43b5eac95d773fa0517e77b32b08ef5084e7c1"
+}
@@ -0,0 +1,44 @@
+import importlib.util,hashlib,json,os,shutil,sys,uuid
+from pathlib import Path
+sys.dont_write_bytecode=True
+ROOT=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+OUT=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r06')
+spec=importlib.util.spec_from_file_location('p24_existing_native_runner',ROOT/'tools/run_all_tests.py');r=importlib.util.module_from_spec(spec);spec.loader.exec_module(r)
+paths=['tests/ui/test_operations_notification.gd','tests/ui/test_event_log_ui.gd','tests/ui/test_selection_autosave.gd']
+import subprocess
+candidate=subprocess.check_output(['git','rev-parse','HEAD'],cwd=ROOT,text=True).strip()
+r.require(len(sys.argv)==2 and candidate==sys.argv[1], 'exact expected submitted commit')
+dirty_status=subprocess.check_output(['git','status','--porcelain'],cwd=ROOT,text=True)
+r.require(not dirty_status, 'submitted candidate clean')
+# Preflight only: exact source map and ordinary guards remain; no submitted-version acceptance.
+
+refs=r.source_refs(ROOT);before=refs;expected={n:{'bytes':v['bytes'],'sha256':v['sha256']} for n,v in refs.items()};policy=r.read(ROOT/'tools/regression/suite-policy.json');r.policy_coverage(paths,refs,policy)
+markers=r.module('p24_local_markers',ROOT/'tools/strict_test_markers.py');cp=ROOT/'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json';contracts=markers.load_contracts(cp)
+outer=r.module('p24_local_owned_outer',ROOT/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'another Godot is live');r.require(shutil.disk_usage(OUT.parent).free>=500*1024*1024,'local admission free>=500MiB')
+OUT.mkdir(parents=True,exist_ok=False);stage=OUT/'stage';stage.mkdir();(OUT/'starters').mkdir();(OUT/'bootstrap').mkdir()
+for n,pin in r.read(ROOT/'tools/regression/bootstrap-scripts.json').items():
+ data=pin['text'].encode();r.require(hashlib.sha256(data).hexdigest()==pin['sha256'],'bootstrap exact');(OUT/'bootstrap'/n).write_bytes(data)
+for n,pin in refs.items():
+ target=stage/n;target.parent.mkdir(parents=True,exist_ok=True);r.copy_source(Path(pin['path']),target)
+r.require(r.inventory(stage,stage=True)==expected,'whole separate CoW stage exact')
+protected=r.default_player(ROOT);public=(stage/'project.godot').read_bytes();parse=['res://'+n for n in sorted(refs) if n.endswith('.gd')];r.write(OUT/'parse-paths.json',parse)
+selected={'root_before':before,'map':{n:p['sha256'] for n,p in refs.items()},'timeout':300};engine='/Applications/Godot.app/Contents/MacOS/Godot'
+r.write(OUT/'runner-input.json',{'protocol':'guarded-operations-local-v1','full_regression':False,'source_commit':candidate,'source_state':'exact submitted local affected verification; not whole-unit acceptance','dirty_status':dirty_status,'selected_source_map':selected['map'],'roster':paths,'full_roster':r.roster(ROOT),'owner_runner_pid':os.getpid(),'stage':str(stage),'default_player_before':protected,'engine':engine,'engine_sha256':r.sha(engine),'marker_contract_sha256':r.sha(cp),'execution_controller_sha256':r.sha(Path(__file__)),'existing_phase_controller_sha256':r.sha(ROOT/'tools/run_all_tests.py')})
+diagnostics=r.module('p24_local_diagnostics',ROOT/'tools/regression/diagnostic_gate.py');owners=r.module('p24_local_owners',ROOT/'tools/regression/ordinary_proof_gate.py');audio=r.module('p24_local_audio',ROOT/'tools/regression/audio_evidence_gate.py')
+rows=[];phases=[];previous={};error=None
+try:
+ for label,test in [('import',None),('parse',None)]+[(str(i).zfill(3),n)for i,n in enumerate(paths)]:
+  row=r.execute_phase(engine,stage,OUT,label,test,selected,expected,previous,policy,contracts,parse,public,protected,ROOT,outer,markers,diagnostics,owners,audio);phases.append(row)
+  if test:rows.append(row)
+  print(json.dumps({'phase':label,'test':test,'passed':row['passed'],'actual_pid':row.get('actual_pid'),'checks':row.get('reported_checks'),'error':row.get('validation_error') or row.get('guard_error')},ensure_ascii=False),flush=True)
+  r.require(row['passed'],'first local phase failure; no retry')
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:cleanup,cleanup_errors=outer.finish_captured(outer.OWNED)
+guards=[]
+try:
+ r.require(r.source_refs(ROOT)==before,'whole source unchanged');r.require(r.default_player(ROOT)==protected,'default player unchanged');r.require(r.inventory(stage,stage=True)==dict(expected,**previous),'whole stage and generated file set exact')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+passed=not error and not guards and not cleanup_errors and len(phases)==len(paths)+2 and all(x['passed'] for x in phases)
+r.write(OUT/'local-ended.json',{'protocol':'guarded-operations-local-v1','full_regression':False,'passed':passed,'error':error,'guard_errors':guards,'cleanup_errors':cleanup_errors,'final_owned_cleanup':cleanup,'actual_captured_pids':[p.pid for p in outer.OWNED],'phases':phases,'rows':rows,'original_unit_accepted':False,'preflight_only':True,'OS_input_executed':False,'cross_process_executed':False,'independent_review_executed':False})
+print(json.dumps({'selected_local_passed':passed,'executed_suites':len(rows),'planned_local_suites':len(paths),'error':error,'guard_errors':guards,'cleanup_errors':cleanup_errors,'full_regression':False}),flush=True)
+sys.exit(0 if passed else 1)
@@ -0,0 +1,624 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "scope": "One normal macOS click valid/overlap-invalid reception placement and named-save modal open/behind-click/cancel; not all P24 conditions",
+  "pid": 49041,
+  "initial_resources": {
+    "faith": 0,
+    "gold": 5000,
+    "mana": 100,
+    "materials": 50
+  },
+  "after_valid_resources": {
+    "faith": 0,
+    "gold": 4500,
+    "mana": 100,
+    "materials": 42
+  },
+  "actual_single_construction_job": {
+    "assigned_builder_ids": [],
+    "build_minutes": 120,
+    "cancelled_at": -1,
+    "completed_at": -1,
+    "construction_cost": {
+      "gold": 500,
+      "materials": 8
+    },
+    "created_at": 360,
+    "definition_id": "reception",
+    "facility_instance_id": "",
+    "job_id": "construction_00000001",
+    "last_progress_at": -1,
+    "layer": 0,
+    "origin": [
+      -5,
+      0,
+      0
+    ],
+    "progress": 0,
+    "reserved_cells": [
+      [
+        -5,
+        0,
+        0
+      ],
+      [
+        -4,
+        0,
+        0
+      ],
+      [
+        -3,
+        0,
+        0
+      ],
+      [
+        -2,
+        0,
+        0
+      ],
+      [
+        -5,
+        1,
+        0
+      ],
+      [
+        -4,
+        1,
+        0
+      ],
+      [
+        -3,
+        1,
+        0
+      ],
+      [
+        -2,
+        1,
+        0
+      ]
+    ],
+    "rotation": 0,
+    "started_at": -1,
+    "state": "PLANNED",
+    "state_reason": "",
+    "work_units_done": 0
+  },
+  "actual_processed_commands": [
+    {
+      "code": "OK",
+      "command_id": 1,
+      "details": {
+        "job_id": "construction_00000001",
+        "placement_report": {
+          "access_points": [],
+          "build_time": 120,
+          "can_build": true,
+          "cells": [
+            [
+              -5,
+              0,
+              0
+            ],
+            [
+              -4,
+              0,
+              0
+            ],
+            [
+              -3,
+              0,
+              0
+            ],
+            [
+              -2,
+              0,
+              0
+            ],
+            [
+              -5,
+              1,
+              0
+            ],
+            [
+              -4,
+              1,
+              0
+            ],
+            [
+              -3,
+              1,
+              0
+            ],
+            [
+              -2,
+              1,
+              0
+            ]
+          ],
+          "error_codes": [],
+          "layer_mismatch_cells": [],
+          "mana_connection": false,
+          "missing_resources": {},
+          "occupied_cells": [],
+          "out_of_bounds_cells": [],
+          "predicted_environment_delta": {},
+          "predicted_heat": 0,
+          "predicted_operating_cost": {},
+          "reasons": [],
+          "total_cost": {
+            "gold": 500,
+            "materials": 8
+          },
+          "unexcavated_cells": [],
+          "unsupported_cells": [],
+          "zone_mismatch_cells": []
+        }
+      },
+      "is_replay": false,
+      "message": "",
+      "resolution_hints": [],
+      "target_id": ""
+    }
+  ],
+  "valid_to_invalid_full_runtime_bytes_identical": true,
+  "invalid_text": "配置不可: ほかの施設または工事と重なります",
+  "all_full_runtime_bytes_identical_after_valid_through_modal_cancel": true,
+  "actual_menu_item_rows": [
+    {
+      "kind": "actual_menu_item",
+      "pid": 49041,
+      "ticks_msec": 116393,
+      "value": {
+        "id": 3,
+        "source": "production PopupMenu id_pressed; native input only"
+      }
+    }
+  ],
+  "capture_rows": [
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 2545,
+      "value": {
+        "build_definition_id": "",
+        "filename": "ui-snapshot-000.bin",
+        "json_filename": "ui-snapshot-000.json",
+        "json_sha256": "ec054c36513cf2bc19b4743862b99a6d56ae0cffebe413d731c9ebb6ab53f237",
+        "modal_blocked": false,
+        "palette_open": false,
+        "reason": "dialog_visibility_false",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "dfea6817f87a9c79cc970f65e19991e60741277244106f770341d71185321fd4",
+        "status_text": "B 建築 / H 雇用 / I 運営　ホイール 拡大縮小・中ボタン 移動・Home 全体表示"
+      }
+    },
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 35222,
+      "value": {
+        "build_definition_id": "",
+        "filename": "ui-snapshot-001.bin",
+        "json_filename": "ui-snapshot-001.json",
+        "json_sha256": "ec054c36513cf2bc19b4743862b99a6d56ae0cffebe413d731c9ebb6ab53f237",
+        "modal_blocked": false,
+        "palette_open": false,
+        "reason": "native_mouse_after_dispatch",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "dfea6817f87a9c79cc970f65e19991e60741277244106f770341d71185321fd4",
+        "status_text": "B 建築 / H 雇用 / I 運営　ホイール 拡大縮小・中ボタン 移動・Home 全体表示"
+      }
+    },
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 51252,
+      "value": {
+        "build_definition_id": "reception",
+        "filename": "ui-snapshot-002.bin",
+        "json_filename": "ui-snapshot-002.json",
+        "json_sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+        "modal_blocked": false,
+        "palette_open": true,
+        "reason": "native_mouse_after_dispatch",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+        "status_text": "受付の建設を開始しました（-5, 0 / 0°）。"
+      }
+    },
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 67041,
+      "value": {
+        "build_definition_id": "reception",
+        "filename": "ui-snapshot-003.bin",
+        "json_filename": "ui-snapshot-003.json",
+        "json_sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+        "modal_blocked": false,
+        "palette_open": true,
+        "reason": "native_mouse_after_dispatch",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+        "status_text": "配置不可: ほかの施設または工事と重なります"
+      }
+    },
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 102108,
+      "value": {
+        "build_definition_id": "reception",
+        "filename": "ui-snapshot-004.bin",
+        "json_filename": "ui-snapshot-004.json",
+        "json_sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+        "modal_blocked": false,
+        "palette_open": true,
+        "reason": "native_mouse_after_dispatch",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+        "status_text": "配置不可: ほかの施設または工事と重なります"
+      }
+    },
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 116401,
+      "value": {
+        "build_definition_id": "reception",
+        "filename": "ui-snapshot-005.bin",
+        "json_filename": "ui-snapshot-005.json",
+        "json_sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+        "modal_blocked": true,
+        "palette_open": true,
+        "reason": "menu_3",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+        "status_text": "配置不可: ほかの施設または工事と重なります"
+      }
+    },
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 116437,
+      "value": {
+        "build_definition_id": "reception",
+        "filename": "ui-snapshot-006.bin",
+        "json_filename": "ui-snapshot-006.json",
+        "json_sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+        "modal_blocked": true,
+        "palette_open": true,
+        "reason": "dialog_visibility_true",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+        "status_text": "配置不可: ほかの施設または工事と重なります"
+      }
+    },
+    {
+      "kind": "ui_model_capture",
+      "pid": 49041,
+      "ticks_msec": 160193,
+      "value": {
+        "build_definition_id": "reception",
+        "filename": "ui-snapshot-007.bin",
+        "json_filename": "ui-snapshot-007.json",
+        "json_sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+        "modal_blocked": false,
+        "palette_open": true,
+        "reason": "dialog_visibility_false",
+        "save_path": "user://saves/manual_ui",
+        "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+        "status_text": "配置不可: ほかの施設または工事と重なります"
+      }
+    }
+  ],
+  "frame_rows": [
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 2590,
+      "value": {
+        "error": 0,
+        "filename": "frame-000.png",
+        "reason": "dialog_visibility_false",
+        "sha256": "4516abb706e829094c19632e6c8005ad68877c7856af4ccfdf346e98b8dabe95",
+        "size": [
+          1280,
+          720
+        ],
+        "target": "root"
+      }
+    },
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 35250,
+      "value": {
+        "error": 0,
+        "filename": "frame-001.png",
+        "reason": "native_mouse_after_dispatch",
+        "sha256": "9d61efee38fee61447a3ae10e95e07381f9560254388cc4ce38a79f7a0a21e6d",
+        "size": [
+          1280,
+          720
+        ],
+        "target": "root"
+      }
+    },
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 51290,
+      "value": {
+        "error": 0,
+        "filename": "frame-002.png",
+        "reason": "native_mouse_after_dispatch",
+        "sha256": "4f53747098468b37bc23078d70d091a8b1d8c78ae44547476df70d40c153d03e",
+        "size": [
+          1280,
+          720
+        ],
+        "target": "root"
+      }
+    },
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 67077,
+      "value": {
+        "error": 0,
+        "filename": "frame-003.png",
+        "reason": "native_mouse_after_dispatch",
+        "sha256": "dd60776d2370d79814e874a3944f7bce9152d6d3640bee434c624940f6e000e8",
+        "size": [
+          1280,
+          720
+        ],
+        "target": "root"
+      }
+    },
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 102142,
+      "value": {
+        "error": 0,
+        "filename": "frame-004.png",
+        "reason": "native_mouse_after_dispatch",
+        "sha256": "e8c2b8027767cd26850f02a2d87d2e594bab4c3d6ebcc5f288ec6140f332146d",
+        "size": [
+          1280,
+          720
+        ],
+        "target": "root"
+      }
+    },
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 116416,
+      "value": {
+        "error": 0,
+        "filename": "frame-005.png",
+        "reason": "menu_3",
+        "sha256": "7795cc8c2ee590c673f7bcd16d83e8fbfb85a8fef0af913282e9aa1df54e54c8",
+        "size": [
+          463,
+          285
+        ],
+        "target": "dialog"
+      }
+    },
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 116448,
+      "value": {
+        "error": 0,
+        "filename": "frame-006.png",
+        "reason": "dialog_visibility_true",
+        "sha256": "7795cc8c2ee590c673f7bcd16d83e8fbfb85a8fef0af913282e9aa1df54e54c8",
+        "size": [
+          463,
+          285
+        ],
+        "target": "dialog"
+      }
+    },
+    {
+      "kind": "frame_capture",
+      "pid": 49041,
+      "ticks_msec": 160222,
+      "value": {
+        "error": 0,
+        "filename": "frame-007.png",
+        "reason": "dialog_visibility_false",
+        "sha256": "0854ba41fd73e5b092d71e7d11e99fe3efb7b25ee04c2b0c8750b5d9de6d84b3",
+        "size": [
+          1280,
+          720
+        ],
+        "target": "root"
+      }
+    }
+  ],
+  "no_save_created_on_cancel": true,
+  "palette_and_reception_selection_retained_after_valid": true,
+  "modal_guard_states": [
+    false,
+    true,
+    true,
+    false
+  ],
+  "background_click_scope": "Actual native CUA click outside dialog at map position988,566; native exclusive/modal handling did not deliver that click to the root recorder. Open/cancel snapshots are byte-identical. Separate native behind-click receipt is not claimed.",
+  "root_visual_check": "Root viewed frame003 actual invalid explanation/unchanged displayed4500/42 and frame006 dialog body/buttons. Dialog PNG excludes native window chrome by viewport design.",
+  "controller_guards": {
+    "passed": true,
+    "error": null,
+    "guard_errors": [],
+    "cleanup_errors": [],
+    "rows": [
+      {
+        "actual_pid": 49041,
+        "exit_code": 0,
+        "engine_ended": true,
+        "log_sha256": "4f94d50fe2500a312baac896c7314f26816c544b2305a62796e98e5ed4538809"
+      }
+    ]
+  },
+  "old_failed_recording": {
+    "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r04/ended.json",
+    "sha256": "31346f8bde2eca1bae2202e746733dec4a5e65917ecb54aa2975e88e815069e2",
+    "reason": "Root collector used definition_id instead of real FacilityDefinition.id; product unchanged; failed pass false retained"
+  },
+  "whole_unit_accepted": false,
+  "independent_review": false,
+  "Windows": false,
+  "evidence": [
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/started.json",
+      "sha256": "64397b2e4b9cf67faf78bd02848492895111ac0b0b32c9d4fd629e481103b094",
+      "bytes": 726638
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/process-started.json",
+      "sha256": "3b73172fa0124a5ef47f7004d5ae4144b057279b7246e8dd4eb84cc5a1097c17",
+      "bytes": 727110
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ended.json",
+      "sha256": "9bbdf3d512b5f5ae4a8f9595da1cac52587a5f05009869ec7e0d7c8099c4ed8a",
+      "bytes": 727662
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/events.jsonl",
+      "sha256": "f456f8013343264573c6cab8c7be99807210cb889a78f0a1db1461989d46a3dc",
+      "bytes": 9985
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/passive_os.gd",
+      "sha256": "552f9bb40770f1a88bbfb41586782e4f8ba8dff29776336ab83ba64dbd2f4767",
+      "bytes": 8021
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-000.bin",
+      "sha256": "dfea6817f87a9c79cc970f65e19991e60741277244106f770341d71185321fd4",
+      "bytes": 80292
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-001.bin",
+      "sha256": "dfea6817f87a9c79cc970f65e19991e60741277244106f770341d71185321fd4",
+      "bytes": 80292
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-002.bin",
+      "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+      "bytes": 84828
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-003.bin",
+      "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+      "bytes": 84828
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-004.bin",
+      "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+      "bytes": 84828
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-005.bin",
+      "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+      "bytes": 84828
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-006.bin",
+      "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+      "bytes": 84828
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-007.bin",
+      "sha256": "17399e4292ef33b29079f361bf91d853f0a1b036066e4e23707840d30deac4a3",
+      "bytes": 84828
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-000.json",
+      "sha256": "ec054c36513cf2bc19b4743862b99a6d56ae0cffebe413d731c9ebb6ab53f237",
+      "bytes": 49113
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-001.json",
+      "sha256": "ec054c36513cf2bc19b4743862b99a6d56ae0cffebe413d731c9ebb6ab53f237",
+      "bytes": 49113
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-002.json",
+      "sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+      "bytes": 51681
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-003.json",
+      "sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+      "bytes": 51681
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-004.json",
+      "sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+      "bytes": 51681
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-005.json",
+      "sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+      "bytes": 51681
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-006.json",
+      "sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+      "bytes": 51681
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/ui-snapshot-007.json",
+      "sha256": "07cebb2a71ff0c63608f8a218a03618e9504fd171d8c7059b15bcf901dc5f8ec",
+      "bytes": 51681
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-000.png",
+      "sha256": "4516abb706e829094c19632e6c8005ad68877c7856af4ccfdf346e98b8dabe95",
+      "bytes": 82965
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-001.png",
+      "sha256": "9d61efee38fee61447a3ae10e95e07381f9560254388cc4ce38a79f7a0a21e6d",
+      "bytes": 82953
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-002.png",
+      "sha256": "4f53747098468b37bc23078d70d091a8b1d8c78ae44547476df70d40c153d03e",
+      "bytes": 111921
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-003.png",
+      "sha256": "dd60776d2370d79814e874a3944f7bce9152d6d3640bee434c624940f6e000e8",
+      "bytes": 112437
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-004.png",
+      "sha256": "e8c2b8027767cd26850f02a2d87d2e594bab4c3d6ebcc5f288ec6140f332146d",
+      "bytes": 119749
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-005.png",
+      "sha256": "7795cc8c2ee590c673f7bcd16d83e8fbfb85a8fef0af913282e9aa1df54e54c8",
+      "bytes": 31302
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-006.png",
+      "sha256": "7795cc8c2ee590c673f7bcd16d83e8fbfb85a8fef0af913282e9aa1df54e54c8",
+      "bytes": 31302
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-controls-r05/frame-007.png",
+      "sha256": "0854ba41fd73e5b092d71e7d11e99fe3efb7b25ee04c2b0c8750b5d9de6d84b3",
+      "bytes": 109431
+    }
+  ]
+}
@@ -0,0 +1,233 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "scope": "Actual ordinary menu + OS IME cancel/confirm + Japanese display_name save + distinct-process ordinary load; not whole P24 acceptance",
+  "actual_pids": [
+    33760,
+    34817
+  ],
+  "normal_entry_observed": "SaveLoadMenu → 新しい名前で別スロット保存; native CUA coordinate clicks, no F8/controller entry",
+  "passive_recorder_has_no_dialog_entry_or_gameplay_injection": true,
+  "ime_preedit_event": {
+    "kind": "state",
+    "pid": 33760,
+    "ticks_msec": 88102,
+    "value": {
+      "content_scale_factor": 1.0,
+      "dialog_visible": true,
+      "focus_name": "",
+      "ime_selection": [
+        3,
+        0
+      ],
+      "ime_text": "テスト",
+      "label_focused": true,
+      "label_rect": [
+        8.0,
+        87.0,
+        504.0,
+        32.0
+      ],
+      "label_text": "",
+      "modal_input_blocked": true,
+      "save_path": "user://saves/manual_ui",
+      "screen_scale": 2.0,
+      "window_position": [
+        1664,
+        574
+      ],
+      "window_size": [
+        1280,
+        720
+      ]
+    }
+  },
+  "ime_cancel_event": {
+    "kind": "state",
+    "pid": 33760,
+    "ticks_msec": 128480,
+    "value": {
+      "content_scale_factor": 1.0,
+      "dialog_visible": true,
+      "focus_name": "",
+      "ime_selection": [
+        0,
+        0
+      ],
+      "ime_text": "",
+      "label_focused": true,
+      "label_rect": [
+        8.0,
+        87.0,
+        504.0,
+        32.0
+      ],
+      "label_text": "",
+      "modal_input_blocked": true,
+      "save_path": "user://saves/manual_ui",
+      "screen_scale": 2.0,
+      "window_position": [
+        1664,
+        574
+      ],
+      "window_size": [
+        1280,
+        720
+      ]
+    }
+  },
+  "ime_commit_event": {
+    "kind": "state",
+    "pid": 33760,
+    "ticks_msec": 140213,
+    "value": {
+      "content_scale_factor": 1.0,
+      "dialog_visible": true,
+      "focus_name": "",
+      "ime_selection": [
+        0,
+        0
+      ],
+      "ime_text": "",
+      "label_focused": true,
+      "label_rect": [
+        8.0,
+        87.0,
+        504.0,
+        32.0
+      ],
+      "label_text": "テスト",
+      "modal_input_blocked": true,
+      "save_path": "user://saves/manual_ui",
+      "screen_scale": 2.0,
+      "window_position": [
+        1664,
+        574
+      ],
+      "window_size": [
+        1280,
+        720
+      ]
+    }
+  },
+  "consumer_loaded_event": {
+    "kind": "state",
+    "pid": 34817,
+    "ticks_msec": 62760,
+    "value": {
+      "content_scale_factor": 1.0,
+      "dialog_visible": false,
+      "focus_name": "",
+      "ime_selection": [
+        0,
+        0
+      ],
+      "ime_text": "",
+      "label_focused": false,
+      "label_rect": [
+        8.0,
+        8.0,
+        460.0,
+        32.0
+      ],
+      "label_text": "",
+      "modal_input_blocked": false,
+      "save_path": "user://saves/manual_ui_5e9f8ca3662a2ddf42984ba1403675a7",
+      "screen_scale": 2.0,
+      "window_position": [
+        1664,
+        574
+      ],
+      "window_size": [
+        1280,
+        720
+      ]
+    }
+  },
+  "profile": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-393c3655f3e84483b9c24fd5d2955dd2-p24-02-os",
+  "save_path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-393c3655f3e84483b9c24fd5d2955dd2-p24-02-os/saves/manual_ui_5e9f8ca3662a2ddf42984ba1403675a7",
+  "saved_manifest": {
+    "absolute_minute": 360,
+    "checkpoint_reason": "manual",
+    "checksum_world": "99e450e0dc232d885539636cadd29338e7b3634c42d296cf8fea7c1f0767b9e0",
+    "content_pack_ids": [],
+    "created_at_real": "2026-10-13T06:35:55",
+    "day": 1,
+    "display_name": "テスト",
+    "enabled_filter_profile": "default",
+    "format_version": 1,
+    "game_version": "0.1.0",
+    "interface_selection": {
+      "guest_open": false,
+      "id": "",
+      "kind": "",
+      "product_open": false,
+      "product_tab": "purchase",
+      "staff_id": "",
+      "staff_open": false,
+      "version": 1
+    },
+    "save_id": "manual_ui_5e9f8ca3662a2ddf42984ba1403675a7",
+    "seed": 20260827,
+    "uncompressed_size": 80292,
+    "updated_at_real": "2026-10-13T06:35:55"
+  },
+  "evidence": [
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-r02/started.json",
+      "sha256": "d40a0252aa547b049d30cdc9a15774131438b2535f808ead128f0f86f7bf5954"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-r02/process-started.json",
+      "sha256": "5ba807e0ee65944815542648108322586f4730b074abebb0b117dd61071140b1"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-r02/ended.json",
+      "sha256": "0b188dcb42995ee09205f233116665cbf54f59a7d1e93f9d2aafc07779ae19a3"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-r02/events.jsonl",
+      "sha256": "efa3f0eca8bf0001edc89041d968a0fdf9f474ddd5a6803db2a138e4dfd53cc5"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-r02/passive_os.gd",
+      "sha256": "66e60f81f836fe648f9011660d0255f5c4b780bfdacc820829c90bb655022880"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-consumer-r02/started.json",
+      "sha256": "64ad63ae5b4339cd639f2d22fa076caa7d8d3f9501337fadadc1d4dcfcbbe2d0"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-consumer-r02/process-started.json",
+      "sha256": "f116952d77720858065576f41df7116f384801e6c27acb6cf339a329589627b0"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-consumer-r02/ended.json",
+      "sha256": "22d0ffd1ea18c06a46dc7aa977613385d3ae5f4a81dab9ed4650f9c10d044d68"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-ime-normal-consumer-r02/events.jsonl",
+      "sha256": "369eb5e182fcf5b21693380198df187654b508e288c08f6ecb0d3aa6af4ec0ca"
+    },
+    {
+      "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-393c3655f3e84483b9c24fd5d2955dd2-p24-02-os/saves/manual_ui_5e9f8ca3662a2ddf42984ba1403675a7/manifest.json",
+      "sha256": "e8537a6f6cba53683cca36794adc08f7c5958b78ced74fa06e499a3f8c123e4a"
+    },
+    {
+      "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-393c3655f3e84483b9c24fd5d2955dd2-p24-02-os/saves/manual_ui_5e9f8ca3662a2ddf42984ba1403675a7/world.bin",
+      "sha256": "0424074b51f327ffb3ce3dc8e92ccb2d9d04d657db6e1461cdb83541f1cc0bee"
+    }
+  ],
+  "whole_world_equality_proven": false,
+  "windows_same_distribution_proven": false,
+  "full_regression": false,
+  "independent_review": false,
+  "original_unit_accepted": false,
+  "local_affected_result": {
+    "path": "artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r06/local-ended.json",
+    "sha256": "a49a9229bc3bde09aebff72daafbfe99d159da9bf1dfc702b036640946654b64",
+    "suites": 3,
+    "checks": 167
+  },
+  "observed_consumer_menu": "保存・読込 → 保存スロットを選んで読込 (id2), list displayed1.テスト → 選んで読込; native CUA clicks",
+  "preexisting_manual_ui_preservation_OS_proven": false
+}
@@ -0,0 +1,191 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "scope": "One actual normal play placement/construction old-slot preservation and distinct-process restore; not whole P24/P02/all-world-content acceptance",
+  "actual_pids": [
+    39701,
+    40866
+  ],
+  "preexisting_old_slot_present": true,
+  "old_package_files": {
+    "journal.log": {
+      "bytes": 35,
+      "sha256": "1ba101ad14aee2eb7dc199ed3eefee28758914cf9342312f37ad0e8e2e9bc088"
+    },
+    "world.bin": {
+      "bytes": 12258,
+      "sha256": "da65a181c934bf8fe0a2969db5c074863b03cf2483f2b039e5dd588b809b80b3"
+    },
+    "manifest.json": {
+      "bytes": 650,
+      "sha256": "62d801bb42100ade11f3f4957bff85cac7fea573dcefea97faf3806c8a29c669"
+    },
+    "thumbnail.png": {
+      "bytes": 30080,
+      "sha256": "17b547b7e6bdb8fb987f6ba1b8feb15a800cc0f4eb717773afe067ae732ced55"
+    }
+  },
+  "all_old_package_files_byte_identical_after_save_and_consumer": true,
+  "saved_minute": 444,
+  "normal_actions": "Choose reception from opening guidance, place through map click, advance/pause until70percent, ordinary quick save to manual_ui, ordinary menu id3 named-slot save, exit producer, new process menu id2 list/select named slot/confirm read, ordinary resume/pause to complete reception",
+  "display_name": "preservation-r03",
+  "new_save_path": "user://saves/manual_ui_6789d75c74d103ad3912e8992a815680",
+  "full_restored_snapshot_equality": {
+    "code": "OK",
+    "disk_read_only_ok": true,
+    "latest_published_full_snapshot_semantic_equal": true,
+    "observed_full_snapshot_sha256": "b242cc87abd49bb80d74b7904cfa3492ef57b59e9acfe014e12b35387990da3d",
+    "observer_reads_only": true,
+    "ok": true,
+    "operation": "recovery",
+    "path": "user://saves/manual_ui_6789d75c74d103ad3912e8992a815680",
+    "restore_safety_report": {
+      "automatic_repairs_applied": false,
+      "content_filter": {
+        "current_before_load": {
+          "disabled_content_tags": [],
+          "filter_mode": "NONE",
+          "maximum_content_rating": "GENERAL"
+        },
+        "effective_profile": {
+          "disabled_content_tags": [],
+          "filter_mode": "NONE",
+          "maximum_content_rating": "GENERAL"
+        },
+        "saved_profile": {
+          "disabled_content_tags": [],
+          "filter_mode": "NONE",
+          "maximum_content_rating": "GENERAL"
+        },
+        "saved_profile_was_weaker": false,
+        "strict_profile_preserved": true
+      },
+      "forbidden_repair_categories": [
+        "synthesize_gold",
+        "delete_facilities",
+        "rewrite_ledger",
+        "guess_route_locks"
+      ],
+      "forbidden_repairs_applied": false,
+      "recovery_mode": true,
+      "repair_policy": "WHITELISTED_AUTHORITATIVE_ONLY",
+      "repairs": {
+        "orphan_event_locks": {
+          "automatic_repairs_applied": false,
+          "reason": "NONE",
+          "released_actor_ids": [],
+          "released_foreground_instance_id": ""
+        },
+        "orphan_tasks": {
+          "automatic_repairs_applied": false,
+          "release_failed_task_ids": [],
+          "released_reservation_ids": [],
+          "released_staff_ids": [],
+          "reopened_task_ids": []
+        }
+      },
+      "report_version": 1
+    },
+    "snapshot_index": 0,
+    "stored_full_snapshot_sha256": "b242cc87abd49bb80d74b7904cfa3492ef57b59e9acfe014e12b35387990da3d"
+  },
+  "equality_phase": "Runtime snapshot_published at end of restore before the ordinary SAVE_LOADED completion event; not post-event equivalence",
+  "byte_comparison_passed": true,
+  "observed_resume": "Clock444→531, reception70percent→completed, original cost retained gold4500/material42; native CUA observation",
+  "all_gameplay_sources_unchanged": true,
+  "default_player_guards_passed": true,
+  "whole_unit_accepted": false,
+  "windows_same_candidate": false,
+  "full_roster_repeated": false,
+  "evidence": [
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-r03/started.json",
+      "sha256": "bc05d5ef0ec62a3fc46e5b957f3724ef95c339078bc02eee04b3c42632bbe1ab",
+      "bytes": 726638
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-r03/process-started.json",
+      "sha256": "d6d981e157cd7e68a08e9e0133f81faac4113a48d03e74deb04d380cb03e41b1",
+      "bytes": 727114
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-r03/ended.json",
+      "sha256": "bf42d9666d4fe27051403f7d00a96f17abaa1e9b551db9d13c49ee8f7130d5c6",
+      "bytes": 727662
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-r03/events.jsonl",
+      "sha256": "104fb16b406dd123b77356ef98bd5a8f0bd595d660be0870c881cfbf30ce7302",
+      "bytes": 27456
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-r03/passive_os.gd",
+      "sha256": "6dceadb5abdf48fda403571f84b6a682a05e7f9ccd64391f2f51176cb5dd842b",
+      "bytes": 5454
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-r03/preexisting-slot-before.json",
+      "sha256": "aed601473efa522c41e5ca8890c11f1eeb2b06e786fb76cba1e96263934efe82",
+      "bytes": 1472
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-r03/preexisting-slot-after.json",
+      "sha256": "efb7170f0579bed92a42ead7c03b70dfc37df1e55dde05a96ae67666c6e38063",
+      "bytes": 762
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-consumer-r03/started.json",
+      "sha256": "135b779ce605d491bc6110235e9827c4091fefe8b86a49222655b3b713adcad7",
+      "bytes": 726638
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-consumer-r03/process-started.json",
+      "sha256": "e33badfd0b68ff97ce8459fed3a6a6d7275d938fbc1705c82cea94e7ded66314",
+      "bytes": 727123
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-consumer-r03/ended.json",
+      "sha256": "353cfa8e5ea703cb777bf0796b8a0f2f7fa55a5a36b69585414d5e7a16fae94c",
+      "bytes": 727662
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-consumer-r03/events.jsonl",
+      "sha256": "2f93c17152ed41dbbbd7b70b79383591a02ef0f9939d03cf340665ed4ee70ef7",
+      "bytes": 25730
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-consumer-r03/passive_os.gd",
+      "sha256": "6dceadb5abdf48fda403571f84b6a682a05e7f9ccd64391f2f51176cb5dd842b",
+      "bytes": 5454
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-consumer-r03/snapshot-000.bin",
+      "sha256": "b242cc87abd49bb80d74b7904cfa3492ef57b59e9acfe014e12b35387990da3d",
+      "bytes": 118528
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-native-os-preservation-consumer-r03/loaded-stored-snapshot.bin",
+      "sha256": "b242cc87abd49bb80d74b7904cfa3492ef57b59e9acfe014e12b35387990da3d",
+      "bytes": 118528
+    },
+    {
+      "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-41ed37cd3b6c4de8908b4bba8fe20724-p24-02-os/saves/manual_ui/manifest.json",
+      "sha256": "62d801bb42100ade11f3f4957bff85cac7fea573dcefea97faf3806c8a29c669",
+      "bytes": 650
+    },
+    {
+      "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-41ed37cd3b6c4de8908b4bba8fe20724-p24-02-os/saves/manual_ui/world.bin",
+      "sha256": "da65a181c934bf8fe0a2969db5c074863b03cf2483f2b039e5dd588b809b80b3",
+      "bytes": 12258
+    },
+    {
+      "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-41ed37cd3b6c4de8908b4bba8fe20724-p24-02-os/saves/manual_ui_6789d75c74d103ad3912e8992a815680/manifest.json",
+      "sha256": "cd450b442c37d497735888f6b96076ba482dca72a420aed1cf6568eb3723824b",
+      "bytes": 687
+    },
+    {
+      "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-41ed37cd3b6c4de8908b4bba8fe20724-p24-02-os/saves/manual_ui_6789d75c74d103ad3912e8992a815680/world.bin",
+      "sha256": "a0eb8af6fbb6abcdaea0375b4298164013229c3ba187a9d4c1e54d37ecb75202",
+      "bytes": 12466
+    }
+  ]
+}
@@ -0,0 +1,13 @@
+{
+  "source": "Direct human reply to question call_b952d3898d2b4870bf6f46ec5000086d item0",
+  "answer": "P24-02の追加1回を許可する",
+  "task": "P24-02",
+  "project": "the-tree-p24-02-operations",
+  "scope": "Only this task max_repair_attempts2→3; retain repairs2; add ordinary Japanese save-label entry preserving quick save, random-owned paths and old saves. No RP24/P18/cost/rights/global cap authorization.",
+  "previous_cap": 2,
+  "new_cap": 3,
+  "repairs": 2,
+  "state": "submitted",
+  "candidate": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+  "global_policy_unchanged": true
+}
@@ -0,0 +1,132 @@
+extends SceneTree
+var main: Control
+var observer: Node
+func _initialize() -> void:
+	call_deferred("_start")
+func _start() -> void:
+	var scene: PackedScene = load("res://scenes/main/main.tscn")
+	main = scene.instantiate()
+	root.add_child(main)
+	observer = PassiveRecorder.new()
+	observer.main = main
+	observer.out_dir = OS.get_environment("P24_OS_OUTPUT")
+	root.add_child(observer)
+	root.title = "The Tree P24-02 OS candidate 9641ed5"
+
+class PassiveRecorder extends Node:
+	var main: Control
+	var out_dir: String
+	var log: FileAccess
+	var previous: Dictionary = {}
+	var elapsed := 0.0
+	var rows := 0
+	var runtime: Node
+	var snapshot_count := 0
+	var ui_count := 0
+	var frame_count := 0
+	var latest_restore_snapshot: Dictionary = {}
+	func _ready() -> void:
+		log = FileAccess.open(out_dir.path_join("events.jsonl"), FileAccess.WRITE)
+		runtime = main.get_node("/root/SimulationRuntime")
+		var menu: MenuButton = main.find_child("SaveLoadMenu", true, false)
+		menu.get_popup().id_pressed.connect(_on_menu_item)
+		runtime.snapshot_published.connect(_on_snapshot_published)
+		runtime.save_operation_completed.connect(_on_save_completed)
+		emit_record("started", {"pid": OS.get_process_id(), "platform": OS.get_name(), "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37", "source": "passive_root_normal_menu_observation_not_whole_acceptance"})
+	func _on_menu_item(id: int) -> void:
+		emit_record("actual_menu_item", {"id": id, "source": "production PopupMenu id_pressed; native input only"})
+		_capture_ui("menu_%d" % id)
+	func _capture_ui(reason: String) -> void:
+		if ui_count >= 40:
+			return
+		var snapshot: Dictionary = runtime.create_snapshot()
+		var data := var_to_bytes(snapshot)
+		var name := "ui-snapshot-%03d.bin" % ui_count
+		var file := FileAccess.open(out_dir.path_join(name), FileAccess.WRITE)
+		file.store_buffer(data)
+		file.close()
+		var view: Node = main.get("world_preview")
+		var definition: Variant = view.get("build_definition")
+		emit_record("ui_model_capture", {"reason": reason, "filename": name, "sha256": _sha(data), "build_definition_id": str(definition.definition_id) if definition != null else "", "palette_open": bool(main.get("_build_palette_open")), "modal_blocked": bool(view.get("modal_input_blocked")), "save_path": str(main.get("manual_save_path"))})
+		ui_count += 1
+		_capture_frame.call_deferred(reason)
+	func _capture_frame(reason: String) -> void:
+		if frame_count >= 40:
+			return
+		await RenderingServer.frame_post_draw
+		var dialog: Window = main.get("manual_save_slots_dialog")
+		var target: Viewport = dialog if dialog != null and dialog.visible else get_tree().root
+		var img := target.get_texture().get_image()
+		if img == null or img.is_empty():
+			emit_record("frame_capture_failed", {"reason": reason})
+			return
+		var name := "frame-%03d.png" % frame_count
+		var error := img.save_png(out_dir.path_join(name))
+		emit_record("frame_capture", {"reason": reason, "filename": name, "error": error, "sha256": _sha(FileAccess.get_file_as_bytes(out_dir.path_join(name))) if error == OK else "", "size": [img.get_width(), img.get_height()], "target": "dialog" if target == dialog else "root"})
+		frame_count += 1
+	func _sha(data: PackedByteArray) -> String:
+		var context := HashingContext.new()
+		context.start(HashingContext.HASH_SHA256)
+		context.update(data)
+		return context.finish().hex_encode()
+	func _on_snapshot_published(_view: Dictionary, _digest: String) -> void:
+		if snapshot_count >= 200:
+			return
+		latest_restore_snapshot = runtime.create_snapshot()
+		var data := var_to_bytes(latest_restore_snapshot)
+		var filename := "snapshot-%03d.bin" % snapshot_count
+		var file := FileAccess.open(out_dir.path_join(filename), FileAccess.WRITE)
+		file.store_buffer(data)
+		file.close()
+		emit_record("snapshot_published_capture", {"filename": filename, "sha256": _sha(data), "absolute_minute": latest_restore_snapshot[&"clock"][&"absolute_minute"], "observer_reads_only": true})
+		snapshot_count += 1
+	func _on_save_completed(result: Dictionary) -> void:
+		var path: String = str(result.get(&"save_path", ""))
+		var operation: String = str(result.get(&"operation", ""))
+		var receipt := {"path": path, "operation": operation, "ok": bool(result.get(&"ok", false)), "code": str(result.get(&"code", "")), "observer_reads_only": true}
+		if bool(result.get(&"ok", false)) and operation in ["load", "recovery", "recovery_candidate"]:
+			var disk := SaveService.inspect_snapshot(path)
+			var stored: Dictionary = disk.get(&"snapshot", {})
+			var observed := var_to_bytes(latest_restore_snapshot)
+			var expected := var_to_bytes(stored)
+			receipt["disk_read_only_ok"] = bool(disk.get(&"ok", false))
+			receipt["latest_published_full_snapshot_semantic_equal"] = latest_restore_snapshot == stored
+			receipt["observed_full_snapshot_sha256"] = _sha(observed)
+			receipt["stored_full_snapshot_sha256"] = _sha(expected)
+			receipt["snapshot_index"] = snapshot_count - 1
+			var file := FileAccess.open(out_dir.path_join("loaded-stored-snapshot.bin"), FileAccess.WRITE)
+			file.store_buffer(expected)
+			file.close()
+			receipt["restore_safety_report"] = result.get(&"restore_safety_report", {})
+		emit_record("save_operation_completed", receipt)
+	func emit_record(kind: String, value: Dictionary) -> void:
+		if rows >= 10000 or log == null:
+			return
+		var record := {"kind": kind, "pid": OS.get_process_id(), "ticks_msec": Time.get_ticks_msec(), "value": value}
+		log.store_line(JSON.stringify(record))
+		log.flush()
+		rows += 1
+	func _input(event: InputEvent) -> void:
+		if event is InputEventKey:
+			emit_record("key", {"keycode": event.keycode, "physical_keycode": event.physical_keycode, "unicode": event.unicode, "pressed": event.pressed, "echo": event.echo, "shift": event.shift_pressed, "ctrl": event.ctrl_pressed, "alt": event.alt_pressed, "meta": event.meta_pressed})
+		elif event is InputEventMouseButton:
+			emit_record("mouse_button", {"button": event.button_index, "pressed": event.pressed, "position": [event.position.x, event.position.y]})
+	func _process(delta: float) -> void:
+		elapsed += delta
+		if elapsed < 0.1:
+			return
+		elapsed = 0.0
+		var dialog: Variant = main.get("manual_save_slots_dialog")
+		var label: Variant = dialog.get("_label_edit") if dialog != null else null
+		var focus: Control = get_viewport().gui_get_focus_owner()
+		var window: Window = get_tree().root
+		var state := {"ime_text": DisplayServer.ime_get_text(), "ime_selection": [DisplayServer.ime_get_selection().x, DisplayServer.ime_get_selection().y], "label_text": String(label.text) if label != null else "", "label_rect": [label.get_global_rect().position.x, label.get_global_rect().position.y, label.size.x, label.size.y] if label != null else [], "label_focused": label.has_focus() if label != null else false, "dialog_visible": dialog.visible if dialog != null else false, "window_size": [window.size.x, window.size.y], "window_position": [window.position.x, window.position.y], "content_scale_factor": window.content_scale_factor, "screen_scale": DisplayServer.screen_get_scale(window.current_screen), "focus_name": String(focus.name) if focus != null else "", "save_path": String(main.get("manual_save_path")), "modal_input_blocked": bool(main.get("world_preview").get("modal_input_blocked"))}
+		if state != previous:
+			emit_record("state", state)
+			if state.get("dialog_visible") != previous.get("dialog_visible"):
+				_capture_ui("dialog_visibility_%s" % str(state.get("dialog_visible")))
+			previous = state.duplicate(true)
+	func _exit_tree() -> void:
+		if log != null:
+			emit_record("observer_exit", {"rows": rows})
+			log.close()
@@ -0,0 +1,138 @@
+extends SceneTree
+var main: Control
+var observer: Node
+func _initialize() -> void:
+	call_deferred("_start")
+func _start() -> void:
+	var scene: PackedScene = load("res://scenes/main/main.tscn")
+	main = scene.instantiate()
+	root.add_child(main)
+	observer = PassiveRecorder.new()
+	observer.main = main
+	observer.out_dir = OS.get_environment("P24_OS_OUTPUT")
+	root.add_child(observer)
+	root.title = "The Tree P24-02 OS candidate 9641ed5"
+
+class PassiveRecorder extends Node:
+	var main: Control
+	var out_dir: String
+	var log: FileAccess
+	var previous: Dictionary = {}
+	var elapsed := 0.0
+	var rows := 0
+	var runtime: Node
+	var snapshot_count := 0
+	var ui_count := 0
+	var frame_count := 0
+	var latest_restore_snapshot: Dictionary = {}
+	func _ready() -> void:
+		log = FileAccess.open(out_dir.path_join("events.jsonl"), FileAccess.WRITE)
+		runtime = main.get_node("/root/SimulationRuntime")
+		var menu: MenuButton = main.find_child("SaveLoadMenu", true, false)
+		menu.get_popup().id_pressed.connect(_on_menu_item)
+		runtime.snapshot_published.connect(_on_snapshot_published)
+		runtime.save_operation_completed.connect(_on_save_completed)
+		emit_record("started", {"pid": OS.get_process_id(), "platform": OS.get_name(), "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37", "source": "passive_root_normal_menu_observation_not_whole_acceptance"})
+	func _on_menu_item(id: int) -> void:
+		emit_record("actual_menu_item", {"id": id, "source": "production PopupMenu id_pressed; native input only"})
+		_capture_ui("menu_%d" % id)
+	func _capture_ui(reason: String) -> void:
+		if ui_count >= 40:
+			return
+		var snapshot: Dictionary = runtime.create_snapshot()
+		var data := var_to_bytes(snapshot)
+		var name := "ui-snapshot-%03d.bin" % ui_count
+		var file := FileAccess.open(out_dir.path_join(name), FileAccess.WRITE)
+		file.store_buffer(data)
+		file.close()
+		var json_name := "ui-snapshot-%03d.json" % ui_count
+		var json_file := FileAccess.open(out_dir.path_join(json_name), FileAccess.WRITE)
+		json_file.store_string(JSON.stringify(snapshot))
+		json_file.close()
+		var view: Node = main.get("world_preview")
+		var definition: Variant = view.get("build_definition")
+		emit_record("ui_model_capture", {"reason": reason, "filename": name, "sha256": _sha(data), "json_filename": json_name, "json_sha256": _sha(FileAccess.get_file_as_bytes(out_dir.path_join(json_name))), "status_text": str(main.get("build_status_label").text), "build_definition_id": str(definition.id) if definition != null else "", "palette_open": bool(main.get("_build_palette_open")), "modal_blocked": bool(view.get("modal_input_blocked")), "save_path": str(main.get("manual_save_path"))})
+		ui_count += 1
+		_capture_frame.call_deferred(reason)
+	func _capture_frame(reason: String) -> void:
+		if frame_count >= 40:
+			return
+		await RenderingServer.frame_post_draw
+		var dialog: Window = main.get("manual_save_slots_dialog")
+		var target: Viewport = dialog if dialog != null and dialog.visible else get_tree().root
+		var img := target.get_texture().get_image()
+		if img == null or img.is_empty():
+			emit_record("frame_capture_failed", {"reason": reason})
+			return
+		var name := "frame-%03d.png" % frame_count
+		var error := img.save_png(out_dir.path_join(name))
+		emit_record("frame_capture", {"reason": reason, "filename": name, "error": error, "sha256": _sha(FileAccess.get_file_as_bytes(out_dir.path_join(name))) if error == OK else "", "size": [img.get_width(), img.get_height()], "target": "dialog" if target == dialog else "root"})
+		frame_count += 1
+	func _sha(data: PackedByteArray) -> String:
+		var context := HashingContext.new()
+		context.start(HashingContext.HASH_SHA256)
+		context.update(data)
+		return context.finish().hex_encode()
+	func _on_snapshot_published(_view: Dictionary, _digest: String) -> void:
+		if snapshot_count >= 200:
+			return
+		latest_restore_snapshot = runtime.create_snapshot()
+		var data := var_to_bytes(latest_restore_snapshot)
+		var filename := "snapshot-%03d.bin" % snapshot_count
+		var file := FileAccess.open(out_dir.path_join(filename), FileAccess.WRITE)
+		file.store_buffer(data)
+		file.close()
+		emit_record("snapshot_published_capture", {"filename": filename, "sha256": _sha(data), "absolute_minute": latest_restore_snapshot[&"clock"][&"absolute_minute"], "observer_reads_only": true})
+		snapshot_count += 1
+	func _on_save_completed(result: Dictionary) -> void:
+		var path: String = str(result.get(&"save_path", ""))
+		var operation: String = str(result.get(&"operation", ""))
+		var receipt := {"path": path, "operation": operation, "ok": bool(result.get(&"ok", false)), "code": str(result.get(&"code", "")), "observer_reads_only": true}
+		if bool(result.get(&"ok", false)) and operation in ["load", "recovery", "recovery_candidate"]:
+			var disk := SaveService.inspect_snapshot(path)
+			var stored: Dictionary = disk.get(&"snapshot", {})
+			var observed := var_to_bytes(latest_restore_snapshot)
+			var expected := var_to_bytes(stored)
+			receipt["disk_read_only_ok"] = bool(disk.get(&"ok", false))
+			receipt["latest_published_full_snapshot_semantic_equal"] = latest_restore_snapshot == stored
+			receipt["observed_full_snapshot_sha256"] = _sha(observed)
+			receipt["stored_full_snapshot_sha256"] = _sha(expected)
+			receipt["snapshot_index"] = snapshot_count - 1
+			var file := FileAccess.open(out_dir.path_join("loaded-stored-snapshot.bin"), FileAccess.WRITE)
+			file.store_buffer(expected)
+			file.close()
+			receipt["restore_safety_report"] = result.get(&"restore_safety_report", {})
+		emit_record("save_operation_completed", receipt)
+	func emit_record(kind: String, value: Dictionary) -> void:
+		if rows >= 10000 or log == null:
+			return
+		var record := {"kind": kind, "pid": OS.get_process_id(), "ticks_msec": Time.get_ticks_msec(), "value": value}
+		log.store_line(JSON.stringify(record))
+		log.flush()
+		rows += 1
+	func _input(event: InputEvent) -> void:
+		if event is InputEventKey:
+			emit_record("key", {"keycode": event.keycode, "physical_keycode": event.physical_keycode, "unicode": event.unicode, "pressed": event.pressed, "echo": event.echo, "shift": event.shift_pressed, "ctrl": event.ctrl_pressed, "alt": event.alt_pressed, "meta": event.meta_pressed})
+		elif event is InputEventMouseButton:
+			if event.pressed:
+				_capture_ui.call_deferred("native_mouse_after_dispatch")
+			emit_record("mouse_button", {"button": event.button_index, "pressed": event.pressed, "position": [event.position.x, event.position.y]})
+	func _process(delta: float) -> void:
+		elapsed += delta
+		if elapsed < 0.1:
+			return
+		elapsed = 0.0
+		var dialog: Variant = main.get("manual_save_slots_dialog")
+		var label: Variant = dialog.get("_label_edit") if dialog != null else null
+		var focus: Control = get_viewport().gui_get_focus_owner()
+		var window: Window = get_tree().root
+		var state := {"ime_text": DisplayServer.ime_get_text(), "ime_selection": [DisplayServer.ime_get_selection().x, DisplayServer.ime_get_selection().y], "label_text": String(label.text) if label != null else "", "label_rect": [label.get_global_rect().position.x, label.get_global_rect().position.y, label.size.x, label.size.y] if label != null else [], "label_focused": label.has_focus() if label != null else false, "dialog_visible": dialog.visible if dialog != null else false, "window_size": [window.size.x, window.size.y], "window_position": [window.position.x, window.position.y], "content_scale_factor": window.content_scale_factor, "screen_scale": DisplayServer.screen_get_scale(window.current_screen), "focus_name": String(focus.name) if focus != null else "", "save_path": String(main.get("manual_save_path")), "modal_input_blocked": bool(main.get("world_preview").get("modal_input_blocked"))}
+		if state != previous:
+			emit_record("state", state)
+			if state.get("dialog_visible") != previous.get("dialog_visible"):
+				_capture_ui("dialog_visibility_%s" % str(state.get("dialog_visible")))
+			previous = state.duplicate(true)
+	func _exit_tree() -> void:
+		if log != null:
+			emit_record("observer_exit", {"rows": rows})
+			log.close()
@@ -0,0 +1,54 @@
+extends SceneTree
+var main: Control
+var observer: Node
+func _initialize() -> void:
+	call_deferred("_start")
+func _start() -> void:
+	var scene: PackedScene = load("res://scenes/main/main.tscn")
+	main = scene.instantiate()
+	root.add_child(main)
+	observer = PassiveRecorder.new()
+	observer.main = main
+	observer.out_dir = OS.get_environment("P24_OS_OUTPUT")
+	root.add_child(observer)
+	root.title = "The Tree P24-02 OS candidate 9641ed5"
+
+class PassiveRecorder extends Node:
+	var main: Control
+	var out_dir: String
+	var log: FileAccess
+	var previous: Dictionary = {}
+	var elapsed := 0.0
+	var rows := 0
+	func _ready() -> void:
+		log = FileAccess.open(out_dir.path_join("events.jsonl"), FileAccess.WRITE)
+		emit_record("started", {"pid": OS.get_process_id(), "platform": OS.get_name(), "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37", "source": "passive_root_normal_menu_observation_not_whole_acceptance"})
+	func emit_record(kind: String, value: Dictionary) -> void:
+		if rows >= 10000 or log == null:
+			return
+		var record := {"kind": kind, "pid": OS.get_process_id(), "ticks_msec": Time.get_ticks_msec(), "value": value}
+		log.store_line(JSON.stringify(record))
+		log.flush()
+		rows += 1
+	func _input(event: InputEvent) -> void:
+		if event is InputEventKey:
+			emit_record("key", {"keycode": event.keycode, "physical_keycode": event.physical_keycode, "unicode": event.unicode, "pressed": event.pressed, "echo": event.echo, "shift": event.shift_pressed, "ctrl": event.ctrl_pressed, "alt": event.alt_pressed, "meta": event.meta_pressed})
+		elif event is InputEventMouseButton:
+			emit_record("mouse_button", {"button": event.button_index, "pressed": event.pressed, "position": [event.position.x, event.position.y]})
+	func _process(delta: float) -> void:
+		elapsed += delta
+		if elapsed < 0.1:
+			return
+		elapsed = 0.0
+		var dialog: Variant = main.get("manual_save_slots_dialog")
+		var label: Variant = dialog.get("_label_edit") if dialog != null else null
+		var focus: Control = get_viewport().gui_get_focus_owner()
+		var window: Window = get_tree().root
+		var state := {"ime_text": DisplayServer.ime_get_text(), "ime_selection": [DisplayServer.ime_get_selection().x, DisplayServer.ime_get_selection().y], "label_text": String(label.text) if label != null else "", "label_rect": [label.get_global_rect().position.x, label.get_global_rect().position.y, label.size.x, label.size.y] if label != null else [], "label_focused": label.has_focus() if label != null else false, "dialog_visible": dialog.visible if dialog != null else false, "window_size": [window.size.x, window.size.y], "window_position": [window.position.x, window.position.y], "content_scale_factor": window.content_scale_factor, "screen_scale": DisplayServer.screen_get_scale(window.current_screen), "focus_name": String(focus.name) if focus != null else "", "save_path": String(main.get("manual_save_path")), "modal_input_blocked": bool(main.get("world_preview").get("modal_input_blocked"))}
+		if state != previous:
+			emit_record("state", state)
+			previous = state.duplicate(true)
+	func _exit_tree() -> void:
+		if log != null:
+			emit_record("observer_exit", {"rows": rows})
+			log.close()
@@ -0,0 +1,95 @@
+extends SceneTree
+var main: Control
+var observer: Node
+func _initialize() -> void:
+	call_deferred("_start")
+func _start() -> void:
+	var scene: PackedScene = load("res://scenes/main/main.tscn")
+	main = scene.instantiate()
+	root.add_child(main)
+	observer = PassiveRecorder.new()
+	observer.main = main
+	observer.out_dir = OS.get_environment("P24_OS_OUTPUT")
+	root.add_child(observer)
+	root.title = "The Tree P24-02 OS candidate 9641ed5"
+
+class PassiveRecorder extends Node:
+	var main: Control
+	var out_dir: String
+	var log: FileAccess
+	var previous: Dictionary = {}
+	var elapsed := 0.0
+	var rows := 0
+	var runtime: Node
+	var snapshot_count := 0
+	var latest_restore_snapshot: Dictionary = {}
+	func _ready() -> void:
+		log = FileAccess.open(out_dir.path_join("events.jsonl"), FileAccess.WRITE)
+		runtime = main.get_node("/root/SimulationRuntime")
+		runtime.snapshot_published.connect(_on_snapshot_published)
+		runtime.save_operation_completed.connect(_on_save_completed)
+		emit_record("started", {"pid": OS.get_process_id(), "platform": OS.get_name(), "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37", "source": "passive_root_normal_menu_observation_not_whole_acceptance"})
+	func _sha(data: PackedByteArray) -> String:
+		var context := HashingContext.new()
+		context.start(HashingContext.HASH_SHA256)
+		context.update(data)
+		return context.finish().hex_encode()
+	func _on_snapshot_published(_view: Dictionary, _digest: String) -> void:
+		if snapshot_count >= 200:
+			return
+		latest_restore_snapshot = runtime.create_snapshot()
+		var data := var_to_bytes(latest_restore_snapshot)
+		var filename := "snapshot-%03d.bin" % snapshot_count
+		var file := FileAccess.open(out_dir.path_join(filename), FileAccess.WRITE)
+		file.store_buffer(data)
+		file.close()
+		emit_record("snapshot_published_capture", {"filename": filename, "sha256": _sha(data), "absolute_minute": latest_restore_snapshot[&"clock"][&"absolute_minute"], "observer_reads_only": true})
+		snapshot_count += 1
+	func _on_save_completed(result: Dictionary) -> void:
+		var path: String = str(result.get(&"save_path", ""))
+		var operation: String = str(result.get(&"operation", ""))
+		var receipt := {"path": path, "operation": operation, "ok": bool(result.get(&"ok", false)), "code": str(result.get(&"code", "")), "observer_reads_only": true}
+		if bool(result.get(&"ok", false)) and operation in ["load", "recovery", "recovery_candidate"]:
+			var disk := SaveService.inspect_snapshot(path)
+			var stored: Dictionary = disk.get(&"snapshot", {})
+			var observed := var_to_bytes(latest_restore_snapshot)
+			var expected := var_to_bytes(stored)
+			receipt["disk_read_only_ok"] = bool(disk.get(&"ok", false))
+			receipt["latest_published_full_snapshot_semantic_equal"] = latest_restore_snapshot == stored
+			receipt["observed_full_snapshot_sha256"] = _sha(observed)
+			receipt["stored_full_snapshot_sha256"] = _sha(expected)
+			receipt["snapshot_index"] = snapshot_count - 1
+			var file := FileAccess.open(out_dir.path_join("loaded-stored-snapshot.bin"), FileAccess.WRITE)
+			file.store_buffer(expected)
+			file.close()
+			receipt["restore_safety_report"] = result.get(&"restore_safety_report", {})
+		emit_record("save_operation_completed", receipt)
+	func emit_record(kind: String, value: Dictionary) -> void:
+		if rows >= 10000 or log == null:
+			return
+		var record := {"kind": kind, "pid": OS.get_process_id(), "ticks_msec": Time.get_ticks_msec(), "value": value}
+		log.store_line(JSON.stringify(record))
+		log.flush()
+		rows += 1
+	func _input(event: InputEvent) -> void:
+		if event is InputEventKey:
+			emit_record("key", {"keycode": event.keycode, "physical_keycode": event.physical_keycode, "unicode": event.unicode, "pressed": event.pressed, "echo": event.echo, "shift": event.shift_pressed, "ctrl": event.ctrl_pressed, "alt": event.alt_pressed, "meta": event.meta_pressed})
+		elif event is InputEventMouseButton:
+			emit_record("mouse_button", {"button": event.button_index, "pressed": event.pressed, "position": [event.position.x, event.position.y]})
+	func _process(delta: float) -> void:
+		elapsed += delta
+		if elapsed < 0.1:
+			return
+		elapsed = 0.0
+		var dialog: Variant = main.get("manual_save_slots_dialog")
+		var label: Variant = dialog.get("_label_edit") if dialog != null else null
+		var focus: Control = get_viewport().gui_get_focus_owner()
+		var window: Window = get_tree().root
+		var state := {"ime_text": DisplayServer.ime_get_text(), "ime_selection": [DisplayServer.ime_get_selection().x, DisplayServer.ime_get_selection().y], "label_text": String(label.text) if label != null else "", "label_rect": [label.get_global_rect().position.x, label.get_global_rect().position.y, label.size.x, label.size.y] if label != null else [], "label_focused": label.has_focus() if label != null else false, "dialog_visible": dialog.visible if dialog != null else false, "window_size": [window.size.x, window.size.y], "window_position": [window.position.x, window.position.y], "content_scale_factor": window.content_scale_factor, "screen_scale": DisplayServer.screen_get_scale(window.current_screen), "focus_name": String(focus.name) if focus != null else "", "save_path": String(main.get("manual_save_path")), "modal_input_blocked": bool(main.get("world_preview").get("modal_input_blocked"))}
+		if state != previous:
+			emit_record("state", state)
+			previous = state.duplicate(true)
+	func _exit_tree() -> void:
+		if log != null:
+			emit_record("observer_exit", {"rows": rows})
+			log.close()
@@ -0,0 +1,23 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "review_model_argv_verified": "claude-opus-5-5",
+  "limited_supported": [
+    "All4 preexisting manual_ui files byte-content preserved across named-slot save",
+    "Complete restored snapshot bytes equal stored before SAVE_LOADED completion event",
+    "Distinct producer/consumer and actual exit/source/default-player/cleanup guard checks"
+  ],
+  "still_unaccepted": [
+    "All P24 unit conditions",
+    "Menu item ids and pointer/resume as separately pinned formal UI evidence",
+    "Post-load event equivalence and all-content save migration",
+    "Same Windows release device",
+    "Required final full roster, whole-unit independent review, integration/final"
+  ],
+  "review_text_correction": "Reviewer said no engine process could write artifacts dir. This is inaccurate: the Root-launched observer deliberately writes events and snapshot artifacts inside its OUT directory. No filesystem/security isolation of this native observer is claimed. This correction does not assert an acceptance or change any hashes.",
+  "proof_sha256": "024a2cb0aba292037f281a3eea43b5eac95d773fa0517e77b32b08ef5084e7c1",
+  "supplement_sha256": "a7aa38caec8b6968c9bde7ddbcd359ea1ca4cc4ec6108e6e02ec04796dbce1f9",
+  "review_sha256": "9baa6ec7f457f6532f5f9c0fc32f9fdc2f8440918ca1944f092fca087395987b",
+  "new_formally_completed_delivery_units": 0,
+  "new_product_changes": 0,
+  "repeated_full_regression": 0
+}
@@ -0,0 +1,11 @@
+{
+  "task": "P24-02",
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "previous_candidate": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+  "repairs": 3,
+  "maximum": 3,
+  "GUI_worker_observed_model": "Claude Opus 5.5 Medium",
+  "normal_Runner_submit": true,
+  "source_delta": "5 insertions/3 deletions main.gd; coordinator instructions retained in allowed docs",
+  "original_unit_accepted": false
+}
@@ -0,0 +1,33 @@
+{
+  "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+  "source_files": 1313,
+  "local_suites": 3,
+  "local_checks": 167,
+  "parse_passed": true,
+  "passed": true,
+  "actual_pids": [
+    33175,
+    33269,
+    33318,
+    33335,
+    33360
+  ],
+  "guard_errors": [],
+  "cleanup_errors": [],
+  "evidence": [
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r06/local-ended.json",
+      "sha256_at_integration": "a49a9229bc3bde09aebff72daafbfe99d159da9bf1dfc702b036640946654b64",
+      "scope": "exact candidate local affected execution",
+      "current_game_acceptance_inferred": false
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r06/runner-input.json",
+      "sha256_at_integration": "577442ab27679b03c4c25a8b0d362aed871599d7c37675aaafd41fa80579dd70",
+      "scope": "whole source map and candidate environment",
+      "current_game_acceptance_inferred": false
+    }
+  ],
+  "whole_unit_accepted": false,
+  "full_regression": false
+}
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-controls-r04';stage=A/'p24-02-local-native-preflight-r06/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'affected local3 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='9641ed52def2ff8e5b0222449a4a83a1191e1d37','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+nonce=uuid.uuid4().hex;profile_name='TheTree-PCK-tests-'+nonce+'-p24-02-os';profile=r.profile_path(profile_name);r.require(not profile.exists(),'fresh private profile');profile.mkdir()
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'9641ed52def2ff8e5b0222449a4a83a1191e1d37','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-controls-r05';stage=A/'p24-02-local-native-preflight-r06/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'affected local3 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='9641ed52def2ff8e5b0222449a4a83a1191e1d37','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+nonce=uuid.uuid4().hex;profile_name='TheTree-PCK-tests-'+nonce+'-p24-02-os';profile=r.profile_path(profile_name);r.require(not profile.exists(),'fresh private profile');profile.mkdir()
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'9641ed52def2ff8e5b0222449a4a83a1191e1d37','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-ime-normal-consumer-r02';stage=A/'p24-02-local-native-preflight-r06/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'affected local3 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='9641ed52def2ff8e5b0222449a4a83a1191e1d37','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+profile=Path('/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-393c3655f3e84483b9c24fd5d2955dd2-p24-02-os');profile_name=profile.name;r.require(profile.exists(),"actual producer owned profile exists")
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'9641ed52def2ff8e5b0222449a4a83a1191e1d37','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-ime-normal-r02';stage=A/'p24-02-local-native-preflight-r06/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'affected local3 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='9641ed52def2ff8e5b0222449a4a83a1191e1d37','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+nonce=uuid.uuid4().hex;profile_name='TheTree-PCK-tests-'+nonce+'-p24-02-os';profile=r.profile_path(profile_name);r.require(not profile.exists(),'fresh private profile');profile.mkdir()
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'9641ed52def2ff8e5b0222449a4a83a1191e1d37','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-preservation-consumer-r03';stage=A/'p24-02-local-native-preflight-r06/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'affected local3 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='9641ed52def2ff8e5b0222449a4a83a1191e1d37','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+profile=Path('/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-41ed37cd3b6c4de8908b4bba8fe20724-p24-02-os');profile_name=profile.name;r.require(profile.exists(),"actual producer owned profile exists")
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'9641ed52def2ff8e5b0222449a4a83a1191e1d37','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-preservation-r03';stage=A/'p24-02-local-native-preflight-r06/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'affected local3 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='9641ed52def2ff8e5b0222449a4a83a1191e1d37','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+nonce=uuid.uuid4().hex;profile_name='TheTree-PCK-tests-'+nonce+'-p24-02-os';profile=r.profile_path(profile_name);r.require(not profile.exists(),'fresh private profile');profile.mkdir()
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'9641ed52def2ff8e5b0222449a4a83a1191e1d37','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,15 @@
+{
+  "source_path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p23-02-normal-os-gui-representative-phase-diagnostic-r01/observations/save-operation-000003.json",
+  "logical_bytes": 12756383,
+  "sha256": "430ac9375ef72707667c1a5030f5f92fa9e8e3cf849a7f76db6ba928e99d5f52",
+  "before_blocks": 1576,
+  "temporary_blocks": 1576,
+  "before_flags": 32,
+  "temporary_flags": 32,
+  "mode_mtime_owner_size_sha_equal": true,
+  "compression_flag": true,
+  "supported_native_tool": "ditto --hfsCompression --noclone",
+  "replacement_applied": true,
+  "free_before": 434946048,
+  "free_after": 434929664
+}
@@ -27,12 +27,21 @@
      "action": "wait",
      "evidence": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/rp24-02-codex-model-decision-r01.json",
      "actual_codex_inference_confirmed": false
+    },
+    "latest_registered_task_selection": {
+      "task": "P18-01-CODE",
+      "phase": "collector-only repair2",
+      "model": "gpt-6-astra",
+      "decision_owner": "Claude Opus5.5",
+      "evidence": "docs/plans/original-completion-2026-10-02/execution/p18-01-contract-r01/opus-collector-repair-decision-r02.json",
+      "worker_state": "implementing",
+      "unit_acceptance": false
    }
  },
  "agy": "unchanged",
  "existing_project_override_controller": {
    "path": "/private/tmp/the-tree-owner-model-cli.py",
-    "sha256": "bca36b7129b80404ca2b719749e3795097f5c3b725fd9d1deba94bfd61bf3709",
+    "sha256": "e342904f012b14ad2856bd10bee03a227a151da88f6a9c9c891c564cfa253f1e",
    "persistent_path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/owner_model_cli.py"
  },
  "codex_source": "Direct human instruction: codexは6.1 solを使用して。必要であればastra。判断はclaude opus 5.5が行なう"
@@ -205,8 +205,8 @@
  "remaining_delivery_units": 88,
  "current_package_state_counts": {
    "completed": 1,
-    "in_progress": 26,
-    "planned": 3
+    "in_progress": 27,
+    "planned": 2
  },
  "initial_snapshot_checked": false,
  "historical_source_bytes_compared": false,
@@ -223,7 +223,7 @@
    "ASSETS_PLATFORM_AUDIT.md": "a3a4b8ca0fb39a9abf88692285d26aa879815e092352ba304ef2758e71da50bd",
    "ATOMIC_REGISTER.md": "6070143b85b7c3b9b73d7c9768d88d2dae4d20407ad54a563cb6ffd74f2373ae",
    "ATOMIC_SEMANTIC_REVIEW.md": "c156b1fb57c2b4a900f27a19049510f3e9616e723d5edb3417f50d733de5be48",
-    "IMPLEMENTATION_PLAN.md": "00004ff16c10cda0cc29429770afc90f66e40672e058939f8cac1cc451c32a46",
+    "IMPLEMENTATION_PLAN.md": "2f1a933d1f47966b66945efc2d44747d7b9ea63cd223271fad0fad010f080ba3",
    "IMPORT_UNICODE_AUDIT.md": "88b2382bfbb3411fece8be7e6004ba21d8bf6a47e9d1f3cf573ea6638f79c12f",
    "P09_VALUE_CONTRACTS.md": "c5abdc4543e54033b1fcfd0943cba266f664d8c10968965fd36ade40da488a25",
    "PERFORMANCE_AUDIT.md": "c75e806acf825fc4a61f773a2cce7e71be335a1e25dbb15d98091097e8dc47c1",
@@ -244,7 +244,7 @@
    "facility_value_contracts_validation.json": "bf490a9ca585c48fc318e76c4a069ef244827d828d46e6415399f7710590dd16",
    "performance_audit.json": "0b630b15a392c3e0366f1362bfe4ddacb968f915f54549f82e4d6fa315384762",
    "progress_contract.json": "ccbdfce8c8365d5c13f59531955708834cce45acd0e136561c95295dfdb5df77",
-    "progress_snapshot.json": "ad068fcb7878184f0a7d0a2d941a5f3e7ebbd9e5c90c942a10b15e2b1eec4896",
+    "progress_snapshot.json": "5cbc33775c8782aa0208958e4516771f52fccbd172ad28272c92079fa788087e",
    "progress_validator_guard_checks.json": "72ee513fcf1cad85c24bfd0a4b472f425f6acf117928ece0f6b41e29018da627",
    "progress_validator_guard_checks.r01.json": "14c26adffa5a1938241db4912e50ea54b660641ee6fee2e412d467dce14d0519",
    "requirement_coverage.json": "8b5788b22ae8f49ea7e5cf048a5f0d82b54f6f193623465e0b70496b5aadd09d",
@@ -254,6 +254,6 @@
    "validate_facility_value_contracts.py": "91640e2a76cd6cc9186f7b85c0bf379b24b6cac0d48962815235ee628e7ae43e",
    "validate_plan.py": "23678227d9b3c556f1bd903f4b5b3147c4a82ce5085e10055481026803451b80",
    "validator_update_checks.json": "f997d0f3de2cea29550840b1d5cb23647d64f81329de46758551e2b6c8fecc27",
-    "work_packages.json": "1682bd3fe49a16f520cede855ca07814212541b2090971327954d6569245517c"
+    "work_packages.json": "1d2e35b9c38e8fc18ac256620aabcf576221562dc3178548c77d5cdac2a14b9f"
  }
 }
@@ -2,8 +2,8 @@
  "schema_version": 1,
  "integrated_at_jst": "2026-10-13T09:40:31.868894+09:00",
  "scope": "P24-03 formally completed with exact submitted independent review and current main integration/final evidence; next P24-02 resumed, whole game incomplete",
-  "source_head": "0a759f13aed03c05fd4a25ab4a2c26eefec94e3c",
-  "source_authority_note": "Production HEAD at this documentation update; P24 candidate4cefcff remains isolated and unadopted.",
+  "source_head": "a0f556e13512c868890726267483ec133bb54d7a",
+  "source_authority_note": "Production HEAD before this documentation checkpoint; P24 candidate9641ed52 and P18 candidate0084760e remain isolated and unadopted.",
  "immutable_history": {
    "baseline.json": {
      "sha256": "750bb3d313cc5e2ce0d4c79e563a995abd7a78f991dee1dd75c627877b02cd7b",
@@ -9710,5 +9710,12 @@
  },
  "next_closure_plan_id": "P24-02",
  "p24_03_formal_closure": "docs/plans/original-completion-2026-10-02/execution/p24-03-formal-closure-r01/closure.json",
-  "new_engine_run_scope": "Supplemental positive metadata diagnostic r01 failed cleanup preparation/log isolation; r02 passed17checks unchanged source and entire default profile. No duplicated full game regression."
+  "new_engine_run_scope": "Supplemental positive metadata diagnostic r01 failed cleanup preparation/log isolation; r02 passed17checks unchanged source and entire default profile. No duplicated full game regression.",
+  "current_closure_targets": {
+    "current": "P24-02",
+    "candidate": "9641ed52def2ff8e5b0222449a4a83a1191e1d37",
+    "next_dependency": "P18-01",
+    "dependency_candidate": "0084760ee05a97adfcbd783a71161491f3629918",
+    "new_formally_completed_delivery_units": 0
+  }
 }
@@ -6170,7 +6170,7 @@
    },
    "legacy_state": "in_progress",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。",
+    "current_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。 MP-01-r02継続: 追加1回を直接承認（call_de866e18b25942ee8992263aa0189278）、個別cap2/使用2を保持。同一SHAの旧案2文書を再利用し、実Opus5.5のrun判断/Sol選択で同一登録ワーカーを起動。資料の正式検証・独立レビュー・統合は未了。製品値/P06-01受入/30・88分母は未変更。",
    "remaining_deliverables": [
      {
        "id": "P06-01",
@@ -6193,15 +6193,21 @@
            "path": "docs/plans/original-completion-2026-10-02/checkpoints/mana-proposal-draft-r01/manifest.json",
            "sha256_at_integration": "fce154c54395be81e875faf76b0ec19f2be3c0e06d097d54e1b87e824b27af60",
            "scope": "unapproved proposal draft, root arithmetic/source checks, diagnostic independent review; not formal original delivery acceptance"
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/mana-proposal-continuation-r03/counter-and-reuse-verification.json",
+            "sha256_at_integration": "933df166de1e249756e3f91e0a55ea86c0b14b1761de00b052713aa4a5096c0e",
+            "scope": "Actual task cap1/used1 and same-worktree original proposal byte equality; no worker or new values applied",
+            "current_game_acceptance_inferred": false
          }
        ],
-        "progress_summary": "原契約監査は未採用で終端。承認用マナ候補3案と37施設需要を作成し53source pin・126比較区間を照合。別Claudeの読取専用診断レビューで炉容量判定、枯渇復帰条件、余裕案の文章誤記、供給喪失の区分に未解決を確認。原稿はnot_approval_ready、本番未反映。source_pins形式とRunner提出/読取制限が残り正式検証・正式レビュー・統合なし。修正上限を守り重複再起動しない。原P06-01未完、30/88の分母/条件を維持。次の独立候補P24-03。",
+        "progress_summary": "停電、厨房、救護の停止復帰は部分実装。有限マナ供給の契約が残る。 制御したEV乗車中救護の停電保存/再開691/0・10全状態pair・無制限journal各9件を限定照合。安全階での緊急降車・自然停電・全館停止・通常UIは未受入。 最新現1299参照で通常建設からの物流/厨房の制御停電・復旧、2正式保存/別PID全状態一致を460/0で限定受入。利用中サービス0件なので途中販売/中断は未受入。全P06未完。 現版の自然入館客の食事/宿泊の制御停電・復旧・一回請求、既存RAIDED休止時の安全終了と正式保存別PID全状態一致を1906/0で限定受入。再開の不具合仮説は反証、ゲーム変更0。全P06未完。 2026-10-12: 旧限定停電証拠から現Runtime等13sourceが変化しており現受入へ自動適用しない。P06-01の原契約監査をRunner経由で開始。正式完了なし。 MP-01-r02継続: 追加1回を直接承認（call_de866e18b25942ee8992263aa0189278）、個別cap2/使用2を保持。同一SHAの旧案2文書を再利用し、実Opus5.5のrun判断/Sol選択で同一登録ワーカーを起動。資料の正式検証・独立レビュー・統合は未了。製品値/P06-01受入/30・88分母は未変更。",
        "remaining_gaps": [
          "生成・蓄積・消費と初期値/係数の原本・承認・実装・試験用値の根拠対応。",
          "旧ゼロ保存の意味、移行、残量境界の現版証拠と矛盾の有無。",
          "13source差分を含む既存証拠の適用性、必要検証、独立レビューと全条件台帳反映。"
        ],
-        "updated_at_jst": "2026-10-13T00:29:23.970192+09:00"
+        "updated_at_jst": "2026-10-13T16:27:12.029767+09:00"
      },
      {
        "id": "P06-02",
@@ -8503,7 +8509,7 @@
    },
    "legacy_state": "planned",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "P18-01 actual original/legacy save audit and backend implementation contract prepared. Opus5.5 recommends Astra for migration/atomic restore complexity. Backend code phase remains part of P18-01; no new delivery unit and no acceptance yet. UI and approved initialization remain unmet.",
+    "current_summary": "P18-01 backend候補0084760eの実native7/843・全308parse・通常Runner verify-only PASS。別Opus独立reviewはchanges_requested: 旧alias更新と退店客参照/旧型互換・UNIQUE保全の根拠不足。旧active actor存在条件の追加は保存互換リスクとして未採用修正案を準備。修正2/2、P18追加1回は別質問の回答待ち。通常UI/本番初期値/単位全受入は未了。",
    "remaining_deliverables": [
      {
        "id": "P18-01",
@@ -8524,15 +8530,38 @@
            "sha256_at_integration": "e0b7094808385097fba664d9284d967a044d53fc8bd08e9d4a484f1f31d0032f",
            "scope": "Actual Opus contract/model proposal only, action wait; no implementation acceptance",
            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p18-01-contract-r01/native-preflight-r01.json",
+            "sha256_at_integration": "43b66545d88a4ac8406911e27a40b448efd89863a2eb5ec2ca554ff2dead5fe9",
+            "scope": "Retained uncommitted actual native source1311/model+Runtime+legacy affected7/843; preliminary code evidence only, collector changed later requires exact final revalidation",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p18-01-contract-r01/submitted-native-r02.json",
+            "sha256_at_integration": "b4276df526b4e994eb0ad09ed783cbd3d9040879cfc139e34d8921f7d1989ac2",
+            "scope": "Exact0084760e native7/843 + parse308; not UI/unit acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p18-01-contract-r01/independent-opus-review-r01.json",
+            "sha256_at_integration": "bed152ea2d9839a90ee48c611834752a7089c89aabe4dec9e4f52ba68e47c4c0",
+            "scope": "Actual separate Opus review changes_requested; only P18-C-1 met",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p18-01-contract-r01/review-context-dependencies-r02.json",
+            "sha256_at_integration": "740d560af709c5367c364357cc347191235015922b6ed1980010988fe221b25f",
+            "scope": "No LLM/product changes: whole unchanged legacy state + complete remove/retire/despawn dependency context pinned; review guard348274<500000; findings unclosed",
+            "current_game_acceptance_inferred": false
          }
        ],
-        "updated_at_jst": "2026-10-13T14:01:57.377446+09:00",
-        "progress_summary": "P18-01 actual original/legacy save audit and backend implementation contract prepared. Opus5.5 recommends Astra for migration/atomic restore complexity. Backend code phase remains part of P18-01; no new delivery unit and no acceptance yet. UI and approved initialization remain unmet.",
+        "updated_at_jst": "2026-10-13T15:41:12.706527+09:00",
+        "progress_summary": "P18-01 backend候補0084760eの実native7/843・全308parse・通常Runner verify-only PASS。別Opus独立reviewはchanges_requested: 旧alias更新と退店客参照/旧型互換・UNIQUE保全の根拠不足。旧active actor存在条件の追加は保存互換リスクとして未採用修正案を準備。修正2/2、P18追加1回は別質問の回答待ち。通常UI/本番初期値/単位全受入は未了。",
        "remaining_gaps": [
-          "Implement original three-axis meaning and protagonist Affection-bound shield maximum across model/UI/save.",
-          "Preserve old generic five-axis facts without guessed migration; pin new/old/missing/unknown/corrupt save contract.",
-          "Distinguish source/approved initial values, coefficients and thresholds from unset required values; do not expose unset as confirmed zero/default.",
-          "Verify necessary P03/P17 slice acceptance, required tests, independent Opus review and integration/final evidence."
+          "原本3値+Affection盾最大の専用backendは候補実装済み。表示とモデルの通常UI整合、全heroine/P17人物参照、未設定本番値の承認を満たす。",
+          "独立レビュー指摘を解消: 旧alias変更のService/Runtime再保存、退店客persistent参照、旧型Reader互換、UNIQUE保全。現候補のlegacy actor条件は旧正当保存を拒否し得るため未採用。",
+          "正確な修正版局所・影響/別Opus review/統合・最終照合。P24の追加許可は本件に転用しない。全原成果単位最終版の必須検証は別途。"
        ]
      },
      {
@@ -15667,7 +15696,7 @@
    },
    "legacy_state": "in_progress",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "P24-03正式完了済み。P24-02固定666c87bd local7/477 PASS、実macOS IMEと保存名/別PID通常読込を限定証拠として取得。通常新規入力欄入口に不足を発見、3行差分案と追加repair1の確認を準備。全8条件/実上流/最終full/独立review/統合/Windowsは未了。",
+    "current_summary": "P24-03正式完了済み。P24-02固定9641ed52/修正3/3の局所3 167・通常menu実IME保存別PID読込証拠を保持。追加通常playの受付工事70percent/min444を旧slotへ保存し別名保存、旧4files全byte保全、別PID39701→40866復元直後全snapshot118528B一致を証明。資料補完後の別Opus限定reviewPASS。全8/上流/最終full/正式review/統合/Windows未了。 追補: native49041の有効1command/job/charge・重複拒否text・全Runtime保全・通常menu id3・modal取消/選択保全をPNG8/全snapshotで記録、別Opus限定reviewPASS。Root記録器r04失敗は保存、r05は終了/保全違反0。",
    "remaining_deliverables": [
      {
        "id": "P24-01",
@@ -15744,16 +15773,83 @@
            "scope": "Original line143 correction and current relationship/duel call-site audit; not acceptance",
            "linked_at_jst": "2026-10-13T13:46:18.655711+09:00",
            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/repair3-submitted-r04.json",
+            "sha256_at_integration": "f46e0cb696d87602d95b6917984f834b38ee86d7715c376529a532742e52be00",
+            "scope": "Human-approved P24-only repair3 and real same-GUI submission",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/submitted-local-r06.json",
+            "sha256_at_integration": "2a4ef43e7b866ce9d260f52d4514c57d9d57154a0136597513361ce91f6a0b9c",
+            "scope": "Exact9641ed52 local affected3/167 and wholeparse; not full acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/ordinary-menu-os-observations-r02.json",
+            "sha256_at_integration": "e64951077a70f49b923989cdf609cfae04114e542bcf80e2d15d88459c75f967",
+            "scope": "Actual normal menu/IME cancel confirm/Japanese name save/separate-process load on9641ed52; world/platform gaps explicit",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/independent-delta-review-r02.json",
+            "sha256_at_integration": "399c5de44b08da76c41262115d0dd43c66b97b5256c5d5c46533f2b30d7d01da",
+            "scope": "Separate real Opus5.5 limited third-repair delta PASS; whole8/formal Runner review false",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/ordinary-save-preservation-observations-r03.json",
+            "sha256_at_integration": "024a2cb0aba292037f281a3eea43b5eac95d773fa0517e77b32b08ef5084e7c1",
+            "scope": "Exact9641ed52 normal placement/construction and Root-verified4file preservation/full restored snapshot bytes; scenario/phase limited",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/preservation-provenance-supplement-r04.json",
+            "sha256_at_integration": "a7aa38caec8b6968c9bde7ddbcd359ea1ca4cc4ec6108e6e02ec04796dbce1f9",
+            "scope": "Actual retained full before/after captures, all4 live rehash, file metadata/native tick ordering; no new engines",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/independent-preservation-evidence-review-r04.json",
+            "sha256_at_integration": "9baa6ec7f457f6532f5f9c0fc32f9fdc2f8440918ca1944f092fca087395987b",
+            "scope": "Separate actual Opus5.5 limited evidence pass after supplemental data; first rejection preserved",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/preservation-evidence-disposition-r04.json",
+            "sha256_at_integration": "93d68e05efcec1ccfbb90364715b9593677c9236fde0ced9081daee8f637d3ef",
+            "scope": "Root limitation and reviewer inaccurate isolation-claim correction; no whole-unit acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/ordinary-controls-observations-r05.json",
+            "sha256_at_integration": "56d5e47139841f40d7fed0d053fb9eb87956e07240a208355a77a94a7dd0a094",
+            "scope": "Actual49041 one normal click placement/modal scenario; full model unchanged after invalid/cancel, actual menu3,8 PNG pins",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/independent-controls-evidence-review-r05.json",
+            "sha256_at_integration": "be0529227036fffb6d9fe9ca77a00404592579c237dfda51fd08341a7cfb16a9",
+            "scope": "Actual separate Opus5.5 limited source/text evidence PASS; no independent image inspection/full unit acceptance",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/controls-evidence-disposition-r05.json",
+            "sha256_at_integration": "1093d70cf154c4c372f6d27ca160840fb8e63f9771f781bdf60836685bed97da",
+            "scope": "Collector failure preserved and instrumentation/boot/input limitations explicit",
+            "current_game_acceptance_inferred": false
          }
        ],
-        "updated_at_jst": "2026-10-13T13:46:18.655711+09:00",
-        "progress_summary": "P24-02の既存worktreeを引き継ぎ、Claude Opus5.5の記録済み判断で正式GUI経路へ移行。通常repair2/上限2、契約/分母/権限/課金変更なし。Antigravity IDEの制限モードで同一担当が編集し、型/Window API/実DomainEventStream購読/関係モデルの頭上表示/実時間停止試験/試験SHAを更新。初期API診断の範囲外生成物2件は内容SHA一致で退避、通常playerの保存差分0だがログrotation3差分を記録し非受入とする。実追加負例によりcheckerの証拠なし誤合格を再確認し、任意artifact/未承認表示下限/候補SHAと必要証拠内容の不備を提出前の同一作業内で是正中。Root専用profileの現候補preflightはimport PID61380 PASS、全GD parse PID61466で試験の未定義ManualSaveSlotsDialogScript参照2件FAIL。局所7スイート未実行、source/player/cleanup guard違反0。全回帰重複0、submit/独立正式review/統合/受入は未了。NTR・決闘の実生成と通常OS/同一Windows証拠を未達のまま保持。 修正版r04で実import PID68758と全GD parse PID68849はPASS。初局所PID68958は56checks/1failure（observerが人物数と状態遷移数を混同）で停止し、残り6は未実行。source/player/cleanup違反0。同じGUI repair2で意味を保つ履歴記録の修正中。 最終r05の実import/全GD parse/局所・影響7スイート477checksはPASS、source/player/cleanup違反0。通常Runner submitで666c87bd7d7c961ae6d7d2ad8d52d6456c31015bへ固定、提出後1313全ソースSHA差0/cleanを確認し、local証拠の限定再利用を記録。候補コードはcodex/p24-02-operations-candidate-r03へpush、main製品コードには未統合。全8条件の実証、上流NTR/決闘、最終full、独立Opus reviewは未了のまま。 固定666c87bdで通常OS入力を実行。通常の新規保存名欄入口が不足するため、診断F8から同一製品dialogを開いた実IME記録を通常入口証拠と分離。native PID80764でローマ字キー→未確定テスト/取消/確定をDisplayServer値とキー列で実記録し、表示名テストを暗号所有スロットへ保存。別PID83514の通常読込一覧/通常読込で同名と保存pathを確認。各source/default player/cleanup違反0。1280x720/1024x608とJPEG実画面を保存。全世界状態一致や通常新規入口は未受入。新規入口3行差分案を作り、P24-02だけ追加repair1（上限2→3、カウンタresetなし）の回答待ち。 Original line143 recheck corrected Root instruction: shield positive-to-zero break starts NTR erosion. Existing shield_changed/RELATIONSHIP_SHIELD_CHANGED/Main subscription is present. Candidate warning wording needs the proposed one-line original-derived correction. Ordinary same-placement attack is unproven; no duel production generator/executor/save state found. Opus orders upstream acceptance/P01 scope -> P18-01/02 -> P19-01/P21-01 -> final P24 actual warnings.",
+        "updated_at_jst": "2026-10-13T16:27:12.029767+09:00",
+        "progress_summary": "P24-03正式完了済み。P24-02固定9641ed52/修正3/3の局所3 167・通常menu実IME保存別PID読込証拠を保持。追加通常playの受付工事70percent/min444を旧slotへ保存し別名保存、旧4files全byte保全、別PID39701→40866復元直後全snapshot118528B一致を証明。資料補完後の別Opus限定reviewPASS。全8/上流/最終full/正式review/統合/Windows未了。 追補: native49041の有効1command/job/charge・重複拒否text・全Runtime保全・通常menu id3・modal取消/選択保全をPNG8/全snapshotで記録、別Opus限定reviewPASS。Root記録器r04失敗は保存、r05は終了/保全違反0。",
        "remaining_gaps": [
-          "固定666c87bdのimport/全GDparse/local7 477はPASSとして再利用。実OS日本語IMEの未確定/取消/確定/保存metadata/別PID通常読込を限定証拠として保存。通常新規保存欄入口が不足し、診断起動を通常入口として合格にはしない。作成済み3行差分を同一タスクへ反映する追加repair1の回答待ち。",
-          "証拠checkerは例の5負例を拒否しても説明文・PID1・checker1ファイルのみで一度誤合格。具体artifact種類/内容、正しい実候補SHA/必要source manifest/入力/設定/環境/OSreceipt/IME/実event/別process保存再開/実全rosterを照合する。未承認800x600下限を採用せず、希薄な証拠を合格へ替えない。",
-          "Original line143 defines shield break as NTR onset. Restore candidate wording wrongly changed by Root. Reuse existing event subscription; ordinary co-placement attack belongs to P18-01/02, duel types/results/save to P19-01, natural defense proof to P21-01. Fixture injection cannot substitute for ordinary triggers.",
-          "実macOSのIMEと保存名/通常読込、1280x720/1024x608の画面を取得済み。ただし保存名dialogは診断入口による活性化であり通常new-save到達性は不足。実NTR/決闘生成と全world/台帳/人物/イベントの別process一致、Windows同一版は未了。",
-          "関連修正後の最終版で必須全回帰、別セッションClaude Opus5.5独立レビュー、現在main統合と最終検証を通す。同一Windows配布版の実機受入は別条件として未了。P24-02全8条件未達を維持。Supporting RP24-02の追加修正上限の質問は別件であり、GUI作業の上限はリセットしない。"
+          "固定9641ed52の局所3/167、通常menu実IME取消確定・保存・別PID読込を保持。追加受付工事の実playで旧slot4files全内容保全と復元直後全snapshot byte一致を取得、別Opus資料補完reviewPASS。これは単一scenario/復元直後phaseのみ。全人物・関係・eventの保存移行/再開とpost-event重複、invalid feedback、倍率の全条件は残る。",
+          "原本通りNTR開始警告文へ復旧済み。自然NTR生成はP18-01/02、3決闘と結果保存はP19-01、自然防衛はP21-01の受入が必要。fixture注入を通常実証に替えない。",
+          "配置/無効drop、モーダル停止再開、実状態フキダシ、ログ順序/再開重複、重要警告、click代替、IME/倍率、最終検証reviewの全8条件を候補版付きで揃える。",
+          "最終版の必須全回帰・全条件独立Opusレビュー・現在main統合/最終検証・同一Windows配布版実機未了。今回差分reviewは全条件reviewの代用ではない。",
+          "限定差分独立reviewはPASS。追加観測残件: 単一受付scenarioの旧4files保全/全snapshot一致は限定独立review済み。残る全内容保存移行とpost-event照合、invalid label表示とDEL扱い、実盾0/NTR文言、通常id3の自動試験。後2つの提案は承認済み範囲内で必要性を判断し、新仕様/未知値を作らない。",
+          "同一9641の通常受付1配置/重複拒否/全model保全/実menu id3/modal取消/選択維持をnative49041とPNGで限定review済み。配属無効drop、全modal・時間進行中・背後入力全ケース、正常main_scene起動、全platform適用条件と正式最終reviewは残る。text-only独立reviewはpixelsを未閲覧。"
        ]
      },
      {
@@ -1,38 +0,0 @@
-class_name OriginalRelationshipState
-extends RefCounted
-
-## Explicit facts only. Numeric values are not production initialization approval.
-## No update, attack, reduction, threshold or route policy is defined here.
-const FIELDS := ["subject_id", "protagonist_id", "rival_id", "affection", "lust", "netorare", "shield_current", "shield_max"]
-var _payload: Dictionary = {}
-
-
-static func from_snapshot(value: Variant) -> OriginalRelationshipState:
-	if not value is Dictionary or value.size() != FIELDS.size():
-		return null
-	for field: String in FIELDS:
-		if not value.has(field):
-			return null
-	for field: String in ["subject_id", "protagonist_id", "rival_id"]:
-		if not (value[field] is String or value[field] is StringName) or String(value[field]).is_empty():
-			return null
-	if value["subject_id"] == value["protagonist_id"] or value["subject_id"] == value["rival_id"] or value["protagonist_id"] == value["rival_id"]:
-		return null
-	for field: String in ["affection", "lust", "netorare", "shield_current", "shield_max"]:
-		if not (value[field] is int or value[field] is float):
-			return null
-		if value[field] is float and not is_finite(value[field]):
-			return null
-	if value["shield_max"] != value["affection"] or value["shield_current"] < 0 or value["shield_current"] > value["shield_max"]:
-		return null
-	var state := OriginalRelationshipState.new()
-	state._payload = value.duplicate(true)
-	return state
-
-
-func create_snapshot() -> Dictionary:
-	return _payload.duplicate(true)
-
-
-func subject_id() -> StringName:
-	return StringName(_payload.get("subject_id", ""))
@@ -1 +0,0 @@
-uid://cqxwpbkgjtnsa
@@ -9,9 +9,8 @@ signal route_lock_changed(relationship_id: StringName, old_lock: int, new_lock:

 const RelationshipStateType = preload("res://scripts/relationship/relationship_state.gd")
 const CommandResultType = preload("res://scripts/core/command_result.gd")
-const OriginalStateType = preload("res://scripts/relationship/original_relationship_state.gd")

-const SNAPSHOT_VERSION := 2
+const SNAPSHOT_VERSION := 1
 const DAILY_AUTOMATIC_DELTA_LIMIT := 10
 const GATED_THRESHOLDS: Array[int] = [50, 80]
 const STAGE_THRESHOLDS: Array[int] = [20, 50, 80, 100]
@@ -23,46 +22,6 @@ var _pair_index: Dictionary = {}
 var _threshold_candidates: Array[Dictionary] = []
 var _next_candidate_sequence := 1
 var _candidate_callback := Callable()
-var _original_records: Dictionary = {}
-var _original_identity_validator := Callable()
-var _legacy_raw: Dictionary = {}
-var _legacy_baselines: Dictionary = {}
-var _container_raw: Dictionary = {}
-
-
-func configure_original_identity_validator(callback: Callable) -> RelationshipService:
-	_original_identity_validator = callback
-	return self
-
-
-func register_original_relationship(payload: Variant) -> CommandResult:
-	var state := OriginalStateType.from_snapshot(payload)
-	if state == null:
-		return _invalid("Original relationship requires complete explicit facts.")
-	if not _original_identity_validator.is_valid() or not bool(_original_identity_validator.call(state.create_snapshot())):
-		return _invalid("Original relationship identities are not registered.")
-	if _original_records.has(state.subject_id()):
-		return _duplicate("Original relationship subject", state.subject_id())
-	_original_records[state.subject_id()] = state.create_snapshot()
-	last_error = ""
-	return _success({&"subject_id": state.subject_id()})
-
-
-func get_original_relationship(subject_id: StringName) -> Dictionary:
-	if _original_records.has(subject_id):
-		var result: Dictionary = _original_records[subject_id].duplicate(true)
-		result[&"configured"] = true
-		return result
-	return {&"configured": false, &"subject_id": subject_id,
-		&"protagonist_id": null, &"rival_id": null, &"affection": null,
-		&"lust": null, &"netorare": null, &"shield_current": null, &"shield_max": null}
-
-
-func validate_original_identities() -> bool:
-	for payload: Dictionary in _original_records.values():
-		if not _original_identity_validator.is_valid() or not bool(_original_identity_validator.call(payload.duplicate(true))):
-			return false
-	return true


 func configure_candidate_callback(callback: Callable = Callable()) -> RelationshipService:
@@ -370,8 +329,6 @@ func consume_threshold_candidate(candidate_id: StringName) -> Dictionary:

 func validate_invariants() -> Dictionary:
 	var errors: Array[String] = []
-	if not validate_original_identities():
-		errors.append("Original relationship identity reference is invalid.")
 	var seen_pairs: Dictionary = {}
 	for relationship_id: StringName in _sorted_name_keys(_relationships):
 		var state := get_relationship(relationship_id)
@@ -390,92 +347,22 @@ func validate_invariants() -> Dictionary:
 func create_snapshot() -> Dictionary:
 	var relationships: Array[Dictionary] = []
 	for state: RelationshipState in get_relationships():
-		var current := state.create_snapshot()
-		var original: Dictionary = _legacy_baselines.get(state.relationship_id, {})
-		var raw: Dictionary = {}
-		for entry: Dictionary in _legacy_raw.get(&"relationships", []):
-			if StringName(_value(entry, &"relationship_id", "")) == state.relationship_id:
-				raw = entry
-				break
-		relationships.append(_merge_legacy_changes(raw, original, current) if not original.is_empty() else current)
+		relationships.append(state.create_snapshot())
 	var candidates := _threshold_candidates.duplicate(true)
 	candidates.sort_custom(
 		func(a: Dictionary, b: Dictionary) -> bool:
 			return String(a.get(&"candidate_id", "")) < String(b.get(&"candidate_id", ""))
 	)
-	var legacy := _legacy_raw.duplicate(true)
-	legacy[&"version"] = 1
-	# Preserve input collection order as well as every untouched raw field.
-	if _legacy_raw.has(&"relationships"):
-		var ordered: Array[Dictionary] = []
-		for raw: Dictionary in _legacy_raw[&"relationships"]:
-			for entry: Dictionary in relationships:
-				if _value(entry, &"relationship_id", "") == _value(raw, &"relationship_id", ""):
-					ordered.append(entry)
-		for entry: Dictionary in relationships:
-			if not ordered.has(entry):
-				ordered.append(entry)
-		relationships = ordered
-	if legacy.get(&"relationships") != relationships:
-		legacy[&"relationships"] = relationships
-	var current_candidates := _threshold_candidates.duplicate(true) if not _legacy_raw.is_empty() else candidates
-	if legacy.get(&"threshold_candidates") != current_candidates:
-		legacy[&"threshold_candidates"] = current_candidates
-	legacy[&"next_candidate_sequence"] = _next_candidate_sequence
-	var result := _container_raw.duplicate(true)
-	result[&"version"] = SNAPSHOT_VERSION
-	result[&"legacy"] = legacy
-	# Compatibility projection for existing snapshot consumers; the nested v1
-	# record remains lossless, including extension names reserved by v2.
-	if result.get(&"relationships") != relationships:
-		result[&"relationships"] = relationships.duplicate(true)
-	var originals: Array[Dictionary] = []
-	for payload: Dictionary in _original_records.values():
-		originals.append(payload.duplicate(true))
-	if result.get(&"original_relationships") != originals:
-		result[&"original_relationships"] = originals
-	return result
-
-
-static func _merge_legacy_changes(raw: Dictionary, baseline: Dictionary, current: Dictionary) -> Dictionary:
-	var result := raw.duplicate(true)
-	for key: Variant in baseline:
-		if not current.has(key):
-			result.erase(key)
-	for key: Variant in current:
-		if baseline.has(key) and current[key] == baseline[key]:
-			continue
-		if current[key] is Dictionary and baseline.get(key) is Dictionary and result.get(key) is Dictionary:
-			result[key] = _merge_legacy_changes(result[key], baseline[key], current[key])
-		else:
-			result[key] = current[key]
-	return result
+	return {
+		&"version": SNAPSHOT_VERSION,
+		&"relationships": relationships,
+		&"threshold_candidates": candidates,
+		&"next_candidate_sequence": _next_candidate_sequence,
+	}


 func restore_snapshot(snapshot: Dictionary) -> bool:
-	var version: Variant = _value(snapshot, &"version", null)
-	if not version is int or version not in [1, SNAPSHOT_VERSION]:
-		last_error = "Unsupported Relationship snapshot version."
-		return false
-	var legacy: Variant = snapshot if version == 1 else _value(snapshot, &"legacy", null)
-	var originals: Variant = [] if version == 1 else _value(snapshot, &"original_relationships", null)
-	if not legacy is Dictionary or not originals is Array:
-		last_error = "Malformed Relationship snapshot container."
-		return false
-	if version == SNAPSHOT_VERSION and _value(snapshot, &"relationships", null) != _value(legacy, &"relationships", null):
-		last_error = "Legacy compatibility projection disagrees with its source."
-		return false
-	var original_records: Dictionary = {}
-	for raw: Variant in originals:
-		var state := OriginalStateType.from_snapshot(raw)
-		if state == null or original_records.has(state.subject_id()):
-			last_error = "Invalid or duplicate original relationship."
-			return false
-		if not _original_identity_validator.is_valid() or not bool(_original_identity_validator.call(state.create_snapshot())):
-			last_error = "Invalid original relationship identity reference."
-			return false
-		original_records[state.subject_id()] = state.create_snapshot()
-	var parsed := _parse_snapshot(legacy)
+	var parsed := _parse_snapshot(snapshot)
 	if not bool(parsed.get(&"ok", false)):
 		last_error = String(parsed.get(&"error", "Invalid Relationship snapshot."))
 		return false
@@ -483,18 +370,12 @@ func restore_snapshot(snapshot: Dictionary) -> bool:
 	_pair_index = parsed[&"pair_index"]
 	_threshold_candidates = parsed[&"threshold_candidates"]
 	_next_candidate_sequence = int(parsed[&"next_candidate_sequence"])
-	_original_records = original_records
-	_legacy_raw = legacy.duplicate(true)
-	_container_raw = snapshot.duplicate(true) if version == SNAPSHOT_VERSION else {}
-	_legacy_baselines = {}
-	for state: RelationshipState in get_relationships():
-		_legacy_baselines[state.relationship_id] = state.create_snapshot()
 	last_error = ""
 	return true


 func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
-	if not _value(snapshot, &"version", null) is int or _value(snapshot, &"version", null) != 1:
+	if int(_value(snapshot, &"version", 0)) != SNAPSHOT_VERSION:
 		return {&"ok": false, &"error": "Unsupported Relationship snapshot version."}
 	var raw_relationships: Variant = _value(snapshot, &"relationships", null)
 	var raw_candidates: Variant = _value(snapshot, &"threshold_candidates", null)
@@ -503,7 +384,7 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 	var relationships: Dictionary = {}
 	var pair_index: Dictionary = {}
 	for raw_state: Variant in raw_relationships:
-		if not raw_state is Dictionary or not _legacy_types_valid(raw_state):
+		if not raw_state is Dictionary:
 			return {&"ok": false, &"error": "Relationship snapshot entry is malformed."}
 		var state := RelationshipStateType.from_snapshot(raw_state)
 		if not state.is_valid() or relationships.has(state.relationship_id):
@@ -517,9 +398,6 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 	for raw_candidate: Variant in raw_candidates:
 		if not raw_candidate is Dictionary:
 			return {&"ok": false, &"error": "Threshold candidate is malformed."}
-		for key: String in ["candidate_id", "relationship_id"]:
-			if not (raw_candidate.get(key) is String or raw_candidate.get(key) is StringName):
-				return {&"ok": false, &"error": "Threshold candidate identity type is invalid."}
 		var candidate: Dictionary = raw_candidate.duplicate(true)
 		var candidate_id := StringName(candidate.get(&"candidate_id", candidate.get("candidate_id", "")))
 		var relationship_id := StringName(candidate.get(&"relationship_id", candidate.get("relationship_id", "")))
@@ -527,8 +405,6 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 			return {&"ok": false, &"error": "Threshold candidate reference is invalid."}
 		candidate_ids[candidate_id] = true
 		candidates.append(candidate)
-	if not _value(snapshot, &"next_candidate_sequence", null) is int:
-		return {&"ok": false, &"error": "Relationship candidate sequence type is invalid."}
 	var next_sequence := int(_value(snapshot, &"next_candidate_sequence", 0))
 	if next_sequence < 1:
 		return {&"ok": false, &"error": "Relationship candidate sequence is invalid."}
@@ -541,44 +417,6 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 	}


-static func _legacy_types_valid(raw: Dictionary) -> bool:
-	for key: String in ["relationship_id", "actor_a_id", "actor_b_id"]:
-		if not (raw.get(key) is String or raw.get(key) is StringName):
-			return false
-	for key: String in ["shield_max", "shield_current", "last_event_at", "daily_attack_count", "attack_day", "metric_delta_day"]:
-		if raw.has(key) and not raw[key] is int:
-			return false
-	for key: String in ["metrics", "action_counts", "daily_metric_deltas", "flags", "crossed_thresholds"]:
-		if raw.has(key) and not raw[key] is Dictionary:
-			return false
-	for key: String in ["trust", "respect", "affection", "fear", "dependence", "affinity", "obligation"]:
-		var metrics: Dictionary = raw.get("metrics", raw)
-		if metrics.has(key) and not metrics[key] is int:
-			return false
-	for key: String in ["action_counts", "daily_metric_deltas"]:
-		for value: Variant in raw.get(key, {}).values():
-			if not value is int:
-				return false
-	for key: String in ["action_counts", "flags"]:
-		for identity: Variant in raw.get(key, {}):
-			if not (identity is String or identity is StringName):
-				return false
-	for value: Variant in raw.get("flags", {}).values():
-		if not value is bool:
-			return false
-	for value: Variant in raw.get("crossed_thresholds", {}).values():
-		if not value is Array:
-			return false
-		for threshold: Variant in value:
-			if not threshold is int:
-				return false
-	if raw.has("route_id") and not (raw["route_id"] is String or raw["route_id"] is StringName):
-		return false
-	if raw.has("route_lock") and not (raw["route_lock"] is int or raw["route_lock"] is String or raw["route_lock"] is StringName):
-		return false
-	return true
-
-
 func _register_threshold_candidate(
 	state: RelationshipState,
 	metric_id: StringName,
@@ -1,110 +0,0 @@
-extends SceneTree
-
-const Model = preload("res://scripts/relationship/original_relationship_state.gd")
-const Service = preload("res://scripts/relationship/relationship_service.gd")
-var _checks := 0
-var _failures := 0
-
-
-func _initialize() -> void:
-	call_deferred("_run")
-
-
-func _expect(value: bool, message: String) -> void:
-	_checks += 1
-	if not value:
-		_failures += 1
-		push_error(message)
-
-
-static func fixture() -> Dictionary:
-	# Validation fixtures, never approved initialization or range limits.
-	return {"subject_id": "heroine_anri", "protagonist_id": "player", "rival_id": "rival_rai",
-		"affection": 142.5, "lust": 23.25, "netorare": 11, "shield_current": 90.5, "shield_max": 142.5}
-
-
-func _service() -> RelationshipService:
-	return Service.new().configure_original_identity_validator(
-		func(p: Dictionary) -> bool:
-			return p["subject_id"] == "heroine_anri" and p["protagonist_id"] == "player" and p["rival_id"] == "rival_rai"
-	)
-
-
-func _run() -> void:
-	var service := _service()
-	var before := var_to_bytes(service.create_snapshot())
-	var unset := service.get_original_relationship(&"heroine_anri")
-	_expect(not unset[&"configured"] and unset[&"affection"] == null, "missing record is unset")
-	unset[&"affection"] = 999
-	_expect(var_to_bytes(service.create_snapshot()) == before, "reads own their dictionaries")
-	var payload := fixture()
-	var payload_bytes := var_to_bytes(payload)
-	_expect(service.register_original_relationship(payload).is_success(), "complete directional fixture registers")
-	payload["affection"] = 0
-	_expect(service.get_original_relationship(&"heroine_anri")["affection"] == 142.5, "caller cannot mutate stored facts")
-	_expect(not service.register_original_relationship(fixture()).is_success(), "duplicate subject rejected")
-	var saved := service.create_snapshot()
-	var restored := _service()
-	_expect(restored.restore_snapshot(saved), "new-only v2 restores")
-	_expect(var_to_bytes(restored.create_snapshot()) == var_to_bytes(saved), "new-only exact bytes")
-	_expect(var_to_bytes(fixture()) == payload_bytes, "fixture is explicit and stable")
-	for field: String in Model.FIELDS:
-		var missing := fixture()
-		missing.erase(field)
-		_expect(Model.from_snapshot(missing) == null, "missing required field " + field)
-	for value: Variant in [null, true, "12", INF, NAN, {}, []]:
-		var wrong := fixture()
-		wrong["lust"] = value
-		_expect(Model.from_snapshot(wrong) == null, "wrong/nonfinite numeric value rejected")
-	for patch: Dictionary in [{"shield_max": 1}, {"shield_current": -1}, {"shield_current": 143}, {"rival_id": "player"}, {"subject_id": "player"}]:
-		var wrong := fixture()
-		wrong.merge(patch, true)
-		_expect(Model.from_snapshot(wrong) == null, "value/identity invariant rejected")
-	var zero := fixture()
-	for field: String in ["affection", "lust", "netorare", "shield_current", "shield_max"]:
-		zero[field] = 0
-	_expect(Model.from_snapshot(zero) != null, "explicit zero is configured")
-	var legacy := {"version": 1, "relationships": [{"relationship_id": "old", "actor_a_id": "player", "actor_b_id": "heroine_anri",
-		"metrics": {"affinity": 117, "dependence": 29, "extension": {"opaque": [3, "keep"]}}, "extra": ["raw", 2.5]}],
-		"threshold_candidates": [], "next_candidate_sequence": 1, "extension": {"version": 70}}
-	var legacy_bytes := var_to_bytes(legacy)
-	var migrated := _service()
-	_expect(migrated.restore_snapshot(legacy), "legacy aliases still usable")
-	_expect(migrated.get_relationship(&"old").get_metric(&"affection") == 100, "legacy normalization behavior retained")
-	_expect(not migrated.get_original_relationship(&"heroine_anri")[&"configured"], "legacy never configures original facts")
-	_expect(var_to_bytes(migrated.create_snapshot()[&"legacy"]) == legacy_bytes, "all raw legacy values and extensions preserved")
-	_expect(var_to_bytes(legacy) == legacy_bytes, "legacy input bytes untouched")
-	_expect(migrated.register_original_relationship(fixture()).is_success(), "mixed state registers independently")
-	var mixed := migrated.create_snapshot()
-	_expect(restored.restore_snapshot(mixed), "mixed snapshot restores")
-	_expect(var_to_bytes(restored.create_snapshot()) == var_to_bytes(mixed), "mixed exact bytes")
-	_expect(migrated.apply_value_change(&"old", &"trust", 3, 0).is_success(), "legacy changes still apply")
-	var changed: Dictionary = migrated.create_snapshot()[&"legacy"]
-	_expect(changed["relationships"][0]["metrics"]["affinity"] == 117 and changed["relationships"][0]["metrics"]["trust"] == 3, "changed metric preserves raw alias")
-	for version: Variant in [0, 3, "2", 2.0, true]:
-		var bad := mixed.duplicate(true)
-		bad[&"version"] = version
-		_rejected(restored, bad)
-	var duplicate := mixed.duplicate(true)
-	duplicate[&"original_relationships"].append(fixture())
-	_rejected(restored, duplicate)
-	for patch: Dictionary in [{"rival_id": "unknown"}, {"protagonist_id": "unknown"}, {"lust": false}, {"shield_max": 10}]:
-		var bad := mixed.duplicate(true)
-		bad[&"original_relationships"][0].merge(patch, true)
-		_rejected(restored, bad)
-	var bad_legacy := legacy.duplicate(true)
-	bad_legacy["relationships"][0]["metrics"]["affinity"] = "117"
-	_rejected(restored, bad_legacy)
-	bad_legacy = legacy.duplicate(true)
-	bad_legacy["relationships"].append(bad_legacy["relationships"][0].duplicate(true))
-	_rejected(restored, bad_legacy)
-	print("Original relationship model: %d checks, %d failures" % [_checks, _failures])
-	quit(_failures)
-
-
-func _rejected(service: RelationshipService, payload: Dictionary) -> void:
-	var before := var_to_bytes(service.create_snapshot())
-	var input := var_to_bytes(payload)
-	_expect(not service.restore_snapshot(payload), "corrupt snapshot rejected")
-	_expect(var_to_bytes(service.create_snapshot()) == before, "rejection preserves prior state")
-	_expect(var_to_bytes(payload) == input, "rejection preserves input bytes")
@@ -1 +0,0 @@
-uid://cqxwpbkgjtnsb
@@ -1,78 +0,0 @@
-extends SceneTree
-
-const Fixtures = preload("res://tests/s4/test_original_relationship_model.gd")
-var _checks := 0
-var _failures := 0
-
-
-func _initialize() -> void:
-	call_deferred("_run")
-
-
-func _expect(value: bool, message: String) -> void:
-	_checks += 1
-	if not value:
-		_failures += 1
-		push_error(message)
-
-
-func _run() -> void:
-	var clock = load("res://autoload/game_clock.gd").new()
-	var state = load("res://autoload/game_state.gd").new()
-	var runtime = load("res://autoload/simulation_runtime.gd").new()
-	clock.reset(1, 6, 0)
-	state.reset()
-	_expect(runtime.initialize(clock, state, 18001)[&"valid"], "Runtime initialized")
-	clock.set_paused(true)
-	var fixture := Fixtures.fixture()
-	_expect(not runtime.relationship_service.register_original_relationship(fixture).is_success(), "unhired subject rejected by service boundary")
-	_expect(runtime.submit_command(&"hire_staff_candidate", {&"candidate_id": &"heroine_anri"}).is_success(), "actual approved Anri hire")
-	var read_before := var_to_bytes(runtime.create_snapshot())
-	var report: Dictionary = runtime.get_staff_management_report()
-	var found := false
-	for row: Dictionary in report[&"staff"]:
-		if row[&"staff_id"] == &"heroine_anri":
-			found = true
-			_expect(not row[&"original_relationship"][&"configured"] and row[&"original_relationship"][&"affection"] == null, "actual report exposes unset")
-	_expect(found, "hired staff appears in actual report")
-	_expect(var_to_bytes(runtime.create_snapshot()) == read_before, "unset report read has no mutation")
-	var old_events: Array = runtime.domain_events.create_snapshot()["recent_events"]
-	_expect(runtime.submit_command(&"register_original_relationship", fixture).is_success(), "registered Runtime command stores explicit fixture")
-	var new_events: Array = runtime.domain_events.create_snapshot()["recent_events"]
-	_expect(new_events.size() == old_events.size() + 1 and new_events[-1][&"event_type"] == "COMMAND_COMPLETED", "only existing command completion event is emitted")
-	_expect(runtime.relationship_service.create_relationship(&"legacy", &"heroine_anri", &"player", {&"affinity": 44}).is_success(), "legacy service remains usable")
-	var saved: Dictionary = runtime.create_snapshot()
-	var input := var_to_bytes(saved)
-	_expect(runtime.restore_snapshot(saved), "mixed Runtime snapshot restores")
-	_expect(var_to_bytes(runtime.create_snapshot()) == input, "Runtime snapshot exact round trip")
-	_expect(var_to_bytes(saved) == input, "restore preserves caller bytes")
-	read_before = var_to_bytes(runtime.create_snapshot())
-	report = runtime.get_staff_management_report()
-	for row: Dictionary in report[&"staff"]:
-		if row[&"staff_id"] == &"heroine_anri":
-			var original: Dictionary = row[&"original_relationship"]
-			_expect(original[&"configured"] and original["affection"] == 142.5 and original["shield_max"] == 142.5, "restored report equals stored original values")
-			original["affection"] = -99
-	_expect(var_to_bytes(runtime.create_snapshot()) == read_before, "configured report owns projection containers")
-	for patch: Dictionary in [{"subject_id": "missing"}, {"protagonist_id": "rival_rai"}, {"rival_id": "missing"}, {"shield_current": 999}, {"lust": "bad"}]:
-		var corrupt := saved.duplicate(true)
-		corrupt[&"systems"][&"runtime"][&"relationships"][&"original_relationships"][0].merge(patch, true)
-		var bad_bytes := var_to_bytes(corrupt)
-		var service_before: Variant = runtime.relationship_service
-		_expect(not runtime.restore_snapshot(corrupt), "bad original Runtime restore rejected")
-		_expect(runtime.relationship_service == service_before, "failed restore preserves service identity")
-		_expect(var_to_bytes(runtime.create_snapshot()) == read_before, "failed restore preserves whole Runtime")
-		_expect(var_to_bytes(corrupt) == bad_bytes, "failed restore preserves input")
-	var v1 := saved.duplicate(true)
-	v1[&"systems"][&"runtime"][&"relationships"] = saved[&"systems"][&"runtime"][&"relationships"][&"legacy"].duplicate(true)
-	_expect(runtime.restore_snapshot(v1), "Runtime accepts genuine v1 relationship payload")
-	_expect(not runtime.relationship_service.get_original_relationship(&"heroine_anri")[&"configured"], "v1 restore does not map legacy affection")
-	var invalid := fixture.duplicate(true)
-	invalid["rival_id"] = "missing"
-	_expect(not runtime.relationship_service.register_original_relationship(invalid).is_success(), "restore rebind keeps identity validator")
-	_expect(runtime.relationship_service.register_original_relationship(fixture).is_success(), "restored service accepts correct identities")
-	runtime.free()
-	clock.free()
-	state.free()
-	print("Original relationship runtime: %d checks, %d failures" % [_checks, _failures])
-	quit(_failures)
@@ -1 +0,0 @@
-uid://cqxwpbkgjtnsc
@@ -1,20 +1,6 @@
 {
  "schema_version": 1,
  "suite_policies": {
-    "tests/s4/test_original_relationship_model.gd": {
-      "source_sha256": "ad509f5fb67ab91e1d1d99a08af51e4695e411b9a2541ea63ee22b1555cb0924",
-      "ordinary_cleanup_prepared": false,
-      "ordinary_control_labels": [],
-      "old_bounded_teardown": false,
-      "new_audio_QA": false
-    },
-    "tests/s4/test_original_relationship_runtime.gd": {
-      "source_sha256": "374f3d31a65d2f2b62dfef29721c8c838575b856f4fa5a0bca31c6ba4c7e09dd",
-      "ordinary_cleanup_prepared": false,
-      "ordinary_control_labels": [],
-      "old_bounded_teardown": false,
-      "new_audio_QA": false
-    },
    "tests/ui/test_selection_departure.gd": {
      "source_sha256": "3137f36f547514f25ce6ac775fa7a5141d12f83ca4b95da0be45fecfafe9d9b4",
      "ordinary_cleanup_prepared": true,
@@ -1,565 +0,0 @@
-#!/usr/bin/env python3
-"""Root-owned narrow P18 collection using the unchanged guarded phase protocol."""
-import argparse
-import hashlib
-import json
-import os
-import re
-import stat
-from pathlib import Path
-import shutil
-import sys
-import uuid
-
-sys.dont_write_bytecode = True
-import run_all_tests as shared
-
-ROSTER = [
-    'tests/s4/test_original_relationship_model.gd',
-    'tests/s4/test_original_relationship_runtime.gd',
-    'tests/s4/test_relationship_event_service.gd',
-    'tests/s4/test_runtime_relationship_events.gd',
-    'tests/s6/test_runtime_snapshot_serialization.gd',
-    'tests/s6/test_runtime_save_lifecycle.gd',
-    'tests/ui/test_staff_management.gd',
-]
-
-
-def collect(args, root, out, refs, markers, contracts, policy, contract_path, contract_sha, parse_paths):
-    source_bytes = sum(pin['bytes'] for pin in refs.values())
-    free = shutil.disk_usage(out.parent).free
-    needed = source_bytes + shared.MIN_SPACE
-    shared.require(free >= needed, 'fresh source and phase disk admission')
-    outer = shared.module('p18_owned_outer', shared.SUPPORT / 'owned_outer.py')
-    shared.require(not outer.native.helper['live_engines'](), 'another Godot owns CPU')
-    engine = shutil.which('godot')
-    shared.require(engine and Path(engine).is_file(), 'native launcher exists')
-    engine = str(Path(engine).resolve())
-    out.mkdir(parents=True, exist_ok=False)
-    stage = out / 'stage'
-    stage.mkdir()
-    (out / 'starters').mkdir()
-    (out / 'bootstrap').mkdir()
-    for name, pin in shared.read(shared.SUPPORT / 'bootstrap-scripts.json').items():
-        data = pin['text'].encode('utf-8')
-        shared.require(hashlib.sha256(data).hexdigest() == pin['sha256'], 'unchanged external bootstrap bytes')
-        (out / 'bootstrap' / name).write_bytes(data)
-    protected = shared.default_player(root)
-    expected = {name: {'bytes': pin['bytes'], 'sha256': pin['sha256']} for name, pin in refs.items()}
-    selected = {'root_before': refs, 'map': {name: pin['sha256'] for name, pin in refs.items()}, 'timeout': args.timeout}
-    for name, pin in refs.items():
-        target = stage / name
-        target.parent.mkdir(parents=True, exist_ok=True)
-        shared.copy_source(Path(pin['path']), target)
-    shared.require(shared.inventory(stage, stage=True) == expected, 'complete private source copy')
-    public = (stage / 'project.godot').read_bytes()
-    shared.write(out / 'parse-paths.json', parse_paths)
-    run_id = uuid.uuid4().hex
-    shared.write(out / 'runner-input.json', dict(protocol='guarded-p18-v2', run_id=run_id,
-        owner_runner_pid=os.getpid(), project_root=str(root), stage=str(stage), roster=ROSTER,
-        selected_source_map=selected['map'], marker_contract_sha256=contract_sha,
-        runner_sha256=shared.sha(Path(__file__)), shared_runner_sha256=shared.sha(shared.HERE / 'run_all_tests.py'),
-        marker_module_sha256=shared.sha(shared.HERE / 'strict_test_markers.py'),
-        engine=engine, engine_sha256=shared.sha(engine), default_player_before=protected,
-        formal_acceptance=False, original_unit_complete=False))
-    shared.write(out / 'source-start.json', refs)
-    diagnostics = shared.module('p18_diagnostics', shared.SUPPORT / 'diagnostic_gate.py')
-    owners = shared.module('p18_owners', shared.SUPPORT / 'ordinary_proof_gate.py')
-    audio = shared.module('p18_audio', shared.SUPPORT / 'audio_evidence_gate.py')
-    phases, rows, previous = [], [], {}
-    error = None
-    try:
-        for phase, test in [('import', None), ('parse', None)] + [(str(i).zfill(3), name) for i, name in enumerate(ROSTER)]:
-            shared.require(shared.sha(contract_path) == contract_sha, 'marker contract unchanged')
-            row = shared.execute_phase(engine, stage, out, phase, test, selected, expected, previous,
-                policy, contracts, parse_paths, public, protected, root, outer, markers, diagnostics, owners, audio)
-            archive_profiles(out, row)
-            phases.append(row)
-            if test:
-                row.update(sequence=len(rows), godot=engine)
-                rows.append(row)
-                (out / 'all-tests.json').write_text(json.dumps(rows, ensure_ascii=False, indent=2) + '\n')
-                print(('PASS ' if row['passed'] else 'FAIL ') + test, flush=True)
-            shared.require(row['passed'], 'first failed phase stops without retry: ' + phase)
-    except BaseException as caught:
-        error = type(caught).__name__ + ': ' + str(caught)
-    finally:
-        cleanup, cleanup_errors = outer.finish_captured(outer.OWNED)
-    guard_errors = []
-    try:
-        shared.require(shared.source_refs(root) == refs, 'whole source unchanged')
-        shared.require(shared.sha(contract_path) == contract_sha, 'marker contract unchanged at end')
-        shared.require(shared.default_player(root) == protected, 'default profile untouched')
-        shared.require(shared.inventory(stage, stage=True) == dict(expected, **previous), 'whole stage exact')
-    except BaseException as caught:
-        guard_errors.append(type(caught).__name__ + ': ' + str(caught))
-    ended = bool(outer.OWNED) and all(row['engine_ended'] is True for row in cleanup)
-    passed = error is None and not cleanup_errors and not guard_errors and ended and len(phases) == len(ROSTER) + 2 and all(row['passed'] for row in phases)
-    context = shared.totals(rows, ROSTER)
-    shared.write(out / 'runner-ended.json', dict(context, protocol='guarded-p18-v2', run_id=run_id,
-        owner_runner_pid=os.getpid(), passed=passed, engine_ended=ended,
-        actual_captured_PIDs=[process.pid for process in outer.OWNED], final_owned_cleanup=cleanup,
-        cleanup_errors=cleanup_errors, guard_errors=guard_errors, error=error, phases=phases,
-        all_tests_sha256=shared.sha(out / 'all-tests.json') if (out / 'all-tests.json').exists() else None,
-        default_player_after=shared.default_player(root), formal_acceptance=False,
-        original_unit_complete=False, independent_review='pending', native_Windows='pending'))
-    if passed:
-        seal(out, refs, engine, contract_sha)
-        # Root also exercises precisely the verifier that ordinary Runner uses.
-        verify(out, refs, markers, contracts, policy, contract_sha, parse_paths)
-    print(json.dumps(dict(context, passed=passed, error=error, cleanup_errors=cleanup_errors, guard_errors=guard_errors)), flush=True)
-    return 0 if passed else 1
-
-
-
-# Receipt file names are always relative; absolute paths in native receipts are
-# historical identity strings only and are never opened by the verifier.
-def require(ok, reason):
-    shared.require(ok, reason)
-
-
-def digest(value):
-    return hashlib.sha256(json.dumps(value, sort_keys=True, separators=(',', ':'),
-                                     ensure_ascii=False).encode()).hexdigest()
-
-
-def content_map(refs):
-    return {name: {'bytes': pin['bytes'], 'sha256': pin['sha256']}
-            for name, pin in refs.items()}
-
-
-def plain_path(path):
-    path = Path(path)
-    require('..' not in path.parts, 'parent traversal refused')
-    absolute = Path(os.path.abspath(path))
-    for part in [absolute, *absolute.parents]:
-        require(not part.is_symlink(), 'symlink path refused: ' + str(part))
-    return absolute
-
-
-def confined(out, name):
-    require(type(name) is str and name and '\\' not in name, 'ordinary relative evidence name')
-    path = Path(name)
-    require(not path.is_absolute() and '..' not in path.parts
-            and path.as_posix() == name and name != '.', 'evidence path escape or alias')
-    result = plain_path(out / path)
-    require(result.is_relative_to(out), 'evidence confined to output')
-    return result
-
-
-def inventory(out):
-    result = {}
-    require(out.is_dir(), 'output directory required')
-    for directory, dirs, files in os.walk(out, followlinks=False):
-        for name in dirs + files:
-            p = Path(directory) / name
-            mode = p.lstat().st_mode
-            require(stat.S_ISREG(mode) or stat.S_ISDIR(mode), 'nonordinary evidence refused')
-            if stat.S_ISREG(mode):
-                require(p.stat().st_nlink == 1, 'hardlinked evidence refused')
-                result[p.relative_to(out).as_posix()] = {
-                    'bytes': p.stat().st_size, 'sha256': shared.sha(p)}
-    return result
-
-
-def unique_object(pairs):
-    result = {}
-    for key, value in pairs:
-        require(key not in result, 'duplicate JSON key')
-        result[key] = value
-    return result
-
-
-def read_json(path):
-    return json.loads(path.read_text(encoding='utf-8'), object_pairs_hook=unique_object,
-                      parse_constant=lambda token: require(False, 'nonfinite JSON ' + token))
-
-
-def archive_profiles(out, row):
-    for label in ('startup', 'runtime'):
-        value = row.get('whole_' + label + '_profile_after')
-        if value is None:
-            continue
-        dest = out / 'profiles' / row['phase'] / label
-        dest.mkdir(parents=True, exist_ok=False)
-        source = plain_path(value['path'])
-        require(shared.inventory(source) == value['files'], 'whole owned profile before archive')
-        for name in value['files']:
-            target = confined(out, str((dest / name).relative_to(out)))
-            target.parent.mkdir(parents=True, exist_ok=True)
-            shutil.copyfile(source / name, target)
-        require(shared.inventory(dest) == value['files'] == shared.inventory(source),
-                'whole owned profile archive exact')
-
-
-def seal(out, refs, engine, contract_sha):
-    # Last file written: an interrupted collection has no complete receipt.
-    shutil.copyfile(engine, out / 'engine.bin')
-    require(shared.sha(out / 'engine.bin') == shared.sha(engine), 'engine archive exact')
-    source = content_map(refs)
-    shared.write(out / 'receipt.json', {
-        'schema': 'guarded-p18-v2', 'source_map': source,
-        'source_map_sha256': digest(source),
-        'project_settings_sha256': source['project.godot']['sha256'],
-        'marker_contract_sha256': contract_sha,
-        'engine_sha256': shared.sha(engine),
-        'files': inventory(out),
-    })
-
-
-def cleanup_gate(value):
-    require(value['owned_child_created'] is True and value['engine_ended'] is True
-            and value['actual_process_exit_code'] == 0 and value['errors'] == [],
-            'successful actual owned cleanup')
-    attempts = value['attempts']
-    require(1 <= len(attempts) <= 3, 'bounded cleanup attempts')
-    for index, row in enumerate(attempts):
-        require(row['attempt'] == index + 1 and row['errors'] == []
-                and row['wait_timeout_seconds'] == 5 and row['wait_completed'] is True
-                and row['wait_returned_code'] == 0 and row['poll_after'] == 0,
-                'complete bounded owned wait')
-
-
-def outer_cleanup(rows, pids):
-    require([r['pid'] for r in rows] == pids, 'exact captured cleanup PID order')
-    for row in rows:
-        require(row['engine_ended'] is True and row['outer_cleanup_errors'] == []
-                and row['foreign_process_or_group_signals'] == 0
-                and row['outer_maximum_helper_invocations'] == 3
-                and row['helper_maximum_waits'] == 3 and row['per_wait_timeout_seconds'] == 5,
-                'unchanged outer cleanup contract')
-        cleanup_gate(row['cleanup'])
-
-
-def verify(out, refs, markers, contracts, policy, contract_sha, parse_paths):
-    receipt_path = confined(out, 'receipt.json')
-    require(receipt_path.is_file(), 'regular final receipt required')
-    manifest = read_json(receipt_path)
-    require(manifest['schema'] == 'guarded-p18-v2', 'current receipt schema required')
-    files = manifest['files']
-    require(type(files) is dict and files, 'complete raw manifest')
-    for name, pin in files.items():
-        p = confined(out, name)
-        require(p.is_file() and set(pin) == {'bytes', 'sha256'}
-                and type(pin['bytes']) is int and pin['bytes'] >= 0
-                and re.fullmatch('[0-9a-f]{64}', pin['sha256']) is not None,
-                'ordinary artifact pin')
-    actual = inventory(out)
-    receipt_pin = actual.pop('receipt.json')
-    require(actual == files, 'complete raw file set and SHA-256 equality')
-    source = content_map(refs)
-    require(manifest['source_map'] == source and manifest['source_map_sha256'] == digest(source),
-            'current whole source content map independent of checkout path')
-    require(manifest['project_settings_sha256'] == source['project.godot']['sha256']
-            and manifest['marker_contract_sha256'] == contract_sha, 'current project/marker pins')
-
-    def read(name):
-        require(name in files, 'required raw file missing: ' + name)
-        return read_json(confined(out, name))
-
-    def text(name):
-        require(name in files, 'required raw transport missing: ' + name)
-        return confined(out, name).read_text(encoding='utf-8')
-
-    start, end = read('runner-input.json'), read('runner-ended.json')
-    require(start['protocol'] == end['protocol'] == 'guarded-p18-v2'
-            and start['run_id'] == end['run_id']
-            and re.fullmatch('[0-9a-f]{32}', start['run_id']) is not None,
-            'same current run')
-    require(type(start['owner_runner_pid']) is int and start['owner_runner_pid'] > 0
-            and start['owner_runner_pid'] == end['owner_runner_pid'], 'same collector owner')
-    require(start['roster'] == ROSTER and len(set(ROSTER)) == 7, 'exact seven unique tests')
-    require(start['selected_source_map'] == {n: p['sha256'] for n, p in source.items()}
-            and content_map(read('source-start.json')) == source, 'whole selected source pins')
-    for field, name in [('runner_sha256', 'tools/run_p18_relationship_tests.py'),
-                        ('shared_runner_sha256', 'tools/run_all_tests.py'),
-                        ('marker_module_sha256', 'tools/strict_test_markers.py')]:
-        require(start[field] == source[name]['sha256'], 'current collector/shared/marker pin')
-    require(start['marker_contract_sha256'] == contract_sha, 'marker contract pin')
-    # Resolve only the locally configured launcher, never the receipt's engine path.
-    engine = shutil.which('godot')
-    require(engine and shared.sha(engine) == start['engine_sha256']
-            == manifest['engine_sha256'] == files['engine.bin']['sha256'],
-            'current native engine and retained bytes pinned')
-    require(read('parse-paths.json') == parse_paths and len(parse_paths) == 308,
-            'all 308 exact source parse paths')
-    require(end['passed'] is True and end['engine_ended'] is True and end['error'] is None
-            and end['cleanup_errors'] == [] and end['guard_errors'] == [],
-            'finished successful collection without guard/cleanup error')
-    for receipt in (start, end):
-        require(receipt['formal_acceptance'] is False and receipt['original_unit_complete'] is False,
-                'backend evidence never completes original unit')
-    before = start['default_player_before']
-    require(before == end['default_player_after'] and before['logs_and_locks_included'] is True
-            and type(before['existed']) is bool and type(before['files']) is dict,
-            'complete default player before/after equality')
-    for name, pin in before['files'].items():
-        confined(out, name)  # Validate the inventory name; never open the player.
-        require(set(pin) == {'bytes', 'sha256'} and type(pin['bytes']) is int
-                and pin['bytes'] >= 0 and re.fullmatch('[0-9a-f]{64}', pin['sha256']),
-                'whole default player file pin')
-    require(before['existed'] or before['files'] == {}, 'absent player has no files')
-
-    native = shared.module('p18_verify_native', shared.SUPPORT / 'owned_diagnostic_process.py')
-    diagnostics = shared.module('p18_verify_diagnostics', shared.SUPPORT / 'diagnostic_gate.py')
-    owners = shared.module('p18_verify_owners', shared.SUPPORT / 'ordinary_proof_gate.py')
-    # Helpers are loaded for their pure gates only. No run/probe/cleanup is called.
-    origin = Path(start['stage']).parent
-    require(Path(start['stage']) == origin / 'stage' and origin.is_absolute()
-            and '..' not in origin.parts, 'original output identity')
-
-    def relocated(value):
-        if isinstance(value, dict):
-            return {relocated(k): relocated(v) for k, v in value.items()}
-        if isinstance(value, list):
-            return [relocated(v) for v in value]
-        if isinstance(value, str) and value.startswith(str(origin) + '/'):
-            return str(confined(out, value[len(str(origin)) + 1:]))
-        return value
-
-    def proof_read(path):
-        path = plain_path(path)
-        require(path.is_relative_to(out), 'proof path stays in output')
-        return relocated(read(path.relative_to(out).as_posix()))
-
-    owners.read = proof_read
-    phases = end['phases']
-    require(len(phases) == 9, 'exact nine phases')
-    tests = read('all-tests.json')
-    require(len(tests) == 7 and end['all_tests_sha256'] == files['all-tests.json']['sha256'],
-            'complete test rows')
-    pids = []
-    for index, (phase, test) in enumerate([('import', None), ('parse', None)]
-                                         + [(str(i).zfill(3), n) for i, n in enumerate(ROSTER)]):
-        row = read(phase + '-receipt.json')
-        expected_row = dict(row)
-        if test:
-            expected_row.update(sequence=index - 2, godot=start['engine'])
-            require(tests[index - 2] == expected_row, 'test row matches raw phase receipt')
-        require(phases[index] == expected_row and row['phase'] == phase and row['test'] == test
-                and row['passed'] is True and row['failed'] is False
-                and row['validation_error'] is None and not row.get('guard_error')
-                and row['default_player_entire_profile_unchanged'] is True,
-                'exact successful phase')
-        pid = row['actual_pid']
-        require(type(pid) is int and pid > 0 and pid not in pids, 'nine distinct actual PIDs')
-        pids.append(pid)
-        process = read(phase + '/process.json')
-        require(process == row['native_process'] and process['pid'] == pid
-                and process['owned_child_process_helper_sha256'] == native.HELPER_SHA
-                == source['tools/regression/p09_owned_engine_process.py']['sha256'],
-                'actual phase/process/helper agreement')
-        stdout, stderr, logger = (text(phase + '/' + n) for n in
-                                  ('stdout.log', 'stderr.log', 'engine-native.log'))
-        raw = stdout + stderr
-        require(text(row['log']) == raw and row['log_sha256'] == files[row['log']]['sha256'],
-                'literal complete raw stream')
-        require(process['stdout_sha256'] == files[phase + '/stdout.log']['sha256']
-                and process['stderr_sha256'] == files[phase + '/stderr.log']['sha256'],
-                'process transport SHA')
-        require(row['raw_native_log'] == dict(files[phase + '/engine-native.log'],
-                    path=str(origin / phase / 'engine-native.log')), 'native logger pin')
-        review = diagnostics.review_streams(native, {
-            'stdout': stdout, 'stderr': stderr, 'native_file': logger}, test)
-        require(row['finite_original_diagnostic_review'] == review
-                and diagnostics.diagnostic_result_gate(process, review)
-                and shared.process_gate(process, review['allowed_e31_error_lines']),
-                'strict diagnostics/process gates')
-        require(native.native_diagnostics(stdout, stderr, row['command'])
-                == process['strict_native_diagnostics'], 'raw banner/diagnostics recomputed')
-        command = [start['engine'], '--headless', '--path', start['stage']]
-        if phase == 'import':
-            command += ['--editor', '--import', '--quit', '--verbose']
-        else:
-            script = ('bootstrap/parse_full_dependencies.gd' if phase == 'parse'
-                      else 'starters/' + phase + '.gd')
-            command += ['--script', str(origin / script), '--verbose']
-            require(row['starter_sha256'] == files[script]['sha256'], 'exact starter pin')
-            if test:
-                expected_starter = ('extends ' + json.dumps('res://' + test) + '\nconst Guard := preload('
-                    + json.dumps(str(origin / 'bootstrap/profile_guard.gd'))
-                    + ')\nfunc _initialize() -> void:\n\tif not Guard.activate():\n\t\tquit(97)\n\t\treturn\n\tsuper._initialize()\n')
-                require(text(script) == expected_starter, 'unchanged guarded starter bytes')
-        command += ['--log-file', str(origin / phase / 'engine-native.log')]
-        require(row['command'] == process['argv'] == command, 'exact native argv/logger')
-        for filename, field, event in [('started.json', 'actual_start_binding', 'ENGINE_STARTED'),
-                                        ('ended.json', 'actual_end_binding', 'ENGINE_ENDED')]:
-            binding = read(phase + '/' + filename)
-            require(binding == process[field] and binding['event'] == event
-                    and binding['actual_pid'] == binding['pid'] == pid
-                    and binding['owner_pid'] == start['owner_runner_pid']
-                    and binding['command'] == binding['argv'] == command, 'actual START/END ownership')
-        binding = process['actual_start_binding']
-        identity = binding['current_process_identity']
-        if identity is None:
-            require(binding['tracked_child_ended_before_initial_probe'] is True, 'early ended tracked child')
-        else:
-            require(binding['live_identity_exact'] is True and identity == {
-                'pid': pid, 'ppid': start['owner_runner_pid'], 'pgid': pid, 'args': ' '.join(command)},
-                'recorded live child PID/PPID/PGID/argv')
-        finish = process['actual_end_binding']
-        require(finish['engine_ended'] is True and finish['timed_out'] is False
-                and finish['lifecycle_error'] is None and finish['exit_code'] == 0
-                and finish['actual_process_exit_code'] == 0
-                and finish['start_receipt_written'] is True
-                and finish['monotonic_ns'] >= binding['monotonic_ns'], 'complete native END')
-        cleanup = read(phase + '/adapter-owned-cleanup.json')
-        require(cleanup == process['adapter_owned_cleanup'], 'raw adapter cleanup')
-        cleanup_gate(cleanup)
-        capture = row['outer_actual_capture']
-        require(read(phase + '/outer-owned-finally.json') == {
-            k: v for k, v in capture.items()
-            if k not in ('outer_receipt_written', 'outer_receipt_error', 'passed')},
-            'whole raw outer receipt')
-        require(capture['actual_captured_pids'] == [pid] and capture['passed'] is True
-                and capture['all_captured_ended'] is True and capture['adapter_exception'] is None
-                and capture['outer_cleanup_errors'] == [] and capture['outer_receipt_error'] is None
-                and capture['outer_receipt_written'] is True
-                and capture['all_cleanup_before_outer_receipt'] is True
-                and capture['foreign_process_or_group_signals'] == 0
-                and row['engine_ended'] is True and row['exit_code'] == 0, 'owned outer capture')
-        outer_cleanup(capture['cleanup'], [pid])
-        startup = read(phase + '-startup-profile-before.json')
-        require(startup == {'path': row['whole_startup_profile_after']['path'], 'existed': False,
-                            'files': {}, 'before_native_spawn': True}, 'fresh startup profile')
-        require(row['whole_startup_profile_after']['fresh_before_engine'] is True,
-                'startup fresh before engine')
-        name = row['profile_startup_name']
-        require(re.fullmatch('TheTree-PCK-tests-[0-9a-f]{32}-standard-startup-' + phase, name)
-                and Path(startup['path']).name == name and row['private_project_fields'] == 2
-                and row['private_project_sha256'] == hashlib.sha256(shared.private_project(
-                    (shared.HERE.parent / 'project.godot').read_bytes(), name)).hexdigest(),
-                'exact two-field startup isolation')
-        for label in ('startup', 'runtime'):
-            if label == 'runtime' and phase == 'import':
-                continue
-            whole = row['whole_' + label + '_profile_after']
-            archive = confined(out, 'profiles/' + phase + '/' + label)
-            require(archive.is_dir() and shared.inventory(archive)
-                    == whole['files'], 'complete retained private profile')
-        if phase != 'import':
-            guard = read(phase + '-profile.json')
-            runtime = Path(row['whole_runtime_profile_after']['path'])
-            name = guard['custom_user_dir_name']
-            require(re.fullmatch('TheTree-PCK-tests-[0-9a-f]{32}-standard-runtime-' + phase, name)
-                    and runtime.name == name and guard['verified'] is True
-                    and guard['conditions'] == [True] * 5 and guard['conditions_checked'] == 5
-                    and guard['fresh_before_parent_initialize'] is True
-                    and guard['profile_writes_before_guard'] == 0
-                    and guard['actual_user_data_dir'] == guard['expected_user_data_dir'] == str(runtime)
-                    and guard['globalized_probe'] == str(runtime / 'guard-probe')
-                    and guard['project_settings_persisted'] is False, 'all unchanged Guard conditions')
-            require(row['actual_private_profile'] == {
-                'report': guard, 'report_sha256': files[phase + '-profile.json']['sha256'],
-                'whole_files': row['whole_runtime_profile_after']['files']}, 'whole raw Guard report')
-            require(row['controlled_environment'] == {
-                'THE_TREE_PACK_PROFILE_NAME': name, 'THE_TREE_PACK_PROFILE_EXPECTED': str(runtime),
-                'THE_TREE_PACK_PROFILE_REPORT': str(origin / (phase + '-profile.json')),
-                'THE_TREE_FULL_PARSE_PATHS': str(origin / 'parse-paths.json'),
-                **({'THE_TREE_AUDIO_TEARDOWN_PROOF_DIR': str(origin / (phase + '-teardown/owned-audio')),
-                    'THE_TREE_AUDIO_FIXTURE_CONTROL_PROOF': str(origin / (phase + '-teardown/control.json'))}
-                   if test and policy['suite_policies'].get(test, {}).get('ordinary_cleanup_prepared') else {})},
-                'exact controlled Guard/proof environment')
-        else:
-            require(row['controlled_environment'] == {}, 'fresh import environment')
-        if phase == 'parse':
-            require(re.findall(r'(?m)^FULL_DEPENDENCY_PARSE checks=([0-9]+) failures=([0-9]+)\n', raw)
-                    == [('308', '0')] and row['actual_parse_checks'] == 308, 'unique all-script parse marker')
-        if test:
-            parsed = markers.parse_raw(test, raw, contracts, source[test]['sha256'])
-            require(parsed['passed'] and row['completion'] == parsed
-                    and row['reported_checks'] == parsed['checks']
-                    and row['reported_failures'] == parsed['failures']
-                    and row['completion_marker'] == parsed['marker'] and row['collector_errors'] == [],
-                    'source-pinned raw completion marker')
-            require(row['source_sha256'] == row['source_sha256_end'] == source[test]['sha256'],
-                    'exact test source before/after')
-            p = shared.phase_policy(test, Path(refs[test]['path']), policy['suite_policies'])
-            require(row['policy'] == p, 'current exact suite policy')
-            if p['ordinary_cleanup_prepared']:
-                proof = owners.ordinary_gate(confined(out, phase + '-teardown'), pid, out,
-                                             p['ordinary_control_labels'])
-                require(proof == relocated(row['ordinary_owner_pairs']), 'full ordinary/audio ownership proof')
-        require(row['generated_reports'] == {}, 'fixed narrow roster has no generated source reports')
-    require(end['actual_captured_PIDs'] == pids, 'all nine captured engines')
-    outer_cleanup(end['final_owned_cleanup'], pids)
-    require(all(end[k] == v for k, v in shared.totals(tests, ROSTER).items()), 'recomputed exact totals')
-    require(shared.inventory(confined(out, 'stage'), stage=True) == source, 'entire retained source/settings exact')
-    for name, pin in shared.read(shared.SUPPORT / 'bootstrap-scripts.json').items():
-        require(text('bootstrap/' + name).encode() == pin['text'].encode()
-                and files['bootstrap/' + name]['sha256'] == pin['sha256'], 'unchanged bootstrap/Guard pins')
-    require(inventory(out) == dict(files, **{'receipt.json': receipt_pin}),
-            'whole raw evidence unchanged during verification')
-    require(content_map(shared.source_refs(shared.HERE.parent)) == source,
-            'whole current source unchanged during verification')
-    print(json.dumps({'verified': True, 'actual_suites': 7, 'parse_checks': 308,
-                      'actual_checks': end['actual_all_roster_checks'], 'engines_started': 0,
-                      'formal_acceptance': False, 'original_unit_complete': False}))
-    return 0
-
-
-def main(argv=None):
-    argv = list(sys.argv[1:] if argv is None else argv)
-    # No argparse abbreviation, repeated flags, = aliases or positional tokens.
-    parser = argparse.ArgumentParser(description=__doc__, allow_abbrev=False)
-    parser.add_argument('--output', required=True)
-    modes = parser.add_mutually_exclusive_group()
-    modes.add_argument('--collect', action='store_true', help='Root only; fresh native collection')
-    modes.add_argument('--prepare-only', action='store_true')
-    seen = set()
-    i = 0
-    while i < len(argv):
-        flag = argv[i]
-        require(flag in ('--output', '--collect', '--prepare-only', '--help')
-                and flag not in seen, 'unknown, duplicate or malformed flag')
-        seen.add(flag)
-        if flag == '--output':
-            i += 1
-            require(i < len(argv) and argv[i] and not argv[i].startswith('--'), 'output value required')
-        i += 1
-    args = parser.parse_args(argv)
-    args.timeout = 1200
-    root = shared.HERE.parent
-    out = plain_path(args.output)
-    refs = shared.source_refs(root)
-    require(set(ROSTER).issubset(shared.roster(root)), 'normal discovery includes narrow roster')
-    markers = shared.module('p18_exact_markers', shared.HERE / 'strict_test_markers.py')
-    contract_path = root / 'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json'
-    contract_sha = shared.sha(contract_path)
-    contracts = markers.load_contracts(contract_path)
-    require(all(name in contracts for name in ROSTER), 'complete marker roster')
-    policy = shared.read(shared.SUPPORT / 'suite-policy.json')
-    shared.policy_coverage(ROSTER, refs, policy)
-    for test in ROSTER:
-        shared.phase_policy(test, Path(refs[test]['path']), policy['suite_policies'])
-    for test in ROSTER[:2]:
-        require(contracts[test]['source_sha256_at_schema_audit'] == refs[test]['sha256'],
-                'new strict source-hashed marker')
-    parse_paths = ['res://' + name for name in sorted(refs) if name.endswith('.gd')]
-    require(len(parse_paths) == 308, 'exact expected parse count')
-    if args.prepare_only:
-        ancestor = out.parent
-        while not ancestor.exists():
-            ancestor = ancestor.parent
-        free = shutil.disk_usage(ancestor).free
-        size = sum(p['bytes'] for p in refs.values())
-        print(json.dumps({'roster': ROSTER, 'source_files': len(refs), 'source_bytes': size,
-            'free_bytes': free, 'conservative_required_bytes': size + shared.MIN_SPACE,
-            'capacity_available': free >= size + shared.MIN_SPACE, 'parse_paths': 308,
-            'future_native_phases': 9, 'actual_checks': None, 'engines': 0, 'stages': 0,
-            'formal_acceptance': False}))
-        return 0
-    if args.collect:
-        require(not out.exists() and out.parent.is_dir(), 'fresh output with existing parent required')
-        require(not out.is_relative_to(root), 'private collection outside source tree')
-        return collect(args, root, out, refs, markers, contracts, policy,
-                       contract_path, contract_sha, parse_paths)
-    return verify(out, refs, markers, contracts, policy, contract_sha, parse_paths)
-
-
-if __name__ == '__main__':
-    try:
-        raise SystemExit(main())
-    except (AssertionError, OSError, ValueError, KeyError, TypeError) as error:
-        print(type(error).__name__ + ': ' + str(error), file=sys.stderr)
-        raise SystemExit(1)
Author	SHA1	Message	Date
Takeshi	15168ffd47	Reconcile mana proposal progress and pin arithmetic preflight	2026-10-13 17:06:46 +09:00
Takeshi	231085cf29	Record authorized mana proposal repair and preserved artifact compression	2026-10-13 17:03:09 +09:00
Takeshi	25feff8852	Record P24 normal placement and modal preservation evidence	2026-10-13 16:36:07 +09:00
Takeshi	018ae7d6d7	Pin P24 old-slot preservation and exact restored snapshot evidence	2026-10-13 16:02:21 +09:00
Takeshi	c11123f7ee	Record P24 approved repair and normal OS evidence; preserve P18 review gaps	2026-10-13 15:43:03 +09:00
Takeshi	a0f556e135	Preserve P18 native evidence and deliver recorded Opus repair direction	2026-10-13 14:34:06 +09:00
Takeshi	c77639a9d7	Record Opus-selected Astra P18 implementation dispatch	2026-10-13 14:04:40 +09:00