P18-01-CODE: 原本関係モデル・旧値保全・Runtime保存と読取経路

Define P18 original relationship preservation code contract
2026-10-13 14:40:02 +09:00 · 2026-10-13 14:25:06 +09:00 · 2026-10-13 14:02:05 +09:00 · 2026-10-13 13:47:57 +09:00 · 2026-10-13 13:30:25 +09:00 · 2026-10-13 13:28:38 +09:00
68 changed files with 5912 additions and 26 deletions
@@ -330,6 +330,7 @@ func initialize(clock: SimulationKernel, state: Variant, seed := DEFAULT_WORLD_S
 	register_command_executor(&"begin_staff_task", Callable(self, "_execute_begin_staff_task"))
 	register_command_executor(&"progress_staff_task", Callable(self, "_execute_progress_staff_task"))
 	register_command_executor(&"create_relationship", Callable(self, "_execute_create_relationship"))
+	register_command_executor(&"register_original_relationship", Callable(self, "_execute_register_original_relationship"))
 	register_command_executor(&"change_relationship", Callable(self, "_execute_change_relationship"))
 	register_command_executor(&"attack_relationship_shield", Callable(self, "_execute_attack_relationship_shield"))
 	register_command_executor(&"request_route_lock", Callable(self, "_execute_request_route_lock"))
@@ -1054,8 +1055,15 @@ func _restore_snapshot_internal(snapshot: Dictionary, recovery_mode: bool) -> bo
 	):
 		return false
 	var restored_relationships := RelationshipService.new()
+	restored_relationships.configure_original_identity_validator(
+		func(payload: Dictionary) -> bool: return _original_relationship_identities_valid(payload, restored_staff)
+	)
 	if not restored_relationships.restore_snapshot(runtime_data[&"relationships"]):
 		return false
+	for relationship: RelationshipState in restored_relationships.get_relationships():
+		for actor_id: StringName in [relationship.actor_a_id, relationship.actor_b_id]:
+			if actor_id != &"player" and not restored_staff.has_staff(actor_id) and not restored_guests.has_guest(actor_id):
+				return false
 	var restored_events := EventService.new()
 	for raw_definition: Variant in runtime_data[&"event_definitions"]:
 		var definition := EventDefinition.from_variant(raw_definition)
@@ -5378,6 +5386,9 @@ func _initialize_s4_relationship_events() -> void:
 func _configure_relationship_event_boundaries() -> void:
 	if relationship_service == null or event_service == null:
 		return
+	relationship_service.configure_original_identity_validator(
+		func(payload: Dictionary) -> bool: return _original_relationship_identities_valid(payload, staff_service)
+	)
 	relationship_service.configure_candidate_callback(
 		Callable(self, "_on_relationship_threshold_candidate")
 	)
@@ -6759,6 +6770,30 @@ func _execute_progress_staff_task(command: SimulationCommand) -> CommandResult:
 	result.command_id = command.command_id
 	return result

+func _original_relationship_identities_valid(payload: Dictionary, staff_registry: StaffService) -> bool:
+	if payload.get("protagonist_id") != "player" or staff_registry == null:
+		return false
+	var subject := StringName(payload.get("subject_id", ""))
+	var rival := StringName(payload.get("rival_id", ""))
+	if subject == &"player" or rival == &"player" or subject == rival or not staff_registry.has_staff(subject):
+		return false
+	var heroine_definition := mvp_content_catalog.get_entry(&"unique_characters", subject)
+	var rival_definition := mvp_content_catalog.get_entry(&"unique_characters", rival)
+	var subject_staff := staff_registry.get_staff(subject)
+	return subject_staff.employment_kind == StaffRuntime.EmploymentKind.UNIQUE \
+		and heroine_definition.get(&"role_id") == String(subject_staff.role_id) \
+		and heroine_definition.get(&"character_kind") == "heroine" \
+		and rival_definition.get(&"character_kind") == "rival" \
+		and heroine_definition.get(&"counterpart_id") == String(rival) \
+		and rival_definition.get(&"counterpart_id") == String(subject)
+
+
+func _execute_register_original_relationship(command: SimulationCommand) -> CommandResult:
+	var result := relationship_service.register_original_relationship(command.payload)
+	result.command_id = command.command_id
+	return result
+
+
 func _execute_create_relationship(command: SimulationCommand) -> CommandResult:
 	var actor_a_id := StringName(command.payload.get(&"actor_a_id", command.payload.get("actor_a_id", "")))
 	var actor_b_id := StringName(command.payload.get(&"actor_b_id", command.payload.get("actor_b_id", "")))
@@ -10859,6 +10894,7 @@ func get_staff_management_report() -> Dictionary:
 			&"can_edit": block_reason.is_empty(),
 			&"assignment_block_reason": block_reason,
 			&"unique_contract": _staff_unique_contract_report(staff),
+			&"original_relationship": relationship_service.get_original_relationship(staff.staff_id),
 		})
 	var facilities: Array[Dictionary] = []
 	for facility: FacilityInstance in facility_service.get_instances():
@@ -1730,7 +1730,7 @@ P00〜P29のIDを維持して過去記録との対応を保つ。各項目には

 ### P18 関係パラメータ 盾 確定遷移

-現在地: 原本の関係3値と盾の全面接続は未着手。
+現在地: P18-01の原本・旧5軸保存の照合とバックエンド契約準備に着手。Opus 5.5は保存移行の複雑さからAstraを選択。3値・盾の実接続、通常表示一致、承認済み初期値、検証・独立レビューは未受入。

 統合前提: P03, P17。原本対応: B-7.1, B-7.2, B-7.3。

@@ -2,6 +2,28 @@
  "schema_version": 1,
  "scope": "exact per-suite completion label/schema; all check counts from actual raw only",
  "rows": [
+    {
+      "test": "tests/s4/test_original_relationship_model.gd",
+      "template": "Original relationship model: <checks> checks, <failures> failures",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "ad509f5fb67ab91e1d1d99a08af51e4695e411b9a2541ea63ee22b1555cb0924",
+      "authority": {
+        "path": "docs/spec/acceptance/P18-01-code-r01.json",
+        "scope": "new backend suite marker; native execution pending"
+      }
+    },
+    {
+      "test": "tests/s4/test_original_relationship_runtime.gd",
+      "template": "Original relationship runtime: <checks> checks, <failures> failures",
+      "required": true,
+      "fixed_check_count_used": false,
+      "source_sha256_at_schema_audit": "374f3d31a65d2f2b62dfef29721c8c838575b856f4fa5a0bca31c6ba4c7e09dd",
+      "authority": {
+        "path": "docs/spec/acceptance/P18-01-code-r01.json",
+        "scope": "new backend suite marker; native execution pending"
+      }
+    },
    {
      "test": "tests/ui/test_selection_departure.gd",
      "template": "Selection departure: <checks> checks, <failures> failures",
@@ -0,0 +1,19 @@
+# Owner-authorized model routing
+
+Claude commander and independent reviewer: `claude-opus-5-5`.
+Codex default: `gpt-6.1-sol`. Alternative: `gpt-6-astra`, only when Claude Opus 5.5 selects it for the task and records a reason.
+
+Use the persisted `owner_model_cli.py` coordinator entry point for commander and Codex dispatch/run, with `OWNER_RUNNER_CONTROL` pointing to the reviewed Runner checkout. It preserves ordinary Runner decisions, leases, contracts, sandbox, counters, acceptance and review gates. It is not a change to worker source or registered project digests.
+
+The commander result adds `codex_model` and `codex_model_reason`. For a Codex run, the latest recorded commander proposal must be for the same task, have action `run`, and select an allowed model with a nonempty reason. Pass that exact recorded decision to ordinary dispatch. A model-selection-only `wait` decision never starts an implementation.
+
+Example (replace PROJECT, TASK, CONTROL with actual registered values):
+
+```sh
+OWNER_RUNNER_CONTROL=CONTROL python3 -B owner_model_cli.py --project PROJECT commander TASK --request 'Choose next action and Codex model under owner policy'
+OWNER_RUNNER_CONTROL=CONTROL python3 -B owner_model_cli.py --project PROJECT dispatch recorded-decision.json
+```
+
+New-project defaults are also set in the Runner policy. Existing frozen project configurations are not rewritten; the explicit adapter applies owner-authorized model selection at invocation. Bare legacy CLI/MCP dispatch does not provide this routing; use this entry point for future Codex invocations. Antigravity model is unchanged.
+
+Configuration and selected argv are distinct from actual inference evidence. Confirm the worker execution artifact after its next authorized run; no implementation is launched solely to test this setting.
@@ -0,0 +1,69 @@
+"""Owner-requested model-only adapter; ordinary Runner CLI and gates unchanged."""
+import os
+import json
+import sys
+from pathlib import Path
+
+control = Path(os.environ['OWNER_RUNNER_CONTROL']).resolve()
+sys.path.insert(0, str(control))
+from runner.core import Runner
+
+ALLOWED_CODEX_MODELS = ('gpt-6.1-sol', 'gpt-6-astra')
+original_llm = Runner.llm
+
+def owner_model_llm(self, task_id, role, service, prompt, cwd, schema):
+    if service == 'claude' and role == 'commander':
+        schema = json.loads(json.dumps(schema))
+        schema['required'] += ['codex_model', 'codex_model_reason']
+        schema['properties']['codex_model'] = {'type': 'string', 'enum': list(ALLOWED_CODEX_MODELS)}
+        schema['properties']['codex_model_reason'] = {'type': 'string', 'minLength': 1}
+        prompt = ('Owner-authorized model policy: You, Claude Opus 5.5, select the Codex worker model for this task. '
+                  'Default gpt-6.1-sol. Select gpt-6-astra only when task difficulty warrants it; '
+                  'state concrete reasons and consider quality, time and usage. Return codex_model and codex_model_reason '
+                  'with the ordinary decision. Model choice does not authorize a run, repair, cap change or acceptance waiver.\n' + prompt)
+    if service == 'codex':
+        row = self.db.execute(
+            "SELECT data FROM events WHERE task_id=? AND event='commander_proposal' ORDER BY id DESC LIMIT 1",
+            (task_id,)).fetchone()
+        if not row:
+            raise ValueError('Codex model selection requires recorded Claude commander decision')
+        decision = json.loads(row[0])['decision']
+        chosen = decision.get('codex_model')
+        if decision.get('task_id') != task_id or decision.get('action') != 'run' or chosen not in ALLOWED_CODEX_MODELS or not str(decision.get('codex_model_reason', '')).strip():
+            raise ValueError('A recorded Claude run decision with explicit model and reason is required')
+        self._owner_codex_model = chosen
+        try:
+            return original_llm(self, task_id, role, service, prompt, cwd, schema)
+        finally:
+            del self._owner_codex_model
+    return original_llm(self, task_id, role, service, prompt, cwd, schema)
+
+Runner.llm = owner_model_llm
+original = Runner.provider_argv
+
+def owner_model_argv(self, service, role, runtime, schema):
+    argv = original(self, service, role, runtime, schema)
+    if service in ('claude', 'codex'):
+        if '--model' in argv:
+            position = argv.index('--model')
+            del argv[position:position + 2]
+        argv += ['--model', 'claude-opus-5-5' if service == 'claude' else getattr(self, '_owner_codex_model', 'gpt-6.1-sol')]
+    return argv
+
+Runner.provider_argv = owner_model_argv
+original_packet = Runner.packet
+
+def packet_with_actual_evidence(self, task_id, role, sha=None):
+    packet = original_packet(self, task_id, role, sha)
+    extra = os.environ.get('OWNER_REVIEW_SUPPLEMENT')
+    if role == 'reviewer' and extra:
+        prefix, data = packet.split('\nDATA:\n', 1)
+        body = json.loads(data)
+        body['coordinator_actual_runtime_evidence'] = json.loads(Path(extra).read_text())
+        assert len(json.dumps(body).encode()) < 500000, 'unchanged complete packet size guard'
+        packet = prefix + '\nDATA:\n' + json.dumps(body, ensure_ascii=False)
+    return packet
+
+Runner.packet = packet_with_actual_evidence
+from runner.cli import main
+main()
@@ -0,0 +1,58 @@
+{
+  "plan_id": "P07-01",
+  "canonical_head": "020d6b014e07012053dd7ac734b1e4cd882b08b3",
+  "scope": "Independent existing-source applicability audit; no new implementation or formal unit completion",
+  "original_authority": "docs/traceability/original/BASELINE.txt:74",
+  "original_required": "雨:客足減/滞在延長; 嵐:新規客ゼロ; マナ霧:魔法効率UP/興奮度UP; plan also requires natural change and same-condition natural guest differences",
+  "prior_source_commit": "4cefcff849d4dc1211caa5066e24bfae666cc2f4",
+  "prior_source_files": 1304,
+  "current_source_missing": [],
+  "current_source_differences": [
+    "assets/kenney/tiny_dungeon/Tiled/sampleMap.tmx",
+    "assets/kenney/tiny_dungeon/Tiled/sampleSheet.tsx",
+    "assets/kenney/tiny_dungeon/Visit Kenney.url",
+    "assets/kenney/tiny_dungeon/Visit Patreon.url",
+    "assets/kenney/tiny_town/Tiny Dungeon (base pack).url",
+    "assets/kenney/tiny_town/Visit Kenney.url",
+    "assets/kenney/tiny_town/Visit Patreon.url"
+  ],
+  "whole_source_applicability": false,
+  "actual_existing_weather_proofs": [
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-03-full173-native-r01/007-receipt.json",
+      "sha256": "870780f304efdfd54546161eae9545be4e72d562fac34ca4b7aa3d8c62a14937",
+      "test": "tests/environment/test_runtime_weather.gd",
+      "passed": true,
+      "actual_pid": 22729,
+      "reported_checks": 16,
+      "source_sha256": "047bb23573ef6a4c7e2483e3a2bfd244a3e2061fbf65c33fa08a52952a2655a0"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-03-full173-native-r01/008-receipt.json",
+      "sha256": "6ad5bd805c0bfff1aa49efe92e3c3640ba55d1d3ae7692c47490bf18d73a69fa",
+      "test": "tests/environment/test_weather_recovery.gd",
+      "passed": true,
+      "actual_pid": 22757,
+      "reported_checks": 14,
+      "source_sha256": "d71bf3fbf1fa1d43eae2c38161a44b18fc6cc34477a1ab9dd12fca54e4ee9089"
+    },
+    {
+      "path": "artifacts/original-completion-2026-10-02/p24-03-full173-native-r01/009-receipt.json",
+      "sha256": "33344e9df12d069450bb7294619b15751a57127b783ae5551ab5cc1344065840",
+      "test": "tests/environment/test_weather_timeline.gd",
+      "passed": true,
+      "actual_pid": 22775,
+      "reported_checks": 30,
+      "source_sha256": "212dab5036f90ae2eaf1b75e0c0adaea4a572cdbfb31b07d0ef4336def4f4791"
+    }
+  ],
+  "completed_unit": false,
+  "accepted_original_delivery_increment": 0,
+  "known_unmet": [
+    "Rain arrival reduction and stay extension not implemented in WeatherTimeline, approved multipliers/unit/update order missing",
+    "Mana fog production efficiency and excitement bindings plus approved magnitudes missing",
+    "Natural weather generation policy/duration/probability not approved or implemented; explicit schedule is not natural generation",
+    "Ordinary operating guest distribution comparisons and separate-process resume acceptance remain required"
+  ],
+  "next_action": "Preserve existing storm/save boundary proofs when hashes/config/inputs match. Do not invent rain/fog/probability values. This audit is independent of current UI/Runner source edits; no duplicated full regression."
+}
@@ -0,0 +1,79 @@
+# P18-01-CODE implementation handoff
+
+Status: submitted for Runner validation; no acceptance or unit completion claimed.
+
+Scope: dedicated original relationship state, lossless legacy snapshot preservation,
+Runtime registration and read projection, and the contract-listed tests and collector.
+Production initial values and gameplay coefficients are not supplied or inferred.
+
+Validation: worker static inspection only; authoritative native local and affected
+validation, independent review, and integration belong to Runner.
+
+Source inspection: HEAD matches d2a1f80a613e7c77b02b941026bc49c2d85db863.
+The acceptance specification without its final newline matches the contract SHA256
+04e9ae701b6ee1e399542564add695ca7fce54499e52dd2e907b1dbdc23a366d.
+
+## Submitted behavior
+
+- OriginalRelationshipState stores explicit directional subject/protagonist/rival
+  facts with Affection, Lust, Netorare and shield current/max. All fields are
+  required for a configured record. Numeric inputs must be finite numbers;
+  shield current must be nonnegative and at most max, and max equals Affection.
+  No additional emotion ranges, coefficients or production values are imposed.
+- RelationshipService retains its five-axis API. Its v2 snapshot contains the
+  whole v1 payload under `legacy`, plus separate `original_relationships`.
+  Top-level `relationships` is a compatibility projection for existing consumers;
+  disagreement with `legacy.relationships` is rejected. Additional legacy fields,
+  raw aliases, collection order and untouched values survive migration. The
+  existing normalized state remains usable; only actual legacy changes are merged
+  into retained raw facts. Aliases never initialize original fields.
+- Registration uses `register_original_relationship` with the complete payload.
+  Runtime validates the protagonist against `player`, the subject against hired
+  UNIQUE staff and its canonical role, and heroine/rival identities and reciprocal
+  counterpart references against the existing unique-character catalog. Rival
+  catalog membership does not invent recruitment. No new original update policy,
+  contact, route, attack, threshold or duel behavior is defined.
+- Snapshot restore validates candidates before replacing live services, then
+  rebinds the identity validator to live staff. Existing legacy actor references
+  must resolve against player, restored staff or restored guests.
+- Every staff-management row exposes `original_relationship`. Missing records
+  have `configured: false` and null values, distinct from explicit zero. Configured
+  projections are copies, so reads and caller edits cannot change service state.
+
+## Validation and handoff
+
+Two new s4 suites exercise explicit/unset/zero data, malformed and nonfinite values,
+identity invariants, lossless raw aliases/extensions, new and mixed round trips,
+atomic service/Runtime rejection, actual hiring/commands, restore/rebind and reports.
+Existing test bodies and limits are unchanged. New marker and suite-policy rows
+are pinned to the exact new test sources.
+
+`python3 -B tools/run_p18_relationship_tests.py --prepare-only` previews the exact
+seven-suite roster, source bytes, capacity and all-script parse count without
+engines, profiles, stage creation or test execution. The native collector reuses
+run_all_tests.source_refs/execute_phase and the existing Guard, owned_outer,
+diagnostic, artifact, PID, marker and cleanup gates. It stops at the first failure;
+Runner owns repair/validation sequencing and independent review.
+
+Worker checks: Python AST syntax, JSON/source-marker consistency, allowed-path
+inspection, unchanged pre-existing marker/policy records, and git diff whitespace.
+Native import, GDScript parse and all seven suites remain **unexecuted** by worker.
+Worker reinspection on 2026-10-13 confirmed the existing submitted implementation
+and repeated Python AST, specification digest, exact new marker/policy source
+hashes, unchanged existing marker/policy records, and `git diff --check`.
+Prepare-only exited 0: seven suites, 1,311 source files / 67,287,056 bytes,
+308 parse paths, nine future native phases, 381,859,856 conservative required
+bytes and 1,773,187,072 available bytes. Engines and stages were both zero;
+actual checks were null and formal acceptance was false. Capacity is a preview
+at that instant, not a reservation or native result.
+An initial shell here-document temporary-file attempt was denied with
+`operation not permitted`; normal allowed-path patch edits worked. No isolation
+rule or permission was relaxed.
+
+P18-C-1 through P18-C-3 are implementation submissions, not accepted results.
+P18-C-4 awaits Runner native local/affected evidence, separate Opus review,
+integration and final affected validation. The original P18-01 unit remains
+in_progress: ordinary Japanese UI rendering/equality, approved production values,
+all-seven recruitment, final full required roster and applicable Windows final
+acceptance remain outstanding. No git writes, other agents or Runner controls
+were used by worker.
@@ -0,0 +1,80 @@
+# P18-01-CODE recorded repair 2/2: collection / verification split
+
+Resumes candidate `f76ad96990a4d7371b6ab667df0a068cc06be798`. No counter reset,
+game/test reconstruction, Runner change, commit or integration. Changes are confined
+to the narrow collector and this note. Existing game behavior evidence remains the
+retained Astra preflight; this worker did not rerun or reinterpret it as final proof.
+
+## Modes
+
+- Default: `python -B tools/run_p18_relationship_tests.py --output {build_dir}/p18-relationship-evidence`.
+  Read-only verification in the ordinary registered sandbox. No subprocess call,
+  process discovery, native launch, or access to the external player/private profiles.
+  Current checkout source/settings/support/marker bytes and the locally configured
+  `godot` binary are read for pins. Receipt-provided paths never select an external
+  file to open. Original absolute paths remain historical identity strings.
+- `--collect`: Root orchestration only, outside Seatbelt. Uses the existing
+  `source_refs`, private source copy, `execute_phase`, owned_outer, Guard, logger,
+  diagnostic, marker and bounded cleanup contracts unchanged. Fresh output outside
+  the checkout, with an existing parent, is required. Runs import, all 308 scripts,
+  and exactly the seven fixed tests once. Owned profile bytes are archived after
+  each phase. The final verifier runs after collection; no duplicate regression.
+  “Root” identifies the authorized orchestrator, not a requirement to run as Unix uid 0.
+- `--prepare-only`: reports source bytes, available capacity, 308 parse paths and
+  the exact seven-test/nine-phase roster; creates no stage/profile and starts no engine.
+
+Only `--output`, `--collect`, `--prepare-only` and help are accepted. Duplicate,
+abbreviated, unknown and malformed flags, combined modes, traversal, symlinks,
+nonregular evidence and hardlinked evidence reject. Verification never rewrites
+raw paths or files. The ordinary-owner pure proof reader maps only the original
+output prefix to the supplied output and checks confinement before opening files.
+
+## Receipt schema
+
+`receipt.json` (`guarded-p18-v2`) is written last after successful collection.
+It contains the full relative source content map (bytes/SHA-256, no checkout-path
+dependency), its canonical JSON SHA-256, project and marker-contract SHA-256,
+engine SHA-256, and a complete relative file inventory with byte sizes/SHA-256.
+The inventory covers the retained private source, engine bytes, bootstraps,
+starters, raw stdout/stderr/native logger, phase receipts, START/END/process and
+both cleanup records, Guard reports, ordinary/audio ownership proofs, typed
+snapshots, and complete archived startup/runtime profiles. Only the enclosing
+receipt itself is outside its own inventory.
+
+Verification checks the inventory and recomputes raw marker/diagnostic gates,
+source and helper pins, exact commands, START/END identity, all nine distinct PIDs
+and bounded cleanup, Guard conditions, proof gates, complete player before/after
+inventory equality, and seven test rows against nine phase receipts. It requires
+one exact `FULL_DEPENDENCY_PARSE checks=308 failures=0` marker. Old v1, absent,
+incomplete, mismatched or altered evidence rejects. A source change, including
+this collector, requires fresh Root collection; no source exemptions exist.
+
+## Worker checks and environment observations
+
+AST/in-memory compile and prepare-only passed. Prepare-only found 1311 source
+files, 308 parse scripts, seven tests and nine future phases, with sufficient
+reported capacity. Synthetic negative checks rejected missing receipts, changed
+hashes, symlinks, relative and absolute escapes, incomplete files and invalid or
+duplicate flags/mode combinations. Those checks replaced subprocess entry points
+and default-player access with fail-fast functions; neither was called. No native
+test, full regression, `--collect`, Runner operation or review was executed.
+
+Environment evidence: a shell here-document failed with
+`zsh:1: can't create temp file for here document: operation not permitted`.
+The `python` alias was unavailable (`zsh:1: command not found: python`);
+worker checks used `/usr/bin/python3 -B`. Ordinary authorized file edits and
+temporary negative fixtures under the task allocation succeeded. No isolation
+or permission policy was changed. Root/Runner must provide the configured
+`python` command used by the fixed validator argv.
+
+## Root next steps
+
+1. On the final unchanged source, run the native `--collect` exactly once outside
+   Seatbelt into the allocation build directory's fresh `p18-relationship-evidence`.
+   Do not reuse old v1 evidence or run collection from ordinary Runner validation.
+2. Run ordinary Runner validation using the fixed default verify-only argv.
+3. Obtain a separate Opus review, then perform the authorized integration and
+   affected final validation. This worker submits implementation, not acceptance.
+
+P18-01 remains incomplete: ordinary UI rendering/display equality, approved initial
+values, the full final roster and applicable Windows final acceptance remain unmet.
@@ -0,0 +1,34 @@
+[
+  {
+    "id": "P18-C-1",
+    "requirement_id": "P18-01-CODE",
+    "text": "Directional original Affection/Lust/Netorare and shield dedicated state; protagonist versus rival identities explicit; shield_max equals configured Affection. Unset is distinct from zero. No invented initial values, ceilings, thresholds, reduction or change coefficients; supplied numbers are validation fixtures only.",
+    "validation_ids": [
+      "p18-model"
+    ]
+  },
+  {
+    "id": "P18-C-2",
+    "requirement_id": "P18-01-CODE",
+    "text": "Version-1 legacy five-axis relationships remain usable and all raw fields/values are preserved through a version-2 round trip. No affinity->Affection or dependence->Netorare original conversion. New original state is separate. Missing original records are unconfigured, not guessed zero values. Unknown versions, wrong types, duplicate identities, invalid references and corrupt original payloads reject atomically, preserving prior service/Runtime and input bytes.",
+    "validation_ids": [
+      "p18-model"
+    ]
+  },
+  {
+    "id": "P18-C-3",
+    "requirement_id": "P18-01-CODE",
+    "text": "Real Runtime command/service registration, snapshot create/restore and rebind, player/staff identity validation, read-only original relationship projection through get_staff_management_report or an equally actual Runtime read-model. No unused model stub. Exact new/legacy/mixed round trips, restore failures, no mutation by reads, legacy unchanged behavior and events; no contacts, routes or duel behavior newly invented.",
+    "validation_ids": [
+      "p18-model"
+    ]
+  },
+  {
+    "id": "P18-C-4",
+    "requirement_id": "P18-01-CODE",
+    "text": "Meaningful native isolated local and affected regression on exact source/settings/input with strict marker/source/artifact/PID/profile/cleanup provenance, separate Opus review, integration and affected final validation. This backend support task never claims the 88-delivery-unit P18-01 complete: normal UI rendering/display equality, approved initialization, required full final roster and applicable Windows final acceptance remain at the original unit until all actual evidence exists.",
+    "validation_ids": [
+      "p18-model"
+    ]
+  }
+]
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P24-02",
+  "reason": "P24-02 is submitted (666c87b) and waiting for Runner validation and review. No worker is registered and the owner asked for wait this time. The P18-01 contract (explicit-value Original3 model, SNAPSHOT_VERSION 2 with the v1 legacy payload kept verbatim and no alias conversion, refuse-and-preserve for unknown or corrupt saves, unset shown as 未設定, conditions kept unmet) is only a proposal. Its allowed_paths need a read-only check by Runner first. Freezing and registering it are owner decisions.",
+  "codex_model": "gpt-6-astra",
+  "codex_model_reason": "P18-01 combines a save version migration, refuse-and-preserve handling for unknown or corrupt saves, legacy and original models side by side, and Runtime restore/rebind. A small mistake can lose data or bring back guessed conversions. With only 2 repair attempts, rework is likely to cost more than Astra, so the extra usage is justified. This choice does not authorize a run."
+}
@@ -0,0 +1,12 @@
+{
+  "p18-model": {
+    "argv": [
+      "{python}",
+      "-B",
+      "tools/run_p18_relationship_tests.py",
+      "--output",
+      "{build_dir}/p18-relationship-evidence"
+    ],
+    "timeout_seconds": 1200
+  }
+}
@@ -1,5 +1,17 @@
 # 次に閉じる1件: P24-02 操作と通知

-P24-03正式完了後の既着手単位。Main/通常OS/通知ログの既存成果を活用でき、重複調査・ゲーム重複実装を避ける。配置/無効操作/モーダル/停止再開/頭上フキダシ/ログ/重要警告/クリック代替/日本語入力・倍率の全条件は凍結仕様に列記。未確認の仕様・資産・上流接続はゼロと捏造せず条件ごとに残す。
+Claude Opus5.5の記録済み判断で、同じ登録タスク/既存worktreeを正式Antigravity IDE GUI経路へ移行した。repair2/上限2、spec/base/allowed_paths/全8条件/分母は不変。CLI互換性問題は別記録のまま、CLI重複workerや未受入Runnerコードのproduction採用はない。GUIは制限モードで実行している。

-実装者はAntigravity1名、Claudeコマンダーと別Claude独立レビュー。局所・影響試験を先行し、関連変更を固めた後に正確な最終版の必須全回帰とOS検証を実行。旧UIログの限定証拠とP24-03の版付き証拠はソース/設定/入力/環境が適用する場合だけ再利用。Windows実機の条件は別記し、Macで可能な実装・受入は継続。原30/88・部分点なし・全条件成立後のみ完了を維持。
+実証は [gui-repair-r03](gui-repair-r03/) に保存。型・Window API・DomainEventStream購読・関係モデル表示・停止試験・test SHAを修正し、Root専用profileの実importはPASS。全GD parseでtests/ui/test_operations_notification.gd:311/312の未定義ManualSaveSlotsDialogScriptを検出したため局所7スイート前に停止。source/player/cleanup違反0。
+
+同一GUI作業でこの参照とcheckerの必須証拠内容を修正している。例の負例だけを拒否する実装や説明文だけの合格は採用しない。正確なcandidate SHA、必要source manifest、実artifact種類/内容/入力/設定/環境/OS/保存再開/全rosterを検証し、未承認800x600下限を採用しない。盾消失をNTR開始へ偽装せず、未実装のNTR/決闘上流は原条件のまま未達に残す。
+
+安定した変更をまとめてから guarded import/parse→局所/影響7→通常OS/実イベント/別process保存再開→最終候補の必須全回帰→別Opus独立review→main統合/最終検証。Windows同一配布版実機は必須のまま分離。P02-01/P24-03既完了を再実装せず、全30/88・部分点なしを維持。
+
+初期GUI API診断で生成した範囲外2ファイルは内容SHA一致で退避した。通常playerの保存データ差分0、ログrotation3差分あり、この診断は保全成功/正式受入に数えない。以後Godot実行はRootの専用profile経路のみ。
+
+追補r04: 未定義preloadを直した現候補の実import/全GD parseはPASS。最初の局所56/1 failureはobserver人物数と状態遷移数の不一致。条件を下げず同一担当で修正中、残り6スイート未実行。各native source/player/cleanup違反0。大量player明細はrawとgzipを内容保持で退避し、[参照記録](gui-repair-r03/player-guard-after-api-diagnostic.ref.json)に圧縮検証とログ差分を残す。
+
+追補r05: 状態遷移履歴を整合させた新候補はimport/全GD parse/局所・影響7スイート477checks PASS、source/player/cleanup違反0。通常Runner submitで666c87bd7d7c961ae6d7d2ad8d52d6456c31015bに固定。提出後1313全source map差0とcleanを確認し局所証拠の適用を固定。候補branch codex/p24-02-operations-candidate-r03へpush済み、製品mainには未統合。全8通常実証/上流NTR・決闘/最終full/別Opus review/統合・最終は未了で、P24-02正式完了には数えない。
+
+実OS追補: 固定666c87bdの実IME未確定・取消・確定、表示名テストの所有暗号slot保存、別PID80764→83514の通常一覧/通常読込を[限定観測記録](native-os-input-r01/observations.json)へ固定。dialog活性化は診断F8であり通常入口不足は未受入。3行差分案とP24-02追加repair1の回答待ち。全世界状態再開/実NTR・決闘/最終full/review/Windowsは未了のまま。
@@ -0,0 +1,221 @@
+{
+  "task_id": "P24-02",
+  "audited_at_jst": "2026-10-13T11:49:03.689408+09:00",
+  "production_head": "020d6b014e07012053dd7ac734b1e4cd882b08b3",
+  "worker_base": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+  "worker_source_refs": {
+    "scenes/main/main.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scenes/main/main.gd",
+      "bytes": 140367,
+      "sha256": "8efd37e438552d6649b81bc52385dcfe4c810c0088245f205c45cd1726249566"
+    },
+    "scenes/main/world_preview.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scenes/main/world_preview.gd",
+      "bytes": 71817,
+      "sha256": "0e7d9f1aacf073e823b3b08266263f945f5d432bb9b4d865d60a9ad5b56f2c81"
+    },
+    "scripts/ui/event_log_dialog.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/event_log_dialog.gd",
+      "bytes": 14929,
+      "sha256": "c2189378e70f37159dd82c50bf7bff98bf0d6f51b924d58fac37dcad1b2ba986"
+    },
+    "scripts/ui/manual_save_slots_dialog.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/manual_save_slots_dialog.gd",
+      "bytes": 8617,
+      "sha256": "95a76f6f022dd9dd0b4d5b476b7e9edd152e53b29fa043ab80a9807c8a461066"
+    },
+    "scripts/ui/operation_feedback.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/operation_feedback.gd",
+      "bytes": 8258,
+      "sha256": "d23690bf57a36574f989c872cd12291ee7e0a410dcfb3790fe37ec6df8449d14"
+    },
+    "scripts/ui/operation_feedback.gd.uid": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/operation_feedback.gd.uid",
+      "bytes": 22,
+      "sha256": "02c2795776f759c39b26e7458b85f8e11c7c7cdead59344d0af517a6a3ddb3c0"
+    },
+    "scripts/ui/operations_camera_controls.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/operations_camera_controls.gd",
+      "bytes": 4783,
+      "sha256": "a9ce91060b37241e20717e39cc75c51418c413042dc9c1589060ec82c70af71d"
+    },
+    "scripts/ui/operations_camera_controls.gd.uid": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/operations_camera_controls.gd.uid",
+      "bytes": 22,
+      "sha256": "4430325f4c2ecfd29ffc92c06077fdf37827f013003cea24b987f90accfd4da8"
+    },
+    "tests/ui/test_operations_notification.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tests/ui/test_operations_notification.gd",
+      "bytes": 13713,
+      "sha256": "432969ebf92289671d1388b9e3e211e0d8c9573e89a88a3b418afa8c20304306"
+    },
+    "tests/ui/test_operations_notification.gd.uid": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tests/ui/test_operations_notification.gd.uid",
+      "bytes": 20,
+      "sha256": "e336ec15680a79194a0f44855c5372f09bbb46f9cde4c5988a35c1edd3dec999"
+    },
+    "tests/ui/fixtures/operations_os_observer.gd": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tests/ui/fixtures/operations_os_observer.gd",
+      "bytes": 2323,
+      "sha256": "76facaabb58e8e318c34ad575516730ba0f2ae5aa550bf2504fb676755b8ab0d"
+    },
+    "tests/ui/fixtures/operations_os_observer.gd.uid": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tests/ui/fixtures/operations_os_observer.gd.uid",
+      "bytes": 21,
+      "sha256": "62eac33a87578378712f2bd0b3872cb2adee55ba64541a2a8d12982d682d78c6"
+    },
+    "tools/check_p24_operations_evidence.py": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tools/check_p24_operations_evidence.py",
+      "bytes": 5311,
+      "sha256": "063761c267b10023e8731671442b4d87f435c630a136883f2c6fe6e622184479"
+    },
+    "tools/run_all_tests.py": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tools/run_all_tests.py",
+      "bytes": 26387,
+      "sha256": "1d56dc16ab34f5a8f77f3ed7e833fb6d9fe73aa37cf297a0597e41bfa9c9e4b4"
+    },
+    "tools/regression/suite-policy.json": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tools/regression/suite-policy.json",
+      "bytes": 16614,
+      "sha256": "71525b9fd220c92f37dd943831a3f7ac0fd3948557cbb89eb4415b3cce19fd8a"
+    },
+    "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json": {
+      "path": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json",
+      "bytes": 186129,
+      "sha256": "bd278a1185f0e9ff127740849ddc8f47775bf96b93480d3474bba4c25ffe8315"
+    }
+  },
+  "formal_acceptance": false,
+  "all8_conditions_accepted": false,
+  "current_native_import": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-import-diagnostic-r01/local-ended.json",
+    "bytes": 12016,
+    "sha256": "2bf49ed460535713fdbf55de90660a227b2e71292712e2da3c9e0b411b38a9cf"
+  },
+  "native_source_input": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-import-diagnostic-r01/runner-input.json",
+    "bytes": 322044,
+    "sha256": "d03b817d577fc19fc1b6d70807165363635546a1a9496e273be87524487e8150"
+  },
+  "conditions": [
+    {
+      "id": "placement_and_invalid_drop",
+      "required": "Original grid snap and connection warnings; valid placement commits once, invalid placement/assignment explains the actual rejection, leaves model/ledger/selection intact, supports equivalent click-based operation.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    },
+    {
+      "id": "modal_and_pause_resume",
+      "required": "Modal open/cancel/confirm, input focus, pausing and resuming preserve pending commands and save identity. Behind-dialog input cannot accidentally build or change assignment. Actual pause freezes simulation and ordinary resume continues exactly once.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    },
+    {
+      "id": "unit_bubbles",
+      "required": "Unit overhead Zzz, anger, heart correspond to actual existing state. Observe source/model/render bindings and switching/removal without stale symbols; do not invent gameplay thresholds or hidden approved values.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    },
+    {
+      "id": "event_log",
+      "required": "Actual production events reach bounded recent log in sequence, readable Japanese with correct amounts/time/reasons, no duplicate events across pause/load. Reuse accepted256-entry log only with matching source applicability.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    },
+    {
+      "id": "important_warning_cutin",
+      "required": "Original important-warning UI for invasion start, duel, defense start is connected to actual existing signals/states with clear text, dismiss/stop/resume behavior; fixture-only signal injection is local testing, not proof ordinary production trigger. Missing upstream/catalog/assets remain explicit dependencies, do not claim complete.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    },
+    {
+      "id": "click_alternatives",
+      "required": "Provide/verify click equivalents for necessary pointer/drag/modifier navigation and assignment operations. Reuse existing step/zoom/bounds mechanisms and scales; presentation controls must not change gameplay model. Manual P23 held gestures remain deferred, not waived or relabeled.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    },
+    {
+      "id": "japanese_input_and_scale",
+      "required": "Actual OS Japanese composition/confirmation/cancel, persisted display of valid Japanese text and clear invalid-input feedback, representative window/display scales with clipping/focus/modal inspection. Use existing save display_name metadata for an editable optional Japanese save label if a suitable text field is absent; retain existing default name, cryptographic owned path, old-save preservation and cancel semantics. Do not add new gameplay numbers or rename save paths to user text. Explicitly classify macOS current development verification and still-required same-Windows-release platform acceptance; do not transfer prior Windows evidence.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    },
+    {
+      "id": "final_validation_review",
+      "required": "Static/import, local/affected tests first; batch related fixes then run required full roster on exact final game/source/settings. Exact version/source hashes/config/inputs/artifacts and condition status. Independent separate Claude review with actual runtime evidence (not pending templates alone), current-main integration and final validation. All required conditions/evidence must hold to close P24-02; no partial credit, no counts as acceptance.",
+      "accepted": false,
+      "current_evidence": "Candidate implementation incomplete; native import failed; required ordinary OS and exact final-version evidence not complete."
+    }
+  ],
+  "acceptance_required_findings": [
+    {
+      "id": "compile_staff_draw_pos",
+      "condition": "unit_bubbles",
+      "path": "scenes/main/world_preview.gd",
+      "line": 1187,
+      "evidence": {
+        "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-import-diagnostic-r01/local-ended.json",
+        "bytes": 12016,
+        "sha256": "2bf49ed460535713fdbf55de90660a227b2e71292712e2da3c9e0b411b38a9cf"
+      },
+      "required_fix": "Use an explicit Vector2 for the Dictionary-returned draw position; then import/parse the exact submission."
+    },
+    {
+      "id": "compile_window_property",
+      "condition": "important_warning_cutin",
+      "path": "scripts/ui/operation_feedback.gd",
+      "line": 125,
+      "evidence": {
+        "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-import-diagnostic-r01/local-ended.json",
+        "bytes": 12016,
+        "sha256": "2bf49ed460535713fdbf55de90660a227b2e71292712e2da3c9e0b411b38a9cf"
+      },
+      "required_fix": "Use an existing Window sizing API instead of Control.custom_minimum_size; preserve UI scale behavior."
+    },
+    {
+      "id": "nonexistent_event_signal",
+      "condition": "important_warning_cutin",
+      "path": "scenes/main/main.gd",
+      "line": 990,
+      "required_fix": "Use actual DomainEventStream.subscribe/unsubscribe; rebind on replaced stream after load/new game, preserve event-ID dedup. Do not identify every INCIDENT_CREATED as NTR or omit duel."
+    },
+    {
+      "id": "heart_model_test_disagreement",
+      "condition": "unit_bubbles",
+      "path": "tests/ui/test_operations_notification.gd",
+      "line": 145,
+      "required_fix": "Remove unapproved loyalty/morale threshold expectations. Connect the helper to real relationship state and render call; use valid Object.get single-argument API."
+    },
+    {
+      "id": "zero_duration_pause_test",
+      "condition": "modal_and_pause_resume",
+      "path": "tests/ui/test_operations_notification.gd",
+      "line": 120,
+      "required_fix": "Test actual nonzero elapsed advancement while paused, then one ordinary resume; verify pending commands and no behind-modal build."
+    },
+    {
+      "id": "checker_false_acceptance",
+      "condition": "final_validation_review",
+      "evidence": {
+        "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/p24-02/current-audit-r03/checker-negative-cases.json",
+        "bytes": 5251,
+        "sha256": "40c6ddf92b6a17d412ae70cab779ac853e9b7f63b25bea9015aef50e4078ed69"
+      },
+      "required_fix": "Reject absent artifacts/OS/source proofs, nonexistent paths, fake PID claims, truthy strings and unknown conditions. Validate candidate SHA, not frozen base as candidate; verify hashes/version/input/settings/environment applicability."
+    },
+    {
+      "id": "unfrozen_suite_hash",
+      "condition": "final_validation_review",
+      "path": "tools/regression/suite-policy.json",
+      "required_fix": "Replace pending with the exact finalized test digest after fixes; preserve the required whole roster and strict markers."
+    }
+  ],
+  "implementation_plan": [
+    "Preserve same worker worktree; fix all listed acceptance-required faults as one batch.",
+    "Exact finalized submission: import/parse, local and affected7 suites, no duplicate full regression.",
+    "Healthy real AGY transfer proof plus unchanged source; original log with actual permission denial must reject.",
+    "Actual ordinary macOS Japanese composition/confirmation/cancel/labels/window scales and real warning triggers; injected fixtures remain local proof only.",
+    "Required exact final full roster; separate Claude Opus5.5 review; current-main integration and final checks. Windows-specific same-release checks remain separate and required."
+  ],
+  "not_in_scope": "Unrelated UX improvements and gameplay numeric defaults. No worker or production game edits were made by this audit."
+}
@@ -0,0 +1,140 @@
+{
+  "accepted": false,
+  "source": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tools/check_p24_operations_evidence.py",
+  "source_sha256": "063761c267b10023e8731671442b4d87f435c630a136883f2c6fe6e622184479",
+  "cases": [
+    {
+      "case": "booleans_without_any_proof",
+      "input": {
+        "task_id": "P24-02",
+        "commit": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+        "conditions": {
+          "placement_and_invalid_drop": true,
+          "modal_and_pause_resume": true,
+          "unit_bubbles": true,
+          "event_log": true,
+          "important_warning_cutin": true,
+          "click_alternatives": true,
+          "japanese_input_and_scale": true,
+          "final_validation_review": true
+        }
+      },
+      "exit_code": 0,
+      "expected_nonzero": true,
+      "false_acceptance": true,
+      "stdout": "Reading evidence index from: /var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p24-checker-negative-sd_ej3a8/index.json\nSUCCESS: All 8 required operations and notification conditions verified.\n",
+      "stderr": "WARNING: OS process environment proof is minimal or missing\n"
+    },
+    {
+      "case": "missing_source_file",
+      "input": {
+        "task_id": "P24-02",
+        "commit": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+        "conditions": {
+          "placement_and_invalid_drop": true,
+          "modal_and_pause_resume": true,
+          "unit_bubbles": true,
+          "event_log": true,
+          "important_warning_cutin": true,
+          "click_alternatives": true,
+          "japanese_input_and_scale": true,
+          "final_validation_review": true
+        },
+        "source_hashes": {
+          "no-such-required-file.gd": "0000000000000000000000000000000000000000000000000000000000000000"
+        }
+      },
+      "exit_code": 0,
+      "expected_nonzero": true,
+      "false_acceptance": true,
+      "stdout": "Reading evidence index from: /var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p24-checker-negative-sd_ej3a8/index.json\nSUCCESS: All 8 required operations and notification conditions verified.\n",
+      "stderr": "WARNING: OS process environment proof is minimal or missing\n"
+    },
+    {
+      "case": "fake_os_pid",
+      "input": {
+        "task_id": "P24-02",
+        "commit": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+        "conditions": {
+          "placement_and_invalid_drop": true,
+          "modal_and_pause_resume": true,
+          "unit_bubbles": true,
+          "event_log": true,
+          "important_warning_cutin": true,
+          "click_alternatives": true,
+          "japanese_input_and_scale": true,
+          "final_validation_review": true
+        },
+        "os_environment": {
+          "pid": 999999999
+        }
+      },
+      "exit_code": 0,
+      "expected_nonzero": true,
+      "false_acceptance": true,
+      "stdout": "Reading evidence index from: /var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p24-checker-negative-sd_ej3a8/index.json\nSUCCESS: All 8 required operations and notification conditions verified.\n",
+      "stderr": ""
+    },
+    {
+      "case": "truthy_string_status",
+      "input": {
+        "task_id": "P24-02",
+        "commit": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+        "conditions": {
+          "placement_and_invalid_drop": {
+            "passed": "false"
+          },
+          "modal_and_pause_resume": {
+            "passed": "false"
+          },
+          "unit_bubbles": {
+            "passed": "false"
+          },
+          "event_log": {
+            "passed": "false"
+          },
+          "important_warning_cutin": {
+            "passed": "false"
+          },
+          "click_alternatives": {
+            "passed": "false"
+          },
+          "japanese_input_and_scale": {
+            "passed": "false"
+          },
+          "final_validation_review": {
+            "passed": "false"
+          }
+        }
+      },
+      "exit_code": 0,
+      "expected_nonzero": true,
+      "false_acceptance": true,
+      "stdout": "Reading evidence index from: /var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p24-checker-negative-sd_ej3a8/index.json\nSUCCESS: All 8 required operations and notification conditions verified.\n",
+      "stderr": "WARNING: OS process environment proof is minimal or missing\n"
+    },
+    {
+      "case": "unknown_condition_ignored",
+      "input": {
+        "task_id": "P24-02",
+        "commit": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+        "conditions": {
+          "placement_and_invalid_drop": true,
+          "modal_and_pause_resume": true,
+          "unit_bubbles": true,
+          "event_log": true,
+          "important_warning_cutin": true,
+          "click_alternatives": true,
+          "japanese_input_and_scale": true,
+          "final_validation_review": true,
+          "invented": true
+        }
+      },
+      "exit_code": 0,
+      "expected_nonzero": true,
+      "false_acceptance": true,
+      "stdout": "Reading evidence index from: /var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p24-checker-negative-sd_ej3a8/index.json\nSUCCESS: All 8 required operations and notification conditions verified.\n",
+      "stderr": "WARNING: OS process environment proof is minimal or missing\n"
+    }
+  ]
+}
@@ -0,0 +1,9 @@
+{
+  "source": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-import-diagnostic-r01/runner-input.json",
+  "source_sha256": "d03b817d577fc19fc1b6d70807165363635546a1a9496e273be87524487e8150",
+  "candidate_worktree": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement",
+  "source_files_compared": 1313,
+  "mismatches": [],
+  "native_import_failure_applies": true,
+  "formal_acceptance": false
+}
@@ -0,0 +1,58 @@
+{
+  "formal_acceptance": false,
+  "source_sha256": "f456b0e24bf2aa4540320ecfee3255cf5e879551e003adda12190ca6026d8638",
+  "input": {
+    "task_id": "P24-02",
+    "commit": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+    "conditions": {
+      "placement_and_invalid_drop": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      },
+      "modal_and_pause_resume": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      },
+      "unit_bubbles": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      },
+      "event_log": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      },
+      "important_warning_cutin": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      },
+      "click_alternatives": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      },
+      "japanese_input_and_scale": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      },
+      "final_validation_review": {
+        "passed": true,
+        "details": "claim without any actual evidence"
+      }
+    },
+    "os_environment": {
+      "pid": 1,
+      "platform": "macOS",
+      "window_size": [
+        1,
+        1
+      ]
+    },
+    "source_hashes": {
+      "tools/check_p24_operations_evidence.py": "f456b0e24bf2aa4540320ecfee3255cf5e879551e003adda12190ca6026d8638"
+    }
+  },
+  "exit_code": 0,
+  "expected_nonzero": true,
+  "false_acceptance": true,
+  "stdout": "Reading evidence index from: /private/var/folders/41/j8fq6vqj2993cmyprl6p76pw0000gn/T/p24-no-artifact-negative-g6y1chaf/index.json\nSUCCESS: All 8 required operations and notification conditions and integrity checks verified.\n",
+  "stderr": ""
+}
@@ -0,0 +1,46 @@
+{
+  "formal_acceptance": false,
+  "worker_first_batch_complete": true,
+  "submitted": false,
+  "source_refs": {
+    "scenes/main/main.gd": {
+      "sha256": "c375ddabc59771f8ddeaa6464c59c98e58a11cd936aa82dde74645594a9fe4e0",
+      "bytes": 141626
+    },
+    "scenes/main/world_preview.gd": {
+      "sha256": "20b15f13ddf3cf753ff0d646e4e85e16417adbf78beca21ce78283668d9c5581",
+      "bytes": 72781
+    },
+    "scripts/ui/operation_feedback.gd": {
+      "sha256": "894d0229dd447616b6eacd7f9cc706724683500b6a35507f2d9dd31cd9e800c0",
+      "bytes": 10138
+    },
+    "tests/ui/test_operations_notification.gd": {
+      "sha256": "55bc83d4c42ab0914b31693d424b516ac20f8d179e8ed8fbbb2688f4b598a5dc",
+      "bytes": 16697
+    },
+    "tools/check_p24_operations_evidence.py": {
+      "sha256": "f456b0e24bf2aa4540320ecfee3255cf5e879551e003adda12190ca6026d8638",
+      "bytes": 9286
+    },
+    "tools/regression/suite-policy.json": {
+      "sha256": "b3de18ed4bfbada7af386de0e2acdf588659848b93bb035636c7399b3e2e0e5c",
+      "bytes": 16671
+    },
+    "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json": {
+      "sha256": "36412d7f9940b88908ff419c706d41431210d760810545cf524c4fd858624127",
+      "bytes": 186186
+    },
+    "docs/plans/original-completion-2026-10-02/execution/p24-02/collector_protocol.json": {
+      "sha256": "e695f36d73e51e99850984777c799e1832100392d63d923c5d4824d185f3ccf9",
+      "bytes": 5520
+    }
+  },
+  "test_sha256": "55bc83d4c42ab0914b31693d424b516ac20f8d179e8ed8fbbb2688f4b598a5dc",
+  "policy_sha_matches": false,
+  "native_tests_executed_on_this_batch": false,
+  "root_failed_negative": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/p24-02/gui-repair-r03/checker-no-artifact-negative-r02.json",
+  "same_worker_followup_live": true,
+  "reason": "General missing-artifact negative still accepted; proof validation and warning semantics are being corrected before frozen preflight.",
+  "source_refs_snapshot_phase": "Live follow-up; files may change between reads. Not an immutable candidate or coherent full map."
+}
@@ -0,0 +1,21 @@
+{
+  "formal_acceptance": false,
+  "live_worker_snapshot_not_final": true,
+  "source_refs": {
+    "scenes/main/world_preview.gd": {
+      "sha256": "20b15f13ddf3cf753ff0d646e4e85e16417adbf78beca21ce78283668d9c5581",
+      "bytes": 72781
+    },
+    "scripts/ui/operation_feedback.gd": {
+      "sha256": "894d0229dd447616b6eacd7f9cc706724683500b6a35507f2d9dd31cd9e800c0",
+      "bytes": 10138
+    }
+  },
+  "static_observations": {
+    "explicit_staff_draw_position": true,
+    "invalid_Window_property_removed": true,
+    "Window_min_size_Vector2i": true,
+    "staff_relationship_passed_to_bubble": true
+  },
+  "native_validation_executed_on_this_snapshot": false
+}
@@ -0,0 +1,31 @@
+{
+  "project": "the-tree-p24-02-operations",
+  "task_id": "P24-02",
+  "route": "Antigravity IDE GUI / documented semi-automatic ui-packet route",
+  "worktree": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement",
+  "registered_repairs": 2,
+  "registered_max_repair_attempts": 2,
+  "recorded_commander_decision": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/p24-02/gui-repair-r03/p24-02-gui-repair-decision-r03.json",
+  "ui_packet_sha256": "9a36317bf9b8bf2bb5792d8faf20b599c36a6bb357205bb08c26325570f84a0a",
+  "app_bundle_id": "com.google.antigravity-ide",
+  "observed_window": "P24-02-implement",
+  "observed_at_jst": "2026-10-13T11:59:12.204395+09:00",
+  "selected_model": "Gemini3.8FlashHigh",
+  "model_scope": "UI selected model, exact inference model ID not exposed",
+  "workspace_trust": "restricted; did not trust parent or enable automatic workspace execution",
+  "observed_agent_status": "Working .. and Cancel button after actual send",
+  "CLI_worker_started": false,
+  "extra_repair_cap_requested_or_applied": false,
+  "formal_acceptance": false,
+  "OS_acceptance": false,
+  "cost": null,
+  "next": "Wait for same GUI session, inspect actual output and source scope, then ordinary Runner submit/validate/independent Opus review. No duplicate worker.",
+  "diagnostic_scope_correction": {
+    "generated_files_retained": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-gui-generated-diagnostics-r03/retention.json",
+    "agent_command_cancelled": true,
+    "reason": "API dump generated outside allowed_paths. Same GUI session continued with code-only instruction. Native tests owned by Root.",
+    "GUI_model_unchanged": true,
+    "current_GUI_worker_continued": true,
+    "extra_worker_started": false
+  }
+}
@@ -0,0 +1,31 @@
+{
+  "formal_acceptance": false,
+  "preflight_only": true,
+  "native_result_ref": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r03/local-ended.json",
+    "sha256": "da6046c42d82ab0babd824ae7040b3bae62c716e2461ac4e84f74f1978e893e8"
+  },
+  "native_input_ref": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r03/runner-input.json",
+    "sha256": "fab68e59e1bdbd17669cc2680d96c93e1ee1ca5a04f25a8eba929f2cdcad5fbd"
+  },
+  "actual_pids": [
+    61380,
+    61466
+  ],
+  "import_passed": true,
+  "parse_passed": false,
+  "local_suites_executed": 0,
+  "planned_local_suites": 7,
+  "guard_errors": [],
+  "cleanup_errors": [],
+  "failed_script": "tests/ui/test_operations_notification.gd",
+  "failed_lines": [
+    311,
+    312
+  ],
+  "failure": "ManualSaveSlotsDialogScript identifier not declared",
+  "same_GUI_worker_repair_live": true,
+  "extra_repair_attempt_requested_or_reset": false,
+  "next": "Same source batch: add valid existing preload/class reference, update exact test SHA, correct evidence validator semantics; new frozen guarded preflight afterward."
+}
@@ -0,0 +1,33 @@
+{
+  "formal_acceptance": false,
+  "preflight_only": true,
+  "native_result": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r04/local-ended.json",
+    "sha256": "7afa6d9f56c1e93521be51fe8aa7ea2ac5d103c69eafd526b5c80e2ad7400a90"
+  },
+  "native_input": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r04/runner-input.json",
+    "sha256": "f1191aec5fa1315da328e12d12236ab777e03a141991ff9940f97be3f7854bb3"
+  },
+  "actual_pids": [
+    68758,
+    68849,
+    68958
+  ],
+  "import_passed": true,
+  "all_GD_parse_passed": true,
+  "local_suite": {
+    "path": "tests/ui/test_operations_notification.gd",
+    "actual_pid": 68958,
+    "checks": 56,
+    "failures": 1,
+    "passed": false,
+    "failure": "Observer tracked at least 3 unit bubble events",
+    "cause": "Latest-state map keyed by actor ID counted unique actors, not transitions of one actor."
+  },
+  "remaining_local_suites_unexecuted": 6,
+  "guard_errors": [],
+  "cleanup_errors": [],
+  "same_GUI_worker_fix_live": true,
+  "next": "Preserve current-state map and record/verify actual transitions without invented actors or weakened minimum. Finalize test hash, then freeze and run related7 suites."
+}
@@ -0,0 +1,74 @@
+{
+  "formal_acceptance": false,
+  "submitted_commit": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+  "submitted_worktree_clean": true,
+  "preflight_source_map_files": 1313,
+  "preflight_source_vs_submitted_mismatches": [],
+  "preflight_applicability": "Exact1313-file contents checked after ordinary Runner submit. Commit metadata changed, tested source content unchanged. Local/affected scope only.",
+  "import_passed": true,
+  "all_GD_parse_passed": true,
+  "local_suites": [
+    {
+      "path": "tests/ui/test_operations_notification.gd",
+      "passed": true,
+      "actual_pid": 74228,
+      "checks": 58
+    },
+    {
+      "path": "tests/ui/test_event_log_ui.gd",
+      "passed": true,
+      "actual_pid": 74249,
+      "checks": 34
+    },
+    {
+      "path": "tests/ui/test_original_build_pointer.gd",
+      "passed": true,
+      "actual_pid": 74275,
+      "checks": 50
+    },
+    {
+      "path": "tests/ui/test_staff_management.gd",
+      "passed": true,
+      "actual_pid": 74350,
+      "checks": 131
+    },
+    {
+      "path": "tests/ui/test_selection_lifecycle.gd",
+      "passed": true,
+      "actual_pid": 74382,
+      "checks": 38
+    },
+    {
+      "path": "tests/ui/test_selection_autosave.gd",
+      "passed": true,
+      "actual_pid": 74417,
+      "checks": 75
+    },
+    {
+      "path": "tests/ui/test_ui_presentation_audio_contract.gd",
+      "passed": true,
+      "actual_pid": 74657,
+      "checks": 91
+    }
+  ],
+  "total_checks": 477,
+  "guard_errors": [],
+  "cleanup_errors": [],
+  "full_regression": false,
+  "result_ref": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r05/local-ended.json",
+    "sha256": "c70c00b174ed33fbdf7164f23915e57c66f21417c3e36433473697cad983962d"
+  },
+  "input_ref": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r05/runner-input.json",
+    "sha256": "0faa9fbcb8a5610de78bf0a64c300ae9726cd06e97eab74b46ee4c5069d95a86"
+  },
+  "remaining_required": [
+    "all8 condition actual OS/IME/scales/event/save proofs",
+    "actual NTR/duel upstream production triggers",
+    "exact final required full roster",
+    "separate Opus independent review",
+    "current-main integration/final validation",
+    "same-release Windows platform acceptance"
+  ]
+}
@@ -0,0 +1,43 @@
+import importlib.util,hashlib,json,os,shutil,sys,uuid
+from pathlib import Path
+sys.dont_write_bytecode=True
+ROOT=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+OUT=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-local-native-preflight-r03')
+spec=importlib.util.spec_from_file_location('p24_existing_native_runner',ROOT/'tools/run_all_tests.py');r=importlib.util.module_from_spec(spec);spec.loader.exec_module(r)
+paths=['tests/ui/test_operations_notification.gd','tests/ui/test_event_log_ui.gd','tests/ui/test_original_build_pointer.gd','tests/ui/test_staff_management.gd','tests/ui/test_selection_lifecycle.gd','tests/ui/test_selection_autosave.gd','tests/ui/test_ui_presentation_audio_contract.gd']
+import subprocess
+candidate=subprocess.check_output(['git','rev-parse','HEAD'],cwd=ROOT,text=True).strip()
+r.require(len(sys.argv)==2 and candidate==sys.argv[1], 'exact expected submitted commit')
+dirty_status=subprocess.check_output(['git','status','--porcelain'],cwd=ROOT,text=True)
+# Preflight only: exact source map and ordinary guards remain; no submitted-version acceptance.
+
+refs=r.source_refs(ROOT);before=refs;expected={n:{'bytes':v['bytes'],'sha256':v['sha256']} for n,v in refs.items()};policy=r.read(ROOT/'tools/regression/suite-policy.json');r.policy_coverage(paths,refs,policy)
+markers=r.module('p24_local_markers',ROOT/'tools/strict_test_markers.py');cp=ROOT/'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json';contracts=markers.load_contracts(cp)
+outer=r.module('p24_local_owned_outer',ROOT/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'another Godot is live');r.require(shutil.disk_usage(OUT.parent).free>=500*1024*1024,'local admission free>=500MiB')
+OUT.mkdir(parents=True,exist_ok=False);stage=OUT/'stage';stage.mkdir();(OUT/'starters').mkdir();(OUT/'bootstrap').mkdir()
+for n,pin in r.read(ROOT/'tools/regression/bootstrap-scripts.json').items():
+ data=pin['text'].encode();r.require(hashlib.sha256(data).hexdigest()==pin['sha256'],'bootstrap exact');(OUT/'bootstrap'/n).write_bytes(data)
+for n,pin in refs.items():
+ target=stage/n;target.parent.mkdir(parents=True,exist_ok=True);r.copy_source(Path(pin['path']),target)
+r.require(r.inventory(stage,stage=True)==expected,'whole separate CoW stage exact')
+protected=r.default_player(ROOT);public=(stage/'project.godot').read_bytes();parse=['res://'+n for n in sorted(refs) if n.endswith('.gd')];r.write(OUT/'parse-paths.json',parse)
+selected={'root_before':before,'map':{n:p['sha256'] for n,p in refs.items()},'timeout':300};engine='/Applications/Godot.app/Contents/MacOS/Godot'
+r.write(OUT/'runner-input.json',{'protocol':'guarded-operations-local-v1','full_regression':False,'source_commit':candidate,'source_state':'guarded dirty preflight snapshot; not submitted acceptance','dirty_status':dirty_status,'selected_source_map':selected['map'],'roster':paths,'full_roster':r.roster(ROOT),'owner_runner_pid':os.getpid(),'stage':str(stage),'default_player_before':protected,'engine':engine,'engine_sha256':r.sha(engine),'marker_contract_sha256':r.sha(cp),'execution_controller_sha256':r.sha(Path(__file__)),'existing_phase_controller_sha256':r.sha(ROOT/'tools/run_all_tests.py')})
+diagnostics=r.module('p24_local_diagnostics',ROOT/'tools/regression/diagnostic_gate.py');owners=r.module('p24_local_owners',ROOT/'tools/regression/ordinary_proof_gate.py');audio=r.module('p24_local_audio',ROOT/'tools/regression/audio_evidence_gate.py')
+rows=[];phases=[];previous={};error=None
+try:
+ for label,test in [('import',None),('parse',None)]+[(str(i).zfill(3),n)for i,n in enumerate(paths)]:
+  row=r.execute_phase(engine,stage,OUT,label,test,selected,expected,previous,policy,contracts,parse,public,protected,ROOT,outer,markers,diagnostics,owners,audio);phases.append(row)
+  if test:rows.append(row)
+  print(json.dumps({'phase':label,'test':test,'passed':row['passed'],'actual_pid':row.get('actual_pid'),'checks':row.get('reported_checks'),'error':row.get('validation_error') or row.get('guard_error')},ensure_ascii=False),flush=True)
+  r.require(row['passed'],'first local phase failure; no retry')
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:cleanup,cleanup_errors=outer.finish_captured(outer.OWNED)
+guards=[]
+try:
+ r.require(r.source_refs(ROOT)==before,'whole source unchanged');r.require(r.default_player(ROOT)==protected,'default player unchanged');r.require(r.inventory(stage,stage=True)==dict(expected,**previous),'whole stage and generated file set exact')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+passed=not error and not guards and not cleanup_errors and len(phases)==len(paths)+2 and all(x['passed'] for x in phases)
+r.write(OUT/'local-ended.json',{'protocol':'guarded-operations-local-v1','full_regression':False,'passed':passed,'error':error,'guard_errors':guards,'cleanup_errors':cleanup_errors,'final_owned_cleanup':cleanup,'actual_captured_pids':[p.pid for p in outer.OWNED],'phases':phases,'rows':rows,'original_unit_accepted':False,'preflight_only':True,'OS_input_executed':False,'cross_process_executed':False,'independent_review_executed':False})
+print(json.dumps({'selected_local_passed':passed,'executed_suites':len(rows),'planned_local_suites':len(paths),'error':error,'guard_errors':guards,'cleanup_errors':cleanup_errors,'full_regression':False}),flush=True)
+sys.exit(0 if passed else 1)
@@ -0,0 +1,60 @@
+/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement
+{
+  "project": "the-tree-p24-02-operations",
+  "acceptance_completed": 0,
+  "acceptance_total": 1,
+  "tasks": [
+    {
+      "id": "P24-02",
+      "state": "repair_ready",
+      "submitted": null,
+      "candidate": null,
+      "main_base": null,
+      "reason": null,
+      "repairs": 2
+    }
+  ],
+  "costs": [
+    {
+      "id": "e8250e57aa204d2b898bf8eb0091dc8d",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.037015599999999996,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 7697, \"cache_read_input_tokens\": 1668, \"output_tokens\": 589, \"output_tokens_details\": {\"thinking_tokens\": 88}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 7697, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    },
+    {
+      "id": "2be30fb95a1b4898bc7be87ad072f8ec",
+      "service": "agy",
+      "api_cost_usd": null,
+      "estimated_cost_usd": null,
+      "subscription_usage": null,
+      "usage_json": null
+    },
+    {
+      "id": "a87e5506f962452b90a7caaca6fd4883",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.051924,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 10405, \"cache_read_input_tokens\": 0, \"output_tokens\": 1030, \"output_tokens_details\": {\"thinking_tokens\": 267}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 10405, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    },
+    {
+      "id": "142e2e2bbcaa46918e89e97039cf4cbb",
+      "service": "agy",
+      "api_cost_usd": null,
+      "estimated_cost_usd": null,
+      "subscription_usage": null,
+      "usage_json": null
+    },
+    {
+      "id": "bedd8c9098004e439a05692b9e991112",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.11623440000000002,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 9277, \"cache_read_input_tokens\": 1752, \"output_tokens\": 2083, \"output_tokens_details\": {\"thinking_tokens\": 617}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 9277, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    }
+  ],
+  "cost_note": "nullは未取得。estimated_cost_usdはAPI請求額とは別。API自動切替無効。"
+}
@@ -0,0 +1,7 @@
+{
+  "action": "request-repair",
+  "task_id": "P24-02",
+  "reason": "判断: 残り1回の通常repair（2回目、repairs 1→2/上限2）を、Runner READMEの正式GUI経路を使って同じ登録タスクP24-02に対して実行します。CLIはexit124で止まりましたが、同じworktreeの変更は残っています。また、受入audit current-audit-r03で必須修正が7件に絞られています。このため、新しいタスクや別worktreeは作らず、同じ契約のまま続けるのが妥当です。\n\nゲートの扱い: AGY CLI 1.3.3の認証adapter互換性は未検証のままとし、「CLI互換性ゲート未解決」として別に記録します。CLIの再run、重複CLI実装、他workerの起動は行いません。GUI経路は、このゲートを回避するものではありません。正式に定められた別の経路として、run記録に「経路=GUI」と明記します。\n\n変更しないもの: 受入条件（8条件、受入分母1）、spec_sha256 738268b4…、base_commit 1a5abc6、allowed_paths、修正上限2、権限、課金方法（API自動切替は無効のまま）。\n\nGUIでの作業手順:\n1. Runner prepare: 既存のworktreeと未コミット差分を消さずに再利用し、内容がaudit r03の時点と同じであることを確認する。\n2. Runner ui-packet: 必須修正7件だけを入れたrepair packetを作る。\n   - Godot importの2コンパイル不具合\n   - 実在しないevent_published signalの参照をやめ、既存のsignalへ接続する\n   - 頭上heart表示を実際のモデルの状態と試験に一致させる（新しい閾値は作らない）\n   - advance_minutes(0)で停止を確認している試験を、実際の停止と再開1回の確認に直す\n   - checker5種がすべてfalseでもacceptanceになる不具合を直し、不正・欠落・未知の証拠ではfailさせる\n   - pending試験SHAの扱い: 実際の実行証拠に置き換えるか、置き換えられなければ不合格として明記する\n   - 上記に加えてaudit r03の残り1件\n3. 担当者がAntigravity IDEで既存worktreeを開き、allowed_paths内だけを修正する。workerはcommitしない。ローカルではGodot import/staticチェックと、関係するUI試験だけを実行する。full rosterはRoot Runnerが担当する。\n4. Runner submit: 同一worktreeのexact差分を提出する。\n5. Runner validate: validation_id=p24-operations、つまり`tools/check_p24_operations_evidence.py --verify-only`とrequired rosterを実行する。\n6. 別セッションのOpusが、実際の実行証拠をもとに独立reviewする。\n7. 合格した場合だけintegrationの準備に進む。main統合と承認はオーナーが判断する。\n\n失敗時の扱い: 今回のrepairでも不合格なら上限に達するため、追加repairは行わずblockedとしてオーナー判断を待ちます。合格証拠や仕様の数値は捏造しません。Windowsに依存する条件は未受入として残します。",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "既定のgpt-6.1-solを選びます。修正対象はaudit r03で7件に限定されていて、対象ファイルもallowed_paths内に固定されています。前回の失敗はexit124、つまり時間切れで、推論の質が足りなかった証拠ではありません。今回はGUI経路で人がIDEを操作して修正するので、gpt-6-astraの追加コストと時間に見合う上積みは見込めません。checkerの判定ロジックやsignalの接続は、validateと別Opus reviewで独立に確認されます。なお、モデルの選択はrunの実行、修正上限の変更、受入の免除のいずれも許可するものではありません。"
+}
@@ -0,0 +1,59 @@
+{
+  "project": "the-tree-p24-02-operations",
+  "acceptance_completed": 0,
+  "acceptance_total": 1,
+  "tasks": [
+    {
+      "id": "P24-02",
+      "state": "repair_ready",
+      "submitted": null,
+      "candidate": null,
+      "main_base": null,
+      "reason": null,
+      "repairs": 2
+    }
+  ],
+  "costs": [
+    {
+      "id": "e8250e57aa204d2b898bf8eb0091dc8d",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.037015599999999996,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 7697, \"cache_read_input_tokens\": 1668, \"output_tokens\": 589, \"output_tokens_details\": {\"thinking_tokens\": 88}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 7697, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    },
+    {
+      "id": "2be30fb95a1b4898bc7be87ad072f8ec",
+      "service": "agy",
+      "api_cost_usd": null,
+      "estimated_cost_usd": null,
+      "subscription_usage": null,
+      "usage_json": null
+    },
+    {
+      "id": "a87e5506f962452b90a7caaca6fd4883",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.051924,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 10405, \"cache_read_input_tokens\": 0, \"output_tokens\": 1030, \"output_tokens_details\": {\"thinking_tokens\": 267}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 10405, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    },
+    {
+      "id": "142e2e2bbcaa46918e89e97039cf4cbb",
+      "service": "agy",
+      "api_cost_usd": null,
+      "estimated_cost_usd": null,
+      "subscription_usage": null,
+      "usage_json": null
+    },
+    {
+      "id": "bedd8c9098004e439a05692b9e991112",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.11623440000000002,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 9277, \"cache_read_input_tokens\": 1752, \"output_tokens\": 2083, \"output_tokens_details\": {\"thinking_tokens\": 617}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 9277, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    }
+  ],
+  "cost_note": "nullは未取得。estimated_cost_usdはAPI請求額とは別。API自動切替無効。"
+}
@@ -0,0 +1,24 @@
+{
+  "formal_acceptance": false,
+  "raw_retained": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-gui-generated-diagnostics-r03/player-guard-after-api-diagnostic.json",
+    "bytes": 311619,
+    "sha256": "dd96ed79a987e09d2dc99e70cf7331d83084f13af75a3ea30de91a4af324df26"
+  },
+  "compressed_retained": {
+    "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-gui-generated-diagnostics-r03/player-guard-after-api-diagnostic.json.gz",
+    "bytes": 56909,
+    "sha256": "62123e21d8f469e1bbc1715246e86e617effca7ae45028561cdad8f86e19d2f0",
+    "uncompressed_sha256": "dd96ed79a987e09d2dc99e70cf7331d83084f13af75a3ea30de91a4af324df26",
+    "content_bytes_verified_equal": true
+  },
+  "before_after_detail_unchanged": true,
+  "save_data_changed": false,
+  "changed_paths": [
+    "logs/godot.log",
+    "logs/godot2026-10-02T14.01.51.log",
+    "logs/godot2026-10-13T12.00.13.log"
+  ],
+  "all_player_files_preserved": false,
+  "scope": "Complete immutable before/after player file metadata retained. Git/AI review packet carries this pointer and material result. API diagnostic is not formal acceptance."
+}
@@ -0,0 +1,59 @@
+{
+  "project": "the-tree-p24-02-operations",
+  "acceptance_completed": 0,
+  "acceptance_total": 1,
+  "tasks": [
+    {
+      "id": "P24-02",
+      "state": "submitted",
+      "submitted": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+      "candidate": null,
+      "main_base": null,
+      "reason": null,
+      "repairs": 2
+    }
+  ],
+  "costs": [
+    {
+      "id": "e8250e57aa204d2b898bf8eb0091dc8d",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.037015599999999996,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 7697, \"cache_read_input_tokens\": 1668, \"output_tokens\": 589, \"output_tokens_details\": {\"thinking_tokens\": 88}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 7697, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    },
+    {
+      "id": "2be30fb95a1b4898bc7be87ad072f8ec",
+      "service": "agy",
+      "api_cost_usd": null,
+      "estimated_cost_usd": null,
+      "subscription_usage": null,
+      "usage_json": null
+    },
+    {
+      "id": "a87e5506f962452b90a7caaca6fd4883",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.051924,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 10405, \"cache_read_input_tokens\": 0, \"output_tokens\": 1030, \"output_tokens_details\": {\"thinking_tokens\": 267}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 10405, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    },
+    {
+      "id": "142e2e2bbcaa46918e89e97039cf4cbb",
+      "service": "agy",
+      "api_cost_usd": null,
+      "estimated_cost_usd": null,
+      "subscription_usage": null,
+      "usage_json": null
+    },
+    {
+      "id": "bedd8c9098004e439a05692b9e991112",
+      "service": "claude",
+      "api_cost_usd": null,
+      "estimated_cost_usd": 0.11623440000000002,
+      "subscription_usage": null,
+      "usage_json": "{\"input_tokens\": 2, \"cache_creation_input_tokens\": 9277, \"cache_read_input_tokens\": 1752, \"output_tokens\": 2083, \"output_tokens_details\": {\"thinking_tokens\": 617}, \"server_tool_use\": {\"web_search_requests\": 0, \"web_fetch_requests\": 0}, \"service_tier\": \"standard\", \"cache_creation\": {\"ephemeral_1h_input_tokens\": 9277, \"ephemeral_5m_input_tokens\": 0}, \"inference_geo\": \"global\", \"iterations\": [], \"speed\": \"standard\", \"fallback_credit\": null}"
+    }
+  ],
+  "cost_note": "nullは未取得。estimated_cost_usdはAPI請求額とは別。API自動切替無効。"
+}
@@ -0,0 +1,179 @@
+{
+  "candidate": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+  "formal_acceptance": false,
+  "normal_new_save_entry_accepted": false,
+  "diagnostic_entry": "F8 Root recorder called exact production show_new_save; source unchanged. Not ordinary gameplay entry proof.",
+  "observed_IME_states": [
+    {
+      "ime_text": "ｔ",
+      "ime_selection": [
+        1,
+        0
+      ],
+      "label_text": "",
+      "label_focused": true,
+      "modal_input_blocked": true,
+      "window_size": [
+        1280,
+        720
+      ]
+    },
+    {
+      "ime_text": "テス",
+      "ime_selection": [
+        2,
+        0
+      ],
+      "label_text": "",
+      "label_focused": true,
+      "modal_input_blocked": true,
+      "window_size": [
+        1280,
+        720
+      ]
+    },
+    {
+      "ime_text": "テスト",
+      "ime_selection": [
+        3,
+        0
+      ],
+      "label_text": "",
+      "label_focused": true,
+      "modal_input_blocked": true,
+      "window_size": [
+        1280,
+        720
+      ]
+    },
+    {
+      "ime_text": "てすと",
+      "ime_selection": [
+        3,
+        0
+      ],
+      "label_text": "",
+      "label_focused": true,
+      "modal_input_blocked": true,
+      "window_size": [
+        1280,
+        720
+      ]
+    },
+    {
+      "ime_text": "ｔ",
+      "ime_selection": [
+        1,
+        0
+      ],
+      "label_text": "",
+      "label_focused": true,
+      "modal_input_blocked": true,
+      "window_size": [
+        1280,
+        720
+      ]
+    }
+  ],
+  "IME_confirm_actual": true,
+  "IME_cancel_actual": "Actual Escape twice cleared pending IME before committing next composition; source event sequence retained.",
+  "saved_display_name": "テスト",
+  "owned_save_slot": "manual_ui_028e44393fbef29c5cf3482ed611232f",
+  "save_manifest": {
+    "path": "/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-39076deb130d4d469b74b4d368bcd7a8-p24-02-os/saves/manual_ui_028e44393fbef29c5cf3482ed611232f/manifest.json",
+    "bytes": 679,
+    "sha256": "6581074e2d6e40d4044f50d0d79c6146503f07b1ab3b98370454e5427f801e3c"
+  },
+  "window_sizes_observed": [
+    [
+      1024,
+      608
+    ],
+    [
+      1280,
+      720
+    ]
+  ],
+  "producer_pid": 80764,
+  "consumer_pid": 83514,
+  "normal_load_in_consumer": true,
+  "consumer_loaded_save_path": "user://saves/manual_ui_028e44393fbef29c5cf3482ed611232f",
+  "all_required_world_state_restart_proven": false,
+  "source_default_player_cleanup_guard_errors": [],
+  "raw_refs": [
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-diagnostic-r01/events.jsonl",
+      "bytes": 7668,
+      "sha256": "4e27ad89db7f54da6a8c08caf8c47f89c73b894d42a9c761d8d4c7aa26d5bbac"
+    },
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-diagnostic-r01/ended.json",
+      "bytes": 727662,
+      "sha256": "a6d1c802e381ed343f09661ed3bc9a70de94acc819afd6f7f4092f416eab2dbf"
+    },
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-consumer-r01/events.jsonl",
+      "bytes": 1511,
+      "sha256": "5e9b67c80ee545a7a5130e185b8857b2c92b31c336fc177375f6ef14430921c1"
+    },
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-consumer-r01/ended.json",
+      "bytes": 727662,
+      "sha256": "c24d98b8556735dad7dc7d293b43179511adfcc2f70a9203eac906d601ec8121"
+    }
+  ],
+  "screenshots": [
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-diagnostic-r01/small-dialog.jpg",
+      "bytes": 127364,
+      "sha256": "adf92d912cef52577e6e6421a30556bec6e1dd15a0a321e133b4d7e102187837",
+      "media_type": "image/jpeg"
+    },
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-diagnostic-r01/saved-japanese-slot.jpg",
+      "bytes": 168434,
+      "sha256": "62a65ee2d437ca1d86bdb9f821ee246e32c9511769a8da5ef50d19a8f5e34beb",
+      "media_type": "image/jpeg"
+    },
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-consumer-r01/japanese-slot-after-restart.jpg",
+      "bytes": 170100,
+      "sha256": "9d7d0e8480159b12b5b83bed7609843c060b8450533e7dafe52a2e1072ccfd6d",
+      "media_type": "image/jpeg"
+    },
+    {
+      "path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02/p24-02-native-os-ime-consumer-r01/ordinary-load-result.jpg",
+      "bytes": 168163,
+      "sha256": "c5231b5ea55c380965be34cdedec802fa96b9a9a6f8ed1f52ace25e3c0a6e509",
+      "media_type": "image/jpeg"
+    }
+  ],
+  "remaining": [
+    "Ordinary new named-save UI entry missing; runtime dialog route is currently migration-only",
+    "Actual NTR and duel upstream triggers",
+    "Final full roster, separate Opus review, integration/final",
+    "Windows same release platform proof"
+  ],
+  "actual_IME_end_transitions": [
+    {
+      "ticks_msec": 98020,
+      "prior_ime_text": "てすと",
+      "ime_text": "",
+      "committed_label_text": "",
+      "save_path": "user://saves/manual_ui"
+    },
+    {
+      "ticks_msec": 119748,
+      "prior_ime_text": "ｔ",
+      "ime_text": "",
+      "committed_label_text": "テスト",
+      "save_path": "user://saves/manual_ui"
+    }
+  ],
+  "ordinary_entry_missing_source_evidence": {
+    "file": "scenes/main/main.gd",
+    "save_button": "_save_manual: direct save",
+    "new_save_dialog_calls": "only FORMAT_MIGRATION_REQUIRED branch plus internal helper",
+    "source_sha256": "c375ddabc59771f8ddeaa6464c59c98e58a11cd936aa82dde74645594a9fe4e0"
+  }
+}
@@ -0,0 +1,57 @@
+extends SceneTree
+var main: Control
+var observer: Node
+func _initialize() -> void:
+	call_deferred("_start")
+func _start() -> void:
+	var scene: PackedScene = load("res://scenes/main/main.tscn")
+	main = scene.instantiate()
+	root.add_child(main)
+	observer = PassiveRecorder.new()
+	observer.main = main
+	observer.out_dir = OS.get_environment("P24_OS_OUTPUT")
+	root.add_child(observer)
+	root.title = "The Tree P24-02 OS candidate 666c87b"
+
+class PassiveRecorder extends Node:
+	var main: Control
+	var out_dir: String
+	var log: FileAccess
+	var previous: Dictionary = {}
+	var elapsed := 0.0
+	var rows := 0
+	func _ready() -> void:
+		log = FileAccess.open(out_dir.path_join("events.jsonl"), FileAccess.WRITE)
+		emit_record("started", {"pid": OS.get_process_id(), "platform": OS.get_name(), "candidate": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b", "source": "passive_root_diagnostic_not_acceptance"})
+	func emit_record(kind: String, value: Dictionary) -> void:
+		if rows >= 10000 or log == null:
+			return
+		var record := {"kind": kind, "pid": OS.get_process_id(), "ticks_msec": Time.get_ticks_msec(), "value": value}
+		log.store_line(JSON.stringify(record))
+		log.flush()
+		rows += 1
+	func _input(event: InputEvent) -> void:
+		if event is InputEventKey:
+			if event.pressed and not event.echo and event.keycode == KEY_F8:
+				emit_record("diagnostic_dialog_entry", {"normal_gameplay_entry": false, "reason": "ordinary entry missing in frozen candidate"})
+				main.call("_ensure_manual_save_slots").show_new_save(main.get("manual_save_path"))
+			emit_record("key", {"keycode": event.keycode, "physical_keycode": event.physical_keycode, "unicode": event.unicode, "pressed": event.pressed, "echo": event.echo, "shift": event.shift_pressed, "ctrl": event.ctrl_pressed, "alt": event.alt_pressed, "meta": event.meta_pressed})
+		elif event is InputEventMouseButton:
+			emit_record("mouse_button", {"button": event.button_index, "pressed": event.pressed, "position": [event.position.x, event.position.y]})
+	func _process(delta: float) -> void:
+		elapsed += delta
+		if elapsed < 0.1:
+			return
+		elapsed = 0.0
+		var dialog: Variant = main.get("manual_save_slots_dialog")
+		var label: Variant = dialog.get("_label_edit") if dialog != null else null
+		var focus: Control = get_viewport().gui_get_focus_owner()
+		var window: Window = get_tree().root
+		var state := {"ime_text": DisplayServer.ime_get_text(), "ime_selection": [DisplayServer.ime_get_selection().x, DisplayServer.ime_get_selection().y], "label_text": String(label.text) if label != null else "", "label_rect": [label.get_global_rect().position.x, label.get_global_rect().position.y, label.size.x, label.size.y] if label != null else [], "label_focused": label.has_focus() if label != null else false, "dialog_visible": dialog.visible if dialog != null else false, "window_size": [window.size.x, window.size.y], "window_position": [window.position.x, window.position.y], "content_scale_factor": window.content_scale_factor, "screen_scale": DisplayServer.screen_get_scale(window.current_screen), "focus_name": String(focus.name) if focus != null else "", "save_path": String(main.get("manual_save_path")), "modal_input_blocked": bool(main.get("world_preview").get("modal_input_blocked"))}
+		if state != previous:
+			emit_record("state", state)
+			previous = state.duplicate(true)
+	func _exit_tree() -> void:
+		if log != null:
+			emit_record("observer_exit", {"rows": rows})
+			log.close()
@@ -0,0 +1,11 @@
+--- a/scenes/main/main.gd
+++ b/scenes/main/main.gd
+@@ -793 +793 @@
+-	load_menu.text = "読込 ▾"
+	load_menu.text = "保存・読込 ▾"
+@@ -799,0 +800 @@
+	load_menu.get_popup().add_item("新しい名前で別スロット保存",3)
+@@ -803 +804,2 @@
+-		elif id == 2: _show_manual_load_slots())
+		elif id == 2: _show_manual_load_slots()
+		elif id == 3: _ensure_manual_save_slots().show_new_save(manual_save_path))
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-ime-consumer-r01';stage=A/'p24-02-local-native-preflight-r05/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'local7 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='666c87bd7d7c961ae6d7d2ad8d52d6456c31015b','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+profile=Path('/Users/korizatou114/Library/Application Support/TheTree-PCK-tests-39076deb130d4d469b74b4d368bcd7a8-p24-02-os');profile_name=profile.name;r.require(profile.exists(),"actual producer owned profile exists")
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'666c87bd7d7c961ae6d7d2ad8d52d6456c31015b','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,37 @@
+import os,sys,uuid,json,hashlib,importlib.util,subprocess,time
+from pathlib import Path
+sys.dont_write_bytecode=True
+R=Path('/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement')
+A=Path('/Users/korizatou114/Projects/とりにく工房ゲーム制作部/artifacts/original-completion-2026-10-02')
+OUT=A/'p24-02-native-os-ime-diagnostic-r01';stage=A/'p24-02-local-native-preflight-r05/stage'
+s=importlib.util.spec_from_file_location('p24_os_runner',R/'tools/run_all_tests.py');r=importlib.util.module_from_spec(s);s.loader.exec_module(r)
+outer=r.module('p24_os_owned',R/'tools/regression/owned_outer.py');r.require(not outer.native.helper['live_engines'](),'external engine present')
+r.require(r.read(stage.parent/'local-ended.json')['passed'],'local7 passed before OS')
+r.require(subprocess.check_output(['git','rev-parse','HEAD'],cwd=R,text=True).strip()=='666c87bd7d7c961ae6d7d2ad8d52d6456c31015b','exact immutable candidate')
+r.require(not subprocess.check_output(['git','status','--porcelain'],cwd=R,text=True),'candidate clean')
+refs=r.source_refs(R);before=r.inventory(stage,stage=True);protected=r.default_player(R);public=(stage/'project.godot').read_bytes()
+for n,pin in refs.items():r.require(r.sha(stage/n)==pin['sha256'],'tested stage source exact '+n)
+nonce=uuid.uuid4().hex;profile_name='TheTree-PCK-tests-'+nonce+'-p24-02-os';profile=r.profile_path(profile_name);r.require(not profile.exists(),'fresh private profile');profile.mkdir()
+r.require(__import__('shutil').disk_usage(OUT).free>=500*1024*1024,'disk admission')
+base={'candidate':'666c87bd7d7c961ae6d7d2ad8d52d6456c31015b','source_map':{n:v['sha256'] for n,v in refs.items()},'stage':str(stage),'profile':str(profile),'owner_pid':os.getpid(),'default_before':protected,'source_before':refs,'formal_acceptance':False,'no_injected_gameplay_or_input':True,'controller_sha256':r.sha(Path(__file__)),'recorder_sha256':r.sha(OUT/'passive_os.gd')}
+r.write(OUT/'started.json',base);error=None;children=[];rows=[]
+try:
+ (stage/'project.godot').write_bytes(r.private_project(public,profile_name));env=r.fresh_environment(dict(os.environ));env['P24_OS_OUTPUT']=str(OUT)
+ argv=['/Applications/Godot.app/Contents/MacOS/Godot','--path',str(stage),'--script',str(OUT/'passive_os.gd')]
+ with (OUT/'engine-native.log').open('w') as log:
+  p=subprocess.Popen(argv,cwd=stage,env=env,stdout=log,stderr=subprocess.STDOUT);children.append(p)
+  r.write(OUT/'process-started.json',dict(base,actual_pid=p.pid,command=argv,monotonic_ns=time.monotonic_ns()))
+  print(json.dumps({'actual_pid':p.pid,'profile':str(profile),'events':str(OUT/'events.jsonl')}),flush=True)
+  p.wait(timeout=900)
+ r.require(p.returncode==0,'ordinary native exit0');raw=(OUT/'engine-native.log').read_text();r.require('ERROR:' not in raw and 'SCRIPT ERROR:' not in raw,'native diagnostics failed')
+ rows.append({'actual_pid':p.pid,'exit_code':p.returncode,'engine_ended':True,'log_sha256':r.sha(OUT/'engine-native.log')})
+except BaseException as e:error=type(e).__name__+': '+str(e)
+finally:
+ cleanup,cleanup_errors=outer.finish_captured(children);(stage/'project.godot').write_bytes(public)
+guards=[]
+try:
+ r.require(r.source_refs(R)==refs,'candidate whole source unchanged');r.require(r.inventory(stage,stage=True)==before,'whole stage source unchanged');r.require(r.default_player(R)==protected,'default player unchanged')
+except BaseException as e:guards.append(type(e).__name__+': '+str(e))
+r.write(OUT/'ended.json',dict(base,rows=rows,error=error,guard_errors=guards,cleanup_errors=cleanup_errors,owned_cleanup=cleanup,passed=not(error or guards or cleanup_errors) and len(rows)==1,formal_acceptance=False))
+print(json.dumps({'ended':True,'error':error,'guards':guards,'rows':rows}),flush=True)
+sys.exit(1 if error or guards or cleanup_errors else 0)
@@ -0,0 +1,88 @@
+{
+  "task_id": "P24-02",
+  "formal_completed": false,
+  "original_unit_count": 88,
+  "completed_units": 10,
+  "initial_job": "8dd1699eb0ee470898c7a97dfaa9dd44",
+  "terminal_provider_status": "SUCCESS",
+  "runner_failure": "Antigravity tool error",
+  "actual_cause": "Five missing-file view_file calls were treated as fatal although provider continued creating files and returned SUCCESS/submitted. No permission denial.",
+  "raw_provider_artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p24-02-operations/runs/2be30fb95a1b4898bc7be87ad072f8ec/stdout.log",
+  "raw_sha256": "f7e5ad9fbaaf547816b83745d62b28bad893ac8ad0de324458d2ac4c6d6802c5",
+  "tool_errors": [
+    {
+      "type": "TOOL_ERROR",
+      "message": "declaring permissions: cortex tool view_file: convert tool call for permissions: model output error: invalid tool call error (invalid_args) failed to read file: stat /Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/operation_feedback.gd: no such file or directory"
+    },
+    {
+      "type": "TOOL_ERROR",
+      "message": "declaring permissions: cortex tool view_file: convert tool call for permissions: model output error: invalid tool call error (invalid_args) failed to read file: stat /Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/scripts/ui/operations_camera_controls.gd: no such file or directory"
+    },
+    {
+      "type": "TOOL_ERROR",
+      "message": "declaring permissions: cortex tool view_file: convert tool call for permissions: model output error: invalid tool call error (invalid_args) failed to read file: stat /Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tests/ui/test_operations_notification.gd: no such file or directory"
+    },
+    {
+      "type": "TOOL_ERROR",
+      "message": "declaring permissions: cortex tool view_file: convert tool call for permissions: model output error: invalid tool call error (invalid_args) failed to read file: stat /Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/tools/check_p24_operations_evidence.py: no such file or directory"
+    },
+    {
+      "type": "TOOL_ERROR",
+      "message": "declaring permissions: cortex tool view_file: convert tool call for permissions: model output error: invalid tool call error (invalid_args) failed to read file: stat /Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement/docs/plans/original-completion-2026-10-02/execution/p24-02/plan.json: no such file or directory"
+    }
+  ],
+  "existing_changes_preserved": true,
+  "duplicate_implementers": 0,
+  "repair_job": "428e2abe4ad94a5288347341216c4262",
+  "commander_job": "f6bb47cd5710446789cd32e510e646ee",
+  "commander_decision": {
+    "action": "run",
+    "task_id": "P24-02",
+    "reason": "状態はrepair_ready(repairs=1/最大2)で、repair操作は済んでいます。次は同一P24-02 Antigravity workerを、既存変更を保持したまま再開します。新規workerは起動せず、重複実装もしません。dispatch前に、Runnerが下記を isolated control の prompts/ui.txt へ追記してください。\n1) check_p24_operations_evidence.py: 8条件それぞれの厳密な証拠検証にします。bool=trueだけでSUCCESSにしません。OS証拠欠損はWARNINGでなくfailにします。sourceとartifactのhashを検証します。固定baseをcandidateとして扱いません。未知の条件・型・キーは拒否します。\n2) operation_feedback.gd: morale/loyalty等の独自しきい値を削除します。元の状態と既存の確定値だけを使います。\n3) 侵食開始・決闘・防衛開始は、実在するsignal名をソースで照合して本番経路に配線します。fixture注入だけでは証明になりません。\n4) test_operations_notification.gd: 未宣言のManualSaveSlotsDialogScriptと、存在不明なAPI/enumを修正します。advance_minutes(0)でpauseを試験するのをやめ、実際のpause/resumeで一度だけ再開されることを確認します。\n5) 実行順は import/静的検査、局所試験、影響試験です。全回帰の重複実行はしません。\n6) ブラウザE2Eは使いません。Godotネイティブの通常OS試験はrootが実施します。\n7) allowed_paths外の変更、試験の削除・弱体化、証拠の捏造は禁止です。\n初回の停止原因は、過去5件の未存在新規ファイルview_fileエラーをRunnerが一律停止とした扱いで、権限不足ではありません。このエラーは致命扱いにしないでください。Windows同一リリースの受入は未了の依存として明記します。"
+  },
+  "dispatch_job": "1c0838b03e834dadb3111e55f4f6e799",
+  "repairs": 1,
+  "max_repairs": 2,
+  "context_control": "/private/tmp/the-tree-p24-02-control-r02",
+  "permission_policy_changed": false,
+  "at": "2026-10-13T01:49:27.467348+00:00",
+  "additional_actual_failure": {
+    "run": "142e2e2bbcaa46918e89e97039cf4cbb",
+    "shell_command": "git status",
+    "output": "sandbox-exec: sandbox_apply: Operation not permitted",
+    "classification": "Antigravity inner sandbox nested within existing mandatory Runner outer Seatbelt; UI source editing continues"
+  },
+  "independent_support": {
+    "project": "the-tree-runner-agy-execution",
+    "task": "RP24-02",
+    "spec": "/Users/korizatou114/Projects/TheTree-managed-worktrees/runner-p13-recovery-source/docs/spec/RP24-02.json",
+    "base": "831364de7eb9abacfafb0266776c949cfce23cd8",
+    "commander_job": "7cf29d626da44a94961d598284ca8e5a",
+    "scope": [
+      "runner/core.py",
+      "tests/test_runner.py"
+    ],
+    "not_original_unit": true,
+    "permissions_increase": false,
+    "actual_outer_boundary_retained": true,
+    "reason": "Restore required shell execution and narrowly classify recovered read-only errors; do not block game changes or weaken acceptance.",
+    "dispatch_job": "939c9defa0f4478eb983aa150e810e3c"
+  },
+  "root_local_verification_prepared": {
+    "controller": "/private/tmp/the-tree-p24-02-local-native-r01.py",
+    "sha256": "dfaa7eeb1d8053f3f466fa287f90797b1068318d3c5c6d12ea7c2aafe80d57b5",
+    "execution": "Not executed. Requires clean exact submitted SHA.",
+    "selected_suites": [
+      "tests/ui/test_operations_notification.gd",
+      "tests/ui/test_event_log_ui.gd",
+      "tests/ui/test_original_build_pointer.gd",
+      "tests/ui/test_staff_management.gd",
+      "tests/ui/test_selection_lifecycle.gd",
+      "tests/ui/test_selection_autosave.gd",
+      "tests/ui/test_ui_presentation_audio_contract.gd"
+    ],
+    "order": "import, parse all GDScripts, local and affected7; full roster later once fixes batched",
+    "protection": "Existing native owned runner and private profile/source/default-player guards reused",
+    "capacity_observed": "3.2GiB available; prior formal regression178MiB; no full regression launched"
+  }
+}
@@ -0,0 +1,17 @@
+{
+  "job_id": "8dd1699eb0ee470898c7a97dfaa9dd44",
+  "state": "running",
+  "task_state": "implementing",
+  "worktree": "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement",
+  "project": "the-tree-p24-02-operations",
+  "task_id": "P24-02",
+  "worker": "agy",
+  "commander_job": "5591b6942d614c46aff60b5caa342c8b",
+  "base_commit": "1a5abc65163097d4b36a060d68f58c92093eb4e9",
+  "spec_ref": "docs/spec/acceptance/P24-02-code-r01.json",
+  "required_condition_groups": 8,
+  "at_jst": "2026-10-13T09:47:56.706347+09:00",
+  "formal_completed": false,
+  "original_unit_count": 88,
+  "duplicate_implementers": 0
+}
@@ -0,0 +1,9 @@
+# P24-02 closure prerequisites
+
+Candidate 666c87bd remains submitted and unaccepted. Root corrected an earlier misreading: original BASELINE line143 explicitly says shield durability zero/break starts NTR erosion. The existing shield_changed -> RELATIONSHIP_SHIELD_CHANGED(old_value/new_value) -> subscribed Main cut-in path can represent this boundary. The candidate wording “love shield lost” must be restored to original NTR-start meaning; proposed-original-ntr-warning.patch is not adopted. This correction does not invent a new gameplay value.
+
+Ordinary automatic rival co-placement attack is not yet proven. Existing confirmed call site is the attack_relationship_shield command executor. P18-01/02 own original relationship model/save and contact/boundary contracts. Current generic five metrics remain different from original Affection/Lust/Netorare; retain legacy facts and do not infer a migration.
+
+P19-01 owns all three duel types and original win/loss shield/actor/ledger effects. Candidate production scripts/autoload show no duel generator, executor or saved duel state; CUTIN_DUEL is only a presentation definition. Do not add fictional events and call it ordinary gameplay acceptance. P21-01 owns ordinary defense/threat generation; DEFENSE_RAID_CREATED service callback exists but ordinary-trigger proof is still required.
+
+Opus commander selected default Codex6.1Sol for the small P24 display/menu repair and recommended verifying upstream acceptance, P01-01 scope/catalog gaps, then P18-01/02, P19-01/P21-01 before final P24 actual-warning acceptance. No additional worker, repair, source adoption, or cap change was launched by this audit. User authorization for extra P24 repair is still pending. All30/88 and no partial credit remain.
@@ -0,0 +1,125 @@
+{
+  "formal_acceptance": false,
+  "candidate": "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+  "baseline_sha256": "75e4bdbdeb379c9269553f0c776bdb9cc96e01f2d6aa5ca650d132c63a8aeb1a",
+  "source_original_conditions": [
+    {
+      "line": 140,
+      "text": " * **好感度 (Affection):** 主人公への愛。「愛の盾」の最大耐久値。"
+    },
+    {
+      "line": 141,
+      "text": " * **淫乱度 (Lust):** 快楽への依存。盾の防御力（ダメージ軽減率）を下げる。"
+    },
+    {
+      "line": 142,
+      "text": " * **NTR度 (Netorare):** ライバル依存。盾破壊後に上昇する。"
+    },
+    {
+      "line": 143,
+      "text": " * **『愛の盾』:** NTR攻撃を無効化するバリア。耐久値0でブレイクし、NTR侵食が始まる。"
+    },
+    {
+      "line": 145,
+      "text": " 1. **盾への攻撃:** ライバルと同配置時、盾耐久値が減少。"
+    },
+    {
+      "line": 146,
+      "text": " 2. **ブレイク:** 耐久値0で「心の隙間」発生。"
+    },
+    {
+      "line": 147,
+      "text": " 3. **NTR進行:** ライバル接触で直接NTR度が上昇。"
+    },
+    {
+      "line": 149,
+      "text": "## 7.4 決闘システム (Duel System)"
+    },
+    {
+      "line": 151,
+      "text": " * **種類:** 武力決闘、商談決闘、夜の決闘（性技対決）。"
+    },
+    {
+      "line": 152,
+      "text": " * **リターン:** ライバル追放・隷属化、「愛の盾」全回復。"
+    },
+    {
+      "line": 153,
+      "text": " * **リスク:** 敗北時、ヒロインを即座に強奪されNTRルート確定。"
+    },
+    {
+      "line": 226,
+      "text": " * **カットイン:** 「NTR侵食開始」などの重要警告、決闘発生、防衛戦開始演出。"
+    }
+  ],
+  "correction": "Earlier Root instruction separated shield break from NTR onset without checking explicit original line143. That instruction was wrong. Positive-old to zero shield transition is original-defined NTR onset; candidate wording needs correction. No candidate source has been edited.",
+  "existing_NTR_event_path": {
+    "service": "scripts/relationship/relationship_service.gd apply_shield_attack old>0,new0 shield_changed",
+    "runtime": "autoload/simulation_runtime.gd _on_relationship_shield_changed publishes RELATIONSHIP_SHIELD_CHANGED with old_value/new_value",
+    "candidate_UI": "scenes/main/main.gd subscribes wildcard and handles the same transition, currently says love shield lost",
+    "ordinary_same_placement_generation": "not proven; only command execution call site confirmed, no natural rival-placement attack accepted",
+    "owners": [
+      "P18-01",
+      "P18-02",
+      "P18-03"
+    ]
+  },
+  "duel_scan": {
+    "command": [
+      "git",
+      "-C",
+      "/Users/korizatou114/Projects/TheTree-managed-worktrees/p24-02-operations/P24-02-implement",
+      "grep",
+      "-n",
+      "-i",
+      "-E",
+      "duel|決闘",
+      "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b",
+      "--",
+      "scripts",
+      "autoload"
+    ],
+    "exit_code": 0,
+    "hits": [
+      "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b:scripts/ui/operation_feedback.gd:15:const CUTIN_DUEL := &\"duel\"",
+      "666c87bd7d7c961ae6d7d2ad8d52d6456c31015b:scripts/ui/operation_feedback.gd:146:## Important warning cut-in dialog: invasion start, duel, defense start"
+    ],
+    "interpretation": "Candidate scripts hits are UI CUTIN_DUEL definition. No production simulation duel generator/executor/save state shown. Absence is not complete-game acceptance.",
+    "owner": "P19-01"
+  },
+  "defense_owner": "P21-01",
+  "all_conditions_accepted": false,
+  "proposal_adopted": false,
+  "source_pins": {
+    "scenes/main/main.gd": {
+      "sha256": "c375ddabc59771f8ddeaa6464c59c98e58a11cd936aa82dde74645594a9fe4e0",
+      "bytes": 141626
+    },
+    "scripts/relationship/relationship_service.gd": {
+      "sha256": "76d49e4fdb50e9a185f7ba5065d257682a11aece1c76272208ba8555ffd534c2",
+      "bytes": 18981
+    },
+    "autoload/simulation_runtime.gd": {
+      "sha256": "d52a995ae715542bbc550f68d35889540658275d12e04ae0b21ac276f5843f39",
+      "bytes": 609584
+    }
+  },
+  "relationship_model_gap": {
+    "source_original_axes": [
+      "Affection",
+      "Lust",
+      "Netorare"
+    ],
+    "current_metric_ids": [
+      "trust",
+      "respect",
+      "affection",
+      "fear",
+      "dependence"
+    ],
+    "current_shield_max": "independently configured rather than bound to original protagonist Affection",
+    "prior_source_audit": "docs/traceability/original/historical_requirements_2026-09-22.json B-7.2 already records same mismatch",
+    "current_verification": "Current RelationshipState METRIC_IDS and configure remain mismatched; no approved replacement found in searched source authority files.",
+    "disposition": "P18-01 original model/save contract first. Retain legacy values without fabricated one-to-one migration; initial/limit/coefficients require original or approved authority."
+  }
+}
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P24-02",
+  "reason": "P24-02 (submitted 666c87bd, repairs 2/2 used) cannot formally close yet. Under the all-8-conditions rule two conditions are blocked. (1) japanese_input_and_scale: there is no normal new-save-label UI entry; it only opens via diagnostic F8, and the owner has not yet answered on the menu diff proposal or the one-extra-repair request. (2) important_warning_cutin: per the prior worker's record, NTR invasion start and duel generation have no upstream in current production, and the spec forbids claiming complete while upstream is missing. Reordering is justified because P24-02 cannot close until upstream exists. I could not read the original, the plans or the source in this session, so I am not naming which upstream plan ID owns these events. Read-only evidence needed: (a) the BASELINE chapters defining invasion start and duel; (b) the plan ID that owns these events and its state, from the docs/plans/original-completion-2026-10-02 plan table; (c) a grep of 666c87bd for production emit/ledger sites for invasion/duel signals (absence counts as evidence); (d) ordinary-trigger runtime observation of DEFENSE_RAID_CREATED, with fixture injection excluded. Next close candidate = the owning upstream plan, only if it is independently closable and needs no new values. No worker or repair launched; caps, acceptance denominator and budget unchanged.",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "No run is being made, so keep the default. Astra is a candidate only for the upcoming upstream invasion/duel implementation, which spans simulation state, events and UI, where misreading the original would force acceptance rework. Decide after evidence (b)/(c) sizes the work."
+}
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "P24-02",
+  "reason": "P24-02はsubmitted(666c87b)・repairs=2で上限に達しており、追加repair1へのオーナー回答を待っている。BASELINE line143（耐久値0でブレイクしNTR侵食開始）により「盾消失≠NTR開始」というRootの指示は誤りと確定した。表示をNTR侵食開始に戻す1行差分はmain.gdの範囲内の原文準拠修正だが、未採用で、適用にはオーナー判断が要る。shield 0遷移からカットインまでの経路は証明済み。ただし通常の同配置（line145）からの自動attackは未証明で、確認できたcallsiteは_execute_attack_relationship_shieldだけ。決闘はCUTIN_DUELのUI定義しかなく、generator/executor/save stateがない。important_warning_cutin条件は上流に依存する：侵食開始はP18-01/02、決闘はP19-01（P18/P05依存）、防衛はP21-01（P05/P13/P14/P17依存）で、いずれもplanned。P03/P17/P05/P13/P14の受入状況は未確認のまま推測しない。P01-01（catalog・追加施設の適用範囲）はin_progress。部分点なしの規定により、P24-02はこれらを明示依存として残し、完了と主張しない。先行作業の順序は「上流の受入状況確認→P01-01→P18-01/02→P19-01・P21-01→P24-02のカットイン実信号での最終検証」。新しいworkerもrepairも起動しない。",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "今回はwaitで起動しないため、既定のgpt-6.1-solを選ぶ。オーナー承認後に想定される作業はmain.gdの1行の表示修正と既存の証拠経路での再検証で、難しくなく、品質・時間・使用量の面で上位モデルは要らない。P18/P19の関係モデルや決闘シミュレーションの設計はgpt-6-astraが向く可能性があるが、別タスクとして起票するときに改めて判断する。"
+}
@@ -0,0 +1,7 @@
+--- a/scenes/main/main.gd
+++ b/scenes/main/main.gd
+@@ -3199,2 +3199,2 @@
+-				show_warning_cutin(OperationFeedbackScript.CUTIN_INVASION, "重要警告：愛の盾消失", "愛の盾が消失しました。人物関係を確認してください。")
+-
+				show_warning_cutin(OperationFeedbackScript.CUTIN_INVASION, "重要警告：NTR侵食開始", "愛の盾が破られ、NTR侵食が始まりました。人物関係を確認してください。")
+
@@ -0,0 +1,7 @@
+{
+  "action": "wait",
+  "task_id": "RP24-02",
+  "reason": "この呼び出しはモデル選択だけです。dispatch、修正回数の追加、状態変更は行わないため、actionはwaitにします。RP24-02は現在repair_pendingです。修正回数はrepairs=2で、上限のmax_repair_attempts=2にすでに達しています。次の実装を行うかどうか、修正上限を扱うかどうかは、オーナーが判断する必要があります。今回のモデル選択は、追加の実行や修正、受入条件の緩和を認めるものではありません。",
+  "codex_model": "gpt-6.1-sol",
+  "codex_model_reason": "既定のgpt-6.1-solを選びます。残っている作業の範囲は狭く、変更先はallowed_pathsのrunner/core.pyとtests/test_runner.pyの2ファイルだけです。具体的な作業は3つです。(1) 許可するstep_typeに、実ストリームの先頭にあるuser_input/DONEを加えます。(2) 既存の拒否経路の中で、permission-denialを検出します。(3) 正例と負例の試験を追加します。原因はすでに特定されています。読み取り専用の修正案は、実際のstdout(2be30fb9…, sha256 f7e5ad9f…)の再生で成功しています。sandbox除去、self-test pin、runner-unitの57件は、レビューですでに合格しています。前回の差し戻しは、試験データが実ストリームと一致していなかったために起きました。推論の難しさが原因ではありません。この点は、モデルを上げるよりも、作業指示で対処する方が確実です。実ストリームに沿ったuser_inputを含むfixtureと、未知step・permission拒否・ワークスペース外・不正形式の負例を、必須として指示します。gpt-6-astraは時間と使用量が増えますが、この規模の作業では品質がはっきり上がる見込みは小さいと判断しました。ただし、修正上限に達していて失敗の余地がないことを、オーナーがより重く見る場合は、astraに切り替えることも妥当です。"
+}
@@ -0,0 +1,10 @@
+{
+  "id": "e61cce59721949aab3817d44e5eeeaa1",
+  "status": "failed",
+  "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-runner-agy-execution/runs/e61cce59721949aab3817d44e5eeeaa1",
+  "pid": null,
+  "exit_code": null,
+  "formal_acceptance": false,
+  "process_started": false,
+  "reason": "Installed AGY CLI1.3.3; submitted adapter pins1.3.2. Compatibility probe rejected before provider subprocess launch. No repeated probe, no pin bypass or production adoption."
+}
@@ -0,0 +1,31 @@
+{
+  "task_id": "RP24-02",
+  "commit": "3fa7c0b1f982ecf2d55a772c909dd4aa0a0409ba",
+  "status": "changes_requested",
+  "summary": "I checked acceptance item RP24-02 against the spec, the diff, the full sources, the Runner validation result, and the coordinator's replay of a real run. Status: changes requested.\n\nWhat passed:\n- The scope stays within runner/core.py and tests/test_runner.py.\n- No tests were deleted or disabled. The formal suite ran 56 tests and all passed (51 baseline plus 5 new).\n- The trusted self-test pin for RP24-02 checks the frozen base commit and the spec hash, and pairing a task with the wrong project is rejected.\n- The inner `--sandbox` flag was removed from the Antigravity command line, and no `--dangerously-skip-permissions` was added.\n- The recovered-error audit is written to `recovered-read-errors.json` in the run artifact, alongside the stdout hash. The original stdout is not modified.\n\nWhy it is not a pass:\n1. The fix fails on the real data it was meant to handle. The coordinator replayed the actual run 2be30fb95a1b4898bc7be87ad072f8ec through `agy_result` and it failed with \"GateError: Antigravity unknown event\". Real Antigravity output begins with an `init` event, and `agy_result` rejects every event before the final result unless it is a `step_update`. The spec's central case (recovered missing-file read errors followed by a valid result) is therefore still rejected in production.\n2. The test fixtures are synthetic and do not match the real output shape. They have no `init` event and no ACTIVE, `agent_response`/`text_delta`, `checkpoint` or `finish` steps, which is why the suite is green while the real replay fails.\n3. Removing the inner sandbox is only checked by looking at the command line. The spec requires a real shell run under the actual Antigravity outer sandbox profile that succeeds within the allowed write scope, while writes outside it and credential reads stay denied. That test is missing.\n\nNot done yet, as the spec expects at this stage: the isolated bootstrap, the full host suite before production adoption, and integration/final validation (`production_adopted` is false).",
+  "acceptance_ids": [
+    "RP24-02"
+  ],
+  "findings": [
+    {
+      "severity": "high",
+      "message": "The real replay fails. Running the actual immutable stdout from run 2be30fb95a1b4898bc7be87ad072f8ec (input sha256 f7e5ad9f...) through agy_result raises 'GateError: Antigravity unknown event'. Real Antigravity streams start with an {\"event\":\"init\",...} line, and agy_result requires every event before the final result to be step_update. The spec's main case, five view_file ENOENT errors inside the workspace followed by SUCCESS/submitted, is still rejected. The fix should explicitly accept a single leading init event, after strictly checking its shape and that its cwd equals the task workspace, while still rejecting any other unknown event types."
+    },
+    {
+      "severity": "high",
+      "message": "There is no real outer-sandbox shell test for the Antigravity profile. The only check on removing --sandbox is test_agy_single_outer_boundary_argv, which inspects argv. The spec requires real tests under seatbelt(..., service='agy'): a bounded shell command such as git status in the worktree succeeds; writes inside the allowed paths succeed; writes to README.md, git metadata, CONTROL or provider-auth are denied; and Keychain/credential reads are denied. None of these exist. The observed failure ('sandbox_apply: Operation not permitted') has not been shown to be fixed under the outer profile."
+    },
+    {
+      "severity": "medium",
+      "message": "The recovered-read fixtures do not match the real stream format. test_agy_observed_recovered_read_and_rejects and test_agy_recovered_result_schema_and_identity leave out the init event, the ACTIVE→ERROR step pairs, agent_response steps with text_delta and usage, and the checkpoint and finish steps. Add a positive fixture shaped like the real stream (a trimmed copy of the real log structure is enough), plus negative cases: init not first, a duplicate init, an init cwd outside the workspace, an unknown step_type with an error, and a provider failure after a recovered error."
+    },
+    {
+      "severity": "low",
+      "message": "test_trusted_authorization_matrix only covers RP24-01. There is no positive or negative matrix case for the new RP24-02 pin, for example the RP24-02 project with the wrong base or spec hash, the wrong spec_ref, or the RP24-01 task id under the RP24-02 project. The code rejects these cases, but no test proves it."
+    },
+    {
+      "severity": "low",
+      "message": "The stderr permission-denied pattern now also matches 'operation not permitted' and 'access.*denied'. That is a reasonable fail-closed choice, but 'access.*denied' is broad and could reject benign provider log lines. No test covers the new patterns."
+    }
+  ]
+}
@@ -0,0 +1,31 @@
+{
+  "task_id": "RP24-02",
+  "commit": "09262f37c14397118d51b6b43c35ddbee14fcfa2",
+  "status": "changes_requested",
+  "summary": "受入項目RP24-02を、仕様・差分・ソース・Runner試験結果と照合しました。結論は差し戻しです。\n二重sandboxの除去は満たしています。外側Seatbeltは維持されており、`--sandbox`だけを外し、`--dangerously-skip-permissions`も追加していません。self-test pinの拡張も満たしています。対象はproject/task/base/spec SHAの完全一致に限られ、RP24-01の互換性と既存の拒否経路も残っています。Runner試験runner-unitは成功(57件)しています。\n一方、中核要件である「実際に観測された回復済みview_file ENOENTを、正当な結果として分類する」が実データで成立していません。coordinatorが実際のstdout(2be30fb9…, sha256 f7e5ad9f…)を再生したところ、提出コードは step_index 0 の `user_input`/DONE を `Antigravity unknown step` として拒否しました。このstdoutは、本タスクの起点になった実際の失敗ログです。\n新規試験は、この`user_input`ステップを含まない合成fixtureで書かれていたため、この欠陥を検出できませんでした。読み取り専用の修正案(許可するstep_typeに`user_input`を追加し、正例と負例の試験を追加)は再生に成功しています。ただし採用も正式検証もされていません。\nこのため、現在の提出コミットでは受入を満たしたと判断できません。",
+  "acceptance_ids": [
+    "RP24-02"
+  ],
+  "findings": [
+    {
+      "severity": "high",
+      "message": "中核要件が実データで未達です。agy_result(runner/core.py)が許可するstep_typeは (tool, agent_response, checkpoint, finish) だけです。実際のAntigravity出力の先頭 step_index 0 `user_input` DONE が拒否され、観測された5件のview_file ENOENTを含む元ログ(2be30fb9…)の再生が `Antigravity unknown step` で失敗します。次の2点を対応してください: (1) 通常の`user_input`(stateはDONEのみ、error・tool_infoなし)を許可する。(2) 実ログと同じ構造(各stepのconversation_id、step0のuser_input、ACTIVE→ERRORの対、結果レコードのresponse/structured_output)の正例fixtureをtests/test_runner.pyに追加する。"
+    },
+    {
+      "severity": "medium",
+      "message": "検証が不足しています。新規の正例fixture(test_agy_observed_recovered_read_and_rejects)は、実ログの構造を再現しない合成データでした。そのため、提出時点の57件成功は実際の転送形式で受入できることを示しません。observedの実ストリームと同じ形の正例と、user_inputがERRORの場合・tool_infoやerrorを持つ場合などの負例を追加してください。"
+    },
+    {
+      "severity": "medium",
+      "message": "権限拒否の検出がstderrに限られています。実ログでは、`run_command` が state=DONE のまま tool_info.output に `sandbox-exec: sandbox_apply: Operation not permitted` を返していました。現在のagy_resultは、DONEのtool出力に含まれる拒否文言を検査しません。sandbox除去後は再発しにくいものの、仕様の「permission/authorization系エラーは拒否を維持し、曖昧な結果を隠さない」に照らすと抜けがあります。tool出力中のsandbox_apply/Operation not permitted を拒否するか監査に記録し、その試験を追加することを推奨します。"
+    },
+    {
+      "severity": "low",
+      "message": "trusted_self_test では、SELF_TEST_PINS を参照した直後に RP24-01 の pin を再代入する分岐が重複しています。既存試験が SELF_TEST_BASE / SELF_TEST_SPEC_SHA を patch するための措置と読めますが、意図をコメントで明記するか、pinを毎回動的に組み立てる形に統一してください。"
+    },
+    {
+      "severity": "low",
+      "message": "実シェルの試験(test_agy_actual_outer_shell_and_boundaries)は、service=agy の外側profileで git status の成功、許可範囲への書き込み、範囲外の拒否を確認しており妥当です。ただし、実際のagy CLIからrun_commandを経由したシェル実行は含まれません。正式採用前に、root trusted host での実運用確認の結果を証跡として残してください。"
+    }
+  ]
+}
@@ -0,0 +1,66 @@
+{
+  "formal_acceptance": false,
+  "actual_healthy_stream_proven": false,
+  "proposal_adopted": false,
+  "synthetic_control": true,
+  "derived_from_original_sha256": "f7e5ad9fbaaf547816b83745d62b28bad893ac8ad0de324458d2ac4c6d6802c5",
+  "proposal_sha256": "0fa718fbe28e7e0c341b1718cde76838d43a9dadb00bc5f41f29a41074aad824",
+  "explicit_fixture_modifications": [
+    {
+      "record_index": 4,
+      "field": "step_update.tool_info.output",
+      "from": "sandbox-exec: sandbox_apply: Operation not permitted\r\n",
+      "to": "",
+      "reason": "Synthetic control only. Never classify this modified stream as actual healthy provider evidence."
+    }
+  ],
+  "positive_control_recovered_reads": 5,
+  "negative_cases": [
+    {
+      "case": "user_input_ERROR",
+      "rejected": true,
+      "reason": "Antigravity malformed user input"
+    },
+    {
+      "case": "user_input_tool_info",
+      "rejected": true,
+      "reason": "Antigravity malformed user input"
+    },
+    {
+      "case": "user_input_error",
+      "rejected": true,
+      "reason": "Antigravity malformed user input"
+    },
+    {
+      "case": "user_input_bool_index",
+      "rejected": true,
+      "reason": "Antigravity malformed user input"
+    },
+    {
+      "case": "unknown_step",
+      "rejected": true,
+      "reason": "Antigravity unknown step"
+    },
+    {
+      "case": "duplicate_init",
+      "rejected": true,
+      "reason": "Antigravity malformed init"
+    },
+    {
+      "case": "outside_init_cwd",
+      "rejected": true,
+      "reason": "Antigravity malformed init"
+    },
+    {
+      "case": "failed_terminal",
+      "rejected": true,
+      "reason": "Antigravity terminal result不足"
+    },
+    {
+      "case": "restore_actual_shell_denial",
+      "rejected": true,
+      "reason": "Antigravity shell permission denied"
+    }
+  ],
+  "remaining_required": "Fresh healthy actual CLI1.3.3 stream, full submitted-suite validation, independent Opus review and ordinary integration before adoption."
+}
@@ -0,0 +1,31 @@
+{
+  "scope": "Read-only proposal negative checks, not Runner formal validation",
+  "cases": [
+    {
+      "case": "user_input_error",
+      "rejected": true,
+      "error": "Antigravity failed step"
+    },
+    {
+      "case": "unknown_step",
+      "rejected": true,
+      "error": "Antigravity unknown step"
+    },
+    {
+      "case": "duplicate_init",
+      "rejected": true,
+      "error": "Antigravity malformed init"
+    },
+    {
+      "case": "outside_init_cwd",
+      "rejected": true,
+      "error": "Antigravity malformed init"
+    },
+    {
+      "case": "terminal_failure",
+      "rejected": true,
+      "error": "Antigravity terminal result不足"
+    }
+  ],
+  "passed": true
+}
@@ -0,0 +1,24 @@
+{
+  "formal_acceptance": false,
+  "proposal_adopted": false,
+  "worker_or_production_source_changed": false,
+  "proposal_source_sha256": "0fa718fbe28e7e0c341b1718cde76838d43a9dadb00bc5f41f29a41074aad824",
+  "actual_original_stream": {
+    "path": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-p24-02-operations/runs/2be30fb95a1b4898bc7be87ad072f8ec/stdout.log",
+    "sha256": "f7e5ad9fbaaf547816b83745d62b28bad893ac8ad0de324458d2ac4c6d6802c5",
+    "rejected": true,
+    "reason": "Antigravity shell permission denied",
+    "shell_denials": [
+      {
+        "record_index": 4,
+        "step_index": 2,
+        "state": "DONE",
+        "output": "sandbox-exec: sandbox_apply: Operation not permitted\r\n",
+        "command_parameters": {
+          "CommandLine": "git status"
+        }
+      }
+    ]
+  },
+  "correction": "Original full stdout is not a positive fixture: it contains actual shell permission denial. Earlier user_input-only replay acceptance is insufficient. Do not remove denial events and describe the result as an actual positive stream. A fresh healthy actual stream and full negative replay are required."
+}
@@ -0,0 +1,26 @@
+--- a/runner/core.py
+++ b/runner/core.py
+@@ -107,12 +107,22 @@
+         require(not event.get("error"), "Antigravity provider error")
+         step = event.get("step_update")
+         require(isinstance(step, dict), "Antigravity malformed step")
+-        require(step.get("step_type") in ("tool", "agent_response", "checkpoint", "finish")
+        require(step.get("step_type") in ("user_input", "tool", "agent_response", "checkpoint", "finish")
+                 and step.get("state") in ("ACTIVE", "DONE", "ERROR"), "Antigravity unknown step")
+         require(not step.get("error"), "Antigravity provider error")
+        if step.get("step_type") == "user_input":
+            require(step.get("state") == "DONE" and "tool_info" not in step
+                    and "error" not in step and type(step.get("step_index")) is int
+                    and step["step_index"] == 0, "Antigravity malformed user input")
+            continue
+         info = step.get("tool_info", {})
+         require(isinstance(info, dict), "Antigravity malformed tool")
+         error = info.get("error")
+        if info.get("name") == "run_command" and "output" in info:
+            output = info["output"]
+            require(isinstance(output, str), "Antigravity malformed shell output")
+            require(not re.search(r"(?im)^\s*(?:sandbox-exec: sandbox_apply: Operation not permitted|(?:error: )?(?:permission denied|operation not permitted|access denied))\s*$", output),
+                    "Antigravity shell permission denied")
+         if error is None:
+             require(step.get("state") not in ("ERROR", "FAILED", "CANCELLED"), "Antigravity failed step")
+             continue
@@ -0,0 +1,14 @@
+{
+  "scope": "Read-only concrete proposal and actual transport replay, not formal acceptance. Production and worker sources untouched.",
+  "submitted_source": "09262f37c14397118d51b6b43c35ddbee14fcfa2",
+  "actual_original_error": "Antigravity unknown step: actual user_input DONE at step0",
+  "proposed_change": "Allow observed ordinary user_input step type; existing ERROR/failure/path/tool/result schema guards remain. Add positive real envelope fixture and negative error cases in worker.",
+  "source_before_sha256": "b17b51cd48cf45b56d45238043376e010f89472e3a1697f49022dec0d1b8fc31",
+  "proposal_sha256": "482f8ffd26e9456c6fe37891181db55b0941a022823e4fe2a30d1c1b3e626c46",
+  "input_sha256": "f7e5ad9fbaaf547816b83745d62b28bad893ac8ad0de324458d2ac4c6d6802c5",
+  "proposal_replay_passed": true,
+  "recovered_exact_errors": 5,
+  "result_schema_passed": true,
+  "runner_formal_acceptance": false,
+  "adopted": false
+}
@@ -0,0 +1,11 @@
+--- a/runner/core.py
+++ b/runner/core.py
+@@ -107,7 +107,7 @@
+         require(not event.get("error"), "Antigravity provider error")
+         step = event.get("step_update")
+         require(isinstance(step, dict), "Antigravity malformed step")
+-        require(step.get("step_type") in ("tool", "agent_response", "checkpoint", "finish")
+        require(step.get("step_type") in ("user_input", "tool", "agent_response", "checkpoint", "finish")
+                 and step.get("state") in ("ACTIVE", "DONE", "ERROR"), "Antigravity unknown step")
+         require(not step.get("error"), "Antigravity provider error")
+         info = step.get("tool_info", {})
@@ -0,0 +1,39 @@
+{
+  "source": "Direct human instruction: claudeの、モデルはopus 5.5にして",
+  "claude": "claude-opus-5-5",
+  "roles": [
+    "commander",
+    "reviewer"
+  ],
+  "scope": "All future Claude development invocations. New project default policy set. Existing immutable registered projects use explicit model-only CLI override; no state DB/config digest/acceptance/permissions/caps altered.",
+  "confirmation": {
+    "artifact": "/Users/korizatou114/Library/Application Support/agent-control/the-tree-runner-agy-execution/runs/05fe74e0467a48bbb80bba7591d473fd",
+    "argv_model": "claude-opus-5-5",
+    "modelUsage": [
+      "claude-opus-5-5"
+    ],
+    "role": "reviewer",
+    "original_game_acceptance": false
+  },
+  "codex": {
+    "default": "gpt-6.1-sol",
+    "alternative": "gpt-6-astra",
+    "decision_owner": "Claude Opus 5.5 commander",
+    "selection": "Task-specific recorded commander decision with codex_model and codex_model_reason. Astra selected only when Claude judges necessary. No additional worker is started by model selection.",
+    "current_task_selection": {
+      "task": "RP24-02",
+      "model": "gpt-6.1-sol",
+      "reason": "既定のgpt-6.1-solを選びます。残っている作業の範囲は狭く、変更先はallowed_pathsのrunner/core.pyとtests/test_runner.pyの2ファイルだけです。具体的な作業は3つです。(1) 許可するstep_typeに、実ストリームの先頭にあるuser_input/DONEを加えます。(2) 既存の拒否経路の中で、permission-denialを検出します。(3) 正例と負例の試験を追加します。原因はすでに特定されています。読み取り専用の修正案は、実際のstdout(2be30fb9…, sha256 f7e5ad9f…)の再生で成功しています。sandbox除去、self-test pin、runner-unitの57件は、レビューですでに合格しています。前回の差し戻しは、試験データが実ストリームと一致していなかったために起きました。推論の難しさが原因ではありません。この点は、モデルを上げるよりも、作業指示で対処する方が確実です。実ストリームに沿ったuser_inputを含むfixtureと、未知step・permission拒否・ワークスペース外・不正形式の負例を、必須として指示します。gpt-6-astraは時間と使用量が増えますが、この規模の作業では品質がはっきり上がる見込みは小さいと判断しました。ただし、修正上限に達していて失敗の余地がないことを、オーナーがより重く見る場合は、astraに切り替えることも妥当です。",
+      "action": "wait",
+      "evidence": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/rp24-02-codex-model-decision-r01.json",
+      "actual_codex_inference_confirmed": false
+    }
+  },
+  "agy": "unchanged",
+  "existing_project_override_controller": {
+    "path": "/private/tmp/the-tree-owner-model-cli.py",
+    "sha256": "bca36b7129b80404ca2b719749e3795097f5c3b725fd9d1deba94bfd61bf3709",
+    "persistent_path": "/Users/korizatou114/Projects/とりにく工房ゲーム制作部/docs/plans/original-completion-2026-10-02/execution/owner_model_cli.py"
+  },
+  "codex_source": "Direct human instruction: codexは6.1 solを使用して。必要であればastra。判断はclaude opus 5.5が行なう"
+}
@@ -254,6 +254,6 @@
    "validate_facility_value_contracts.py": "91640e2a76cd6cc9186f7b85c0bf379b24b6cac0d48962815235ee628e7ae43e",
    "validate_plan.py": "23678227d9b3c556f1bd903f4b5b3147c4a82ce5085e10055481026803451b80",
    "validator_update_checks.json": "f997d0f3de2cea29550840b1d5cb23647d64f81329de46758551e2b6c8fecc27",
-    "work_packages.json": "6f3b7abd82affcb94fd32f53b08ea1a5544d4d9f540c761d9a734bb571aeea88"
+    "work_packages.json": "1682bd3fe49a16f520cede855ca07814212541b2090971327954d6569245517c"
  }
 }
@@ -8494,7 +8494,7 @@
      "D07",
      "D08"
    ],
-    "state": "planned",
+    "state": "in_progress",
    "supplement_ids": [],
    "owner_roles": {
      "implementation": "実装担当（担当者未割当）",
@@ -8503,15 +8503,37 @@
    },
    "legacy_state": "planned",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "原本の関係3値と盾の全面接続は未着手。",
+    "current_summary": "P18-01 actual original/legacy save audit and backend implementation contract prepared. Opus5.5 recommends Astra for migration/atomic restore complexity. Backend code phase remains part of P18-01; no new delivery unit and no acceptance yet. UI and approved initialization remain unmet.",
    "remaining_deliverables": [
      {
        "id": "P18-01",
        "title": "関係モデルと保存",
        "work": "原本の3値と盾を専用モデルへ接続し、旧関係値を保全する。",
        "acceptance": "表示と状態が一致し、意味不明な値の一対一変換を行わない。",
-        "state": "planned",
-        "evidence": []
+        "state": "in_progress",
+        "evidence": [
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/upstream-audit-r01/audit.json",
+            "sha256_at_integration": "8dad65be88797faa1b2683f66924218591087f5419d589d21861e18dbc6eceef",
+            "scope": "Original line143 correction and current relationship/duel call-site audit; not acceptance",
+            "linked_at_jst": "2026-10-13T13:46:18.655711+09:00",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p18-01-contract-r01/opus-contract-decision-r01.json",
+            "sha256_at_integration": "e0b7094808385097fba664d9284d967a044d53fc8bd08e9d4a484f1f31d0032f",
+            "scope": "Actual Opus contract/model proposal only, action wait; no implementation acceptance",
+            "current_game_acceptance_inferred": false
+          }
+        ],
+        "updated_at_jst": "2026-10-13T14:01:57.377446+09:00",
+        "progress_summary": "P18-01 actual original/legacy save audit and backend implementation contract prepared. Opus5.5 recommends Astra for migration/atomic restore complexity. Backend code phase remains part of P18-01; no new delivery unit and no acceptance yet. UI and approved initialization remain unmet.",
+        "remaining_gaps": [
+          "Implement original three-axis meaning and protagonist Affection-bound shield maximum across model/UI/save.",
+          "Preserve old generic five-axis facts without guessed migration; pin new/old/missing/unknown/corrupt save contract.",
+          "Distinguish source/approved initial values, coefficients and thresholds from unset required values; do not expose unset as confirmed zero/default.",
+          "Verify necessary P03/P17 slice acceptance, required tests, independent Opus review and integration/final evidence."
+        ]
      },
      {
        "id": "P18-02",
@@ -8548,7 +8570,8 @@
      "既存代表負荷の性能回帰を計測"
    ],
    "cross_cutting_acceptance_scope": "Completion requirements only, not achieved results. Apply each to relevant slices; non-applicable views require a recorded reason.",
-    "initial_revision_state": "planned"
+    "initial_revision_state": "planned",
+    "updated_at_jst": "2026-10-13T14:01:57.377446+09:00"
  },
  {
    "id": "P19",
@@ -15644,7 +15667,7 @@
    },
    "legacy_state": "in_progress",
    "state_scope": "package-level; completed means whole package accepted; partial implementation is not completion",
-    "current_summary": "P24-03全7条件を正式完了。P24-01全インスペクターは予定、P24-02操作と通知は着手中。パッケージ全体の完成には数えない。",
+    "current_summary": "P24-03正式完了済み。P24-02固定666c87bd local7/477 PASS、実macOS IMEと保存名/別PID通常読込を限定証拠として取得。通常新規入力欄入口に不足を発見、3行差分案と追加repair1の確認を準備。全8条件/実上流/最終full/独立review/統合/Windowsは未了。",
    "remaining_deliverables": [
      {
        "id": "P24-01",
@@ -15664,13 +15687,73 @@
          {
            "path": "artifacts/original-completion-2026-10-02/p20-log-limited-native-actual-root-review-r03/review.json",
            "sha256": "8eec3a8492aa74f571eb21447c6911cea64d176e0f813152f226b2b4122ba387"
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/runner-start-r01.json",
+            "sha256_at_integration": "06494300f7004df0c4586d560f6465d37a2b9d7376561152ebb6684f35abc702",
+            "scope": "Actual single Ag y UI implementer dispatch on frozen full8 condition contract; original acceptance pending"
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/runner-continuation-r02.json",
+            "sha256": "f89764065abd32c828a25a0de316ad50168d891d6ed68020ddfe9803386b3774",
+            "scope": "Same-worker repair1 continuation, actual commander decision and preserved initial tool errors; no acceptance"
+          },
+          {
+            "path": "artifacts/original-completion-2026-10-02/p24-02-checker-negative-r01/result.json",
+            "sha256": "9d6bb35fb9496ebf065a7d8f30711abf5051b1e30d274f1457af6582623de712",
+            "scope": "Initial checker fails required negative case: missing OS/source/artifact evidence falsely returns0; diagnostic only"
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/current-audit-r03/audit.json",
+            "sha256_at_integration": "476cb02d5f1a1cf3c2dc44b7281d3eec0c9dad066a165403087fcb4d3eeab756",
+            "scope": "Actual dirty candidate scoped8-condition audit/native import failed/checker5 false positives; not acceptance",
+            "linked_at_jst": "2026-10-13T11:50:29.145011+09:00",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/gui-repair-r03/native-preflight-r03.json",
+            "sha256_at_integration": "b0003c44de00c421821f1a6a4be77a0881924f985ec3f057b515c34da9ffbc16",
+            "scope": "Same GUI repair2 preflight: actual import pass/parse failure/no locals; no acceptance",
+            "linked_at_jst": "2026-10-13T12:29:03.675567+09:00",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/gui-repair-r03/native-preflight-r04.json",
+            "sha256_at_integration": "5b967f7206feb9f3b51490e9fab855fe4146d03a26e1cad44a9218051518446d",
+            "scope": "Actual new candidate import/whole GD parse pass; first local56/1 failure; others unexecuted; not acceptance",
+            "linked_at_jst": "2026-10-13T12:48:11.613309+09:00",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/gui-repair-r03/native-preflight-r05-submitted-applicability.json",
+            "sha256_at_integration": "93ec76b5aaa7948d42531d98a9d56f08f8480f5be0edcd49b2d941cc7cac8c0c",
+            "scope": "Exact submitted666c87bd source map1313/0differences; import/wholeGDparse/local7 477 pass; full/OS/formal acceptance false",
+            "linked_at_jst": "2026-10-13T12:56:24.761769+09:00",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/native-os-input-r01/observations.json",
+            "sha256_at_integration": "8786a749bbbd25ab3f97f827fc9eb03b046751768ff142f38fb7ae92bd78c678",
+            "scope": "Actual Mac IME diagnostic activation + Japanese metadata save/restart ordinary load PID80764->83514; ordinary new-save entry not accepted; whole world/platform false",
+            "linked_at_jst": "2026-10-13T13:27:18.303123+09:00",
+            "current_game_acceptance_inferred": false
+          },
+          {
+            "path": "docs/plans/original-completion-2026-10-02/execution/p24-02/upstream-audit-r01/audit.json",
+            "sha256_at_integration": "8dad65be88797faa1b2683f66924218591087f5419d589d21861e18dbc6eceef",
+            "scope": "Original line143 correction and current relationship/duel call-site audit; not acceptance",
+            "linked_at_jst": "2026-10-13T13:46:18.655711+09:00",
+            "current_game_acceptance_inferred": false
          }
        ],
-        "updated_at_jst": "2026-10-13T09:40:31.868894+09:00",
-        "progress_summary": "P24-03完了後の次対象として再開。既存256通知ログ・実viewport8操作・別process314機能23parseの限定証拠と、P24-03の通常OS選択/保存証拠を引継ぐ。原建設/通知UXに沿い、配置・無効ドロップ説明・モーダル・停止再開・フキダシ/ログ/カットイン・クリック代替・日本語入力/表示倍率の不足を現版で確認して限定修正する。P23の手動保持入力延期を免除扱いにせず、Windowsが実際に必要な条件だけを分離する。既存証拠の適用性は各条件に照合、未知の数量/仕様は設定しない。",
+        "updated_at_jst": "2026-10-13T13:46:18.655711+09:00",
+        "progress_summary": "P24-02の既存worktreeを引き継ぎ、Claude Opus5.5の記録済み判断で正式GUI経路へ移行。通常repair2/上限2、契約/分母/権限/課金変更なし。Antigravity IDEの制限モードで同一担当が編集し、型/Window API/実DomainEventStream購読/関係モデルの頭上表示/実時間停止試験/試験SHAを更新。初期API診断の範囲外生成物2件は内容SHA一致で退避、通常playerの保存差分0だがログrotation3差分を記録し非受入とする。実追加負例によりcheckerの証拠なし誤合格を再確認し、任意artifact/未承認表示下限/候補SHAと必要証拠内容の不備を提出前の同一作業内で是正中。Root専用profileの現候補preflightはimport PID61380 PASS、全GD parse PID61466で試験の未定義ManualSaveSlotsDialogScript参照2件FAIL。局所7スイート未実行、source/player/cleanup guard違反0。全回帰重複0、submit/独立正式review/統合/受入は未了。NTR・決闘の実生成と通常OS/同一Windows証拠を未達のまま保持。 修正版r04で実import PID68758と全GD parse PID68849はPASS。初局所PID68958は56checks/1failure（observerが人物数と状態遷移数を混同）で停止し、残り6は未実行。source/player/cleanup違反0。同じGUI repair2で意味を保つ履歴記録の修正中。 最終r05の実import/全GD parse/局所・影響7スイート477checksはPASS、source/player/cleanup違反0。通常Runner submitで666c87bd7d7c961ae6d7d2ad8d52d6456c31015bへ固定、提出後1313全ソースSHA差0/cleanを確認し、local証拠の限定再利用を記録。候補コードはcodex/p24-02-operations-candidate-r03へpush、main製品コードには未統合。全8条件の実証、上流NTR/決闘、最終full、独立Opus reviewは未了のまま。 固定666c87bdで通常OS入力を実行。通常の新規保存名欄入口が不足するため、診断F8から同一製品dialogを開いた実IME記録を通常入口証拠と分離。native PID80764でローマ字キー→未確定テスト/取消/確定をDisplayServer値とキー列で実記録し、表示名テストを暗号所有スロットへ保存。別PID83514の通常読込一覧/通常読込で同名と保存pathを確認。各source/default player/cleanup違反0。1280x720/1024x608とJPEG実画面を保存。全世界状態一致や通常新規入口は未受入。新規入口3行差分案を作り、P24-02だけ追加repair1（上限2→3、カウンタresetなし）の回答待ち。 Original line143 recheck corrected Root instruction: shield positive-to-zero break starts NTR erosion. Existing shield_changed/RELATIONSHIP_SHIELD_CHANGED/Main subscription is present. Candidate warning wording needs the proposed one-line original-derived correction. Ordinary same-placement attack is unproven; no duel production generator/executor/save state found. Opus orders upstream acceptance/P01 scope -> P18-01/02 -> P19-01/P21-01 -> final P24 actual warnings.",
        "remaining_gaps": [
-          "全操作項目と現版UI・元の通知UX・既存証拠の条件別照合、および適用環境/対象版付きの検証契約を確定する。",
-          "配置/無効操作/モーダル/停止再開/通知表現/クリック代替/日本語入力/表示倍率の不足を修正し、局所・影響・同一最終版必須回帰と独立レビューを取得する。"
+          "固定666c87bdのimport/全GDparse/local7 477はPASSとして再利用。実OS日本語IMEの未確定/取消/確定/保存metadata/別PID通常読込を限定証拠として保存。通常新規保存欄入口が不足し、診断起動を通常入口として合格にはしない。作成済み3行差分を同一タスクへ反映する追加repair1の回答待ち。",
+          "証拠checkerは例の5負例を拒否しても説明文・PID1・checker1ファイルのみで一度誤合格。具体artifact種類/内容、正しい実候補SHA/必要source manifest/入力/設定/環境/OSreceipt/IME/実event/別process保存再開/実全rosterを照合する。未承認800x600下限を採用せず、希薄な証拠を合格へ替えない。",
+          "Original line143 defines shield break as NTR onset. Restore candidate wording wrongly changed by Root. Reuse existing event subscription; ordinary co-placement attack belongs to P18-01/02, duel types/results/save to P19-01, natural defense proof to P21-01. Fixture injection cannot substitute for ordinary triggers.",
+          "実macOSのIMEと保存名/通常読込、1280x720/1024x608の画面を取得済み。ただし保存名dialogは診断入口による活性化であり通常new-save到達性は不足。実NTR/決闘生成と全world/台帳/人物/イベントの別process一致、Windows同一版は未了。",
+          "関連修正後の最終版で必須全回帰、別セッションClaude Opus5.5独立レビュー、現在main統合と最終検証を通す。同一Windows配布版の実機受入は別条件として未了。P24-02全8条件未達を維持。Supporting RP24-02の追加修正上限の質問は別件であり、GUI作業の上限はリセットしない。"
        ]
      },
      {
@@ -16081,7 +16164,7 @@
    ],
    "cross_cutting_acceptance_scope": "Completion requirements only, not achieved results. Apply each to relevant slices; non-applicable views require a recorded reason.",
    "initial_revision_state": "in_progress",
-    "updated_at_jst": "2026-10-13T09:40:31.868894+09:00",
+    "updated_at_jst": "2026-10-13T13:46:18.655711+09:00",
    "execution_progress": {
      "current1277_checkpoint": {
        "at_jst": "2026-10-02T22:55:59.434380+09:00",
@@ -0,0 +1,64 @@
+{
+  "id": "P18-01-CODE",
+  "delivery_unit": "P18-01",
+  "title": "原本関係モデル・旧値保全・Runtime保存と読取経路",
+  "authority": "Human original-completion goal and authorized reordered multi-agent implementation; no new gameplay value approvals. Backend support of the same existing unit, not a new delivery unit or partial completion.",
+  "original_baseline_sha256": "75e4bdbdeb379c9269553f0c776bdb9cc96e01f2d6aa5ca650d132c63a8aeb1a",
+  "original_excerpt": "# 7. 恋愛・侵食システム詳細仕様書 【完全版】\n## 7.1 概要とコアコンセプト\n3つの感情パラメータと防御値「愛の盾」、直接対決「決闘」によってヒロインの運命（純愛・NTR・堕落）をシミュレートする。\n## 7.2 感情パラメータと「愛の盾」\n * **好感度 (Affection):** 主人公への愛。「愛の盾」の最大耐久値。\n * **淫乱度 (Lust):** 快楽への依存。盾の防御力（ダメージ軽減率）を下げる。\n * **NTR度 (Netorare):** ライバル依存。盾破壊後に上昇する。\n * **『愛の盾』:** NTR攻撃を無効化するバリア。耐久値0でブレイクし、NTR侵食が始まる。",
+  "plan_acceptance": "表示と状態が一致し、意味不明な値の一対一変換を行わない。",
+  "conditions": [
+    {
+      "id": "original_model",
+      "required": "Directional original Affection/Lust/Netorare and shield dedicated state; protagonist versus rival identities explicit; shield_max equals configured Affection. Unset is distinct from zero. No invented initial values, ceilings, thresholds, reduction or change coefficients; supplied numbers are validation fixtures only."
+    },
+    {
+      "id": "legacy_preservation",
+      "required": "Version-1 legacy five-axis relationships remain usable and all raw fields/values are preserved through a version-2 round trip. No affinity->Affection or dependence->Netorare original conversion. New original state is separate. Missing original records are unconfigured, not guessed zero values. Unknown versions, wrong types, duplicate identities, invalid references and corrupt original payloads reject atomically, preserving prior service/Runtime and input bytes."
+    },
+    {
+      "id": "runtime_save_read_model",
+      "required": "Real Runtime command/service registration, snapshot create/restore and rebind, player/staff identity validation, read-only original relationship projection through get_staff_management_report or an equally actual Runtime read-model. No unused model stub. Exact new/legacy/mixed round trips, restore failures, no mutation by reads, legacy unchanged behavior and events; no contacts, routes or duel behavior newly invented."
+    },
+    {
+      "id": "verified_backend",
+      "required": "Meaningful native isolated local and affected regression on exact source/settings/input with strict marker/source/artifact/PID/profile/cleanup provenance, separate Opus review, integration and affected final validation. This backend support task never claims the 88-delivery-unit P18-01 complete: normal UI rendering/display equality, approved initialization, required full final roster and applicable Windows final acceptance remain at the original unit until all actual evidence exists."
+    }
+  ],
+  "scope": [
+    "scripts/relationship/original_relationship_state.gd",
+    "scripts/relationship/original_relationship_state.gd.uid",
+    "scripts/relationship/relationship_service.gd",
+    "autoload/simulation_runtime.gd",
+    "tests/s4/test_original_relationship_model.gd",
+    "tests/s4/test_original_relationship_model.gd.uid",
+    "tests/s4/test_original_relationship_runtime.gd",
+    "tests/s4/test_original_relationship_runtime.gd.uid",
+    "tools/run_p18_relationship_tests.py",
+    "tools/regression/suite-policy.json",
+    "docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json",
+    "docs/plans/original-completion-2026-10-02/execution/p18-01-code/**"
+  ],
+  "dependencies": {
+    "P03": "Reuse adopted atomic save candidate/restoration, preserve rejection and physical recovery safeguards; do not assert all P03 complete.",
+    "P17": "Actual hired staff identities and unique identity registry are used where required. All-seven recruitment and initial original values remain explicit unmet dependencies."
+  },
+  "implementation_rules": [
+    "Keep current RelationshipState five-axis API unchanged for legacy callers; add original dedicated explicit-config model and a clearly versioned containing service snapshot. Preserve legacy raw payload, including additional fields, without silently normalizing unknown fields away.",
+    "Do not fabricate approved initial parameters; expose unconfigured original values via actual Runtime read-model. A newly provided explicit complete model must validate all identity/value invariants before commit; distinguish explicit fixture input from production approval.",
+    "Separate v1/v2 parsing with no destructive input mutation or partial commit. Include old aliases as raw old facts only; they must never populate original values. Retain existing atomic Runtime snapshot and restore invariants.",
+    "No UI files are editable in this code task. Antigravity UI phase later uses the same read-model once fixed; original unit remains in_progress. No cap reset or duplicate P24 worker.",
+    "Implement tools/run_p18_relationship_tests.py as a strict narrow native collector reusing tools/run_all_tests.py/source_refs/execute_phase and existing owned_outer/Guard/diagnostic/marker contracts, fresh private CoW source and owned profiles, preserve default player logs/saves and process ownership. No raw Godot against player profile. Local+affected set: the two new P18 tests, s4 relationship_event_service/runtime_relationship_events, s6 runtime_snapshot_serialization/runtime_save_lifecycle, ui staff_management. Run import/all-script parse then native suites. --prepare-only previews bytes/capacity/roster without engines. Do not run duplicate full regression.",
+    "Worker may run static and prepare-only checks first; Root Runner owns authoritative native execution/review. Any environment denial is reported with exact evidence, not bypassed by weakening isolation. Worker must not commit/push/edit main or read credentials.",
+    "New tests need source-hashed strict markers, compatible with suite-policy and current roster discovery. No existing test body/assertion/limit weakening; only add exact new test records. Actual local failures are repaired before final native affected collection."
+  ],
+  "remaining_unit_conditions": [
+    "Actual ordinary staff/heroine UI graph/value/shield rendering from identical Runtime state, Japanese labels and unset display; saved/restored state equality.",
+    "Production-approved initial values and any range/unit constraints not fixed by original; no synthetic fixture counted as approval or normal gameplay.",
+    "Exact final full required regression after related code/UI fixes batched, independent whole-unit review and current-main integration; same Windows release final applicable acceptance."
+  ],
+  "reuse": [
+    "Existing relationship event and Runtime snapshot tests remain unchanged; their old raw evidence only where source/settings/input match.",
+    "P02-01 fixed representative saves, P02-02 producer/consumer save evidence remain retained, no unconditional whole-version reuse.",
+    "P24-02 candidate 666c87bd kept separate and unchanged."
+  ]
+}
@@ -0,0 +1,38 @@
+class_name OriginalRelationshipState
+extends RefCounted
+
+## Explicit facts only. Numeric values are not production initialization approval.
+## No update, attack, reduction, threshold or route policy is defined here.
+const FIELDS := ["subject_id", "protagonist_id", "rival_id", "affection", "lust", "netorare", "shield_current", "shield_max"]
+var _payload: Dictionary = {}
+
+
+static func from_snapshot(value: Variant) -> OriginalRelationshipState:
+	if not value is Dictionary or value.size() != FIELDS.size():
+		return null
+	for field: String in FIELDS:
+		if not value.has(field):
+			return null
+	for field: String in ["subject_id", "protagonist_id", "rival_id"]:
+		if not (value[field] is String or value[field] is StringName) or String(value[field]).is_empty():
+			return null
+	if value["subject_id"] == value["protagonist_id"] or value["subject_id"] == value["rival_id"] or value["protagonist_id"] == value["rival_id"]:
+		return null
+	for field: String in ["affection", "lust", "netorare", "shield_current", "shield_max"]:
+		if not (value[field] is int or value[field] is float):
+			return null
+		if value[field] is float and not is_finite(value[field]):
+			return null
+	if value["shield_max"] != value["affection"] or value["shield_current"] < 0 or value["shield_current"] > value["shield_max"]:
+		return null
+	var state := OriginalRelationshipState.new()
+	state._payload = value.duplicate(true)
+	return state
+
+
+func create_snapshot() -> Dictionary:
+	return _payload.duplicate(true)
+
+
+func subject_id() -> StringName:
+	return StringName(_payload.get("subject_id", ""))
@@ -0,0 +1 @@
+uid://cqxwpbkgjtnsa
@@ -9,8 +9,9 @@ signal route_lock_changed(relationship_id: StringName, old_lock: int, new_lock:

 const RelationshipStateType = preload("res://scripts/relationship/relationship_state.gd")
 const CommandResultType = preload("res://scripts/core/command_result.gd")
+const OriginalStateType = preload("res://scripts/relationship/original_relationship_state.gd")

-const SNAPSHOT_VERSION := 1
+const SNAPSHOT_VERSION := 2
 const DAILY_AUTOMATIC_DELTA_LIMIT := 10
 const GATED_THRESHOLDS: Array[int] = [50, 80]
 const STAGE_THRESHOLDS: Array[int] = [20, 50, 80, 100]
@@ -22,6 +23,46 @@ var _pair_index: Dictionary = {}
 var _threshold_candidates: Array[Dictionary] = []
 var _next_candidate_sequence := 1
 var _candidate_callback := Callable()
+var _original_records: Dictionary = {}
+var _original_identity_validator := Callable()
+var _legacy_raw: Dictionary = {}
+var _legacy_baselines: Dictionary = {}
+var _container_raw: Dictionary = {}
+
+
+func configure_original_identity_validator(callback: Callable) -> RelationshipService:
+	_original_identity_validator = callback
+	return self
+
+
+func register_original_relationship(payload: Variant) -> CommandResult:
+	var state := OriginalStateType.from_snapshot(payload)
+	if state == null:
+		return _invalid("Original relationship requires complete explicit facts.")
+	if not _original_identity_validator.is_valid() or not bool(_original_identity_validator.call(state.create_snapshot())):
+		return _invalid("Original relationship identities are not registered.")
+	if _original_records.has(state.subject_id()):
+		return _duplicate("Original relationship subject", state.subject_id())
+	_original_records[state.subject_id()] = state.create_snapshot()
+	last_error = ""
+	return _success({&"subject_id": state.subject_id()})
+
+
+func get_original_relationship(subject_id: StringName) -> Dictionary:
+	if _original_records.has(subject_id):
+		var result: Dictionary = _original_records[subject_id].duplicate(true)
+		result[&"configured"] = true
+		return result
+	return {&"configured": false, &"subject_id": subject_id,
+		&"protagonist_id": null, &"rival_id": null, &"affection": null,
+		&"lust": null, &"netorare": null, &"shield_current": null, &"shield_max": null}
+
+
+func validate_original_identities() -> bool:
+	for payload: Dictionary in _original_records.values():
+		if not _original_identity_validator.is_valid() or not bool(_original_identity_validator.call(payload.duplicate(true))):
+			return false
+	return true


 func configure_candidate_callback(callback: Callable = Callable()) -> RelationshipService:
@@ -329,6 +370,8 @@ func consume_threshold_candidate(candidate_id: StringName) -> Dictionary:

 func validate_invariants() -> Dictionary:
 	var errors: Array[String] = []
+	if not validate_original_identities():
+		errors.append("Original relationship identity reference is invalid.")
 	var seen_pairs: Dictionary = {}
 	for relationship_id: StringName in _sorted_name_keys(_relationships):
 		var state := get_relationship(relationship_id)
@@ -347,22 +390,92 @@ func validate_invariants() -> Dictionary:
 func create_snapshot() -> Dictionary:
 	var relationships: Array[Dictionary] = []
 	for state: RelationshipState in get_relationships():
-		relationships.append(state.create_snapshot())
+		var current := state.create_snapshot()
+		var original: Dictionary = _legacy_baselines.get(state.relationship_id, {})
+		var raw: Dictionary = {}
+		for entry: Dictionary in _legacy_raw.get(&"relationships", []):
+			if StringName(_value(entry, &"relationship_id", "")) == state.relationship_id:
+				raw = entry
+				break
+		relationships.append(_merge_legacy_changes(raw, original, current) if not original.is_empty() else current)
 	var candidates := _threshold_candidates.duplicate(true)
 	candidates.sort_custom(
 		func(a: Dictionary, b: Dictionary) -> bool:
 			return String(a.get(&"candidate_id", "")) < String(b.get(&"candidate_id", ""))
 	)
-	return {
-		&"version": SNAPSHOT_VERSION,
-		&"relationships": relationships,
-		&"threshold_candidates": candidates,
-		&"next_candidate_sequence": _next_candidate_sequence,
-	}
+	var legacy := _legacy_raw.duplicate(true)
+	legacy[&"version"] = 1
+	# Preserve input collection order as well as every untouched raw field.
+	if _legacy_raw.has(&"relationships"):
+		var ordered: Array[Dictionary] = []
+		for raw: Dictionary in _legacy_raw[&"relationships"]:
+			for entry: Dictionary in relationships:
+				if _value(entry, &"relationship_id", "") == _value(raw, &"relationship_id", ""):
+					ordered.append(entry)
+		for entry: Dictionary in relationships:
+			if not ordered.has(entry):
+				ordered.append(entry)
+		relationships = ordered
+	if legacy.get(&"relationships") != relationships:
+		legacy[&"relationships"] = relationships
+	var current_candidates := _threshold_candidates.duplicate(true) if not _legacy_raw.is_empty() else candidates
+	if legacy.get(&"threshold_candidates") != current_candidates:
+		legacy[&"threshold_candidates"] = current_candidates
+	legacy[&"next_candidate_sequence"] = _next_candidate_sequence
+	var result := _container_raw.duplicate(true)
+	result[&"version"] = SNAPSHOT_VERSION
+	result[&"legacy"] = legacy
+	# Compatibility projection for existing snapshot consumers; the nested v1
+	# record remains lossless, including extension names reserved by v2.
+	if result.get(&"relationships") != relationships:
+		result[&"relationships"] = relationships.duplicate(true)
+	var originals: Array[Dictionary] = []
+	for payload: Dictionary in _original_records.values():
+		originals.append(payload.duplicate(true))
+	if result.get(&"original_relationships") != originals:
+		result[&"original_relationships"] = originals
+	return result
+
+
+static func _merge_legacy_changes(raw: Dictionary, baseline: Dictionary, current: Dictionary) -> Dictionary:
+	var result := raw.duplicate(true)
+	for key: Variant in baseline:
+		if not current.has(key):
+			result.erase(key)
+	for key: Variant in current:
+		if baseline.has(key) and current[key] == baseline[key]:
+			continue
+		if current[key] is Dictionary and baseline.get(key) is Dictionary and result.get(key) is Dictionary:
+			result[key] = _merge_legacy_changes(result[key], baseline[key], current[key])
+		else:
+			result[key] = current[key]
+	return result


 func restore_snapshot(snapshot: Dictionary) -> bool:
-	var parsed := _parse_snapshot(snapshot)
+	var version: Variant = _value(snapshot, &"version", null)
+	if not version is int or version not in [1, SNAPSHOT_VERSION]:
+		last_error = "Unsupported Relationship snapshot version."
+		return false
+	var legacy: Variant = snapshot if version == 1 else _value(snapshot, &"legacy", null)
+	var originals: Variant = [] if version == 1 else _value(snapshot, &"original_relationships", null)
+	if not legacy is Dictionary or not originals is Array:
+		last_error = "Malformed Relationship snapshot container."
+		return false
+	if version == SNAPSHOT_VERSION and _value(snapshot, &"relationships", null) != _value(legacy, &"relationships", null):
+		last_error = "Legacy compatibility projection disagrees with its source."
+		return false
+	var original_records: Dictionary = {}
+	for raw: Variant in originals:
+		var state := OriginalStateType.from_snapshot(raw)
+		if state == null or original_records.has(state.subject_id()):
+			last_error = "Invalid or duplicate original relationship."
+			return false
+		if not _original_identity_validator.is_valid() or not bool(_original_identity_validator.call(state.create_snapshot())):
+			last_error = "Invalid original relationship identity reference."
+			return false
+		original_records[state.subject_id()] = state.create_snapshot()
+	var parsed := _parse_snapshot(legacy)
 	if not bool(parsed.get(&"ok", false)):
 		last_error = String(parsed.get(&"error", "Invalid Relationship snapshot."))
 		return false
@@ -370,12 +483,18 @@ func restore_snapshot(snapshot: Dictionary) -> bool:
 	_pair_index = parsed[&"pair_index"]
 	_threshold_candidates = parsed[&"threshold_candidates"]
 	_next_candidate_sequence = int(parsed[&"next_candidate_sequence"])
+	_original_records = original_records
+	_legacy_raw = legacy.duplicate(true)
+	_container_raw = snapshot.duplicate(true) if version == SNAPSHOT_VERSION else {}
+	_legacy_baselines = {}
+	for state: RelationshipState in get_relationships():
+		_legacy_baselines[state.relationship_id] = state.create_snapshot()
 	last_error = ""
 	return true


 func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
-	if int(_value(snapshot, &"version", 0)) != SNAPSHOT_VERSION:
+	if not _value(snapshot, &"version", null) is int or _value(snapshot, &"version", null) != 1:
 		return {&"ok": false, &"error": "Unsupported Relationship snapshot version."}
 	var raw_relationships: Variant = _value(snapshot, &"relationships", null)
 	var raw_candidates: Variant = _value(snapshot, &"threshold_candidates", null)
@@ -384,7 +503,7 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 	var relationships: Dictionary = {}
 	var pair_index: Dictionary = {}
 	for raw_state: Variant in raw_relationships:
-		if not raw_state is Dictionary:
+		if not raw_state is Dictionary or not _legacy_types_valid(raw_state):
 			return {&"ok": false, &"error": "Relationship snapshot entry is malformed."}
 		var state := RelationshipStateType.from_snapshot(raw_state)
 		if not state.is_valid() or relationships.has(state.relationship_id):
@@ -398,6 +517,9 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 	for raw_candidate: Variant in raw_candidates:
 		if not raw_candidate is Dictionary:
 			return {&"ok": false, &"error": "Threshold candidate is malformed."}
+		for key: String in ["candidate_id", "relationship_id"]:
+			if not (raw_candidate.get(key) is String or raw_candidate.get(key) is StringName):
+				return {&"ok": false, &"error": "Threshold candidate identity type is invalid."}
 		var candidate: Dictionary = raw_candidate.duplicate(true)
 		var candidate_id := StringName(candidate.get(&"candidate_id", candidate.get("candidate_id", "")))
 		var relationship_id := StringName(candidate.get(&"relationship_id", candidate.get("relationship_id", "")))
@@ -405,6 +527,8 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 			return {&"ok": false, &"error": "Threshold candidate reference is invalid."}
 		candidate_ids[candidate_id] = true
 		candidates.append(candidate)
+	if not _value(snapshot, &"next_candidate_sequence", null) is int:
+		return {&"ok": false, &"error": "Relationship candidate sequence type is invalid."}
 	var next_sequence := int(_value(snapshot, &"next_candidate_sequence", 0))
 	if next_sequence < 1:
 		return {&"ok": false, &"error": "Relationship candidate sequence is invalid."}
@@ -417,6 +541,44 @@ func _parse_snapshot(snapshot: Dictionary) -> Dictionary:
 	}


+static func _legacy_types_valid(raw: Dictionary) -> bool:
+	for key: String in ["relationship_id", "actor_a_id", "actor_b_id"]:
+		if not (raw.get(key) is String or raw.get(key) is StringName):
+			return false
+	for key: String in ["shield_max", "shield_current", "last_event_at", "daily_attack_count", "attack_day", "metric_delta_day"]:
+		if raw.has(key) and not raw[key] is int:
+			return false
+	for key: String in ["metrics", "action_counts", "daily_metric_deltas", "flags", "crossed_thresholds"]:
+		if raw.has(key) and not raw[key] is Dictionary:
+			return false
+	for key: String in ["trust", "respect", "affection", "fear", "dependence", "affinity", "obligation"]:
+		var metrics: Dictionary = raw.get("metrics", raw)
+		if metrics.has(key) and not metrics[key] is int:
+			return false
+	for key: String in ["action_counts", "daily_metric_deltas"]:
+		for value: Variant in raw.get(key, {}).values():
+			if not value is int:
+				return false
+	for key: String in ["action_counts", "flags"]:
+		for identity: Variant in raw.get(key, {}):
+			if not (identity is String or identity is StringName):
+				return false
+	for value: Variant in raw.get("flags", {}).values():
+		if not value is bool:
+			return false
+	for value: Variant in raw.get("crossed_thresholds", {}).values():
+		if not value is Array:
+			return false
+		for threshold: Variant in value:
+			if not threshold is int:
+				return false
+	if raw.has("route_id") and not (raw["route_id"] is String or raw["route_id"] is StringName):
+		return false
+	if raw.has("route_lock") and not (raw["route_lock"] is int or raw["route_lock"] is String or raw["route_lock"] is StringName):
+		return false
+	return true
+
+
 func _register_threshold_candidate(
 	state: RelationshipState,
 	metric_id: StringName,
@@ -0,0 +1,110 @@
+extends SceneTree
+
+const Model = preload("res://scripts/relationship/original_relationship_state.gd")
+const Service = preload("res://scripts/relationship/relationship_service.gd")
+var _checks := 0
+var _failures := 0
+
+
+func _initialize() -> void:
+	call_deferred("_run")
+
+
+func _expect(value: bool, message: String) -> void:
+	_checks += 1
+	if not value:
+		_failures += 1
+		push_error(message)
+
+
+static func fixture() -> Dictionary:
+	# Validation fixtures, never approved initialization or range limits.
+	return {"subject_id": "heroine_anri", "protagonist_id": "player", "rival_id": "rival_rai",
+		"affection": 142.5, "lust": 23.25, "netorare": 11, "shield_current": 90.5, "shield_max": 142.5}
+
+
+func _service() -> RelationshipService:
+	return Service.new().configure_original_identity_validator(
+		func(p: Dictionary) -> bool:
+			return p["subject_id"] == "heroine_anri" and p["protagonist_id"] == "player" and p["rival_id"] == "rival_rai"
+	)
+
+
+func _run() -> void:
+	var service := _service()
+	var before := var_to_bytes(service.create_snapshot())
+	var unset := service.get_original_relationship(&"heroine_anri")
+	_expect(not unset[&"configured"] and unset[&"affection"] == null, "missing record is unset")
+	unset[&"affection"] = 999
+	_expect(var_to_bytes(service.create_snapshot()) == before, "reads own their dictionaries")
+	var payload := fixture()
+	var payload_bytes := var_to_bytes(payload)
+	_expect(service.register_original_relationship(payload).is_success(), "complete directional fixture registers")
+	payload["affection"] = 0
+	_expect(service.get_original_relationship(&"heroine_anri")["affection"] == 142.5, "caller cannot mutate stored facts")
+	_expect(not service.register_original_relationship(fixture()).is_success(), "duplicate subject rejected")
+	var saved := service.create_snapshot()
+	var restored := _service()
+	_expect(restored.restore_snapshot(saved), "new-only v2 restores")
+	_expect(var_to_bytes(restored.create_snapshot()) == var_to_bytes(saved), "new-only exact bytes")
+	_expect(var_to_bytes(fixture()) == payload_bytes, "fixture is explicit and stable")
+	for field: String in Model.FIELDS:
+		var missing := fixture()
+		missing.erase(field)
+		_expect(Model.from_snapshot(missing) == null, "missing required field " + field)
+	for value: Variant in [null, true, "12", INF, NAN, {}, []]:
+		var wrong := fixture()
+		wrong["lust"] = value
+		_expect(Model.from_snapshot(wrong) == null, "wrong/nonfinite numeric value rejected")
+	for patch: Dictionary in [{"shield_max": 1}, {"shield_current": -1}, {"shield_current": 143}, {"rival_id": "player"}, {"subject_id": "player"}]:
+		var wrong := fixture()
+		wrong.merge(patch, true)
+		_expect(Model.from_snapshot(wrong) == null, "value/identity invariant rejected")
+	var zero := fixture()
+	for field: String in ["affection", "lust", "netorare", "shield_current", "shield_max"]:
+		zero[field] = 0
+	_expect(Model.from_snapshot(zero) != null, "explicit zero is configured")
+	var legacy := {"version": 1, "relationships": [{"relationship_id": "old", "actor_a_id": "player", "actor_b_id": "heroine_anri",
+		"metrics": {"affinity": 117, "dependence": 29, "extension": {"opaque": [3, "keep"]}}, "extra": ["raw", 2.5]}],
+		"threshold_candidates": [], "next_candidate_sequence": 1, "extension": {"version": 70}}
+	var legacy_bytes := var_to_bytes(legacy)
+	var migrated := _service()
+	_expect(migrated.restore_snapshot(legacy), "legacy aliases still usable")
+	_expect(migrated.get_relationship(&"old").get_metric(&"affection") == 100, "legacy normalization behavior retained")
+	_expect(not migrated.get_original_relationship(&"heroine_anri")[&"configured"], "legacy never configures original facts")
+	_expect(var_to_bytes(migrated.create_snapshot()[&"legacy"]) == legacy_bytes, "all raw legacy values and extensions preserved")
+	_expect(var_to_bytes(legacy) == legacy_bytes, "legacy input bytes untouched")
+	_expect(migrated.register_original_relationship(fixture()).is_success(), "mixed state registers independently")
+	var mixed := migrated.create_snapshot()
+	_expect(restored.restore_snapshot(mixed), "mixed snapshot restores")
+	_expect(var_to_bytes(restored.create_snapshot()) == var_to_bytes(mixed), "mixed exact bytes")
+	_expect(migrated.apply_value_change(&"old", &"trust", 3, 0).is_success(), "legacy changes still apply")
+	var changed: Dictionary = migrated.create_snapshot()[&"legacy"]
+	_expect(changed["relationships"][0]["metrics"]["affinity"] == 117 and changed["relationships"][0]["metrics"]["trust"] == 3, "changed metric preserves raw alias")
+	for version: Variant in [0, 3, "2", 2.0, true]:
+		var bad := mixed.duplicate(true)
+		bad[&"version"] = version
+		_rejected(restored, bad)
+	var duplicate := mixed.duplicate(true)
+	duplicate[&"original_relationships"].append(fixture())
+	_rejected(restored, duplicate)
+	for patch: Dictionary in [{"rival_id": "unknown"}, {"protagonist_id": "unknown"}, {"lust": false}, {"shield_max": 10}]:
+		var bad := mixed.duplicate(true)
+		bad[&"original_relationships"][0].merge(patch, true)
+		_rejected(restored, bad)
+	var bad_legacy := legacy.duplicate(true)
+	bad_legacy["relationships"][0]["metrics"]["affinity"] = "117"
+	_rejected(restored, bad_legacy)
+	bad_legacy = legacy.duplicate(true)
+	bad_legacy["relationships"].append(bad_legacy["relationships"][0].duplicate(true))
+	_rejected(restored, bad_legacy)
+	print("Original relationship model: %d checks, %d failures" % [_checks, _failures])
+	quit(_failures)
+
+
+func _rejected(service: RelationshipService, payload: Dictionary) -> void:
+	var before := var_to_bytes(service.create_snapshot())
+	var input := var_to_bytes(payload)
+	_expect(not service.restore_snapshot(payload), "corrupt snapshot rejected")
+	_expect(var_to_bytes(service.create_snapshot()) == before, "rejection preserves prior state")
+	_expect(var_to_bytes(payload) == input, "rejection preserves input bytes")
@@ -0,0 +1 @@
+uid://cqxwpbkgjtnsb
@@ -0,0 +1,78 @@
+extends SceneTree
+
+const Fixtures = preload("res://tests/s4/test_original_relationship_model.gd")
+var _checks := 0
+var _failures := 0
+
+
+func _initialize() -> void:
+	call_deferred("_run")
+
+
+func _expect(value: bool, message: String) -> void:
+	_checks += 1
+	if not value:
+		_failures += 1
+		push_error(message)
+
+
+func _run() -> void:
+	var clock = load("res://autoload/game_clock.gd").new()
+	var state = load("res://autoload/game_state.gd").new()
+	var runtime = load("res://autoload/simulation_runtime.gd").new()
+	clock.reset(1, 6, 0)
+	state.reset()
+	_expect(runtime.initialize(clock, state, 18001)[&"valid"], "Runtime initialized")
+	clock.set_paused(true)
+	var fixture := Fixtures.fixture()
+	_expect(not runtime.relationship_service.register_original_relationship(fixture).is_success(), "unhired subject rejected by service boundary")
+	_expect(runtime.submit_command(&"hire_staff_candidate", {&"candidate_id": &"heroine_anri"}).is_success(), "actual approved Anri hire")
+	var read_before := var_to_bytes(runtime.create_snapshot())
+	var report: Dictionary = runtime.get_staff_management_report()
+	var found := false
+	for row: Dictionary in report[&"staff"]:
+		if row[&"staff_id"] == &"heroine_anri":
+			found = true
+			_expect(not row[&"original_relationship"][&"configured"] and row[&"original_relationship"][&"affection"] == null, "actual report exposes unset")
+	_expect(found, "hired staff appears in actual report")
+	_expect(var_to_bytes(runtime.create_snapshot()) == read_before, "unset report read has no mutation")
+	var old_events: Array = runtime.domain_events.create_snapshot()["recent_events"]
+	_expect(runtime.submit_command(&"register_original_relationship", fixture).is_success(), "registered Runtime command stores explicit fixture")
+	var new_events: Array = runtime.domain_events.create_snapshot()["recent_events"]
+	_expect(new_events.size() == old_events.size() + 1 and new_events[-1][&"event_type"] == "COMMAND_COMPLETED", "only existing command completion event is emitted")
+	_expect(runtime.relationship_service.create_relationship(&"legacy", &"heroine_anri", &"player", {&"affinity": 44}).is_success(), "legacy service remains usable")
+	var saved: Dictionary = runtime.create_snapshot()
+	var input := var_to_bytes(saved)
+	_expect(runtime.restore_snapshot(saved), "mixed Runtime snapshot restores")
+	_expect(var_to_bytes(runtime.create_snapshot()) == input, "Runtime snapshot exact round trip")
+	_expect(var_to_bytes(saved) == input, "restore preserves caller bytes")
+	read_before = var_to_bytes(runtime.create_snapshot())
+	report = runtime.get_staff_management_report()
+	for row: Dictionary in report[&"staff"]:
+		if row[&"staff_id"] == &"heroine_anri":
+			var original: Dictionary = row[&"original_relationship"]
+			_expect(original[&"configured"] and original["affection"] == 142.5 and original["shield_max"] == 142.5, "restored report equals stored original values")
+			original["affection"] = -99
+	_expect(var_to_bytes(runtime.create_snapshot()) == read_before, "configured report owns projection containers")
+	for patch: Dictionary in [{"subject_id": "missing"}, {"protagonist_id": "rival_rai"}, {"rival_id": "missing"}, {"shield_current": 999}, {"lust": "bad"}]:
+		var corrupt := saved.duplicate(true)
+		corrupt[&"systems"][&"runtime"][&"relationships"][&"original_relationships"][0].merge(patch, true)
+		var bad_bytes := var_to_bytes(corrupt)
+		var service_before: Variant = runtime.relationship_service
+		_expect(not runtime.restore_snapshot(corrupt), "bad original Runtime restore rejected")
+		_expect(runtime.relationship_service == service_before, "failed restore preserves service identity")
+		_expect(var_to_bytes(runtime.create_snapshot()) == read_before, "failed restore preserves whole Runtime")
+		_expect(var_to_bytes(corrupt) == bad_bytes, "failed restore preserves input")
+	var v1 := saved.duplicate(true)
+	v1[&"systems"][&"runtime"][&"relationships"] = saved[&"systems"][&"runtime"][&"relationships"][&"legacy"].duplicate(true)
+	_expect(runtime.restore_snapshot(v1), "Runtime accepts genuine v1 relationship payload")
+	_expect(not runtime.relationship_service.get_original_relationship(&"heroine_anri")[&"configured"], "v1 restore does not map legacy affection")
+	var invalid := fixture.duplicate(true)
+	invalid["rival_id"] = "missing"
+	_expect(not runtime.relationship_service.register_original_relationship(invalid).is_success(), "restore rebind keeps identity validator")
+	_expect(runtime.relationship_service.register_original_relationship(fixture).is_success(), "restored service accepts correct identities")
+	runtime.free()
+	clock.free()
+	state.free()
+	print("Original relationship runtime: %d checks, %d failures" % [_checks, _failures])
+	quit(_failures)
@@ -0,0 +1 @@
+uid://cqxwpbkgjtnsc
@@ -1,6 +1,20 @@
 {
  "schema_version": 1,
  "suite_policies": {
+    "tests/s4/test_original_relationship_model.gd": {
+      "source_sha256": "ad509f5fb67ab91e1d1d99a08af51e4695e411b9a2541ea63ee22b1555cb0924",
+      "ordinary_cleanup_prepared": false,
+      "ordinary_control_labels": [],
+      "old_bounded_teardown": false,
+      "new_audio_QA": false
+    },
+    "tests/s4/test_original_relationship_runtime.gd": {
+      "source_sha256": "374f3d31a65d2f2b62dfef29721c8c838575b856f4fa5a0bca31c6ba4c7e09dd",
+      "ordinary_cleanup_prepared": false,
+      "ordinary_control_labels": [],
+      "old_bounded_teardown": false,
+      "new_audio_QA": false
+    },
    "tests/ui/test_selection_departure.gd": {
      "source_sha256": "3137f36f547514f25ce6ac775fa7a5141d12f83ca4b95da0be45fecfafe9d9b4",
      "ordinary_cleanup_prepared": true,
@@ -0,0 +1,565 @@
+#!/usr/bin/env python3
+"""Root-owned narrow P18 collection using the unchanged guarded phase protocol."""
+import argparse
+import hashlib
+import json
+import os
+import re
+import stat
+from pathlib import Path
+import shutil
+import sys
+import uuid
+
+sys.dont_write_bytecode = True
+import run_all_tests as shared
+
+ROSTER = [
+    'tests/s4/test_original_relationship_model.gd',
+    'tests/s4/test_original_relationship_runtime.gd',
+    'tests/s4/test_relationship_event_service.gd',
+    'tests/s4/test_runtime_relationship_events.gd',
+    'tests/s6/test_runtime_snapshot_serialization.gd',
+    'tests/s6/test_runtime_save_lifecycle.gd',
+    'tests/ui/test_staff_management.gd',
+]
+
+
+def collect(args, root, out, refs, markers, contracts, policy, contract_path, contract_sha, parse_paths):
+    source_bytes = sum(pin['bytes'] for pin in refs.values())
+    free = shutil.disk_usage(out.parent).free
+    needed = source_bytes + shared.MIN_SPACE
+    shared.require(free >= needed, 'fresh source and phase disk admission')
+    outer = shared.module('p18_owned_outer', shared.SUPPORT / 'owned_outer.py')
+    shared.require(not outer.native.helper['live_engines'](), 'another Godot owns CPU')
+    engine = shutil.which('godot')
+    shared.require(engine and Path(engine).is_file(), 'native launcher exists')
+    engine = str(Path(engine).resolve())
+    out.mkdir(parents=True, exist_ok=False)
+    stage = out / 'stage'
+    stage.mkdir()
+    (out / 'starters').mkdir()
+    (out / 'bootstrap').mkdir()
+    for name, pin in shared.read(shared.SUPPORT / 'bootstrap-scripts.json').items():
+        data = pin['text'].encode('utf-8')
+        shared.require(hashlib.sha256(data).hexdigest() == pin['sha256'], 'unchanged external bootstrap bytes')
+        (out / 'bootstrap' / name).write_bytes(data)
+    protected = shared.default_player(root)
+    expected = {name: {'bytes': pin['bytes'], 'sha256': pin['sha256']} for name, pin in refs.items()}
+    selected = {'root_before': refs, 'map': {name: pin['sha256'] for name, pin in refs.items()}, 'timeout': args.timeout}
+    for name, pin in refs.items():
+        target = stage / name
+        target.parent.mkdir(parents=True, exist_ok=True)
+        shared.copy_source(Path(pin['path']), target)
+    shared.require(shared.inventory(stage, stage=True) == expected, 'complete private source copy')
+    public = (stage / 'project.godot').read_bytes()
+    shared.write(out / 'parse-paths.json', parse_paths)
+    run_id = uuid.uuid4().hex
+    shared.write(out / 'runner-input.json', dict(protocol='guarded-p18-v2', run_id=run_id,
+        owner_runner_pid=os.getpid(), project_root=str(root), stage=str(stage), roster=ROSTER,
+        selected_source_map=selected['map'], marker_contract_sha256=contract_sha,
+        runner_sha256=shared.sha(Path(__file__)), shared_runner_sha256=shared.sha(shared.HERE / 'run_all_tests.py'),
+        marker_module_sha256=shared.sha(shared.HERE / 'strict_test_markers.py'),
+        engine=engine, engine_sha256=shared.sha(engine), default_player_before=protected,
+        formal_acceptance=False, original_unit_complete=False))
+    shared.write(out / 'source-start.json', refs)
+    diagnostics = shared.module('p18_diagnostics', shared.SUPPORT / 'diagnostic_gate.py')
+    owners = shared.module('p18_owners', shared.SUPPORT / 'ordinary_proof_gate.py')
+    audio = shared.module('p18_audio', shared.SUPPORT / 'audio_evidence_gate.py')
+    phases, rows, previous = [], [], {}
+    error = None
+    try:
+        for phase, test in [('import', None), ('parse', None)] + [(str(i).zfill(3), name) for i, name in enumerate(ROSTER)]:
+            shared.require(shared.sha(contract_path) == contract_sha, 'marker contract unchanged')
+            row = shared.execute_phase(engine, stage, out, phase, test, selected, expected, previous,
+                policy, contracts, parse_paths, public, protected, root, outer, markers, diagnostics, owners, audio)
+            archive_profiles(out, row)
+            phases.append(row)
+            if test:
+                row.update(sequence=len(rows), godot=engine)
+                rows.append(row)
+                (out / 'all-tests.json').write_text(json.dumps(rows, ensure_ascii=False, indent=2) + '\n')
+                print(('PASS ' if row['passed'] else 'FAIL ') + test, flush=True)
+            shared.require(row['passed'], 'first failed phase stops without retry: ' + phase)
+    except BaseException as caught:
+        error = type(caught).__name__ + ': ' + str(caught)
+    finally:
+        cleanup, cleanup_errors = outer.finish_captured(outer.OWNED)
+    guard_errors = []
+    try:
+        shared.require(shared.source_refs(root) == refs, 'whole source unchanged')
+        shared.require(shared.sha(contract_path) == contract_sha, 'marker contract unchanged at end')
+        shared.require(shared.default_player(root) == protected, 'default profile untouched')
+        shared.require(shared.inventory(stage, stage=True) == dict(expected, **previous), 'whole stage exact')
+    except BaseException as caught:
+        guard_errors.append(type(caught).__name__ + ': ' + str(caught))
+    ended = bool(outer.OWNED) and all(row['engine_ended'] is True for row in cleanup)
+    passed = error is None and not cleanup_errors and not guard_errors and ended and len(phases) == len(ROSTER) + 2 and all(row['passed'] for row in phases)
+    context = shared.totals(rows, ROSTER)
+    shared.write(out / 'runner-ended.json', dict(context, protocol='guarded-p18-v2', run_id=run_id,
+        owner_runner_pid=os.getpid(), passed=passed, engine_ended=ended,
+        actual_captured_PIDs=[process.pid for process in outer.OWNED], final_owned_cleanup=cleanup,
+        cleanup_errors=cleanup_errors, guard_errors=guard_errors, error=error, phases=phases,
+        all_tests_sha256=shared.sha(out / 'all-tests.json') if (out / 'all-tests.json').exists() else None,
+        default_player_after=shared.default_player(root), formal_acceptance=False,
+        original_unit_complete=False, independent_review='pending', native_Windows='pending'))
+    if passed:
+        seal(out, refs, engine, contract_sha)
+        # Root also exercises precisely the verifier that ordinary Runner uses.
+        verify(out, refs, markers, contracts, policy, contract_sha, parse_paths)
+    print(json.dumps(dict(context, passed=passed, error=error, cleanup_errors=cleanup_errors, guard_errors=guard_errors)), flush=True)
+    return 0 if passed else 1
+
+
+
+# Receipt file names are always relative; absolute paths in native receipts are
+# historical identity strings only and are never opened by the verifier.
+def require(ok, reason):
+    shared.require(ok, reason)
+
+
+def digest(value):
+    return hashlib.sha256(json.dumps(value, sort_keys=True, separators=(',', ':'),
+                                     ensure_ascii=False).encode()).hexdigest()
+
+
+def content_map(refs):
+    return {name: {'bytes': pin['bytes'], 'sha256': pin['sha256']}
+            for name, pin in refs.items()}
+
+
+def plain_path(path):
+    path = Path(path)
+    require('..' not in path.parts, 'parent traversal refused')
+    absolute = Path(os.path.abspath(path))
+    for part in [absolute, *absolute.parents]:
+        require(not part.is_symlink(), 'symlink path refused: ' + str(part))
+    return absolute
+
+
+def confined(out, name):
+    require(type(name) is str and name and '\\' not in name, 'ordinary relative evidence name')
+    path = Path(name)
+    require(not path.is_absolute() and '..' not in path.parts
+            and path.as_posix() == name and name != '.', 'evidence path escape or alias')
+    result = plain_path(out / path)
+    require(result.is_relative_to(out), 'evidence confined to output')
+    return result
+
+
+def inventory(out):
+    result = {}
+    require(out.is_dir(), 'output directory required')
+    for directory, dirs, files in os.walk(out, followlinks=False):
+        for name in dirs + files:
+            p = Path(directory) / name
+            mode = p.lstat().st_mode
+            require(stat.S_ISREG(mode) or stat.S_ISDIR(mode), 'nonordinary evidence refused')
+            if stat.S_ISREG(mode):
+                require(p.stat().st_nlink == 1, 'hardlinked evidence refused')
+                result[p.relative_to(out).as_posix()] = {
+                    'bytes': p.stat().st_size, 'sha256': shared.sha(p)}
+    return result
+
+
+def unique_object(pairs):
+    result = {}
+    for key, value in pairs:
+        require(key not in result, 'duplicate JSON key')
+        result[key] = value
+    return result
+
+
+def read_json(path):
+    return json.loads(path.read_text(encoding='utf-8'), object_pairs_hook=unique_object,
+                      parse_constant=lambda token: require(False, 'nonfinite JSON ' + token))
+
+
+def archive_profiles(out, row):
+    for label in ('startup', 'runtime'):
+        value = row.get('whole_' + label + '_profile_after')
+        if value is None:
+            continue
+        dest = out / 'profiles' / row['phase'] / label
+        dest.mkdir(parents=True, exist_ok=False)
+        source = plain_path(value['path'])
+        require(shared.inventory(source) == value['files'], 'whole owned profile before archive')
+        for name in value['files']:
+            target = confined(out, str((dest / name).relative_to(out)))
+            target.parent.mkdir(parents=True, exist_ok=True)
+            shutil.copyfile(source / name, target)
+        require(shared.inventory(dest) == value['files'] == shared.inventory(source),
+                'whole owned profile archive exact')
+
+
+def seal(out, refs, engine, contract_sha):
+    # Last file written: an interrupted collection has no complete receipt.
+    shutil.copyfile(engine, out / 'engine.bin')
+    require(shared.sha(out / 'engine.bin') == shared.sha(engine), 'engine archive exact')
+    source = content_map(refs)
+    shared.write(out / 'receipt.json', {
+        'schema': 'guarded-p18-v2', 'source_map': source,
+        'source_map_sha256': digest(source),
+        'project_settings_sha256': source['project.godot']['sha256'],
+        'marker_contract_sha256': contract_sha,
+        'engine_sha256': shared.sha(engine),
+        'files': inventory(out),
+    })
+
+
+def cleanup_gate(value):
+    require(value['owned_child_created'] is True and value['engine_ended'] is True
+            and value['actual_process_exit_code'] == 0 and value['errors'] == [],
+            'successful actual owned cleanup')
+    attempts = value['attempts']
+    require(1 <= len(attempts) <= 3, 'bounded cleanup attempts')
+    for index, row in enumerate(attempts):
+        require(row['attempt'] == index + 1 and row['errors'] == []
+                and row['wait_timeout_seconds'] == 5 and row['wait_completed'] is True
+                and row['wait_returned_code'] == 0 and row['poll_after'] == 0,
+                'complete bounded owned wait')
+
+
+def outer_cleanup(rows, pids):
+    require([r['pid'] for r in rows] == pids, 'exact captured cleanup PID order')
+    for row in rows:
+        require(row['engine_ended'] is True and row['outer_cleanup_errors'] == []
+                and row['foreign_process_or_group_signals'] == 0
+                and row['outer_maximum_helper_invocations'] == 3
+                and row['helper_maximum_waits'] == 3 and row['per_wait_timeout_seconds'] == 5,
+                'unchanged outer cleanup contract')
+        cleanup_gate(row['cleanup'])
+
+
+def verify(out, refs, markers, contracts, policy, contract_sha, parse_paths):
+    receipt_path = confined(out, 'receipt.json')
+    require(receipt_path.is_file(), 'regular final receipt required')
+    manifest = read_json(receipt_path)
+    require(manifest['schema'] == 'guarded-p18-v2', 'current receipt schema required')
+    files = manifest['files']
+    require(type(files) is dict and files, 'complete raw manifest')
+    for name, pin in files.items():
+        p = confined(out, name)
+        require(p.is_file() and set(pin) == {'bytes', 'sha256'}
+                and type(pin['bytes']) is int and pin['bytes'] >= 0
+                and re.fullmatch('[0-9a-f]{64}', pin['sha256']) is not None,
+                'ordinary artifact pin')
+    actual = inventory(out)
+    receipt_pin = actual.pop('receipt.json')
+    require(actual == files, 'complete raw file set and SHA-256 equality')
+    source = content_map(refs)
+    require(manifest['source_map'] == source and manifest['source_map_sha256'] == digest(source),
+            'current whole source content map independent of checkout path')
+    require(manifest['project_settings_sha256'] == source['project.godot']['sha256']
+            and manifest['marker_contract_sha256'] == contract_sha, 'current project/marker pins')
+
+    def read(name):
+        require(name in files, 'required raw file missing: ' + name)
+        return read_json(confined(out, name))
+
+    def text(name):
+        require(name in files, 'required raw transport missing: ' + name)
+        return confined(out, name).read_text(encoding='utf-8')
+
+    start, end = read('runner-input.json'), read('runner-ended.json')
+    require(start['protocol'] == end['protocol'] == 'guarded-p18-v2'
+            and start['run_id'] == end['run_id']
+            and re.fullmatch('[0-9a-f]{32}', start['run_id']) is not None,
+            'same current run')
+    require(type(start['owner_runner_pid']) is int and start['owner_runner_pid'] > 0
+            and start['owner_runner_pid'] == end['owner_runner_pid'], 'same collector owner')
+    require(start['roster'] == ROSTER and len(set(ROSTER)) == 7, 'exact seven unique tests')
+    require(start['selected_source_map'] == {n: p['sha256'] for n, p in source.items()}
+            and content_map(read('source-start.json')) == source, 'whole selected source pins')
+    for field, name in [('runner_sha256', 'tools/run_p18_relationship_tests.py'),
+                        ('shared_runner_sha256', 'tools/run_all_tests.py'),
+                        ('marker_module_sha256', 'tools/strict_test_markers.py')]:
+        require(start[field] == source[name]['sha256'], 'current collector/shared/marker pin')
+    require(start['marker_contract_sha256'] == contract_sha, 'marker contract pin')
+    # Resolve only the locally configured launcher, never the receipt's engine path.
+    engine = shutil.which('godot')
+    require(engine and shared.sha(engine) == start['engine_sha256']
+            == manifest['engine_sha256'] == files['engine.bin']['sha256'],
+            'current native engine and retained bytes pinned')
+    require(read('parse-paths.json') == parse_paths and len(parse_paths) == 308,
+            'all 308 exact source parse paths')
+    require(end['passed'] is True and end['engine_ended'] is True and end['error'] is None
+            and end['cleanup_errors'] == [] and end['guard_errors'] == [],
+            'finished successful collection without guard/cleanup error')
+    for receipt in (start, end):
+        require(receipt['formal_acceptance'] is False and receipt['original_unit_complete'] is False,
+                'backend evidence never completes original unit')
+    before = start['default_player_before']
+    require(before == end['default_player_after'] and before['logs_and_locks_included'] is True
+            and type(before['existed']) is bool and type(before['files']) is dict,
+            'complete default player before/after equality')
+    for name, pin in before['files'].items():
+        confined(out, name)  # Validate the inventory name; never open the player.
+        require(set(pin) == {'bytes', 'sha256'} and type(pin['bytes']) is int
+                and pin['bytes'] >= 0 and re.fullmatch('[0-9a-f]{64}', pin['sha256']),
+                'whole default player file pin')
+    require(before['existed'] or before['files'] == {}, 'absent player has no files')
+
+    native = shared.module('p18_verify_native', shared.SUPPORT / 'owned_diagnostic_process.py')
+    diagnostics = shared.module('p18_verify_diagnostics', shared.SUPPORT / 'diagnostic_gate.py')
+    owners = shared.module('p18_verify_owners', shared.SUPPORT / 'ordinary_proof_gate.py')
+    # Helpers are loaded for their pure gates only. No run/probe/cleanup is called.
+    origin = Path(start['stage']).parent
+    require(Path(start['stage']) == origin / 'stage' and origin.is_absolute()
+            and '..' not in origin.parts, 'original output identity')
+
+    def relocated(value):
+        if isinstance(value, dict):
+            return {relocated(k): relocated(v) for k, v in value.items()}
+        if isinstance(value, list):
+            return [relocated(v) for v in value]
+        if isinstance(value, str) and value.startswith(str(origin) + '/'):
+            return str(confined(out, value[len(str(origin)) + 1:]))
+        return value
+
+    def proof_read(path):
+        path = plain_path(path)
+        require(path.is_relative_to(out), 'proof path stays in output')
+        return relocated(read(path.relative_to(out).as_posix()))
+
+    owners.read = proof_read
+    phases = end['phases']
+    require(len(phases) == 9, 'exact nine phases')
+    tests = read('all-tests.json')
+    require(len(tests) == 7 and end['all_tests_sha256'] == files['all-tests.json']['sha256'],
+            'complete test rows')
+    pids = []
+    for index, (phase, test) in enumerate([('import', None), ('parse', None)]
+                                         + [(str(i).zfill(3), n) for i, n in enumerate(ROSTER)]):
+        row = read(phase + '-receipt.json')
+        expected_row = dict(row)
+        if test:
+            expected_row.update(sequence=index - 2, godot=start['engine'])
+            require(tests[index - 2] == expected_row, 'test row matches raw phase receipt')
+        require(phases[index] == expected_row and row['phase'] == phase and row['test'] == test
+                and row['passed'] is True and row['failed'] is False
+                and row['validation_error'] is None and not row.get('guard_error')
+                and row['default_player_entire_profile_unchanged'] is True,
+                'exact successful phase')
+        pid = row['actual_pid']
+        require(type(pid) is int and pid > 0 and pid not in pids, 'nine distinct actual PIDs')
+        pids.append(pid)
+        process = read(phase + '/process.json')
+        require(process == row['native_process'] and process['pid'] == pid
+                and process['owned_child_process_helper_sha256'] == native.HELPER_SHA
+                == source['tools/regression/p09_owned_engine_process.py']['sha256'],
+                'actual phase/process/helper agreement')
+        stdout, stderr, logger = (text(phase + '/' + n) for n in
+                                  ('stdout.log', 'stderr.log', 'engine-native.log'))
+        raw = stdout + stderr
+        require(text(row['log']) == raw and row['log_sha256'] == files[row['log']]['sha256'],
+                'literal complete raw stream')
+        require(process['stdout_sha256'] == files[phase + '/stdout.log']['sha256']
+                and process['stderr_sha256'] == files[phase + '/stderr.log']['sha256'],
+                'process transport SHA')
+        require(row['raw_native_log'] == dict(files[phase + '/engine-native.log'],
+                    path=str(origin / phase / 'engine-native.log')), 'native logger pin')
+        review = diagnostics.review_streams(native, {
+            'stdout': stdout, 'stderr': stderr, 'native_file': logger}, test)
+        require(row['finite_original_diagnostic_review'] == review
+                and diagnostics.diagnostic_result_gate(process, review)
+                and shared.process_gate(process, review['allowed_e31_error_lines']),
+                'strict diagnostics/process gates')
+        require(native.native_diagnostics(stdout, stderr, row['command'])
+                == process['strict_native_diagnostics'], 'raw banner/diagnostics recomputed')
+        command = [start['engine'], '--headless', '--path', start['stage']]
+        if phase == 'import':
+            command += ['--editor', '--import', '--quit', '--verbose']
+        else:
+            script = ('bootstrap/parse_full_dependencies.gd' if phase == 'parse'
+                      else 'starters/' + phase + '.gd')
+            command += ['--script', str(origin / script), '--verbose']
+            require(row['starter_sha256'] == files[script]['sha256'], 'exact starter pin')
+            if test:
+                expected_starter = ('extends ' + json.dumps('res://' + test) + '\nconst Guard := preload('
+                    + json.dumps(str(origin / 'bootstrap/profile_guard.gd'))
+                    + ')\nfunc _initialize() -> void:\n\tif not Guard.activate():\n\t\tquit(97)\n\t\treturn\n\tsuper._initialize()\n')
+                require(text(script) == expected_starter, 'unchanged guarded starter bytes')
+        command += ['--log-file', str(origin / phase / 'engine-native.log')]
+        require(row['command'] == process['argv'] == command, 'exact native argv/logger')
+        for filename, field, event in [('started.json', 'actual_start_binding', 'ENGINE_STARTED'),
+                                        ('ended.json', 'actual_end_binding', 'ENGINE_ENDED')]:
+            binding = read(phase + '/' + filename)
+            require(binding == process[field] and binding['event'] == event
+                    and binding['actual_pid'] == binding['pid'] == pid
+                    and binding['owner_pid'] == start['owner_runner_pid']
+                    and binding['command'] == binding['argv'] == command, 'actual START/END ownership')
+        binding = process['actual_start_binding']
+        identity = binding['current_process_identity']
+        if identity is None:
+            require(binding['tracked_child_ended_before_initial_probe'] is True, 'early ended tracked child')
+        else:
+            require(binding['live_identity_exact'] is True and identity == {
+                'pid': pid, 'ppid': start['owner_runner_pid'], 'pgid': pid, 'args': ' '.join(command)},
+                'recorded live child PID/PPID/PGID/argv')
+        finish = process['actual_end_binding']
+        require(finish['engine_ended'] is True and finish['timed_out'] is False
+                and finish['lifecycle_error'] is None and finish['exit_code'] == 0
+                and finish['actual_process_exit_code'] == 0
+                and finish['start_receipt_written'] is True
+                and finish['monotonic_ns'] >= binding['monotonic_ns'], 'complete native END')
+        cleanup = read(phase + '/adapter-owned-cleanup.json')
+        require(cleanup == process['adapter_owned_cleanup'], 'raw adapter cleanup')
+        cleanup_gate(cleanup)
+        capture = row['outer_actual_capture']
+        require(read(phase + '/outer-owned-finally.json') == {
+            k: v for k, v in capture.items()
+            if k not in ('outer_receipt_written', 'outer_receipt_error', 'passed')},
+            'whole raw outer receipt')
+        require(capture['actual_captured_pids'] == [pid] and capture['passed'] is True
+                and capture['all_captured_ended'] is True and capture['adapter_exception'] is None
+                and capture['outer_cleanup_errors'] == [] and capture['outer_receipt_error'] is None
+                and capture['outer_receipt_written'] is True
+                and capture['all_cleanup_before_outer_receipt'] is True
+                and capture['foreign_process_or_group_signals'] == 0
+                and row['engine_ended'] is True and row['exit_code'] == 0, 'owned outer capture')
+        outer_cleanup(capture['cleanup'], [pid])
+        startup = read(phase + '-startup-profile-before.json')
+        require(startup == {'path': row['whole_startup_profile_after']['path'], 'existed': False,
+                            'files': {}, 'before_native_spawn': True}, 'fresh startup profile')
+        require(row['whole_startup_profile_after']['fresh_before_engine'] is True,
+                'startup fresh before engine')
+        name = row['profile_startup_name']
+        require(re.fullmatch('TheTree-PCK-tests-[0-9a-f]{32}-standard-startup-' + phase, name)
+                and Path(startup['path']).name == name and row['private_project_fields'] == 2
+                and row['private_project_sha256'] == hashlib.sha256(shared.private_project(
+                    (shared.HERE.parent / 'project.godot').read_bytes(), name)).hexdigest(),
+                'exact two-field startup isolation')
+        for label in ('startup', 'runtime'):
+            if label == 'runtime' and phase == 'import':
+                continue
+            whole = row['whole_' + label + '_profile_after']
+            archive = confined(out, 'profiles/' + phase + '/' + label)
+            require(archive.is_dir() and shared.inventory(archive)
+                    == whole['files'], 'complete retained private profile')
+        if phase != 'import':
+            guard = read(phase + '-profile.json')
+            runtime = Path(row['whole_runtime_profile_after']['path'])
+            name = guard['custom_user_dir_name']
+            require(re.fullmatch('TheTree-PCK-tests-[0-9a-f]{32}-standard-runtime-' + phase, name)
+                    and runtime.name == name and guard['verified'] is True
+                    and guard['conditions'] == [True] * 5 and guard['conditions_checked'] == 5
+                    and guard['fresh_before_parent_initialize'] is True
+                    and guard['profile_writes_before_guard'] == 0
+                    and guard['actual_user_data_dir'] == guard['expected_user_data_dir'] == str(runtime)
+                    and guard['globalized_probe'] == str(runtime / 'guard-probe')
+                    and guard['project_settings_persisted'] is False, 'all unchanged Guard conditions')
+            require(row['actual_private_profile'] == {
+                'report': guard, 'report_sha256': files[phase + '-profile.json']['sha256'],
+                'whole_files': row['whole_runtime_profile_after']['files']}, 'whole raw Guard report')
+            require(row['controlled_environment'] == {
+                'THE_TREE_PACK_PROFILE_NAME': name, 'THE_TREE_PACK_PROFILE_EXPECTED': str(runtime),
+                'THE_TREE_PACK_PROFILE_REPORT': str(origin / (phase + '-profile.json')),
+                'THE_TREE_FULL_PARSE_PATHS': str(origin / 'parse-paths.json'),
+                **({'THE_TREE_AUDIO_TEARDOWN_PROOF_DIR': str(origin / (phase + '-teardown/owned-audio')),
+                    'THE_TREE_AUDIO_FIXTURE_CONTROL_PROOF': str(origin / (phase + '-teardown/control.json'))}
+                   if test and policy['suite_policies'].get(test, {}).get('ordinary_cleanup_prepared') else {})},
+                'exact controlled Guard/proof environment')
+        else:
+            require(row['controlled_environment'] == {}, 'fresh import environment')
+        if phase == 'parse':
+            require(re.findall(r'(?m)^FULL_DEPENDENCY_PARSE checks=([0-9]+) failures=([0-9]+)\n', raw)
+                    == [('308', '0')] and row['actual_parse_checks'] == 308, 'unique all-script parse marker')
+        if test:
+            parsed = markers.parse_raw(test, raw, contracts, source[test]['sha256'])
+            require(parsed['passed'] and row['completion'] == parsed
+                    and row['reported_checks'] == parsed['checks']
+                    and row['reported_failures'] == parsed['failures']
+                    and row['completion_marker'] == parsed['marker'] and row['collector_errors'] == [],
+                    'source-pinned raw completion marker')
+            require(row['source_sha256'] == row['source_sha256_end'] == source[test]['sha256'],
+                    'exact test source before/after')
+            p = shared.phase_policy(test, Path(refs[test]['path']), policy['suite_policies'])
+            require(row['policy'] == p, 'current exact suite policy')
+            if p['ordinary_cleanup_prepared']:
+                proof = owners.ordinary_gate(confined(out, phase + '-teardown'), pid, out,
+                                             p['ordinary_control_labels'])
+                require(proof == relocated(row['ordinary_owner_pairs']), 'full ordinary/audio ownership proof')
+        require(row['generated_reports'] == {}, 'fixed narrow roster has no generated source reports')
+    require(end['actual_captured_PIDs'] == pids, 'all nine captured engines')
+    outer_cleanup(end['final_owned_cleanup'], pids)
+    require(all(end[k] == v for k, v in shared.totals(tests, ROSTER).items()), 'recomputed exact totals')
+    require(shared.inventory(confined(out, 'stage'), stage=True) == source, 'entire retained source/settings exact')
+    for name, pin in shared.read(shared.SUPPORT / 'bootstrap-scripts.json').items():
+        require(text('bootstrap/' + name).encode() == pin['text'].encode()
+                and files['bootstrap/' + name]['sha256'] == pin['sha256'], 'unchanged bootstrap/Guard pins')
+    require(inventory(out) == dict(files, **{'receipt.json': receipt_pin}),
+            'whole raw evidence unchanged during verification')
+    require(content_map(shared.source_refs(shared.HERE.parent)) == source,
+            'whole current source unchanged during verification')
+    print(json.dumps({'verified': True, 'actual_suites': 7, 'parse_checks': 308,
+                      'actual_checks': end['actual_all_roster_checks'], 'engines_started': 0,
+                      'formal_acceptance': False, 'original_unit_complete': False}))
+    return 0
+
+
+def main(argv=None):
+    argv = list(sys.argv[1:] if argv is None else argv)
+    # No argparse abbreviation, repeated flags, = aliases or positional tokens.
+    parser = argparse.ArgumentParser(description=__doc__, allow_abbrev=False)
+    parser.add_argument('--output', required=True)
+    modes = parser.add_mutually_exclusive_group()
+    modes.add_argument('--collect', action='store_true', help='Root only; fresh native collection')
+    modes.add_argument('--prepare-only', action='store_true')
+    seen = set()
+    i = 0
+    while i < len(argv):
+        flag = argv[i]
+        require(flag in ('--output', '--collect', '--prepare-only', '--help')
+                and flag not in seen, 'unknown, duplicate or malformed flag')
+        seen.add(flag)
+        if flag == '--output':
+            i += 1
+            require(i < len(argv) and argv[i] and not argv[i].startswith('--'), 'output value required')
+        i += 1
+    args = parser.parse_args(argv)
+    args.timeout = 1200
+    root = shared.HERE.parent
+    out = plain_path(args.output)
+    refs = shared.source_refs(root)
+    require(set(ROSTER).issubset(shared.roster(root)), 'normal discovery includes narrow roster')
+    markers = shared.module('p18_exact_markers', shared.HERE / 'strict_test_markers.py')
+    contract_path = root / 'docs/plans/original-completion-2026-10-02/execution/completion_marker_contracts.json'
+    contract_sha = shared.sha(contract_path)
+    contracts = markers.load_contracts(contract_path)
+    require(all(name in contracts for name in ROSTER), 'complete marker roster')
+    policy = shared.read(shared.SUPPORT / 'suite-policy.json')
+    shared.policy_coverage(ROSTER, refs, policy)
+    for test in ROSTER:
+        shared.phase_policy(test, Path(refs[test]['path']), policy['suite_policies'])
+    for test in ROSTER[:2]:
+        require(contracts[test]['source_sha256_at_schema_audit'] == refs[test]['sha256'],
+                'new strict source-hashed marker')
+    parse_paths = ['res://' + name for name in sorted(refs) if name.endswith('.gd')]
+    require(len(parse_paths) == 308, 'exact expected parse count')
+    if args.prepare_only:
+        ancestor = out.parent
+        while not ancestor.exists():
+            ancestor = ancestor.parent
+        free = shutil.disk_usage(ancestor).free
+        size = sum(p['bytes'] for p in refs.values())
+        print(json.dumps({'roster': ROSTER, 'source_files': len(refs), 'source_bytes': size,
+            'free_bytes': free, 'conservative_required_bytes': size + shared.MIN_SPACE,
+            'capacity_available': free >= size + shared.MIN_SPACE, 'parse_paths': 308,
+            'future_native_phases': 9, 'actual_checks': None, 'engines': 0, 'stages': 0,
+            'formal_acceptance': False}))
+        return 0
+    if args.collect:
+        require(not out.exists() and out.parent.is_dir(), 'fresh output with existing parent required')
+        require(not out.is_relative_to(root), 'private collection outside source tree')
+        return collect(args, root, out, refs, markers, contracts, policy,
+                       contract_path, contract_sha, parse_paths)
+    return verify(out, refs, markers, contracts, policy, contract_sha, parse_paths)
+
+
+if __name__ == '__main__':
+    try:
+        raise SystemExit(main())
+    except (AssertionError, OSError, ValueError, KeyError, TypeError) as error:
+        print(type(error).__name__ + ': ' + str(error), file=sys.stderr)
+        raise SystemExit(1)
Author	SHA1	Message	Date
Agent Control Runner	0084760ee0	P18-01-CODE: 原本関係モデル・旧値保全・Runtime保存と読取経路	2026-10-13 14:40:02 +09:00
Agent Control Runner	f76ad96990	P18-01-CODE: 原本関係モデル・旧値保全・Runtime保存と読取経路	2026-10-13 14:25:06 +09:00
Takeshi	d2a1f80a61	Define P18 original relationship preservation code contract	2026-10-13 14:02:05 +09:00
Takeshi	70e76cd073	docs: correct original NTR onset and audit relationship prerequisites	2026-10-13 13:47:57 +09:00
Takeshi	88b9fe030b	docs: store checked zero-context UI entry proposal	2026-10-13 13:30:25 +09:00
Takeshi	0a8d6025cd	docs: pin actual P24-02 IME and cross-process label evidence	2026-10-13 13:28:38 +09:00
Takeshi	82f4ff69e3	docs: pin submitted P24-02 candidate and passing affected tests	2026-10-13 12:56:25 +09:00
Takeshi	6ea80613f8	docs: record P24-02 parse success and local observer failure	2026-10-13 12:50:23 +09:00
Takeshi	dee23f2710	docs: retain full player guard outside review packet with verified compression	2026-10-13 12:40:53 +09:00
Takeshi	71390fd7f6	docs: record P24-02 GUI repair and guarded native preflight	2026-10-13 12:33:49 +09:00
Takeshi	a791117e98	docs: pin model routing and current P24-02 acceptance gaps	2026-10-13 11:52:48 +09:00
Takeshi	020d6b014e	Record P24-02 preserved work and concrete Runner execution repair	2026-10-13 10:59:18 +09:00
Takeshi	a7a68be583	docs: record active single Antigravity P24-02 implementation	2026-10-13 09:47:57 +09:00